HNHacker News
TopNewBestAskShowJobs

monerozcash

393 karma · joined September 23, 2025

submissionscomments
monerozcash··on Using Hinge as a Command and Control Server
I mean, at that point, why wouldn't you just rely on a DGA? At least then you wouldn't be flooding block explorer sites with millions or potentially tens of millions of requests per day for your C&C traffic.

Essentially the exact approach you propose has been attempted in far cleverer ways, it did not work very well.

monerozcash··on Using Hinge as a Command and Control Server
I'm not 100% sure I understand what you're saying, but I guess you're asking how this could be censored?

> you would have to extract the keys from the malware

Yeah? That happens all the time. If you're designing mechanisms like this, it's presumably specifically against adversaries which are doing exactly that.

> you would then have to implement the logic and announce it - then rely on blockchain exploreres actually using that data to block addresses in real time.

Someone would only have to do this once and all your bots would be gone.

Usually the whole point of these mechanisms is C&C resilience, and usually that only matters for really big botnets which face co-ordinated attacks.

Any good C&C system for a bigger botnet would seek to eliminate all meaningful external points of failure for C&C. Using a block explorer, or HN comments, does not achieve that.

monerozcash··on Using Hinge as a Command and Control Server
There are much lighter alternatives though, why would you want to bother with cryptocurrencies when you could just use DHT?

I mean, even just shipping a Tor client embedded in your malware seems like a much better idea.

>just rely on explorers to query your own wallet

This kind of defeats the point, you get exactly 0 censorship resistance like this.

monerozcash··on Anna's Archive loses .org domain after surprise suspension
For what it's worth, that doesn't seem to ever have worked.
monerozcash··on California residents can now request all data brokers delete personal info
> physical address

Not unique to a person

> email address, phone number

Also often not unique to a person, although email addresses probably tend to have much longer lifespans as identifiers than phone numbers.

If the idea is to have a true opt-out system, it's really really difficult to implement given how these systems work.

If you look at the data provided by services like accurint, you'll frequently see the same SSNs used for decades by multiple different individuals, often with IDs from different states with the same name and DoB despite obviously being different people. With how the system works in the US, it can often be impossible for anyone to determine which physical person the SSN was actually originally assigned to.

Same obviously applies to other identifiers you suggested, but even the seemingly good ones are not very good at uniquely identifying people.

monerozcash··on Anna's Archive loses .org domain after surprise suspension
That may be, but you can't just keep going to the same US court for warrants.
monerozcash··on Anna's Archive loses .org domain after surprise suspension
> Once they finally have a solid court order to seize domains, generally the rate at which they get seized accelerates greatly.

Given that most ccTLDs live in different jurisdictions, that's not really a huge problem.

monerozcash··on Using Hinge as a Command and Control Server
> I would have assumed that this function mainly migrated onto one of the popular blockchains with clients using one of thousands of available gateways for reading.

Why would you want to use blockchains for this? DHT has been used for distributed c&c for ages and is generally a much lighter option.

But no, P2P C&C is still not really typical. In practice, there's mostly not that much need for it. Also, FWIW, for practically all use-cases P2P C&C discovery is a vastly better option.

monerozcash··on California residents can now request all data brokers delete personal info
You could of course key on things like SSNs, but data brokers wouldn't be very happy about that because there are lots of SSNs tied to multiple different people.
monerozcash··on US captures Venezuelan leader, Trump says
[flagged]
monerozcash··on Trump says Venezuela’s Maduro captured after strikes
>Anyone who in 2025 still blindly believes what Donald Trump says is an idiot. And even if that were true, you'd still be an idiot for assuming that Trumps motivations are grounded in reality.

Oh wow, we're in 2026 already.

monerozcash··on Swedish man survived in snowed-in car for two months (2012)
Not really, no. You'd need an avalanche for that

Based on the pictures of the car, I can't even imagine how you'd get the car stuck there, much less get stuck inside the car.

This was a rural area, but he was a few hundred meters from a big road. Surely he could have just exited the car and walked there.

monerozcash··on GDI Effects from the PC cracking scene
Refreshing the page fixed that for me on Safari.
monerozcash··on Why your early 2000s photos are probably lost forever
I somehow doubt anyone has ever experienced this problem with the 2006 Motorola Razr
monerozcash··on VW is bringing physical buttons back to the dashboard with the ID. Polo EV
Yeah, I seriously doubt that there's a single car with which this would actually be difficult to accomplish.

Even if you can't pull the modem or the sim card (less common now) directly, you can certainly always find and disable the antenna connection.

Any decent shop will be able to do this for a reasonable price.

monerozcash··on Trump says Venezuela’s Maduro captured after strikes
To ... lose money?
monerozcash··on VW is bringing physical buttons back to the dashboard with the ID. Polo EV
I just pulled the antennas on both of those, I don't think there's an easily accessible fuse that wouldn't cut off a bunch of other stuff.
monerozcash··on Trump says Venezuela’s Maduro captured after strikes
>They have the largest global oil reserves.

So what? That's not very useful when getting said oil out of the ground costs more than you can sell it for, is it?

monerozcash··on VW is bringing physical buttons back to the dashboard with the ID. Polo EV
I've done this on a W222, a W223, a continental GT and an Urus. On each of those cars it was as easy as disconnecting the antenna, on none of them did I have to tear into the roof pillars.

I've never seen an antenna that was difficult to disconnect, on the super simple end you have something like the W222 where you can literally just pop out the antenna cover on the roof and just remove the antenna module inside.

>But this is usually not without consequences as well such as a perpetual error code display or the radio, navigation or entertainment functions stop working.

Well sure, I do have cars without GPS because I was lazy. Carplay still works fine, so can't really bother to do anything about it.

monerozcash··on VW is bringing physical buttons back to the dashboard with the ID. Polo EV
This doesn't seem like a particularly good reason to not buy a car. Either you need one or don't.

Removing network connectivity from basically any new car is trivial, often as simple as pulling an easily accessible fuse.

monerozcash··on US captures Venezuelan leader, Trump says
>> "The opposition has been very public in their lobbying for foreign intervention in Venezuela" is not an assumption, it is a direct reference to evidence

>... and is not the statement in question.

>The statement in question is your "they were invited in".

I think "they were invited in" inherently follows from the "lobbying for foreign intervention".

Unless you have some alternative explanation as to what the Venezuelan opposition could possibly have been pursuing during their extensive international lobbying tours, "they were invited in" is the simplest and most reasonable hypothesis.

The alternative is that they were just lobbying for fun and didn't actually hope to achieve any change in Venezuela, but that seems kind of silly.

monerozcash··on Why your early 2000s photos are probably lost forever
I didn't find AirDrop to work very well while trying to airdrop only 1TB of photos/videos from my phone to my MacBook, YMMV. Not only was it really slow, but occasionally it seemed to freeze and there weren't really any meaningful progress indicators.
monerozcash··on Trump says Venezuela’s Maduro captured after strikes
Less than 1% of global oil consumption.
monerozcash··on US captures Venezuelan leader, Trump says
> Yes it's a fact and not merely a commonly held view that Trump's campaign had Russian actors, but reasonable people still consider him President

Yes, because that in no way invalidates the election results.

I really don't see how this is in any way comparable or relevant.

> and not a puppet placed by Putin.

Trump being a puppet placed by Putin would not invalidate his presidency.

monerozcash··on US captures Venezuelan leader, Trump says
[flagged]
monerozcash··on Trump says Venezuela’s Maduro captured after strikes
Yes because the only reason Chinese government officials would talk with Venezuela is because China wants to spin up large-scale oil production there? Literally no other reason they could possibly be talking, right?
monerozcash··on Trump says Venezuela’s Maduro captured after strikes
It's not a narrative, it's a fact you can easily verify by accessing the internet using the device in front of you.

The idea that oil in Venezuela is particularly attractive to anyone is patently absurd. Crude oil prices are already at uncomfortable levels for producers with significantly higher margins, and the situation isn't going to get any better.

>and is starting a war over it

Anyone who in 2025 still blindly believes what Donald Trump says is an idiot. And even if that were true, you'd still be an idiot for assuming that Trumps motivations are grounded in reality.

monerozcash··on Sabotaging Bitcoin
>If one can mine a block with 3000 transactions (11-12 hashes to the header) in 10 minutes, one can mine a block with one transaction (1 hash to header) about ten times as fast.

Huh? Surely the attempts for both take exactly the same amount of time after you've initially constructed the block, you're calculating only a single hash for each attempt.

monerozcash··on The suck is why we're here
>This is why I have yet to use AI, and will probably never.

>AI. Is. Not. Useful.

Why waste time writing things like this? What's the point?

monerozcash··on Trump says Venezuela’s Maduro captured after strikes
Much of this stuff is incredibly easy to hide, hard to imagine that. Surely you'd want to have MANPADS distributed widely in preparation for a possible US strike too.
Page 1 of 14Next →