Hacker News new | past | comments | ask | show | jobs | submit | edent's comments login

Primates first appeared around 65 million years ago.

The earliest dinosaurs arose over 200 million years ago.

Therefore, it is possible that by about 130 million years ago, the dinosaurs would have reached our level of development. They could have detected the oncoming asteroid, built space ships, and left this planet. All while mammals were barely getting started.

This extremely likely scientific theory is explored in Hibbett, MJ's "Dinosaur Planet"

http://www.mjhibbett.co.uk/dinosaurplanet/nindex.php


This is also pretty heavily explored in Voyager's Distant Origin episode.

https://en.wikipedia.org/wiki/Distant_Origin


And in Leonard Richardson's somewhat silly "Let Us Now Praise Awesome Dinosaurs" http://strangehorizons.com/fiction/let-us-now-praise-awesome...

And in Cixin Liu’s short story "Devourer" they even come back to earth for a last visit...

Of course, this has a back-story/history, see "Of Ants and Dinosaurs".


As a wise man once said, "Extraordinary claims require extraordinary evidence"...

I think this is all the evidence you will need https://mjhibbett.bandcamp.com/track/the-theory-of-a-dinosau...

The Cretaceous-Tertiary Extinction event occurred, as far as we know,

Sixty five point five million years ago

But even the interval of error in that estimated date

Is longer than it took us humans to evolve from apes

And if in that time we mammals managed to conquer space

I believe the Dinosaurs could have done the same


Perhaps, but one big problem is the rocket equation: dinosaurs are generally very large compared to humans, so they'd need huge spaceships to carry them, and as we know, the rocket equation means you need far more fuel to lift an amount of mass to orbit. Perhaps only some smaller species of dinosaur evolved into an intelligent civilization.

> extremely likely

I think you misspelled "unlikely"...?


Er? Do you really think professional scientists would write an epic prog-rock musical about the dinosaur invasion of Norwich if they weren't extremely certain of their hypothesis?

There is also a cave painting somewhere. Frankly an irrefutable set of evidence.

Selling to extremely large companies is difficult.

Safety regulations mean that car companies want to deal with other big companies, or those with big enough insurance.

Buyers don't buy based on infotainment.

What makes you think it "sucks" for the majority of buyers? Have you spoken to normal drivers to see if it is something that genuinely bothers them? If so, how much more would they be willing to pay for a better infotainment system?

Finally, who actually buys cars? Most of them are fleet - not individuals.


> who actually buys cars? Most of them are fleet - not individuals.

What do you mean here? The total fleet share of new vehicle sales in 2023 was only 17.5%.



No. Incredibly confusing assumption of US hegemony.

Looks like it should be about AUD$15,000.


It looks like they used a value in AUD once in the article, with BRL, pesos and yuan being mentioned more times...

As an Australian, this article is less than useless to me. If they are reporting on the Australian market and giving prices in dollars, then they should be saying what currency they are referring to.

Yep. There was a time when USD and AUD were pretty similar so it didn't matter so much, but we're currently at $1.52 AUD to the $1 USD.

This is a brilliant idea! Love the "take a photo" at the start. I assume (if you answer) it will go through WebRTC?

Might be nice to play a "ding dong" sound in the browser?


Currently it isn't doing WebRTC, but that is the idea. Although I'm not sure if I want to add audio and/or video?


Sorry, that's utter bobbins.

QR codes can contain a limited set of data. There's no possibility of a buffer-overflow or malicious program.

Every QR reader I've seen shows you the destination before taking you there.

It might be a scam website - but that's no different to seeing an poster and manually typing in the address.

Yes, QR codes can contain an auto-generated email or premium SMS. But they won't send automatically. The user remains in control.


> It might be a scam website - but that's no different to seeing an poster and manually typing in the address.

Disagree, because:

* QR codes are opaque to humans. You can't visually tell if one is legit or not.

* QR codes often use URL shorteners, so that the URL contained is just https://exam.ple/4pTF6x4M9 is not unusual.

Someone can replace a QR code with a sticker overlay and link to a phishing site. Replacing a URL on a poster is also possible, of course, but harder to make look convincing in the first place and significantly simpler to detect.


* Printed URls are also opaque. How do you know if the correct website is whatever .com or whatever .org?

* Printed URls often contain shortened links.

I'd argue that most QR sticker overlays are also pretty inept. See a sample at https://shkspr.mobi/blog/2024/07/qr-code-hijacking-attempts-...


> QR codes can contain a limited set of data. There's no possibility of a buffer-overflow or malicious program.

Source?



Mindustry. It is open source and allows your to build logic gates.

Works on mobile, desktop, Linux, etc.


And according to this article [0] (from the mindustry article on Wikipedia), it was a hit on prison-issued android tablets until they banned it.

[0]: https://prisonjournalismproject.org/2024/03/31/popular-video...


Yes. It's a W3C specification.

That said, the original 2001 version of the spec includes scripting https://www.w3.org/TR/2001/REC-SVG-20010904/REC-SVG-20010904... - so some decisions may be lost to time.


My understanding was one of the goals for SVG+JS was an intentional need/desire to replace SMIL: https://en.wikipedia.org/wiki/Synchronized_Multimedia_Integr...

"Lost" standards can be fun rabbit holes sometimes.


> sell these on the black market.

How? I always see this mentioned but it seem impractical to me. I've discovered bugs which have paid out a few thousand dollars - big corporates have well publicised schemes, but I've no idea how I would go about selling it to a criminal.

Even if I did know where to find them - how would I trust them? Can I tell they're not really the police doing a sting?

If they paid me, how would I explain my new wealth to the tax authorities?

Once the criminal knows they've paid me, what's to stop them blackmailing me? Or otherwise threatening me?

Oh, and I won't be able to publish a kudos-raising blog post about it.

How much would a criminal have to pay me to take on that level of risk?

Should Google pay out more for this? Probably. Is the average security researcher really going to take the risk of dealing with criminals in the hope that they pay a bit more? Unlikely.


> How?

Huh... First result in google for "selling exploits" shows it's not only criminals who are buying exploits:

https://zerodium.com/program.html

(up to $500K for Chrome RCE, but probably not for this since requires extension install)

Another result is the Wikipedia article, which also talks about these gray markets:

"Gray markets buyers include clients from the private sector, governments and brokers who resell vulnerabilities."


Zerodium sells to government intelligence agencies, so I guess it depends on your definition of “criminals.”


Sell it to governments. Biggest good guys bad guys.


I think maintaining anonimity is the key. Ensuring getting paid is the next thing. I'm not sure how you can achieve this in practice.


I can confirm that only my Slack account has been deactivated.

Although, that said, I anticipate an eventual purge of all WP related accounts for users involved in Lèse-majesté.

Regarding usage, I wouldn't expect to see an immediate decline. It takes a long time to plan a migration, as users of ReiserFS found out.


Yes. I have the Z1 Ring.

Getting secure tokens (like payment, door unlock, etc) is possible but can be complicated. The ring is a small target, so not always easy to find the received if you're using it with a phone.

Oh, and the software is low level and finickity. I managed to accidentally set mine to read only mode permanently.

Review at https://shkspr.mobi/blog/2024/02/giving-the-finger-to-mfa-a-...


I have a suspicion this is a whitelabeled NFC ring I got from AliExpress for $12. That one includes a T5577 chip and a Mifare tag. You can read and write the Mifare tag with your phone, as normal, and the T5577 with a Flipper Zero or a Proxmark (also from Ali, $40).

The NFC tag is a small target, probably because of the size of the antenna, but the RFID one has pretty good range. I got five of those rings, very much recommended if you have stuff to auth to.


I think your suspicions are wrong. Those $12 rings will allow you to serve NDEF messages or similar. They won't do U2F, payment, car unlock etc.


It doesn't look like the Z1 does payment either, though. I don't know how they do U2F, but it looks like it comes with a custom reader, which is non-standard. I don't know how Tesla unlock works, so I can't say there.


There is no custom reader. It works with standard NFC readers on Linux and Android.


Ahh interesting, thank you.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: