HNHacker News
TopNewBestAskShowJobs

DominoTree

1,147 karma · joined August 22, 2013

submissionscomments
DominoTree··on Finding an Alternative to Mac OS X – Part 2
Bingo. The benefit here is that you can get your choice of rolling-release packages on any distribution you want without mucking up the base system.
DominoTree··on Russia Hysteria Infects WashPost: False Story About Hacking U.S. Electric Grid
Isn't it possible, that without matching file hashes, that the malware you found a sample of had a different encrypted payload versus the ones referred to by the report?

I'm just thinking that an entity could've downloaded some commodity malware (instead of writing their own from scratch) and modified it to suit their purposes, but the YARA sig would've hit on a lot of different variants of the same webshell versus a higher-fidelity match based on file hash.

DominoTree··on Russia Hysteria Infects WashPost: False Story About Hacking U.S. Electric Grid
I was curious about a couple of things that weren't clear in the article.

1) Did you actually verify that the IPs provided were part of the Tor network, or did you just see that their rDNS records currently have the string "tor" in them, as you described in the article?

2) Did you identify the malware you reversed by file hash, or did you find something that hit on the provided Yara sig?

I think adding these details to the article might give technical readers some more insight into and more confidence in the methods used.

DominoTree··on The Finder’s GUI tax can be very expensive
The window animations in Mac OS itself can make things feel very sluggish as well, although the velocity-based ones seem better with Sierra.
DominoTree··on Vulnerability scanner for Linux and FreeBSD
TL;DR "Give a single machine root access across your entire enterprise so you don't have to manually check each machine for security updates in the vendor-supplied packages"

Instead of dealing with this thing, I suggest looking at some existing system management tools like Landscape for Ubuntu or Spacewalk for CentOS/RHEL to handle managed updates... or learning how to set up a cron job to email you when security updates are available.

DominoTree··on The Ethereum network is currently undergoing a DoS attack
Anyone who thinks it's hilarious
DominoTree··on Running a Tor Exit Node for Fun and E-mails
It's much more fun to run an exit node and inspect the traffic using tools like the dsniff suite and Suricata.

Back in the day, 90% of the traffic I would see was just people trying to brute force Hotmail accounts via POP3, but occasionally I'd sniff the credentials for an IRC-based C2 for a botnet, and I'd log in and wreck the thing.

DominoTree··on Ask HN: Anonymous person sent proof of SSH access to our production server
A lot of the comments here mention what to do with the server, but it's often more probable that a workstation controlled by a user that happened to have access to that server was compromised.
DominoTree··on Why we use OpenBSD at VidiGuard
Tails is for an almost entirely different use case.
DominoTree··on Stop Bashing G.M.O. Foods, More Than 100 Nobel Laureates Say
My "high school understanding" comment was poorly-written, and I was really trying to express that, at the end of the day, DNA is DNA, and our bodies can't tell the difference when we consume it. Different genes could indeed cause unexpected behaviors or proteins to be expressed in plants, but these are easy to spot during the testing that occurs, and largely, the issues that pop up during this process are failure to get cellular material to accept a transgene, and then to regenerate a whole plant after modified cells have the desired transgene.

Put quite simply, the engineered varieties undergo toxicity studies and in-depth chemical and molecular analysis, and their agronomic impact is assessed through things like soil samples, and all of this data is compared to the same studies which are also done on their non-GM counterparts to assure that nothing unexpected has changed, and that the end result is "substantially equivalent." It usually costs around $30m, and takes between 10 and 15 years to complete the testing, regulatory, and approval process over many many generations of the engineered variety.

I'm really not aware of any studies like what you're looking for, but the data would be much more valuable looking at specific varieties of organisms, rather than based on what method was used to create them. Even then, confirming their chemical, molecular, nutritional, and agronomic equivalence with their non-GM counterparts really negates the need for those sorts of studies, because the crop ends up being indistinguishable (aside from a few crops engineered for the end consumer, such as vegetables with higher levels of antioxidants or higher levels of certain vitamins).

A wall of text follows.

------

I'm not really familiar with the methods used for varieties derived from breeding or mutagenesis, but I recall the last time that I looked, there was not any major standard testing being done there.

The first step in adding an isolated gene to a genome is to do a few modifications to the genetic payload itself. A marker gene is added as well as a promoter, and a termination sequence is appended to the transgene. The marker gene is used to differentiate which cells have successfully taken the transgene. In short, the targeted cells are grown in a medium that is normally toxic to the target plant. The marker gene encodes proteins which provide resistance to that medium, thus, the cells that survive in the medium are the ones which have had successful uptake of the gene. The promoter sequence controls when and how the transgene is expressed over the life of the plant, and the termination sequence simply marks the end of the payload.

Once you have your genetic payload, there are several methods used to get it into a plant cell. The first, and simplest, is a gene gun, which quite literally blasts a cluster of cells with particles coated in genetic material. Some of the cells survive and successfully envelope a particle coated with DNA, which eventually integrates into a chromosome. This is used for plants which don't readily accept other forms of modification, and was the method used to create Bt corn as well as golden rice.

Agrobacterium is another method which is generally more precise about delivering genetic material to a desired location, but various plants are resistant to the method. Unmodified, the agrobacterium infects plant cells through open wounds, and deposits a DNA payload during replication which causes tumors. The tumor-causing DNA payload is removed, replaced with the transgenic payload, and the bacteria carries out its job, infecting the plant and depositing the payload for a desired trait.

Soon, we will probably start seeing newer methods such as CRISPR/Cas9 become more popular (assuming they aren't as resisted as agrobacterium can be).

By precisely controlling the genetic payloads added to the genome, it is far easier to monitor protein expression and see exactly what has changed throughout a plant's lifecycle.

If and when successful regeneration of a whole plant occurs, evaluation of their offspring occurs. The first is a standard 90-day animal-feeding toxicity study. Data from this study is also compared to data from animal studies of the crop's non-GM equivalent. Various studies are also done on the source of the transgene. Gene characterization is also done to examine a gene's molecular structure and sequence, and look at its relationship to similar genes and their exhibited effects.

Compositional analysis and comparison is also done between the GM and non-GM varieties. The varieties are grown adjacent to each other in various locations and are then observed. Various plant components are analyzed and compared between the GM and non-GM varieties using GC/MS and other methods to examine nutrients, vitamins, proteins, fat content, fiber content, and so forth. This is to ensure that the new crop is chemically and nutritionally equivalent to its non-GM counterparts.

Beyond the compositional analysis, environmental/agronomic impact and equivalence are also assessed between the GM and non-GM varieties, usually during the period they're grown leading to compositional analysis. Soil samples are taken to examine nutrient absorption, and things like root structures are also examined and compared.

At this point, assuming all has gone well, a genetically-engineered crop is considered to be "substantially equivalent" to its non-GM counterpart.

------

I hope some of this was helpful, and that it made sense and that I wasn't too long-winded.

DominoTree··on Stop Bashing G.M.O. Foods, More Than 100 Nobel Laureates Say
Russia Today is a dubious source itself.

https://www.rt.com/usa/alien-bird-deaths-cia-un/

Here's an article they published about aliens and the CIA causing the deaths of migratory birds by spraying "chemtrails".

The fact of the matter is that GMOs contain the same genetic material we already consume on a daily basis. We understand how it impacts our bodies (it pretty much doesn't) and there is no distinction between genetic material from a GM organism versus a conventional organism. It's chemically and functionally identical (derived from the exact same nucleotide bases and the genes already exist elsewhere with the same function), and has the same impact on your body. This is something that we've studied for a very long time, and understand fairly well.

DominoTree··on Stop Bashing G.M.O. Foods, More Than 100 Nobel Laureates Say
It's not productive to conflate all of these issues, as many of them aren't really directly tied to GMOs.
DominoTree··on Stop Bashing G.M.O. Foods, More Than 100 Nobel Laureates Say
We've been using mutagenesis (through radiation or carcinogens) in food crops to introduce random, unspecific genetic changes for many decades hoping to get lucky and make better crops, with no ill effects. These crops are approved under USDA organics standards.

Now, when we specifically modify one or two quantifiable genes in an organism (instead of potentially thousands through mutagenesis or breeding), everyone loses their minds.

Our bodies are built to process DNA that we consume without adding it to our genome. This is why we can eat a steak without suddenly inheriting bovine genes. For a time, DNA can be found in our bodies from things we consume, but a fragment of DNA is not the same thing as a functional gene, and even if it were, it'd have to actively put itself in our cells somehow, and replicate.

A basic high school understanding of genetics is really all you need to understand that these breeding techniques are largely the same as what happens in the wild and what we've been doing for ages, if not actually safer since they're far more controlled.

DominoTree··on Stop Bashing G.M.O. Foods, More Than 100 Nobel Laureates Say
Seralini and his "studies" are highly discredited. https://en.wikipedia.org/wiki/Séralini_affair

The study you refer to, "rats fed with GMO food had developed tumors that were as big as their original size" used Sprague-Dawley rats, typically chosen in lab studies because the breed is known to quickly develop massive tumors regardless of other factors. The results in this study were not statistically significant, and were drawn from a sample size way too small, on a type of animal that is known to develop tumors on its own.

Furthermore, the numbers in the study actually showed that male rats who consumed glyphosate in their drinking water (because simultaneously testing multiple variables on groups of like 5 rats makes sense, right?) actually lived longer than those which did not, and all rats in the study grew massive tumors, even the control group.

If you're going to base an opinion on "science", please make sure you actually read the study and have enough knowledge to determine whether it's bullshit or not.

Thanks,

Someone who actually is "pro science"

DominoTree··on ZFS lands in Debian contrib
"stable" != "mature"
DominoTree··on SSRI Stories: Antidepressant nightmares
The plural of "anecdote" is not "data"
DominoTree··on Argentine government favors farmers in dispute with Monsanto
Monsanto was one of a number of manufacturers that the DOD ordered 2,4,5-T from, and they warned the US Government about the dioxin issue literally decades before they stopped using it, and they tried to raise at least some awareness of the issue before many other manufacturers even knew about it.

From the article that you linked:

Additionally "Boehringer, which used the relatively safer low-temperature-process since 1957, in the same year warned the other producers of 2,4,5-TCP, which were using the high-temperature-process, pointing out the risk[vague] and providing suggestions how to avoid them."[28]

Internal memoranda revealed that Monsanto (a major manufacturer of 2,4,5-T) had informed the U.S. government in 1952 that its 2,4,5-T was contaminated.[29] In the manufacture of 2,4,5-T, accidental overheating of the reaction mixture easily causes the product to condense into the toxic self-condensation product TCDD. At the time, precautions were not taken against this unintended side reaction, which also caused the Seveso disaster in Italy in 1976.

The employment of 2,4,5-T by the military rapidly ended, according to the American Cancer Society, following the convincing results of a study in 1970 that found 2,4,5-T could cause birth defects in lab animals.[30]

So yeah, Monsanto warned the US government of the problem 10 years before the start of Operation Ranch Hand, and they were ignored. And I can't really fault a chemical company for manufacturing chemicals when the DOD orders them.

DominoTree··on FBI Is Pushing Back Against Judge's Order to Reveal Tor Browser Exploit
Pretty sure that just about everyone is hoarding Firefox 0days :P
DominoTree··on Hjson, the Human JSON
"Helps reduce errors" - you're really trading errors for other errors - your behavior is now more ambiguous with more edge cases, but look, you don't have to place quotes around strings! (except when you still do)
DominoTree··on A Saner Windows Command Line
ConEmu does seem to have gotten a lot more stable in the last few months
DominoTree··on A Saner Windows Command Line
Because a VM is overkill and won't allow you to interact with the Windows host.
DominoTree··on The limits of open source with Illumos and OmniOS
I'm using ixgbe (with copper) under SmartOS on three machines right now and have had zero issues.
DominoTree··on Ditching tmux
I've been doing this for a while, and the only real issue is remembering not to open nested neovim sessions when I want to edit a file :P
DominoTree··on Big News for ZFS on Linux
Massive under certain use cases, and major reliability and feature differences too. A lot of BtrFS is still "in progress" like the copy-on-write stuff and fault detection.
DominoTree··on GPL Violations Related to Combining ZFS and Linux
Yeah, but is anybody using OpenSUSE? :P

Edit: Wow, I just checked DistroWatch and they've been #4 for some time now...

DominoTree··on GPL Violations Related to Combining ZFS and Linux
It may be the case that now there's simply nobody who cares in a position to actually get it fixed
DominoTree··on GPL Violations Related to Combining ZFS and Linux
Because it still doesn't have the stability and maturity of ZFS (which has seen over a decade of production use)
DominoTree··on GPL Violations Related to Combining ZFS and Linux
I believe that Bryan Cantrill has stated that it was surprising to the people at Sun when outside parties didn't start incorporating ZFS and other technologies into Linux, because the original intention when the CDDL was written was not to be GPL-incompatible.

Edit: dwrensha posted a related comment (https://news.ycombinator.com/item?id=11176361) with a YouTube link of Bryan making the statement.

DominoTree··on Female codebreakers reunited at Bletchley Park
Women in tech.
DominoTree··on CLion, the new C/C++ IDE from JetBrains
I am able to run IDEs from JetBrains on goddamn Solaris without any effort. I can't say that about nearly any other modern piece of software.
← PreviousPage 6 of 7Next →