Wanna disable Defender when enabled Isolated Core and Tamper protection?

Its a bit more trouble- but doable, without ruining Isolated Core/Secureboot etc.

Defenders process will run as a unkillable protected service- so new tricks needed.

Here we go:

Ok- tamper protection is easy, just make .bat - run as adm:
:again
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter\Instances\WdFilter Instance" /v altitude /t REG_SZ /d -1 /f
goto again

Then unload minifilter with process hacker:

The registry key will be changed while the minifilter do not protect it, when tamper protection makes the driver load again it cannot attach to volumes nor protect registry keys.

Removing it will make it recreate, but invalid altitude do the trick

Notice now the service is: Protected light(antimalware)
Now we cant do anything to the service/process- not even see its open handles.

Lets start by elevating to SYSTEM- just launch a command prompt, then close process hacker- and run it again from the command prompt.
Now process hacker runs as SYSTEM

Torn between "I think losing $100 million when someone beats you at security research is pretty much exactly what you signed up for doing yield farming" and "Maaaaaaaybe not the future of finance you were expecting, huh."

How to put this in regular finance terms...

Suppose hypothetically you have an account at a brokerage with some valuable asset in it. You take a margin loan against that asset to fund your normal spending, or pay a tax bill, or maybe buy something at another brokerage.

For reasons known only to the brokerage, they don't denominate your loan in dollars. They denominate it in shares of a money market fund, which are worth $1 +/- epsilon and basically never deviate from that.

And you think "Hmm, I have a large equity cushion against this loan."

One day, a computer system at the brokerage reports, sorta-kinda erroneously, that the value of the money market fund is actually $1.30 per share. The equity cushion is gone. Your valuable asset is sold, at timing you didn't choose, at wrong price, to pay an inflated phantom debt

And your recourse is... probably tweeting at patio11 saying he finds too much joy in this.

Which I don't; I just feel like this is why you don't trust a CPU built out of redstone to build reliable financial infrastructure on top of.

Here’s a SPAC thread covering some basics for new followers. I will pin this to my profile if you want to share to anyone interested in SPACs.

SPAC timelines consist of these stages:
IPO – SPAC raises cash and begins trading as a unit. The cash is placed in Trust.
Searching phase – After IPO, the SPAC management team looks for a company to merge with. This is typically 24 months but can be shorter depending on the SPAC

LOI/Rumor – A letter of intent is announced publicly or Bloomberg/Reuters etc. breaks news of a rumor that a SPAC is close to a deal with a target.

The LOI/rumor stage does not always happen, most go straight to a definitive agreement. Rumors should only be considered to have value if from a trusted news source, internet rumblings are pure speculation. During this stage, a deal can still fall apart and not be signed.

Definitive agreement (DA) – deal officially inked. The SPAC begins filing paperwork with the SEC to have the merger approved to take the target company public. This process typically takes 4+ months after the DA is announced.

What happens when a skill you have becomes obsolete? No, this isn't a R vs. Stata thread---it's a thread about a working paper w/ @sonnytambe!
https://t.co/w6nLf1tnST

The skill we look at is Adobe Flash, which @apple decided to no longer support back in 2010, which in turn caused demand/interest to plummet, as measured on @StackOverflow and in online labor markets, one of which is our empirical context

Despite the big fall-off in Flash jobs posted, very little else appeared to change in the market for Flash skills: wages for Flash jobs didn't fall, jobs didn't become easier to fill & openings weren't inundated with out-of-work Flash programmers

What happened was that (a) new entrants stopped specializing in Flash and (b) at least some existing Flash specialists started moving to other skills. In short, the demand shock quickly became a supply shock

At the level of the individual Flash worker, using a matched sample, we find (a) no fall-off in their wages, (b) some decline on-platform hours-worked. The most-focused on Flash workers had substantial increases in application intensity and a movement towards new skills

Facebook lost another 1 million daily users in Europe and stayed flat in North America as scandals and low engagement with teens come back to bite its business https://t.co/O7tfyIw7Fd tip @Techmeme

Facebook still added 37M monthly & 24M daily users thanks to big gains in the Asia-Pacific region, but those users earn it 1/10th as much as US/Can users

The real story dragging on Facebook's share price is that yearly revenue growth has fallen from 59% 2 years ago to 33% today. It's run out of lucrative Western users and News Feed ad space.

Let's remember that Facebook doubled its security staff & cut back on viral videos/clickbait. That drags on its profits & revenue, but are crucial to society. And while Twitter shares soar, it has made no such commitments to fighting harassment & misinfo.

[1/4] Ok this is really funny, check this out.
I was in the process of booking a flight via @OneTravel. Trying to make me book ASAP, they claimed: "38 people are looking at this flight".
Whoa, 38 is a lot, I have to hurry up. But first I have to check how they came up with 38 >>

[2/4] Right click and a quick "inspect" on the number, I found out the element's class name is "view_notification_random".
Awesome variable naming guys.
So you're _randomly_ trying to freak me out. Alright >>

[3/4] So what's your sophisticated pseudo-random algorithm?
Apparently, OneTravel are choosing a number between 28 and 45.
Because as you all know, based on serious psychological research, these numbers tend to make people book their flights fast #sarcasm #not42 >>

[4/4] Here's a bonus graph.
Thanks @IddoYadlin and #WolframAlpha.

Most commit messages are next to useless because they focus on WHAT was done instead of WHY.

This is exactly the wrong thing to focus on.

You can always reconstruct what changes a commit contains, but it's near impossible to unearth the reason it was done.

(thread)

Think about the last time you `git blame`d something.

You were almost certainly thinking "WHY is this like this?", not "What is a one-line summary of what happened in this commit?".

Here's the antidote: use this commit template (stolen from @joeferris).

```
[one line-summary of changes]

Because:
- [relevant context]
- [why you decided to change things]
- [reason you're doing it now]

This commit:
- [does X]
- [does Y]
- [does Z]
```

Leading with the WHY has tremendous value.

First, it captures context that will be near impossible to recover later. Trust me, this stuff is gold.

Secondly, if you train yourself to ask why you're making every change, you'll tend to make better changes.

Give this template a try for a while.

The first time you see a commit message like the above instead of "refactor OrderWidget", you'll be a convert.

Surveillance companies assure us that they employ safeguards to ensure that their customers aren't abusing their products to engage in unlawful or unethical surveillance. And yet, inevitably, these companies abuse their tools THEMSELVES.

1/

It's almost as though being the kind of person who dreams of achieving incredible wealthy by spying on people makes you kind of an asshole.

2/

Like the people at @VerkadaHQ, "a fast-growing Silicon Valley surveillance startup" whose male employees used its own products to sexually harass their female colleagues and received the barest wrist-slaps for

Male Verkada employees maintained a private Slack channel where executives posted photos of female employees - captured with the company's own surveillance tools - and made sexually explicit remarks about them.

4/

When this came to light, the company's founder and CEO Filip Kaliszan called an all-hands meeting, expressed disappointment in the harassers, and told them that they could either quit...or lose some stock options. They chose the latter and remain employed there to this day.

5/

We just launched a fun little tool called Phantom Analyzer. It’s a 100% serverless tool that scans websites for hidden tracking pixels.

I want to talk about how we built it 👇

The idea came about early this year after @mijustin gave us an idea about badges/certification, which developed into “what if we could scan websites for Google Analytics?!”. But we left the idea in Basecamp for many months.

Fast forward to Halloween, we’re thinking about fun ideas we could do to entertain people. We discussed “Phantom Analytics” in response to people getting confused with our product name, and had various ideas. And then we landed on the URL analyzer idea.

Once we’d finalized the spec, Paul got to work on our Halloween themed product and then coded up the HTML/CSS for it all. I then took it, put it into a Laravel application. Nice and easy.

Off the bat, I already knew the base stack I was using.

> Laravel Vapor
> ChipperCI for deployment
> SQS for queues
> DynamoDB for the database

We went with DynamoDB as we don’t want to worry about our database scaling!

help

stuff. just stuff. its all too easy to order more stuff. so much stuff. I dont need any more stuff but I cant stop ordering stuff.

"The engineers on my team just want to code. They don't want to have anything to do with product. They just want specs. What do I do?"

1/n Are you asking them do to X *and* do their "day job" as defined by their managers (and frankly your roadmap) ?

If so, start there...

2/n Do they have a reason to believe that doing X will in any way improve the quality of the product and make their lives easier? Have they ever seen X "work" ?

Show don't tell.

3/n Is there average day/week a quagmire of unnecessary meetings, wading through tech debt, struggling to get *anything* to work ... and jumping through process hoops to prove their worth?

If so...no they will not have bandwidth.

4/n How do incentives work on the engineering team? Maybe they want to help, but their "grade" is determined by something altogether different.

"I'd love to, but I am on the hook to deliver [some project] this quarter to make a good impression..."

Talk to eng management.

5/n Have they had any time to practice?

Or did they get thrown into the deep end the first time they were given a shot ... expected to brainstorm on demand, be as vocal as practiced PdMs and designers, and "participate" !

Make it safe to practice. Reasonable expectations.

Time for a pulp countdown now, and today it's my top 10 digital watches of distinction!

After all, why wear a Rolex nowadays?

At #10: the 1973 Seiko 06LC. This was Seiko's first LCD wristwatch: a field-effect liquid crystal display showed six digits of time continuously - you didn't need to press a button to see it either!

At #9: the 1976 Bulova Computron. The side mounted LED display meant you could sneak a peek at how long your meeting was taking without anyone else noticing. Very chic.

At #8: the 1989 Nelsonic Nintendo. This is The Legend Of Zelda version and it's perfect for letting others know you are a master of corporate strategy!

At #7: the 1975 Uranus Calculator watch. This natty number has its keypad on the bezel, which does increase its size. "How big is Uranus?" is a frequent question you'll get if you wear this.

argh chrome updated and it seems they've intentionally broken custom search engines. I have had a keyword search for "foone" which searches my own twitter, so I just type "foone BLAH" and it gives me a twitter search for when I said BLAH, right?

but now I get that option in the titlebar of "search twitter self-search" which is the name of the search"
if I just type "foone blah" now...

it ignores the search I have had defined for years and just googles it.

and this is definitely on purpose because they didn't just break it, they changed it. it's now "fooneblah"

there doesn't seem to be an option to make this stop and get the old behavior back :(

I like how mediawiki exports pages because there's nothing I enjoy more than parsing a 1 gigabyte XML file

and I'm doing simple-english-wiki! it's way smaller than english wikipedia
I can only imagine how impossibly unparsable that nightmare is

fun fact: when programmers need to write code to extract data from an XML file, the process usually goes like this:
1. find XML file
2. open it in a text editor, see what the structure is
3. write some code that parses that

do you really want to open a 1 gigabyte XML file in your text editor?

do you want to fucking die?

I used to run into this problem back when I worked for the government, because sometimes I'd click a database query log (don't ask why our logs were in XML, it's... complicated) and it would turn out to be 100mb

15 Times Japan Proved It Was Lightyears Ahead Of The Game

Thread....

1. High-tech Toilets

Japanese toilets will not only wash and warm your bum, will also play music for you so no one can hear your business

2. Wrinkle Remover

Someone must have really hated ironing. They have a hands- and effort-free shirt wrinkle remover that eliminates wrinkles

3. Butter Applicator

Someone created a portable butter stick, just because they can

4. Braille Cans

Drink cans have information in braille on top to help those with sight issues.

5. Feeding Falsies

They’ve invented a device that allows fathers to approximate the benefits of breastfeeding.

Keybort

This one is a MicroWeb Touch-1 XT/AT. Kinda.

See if you look up that keyboard you find the Deskthority page on it, showing this.
It's clearly pretty similar, but there are some differences.

Also that one uses a PC/XT/AT DIN5 connector, and this one uses some kind of RJ connector.

This one isn't in the greatest of shape, but considering I got it from the Chuck Colby estate sale, it's surprising it isn't completely water-damaged.

It's got some minor rust damage inside, where the metal clips rubbed off on the PCB.

why are chips often so expensive? how do chip companies determine the prices of their chips? a thread... 🧵

first thing chip companies do is to figure out the COGS - cost of goods sold. this is how much it costs them to produce a chip--not counting profit or anything else.

but before we can calculate that, we need to know The Life of a Chip, start to finish!

it starts as a raw slice of silicon, something like this. (0th step is a raw boule or silicon ingot, grown as a single crystal, that is sawn up like this)

then it gets run through a variety of processing steps. etching, diffusion, implantation, deposition, and others.