2,329 karma · joined July 30, 2025
I'd argue that complexity is not even the right word to describe what the author describes. Thickness or depth is more accurate.
> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.
How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.
The only case where this has much to do with email security is when an email server is breached.
This whole article is a lot of words around very little information.
You won't get this, otherwise we had tons of LLM written photoshop alternatives already. And if it would work, that would be a good thing.
> I walk to the local phone shop and get a replacement sim for my number with a few of bits of ID and I regain sms access.
Or someone else gets access to your SIM by sim swapping you, which is not as stupidly easy as it used to be, but still SMS remains insecure. Building an authentication system on it is just a bad idea from virtually every angle.
TOTP is portable and can be backed up.
I went a little bit off on a tangent, the stupidity of SMS 2FA is a pet peeve of mine.
No, because legitimate users do not just use residential and "commercial" IPs. Like me, right now
Your top level comment is also AI which is against the HN guidelines. Also it is allowed to post your own works, but they should only be a small fraction of your submissions. Please do not use HackerNews primarily for self promotion.
I suggest you read the guidelines: https://news.ycombinator.com/newsguidelines.html
911 calls answered by AI in New Orleans [video] – 2026-08-11 – https://news.ycombinator.com/item?id=49258252
New Orleans is testing Carbyne’s AI-powered Emergency Call Triage software – 2026-08-07 – https://news.ycombinator.com/item?id=49204546
Another one got caught today, it's all over the papers. "Teenager Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"... Damn kids. They're all alike.
But did you, in your three-piece psychology and 1950's technobrain, ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him, what may have molded him? I am a hacker, enter my world... Mine is a world that begins with school... I'm smarter than most of the other kids, this crap they teach us bores me... Damn underachiever. They're all alike.
I'm in junior high or high school. I've listened to teachers explain for the fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I didn't show my work. I did it in my head..." Damn kid. Probably copied it. They're all alike.
I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me... Or thinks I'm a smart ass... Or doesn't like teaching and shouldn't be here... Damn kid. All he does is play games. They're all alike.
And then it happened... a door opened to a world... rushing through the phone line like heroin through an addict's veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found. "This is it... this is where I belong..." I know everyone here... even if I've never met them, never talked to them, may never hear from them again... I know you all... Damn kid. Tying up the phone line again. They're all alike...
You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us willing pupils, but those few are like drops of water in the desert.
This is our world now... the world of the electron and the switch, the beauty of the baud. We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and you call us criminals. We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good, yet we're the criminals.
Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.
I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... after all, we're all alike.
2. I'm a real user and I have to enable JavaScript and run arbitrary programs from untrusted websites to access them. One browser that I use doesn't even support JavaScript (w3m). Fortunately it is unaffected because it doesn't have the string "Mozilla" in its UA and Anubis lets every user without that pass to not hurt legitimate bots like search engine crawlers. As said Anubis is trivially bypassed. The only reason it isn't bypassed is because it's simply too irrelevant to the AI companies.
Writing is thinking. LLM writing makes authors worsr authors and even dumber people overall.
Also a calculator gives the same answer as a human (except for human errors where the calculator isa strict improvement). LLMs absolutely do not give the same output as humans.
Even ignoring all the rest, that is in fact not what fascism means.
Recommended reading:
https://paulgraham.com/writes.html
Writing is thinking.
In the end you do you, but personally I generally only bother to read things that someone else bothered to write; and so far that has heen an extremely good heuristic to distinguish what might be worth reading.
> If you're hiding something in "empty space" it won't behave like empty space when you try to fill it.
Yes, it will. It will overwrite the hidden data.
When you have a 1 TB drive that you encrypt with VeraCrypt using a hidden volume the following happens:
You have an outer decoy volume. This volume is 1TB in size and works like any other VeraCrypt volume.
You have a smaller, hidden inner volume with a different password. When you unlock this volume the following happens: Veracrypt tries to unlock the normal voume, but fails because the password is incorrect. It now tries to decrypt a secondary volume header at an offset. This header contains the layout for the hidden volume which is positioned inside the free space of the outer volume. So the position of the hidden volume is encrypted.
Now when you want to plant decoy files in the outer volume you actually do the following: While unlocking the volume you enable the option for hidden volumes and now you enter both passwords. So VeraCrypt knows where the inner volume is located and how large it is so it will not overwrite it. VeraCrypt will show the adjusted smaller size for the outer volume.
When you're in a situation where you are forced to give up your password: You tell them your decoy password. They open the outer decoy volume. It appears like any other VeraCrypt volume spanning the whole size of the disk. If they write any files to it that might overwrite parts of the hidden volume.
Notably all standard VeraCrypt volumes principally feature the option of hidden volumes. You cannot proof that a VeraCrypt volume does not have a hidden volume (short of it being full in the first place). The user base of people not using hidden volumes gives the plausible deniability to the people who do. Which is worth knowing as this can get you in trouble in certain scenarios.
There are some issues with this though:
SSD wear leveling and especially TRIM. You must not TRIM the blocks of the hidden volume, which can reveal it as it shall appear as free space that would usually be trimmed. So disable TRIM, which is suspicious in itself. Though TRIM also leaks information about file layout even for normal volumes, so there is some plausibility left. But it's not ideal. This is not an issue with HDDs (maybe with SMR though).
I don't remember exactly, but I think you can do statistical analysis on the layout of files inside the outer volume and deduct the existence of the hidden volume from this under certain circumstances. Essentially, in a normal volume the filesystem would have written this file to these blocks, but it didn't and chose other blocks instead. So there must have been a block layer translation that reroutes blocks from the hidden volume and these free blocks that should not be free must be the hidden volume. I'm not too sure that's really what it was about.
5$ wrench method. I suspect you are hiding certain information in this VeraCrypt volume. I torture you. You give me the password. The information is not in there. Either you do not have the information or you are lying and using a hidden volume. I continue to torture you for the second password on the chance that you're using a hidden volume. This is what I was about earlier when I said VeraCrypt can get you in trouble.