HNHacker News
TopNewBestAskShowJobs

LWIRVoltage

139 karma · joined January 3, 2021

I help run operations in NASA's Launch Control! I also have done a lot of System Admin work and operations work in Launch Control, and moreso now Software testing for NASA's launch control software tackling requirements, validating and making sure things tick in a way that is useful, for ops!

In my spare time, I am a bit of a infosec and Privacy geek, constantly exploring what privacy means and how to make private systems and model privacy and security for situations!

Currently delving into Debian playing with things like signing drivers, Secure Boot ,Docker and getting comfy- while also slaying telemetry in Windows for laughs. Also currently picking up Python, having come up on C and Java in the past.

I can be reached (current for June 2025) at lwir dot voltage385@slmails dot com

[I do rotate the contact email i use on Here for privacy/spam reasons every now and then)

[When I respond ,I will email you back from a protonmail email address of mine ]

[Ask me in email for my full non-modified resume!] Here is a modified updated non-full resume link as of June 2025 https://ibb.co/tpqYm7nF

submissionscomments
LWIRVoltage··on The U-2 and balloons – Some history, and some thoughts
They aren't - I don't think you realized whats happening here

That is a picture of a unreleased photo, on a u2 enthusiast site in an article that only is talking about the history of theU2

Some Osint digging reveals this was very recently likely leaked to them

So in actuality, they haven't been pushing the u2 usage at all. I never saw owing public trackers spot the u2 while the spy balloon was over the country

No, this article is catching attention because it's a unique perspective from a unreleased photo. ... picture of a picture style similar to the keyhole satellite photo leak from the last president

LWIRVoltage··on Ask HN: Who wants to be hired? (January 2023)
Location: Central Florida region

Remote: Yes

Willing to Relocate: Yes

Technologies: C, Java, Python, Redhat, Operations, Bash, Windows Server, Vmware, VirtualBox , RHEL, CentOS, Debian,

Where I come from: I've worked for NASA (via contractors), Serving as a Sysadmin and also Operations test conductor and Console Operator,helping to run field ops as well as maintain security , provision and administer their launch systems.

I've helped run operations involving multiple sites and multiple groups around the Country to that involved testing aspects of space hardware ,software involving multiple various teams and groups. I've also participated in several testing sessions and runs of NASA's Launch Control Software directly and more recently help design tests and ensure the software is up to spec, for the Artemis 1 and Artemis 2 missions, helping validate requirements and going and actually putting the software through it's paces for end users and clients needs- And it actually is rocket science after all.

I'm a team-orientated, friendly, detail focused technologist with a eye towards expanding and delving more into the development side of tech, and getting a little closer to understanding what makes things tick and being able to tweak them.

resume: Modified Resume at https://ibb.co/0qw7C4c For my full resume / LinkedIn or to reach out, I have a contact email on my HN Profile as well.

LWIRVoltage··on I quiz ChatGPT about math
After reading so much here and this , about chatGPT- I have a feeling what will be needed for AI- is teachers.

As it gets smarter and actually gets better reasoning, and capability- the way to keep AI sane and kind, will be to try to teach it like a person, with it putting importance on lessons from designated teachers even more, than it's weight in casual conversation , generally.

I think i forsee teachers being hired to teach AI, not just humans. Though how much AI will benefit from it will depend on their level But we'll have to get to that point first, as i read attempts to teach ChatGPT having odd results , which of course reveal what it can't do-yet.

At some point, we're going to have to intentionally educate AI- i feel like giving them knowledge in a similar manner is not talked about enough, even if some feel teaching AI like we do people isn't necessary due to AI's other abilities

I don't think i've seen others here consider the idea of seeing the o

LWIRVoltage··on Caterpillar offers phone with built-in FLIR camera
Yes, that was me -i did successfully send it to the manufacturer for repair , also!

Didn't think that was too notable, but i guess i'm the only person ever who did the process so it stands out when someone talks about it, huh? lol

LWIRVoltage··on Caterpillar offers phone with built-in FLIR camera
Someone else already pointed out this is LWIR, not Mid wave(I look forward to the day we get cheap MWIR cameras! We'll be able to see heat trails behind jets- and gasses like no tomorrow- you tend to see through 95% of the with LWIR)

But large apertures? Are you thinking of the longer wavelength? For near infrared, this is a thing- and other night optics....and things like NVGs which use Near infrared

But, this isn't ...a thing for MWIR/LWIR, and not necessarily for SWIR either

The reason not ALL thermals have to be cryogenically cooled- is microbolometers - that's the key.

- I own a bunch of uncooled LWIR cameras, that i use- and NVGs as well

LWIRVoltage··on Caterpillar offers phone with built-in FLIR camera
You can't take it out of country without an export license- Someone else will have to comment on the process of doing that so they can take their camera on vacation or something

I've had to navigate that and make use of listed exemptions to that, for sending thermal cameras i bought from israel- BACK to israel for repair- because of ITAR.

Other than that, you can do what you want in-country with a high quality thermal-and the US can import others who make stuff that high quality, without issues

LWIRVoltage··on Caterpillar offers phone with built-in FLIR camera
I have looked at these a lot and wondered when they'll push the bounds of their thermals- I have owned some Therm-App cameras(384X288)(640X480), 30 hzsadly no longer sold as of recently - and it's been incredible having mid and HIGH grade thermal phone-based imaging- but a rugged phone is sturdier and more durable, which goes a long way.

I want to see 320X240(or the european equiv, 384X288), 640X480, and higher resolution thermals in them! Otherwise we're still hanging out around FLIR One Territory, and the years are going by fast and they aren't pushing the boundary really! Those Leptons are cheap, but haven't changed much! (And yes, FLIR MSX is a thing- but , owning thermal cameras with multiples the resolution- i'd take that over MSX if i had to choose, every time)

I see one competitor, the AGM ones like the AGM Glory Ones, (hard to see differences with their top models) , and a few other companies- have Night vision cameras with near-infrared illumination lights, for the user, as well- not just the thermal imaging- It's the dream to see as many different sensors and options in a phone as one can fit.

Trust me, they come into use- I've saved multiple pets in the dark in my neighborhood, spotted equipment that was about to ignite, and done so much more with my own thermal cameras- having MORE capabilities- actually goes farther than you can imagine, when you have them...

LWIRVoltage··on Ask HN: Protonmail Alternative?
Just an FYI,

https://www.swissinfo.ch/eng/proton-wins-appeal-in-swiss-cou...

Not sure if you followed that, but they fought it tooth.and nail, and were forced to do that legally in the meanwhile- but WON The fight finally, and can't be forced to log via legal mechanisms as the authorities attempted

LWIRVoltage··on Portmaster 1.0 – Open-Source Network Monitor and Privacy Firewall
Simplewall is amazing- and is impressive in how it's able to stop a lot of Microsoft's attempts to get Telemetry out.

I've been looking at Portmaster for a while- it seems to be a valid option for those of us who dabble with the idea of totally halting the telemetry despite it being designed to be hard to stop

LWIRVoltage··on Laser attack blinds autonomous vehicles, deleting pedestrians and confusing cars
This is another reason for multiple sensors- sure ,you could..:sees common discourse currently:, go visible-cameras only It probably is not impossible to pull it off doing this-

But consider this. Thermal Cameras are the best way to detect pedestrians, and can't be blinded by Lidar(They operate in Near infrared and Short wave infrared, so MWIR or more commonly, LWIR sensors are flat out immune to being blinded at all) - SEEK and FLIR ,went and recreated the Tempe Arizona accident and discovered Thermals would have easily avoided the accident there due to a high amount of early warning.

Ultrasonic sensors and Sonar are invulnerable to Lidar(though a longer ranging sonar is something to work towards, but they can act as short range radar)

There's good old radar itself- with various frequencies for resolution, rain penetration, snow penetration, ground mapping(so your car can then build recognition points and recognize where you are in total whiteout conditions because the ground and 'underground' doesn't change) -There's Lidar- and it can be made to be resistant to this, we would indeed be using techniques that modern military radars use to avoid getting jammed. This would also help the edge cases of not getting blinded by potentially- police LIDAR guns, which use variable pulse rates for their latest models(which are difficult for the majority, though not all - aftermarket laser jammers using LEDs to keep up with)

There's also potential Microwave and terahertz sensors- but these can be passive , or Active- or both. And the further you go in the spectrum, the more you penetrate bad weather.

Sensor Fusion is the trickiness- But having multiple is a solution to this issue. This is why there is research into air-to-air missiles to fit onto them more than just one type of sensor.

LWIRVoltage··on Ask HN: Who wants to be hired? (November 2022)
Location: Central Florida region

Remote: Yes ( Open to Come-in-when-you-need-to type Remote)

Willing to Relocate: Yes!

Technologies: C, Java, Python, Redhat, Operations, Bash, Windows Server, Vmware, VirtualBox ,AIX, , RHEL, CentOS, Debian ,

Where I come from: I've worked for NASA (via contractors), Serving as a Sysadmin and also Operations test conductor and Console Operator,helping to run field ops as well as maintain security , provision and administer their launch systems.

I've helped run operations involving multiple sites and multiple groups around the Country to that involved testing aspects of space hardware ,software involving multiple various teams and groups. I've also participated in several testing sessions and runs of NASA's Launch Control Software directly and more recently help design tests and ensure the software is up to spec, for the Artemis 1 and Artemis 2 missions, helping validate requirements and going and actually putting the software through it's paces for end users and clients needs- And it actually is rocket science after all.

I'm a team-orientated, friendly, detail focused technologist with a eye towards expanding and delving more into the development side of tech, and getting a little closer to understanding what makes things tick and being able to tweak them.

resume: Modified Resume at https://ibb.co/QKWVfNZ For my full resume / LinkedIn or to reach out, I have a contact email on my HN Profile as well.

LWIRVoltage··on Cobra Maneuver
As others have pointed out, the idea is to possible get your opponent ot overshoot-

But I don't understand why it's not deadlier today- given some things

-Your Su 35, 37(there aren't many)- Felon, and Raptor have thrust vectoring - without doing post stall tricks, they can nose point extremely WELL

-Next- The Flanker series does a trick- this applies to the old Su 27 without thrust vectoring that can Cobra- where to do any of this they disable a AOA limiter that lets them pull AOA up the wazoo- being able to instantly rotate your aircraft and nose point anywhere- means your opponent, near 100% of the time, can be looked at then shot at- with guns, or ....

#3. high off boresight missiles. Your Aim 9X, or even better yet...if what i've heard is true, the IRIS T missile, to an extreme degree- i'm talking turning 60 degrees or more to chase and kill a target- which would start to look as nutty as the SAMS from Behind Enemy Lines, the missile will keep turning to chase you

-One circle or two circle- if one circle, you just pull up, line up and shoot- and your HOBS missile can be cued and shot at the opponent regardless. Now yes, they might be starting to close hard on you- but that's just a matter of how good the missile is with high kinetic energy changes and leading and reacting.

Two Circle- you're in a rate fight on the deck, just disable your AOA limiter, turn tighter until you're looking at him, and let your Fox 2's (IR missiles fly- they shoudl ,especially if HOBS missiles, just chase and get him. Or you could go for guns, but....you have to line up on them, and that's where the 3D thrust vectoring, or Maaaaybe rudder, help sometimes. And a gun system that can put a lead piper on a target who might not be that close-

But, slow shouldn't matter as much when you can be shooting at the opponent 100% of the time. As for sinking or recovery- Thrust weight ratio high enough? You won't sink. Recovery? If it's thrust vectoring, you just cna keep twisting at will- so you can just keep shooting at your opponent, or if they fly past you, immediately rotate FAST- then shoot at them, and yoru missile being a HOBS missile can be off at them before you finish rotating your plane, even quicker.

The counter some might think to this, would be- missiles aren't all that good yet, - But i think the Cobra was the first half of lopsided dogfighting. The 2nd half, is High off boresight missiles.

-Admittedly, in a Raptor(I've heard they can change their flight control system ,not sure if they can flat out disable AOA though like the Flanker and Felon Family)you have enough nose pointing ability and a mean enough turn rate that you are almost always looking at your opponent anyway- But it still helps to have that ability no matter what

I'll admit, i've also heard that in at least the early flankers- not sure on the rest- Disabling the AOA limiter would disable the G limiter , which would be risky if you were too fast- and could risk G -LOC. I have to think more modern planes with the ability to uncap AOA and let you rotate freely at will- might keep the G limiter perhaps- if it doesn't restrict you when you're pulling AOA and just rotating your plane backflipping while still heading in the original direction.

Close range shouldn't be needed given every weapon should be able to be used from this state regardless of what you're doing, unless we're talking strictly guns, since guns aren't guided onto targets using targeting systems on planes.

LWIRVoltage··on US border forces are seizing Americans' phone data and storing it for 15 years
Did some thinking about this- Here's something no one has every ...thought of it seems-

Right now, from a steganography standpoint, there's no real way to be secure from this sort of thing. US Customs, or another country , from a tech standpoint. Yes, the cloud, though not everyone will have resources to access enough space online to keep their data secure - or be able to properly make a usable copy or image of their device that includes every aspect of their device, for a complete , fully restore later

-Why aren't there more plausible deniable, or just, stealthy encryption options? It appears, there's nearly NONE today for these advanced used cases.

Veracrypt is known for it's hidden features -but those are ...dangerously approaching obsolescence. Their Hidden OS option- ONLY works if you've formatted your system to MBR, not UEFI- otherwise you can't use the Hidden OS option. Are you telling me for every laptop you buy form here on out, you'll format it to the old MBR standard to use the Hidden OS option for your personal laptop that you want to take on a trip- or need to?

And sure, you can just put important data in Hidden Volumes as a fallback- but then you come to a common fight today in the tech world of system vs file level encryption. And sure, just hiding what is most crucial, is perhaps better form a standpoint of sneaking by- but is it truly now impossible to hide everything else that's not as important, by default? Furthermore, you have to wipe traces of the material's location where it was BEFORE you copied it into the hidden volume. Did you also eliminate all traces? Windows Shellbags are a thing, that nearly no one knows will be a smoking gun..

Veracrypt doesn't work on Mac or Linux with it's Hidden OS option, just volumes.

There was a really promising advanced system being built - here, and it was even presented at a blackhat conference i think https://portswigger.net/daily-swig/russian-doll-steganograph...

https://i.blackhat.com/eu-18/Thu-Dec-6/eu-18-Schaub-Perfectl...

But i've heard nothing since- and right now, all your data will be at risk from your computers ,phones ,and tablets, when you go through Customs- even if it's encrypted, they'll hang on to it, and image and copy the data. If you refuse to provide encryption passwords, they'll potentially keep it and not return it to you in all cases. This is where the deniable systems would come into play- where you'd be okay, if they just unlock it. Now if they plug it in and image it regardless, you're at risk because theoretically they could be running exploits on your device(they won't let you watch them imaging it so you can'tverify that ever)

-encrypted data will be unreadable here, but it's not as good as if they can't tell it's hidden, from a imaging point when they plug in a Cellebrite or Greykey device and have it run it's exploits to get everything.

And i do not see the Forensic Security community often giving recommendations on what it takes to get around this, i think this leads to the public being at the mercy of officials-

This will become very destructive also, as this will become a precedent. Imagine Southern States checking devices like to look for evidence of abortion information-searches, for example. Imagine Abortion getting federally banned, and then customs checking for mentions of abortion .

- Technical solutions aren't a full solution, as the EFF loves to hamper on- but it appears everyone has given up with efforts to even provide them. I suppose if you want to stand a chance, you need to go become a expert on disks, and forensic techniques , in order to then even have a chance at experimenting on how to get around that- and if that sort of privacy ,security, and plausible deniability cannot be brought to the masses at large, the way Signal did for encrypted communications, ...

LWIRVoltage··on Ask HN: Who wants to be hired? (August 2022)
Location; Central Florida region

Remote: Yes, also open to partial /as needed on-site work.

Willing to Relocate: Yes, I am open to it!

Technologies: Redhat, Operations, Bash, Windows Server, Vmware, VirtualBox ,AIX, , RHEL, CentOS, Debian Familiar with. C, Java, Python

Where I come from: I've worked for NASA (via contractors), Serving as a Sysadmin and also Operations test conductor,helping to run field ops as well as maintain security , provision and administer their launch systems.

I've helped run operations involving multiple sites around the Country to that involved testing aspects of space hardware ,software involving multiple various teams and groups. I've also participated in several testing sessions and runs of NASA's Launch Control Software and help design tests and ensure the software is up to spec, for the Artemis 1 and Artemis 2 missions. Now i'm more on the Software testing side, helping validate requirements and going and actually putting the software through it's paces for end users and clients to make sure it's actually usable for their needs- And it actually is rocket science after all.

I'm a team-orientated, friendly, detail focused technologist with a long term eye towards expanding and delving into security and development, and understanding what makes things tick, and what else they can do!

resume: Modified Resume at https://ibb.co/QKWVfNZ For my full resume / LinkedIn or to reach out, I have a contact email on my HN Profile

LWIRVoltage··on Firefox DNS-over-HTTPS
Perhaps, but the idea is to take the lead- and thus when all other browsers ,or most of them ,adopt this, that will be a little trickier to classify every browser in this manner.

Overall, this will have an impact in the many regimes- and perhaps is one of the best methods of doing so. While it is still ...having faith in Cloudflare(one could audit them, but of course the question is how by-nature are they built to resist threats from APTs to the US gov coming knocking for info on Snowden or a similar person, looking for possibilities of compromise) -

I think of the Ukraine Starlink situation- Overall, the Starlink terminals can be targeted by their signals, - but there's so many ,that Russia would need to do a massive ASAT campaign, or start spam detonating kiloton/megaton warheads in space to really try to disable Ukraine's ability to communicate even when all other networks get cut off, or isolated. And they mgiht be one of the very few capable of that type of escalation, but right now they're getting stymied by groups that are en - masse, accessing something that makes it harder to control, deny info, influence and crush them.

Overall a net positive, but with drawbacks- but their overall situation and ability to choose how they want to operate is increased.

VPNs and TOR are gaining popularity, but this covers those who wouldn't be able to use or figure out those for whatever reason, but who can use a web browser. I think i've seen the Cloudflare CEO around - i wonder if any cloudflare employees will comment on the risks i mentioned before(centralized source providing availability, US GOV deciding to take interest...)

Firefox actually can solve this- by attempting to pursue deals with more than Cloudflare and NextDNS

LWIRVoltage··on What are terahertz waves useful for?
So, i'm just an enthusiast/geek who owns Long Wave Thermal Cameras- and while the article wasn't the clearest to me,-

All em waves, whether light, UV, radio, gamma, etc- can be measured in frequency - so yes, I see why one person is confused- but no, it's just measuring them all in THZ waves instead of nanometers or HZ, but the scale of the spectrum gets big, so they chose that one arbitrarily it seems./

And yes, the graphic mentioning sound- I am not sure what that chosen graphic is actually getting at...I suppose it's more about frequency.

Regarding the Terahertz part of the spectrum- it's neat, in that it's really the area after far infrared, well, blending from that- into Microwave.

So, it's got a longer wavelength, than far infrared, and can penetrate further into materials in general(except some materials which are opaque, of course )- and less energy..../

I find it neat because the deeper you go into the spectrum from an imaging standpoint(something they don't talk about here)- you start to see some unique effects- Example; in a thermal image, people glow because they emit, mostly in the LWIR thermal band(not MWIR, though they glow there too) - as you go deeper and deeper ,they don't emit as much, but they still do- meanwhile, the penetration against waver vapor, gets better and better the deeper you go- so ultimately, you could build imagers that see even farther through bad weather, but still give a unique view of the world with it's own unique properties. We're actually talking about superman-level vision, i suppose.

There's a LOT of other uses for accessing more of the spectrum, but the terahertz, and passive millimeter wave- and further, isn't used in as many applications as it could be yet, due to some problems that have never been bothered to really have been addressed, like the increasing wavelength(not insurmountable) and the chips and sensors required to access those bands...

Example: Driverless cars with access to sensors across more of the spectrum, from long wave infrared ,to longer- would allow passively seeing through rain and fog and obscurants to a better and better degree- and while active sensors are good, passive ones 100% won't interfere with anything else.

Medical imaging- how many conditions of the human body cna be seen, if you just keep going up and down the scale in the right wavelength? Thermal imaging already sees MANY medical conditions on people (I can also confirm this having seen...things like Reynaulds Syndrome on people , just walking around with my thermal cameras in public to my surprise(It was said people who noticed it and pointed it out to me when looking at my thermal cameras) ) - Xray wavelengths don't necessarily see everything - there's a whole lot of spectrum aside fromthem

I leave any fellow geeks who love seeing this stuff, with these images from around the web- To give an idea of what the world looks like as you go further in the spectrum.

http://www.vision4thefuture.org/s4_resources/2_passive.htm [throwing in an Image of the world Further down the spectrum at the passive millimeter-wave area, to be exact, 90 GHZ) https://www.researchgate.net/figure/Photographs-and-correspo...

[Radio Wave imaging of satellites in the sky at 10-12 ghz , couldn't resist throwing this one in- sadly it appears No ground level imaging has been done in these bands, but it would take effort to set up a radio-wave imager, it'd also be a bit large and unwieldy- though still useful} https://www.orbiter-forum.com/threads/the-amateur-radio-astr...

LWIRVoltage··on Google terminated our Developer Account, says it is “associated”
I have done some poking around and digging into the microsoft account lock out thing, out of curiousity- only to find it appears to be true, as i've had a LOT of test accounts banned in the past 2 months. I was trying things like setting up alternate emails, and TOTP...

I suspect burner phones are the only way to not give one's phone number, or to gamble with the microsoft authentication app, which theoretically ever since recent versions of android should not be able to pull your phone number from the hardware - theoretically. I have not tested that out yet.

There's quite a bit about this out there Here's one such thread where a lot are trying to figure out why they are being forced to give up their number https://github.com/MultiMC/Launcher/issues/4093

to my understanding, since they fully linked it- once your MS account auto locks- you can't do anything, since it's linked to Minecraft- as well as other stuff. You'd think they'd allow one to still play Minecraft- but i guess if you can't log into the account, you're out of luck

LWIRVoltage··on Google terminated our Developer Account, says it is “associated”
This is the issue with data being tied and connected....

Not long ago, someone here raised similar concerns with Microsoft 's ecosystem

It stemmed from their current underway process to force all Minecraft accounts to Microsoft accounts, and the current Microsoft account process, if you don't add a phone number during account creation, locks and bans the account automatically after a week with they only recovery option being to then give a phone number, and most voip ones are auto detected and not accepted.

If you set up the account with an alternate email, that has no effect. Setting up TOTP has had scattered reports over sometimes allowing the account to not auto ban you, but recent reports are that this too often won't stop it. There are reports that using Microsoft s own authenticator app, does stop the account from auto banning you unironically, that I have not confirmed

Of course this means they can then tie it to potentially your computer pending how you set up Windows, or Xbox live, etc. Which is a risk if you've been formerly banned from something like xbox- everything is now linked, and therefore subject to action automatically with no human team to talk to about the process.

Also, if you then go and give it to them then afterwards try to remove it, the system will not let you without extreme effort, and more details.

I worry greatly about this situation where our personal accounts are all tied together through hardware ids, mandatory phone numbers,IP addresses, and different accounts across systems, only to all get banned or locked out at once with no recourse - or demanding more data(like Minecraft indirectly giving Microsoft every single phone number for the biggest player base in the world, as mandatory(with specific exceptions for like one or two countries who's laws they are working around now, with Korea appears to be one)

Also, so many companies use Amazon, Google, Microsoft company emails and systems- your full name is there, so there is a increasing risk that if something happens to your company account, the systems knows your personal accounts and by name, bans or affects them too.

Privacy advocates are being proven right about the need to be able to not give info that ties everything together

LWIRVoltage··on Can Minecraft be played without giving MS a Phone#?
Indeed, but some of my test accounts setup using TOTP still have been hit by the phone number prompt, where this poster didn't- so they might treat their own authenticator higher. (And if they do, i have to wonder if it means it sends more data back than others do)
LWIRVoltage··on Twitter's new Tor onion service
...Does their current method get around this? They let you make the account, then a week or two later at most when you log in, it flags you and tells you due to 'suspicious activity', you now have to enter a phone number to get in specifically- as the account is now locked out otherwise. And VOIP numbers and burner numbers are autodetected and the system says to find a different number...

Since they allow you to initially make the account, i wonder if that lets them 'attempt to' bypass this -

Also, if that became a pain point eventually, they could make it so accounts made with European IP addresses from certain regions avoid this. (I think i've read on Reddit that european players get affected, but after contacting microsoft and citing GDPR with a form, they unlocked it- alas, the US and the rest of the world is forced to give a number then (not counting south korea which is a special case i've read)

LWIRVoltage··on Twitter's new Tor onion service
If the idea is to stop some sort of massed emailing or posting or whatnot, using TOTP as a requirement to take those actions would slow that down to once every 30 seconds-

if it's a matter of access and authentic access(as Microsoft's 'message' when they lock you out notes<suspicious activity>)) TOTP on actions a user may do, should cut down on the idea that an account is hacked.

An initial idea -

If they are worried about account creation being too fast, I suppose one idea then would be a TOTP client-side program that generates a unique account-generation code, one would need to create an account on a service to begin with- and time limit that from both sides, if the worry is a lot of accounts being generated in too short a time. This way, one can always kill the client code generator, and reinstall it, but overall that doesn't get around the fact you need that to make a full account on the service, and this would slow down creation from someone while not using phone numbers or other meta-data that would be usable against them from a privacy perspective.

I would also look at how the teams from Signal, etc- are tackling that while reducing meta-data

if the idea is indeed about having some method to track the user in a way you can discover other info about them through subsequent means directly, then that's ...what we'd want to avoid.

LWIRVoltage··on Twitter's new Tor onion service
That is interesting but we run into something that is now prevalent- I don't use it, but Twitter requires a phone number at singup, right?

This is the same issue that is going on really heavily right now with Microsoft Accounts(and they are about to force the entire playerbase of Minecraft to give a phone number by pushing them to Microsoft accounts starting a day or two from now) (Note:This occurs without trying to use TOR during MS account creation, the system will lock you out afterwards- I assume TOR would be even more difficult)

To my understanding, even Protonmail has a odd requirement where you have to verify by making a donation, if you try to initially sign up with TOR- and sure, they might only keep a hash , but this is a risk as someone could generate a hash of all potential phone numbers and them compare.

Logging in via TOR afterwards to protonmail is good and all, but you aren't fully private then and can be compromised with out recourse it appears. [VPN would probably be the way to get around this][Protonmail is still probably the strongest option, especially since they won that court case they sued the Swiss gov in after being made to help the french government in that one case- now they are not able to be coerced at all - nontheless this signup TOR quirk is the only major thorn.]

I get the feeling no one realizes that you have these additional hoops to creating an account on any service- and that data they force you provide, could be subject to a subpoena in a jurisdiction where they don't like something you did, etc ,etc. And no, VOIP numbers and burner numbers are now auto-detected by these services and pre-blocked en masse.

I agree with another poster, Signal is probably okay in needing one, and they are working on removing that and providing unique identifiers at least, along with stripping as much metadata as they can. Other services seem to be going towards a point where you're at the mercy of whoever can compel or read the data they required of you to use services that did not require this.

I wish services would instead turn towards TOTP and other authentication, to avoid spam. The fact that that sort of substitute doesn't allow one to bypass giving up details like Phone numbers- suggests it's about the data, not authentication or anti-spam, since they offer no alternate.

LWIRVoltage··on Last call to voluntarily migrate Java accounts
The issue here is that, aside from those who are on Xbox, gave their number and banned(who theoretically could lose their minecraft access upon making a microsoft account as is mandatory)- those who are too young to have phones, those without extra phone numbers, and those concerned about privacy-

If you make a microsoft account currently, it asks for a alternate email and phone number at account creation. You can skip that, then get into the account ,set up the normal enhanced security features, but it won't matter as shortly after, when you log into the account again, you will be flagged and be required to give a phone number that they can verify, then attach to the account with no alternate means of keeping the account.

However, there are reports now that setting up TOTP , on a microsoft account after creation, will allow you to avoid the flag and being forced to give your phone number to microsoft.

I know they could change this afterwards if they consider it a issue ,(showing it'd be about the phone number data a bit more than security), but i hope this knowledge spreads, as many will have no alternative. This affects more than just those privacy conscious.

We'll see on March 10th when they attempt to force the biggest gaming population in the world to make a microsoft account, and require them to provide phone numbers. I'll be spreading the word to my family that play Minecraft of the TOTP workaround.

LWIRVoltage··on Ask HN: Who wants to be hired? (October 2021)
Location; Central Florida region

Remote: Yes, also open to partial /as needed on-site work.

Willing to Relocate: Yes, I am open to it!

Technologies: Redhat, Operations, Bash, Windows Server, Vmware, VirtualBox ,AIX, HP BTO , RHEL, CentOS, Debian

Where I come from: I've worked for NASA (via contractors), Serving as a Sysadmin and also Operations test conductor,helping to run field ops as well as maintain security , provision and administer their launch systems.

I've helped run operations involving multiple sites around the Country to that involved testing aspects of space hardware ,software involving multiple various teams and groups. I've also participated in several testing sessions and runs of NASA's Launch Control Software and help design tests and ensure the software is up to spec, for the Artemis 1 and Artemis 2 missions.

I'm a team-orientated, friendly, detail focused technologist with a long term eye towards expanding and delving into security and devops, and understanding what makes things tick, and what else they can do aside from just ticking! I also love poking around exploring the different ways one can make things tick, how one can stop others from making changes to the way those things tick, and so on!

For my full resume / LinkedIn or to reach out, I have a contact email on my HN Profile

Slightly-Modified Resume : See HN profile for current link to this.

LWIRVoltage··on When lightning strikes: managing impacts on wind turbines
Since wind turbine fields presumably are going to get bigger and bigger, why not take advantage and use the opportunity to deploy lightning harvesting equipment? After all, prior attempts showed that the only limiting factor that needed to be addressed was scale, and it'd work. ..

https://en.m.wikipedia.org/wiki/Harvesting_lightning_energy

I will note that it takes finesse, as one will notice from watching other attempts to lightning. .. whenther its universities or. ..not-smart people on YouTube trying to do it, the electrical situation needs to be optimal. .. and it helps if you directly charge a potential at your target area, in order to get good odds...

Otherwise, launching rockets with wire into thunderheads is not a gaurantee you will get a strike, as you might accidentally just bleed away the electrical potential, lightning rod style

LWIRVoltage··on Clarifications regarding arrest of climate activist
I don't understand why spammers can't be fully stopped via built-in methods that prevent say, mass emails to more than a certain number of independent contacts upon account creation, for the first month maybe of service.

Why give up on this point? There's nothing that says true anonymity has to lead to spam. Spammers have the limit that they have to spam to , presumably make money, since they go via the 1000 tries and only needing one hit to win. They have a weakness. users and activists dont have this weakness really.

LWIRVoltage··on Clarifications regarding arrest of climate activist
It appears they didn't start logging until ordered to.

So, this might be in line with their policy of not having logs by default- but I have to wonder if this applies to phone numbers(which the crowd that signs up using VPN/TOR reports that they're required to provide).

If they don't keep that info, then Protonmail would be solid as long as you access it via VPN well before a order tells them to start monitoring the IP.

I'm also curious, I see here they do this for spammers - there is no way, a better system can't be created to 'verify' users against spammers ,since I see their logic here that spammers are why they do it https://old.reddit.com/r/ProtonMail/comments/phnyd9/why_is_p...

I'm aware that every other major email provider bans your account if you don't provide a phone umber shortly after account creation, such as Outlook for example. (Others require phone numbers up front, and all of them ban VOIP numbers)

We're nearly at the point that you can't email anyone without providing your phone number or other details...I know social media is already like that.

One thing i noticed, For things like Discord even, if you make an account, give them a non-major email address and they then force you to give a email, or else you can't sign in to that formal account. for now one can still use a permalink to get to a discord server without having to make an account...for now..

Protonmail is a standout if they don't log any of it, and still the best option left in the world, but this is still a icky situation.

I see also they point out Swiss law means this cannot happen to the ProtonVPN service, as email providers are specifically legally in the situation they have to allow active monitoring. Not for Swiss VPN providers...

And one needs a 'big' email provider address, or else it gets rejected by multiple services now that require a email address for sign up or usage.

I hope they clarify that payment details /phone numbers of TOR/VPN users doesn't get logged, like IP addresses, by default. Also, more importantly- that they move forward in fully dissuading spammers, and remove the phone requirement of people signing up anonymously

LWIRVoltage··on Ask HN: Who wants to be hired? (September 2021)
Location; Central Florida region

Remote: Yes

Willing to Relocate: Yes, I am open to it!

Technologies: Redhat, Operations, Bash, Windows Server, Vmware, VirtualBox ,AIX, HP BTO , RHEL, CentOS.

Where I come from: I've worked for NASA (via contractors), Serving as a Sysadmin and also Operations test conductor,helping to run field ops as well as maintain security , provision and administer their launch systems.

I've helped run operations involving multiple sites around the Country to that involved testing aspects of space hardware ,software involving multiple various teams and groups. I've also participated in several testing sessions and runs of NASA's Launch Control Software and help design tests and ensured the software is up to spec, for the Artemis 1 and 2 missions!

I'm a team-orientated, friendly, detail focused technologist with a long term eye towards expanding and delving into security and devops!.

For my full resume / LinkedIn or to reach out, I have a contact email on my HN Profile

Slightly-Modified Resume : See HN profile for current link to this.

LWIRVoltage··on Gizmo’s Freeware Says Farewell
Oh no

This site has been an invaluable source of actual reviews of free software, with info and vetting that you do not get- anywhere else

If I was after some sort of reader , editor, or generic software, I would always go to Gizmo's- they would warn you if something was bundled if OpenCandy(and if it installed it anyway even after you declined it), how products compared, etc-

And were trustworthy.

With their loss, there's nothing the public can use that pre-vets software, across as many broad categories.

And, knowing what to look for is important. As asking every single one of the masses to grab vmware /virtualbox + sandboxie, and then the tools to see if a program does stuff it shouldn't be anyway, while checking out every single competitor to something to see what best serves a purpose....

No, this is a very large loss for the community, and will hurt some very badly going forward...

LWIRVoltage··on Ask HN: Who wants to be hired? (July 2021)
Location; Central Florida

Remote: Yes

Willing to Relocate: Yes, I am open to it!

Technologies: Redhat, Operations, Bash, Windows Server, Vmware, VirtualBox ,AIX, HP BTO , RHEL, CentOS.

Where I come from: I've worked for NASA (via contractors), Serving as a Sysadmin and also Operations test conductor,helping to run field ops as well as maintain security , provision and administer their launch systems.

I've helped run operations involving multiple sites around the Country to that involved testing aspects of space hardware ,software involving multiple various teams and groups. I've also participated in several testing sessions and runs of NASA's Launch Control Software and help design tests and ensure the software meets stakeholder objectives.

I'm a team-orientated, friendly, detail focused technologist with a long term eye towards expanding and delving into security and devops. Will have: Security+ at the end of July 2021.

For my full resume / LinkedIn or to reach out, I have a contact email on my HN Profile

Slightly-Modified Resume : See HN profile for link

← PreviousPage 3 of 4Next →