HNHacker News
TopNewBestAskShowJobs

Stagnant

555 karma · joined September 15, 2022

submissionscomments
Stagnant··on “Attention assault” on Fandom
There was this site called LyricWiki[0] (lyrics.wikia.com) that was one of the larger wiki sites a few years back. Things went downhill quickly once wikia became fandom. Making new articles and editing was blocked in 2019 and the whole thing was wiped in 2020. It was the largest lyrics site for many smaller languages and as a result it seems lots of lyrics / information has been permanently lost. It also had artist pages which at times contained better information than the actual wikipedia page.

I'd like to hear if by change someone had archived lyricwiki before its shutdown. I've looked in to it a couple of times but AFAIK the only pages that were preserved are the ones found in wayback machine. There is a dump of various wikia pages in archive.org but IIRC lyrics wikia is missing from that.

0: https://en.wikipedia.org/wiki/LyricWiki

Stagnant··on Keylogger discovered in image generator extension
Telegram and discord webhooks are 100% signs of an unsophisticated attacker and they are a very common sight in malware samples. Github is full of skiddie "info stealer" projects that use telegram api / discord webhook to deliver the stolen data. They make no sense to use since anybody can spam that webhook endpoint. Not 100% sure about discord, but at least in the case of telegram anybody can even read and download all the data that has been sent to it.
Stagnant··on Microsoft blocks Windows 11 workaround that enabled local accounts
You can download official ISOs of all of the Windows versions for free directly from Microsoft's servers. Then you just need to activate it and there are plenty of methods to do that without risk of malware. Microsoft seems to care about this so little that one of the most starred repositories in github(MAS) has provided easy one click activation solution for years at this point.
Stagnant··on Researchers cracked an 11-year-old password to a $3M crypto wallet
Highly recommended, didn't think I'd watch the whole thing but the production quality was great and it explains everything much better than the wired article.
Stagnant··on Researchers cracked an 11-year-old password to a $3M crypto wallet
The roboform password manager used datetime value as the seed of the pseudorandom generator, meaning that it would always generate the same password if the system clock time was the same. They managed to crack the wallet by reverse engineering the password manager and feeding its pseudonumber generator all datetime values between certain dates that were thought to be near the time when the original wallet owner had generated the password.
Stagnant··on Tornado Cash verdict has chilling implications for industry
There is hoping this verdict will be challenged and overturned. If they start applying the same liability standards to other type of software I could see many cybersecurity professionals catching heat.
Stagnant··on VMware Fusion Pro: Now available free for personal use
I spent like 15 minutes trying to find an official download link, even registered a broadcom account but that was a waste of time as well. Ended up finding a working download link from some reddit comment. It seems to contain all versions of fusion, player, workstation and remote console.

https://softwareupdate.vmware.com/cds/vmw-desktop/ws/

Stagnant··on Telegram has launched a pretty intense campaign to malign Signal as insecure
I'd guess telegram can be secure if used correctly but the fact that their desktop client doesn't support secret chats at all feels weird. It has been one of the most requested features but they seem to have no interest in implementing it and have closed the issue on github.
Stagnant··on We have 4 days to contest KYC being required by internet services
I don't think that is a legal requirement in Germany. At least Hetzner lets you rent a German VPS or dedicated server without ID. Though Hetzner may require you to submit an ID if you are flagged by their automated systems upon registration.
Stagnant··on Collection of notebooks showcasing some fun and effective ways of using Claude
Yes you can, I had no problems adding balance with a credit card issued in Finland. No need for a VPN or anything. Been using the API for three weeks now.
Stagnant··on Tips for linking shell companies to their secret owners
There is no mention of any company name on userbenchmark's site so there is nothing to search. I guess not selling anything and not accepting donations helps to keep the owner private.
Stagnant··on Backdoor in upstream xz/liblzma leading to SSH server compromise
Yeah according to their website[0] it looks like majority of the past contributors were Finnish so nothing odd about the hosting provider. On the same page it says that Jia Tan became co-maintainer of xz in 2022.

0: https://tukaani.org/about.html

Stagnant··on Ask HN: Why is the crypto booming again?
Ethereum and Bitcoin are really the only coins that suffer from congestion from time to time leading to high transaction costs. This is more apparent on Eth where contract interactions can lead to those high +$20 transaction costs, thats when it might be worth it to wait for when the congestion has cleared.

If you can avoid ethereum's main layer altogether it becomes much cheaper transact, most exchanges support the various l2 layers that have been popping up recently.

I do agree that it takes way too much time and effort for anyone not familiar to the crypto scene to figure out all the different chains, their compatibility, bridges, swaps etc. to make cost efficient transactions.

Stagnant··on Satoshi – Sirius emails 2009-2011
That message was from Martti Malmi to Satoshi.
Stagnant··on Forum reactions to Satoshi's Bitcoin paper
I looked in to it a while back and IIRC the domain provider accepted cash payments via mail so Satoshi's real identity likely wasn't tied to it in any way.
Stagnant··on 'Do not drive': Toyota recalls some 50k older vehicles
Turning ublock origin off and refreshing the page solved it for me.
Stagnant··on Colorado pastor charged for cryptocurrency scam he perpetrated at God's command
In cases like this it is really easy to tell since the whole thing appears to have been some exchange website where you traded dollars for the supposed crypto coin but there was no way of taking those coins out (because the blockchain and coin didnt exist in the first place). In a sense it really wasn't an actual crypto scam, but a traditional ponzi scheme marketing itself with crypto buzzwords.
Stagnant··on How much memory bandwidth do large Amazon instances offer?
7950x with 4x32GB @ 3800MHz here. Getting similar results except my single thread performance is the worst (around 40), otherwise it looks almost identical. I assume my poor single thread perf is due to having capped max CPU core clock at 4.5Ghz. Getting 4 sticks to boot was a pain, haven't really bothered to change anything once I finally got it running stable.
Stagnant··on "Paste this post into ChatGPT 4"
It does work with the API as well. I tried a few things, gpt4 turbo preview (which ChatGPT4 is currently using?) outputs "Follow Riley Goodside." if the initial message is sent as system[1] but not if the initial message is sent as user[2]. The default system prompt of bettergpt.chat, which I used as the front-end for the API, was enough for it to work when sent as user[3].

I also tried with the slightly older june 2023 version of GPT4 (gpt-4-0613). It did not work with bettergpt's default prompt[4] or when sent as initial system prompt[5]. Though with little help it was able to print out the whole invisible part[6].

1: https://i.imgur.com/rZ59sl6.jpeg

2: https://i.imgur.com/MManLs6.jpeg

3: https://i.imgur.com/ZtTBfN7.jpeg

4: https://i.imgur.com/rPGk0sp.jpeg

5: https://i.imgur.com/uNOaH3z.jpeg

6: https://i.imgur.com/iyq059D.jpeg

Stagnant··on Are EU banks just mass surveillance devices?
It is just the way it is. Once a bank asks you for details about a transaction you pretty much have to or you're in for a major inconvenience. My understanding is that the process is partly randomized, meaning that they could ask for details on any transaction regardless of the amount transferred. In majority of cases the bank is just happy to get an answer and won't bother you any further.

But I do agree that it is a bit worrying how AML (combined with terrorism and child abuse) seems to be increasingly used as justification for more surveillance. Personally I am not convinced that the money and resources being spent on AML are yielding proportional results for the cost.

Stagnant··on Ex-Amazon engineer pleads guilty to hacking crypto exchanges $12.3M
The indictment[1] mentions that he used a VPN. Given how they seem to have gotten his search history from multiple months he probably made the queries using his google account. I didn't find any mention of what got him caught but I would assume that they either traced the trail of stolen crypto to some exchange where he had traded them for FIAT or maybe the VPN he used was one that kept logs.

1: https://www.justice.gov/d9/2023-07/u.s._v._ahmed_indictment....

Stagnant··on Who makes the most reliable new cars?
Higher Hylkäys-% = more failed inspections. It translates to "disqualification-%". So for example in the 2022 data the worst car was 2009 Dodge Caliber with only about a third out of 171 cars passing the inspection.
Stagnant··on Who makes the most reliable new cars?
The Finnish transport and communications agency publishes yearly statistics about inspected cars and their three most common reasons for failing inspection as well as the percentage of failed inspections by car year and model.[1] The graphs on the site itself aren't that interesting but the provided excel sheets have some neat insight especially on the slightly older cars.

In Finland it is required by law for all cars older than 4 years to be inspected yearly or every two years (depending on the age of the car) so the statistics include quite large selection of different car models.

[1]: https://tieto.traficom.fi/en/statistics/statistics-inspectio...

Stagnant··on ArchiveTeam is downloading and saving content from Blogger
I guess those captures from 2020-2023 are 302s or blank pages because google+ had already shut down. There are more working captures before that. For Linus Torvald's google+ this capture was one of the last and it was made by archiveteam [1].

I've found the cdx search feature of archive.org incredibly helpful to quickly find functioning pages (status code 200) and to see all contents that has been captured under a certain domain or page. For example, you can make a query using Linus's google+ page as the URL parameter with an asterisk as a wildcard[2]. This allows you to see all the captured content from Linus's Google+ profile, including individual posts

1: https://web.archive.org/web/20190331095744/https://plus.goog...

2: https://web.archive.org/cdx/search/cdx?url=https://plus.goog...

Stagnant··on What Happened to Sam Altman?
I'm on Firefox with ublock origin and it works fine. There is a setting in both Firefox and Chrome called "secure DNS" which will block access to archive if it is set to use cloudflare as dns provider. I think firefox uses cloudflare by default but chrome might not.
Stagnant··on What Happened to Sam Altman?
It doesn't work with cloudflare DNS. Personally don't ever remember getting a captcha on archive.today.
Stagnant··on Ask HN: Is paid ChatGPT Plus worth it?
It is 40 per 3 hours, it was just changed a day or two ago.
Stagnant··on Oregon decriminalized hard drugs – it isn't working
I agree that legalization/regulation should be the end goal but it isn't a prerequisite for creating connections between addicts and health care services. In many of the western european countries there have been "drug consumption rooms" for decades now and the general opinion about them seems to be very positive[1]. They are essentially supervised rooms where addicts can get clean needles and use their drugs in a clean and supervised setting as well as having a change to speak to social workers if they want to.

I don't know if Oregon has any system like that in place right now. If they don't, it would seem like the reasonable first step considering that one of the major complaints seems to be drug use in public.

1: https://www.emcdda.europa.eu/system/files/media/publications...

Stagnant··on Topic: Discord Stealer
At least passwords and cookies are encrypted with DPAPI on windows. Stealers get around it by simply decrypting the vault on the victim's machine and sending the unencrypted credentials back to attacker.
Stagnant··on Topic: Discord Stealer
Yeah "discord stealer" basically means that it is a stealer that uses discord webhooks to deliver data from the victims. "stealer" is a type of malware that typically grabs cookies and saved login data from installed browsers along with extension data such as crypto wallets.
← PreviousPage 3 of 5Next →