HNHacker News
TopNewBestAskShowJobs

bbbbb5

188 karma · joined November 27, 2022

submissionscomments
bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
No? Why would it?

The basic principle will be the same most of the time, you identify the thief and use legal measures to force them to return the funds.

bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
You can easily protect your hardware from all but the most determined adversaries with extensive physical access. Epoxy in ports, case intrusion detection and locked down boot chain. Use TPM2-totp for verified boot.

Your colo provider can be thoroughly owned, your adversaries can have physical access to the server for extended periods of time and still not be able to do anything because you've denied them access to any ports that'd allow DMA.

Lots of cheap DIY options for fancy case intrusion detection going way beyond that offered by mfgs. USB camera and some tape?

bbbbb5··on My experience with check fraud
>I can write a check in my home or office, put it in an envelope with a stamp, and put it in the outgoing post, all without going anywhere or paying anyone. I can complete the whole payment task in 5 minutes.

Is that better than logging into your online banking, making an instant transfer? No need to go anywhere or pay anyone.

bbbbb5··on My experience with check fraud
My Dubai, Hong Kong and Singapore banks have issued me cheque books. Clearly some people use them outside of the US, although I'm not quite sure for what.
bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
It is rather unusual to refer to USVI as just "the government" if you're anywhere outside of the USVI.
bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
Not only BEC, the recovery rate for ridiculously named authorized push payment fraud fraud (i.e. craigslist car scams) is also very low.

Reg E at least protects consumers from some banking malware, but still does not provide protections for phishing victims (despite new non-binding CFPB guidance)

bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
The same legal processes that can be used to recover funds stolen from your bank account or stocks stolen from your brokerage account can be used to recover cryptocurrency.

>When your crypto is stolen, the theft cannot be reversed, by design.

If someone sends you a phishing link, gets your info, logs into your online banking and sends all of your money overseas, that theft generally can't be reversed either. (You'll find that the CFPB recently updated their Reg E interpretation on this, but that interpretation isn't binding and directly contradicts decades of practice)

If you're a business and get hit by banking malware, you're similarly fucked.

bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
Can you find a credible source describing the malfunction in the first place? It's tough to find anything beyond "some footage unusable".

https://s3.documentcloud.org/documents/6553399/Indictment-ag...

The indictment states

>As confirmed by the video obtained from the MCC's internal video surveillance system, this was the last time anyone, including any correctional officer, walked up to, let alone entered, the only entrance to the tier in which Epstein was housed until approximately 6:30 a.m. on August 10.

I'd also note that the DOJ going after the jail guards is a pretty strong evidence against any conspiracy to murder Epstein.

bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
Yeah, my best guess is that he was owned for a while and the hackers managed to pivot into everything owns. The plan was probably to backdoor bitcoin core, but after luke-jr detected his server being compromised the hackers figured they were burned and decided to run off with whatever bitcoin they could get from him.
bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
You can definitely steal houses though. https://www.bbc.com/news/uk-england-essex-59069662 https://archives.fbi.gov/archives/news/stories/2008/march/ho... https://www.washingtonpost.com/local/public-safety/she-had-n...

You can also steal stocks. https://www.bleepingcomputer.com/news/security/us-charges-ha...

> The vast majority of wealth in developed countries doesn’t rely on physical security to maintain ownership

Indeed, it relies on far sillier things like hoping that nobody spends $100 on a fake ID and pretends to be you.

bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
In the twitter thread the OP links to.

https://twitter.com/LukeDashjr/status/1609683917644120067

You can easily browse through his recent tweets here https://twitter.com/LukeDashjr/with_replies

bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
> kept his wallet.dat on a server exposed to the internet

Luke has specifically denied this (before you posted your comment)

bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
Not necessarily SE, there's been tons of 0days exploited against stuff like WHMCS, Hostbill, Kayako and many other systems used by hosting companies to manage this kind of thing.

Colocation and epoxy in any relevant ports is the obvious way to avoid this.

bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
> Not for people of his status

Name one similar case.

> Look at Maxwell, currently in a reportedly 5 star prison for the elite like her.

She's a woman, it's not the same. Besides, Maxwell is in FCI Tallahassee which is far from a 5 star prison. It's not even a FPC.

Epstein wasn't going to have a nice life at club fed, he would've either have spent the rest of his life in the SHU or been repeatedly assaulted and eventually murdered by other inmates in gen pop.

> The CCTV just happened to malfunction at the time of his death. His cell was cleared of anything that could be used to commit suicide, and the autopsy report showed inconsistencies with his reported method of suicide.

The reality is that none of these things are true.

The CCTV did not "just happen to malfunction at the time of his death", the CCTV footage was eventually recovered and showed nobody entering the cell.

He had been taken off suicide watch and had bed sheets.

His autopsy report did not actually show inconsistencies despite a fox talking head telling you so.

bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
The differentiation was already made much earlier in this thread.
bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
I think that would be precisely zero people? Unless you're confusing New York state with the federal government?
bbbbb5··on “My PGP key is compromised, and at least many of my bitcoins stolen”
Inclined to agree here. Luke is going on about Intel ME backdoors on Twitter, but in reality there will be a far less crazy explanation for how he got owned.
bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
The AG who brought this suit was fired. Local media claims that it was over this suit. https://viconsortium.com/vi-government/virgin-islands-attorn...

I wouldn't read much into this, the content of the lawsuit seems pretty ridiculous.

bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
It's a bit weird to refer to the attorney general of the USVI as "the government", that's something you'd generally associate with the federal government.

Not only that, said AG was apparently fired by the USVI government for bringing this suit, probably because the premise is fairly ridiculous https://viconsortium.com/vi-government/virgin-islands-attorn...

bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
Right, but you were presumably not detained for more than a small amount of hours and not placed in pretrial detention?

The Speedy Trial concerns are completely different depending on if you're in government custody or not.

bbbbb5··on Tell HN: Did you know that you can help restore a person’s eyesight for $50?
>We estimate the proportion of cataract surgery patients who have bilateral blindness or severe visual impairment at 10-47% (more). We estimate success in converting blindness or severe visual impairment to moderate visual impairment of 80%-95% (more). We estimate the cost of surgery at $50-$100 (more). Hence, we estimate the cost per blindness or severe visual impairment reversed at $112-$1,250.124

Givewell agrees with the $50 figure.

bbbbb5··on The button on Canon’s image-stabilized binoculars
I'm way out of my depth with the ADF. A friend gave me an old rotating marine ADF receiver I've been playing with, but as it turns out I'm not gonna get that spinning fast enough for my purposes.

I've got the mathematics background to eventually get this working, but not the radio background to do so very quickly.

bbbbb5··on Xfinity Stream on Linux: A Tale of Widevine, ChromeOS, and a patched Glibc
> Wouldn't the only loss be from the re-encoding

Which is pretty dramatic, assuming you don't want absurdly large files.

Where do you see webrips in 2022? Looking on BTN, I only see webrips for public broadcast content that literally nobody cares about. Everything else is decrypted streams (WEB-DL).

The big p2p groups with WV keys are decrypting just about everything, scene groups desperate for a reason to exist after getting utterly outdone by the p2p crowd are releasing webrips of content nobody wants.

bbbbb5··on Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
Why do you think so? He seems to have had very little reason to not kill himself, prison is a tough place for sex offenders.
bbbbb5··on Xfinity Stream on Linux: A Tale of Widevine, ChromeOS, and a patched Glibc
Yes, all the files you see on torrent sites are decrypted using L1 keys extracted from a nvidia shield using a TrustZone exploit.

> they just don't publish the methods and devices they are using for that so they don't get patched.

Well not exactly, it's hard to patch this when the keys leak from a very popular device.

bbbbb5··on Xfinity Stream on Linux: A Tale of Widevine, ChromeOS, and a patched Glibc
This is pretty much inherently super lossy, so not a good bypass. You need to decrypt the actual WV stream for a good copy.
bbbbb5··on The button on Canon’s image-stabilized binoculars
It'd be easier to see this as strictly bad if speed traps were usually motivated by road safety, not revenue collection or discovering secondary crimes.
bbbbb5··on The button on Canon’s image-stabilized binoculars
I think you might be severely overestimating the risk, people doing these runs obviously do everything in their power to spend as much time on empty roads as possible.
bbbbb5··on The button on Canon’s image-stabilized binoculars
This has been a really fun project to work on during the weekends, definitely recommend it. Next step for me will be to get automatic direction finding working, hopefully will finish that during the next year.
bbbbb5··on The button on Canon’s image-stabilized binoculars
Obviously the binoculars are for the passenger, I don't think you'd be able to continue driving for very long otherwise.
← PreviousPage 2 of 5Next →