HNHacker News
TopNewBestAskShowJobs

spydum

3,493 karma · joined June 24, 2010

jack of all trades, master of one. i fix problems, and make things better.
submissionscomments
spydum··on Linode Security Incident
Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right?
spydum··on What was a Token Ring network?
My first exposure to networking was a 10base2 setup I got from a closing business. Setting that up to run an ipx/spx network which I could run doom/descent/quake on was my very first intro to networking. Was so cool to see computers across the room communicate back then. Something very satisfying about the way those coax connectors twist in and click.
spydum··on California farmers are struggling to sell grapes as demand for wine drops
yes different, but as with any fruit there is variety. muscadine grapes are huge and taste like candy
spydum··on Revealing the details of how OpenAI agents hacked Hugging Face
thats okay, probably was engineered by an llm, who thought GETs were always read only
spydum··on Android 17 is the first since 3.x to add new APIs without releasing to the AOSP
I think you could actually look at this via the OPPOSITE lense: OpenSource was good for companies before, because they got free code/bugfix/labor, which would have been expensive to produce themselves.

Now with LLM and agentic factories pumping out bugfixes/code, does the equation on opensource still look attractive to a for-profit company? Why give away that sweet source code?

spydum··on Warez: The Infrastructure and Aesthetics of Piracy (2021)
BitchX from a shell with a vanity hostname was a hard flex for sure
spydum··on Android 17 is the first since 3.x to add new APIs without releasing to the AOSP
Don't worry, we will fork and just repeat the pattern with new names! See you next time!
spydum··on A 32-year-old bug walks into a Telnet server
I know people seem to think nsa and other gov threat actors live in a land of zero days and advanced techniques... And to some degree, they sure do develop those and are able to leverage them.

However, from my point of view most targets are able to be compromised by poor configs, hygiene, well known and patchable vulns, or the more likely avenue: the humans operating the system.

spydum··on LG denies TV spying claims, says tracking and snooping concerns 'not true'
nielsen's ACR method is embedded into millions of devices and vendors. No need for a microphone, it's processing the audio signal being sent out. A microphone would be a wasted conversion..

(your car infotainment also likely has nielsen tech in it most likely, as they bought arbitron and gracenote)

spydum··on Fuck it, make it anyway
For some reason makes me think about replicators, and I found this article: https://columbusunderground.com/next-abundance-ds1/

There is plenty of others, but the idea of being post-scarcity of information creation/software seems akin to how Star Trek had replicators. They used them for sure, but there was still people who wanted to cook/create by hand, as an expression.

spydum··on I fixed a tractor using John Deere's self-repair service. Farmers aren't sold
Exactly, go look at Lucid/Tesla and a few others for examples of how the car is a brick without the manufacturers sekret unlock codes and calibration software. If they decide not to help, you are out of luck.
spydum··on Google has stopped pushing Git tags for some Android source code
isn't this just malicious compliance? not clear how this would violate GPLv2?
spydum··on AI fuels more than half of cybercrime in Africa as scams surge – Interpol
That was mostly Bayesian probability filters, followed by SPF and more recently DKIM.. Maybe you could consider the Bayesian filter databases being trained as ML, but I feel it's a far way from our typical AI/LLM surge
spydum··on AWS: Inaccurate Estimated Billing Data – $1.7 billion
I have bad news if you think banks are the pinnacle of cyber security practices...

Maybe some rare few are, but by and large they generally stink.

They tend to give that impression because they hire tons of auditors and panjandrum, to hassle their suppliers, but internally they are winging it like the rest of us.

spydum··on TLS certificates for internal services done right
this is all fine and good, if you are okay broadcasting your internal hostnames. I suppose it's a trade off some might make.
spydum··on Factoring "short-sleeve" RSA keys with polynomials
Kind of reminds me of https://lists.debian.org/debian-security-announce/2008/msg00...

Interesting they could not figure out pattern 1? Wonder if there is any additional metadata to point at a vendor or provider..

spydum··on Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?
Fully agree, the only downside is without a SOC2 you will be asked to fill out an insane 200+ questionnaire. Good news is you have all these great LLM tools you can do this work for you, and just check it over.
spydum··on Mythos is the best cybersecurity news in a decade
We are replacing those with AI agents anyways. It'll be AI agents all the way down!
spydum··on US special forces soldier arrested after allegedly winning $400k on Maduro raid
You could place a prediction bet probably.
spydum··on 5,200 holes carved into a Peruvian mountain left by an ancient economy
really? I feel absolutely assured that every ugly temporary code fix I put in place, will persist for eternity..
spydum··on Reverse engineering Lyft Bikes for fun (and profit?)
Believe it or not, straight to jail! Just kidding, great writeup. I know it's not groundbreaking, but does surprise me how many products don't bother with rate limiting controls.
spydum··on Ask HN: What are you working on? (January 2026)
Fascinating to see an outsized increase in "game" development compare to a year ago: https://news.ycombinator.com/item?id=43154065 (I'm sure someone could throw this into some llm analysis and prove it out, but a quick and dirty count of "game" between then two shows a 2x increase on roughly the same comment count).

I suspect has to do with having agentic coding assist for folks who would otherwise not have the means to develop a game, but now do.

spydum··on Comparing AI agents to cybersecurity professionals in real-world pen testing
In fact: https://wilgibbs.com/blog/defcon-finals-mcp/

Which makes me think: yes, llms can solve some of this, but still only some. It's more than a research tool, when you combine tools and agentic workflows. I don't see a reason it should slow down.

spydum··on Honda: 2 years of ml vs 1 month of prompting - heres what we learned
Ah ha! But now the complete lack of emdash and bullet pointed lists from antislop will be the tell! Riposte!
spydum··on Steam Machine
seconding this. I bought a SteamDeck OLED -- and it blows my mind more people havent heard about these. it's essentially a bad ass handheld laptop. yes it plays games great, but the OS side when you boot into desktop mode is quite capable - I spend more time on it than my home pc these days
spydum··on How much Anthropic and Cursor spend on Amazon Web Services
specific clarification: That was only Cursor's AWS bill. If they are using other providers, wasn't clear.
spydum··on Andrej Karpathy – It will take a decade to work through the issues with agents
2038 will be more significant
spydum··on YouTube seems to be down
I've never heard that, I think you may be thinking of Netflix and their edge storage appliances.
spydum··on UTF-8 is a brilliant design
https://www.sensitiveresearch.com/Archive/CharCodeHist/X3.4-...

Looks to me like serendipity - they thought 8 bits would be wasteful, they didnt have a need for that many characters.

spydum··on Kerberoasting
Yes you can enable specific encryption types for users. It's not super common, but it can be done.
Page 1 of 34Next →