HNHacker News
TopNewBestAskShowJobs

bflesch

2,982 karma · joined July 13, 2011

Forensics & security straight from within the blue banana. Research interest include fake news and history.
submissionscomments
bflesch··on CIA funding helped keep NeXT afloat in the 80s
There are many more..
bflesch··on CIA funding helped keep NeXT afloat in the 80s
Other comments tied this report into the cute and nerdy NSA/PRISM scheme of things.

That's too easy. If CIA is involved, it's a topic that's actually important for global nobility.

CIA scope includes things like Hollywood movie productions, babysitting the next-in-line to the British crown, teen beauty pageants, keeping black people marginalized by dumping excess drugs on them, and of course DNA tracking of Nazis (which has been extended to basically everyone).

All this five eyes bs is framed as if the US is in the driving seat, and Americans eat it up with their hubris about "winning" the war of independence. Epstein/Maxwell scandal highlights that James Bond was actually British and not American.

It's kinda clever how it all ended up like this and I highly respect the capabilities. It's the best and most prosperous system that humanity has come up with. I sure as hell won't rock the boat.

Let's hope this establishment is flexible enough to handle the climate crisis. The solutions proposed so far include more colonization (of other planets) and more castles/bunkers (in remote locations) - there must be better ways to deal with a climate crisis.

bflesch··on CIA funding helped keep NeXT afloat in the 80s
It's not like CIA has some mastermind strategy, it is also a preferred career for old money nepo kids who gain quasi-global legal immunity from these government roles. CIA job is much better than being a honorary consul for some shithole just to evade parking tickets.

If those nepo kids like to mingle in the NYC artsy scene, then that's where the funds flow.

bflesch··on CIA funding helped keep NeXT afloat in the 80s
People talk a lot about metadata collection but not about DNA collection.

It is imperative for any intelligence service to know if any politically exposed person has a child, especially if it spawns from an affair. Logically, we have to assume that all laboratories processing human blood are also doing some sort of DNA genealogy.

bflesch··on GrapheneOS in 2027 available on high-end Motorola phones
I'm just thinking that someone who has 100k LinkedIn followers might be happy about any type of engagement, including nerdy rage bait.
bflesch··on GrapheneOS in 2027 available on high-end Motorola phones
It's quite painful to resolve cognitive dissonance, so I understand the downvotes for your comment.

People are clever enough to reach high level corporate roles, but at the same time they're are too weak to emotionally process the consequences of their "work" on their human cash cows of below-average intelligence.

However with these kind of moral/ethical questions, it's really hard to draw the line.

Is working at Google and thereby facilitating the scamming of my grandmother worse than being an ordinary pickpocket or an lobbyist for big oil?

bflesch··on GrapheneOS in 2027 available on high-end Motorola phones
I think it's a stretch to call OP doing a "witch-hunt" here. That Android guy is a mini LinkedIn celebrity with 100k followers.
bflesch··on Jane Street suffers $15B hit after meltdown at Situational Awareness
There's this famous line item which is called something like "securities sold but not yet purchased", e.g. with their market maker privilege Citadel can create infinite synthetic shares out of thin air to facilitate that a trade happens, but they have abused this privilege on a very large scale which has created an idiosyncratic risk to all stock market investors.

Due to regulatory capture of the SEC this risk has not materialized in an overall market crash, but they have done numerous accounting shenanigans and deadline extensions to give Citadel more room to breathe.

bflesch··on Jane Street suffers $15B hit after meltdown at Situational Awareness
Are they "trading" or "high-frequency-ripping-off-retail-investors"?

It's easy to make paper billions with synthetic shares and infinite deadline extensions for settlement. I'm old and still remember when Ken Griffin was lauded a clever person before he got caught with his hands in the GME mayo jar..

bflesch··on Eclipse: The Xiaomi 17 Ultra Confuses the Moon and the Sun
The constitutional monarchies respect each others' land ownership and colonies, but in terms of actual power the British Crown dwarfs everything, especially if one correctly recognizes the USA as their vassal state.

Outside of this there are few strongmen-led states of non-royal blood, of which China is the most important one.

And then there is Switzerland, which is part of the democratically-pacified buffer zone around Liechtenstein ;)

Let's hope the people at the top don't become too crazy.

bflesch··on Eclipse: The Xiaomi 17 Ultra Confuses the Moon and the Sun
It's one Monarch, but many eyes. All information flows to the Crown.
bflesch··on Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
Unfortunately I can't check how traffic flows from France to Switzerland because I'm not in France.

My traffic from Germany passes through a British-owned hop on its way to Switzerland. My German ISP is British as well so either way it wouldn't make a difference, they basically have all traffic twice.

bflesch··on Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
I'd be surprised if there is a single route from EU to non-EU countries which does not pass through British control.
bflesch··on Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
Same for the origin IP address. The fiber leaving your country is tapped, and those people can inject packets with any origin IP that they want. Your ISP has no way to check if their peer actually received a certain packet from a certain country or not.

From a technical perspective, all this "china/russia" attribution is built on a quite shaky foundation. As a sysadmin you'd never know if it would be the British crown attacking your European company instead.

Not minimizing nation state cyber crime here, but the packet goes through many hands with different incentives.

bflesch··on DeepSeek V4 Flash 0731
"It's only real AI if it comes from the silicon region of USA"
bflesch··on Cyberscript
Of course. I was trying to say that it would be nice to limit certain variables to an ASCII charset, or ASCII+umlaut+accents without any of the 10k other UTF8 shenanigans.
bflesch··on Cyberscript
I agree. At this point scripting languages should have native support for string subtypes with custom charsets (ascii/utf16) or just regexp-defined or even ENUM()'erated values.

IIRC historically on Windows, a string was UTF16, on unix it was ASCII; nowadays everywhere it's UTF8 without a way to specifically limit what goes into a string.

For example UTF8 opens the door to homoglyph attacks and various other things (RTL, spaces), and a program should be able to force a string to be ASCII-only so that these classes of problems are ruled out.

bflesch··on A GTK4 SSH-askpass in Zig
Love the tab title shenanigans when switching to and from the tab.
bflesch··on US Government lists fictional nation Wakanda as trade partner
And it makes me feel better about my own government, while it takes news reporting bandwidth from other stories that are buried instead.
bflesch··on LLM Honeypot
This website is so much faster than 99% of the modern macbook-focused websites with all those fades and css transitions.
bflesch··on They Stole Your Attention
The animations make it quite slow on my system. Maybe there's a way to figure out if users actually have webgl enabled and only then do the animations.
bflesch··on They Stole Your Attention
Amazing! Just disable the animations it makes my system really slow.
bflesch··on Ars Astronomica – English translations of rare Hebrew and Latin astronomy texts
Nice project, but I think the PDF format could be improved. I'd prefer having landscape layout and original text and translated text side-by-side or keep the portrait layout and do a line-by-line translation so that it is easier to review and spot translation errors.
bflesch··on Astronauts describe persistent 'observer' sensation after 6 month missions
I wonder if there are technical factors for this such as 24/7 exposure to LED flickering or engine vibrations.

Also withdrawal from your social circle might be a factor, your body has time to wind down if you're not interacting with a certain set of people a day.

bflesch··on MAI-Cyber-1-Flash inside MDASH
I can't even joke about Microsoft, I just feel pity for them. So long at the game and reduced from a dominating software house to slop fabric with no professional honor to deliver a product with certain quality level.

Their cash cow customers are doofuses that decide over government contracts to be wined & dined, their best employees use macbooks, it's a sad shell of what has been.

bflesch··on The footprints of every building in NYC
Ignorance is bliss.
bflesch··on The footprints of every building in NYC
I'm confident it's been censored and people have been killed to keep this story under wraps.
bflesch··on The footprints of every building in NYC
Check out the 1951 layer [1], it has a huge gap in the rockaway beach / hammels area which is not present in the 1924 layer or any other layers. Historicaerials.com does not offer 1951 or 1924, it only offers 1954 and later.

The gap in the 1951 aerials is around the 40°34'51.42"N 73°49'54.81"W coordinates in the Rockaway Beach/Hammels area.

From an organizational perspective the gap makes sense because they took the 1951 aerial pictures, then they noticed several symbols that are definitely not aligned with US winning WW2, and then they removed/replaced those buildings and took the 1954 aerials to confirm and actually deliver an aerial without those bad symbols.

This is not baseless speculation because it neatly ties into a chain of really badly-shaped buildings and construction projects in other places - NYC would've been the most in-your-face one.

In the limited footage from 1954 onwards the shapes of new construction still resembles the original "very bad" shape (especially depending on garden layout), but any of those X-shaped building has plausible deniability and could be anything from "normal" design to a KKK cross.

[1] https://nyc.maps.arcgis.com/apps/mapviewer/index.html?layers...

bflesch··on The footprints of every building in NYC
This is amazing. Unfortunately the 1960s, 70s and 80s seem to have been censored in the historic aerial maps. It's a very important period in NYC construction history where buildings with interesting shapes kept popping up.

The gap between 1951 and 1996 can be seen in: https://github.com/CityOfNewYork/nyc-geo-metadata/blob/main/...

bflesch··on My security camera shipped a GitHub admin token in its login page
This will trip up most SOC workflows in funny ways, and I like it.

IPs having a global distinction between public/private is a convention, but local routing can widely differ.

Same with the "China Cyberattacks" - the guys sitting on top of my outgoing fiber can simulate any IP address they want to me.

← PreviousPage 2 of 34Next →