Hacker News Reader

_a9on MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

This is what I do too. If i need to use or test something i don't trust then I use an old phone. All of the phones use crDroid(1) and I have scripts to quickly wipe and reinstall the OS whenever I need a full nuke.

(1) https://crdroid.net/

_a9on Lego unveils tech-filled Smart Bricks

From Lego: https://www.lego.com/en-us/aboutus/news/2026/december/lego-s...

_a9on Marmot – A distributed SQLite server with MySQL wire compatible interface

I used this a while back while running a waybackmachine style site for a large social media platform. I wanted to keep it simple with sqlite but when it got popular it started to become a problem. Marmot was the only thing that I was able to get to work with the amount of data I was pulling in. It would sync the master db from the main archiver server to all the ha servers so the user would be able to access it immediately no matter what ha server they got. The dev team was nice to talk to when I had some issues in setting it up.

It was definitively a weird backend setup I had made but it just worked once set up so I didnt have to touch any of the frontend code.

_a9on Why does VirusTotal give different results depending on how I upload the file?

The URL scanner doesnt directly scan the file. It checks the URL against other web firewalls and returns stuff like the headers, chain, the sha256 hash of the body (which links to the actual file analysis https://www.virustotal.com/gui/url/9525d0fe32cebf7933bf84dcf...)

You can see and compare the different vendors of each. File analysis goes to all the antivirus' and does the sandbox stuff and the URL analysis goes to things like Google Safebrowsing, phishing check services, etc

tldr different systems for URL analysis (web firewall check) & file analysis (antivirus/sandbox check)

_a9on Flock and Cyble Inc. weaponize “cybercrime” takedowns to silence critics

Part 2: Flock and Cyble Inc. Continue to File False Notices

https://haveibeenflocked.com/news/cyble-part2

_a9on The state of Rust trying to catch up with Ada [video]

The Whitehouse website gets cleared for the incoming administration.

The page was moved to: https://bidenwhitehouse.archives.gov/oncd/briefing-room/2024...

_a9on Internet Archive down (SSL cert expired)

Looks fine on my end for both `archive.org` & `*.archive.org`

  Issued By Go Daddy Secure Certificate Authority - G2
  Issued On Saturday, December 23, 2023 at 7:17:22 AM
  Expires On Thursday, January 23, 2025 at 7:17:22 AM
  Certificate 687b9933480904106777195bb771a07e17391069288804ab239fcecaa3cccc94
  Public Key 72be73116fa44e8638b348117f1f35a95d21240558d5ec4ee7c8c61436aabe84

_a9on Traxx.space shutting down due to financial burden of new Spotify policies

> Part of it is the change Spotify made to not paying for streams under 1,000 plays. When we first got our January sales report, it was down nearly 70%. Yes, seven-zero %. And February’s figures confirmed it wasn’t a fluke.

> The other part is also based on Spotify. The new fining system is beyond outrageous. We are getting fined for users who had 9 out 10 fake streams according to Spotify. They don’t give us any more details than song, number of total plays and number of fake plays. If that ratio exceeds 90%, they issue a 10 euro fine each month.

> For us and our catalog of over 40k songs ... The THOUSANDS OF DOLLARS in fines each month was the final nail in the coffin though

_a9on Gitlab confirms it's removed Suyu, a fork of Nintendo Switch emulator Yuzu

Yea not sure why they didn't go straight to selfhosting a Gitea instance on some offshore VPS.

If any Suyu devs are reading check out https://kycnot.me/

I've personally used these hosts to provide data to the public that was subject to constant takedowns

  - UDN (Used before the invasion) which is based in Ukraine. Good way to support them I suppose.
  - BuyVM in Luxembourg
  - Incognet in NL (Probably reach out to them first to see if it's OK)
  - PQ.hosting in Russia

_a9on Big media publishers are inundating the web with subpar product recommendations

Using the 'share/copy link' button has been pointing to x.com since they did the whole x.com change but afaik going to x.com will redirect to twitter.com. No clue what they're on about using one domain but redirecting to the other.

_a9on 1Password detects "suspicious activity" in its internal Okta account

https://blog.1password.com/okta-incident/

Original Incident Report: https://blog.1password.com/files/okta-incident/okta-incident...

_a9on Instagram apologizes for inserting 'terrorist' into Palestinian bio translations

After the twitter files I just assume the government has their grimy little fingers in every company that has access to a large amount of eyes, prime for manipulation

_a9on Is Cloudflare down?

Discord also down showing a (custom?) Cloudflare error page

https://archive.ph/IFGzo

_a9on Researchers mined Erowid and fed the entries to an AI

I dont think erowid content would be good to tell safety of a drug, probably more what type of experience you'd get using a drug at certain doses.

What would be interesting would be training using the data from PsychonautWiki[0] which has all sorts of good data about drug information & safety (and experiences)

[0] https://psychonautwiki.org/wiki/Main_Page

_a9on Mistral releases ‘unmoderated’ chatbot via torrent

> These fucking "journalists" can go fuck themselves and move to China/North Korea if they love censorship so much.

>> So the journalists should be... censored, and kicked out of the country?

> ...and *move* to China/North Korea if they love censorship so much

No one is talking about kicking out journos but you

_a9on Discord as a filehost will no longer be possible by the end of the year

Aside from the people that abuse the service to host files (using free accounts or using accounts with sniped nitro) there are a lot of bots that do image/gif generation that upload directly as attachments. You could see people using multiple commands, while generating multiple gifs, until they get one they want to save. Theres also servers like Midjourney. I imagine a lot of what Discord stores is dead files that will never be accessed after the first time.

Another note is that a lot of the meme gifs that are used come from the Tenor and Giphy integration which are only temporarily hosted on Discord's media proxy unless a user downloads it and reuploads it.

_a9on Meta-provided FB chats led a woman to plead guilty to abortion-related charges

> The charges include having an abortion after 20 weeks, false reporting, and tampering with human skeletal remains.

_a9on Tell HN: t.co is adding a five-second delay to some domains

Im not getting the same time delay with curl

- `time wget https://t.co/4fs609qwWt` -> `0m5.389s`

- `time curl -L https://t.co/4fs609qwWt` -> `0m1.158s`

_a9on Render nuked my entire account with no notice

From what I've experienced in the few years using them is that they're pretty strict on abuse, new account or not. I think initially they would null route all ips for the server when getting copyright reports but the past few times they would just email me the report and I had to reply with the fix or else they would null route (or maybe suspend) the server after a day or so of silence.

While I do run a mail server with them I've never had any reports so I can't say anything on that but I'd assume theyre equally or even more strict with email abuse reports they get.

_a9on CEOs’ pay climbed before layoffs at tech giants like Alphabet and Microsoft

I haven't heard that word being used in years living around there and also being hispanic.

To me it just looks like parent is cherry-picking some domains to try and put words in their mouth.

If the person owns roaches.com out of hundreds of domains then you're going to try to make it racist so the owner looks racist?

I never understood why trying to make innocent things racist isn't considered racist itself.

_a9on Data breach exposes personal information of 4k Roblox developers

Controversial Youtuber Ruben Sim also has some (also controversial) vids showcasing the bad stuff that happens on Roblox (Weird developers, moderators ignoring reports, weird/inappropriate groups and items not being removed, etc) [0-2]

This is the same person that was sued by Roblox in 2021[3] but that doesn't nullify the content he has been showing about all the shady shit that Roblox does.

[0] https://www.youtube.com/watch?v=STS1horM6JY

[1] https://www.youtube.com/watch?v=rLF6YUdt8aE

[2] https://www.youtube.com/watch?v=2bUWnxP_YAw

[3] SomeOrdinaryGamers deep dive into the lawsuit: https://www.youtube.com/watch?v=3Dlxp-X7O54

[-] https://www.youtube.com/@RubenSim/videos

_a9on Hollywood movie aside, just how good a physicist was Oppenheimer?

Veritasium posted a good video about Oppenheimer the other day if you have 32 minutes

https://www.youtube.com/watch?v=Xzv84ZdtlE0

_a9on GPT-4 details leaked?

Wayback failed to load the subtweets but archive.is has a copy but it seems to stop after around 10 subtweets. The threader link that was posted has it all though.

https://archive.is/Y72Gu

_a9on Show HN: Clickvote – Open-source upvotes, likes, and reviews to any context

I've been looking for something to integrate in my site that just lets unauthed users to add upvotes, downvotes, and maybe some extra ones like 'recommend' or a few general ones like 'cat/dog'. Dont need any alaytics or extras.

Are there any recommended good self-hosted alternatives? This looks nice but requires quite the stack of services.

_a9on PhotoPrism: AI-powered photos app for the decentralized web

Theres an option to disable it on the local version. Just noticed mine also said that on the upload page and went looking in the options

_a9on Publishers carpet-bomb IPFS gateway operators with DMCA notices

I would take a look around for eastern european hosters that dont really care for western bs and pick up a vps from there to use as a reverse proxy. You can continue enjoying hetzner and still be insulated by putting it behind a different server that will get (and toss) any abusive takedown requests.

The lowendtalk forums are a good place to find any number of hosters that will fill your need.

_a9on BlackCat claims they hacked Reddit and will leak the data

I would bet on it being real. ALPHV/BlackCat is a known group. They hacked Western Digital back in March.

https://www.bleepingcomputer.com/tag/blackcat/

_a9on How Reddit became the enemy [video]

There is lemmy.ml, a federated reddit-like site that some people and communities have been talking about

https://join-lemmy.org/

_a9on The NixOS Foundation’s Call to Action: S3 Costs Require Community Support

I have quite a few servers with hetzner. I don't know what the exact criteria are but once you hit around 250TB/month per server with multiple servers for (likely) multiple months in a row then they will tell you to chill out or they will terminate. I've gotten it and I've seen a few others on lowendtalk mention it too.

I've been using hetzner for a couple years and have always used them for my high bandwidth services but I have only gotten that notice once despite being a very heavy user, and around the same time everyone else did around a year ago. Maybe they're gonna start to care? With all the price hikes and all. I ended up just getting more servers to level it all out.

_a9on ‘Massive’ Tesla leak reveals data breaches, thousands of safety complaints

It is absolutly not a weird metric. I (and a whole lotta other people) go to youtube to find real people testing and using real life things like keyboards, bikes, even other car brands, and so much more. I dont see how a person wanting to see how a cars self driving works on youtube is any different.