Hacker News Reader

Comment by roastedpeacock | Hacker News Reader

This WIRED article[1] references a release of tools and information about the research on GitHub[2] however it 404s. Hope that is not being censored.

[1] https://www.wired.com/story/starlink-internet-dish-hack/

[2] https://github.com/KULeuven-COSIC/Starlink-FI

View on HN

DEF CON goon here. Sometimes our presenters provide the link to a private GitHub repo to the press in advance of their presentation. After the presentation they make the repo public.

:-)

Might be better to encourage placeholder repository to avoid concerns from the public such as this but as long as the presenter ultimately controls the namespace it is not really at issue.

Microsoft and the US military ultimately controls the namespace on GitHub.com.

What's the relationship between the US military and github?

They get to dictate to Microsoft what is and isn’t allowed on github.com. Microsoft will not fight a 1A battle against one of their biggest and oldest partners.

Not only are they one of their largest customers, they have physical control over the place where Microsoft and GitHub staff live and work.

... you mean the US, possibly allies? Not only is that broad enough to be meaningless, I don't know offhand of any military going to someone's house to require them (by force I assume) to change their GitHub repo name. What are you getting at?

I'm getting at the fact that Wikileaks can't have private GitHub repos that are actually private.

This bothered me yesterday when news broke. I'm surprised that more people are not discussing the lack of follow-on information here.

archive.org only ever captured 404s for that page. i wonder if it was a typo in the article. does Starlink use TI’s SimpleLink? because there’s a very similarly-named repo doing similar fault injection here: https://github.com/KULeuven-COSIC/SimpleLink-FI

Wondered that too but the presentation slides make no mention of anything related to SimpleLink. Than again there could be more under the hood than just what the slides themselves describe. Close but probably not a match.

Repository is live now. Commit cbde04c9bc45ea54cc509a65247c62a82f64bca9

From README

> We are not providing exact glitch parameters. The presentation slides contain various hints and the parameters will vary depending on how you patch the firmware.

Some may see this as capitulation towards Starlink business interests but a more benign reason could involve the glitch parameters varying based on various hardware factors and as stated the execution of firmware as well.

Should've uploaded the repo to IPFS or Radicle.

Reply on news.ycombinator.com