HNHacker News
TopNewBestAskShowJobs

086421357909764

294 karma · joined January 29, 2016

submissionscomments
086421357909764··on How I hacked modern vending machines
By adding the element of a mobile device to verify the transaction it changes the dynamic here. There are protections and precautions to verify against fraudulent currency performed within the machine. The implied here is that there is no verification or protection (by means of storing values local rather then remote). In a system where there is transactional data / values stored, the default should be to have the data stored and housed within a protected system. IE central server that a simple app queries with API calls vs a database walled on a phone.

The same principles often come into play with online games and cheating, yet constantly developers make the same mistakes.

086421357909764··on The Big Hack: The Software Side of China’s Supply Chain Attack
No, but a gag order can prohibit you from saying something specifically with regard to national security issues.

So downvote away, but these documents do exist and these circumstances can and will happen.

In fact, everyone impacted by Aurora, were strictly under gag orders during the onset of that investigation too.

086421357909764··on The Big Hack: The Software Side of China’s Supply Chain Attack
My guess is Gag order for the US govt.
086421357909764··on The Big Hack: The Software Side of China’s Supply Chain Attack
It's actually possible they have a National Security Gag order. If that's the case they could only deny anyway.
086421357909764··on Edge Computing at Chick-fil-A
It's actually suprising that people think they're not "normal" computers. I provisioned a few of them and they're little beasts. Most in use are I7, 16-32gb ram, Dual NVME. The Skulltrail nucs are extremely powerfull and on the lower end the atom based units are solid too. I also ran a nuc in my car for a while, mostly stumbling radio / wifi spectrum as I drove around, but it was perfect with its relatively low power requirements.
086421357909764··on Utah voting system fending off 1B hacking attempts per day
So much this, yes i'm sure people were attempting to scan it up but I guarantee you could show the same for almost every network out there. I understand the fear mongering to a degree but its projecting things in the wrong place and it's almost like crying wolf.
086421357909764··on Google Engineers Refused to Build Security Tool to Win Military Contracts
Everyone seems to forget that the projection of might in of itself is a deterrent leveraged by all nations. Further, the US is part of multi nation programs, such as NATO in which it's the largest supplier of Capital and Manpower by a large margin. Most of the countries external to the US that bring up this argument, are happily accepting Military and in some instances Economic Aide.

You can't look at the % of spending / annual cost of the greatest military power without taking into account it's responsibilities around the globe.

Nothing above says you have to agree or disagree with the military, in fact many of us aren't pro on a lot of their actions, but this common retort as posted above, is selective data analysis, which I would hope the intellectuals of HN would be able to separate emotions from facts.

https://obamawhitehouse.archives.gov/the-press-office/2016/0...

https://www.state.gov/s/l/treaty/collectivedefense/

https://en.wikipedia.org/wiki/United_States_military_aid

https://en.wikipedia.org/wiki/Power_projection

086421357909764··on Netflix and Alphabet will need to become ISPs, fast
The even shittier thing is, assuming your muni get the efforts going, it's not uncommon for comcast to all of a sudden have a competing product at a cheaper rate. Where the didn't have bandwidth they suddenly can support the increased rates due to competition. It's just nuts.
086421357909764··on Leaked Emails Show Google Expected Military Drone AI Work to Grow Exponentially
Military, Federal, State govt. and even corporations all have dreaded over runs. It's bad all around.
086421357909764··on HTC is launching a blockchain-powered phone
PiedPiper New Internet capable?
086421357909764··on Cincinnati's Abandoned Subway
My guess is the great depression killed funding or interests.
086421357909764··on Raspberry Pi 3 Model B+
POE <3
086421357909764··on Tesla GPU Accelerator Bang for the Buck, Kepler to Volta
This is repeated a lot, but I don't know many that are interested in buying a used card these days due to mining and wear on them. I don't think the resale value is nearly as great as is implied. I could be wrong though. If we get to the point where resale starts to happen in mass, it'll be an interesting item to watch.
086421357909764··on Let's Learn About Waveforms
I too very much appreciate this, as soon as I saw it I shared it with a couple students I mentor. Interestingly we're talking about synthesizers as an instrument and this is a great visual tool! Keep it up! I'd be happy to send a small donation for continued write-ups.
086421357909764··on Rents dropping significantly across the Seattle area after new construction
I've never seen a property reduce rents on a lease before even if the markets bare it. Did you move units to start a new lease?
086421357909764··on Shopping for a Home in the Bay Area? Head to the Mall
I can't even begin to count the number of times i've seen someone almost hit in front of the container store / best buy.
086421357909764··on Intel was aware of the chip vulnerability when its CEO sold off company stock
I don't the the impacts have really begun to be felt yet. We're already anticipating over 20% based upon our current AWS findings (as others have pointed out their dilemmas as well). If i'm a larger company looking at a sudden increase of 20-30% for operations, i'm going to have a pretty strong response. I would imagine it takes upwards of 1 quarter before the Tech impact becomes a Business cost impact.
086421357909764··on GDPR: Why We Stopped Selling Stuff to Europe
In fact, the EU considers all citizens of the world to fall under their legal protections. That is, you don't have to be a EU citizen to have the same legal rights.
086421357909764··on Bitcoin: $64m in cryptocurrency stolen in 'sophisticated' hack, exchange says
Exactly.. the "we had hot wallets for all our currency" excuse would have worked 6 years ago, not so much today.
086421357909764··on Bitcoin: $64m in cryptocurrency stolen in 'sophisticated' hack, exchange says
People need to stop with the 'sophisticated attack" shenanigans. No one is going to say 'un-sophisticated attack", when the reality of it is, it usually boils down to negligence. My bet is on an insider.

Interesting in this case is that the CTO / Co-Founder's son was previously arrested for creating the "Mariposa" bot net and money laundering.

https://krebsonsecurity.com/tag/matjaz-skorjanc/ http://www.bbc.com/news/technology-25506016

086421357909764··on Kremlin Cash Behind Yuri Milner’s Twitter and Facebook Investments
Given the pervasiveness of SORM deployment across ISPs and tech companies within russia, it maybe that a letter like system is not even required.

https://en.wikipedia.org/wiki/SORM

086421357909764··on Backblaze has ordered 100 petabytes of hard drives
As they've said though, the usage of most linux users isn't on par with Windows / Mac users. They simply would crush themselves with people attempting to backup 200TB nas devices for $5.00 a month. If you want any perspective on how crazy the fringes are with data storage and how they impact providers (such as amazon, google, backblaze, etc.) simply read the stories on reddit /r/datahoarder and you'll quickly see why this decision makes sense from a business perspective.
086421357909764··on Russian Hackers Stole NSA Data on U.S. Cyber Defense
There's always been a strong narrative, but for a government to call out another commercial entity and or government for spying is a dangerous game and only played when it's a big enough issue. It's all politics, they're spying, we're spying, it's when that crosses the line and we need to slap hands that matters. Further the public disclosure of facts to support are risky in that they can give away, tools, capabilities, or accesses that may be unknown to the foreign actors.

For it to hit the news and the government to ban it, took many years of balancing and finally something internal broke the camels back so to speak. I'm not sure if this was it, but I'm going to go out on a limb and say it's probably not an isolated case.

086421357909764··on Russian Hackers Stole NSA Data on U.S. Cyber Defense
This has a strong weight in truth at least within the CNO world. Simply can't compete with commercial salaries (which for those with unique experiences are commanding even greater than the average SV salary).
086421357909764··on Why It Took Google So Long to End Shady Rehab Center Ads
It's the same argument for Facebook and questionable ads (IE current news). If you are a company making money in the ad space, you'll err on the side of money 9 times out of 10.
086421357909764··on DHS Plans To Gather Social Media Info
To play devils advocate, it's highly likely multiple countries are already looking at this information, this is just a formal way of asking for it to add non-compliance to justifications. It's almost akin to the US state of Tennessee having a marijuana tax despite not allowing legal sale of the substance. It becomes another thing to use on charges / justifications.
086421357909764··on Equifax C.E.O. Richard Smith Retires After Huge Data Breach
Correct, all companies face breaches, it's the management and response that should determine the course of action. This is where an independent investigation is crucial for determining basic failures vs systemic disregard. The harder part would be weighing it.
086421357909764··on China Blocks WhatsApp
WeChat acknowledged the monitoring :(

http://www.moneycontrol.com/news/business/companies/wechat-c...

086421357909764··on Apple Watch Series 3
I suspect as much, how else can people visually differentiate your status as having Cellular on your watch. Thing is most people can't tell a difference between series 1, 2, and 3.
086421357909764··on Equifax Suffered a Hack Almost Five Months Earlier Than the Date It Disclosed
This is exactly how it works. Passwords can be changed, your personal details can't.
Page 1 of 5Next →