HNHacker News
TopNewBestAskShowJobs

ColoursofOSINT

427 karma · joined June 12, 2023

submissionscomments
ColoursofOSINT··on Kagi now accepts PayPal, EUR and Bitcoin payments
>Yes, you guessed it, it can be traced [2].

No really, bitcoin transactions can be seen?

That's literally one of the main points of a blockchain.

OMG, 8t9f8ibsfousghs sent 1 btc to 8o7tagoraiho8argf! Lmao, this tells you nothing about the wallet owner.

That tells you nothing about to whom it's going, and even if you could that why I:

> 2. I coinjoin the bitcoin

Going to skip over this again? No answer, buddy?

> [2]

Lmao, your own source, says "flow of funds from a Bitcoin ATM to.... Bitcoin mixing service known as Bitcoin Fog".

And that's where the trail ends. Seems that the mixers and coinjoins are working. Read your own source before posting. Even with KYC, it doesn't matter.

> India Singapore UK

Mixers and coinjoins were made for these situations in mind.

Still has no impact on me.

> [1]

Owners were aware fraud was going on and let it continue. Remind you of anyone [1-6]? I guess you shouldn't touch any sort of bank. They've been known to collapse and commit fraud on a massive scale. [7]

You can expect me to be laughing when another bank crash happens and you'll be sprinting to the nearest ATM.

> > If not crypto, giftcards will work in a pinch (personal, smaller than $5,000) [2].

> Except gift cards don't work at scale.

Source? And they do. [8] $233 million/year in one country. [9] And that's just social engineering, could do far more if there is an actual reason to pay.

> There is no upside to crypto at all

I can pay for the services I already listed in an above comment, without handing over my information to be breached or sold.

Are you a bot? We already had this conversation. You claimed that:

>>>>> Nobody accepts Monero, Bitcoin in the real world

I listed a few for you.

>>>> Kagi, vps providers, domain hosters, non-profits, email providers...

To which you said:

>>> The internet is not the real world.

And then hid from my response about

>> Tell that to Google, Microsoft, Apple... etc [4]. Welcome to the age of technology.

And once again you are hiding from:

>And your response, for the third time: Nothing!

Lmao, I can just use the same arguments since you are so scared of them!

This is the third time you have skipped over the same point because you are wrong.

Not to mention the other ones which I already pointed out.

Going to keep running?

[1]: https://www.bloomberg.com/news/articles/2019-02-20/swedbank-... [2]: https://www.theguardian.com/business/2019/apr/17/deutsche-ba... [3]:https://www.nytimes.com/2005/11/09/business/bank-settles-us-... [4]: https://archive.nytimes.com/dealbook.nytimes.com/2014/06/30/... [5]: https://www.justice.gov/opa/pr/bank-america-pay-1665-billion... [6]: https://www.investopedia.com/stock-analysis/2013/investing-n... [7]: https://en.wikipedia.org/wiki/List_of_banking_crises [8]: https://www.forbes.com/advisor/personal-finance/gift-card-sc... [9]: https://www.rd.com/article/gift-card-scams/

ColoursofOSINT··on Verson 1 – Developer Excuses API
Some of these are great:

1. "That worked perfectly when I developed it" 2. "I had to do the project backwards as people demanded results out of order"

Reload the page for a new excuses.

ColoursofOSINT··on Kagi now accepts PayPal, EUR and Bitcoin payments
For all your arguments, not a single source cited, real convincing (that's sarcasm, just so you understand). Also, got to love how you skip over and change your arguments as they are proved wrong; moving the goal posts much?

> > because the coming regulations will compel those exchanges working with crypto to force you to use KYC to cash out your cryptocurrencies, even your cold wallet isn't safe from this.

> Dam bro, didn't know that the world government mandated this. Also "coming regulations" - So its still private. Thanks for the conformation!

And your response: Nothing!

> Significant volatile prices and regular manipulative depeggings of stablecoins

> Ok bro.

And your response: Nothing! Good thing I use only BTC and Monero!

>> You're also ignoring the truth that they aren't private, so my point still stands and you know it.

>Private is defined as "Secluded from the sight, presence, or intrusion of others."

>I buy my bitcoin with cash, no kyc, and I coinjoin it. That's private.

And your response: "using card to buy bitcoin...isn't private". Dam nice reading comprehension skills.

> > You even admit it is at the very least "pseudonymous"! Thanks for the support!

> So you can be traced. Not private at all, exactly.

Source? Or are you just taking out of your ass? Here are my steps, explain, step-by-step how you would track me down:

1. Buy Bitcoin from a BitcoinATM with Cash, no kyc and there are no cameras in the places I visit. I scan my QR code (which is off to the side, so no face), give it cash and its sent to my new wallet

2. I coinjoin the bitcoin

3. Profit

Go ahead, with sources.

> Crypto ATMs are also not private and shutting down starting with the UK and other countries. This is all due to KYC / AML requirements, pushing you to inevitably do the above.

Sources?

Also I don't live in Europe so not a problem. Also, even if I did KYC, coinjoin and cryptocurrency tumbler would take care of that.

Explain how you would defeat this, with sources.

> > How do you pay for a cash ransom when someone is holding you hostage? > Oh wait, you can do it normally.

> Answering your own question because you know you can't answer mine is a nice deflection.

If not crypto, giftcards will work in a pinch (personal, smaller than $5,000) [2]. And for larger amounts, what I already cited works. [1]

> SEC v Ripple case isn't finished at all

Thanks, Sherlock. Never said it was or wasn't.

> No matter how hard you try and cut corners or ignore it, crypto will be brought under regulations, the US is just slower than most other countries.

Any sources? Also, don't live in the US.

>> The internet is not the real world

> Tell that to Google, Microsoft, Apple... etc [4]. Welcome to the age of technology.

And your response, for the third time: Nothing!

Stop making stuff up. Cite your sources.

[1]: https://www.ftc.gov/news-events/news/press-releases/2021/12/...

ColoursofOSINT··on Kagi now accepts PayPal, EUR and Bitcoin payments
Bro, can you read?

I said

> I buy my bitcoin with cash, no kyc

and you write:

>> using card to buy bitcoin ... isn't private

I don't use my card to buy bitcoin, that's the point. You've got the attention span of a tiktok addict.

> So you can be traced. Not private at all, exactly.

See my privacy argument that you keep ignoring. LMAO. Almost anything can be tracked, but it's well within my threat model, so private against anything but the most well funded attackers is private. Your argument is; "Why have a door? Someone could just use a tank to knock it down".

Welcome to threat modelling, buddy. We're glad to have you!

> So someone volunteered to get mugged after their cash got stolen?

Did you have a stroke while writing this? Take a break from the internet, my dude, your mental abilities are declining with every comment.

During a mugging your cash gets stolen, I was making sure you understood that, just in case. It now appears you really need it all spelled out to you.

> How do you pay for your crypto ransomware to someone quickly overseas when the scammer is telling you to use crypto?

How do you pay for a cash ransom when someone is holding you hostage?

Oh wait, you can do it normally. [1]

> coming regulations will compel those

Uh... ok dude [2][3].

> The internet is not the real world

Tell that to Google, Microsoft, Apple... etc [4]. Welcome to the age of technology.

[1]: https://www.nytimes.com/2014/07/30/world/africa/ransoming-ci... [2]: https://www.reuters.com/legal/litigation/sec-loses-bid-rippl... [3]: https://www.cnbc.com/2022/04/14/ripples-court-battle-with-se... [4]:https://intheblack.cpaaustralia.com.au/economy/how-much-is-t...

ColoursofOSINT··on Kagi now accepts PayPal, EUR and Bitcoin payments
Strong butthead energy.

> because the coming regulations will compel those exchanges working with crypto to force you to use KYC to cash out your cryptocurrencies, even your cold wallet isn't safe from this.

Dam bro, didn't know that the world government mandated this. Also "coming regulations" - So its still private. Thanks for the conformation!

> Significant volatile prices and regular manipulative depeggings of stablecoins

Ok bro.

> You're also ignoring the truth that they aren't private, so my point still stands and you know it.

Private is defined as "Secluded from the sight, presence, or intrusion of others."

I buy my bitcoin with cash, no kyc, and I coinjoin it. That's private.

> Nobody accepts Monero, Bitcoin in the real world

Kagi, vps providers, domain hosters, non-profits, email providers...

> it is pseudonymous

You even admit it is at the very least "pseudonymous"! Thanks for the support!

Also:

> So companies and small businesses have voluntarily participated in crypto phishing and crypto ransomware scams?

Oh my god! Someone got mugged and their cash got stolen. Clearly the only solution is to ban all cash!

ColoursofOSINT··on Money is pouring into AI. Skeptics say it’s a ‘grift shift’
> it's not useful for anything else other than grifting.

I've paid for my domains and vps with crypto, I can pay for my search engine, send donations to non-profits I support, so there's your use case. I don't even have to hand over my personal banking information, so no worrying about data breaches, another use case!

I'm sure you would consider paying for a legal service to be a legitimate use case.

> monkey jpeg brigade

Whoa, name calling, well that always shows the strength of your argument.

> who feel that the artificial demand from criminals laundering money and posing as legitimate crypto investors is a feature

Didn't realize I was a NFT supporter by calling out your contradiction. Oh, and a straw man too, always nice to see. Also, technology can be abused? Who would have thought?

Its a shame that primary users are the criminal masterminds who've apparently become art connoisseurs of monkey jpegs.

I don't seem to remember supporting "laundering money". Do you mean in the same way that banking at HSBC, BYN Mellon, Deutsche, Swedbank, Danke and others is supporting money laundering? [1-6] Or how banking with BoA is supporting fraud? [7]

Although its nice to see that you believe in "legitimate crypto investors".

1: https://archive.nytimes.com/dealbook.nytimes.com/2014/06/30/... 2:https://www.bloomberg.com/news/articles/2019-02-20/swedbank-... 3:https://www.acfcs.org/news/419424/Danske-Bank-reveals-Estoni... 4: https://www.nytimes.com/2005/11/09/business/bank-settles-us-... 5:https://www.theguardian.com/business/2019/apr/17/deutsche-ba... 6:https://www.investopedia.com/stock-analysis/2013/investing-n... 7:https://www.justice.gov/opa/pr/bank-america-pay-1665-billion...

> If the only ones using it are criminals, then it's no longer useful even for them, because the whole point is to claim legitimate crypto profits.

Uh, sure? Sounds good man.

ColoursofOSINT··on Money is pouring into AI. Skeptics say it’s a ‘grift shift’
Nice contradiction.

> Crypto was never anything else than a grift.

Ah, alright then, I guess it's not useful for anything.

> evade financial regulators

Sounds useful to me!

> enable large scale movements of shady money.

Large scale movements of money? Super useful!

ColoursofOSINT··on Privaxy: Next generation tracker and advertisement blocker
> "can not be used to implement a MITM"

Anything is possible if you give the permissions and certs.

The Charles proxy CAN act in as a MITM, but you have to install Custom Certs on your computer (requires admin permissions).

This is similar to how a password set by someone else won't protect your documents from that person. Don't let them set the password on your computer.

"In Charles go to the Help menu and choose "SSL Proxying > Install Charles Root Certificate". Keychain Access will open. Find the "Charles Proxy..." entry, and double-click to get info on it. Expand the "Trust" section, and beside "When using this certificate" change it from "Use System Defaults" to "Always Trust". Then close the certificate info window, and you will be prompted for your Administrator password to update the system trust settings." [1]

1: https://www.charlesproxy.com/documentation/using-charles/ssl...

ColoursofOSINT··on Firefox Relay – secure random email and phone number masks
According to the privacy policy, they are using Twilio for "receiv[ing] your phone number, your phone mask, and the phone numbers that you exchange phone calls and text messages with. Twilio also receives the content of text messages you send and receive".

Wonder how they are going to get around VoIP number blocking.

https://www.mozilla.org/en-US/privacy/subscription-services/

ColoursofOSINT··on Kagi Number of Users and Searches Stats
Interesting to see the drops on Fridays and Saturdays.
ColoursofOSINT··on Privaxy: Next generation tracker and advertisement blocker
> Seems like this is proof that it's not.

How so?

In order for this MITM to work, you must hand over the encryption certificates, so to block MITM, don't expose your private certs.

> I've never understood how/why encryption is the answer to man-in-the middle.

No encryption = Bob ---> Attacker (reads files) --> Alice

Encryption = Bob ---> Attacker (cannot read files) ---> Alice

ColoursofOSINT··on Apple supports right-to-repair bill
Yeah, as much as I hate how cynical he is, he is usually right.
ColoursofOSINT··on Apple supports right-to-repair bill
I posted this before, but...they have played this game before; creating RTR "friendly" programs and then forcing signing of strict NDAs, and requirements that leave repair shops worse then they would without the program. [1-4]

1: https://www.theguardian.com/technology/2023/may/18/we-are-lo...

2: https://www.howtogeek.com/894168/apples-self-repair-program-...

3: https://www.vice.com/en/article/qjdjnv/apples-independent-re...

4: https://www.theregister.com/2022/04/28/apple_selfservice_sla...

ColoursofOSINT··on 'We're Winning': Apple Formally Endorses Right to Repair Legislation
In their apple article on apple support RTR, they write, "This is a landmark shift in policy from Apple." [1]

It's not. They have played this game before; creating RTR "friendly" programs and then forcing signing of strict NDAs, and requirements that leave repair shops worse then they would without the program. [2-5]

Also, "It means, effectively, that consumers have won". Wow, I have never heard that before, only for it to fail or be false. Remind you of the New York bill which was kneecapped at "last minute by Gov. Kathy Hochul"? [6]

EDIT: LMAO, Rossman has of course called the whole thing fishy: https://www.youtube.com/watch?v=0tB3t7xGWjk

1: https://www.404media.co/apple-endorses-california-right-to-r...

2: https://www.theguardian.com/technology/2023/may/18/we-are-lo...

3: https://www.howtogeek.com/894168/apples-self-repair-program-...

4: https://www.vice.com/en/article/qjdjnv/apples-independent-re... (ironically from vice, lol)

5: https://www.theregister.com/2022/04/28/apple_selfservice_sla...

6: https://www.vice.com/en/article/m7gdwb/new-yorks-right-to-re...

ColoursofOSINT··on A group of Motherboard folks just spun up their own new independent outlet
I made a similar comment on the story about apple and right to repair. Although I think this is interesting and has potential, the trust and absolute statements in their reporting worries me greatly.

As a journalist, your job is to inform and question. They don't seem to be questioning.

In their apple article on apple support RTR, they write, "This is a landmark shift in policy from Apple." [1]

It's not. They have played this game before; creating RTR "friendly" programs and then forcing signing of strict NDAs, and requirements that leave repair shops worse then they would without the program. [2-5]

Also, "It means, effectively, that consumers have won". Wow, I have never heard that before, only for it to fail or be false. Remind you of the New York bill which was kneecapped at "last minute by Gov. Kathy Hochul"? [6]

1: https://www.404media.co/apple-endorses-california-right-to-r...

2: https://www.theguardian.com/technology/2023/may/18/we-are-lo...

3: https://www.howtogeek.com/894168/apples-self-repair-program-...

4: https://www.vice.com/en/article/qjdjnv/apples-independent-re... (ironically from vice, lol)

5: https://www.theregister.com/2022/04/28/apple_selfservice_sla...

6: https://www.vice.com/en/article/m7gdwb/new-yorks-right-to-re...

ColoursofOSINT··on Unlocking Discord Nitro features for free
Does anyone know the theme of the website?

It is really nice.

ColoursofOSINT··on Analysis: Health care CEOs hauled in $4B last year as inflation pinched workers
Not necessary.

You could make an argument for 2019, but COVID-19 significantly increased global inequality; in wealth and health [1-3].

[1]: https://news.un.org/en/story/2020/01/1055681 [2]: https://www.economist.com/finance-and-economics/2022/08/02/g... [3]: https://inequality.org/facts/global-inequality/

ColoursofOSINT··on Analysis: Health care CEOs hauled in $4B last year as inflation pinched workers
The argument you appear to being attempting to support is:

> Global inequality is actually decreasing (potentially at the expense of Americans).

The link you have [1] states that "While the steep rise of inequality in the United States is well-known, long-run data on the incomes of the richest shows countries have followed a variety of trajectories."

Also, "high and rising inequality is not an inevitability; it’s something that individual countries can influence".

This does not say anything about a global trend. This support nothing except that counties can influence inequality levels.

[1]: https://ourworldindata.org/how-has-income-inequality-within-...

ColoursofOSINT··on Analysis: Health care CEOs hauled in $4B last year as inflation pinched workers
Or you can vote, and the people who win are corrupt [1]. I have been voting every year since I got the right to. Things have only gotten worse [2-3].

[1]: https://effectivegov.uchicago.edu/news/power-begets-corrupti... [2]: https://www.cbc.ca/news/politics/canadian-health-care-system... [3]: https://www.cbc.ca/news/business/crea-housing-data-1.6843592

ColoursofOSINT··on Analysis: Health care CEOs hauled in $4B last year as inflation pinched workers
Any data before 1900 is an estimation [1].

> but the rich would be living in poverty by the standards of today

Such a comparison is completely useless. A person today in the US in poverty is better off than a caveman. What of it?

[1]: https://www.sciencedirect.com/science/article/abs/pii/S00144...

ColoursofOSINT··on Analysis: Health care CEOs hauled in $4B last year as inflation pinched workers
That's not the argument. Morby said, and I quote;

> to an unreasonable extent then that is a problem....fairly compensatory to those who contribute

There is a reason to expect reasonably equal growth, as all wage classes are contributing.

Also if you are going to say something like;

> There is absolutely no reason to expect equal wage growth to begin with.

Then what's your argument?

ColoursofOSINT··on Analysis: Health care CEOs hauled in $4B last year as inflation pinched workers
> check out your world in data. For better or worse the income equality thing is outweighed by the gains in China and India but most of the world seems to be improving on that front.

>There are still countries getting worse though sadly

Do you mean https://ourworldindata.org/?

It would be far more constructive to give an actual link to proof than some massive site.

No offense, but that's like me saying, "You want proof that climate change is real? Check the internet," that's not proof, just some nebulous hand-waving. No one would or should believe that.

Their source data for the slight decline [1] in global inequality (which is only hypothetical) is the Worldbank [2], a source that has been heavily criticized for data-rigging [3-5].

The Worldbank also tries to present itself as helping to reduce inequality [6], so they have a bias for showing results.

I am not saying you are wrong or right, but let us keep the conversation quality on this website strong.

[1]: https://ourworldindata.org/grapher/global-and-between-countr...

[2]: https://documents1.worldbank.org/curated/en/9592514681766870...

[3]: https://www.reuters.com/business/world-bank-imf-face-long-te...

[4]: https://www.bloomberg.com/opinion/articles/2021-10-15/the-ge...

[5]: https://www.washingtonpost.com/politics/2021/09/20/theres-de...

[6]: https://www.washingtonpost.com/politics/2021/09/20/theres-de...

ColoursofOSINT··on Show HN: Little Rat – Chrome extension monitors network calls of all extensions
- One of them would occasionally advertise the author's other extensions when new or updated, either with a weird in-page popup notification or a video announcement on YouTube, which it would hijack the current tab or create and focus a new one for to show.

Looks like pocket tube, I see, "https://p.yousub.info/referral" mentions in the extension. I can fully comprehend Giphy's tracking code, but pocket tube's eludes me.

I have started a Github repo to try and report to report them, but I only have time for Giphy for now. [1] Plus I have not done this sort of thing before. Any pointers are very appreciated.

[1]: https://github.com/ColoursofOSINT/extensions-investigation

ColoursofOSINT··on Is it defamation to point out scientific research fraud?
Francesca Gino, a researcher on dishonesty who was placed on administrative leave from Harvard Business School after allegations of systematic data manipulation in four papers is suing Harvard and the researchers accusing her.

Here is a discussion about the fraud from 15 days ago:

https://news.ycombinator.com/item?id=36968670

ColoursofOSINT··on Show HN: Little Rat – Chrome extension monitors network calls of all extensions
Could you provide some of the details regarding these extensions?

I am not a user, but I have some time to throw something together about it.

Giphy seems to have some compiled code in a weird .ts format (which I have not seen before, but I am a novice).

It also loads a script from https://www.google-analytics.com/analytics.js, isn't that remote code?

Also, I could not find a privacy policy, even though there is information being sent and received.

ColoursofOSINT··on Judge denies HP's plea to throw out all-in-one printer lockdown lawsuit
The current state of printers is sad. Everything wrong with tech is enclosed within them.

1. You get DRM inc, which increases the cost even you buy the "required toners" [^1]

2. Don't get to control what they print:

- Adds stuff to your page [^2] - Won't let you print certain patterns [^3]

[^1]: https://arstechnica.com/tech-policy/2022/01/chip-shortage-ha...

[^2]: https://en.wikipedia.org/wiki/Machine_Identification_Code

[^3]: https://en.wikipedia.org/wiki/EURion_constellation

ColoursofOSINT··on Harvard professor Francesca Gino was accused of faking data
For those of you interested in the accusations, here are the primary sources for them[1]. The are multiple (it is a 4-part series) and it looks quite damning.

[1] [[109] Data Falsificada (Part 1): "Clusterfake"](https://datacolada.org/109)

[2] [[110] Data Falsificada (Part 2): "My Class Year Is Harvard"](https://datacolada.org/110)

[3] [[111] Data Falsificada (Part 3): "The Cheaters Are Out of Order"](https://datacolada.org/111)

[4] [[112] Data Falsificada (Part 4): "Forgetting The Words"](https://datacolada.org/112)

ColoursofOSINT··on Show HN: Non.io, a Reddit-like platform Ive been working on for the last 4 years
Moderation is a big concern for me, as well as the rules should be better clarified, but I can understand the lack of content as it just launched - I agree, however, with the proposals in not having the google file format.
ColoursofOSINT··on Show HN: Non.io, a Reddit-like platform Ive been working on for the last 4 years
Others may have covered this but I think you should have the landing page be the site itself, that will be an good advertisement rather than a product sell page. Also, the tags are interesting, but I find them distracting and would rather a single 'upvote' count with specific tags. The navigation needs some improvements, the submit button is somewhat hidden near the top and should be made more prominent (grey on darker grey is hard to see). Other than that, I have been interested in a similar payment model for sometime.
← PreviousPage 2 of 2