HNHacker News
TopNewBestAskShowJobs

blackcatsec

147 karma · joined September 15, 2025

submissionscomments
blackcatsec··on I'm reluctant to verify my identity or age for any online services
Or in your scenario, understand the concept of 8.3 file names and why they existed, and when they were removed, and how :P
blackcatsec··on AI-generated art can’t be copyrighted after Supreme Court declines review
Thanks! That's one of them :) I had to look it up as it was bothering me. The other is "September" by Earth, Wind & Fire.
blackcatsec··on AI-generated art can’t be copyrighted after Supreme Court declines review
I'll distill it down into something you might understand a bit easier. On social media, such as Instagram, or Tiktok, you'll find a bit of a meme going around that shows the difference between an influencer video of a vacation destination and then a follow-up video from someone with their iPhone, often showing overcrowding of tourists, brown water where there was blue; with these videos often with a poor-sounding Recorder being played over them (I forget the song that it's attempting to play).

The difference between the "real" video and the "influencer" video is the artistry from the artist(s) involved. (And yes, top influencers often have a person or a team of people involved)

blackcatsec··on AI-generated art can’t be copyrighted after Supreme Court declines review
Because you're unable to understand art, honestly. Photography isn't just "taking a photo and making a grayscale image in Photoshop"; but rather a combination of a couple of different artistic expression styles that involve understanding how to use the tools you have (a camera, the lens, film or a sensor, and lighting) to capture an expression of an event. Technically speaking, a photo of a mountain isn't just a "photo of a mountain" that you would maybe throw into AI slop--but an actual, legitimate photo of a mountain and how it's captured and presented (no matter the post processing done) is an actual artistic expression of the capture of that mountain. Because absolutely nothing, nothing at all will capture actually standing there looking at the mountain. A photo is the best approximation, and sometimes doesn't even have to be, depending on what the artist wants to express with the image.

In short, your inability to understand photography doesn't justify the use of AI slop to prompt "give me a grayscale image of a mountain" and assume that it's the same thing as a human being taking an actual photo. They're not even close to the same thing.

blackcatsec··on Discord cuts ties with identity verification software, Persona
It's certainly amped up in coordination over the last decade with the mixing of the tech oligarchs and the traditional religious oligarchs.

What it reminds me of is the situation in Saudi Arabia. The religious elite allows the Saud family to rule all of the politics and economics of the government so as long as the religious elite have the ability to enforce religious law on the population. It's an unholy union of church and state and this marrying of those two in the United States should absolutely fucking terrify everyone.

blackcatsec··on Discord cuts ties with identity verification software, Persona
Let me reframe a bit on this one.

You are correct that it's not a distinctly organized group, but very loosely organized with people continually carrying the baton forward in the relay race to remove our rights. Each runner is going to be slower or faster than the previous one, but they're still running in the same direction.

A cornerstone of NCLB was to expand the funding for Charter Schools across the United States (rather than fund public education). And while these schools are supposed to be non-religious, a small provision of NCLB allowed parents to choose private, religious options if their schools fell behind (which, given the draconian testing expectations, made it pretty easy).

So maybe the NCLB Act took the long way around to get where we're at today, but it was still always headed in this direction as soon as it offered private schools as a funded alternative to public school, rather than investing in our public schools with our public funds.

On the larger issue of what you're saying, it can be difficult to distill the information down in a way that makes sense when all of it is a very complex web of people and power and ideaologies.

At the end of the day, it took 50 years, but they did succeed in getting rid of Roe vs. Wade eventually. The relentless pursuit of this effort which took 50 years of adaptation and pushing as hard as possible in every area without relenting, even when they hadn't succeeded in every direction, is what made this happen.

I expect no less from these further pushes now that we're over that hump. Maybe these efforts fail today, but they will continue to push where they can until they figure out ways in which they can succeed.

It's quite relentless and those of us whom are on the other side of this definitely need to recognize the threat for what it is. Which, to your statement, makes this so much more dangerous than if it were just a single headed hydra.

blackcatsec··on Discord cuts ties with identity verification software, Persona
Yeah I'm not sure many of the commenters realize that this is the targeted plan. They're already succeeding with over 20 (mostly Republican) states requiring age verification to access pornography.

The whole point of this plan is to then gate LGBTQ content behind the age gates, and then criminalize with extremely harsh penalties if teenagers somehow find a way around the age gates.

It's a slow process that's taking years and is slowly eroding our 1A rights, which is precisely how we've ended up in this mess to begin with. They didn't start with "Let's dissolve the Department of Education"--they started with "No Child Left Behind" and "mandatory testing in public schools".

No doubt they'll also age gate anything around women's health, including birthing and abortion information.

Oh, and every last one of these things will be felonies so they can strip away your right to vote in the process.

I'm sure at some point user-generated pornography like cam sites will also be outlawed.

blackcatsec··on Spain’s LaLiga has blocked access to freedom.gov
I mean there are an increasing number of states that are requiring age gating for pornography access for sites like PornHub. It's only a matter of time before that age gating expands to non-pornographic entities, which is the ultimate goal of the plan.
blackcatsec··on Loops is a federated, open-source TikTok
One of the unspoken parts of the open source social media movement is to put the 'social' back in the 'social media'. There has been a fine line between true user-driven content and centrally-controlled (and often authoritarian-lite) algorithms; with major players (advertisers, oligarchs, governments) putting their thumb on the latter half to ensure that everyone stays isolated, divided, and pacified.

Everything you called out is a symptom of that control: engagement baiting, algorithmic manipulation, censorship and suppression. Absent these items, social media can be an incredible force for good and a hopeful longer term future of more peace.

blackcatsec··on Trump's global tariffs struck down by US Supreme Court
I think you're misunderstanding at least a little bit here. The Constitution created separation of powers, but what it did not do is explicitly block a particular branch from either abdicating their duty or simply delegating their power back to the executive.

It's certainly an interesting situation that wasn't explicitly spelled out in the law. But as far as everything that's working, it's realistically all within the legal framework of the Constitution. There are procedures to remove an unfit President, sure; but there's no requirement baked into the Constitution that requires those parties to act upon those procedures.

In short, it's a whole lot of short-sightedness of the Constitution combined with willing participants across multiple branches of the government.

The problems unearthed and the damage being done will take decades to fix just our internal issues, and it's very likely we will never resolve our international problems.

I don't know what the future holds for the United States, but we are certainly going to be operating from a severe handicap for quite a while.

blackcatsec··on European Tech Alternatives
I think the depths of the answers here, particularly with China, are far beyond the scope of technical discussion and to be honest likely beyond the scope of European-specific tech needs. Just because the US did one thing a certain way, and China did it another way; doesn't mean Europe must follow either of those to be successful.

However, it is going to require public funds to achieve. A public/private partnership scenario is very likely at least the near to mid term future for European tech development. And the world can only stand to benefit.

Politically, nationalism is absolutely very bad and it's a shame the world is headed in this direction. This global distrust only serves chaos agents and accelerates us into another World War (if we aren't already in the early stages of one). I had hope that people would prefer to come together but it's unfortunately too risky with US politics.

blackcatsec··on AI is destroying open source, and it's not even good yet
I am very strongly convinced that the person behind the agent prompted the angry post to the blog because they didn't get the gratification they were looking for by submitting an agent-generated PR in the first place.
blackcatsec··on How often do full-body MRIs find cancer?
I think the point of the conversation is that if we take the predatory capitalism out of the way, using MRIs could potentially be a net benefit overall for everyone.
blackcatsec··on Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware
Yeah, Stuxnet was the absolute worst of the worst the depths of its development we will likely truly never know. The cost of its development we will never truly know. It was an extremely highly, hyper targeted, advanced digital weapon. Nation states wouldn't even use this type of warfare against pedophiles.
blackcatsec··on AI makes the easy part easier and the hard part harder
Exactly this. Everything I've seen online is generally "I had a problem that could be solved in a few dozen lines of code and I asked the AI do it for me and it worked great!"

But what they asked the AI to do is something people have done a hundred times over, on existing platform tech, and will likely have little to no capability to solve problems that come up 5-10 years from now.

The reason AI is so good at coding right now is due to the 2nd Dot Com tech bubble that occurred between the simultaneous release of mobile platforms and the massive expansion of cloud technology. But now that the platforms that existed during that time will no longer exist, because it's no longer profitable to put something out there--the AI platforms will be less and less relevant.

Sure, sites like reddit will probably still exist where people will begin to ask more and more information that the AI can't help with, and subsequently the AI will train off of that information; but the rate of that information is going to go down dramatically.

In short, at some point the AI models will be worthless and I suspect that'll be whenever the next big "tech revolution" happens.

blackcatsec··on U.S. jobs disappear at fastest January pace since great recession
Sort of. I've done a lot of thinking about this one, and realize that it's really not just "one person" but a very large team of individuals, along with the "politics" of everything. If the President brings on a good staff, makes solid cabinet appointments, and they themself being a singular large part of the legislative process in modern years--given that it's usually fairly difficult to get 2/3rds of Congress to agree on anything--you can see the President actually has significantly more influence than you'd think.

In addition, it's the circles that person runs in and the circles that person's people run in. Do you think judge or cabinet appointments are decided on by one person? Sure, the President is a figurehead in this position and ultimately has to say yes or no, but there's a large pool of candidates out there and it's up to the staffers, maybe friends, maybe people in the know to propose those people to the President.

So while on paper the President doesn't, or shouldn't have that much power--in actuality with our current political process it's certainly much more.

Now, that said, just like the billionaires--they can only control so much. At least in the United States, there are competing interests even among the wealthy class, and sometimes shit just sort of happens--like a meteor killing the dinosaurs....or the release of decades of e-mails, videos, documents, and communications surrounding their pedophile behavior on a secret island in the Caribbean.

blackcatsec··on How not to securely erase a NVME drive (2022)
By default, yes. But it is possible to enable Bitlocker to use a SED directly.
blackcatsec··on English professors double down on requiring printed copies of readings
I never understand anyone's push to throw around AI slop coding everywhere. Do they think in the back of their heads that this means coding jobs are going to come back on-shore? Because AI is going to make up for the savings? No, what it means is tech bro CEOs are going to replace you even more and replace at least a portion of the off-shore folks that they're paying.

The promise of AI is a capitalist's dream, which is why it's being pushed so much. Do more with less investment. But the reality of AI coding is significantly more nuanced, and particularly more nuanced in spaces outside of the SRE/devops space. I highly doubt you could realistically use AI to code the majority of significant software products (like, say, an entire operating system). You might be able to use AI to add additional functionality you otherwise couldn't have, but that's not really what the capitalists desire.

Not to mention, the models have to be continually trained, otherwise the knowledge is going to be dead. Is AI as useful for Rust as it is for Python? Doubtful. What about the programming languages created 10-15 years from now? What about when everyone starts hoarding their information away from the prying eyes of AI scraper bots to keep competitive knowledge in-house? Both from a user perspective and a business perspective?

Lots of variability here that literally nobody has any idea how any of it's going to go.

blackcatsec··on Microsoft forced me to switch to Linux
The articles surrounding the insider builds gaining "ads" are from 2024--now 1.5 years ago. So whatever was implemented is in the OS at this point--particularly items that showed up in the "Beta" channel of Windows. There's nothing new or current surrounding new ad placement on Windows except some Copilot items throughout 2025, if you consider copilot an "ad" and not a useful tool similar to Notepad, or Office.

The TPM2 requirement (and kind of by extension the IOMMU requirement, which is the one itself that bit most people) has significantly more benefits than "DRM" or "planned obsolescence". For one, did you know that TPM1.2 didn't include SHA2? Would you be okay relying on SHA1 hashing in 2026 to be used for digital signing? Of course you wouldn't. If I told you today to go generate an X.509 certificate with SHA1 you're going to look at me funny. Did you know it also didn't include ECC? Also much more useful in this day and age for cryptographic speed. There are many other features I don't feel like digging into at the moment, but you get the point.

I would counter that the downstream requirement for the IOMMU (useful for Hypervisor Enforced Code Integrity), in which Windows itself is broken up into "Virtual Trust Levels" (VTL0, VTL1, and I think there are some newer ones now as well); is extremely useful for securing early parts of the platform boot.

Or did we collectively forget about the early rootkit era of Windows XP from 2005-2010 when running with legacy/MBR boot mechanisms?

Establishing a trust boundary as early as possible to force possible attackers into userspace as much as possible (where it can be more easily removed and remediated) is significantly important in modern operating system security--and this goes for any platform: MacOS, Windows, Android, iOS, or Linux.

Apple, Google, and Microsoft have some form of integrity control over their platforms along with dedicated security chips. Short of some exploits, the most common vector to get into Windows' early boot process is to steal or abuse code IHV kernel driver signing certificates; or in some cases, be maliciously issued one from Microsoft (lol, now THAT is indeed a problem, but a tough one).

This is just part of modern platform security at this point so I don't really see the issue.

In addition, TPM2 offers significantly more storage and

blackcatsec··on Microsoft forced me to switch to Linux
I think it's critically important that when arguing on the internet you bring data driven information and not emotions. Although I know for many people, particularly in tech, operating system choice is an extremely subjective, emotional-driven, and personal, almost religious decision-making process.

But I like data. And that's what I'm going to stick with. Your experience is not my experience.

That said, I distinctly remember back in the Windows 98 days (inarguably one of the most highly regarded versions of Windows ever released which had extreme staying power throughout the Windows XP era); they used to automatically include the Channel Bar to the right on the "Active Desktop". This bar included links to Disney, AOL, MSN, MSNBC, among other items. No doubt Disney paid good money to be default installed and opened on every Windows PC of the time.

So it's not like including some level of advertising hasn't been a precedent for 30 or so years.

blackcatsec··on Microsoft forced me to switch to Linux
As a reply to this, because it's important. Searching does indeed bring up ads, however, they're to the right and only if you do not have whatever it is you're searching for installed.

I know this is splitting hairs, but I like data and not emotional driven decisions. When I tap "Start" and search for "World of Warcraft", which is installed on my PC, the very first item is the shortcut to WoW on my PC.

In terms of Start Menu Zones (as I'm calling them), on the Left is the "best Match", which links to WoW on my PC. The next zone beneath that is "Apps", which are the multiple permutations of WoW on my PC, and beneath that is "Search the Web", which offers a few search terms related to WoW. Beneath that is a "Store" link to WoW, which links to the Microsoft Store. The right zone of the Start Menu offers a menu of what I want to do with the app: Open, Run as Administrator, Open File Location, Pin to Start, Pin to Taskbar, or Uninstall.

This is the same behavior on all programs I have installed on the PC: I can type "Steam", same behavior. Discord, same behavior, Signal, same behavior, Battle.Net, same behavior, etc.

Now, for items that are not installed on my PC, for example, Half Life. Since I don't have it on my PC, it immediately wants to only search the web. On the right zone, which on installed apps shows a menu of options, this now shows a mini Bing search window which basically has sponsored content at the top with ebay links to Half Life editions (also holy crap those are expensive).

So for applications not installed on my PC? Yeah, it's showing me some search bing ads. For every application installed on my PC? It's not showing any ads.

From what I'm reading, it seems many people have a workflow that leverages the start menu pretty heavily. My workflow since the early days of XP has never included the start menu. In Windows XP, I used the Quick Launch Bar and always had a 2nd row of icons above my taskbar for which I used to open apps. When Microsoft changed this, I simply pin everything to the taskbar instead and use that. The only time I use the start menu to search and load something is usually if I want to CTRL+SHIFT+ENTER to run whatever that is as Administrator. And that workflow has never once "tricked" me into loading any ads, websites, bing searches, or anything. It has always, for over a decade including on Windows 11 25H2 done exactly what I was expecting every single time.

So perhaps our workflows differ for which this is an annoyance for you, but I cannot replicate your specific problem that you mentioned.

blackcatsec··on Microsoft forced me to switch to Linux
Again, let's clarify here.

Microsoft implemented, in its Beta Windows Insider Channel in 2024, ads in the "Recommended" section of the Start Menu. The very section I just described pretty plainly how to turn off.

I mean I don't understand why everyone is so puffed up about this. You read some internet headline and start screeching about it on social media as if it doesn't take 2 seconds to literally turn off.

blackcatsec··on Microsoft will give the FBI a Windows PC data encryption key if ordered
You are conflating two different things, however.

There is a fundamental difference between the executive branch "requesting" information and the judicial branch issuing a warrant/subpoena. In the former, it is perfectly legal for Apple to say piss off. In the latter, it is absolutely not.

The US Government issues National Security Letters to every tech company operating in the United States, and it is legally mandated that companies comply with these subpoenas. So if Apple or Microsoft receive an NSL, the US Government is going to get your information. This includes anything you've uploaded to iCloud and anything in your Microsoft account/OneDrive/Bitlocker recovery keys/etc.

blackcatsec··on Microsoft forced me to switch to Linux
For those that want to remove items, You can quickly disable these options by going into Settings > Personalization > Start and turn off "Show recommendations for tips, shortcuts, new apps, and more".

It's like a 10 second fix and basically everything is gone.

blackcatsec··on Microsoft forced me to switch to Linux
I do not have ads in my start menu, and no, I didn't "debloat" my PC. This is a base install where I flipped a couple of settings in the start menu options.
blackcatsec··on Microsoft forced me to switch to Linux
I honestly don't understand the hatred that Microsoft gets for most of the work they're doing in Windows. As I've stated before, most 'problems' people ultimately have are either configuration issues or hardware issues. And I still stand by this even as I've had issues over the years here or there.

I think the most recent 'production' Windows issue I've had was OneDrive failing to recognize it was syncing my data even though it was syncing. The status symbols for the files and folders wasn't showing up. But that's about it.

My gaming desktop is stable, my PC is rock solid, I run VMs on it (game servers, dev/test environments), and overall just absolutely 0 problems with Windows or my OS at all.

I do, however, have hardware issues semi often. One of my monitors doesn't turn off its backlight, for example. I've had Razer devices just flat out quit on me over the years (multiple Razer mice, at least a couple of Nagas, etc.).

I contend that most people would do better with Windows if they just didn't mess with it (don't run any of those tools proclaiming to "debloat" your OS), and make sure you read the hardware compatibility list of your systems REALLY hard. Incompatible RAM can cause significant problems, a lot of which is completely avoidable if you just read the RAM QVL.

The only thing that I wish vendors would do more is work closer with Microsoft to provide BIOS updates over Windows Update. But, most of these motherboard IHVs are absolutely terrible about doing BIOS updates anyway and require specific mechanisms to keep going correctly. This is in contrast to the Enterprise/Business devices released by HP or Dell which have a usually solid BIOS update track. And again, the only issue I've ever had there was incompatible RAM.

blackcatsec··on Microsoft will give the FBI a Windows PC data encryption key if ordered
That was before Tim Cook presented Donald Trump with a gold and glass plaque along with a Mac Pro.

We live in far different times these days. I have no doubt in my mind that Apple is complying 100% with every LE request coming their way (not only because of the above gesture, but because it's actually the law)

blackcatsec··on Microsoft will give the FBI a Windows PC data encryption key if ordered
Firstly, Apple does not refuse such requests. In fact, it was very widely publicized in the past couple of weeks that Apple has removed Advanced Data Protection for users in the UK. So while US users still enjoy Advanced Data Protection from Apple, UK users do not.

It is entirely possible that Apple's Advanced Data Protection feature is removed legally by the US as well, if the regime decides they want to target it. I suspect there are either two reasons why they do not: Either the US has an additional agreement with Apple behind the scenes somewhere, OR the US regime has not yet felt that this was an important enough thing to go after.

There is precedent in the removal, Apple has shown they'll do the removal if asked/forced. What makes you think they wouldn't do the same thing in the US if Trump threatened to ban iPhone shipments from China until Apple complied?

The options for people to manage this stuff themselves are extremely painful for the average user for many reasons laid out in this thread. But the same goes for things like PGP keys. Managing PGP keys, uploading to key servers, using specialized mail clients, plugging in and unplugging the physical key, managing key rotation, key escrow, and key revocation. And understanding the deep logic behind it actually requires a person with technical expertise in this particular solution to guide people. It's far beyond what the average end user is ever going to do.

blackcatsec··on Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
To be fair, which makes it even more ominous with Apple. At least Microsoft explicitly informs you during setup and isn't trying to hide it behind some vague language about "resetting password".
blackcatsec··on What has Docker become?
I truly do sometimes detest the open source community's often outright hostility towards monetization of software. People gotta eat.
← PreviousPage 2 of 3Next →