HNHacker News
TopNewBestAskShowJobs

controversial97

370 karma · joined February 24, 2022

submissionscomments
controversial97··on Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop
Lots of people and small companies just buy a windows laptop and are unaware that the harddrive/ssd is encrypted with bitlocker.

People who avoid making a Microsoft account to log on to a windows computer, or who don't have access to the email address they used can find themselves in difficulty later when windows won't boot or it wants the bitlocker key for some reason. You can't get their files off the drive by connecting it to another machine because the bitlocker key is not available.

Yes, people should have backups and copies of their keys but they very commonly don't.

controversial97··on Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop
Another write up from 2021

https://arstechnica.com/gadgets/2021/08/how-to-go-from-stole...

One aspect of this is that some laptop manufacturers provide a setting to erase the TPM if the laptop is opened. You opened that laptop to see if you can add more RAM? Better hope you can access the bitlocker key or have a good backup.

controversial97··on Ask HN: Slashdot Website Clone?
Perhaps you are thinking of https://alterslash.org/
controversial97··on The outrageous £50M tax scheme that was KC-approved
"KC" being King's Council, which in the UK legal system is a person who is a very expensive highly qualified lawyer who act in cases in the higher courts. They were called Queen's council until the Queen died.
controversial97··on Ask HN: Where to find people to work on projects with together?
If you have a local hackerspace you can turn up for open evening or post on their mailing list/forum.
controversial97··on Nearly 10k more babies born in nine months under Texas’ abortion law
This number is from a statistical study.
controversial97··on “#GDPR meltdown day” for Meta
Facebook was given six months to stop sending Europeans personal data to the USA under a recent ruling.

I saw this headline and expected "meltdown day" to be around the 14th of October 2023 when the six months runs out, unless efforts to allow data transfer to the USA succeed by then.

The effort to allow data transfer to continue is basically an executive order from President Biden that says that the USA will only spy on people for a valid national security purpose and Europeans who think the US government has misused their personal data can try to persuade their national regulator to send a complaint to the USA, in the unlikely event of a national privacy regulator deciding that there is enough evidence to send a complaint, the USA will investigate and reply that they either upheld or dismissed the complaint and will give absolutely zero other information about their reasoning, what happened or if they they told a three letter agency to spy a bit less.

controversial97··on R/Lutris has been banned from Reddit
"This subreddit was banned due to being unmoderated."

This just means that whoever had control of the subreddit has deleted their account or not logged in for 90 days. It happens automatically to prevent abandoned subreddits from filling with spam. There are 2.8 million subreddits so this is going to happen hundreds of times a day.

There is a process for people to ask to take control of an unmoderated subreddit, you just post to r/redditrequest and wait two weeks.

controversial97··on Ask HN: Leaving company but offered a contract role. How much to charge?
Also, Risk.

If you are an employee and you unintentionally screw something up then you may get fired.

As a contractor, if you type a command in the wrong ssh session and take down the production system you may get sued, at which point it really matters if you are working through a limited liability company or you are personally invoicing them.

You have to price in the risk.

A UK limited company involves a significant amount of paperwork and administration. You can do it yourself or pay an accountant thousands a year.

There is monthly and yearly paperwork. There is the pain of the "making tax digital" plan to make companies submit accounts only electronically using accounting software.

A thing that sometimes costs people a pile of money is that VAT is on a rolling year. You can be under the VAT limit in your tax years, but if you invoice over 85K at the end of one tax year and the start of another then they can say "Gotcha! you must pay us 20% of your invoices and a big fine right now!"

There is also IR35. There is some risk of the government saying that you are a disguised employee and demanding a load of extra tax. It depends on things like does the contract say that your company can send anyone to do the work or does it have to be you.

controversial97··on Ldd(1) and Untrusted Binaries
Related: Don't run strings on untrusted binaries

https://lcamtuf.blogspot.com/2014/10/psa-dont-run-strings-on...

controversial97··on Can anyone still view Twitter without having an account?
Update: nitter has stopped working
controversial97··on All Twitter content seems to be behind a login wall today
Update: nitter has stopped working
controversial97··on Can anyone still view Twitter without having an account?
Yes, use a nitter instance.

https://github.com/xnaas/nitter-instances

Searching for twitter usernames isn't working, use the tweet search tab or type a twitter username on the end of the url.

If it says "This nitter instance has been rate limited" then choose a different one from the above list.

Also it's not entirely obvious that you expand a thread by clicking in the empty space to to right of the username on a post

controversial97··on All Twitter content seems to be behind a login wall today
Nitter is still working, although searching for users seems to have stopped working you can still use the tweet search tab or manually type a twitter username on the end of the URL.

List of nitter instances:

https://github.com/xnaas/nitter-instances

They unpredictably say "This nitter instance has been rate limited", you can try a few from the above list to find one that is getting less traffic.

controversial97··on Ask HN: What does a new operating system look like in 2023?
One of my daydreams is for some entity to decide to spend a few billion dollars and five years making a new operating system that runs useful windows software about as well as windows 10 and uses existing windows drivers. I would not mind if running high end games was not a priority.

End users would benefit if Microsoft had more incentive to stop making their core product worse.

Huge software projects are high risk, even if you try hard to learn the lessons from failed big software projects. I think this would be a better investment than Softbank spending $300 millon on a 45% share of a dog walking website.

controversial97··on All IP addresses are equal? “Dot-zero” addresses are less equal (2013)
This reminds of edonkey, a filesharing program launched in the year 2000. A deficiency in the protocol results in clients on a ip with a zero last octet being unable to receive incoming connections, which means clients can exchange data with fewer peers.

I believe that there is still some use of ed2k protocol by people using eMule. Torrents won but it is still around.

As far as I have noticed it has been rare for ISPs to give out ip addresses ending in zero since the early 2000s.

controversial97··on Ask HN: How expensive are fully managed hosting services as compared to VMs?
To me "managed hosting" means that the people you pay deal with things like applying operating system updates, security updates and providing functional databases.

If you are willing to be a sysadmin and keeping up with promptly updating software when some new vulnerability is found, backups etc then you can get a dedicated server in the ballpark of 2TB disk, 4 cpu cores for $45 a month.

I havn't used AWS, google cloud, Azure etc due to the horror stories of people accidentally running up huge bills. I prefer fixed price per box per month.

controversial97··on Company can track every Bluetooth LE device from orbit
I'm really sceptical about how well this could work.

The 2.4GHz band is very busy.

Every town has thousands of wifi access points transmitting beacon frames nine times a second.

Every town has microwave ovens that leak a couple of watts when operating.

Even with narrow beam forming on the satellites, from the sky the bluetooth channels will continuously have lots of transmissions colliding with each other.

controversial97··on Uncle Sam wants DEF CON hackers to pwn this Moonlighter satellite in space
There is a bit more information in mission statement.

https://forum.nasaspaceflight.com/index.php?action=dlattach;...

A ground station at 10000 feet altitude on the mountain on the island of Maui, surrounded by ocean may have the satellite in range for eight minutes.

controversial97··on Sad little boys: the backlash against Britain’s boarding schools
https://archive.is/u3ZxC
controversial97··on Uncle Sam wants DEF CON hackers to pwn this Moonlighter satellite in space
It is expected to be at an altitude of between 465 km and 500 km.

That means that from where you happen to be on the earths surface it will be above the horizon and in radio range once or twice a day for 30 seconds to a couple of minutes depending on how close to you it gets, how high up you can get your antenna and the terrain around you blocking some of your view of the sky.

controversial97··on Why China Fears Starlink
https://archive.is/61a0o
controversial97··on California Defaults on $18.5B Debt, Leaving CA Businesses Liable
Here is an article that does a better job of explaining how this will increase the amount of federal taxes paid by businesses in California:

https://www.ocregister.com/2023/03/27/california-had-a-97-5-...

It sounds like it will be in the ballpark of costing businesses a couple of hundred dollars per year for each employee.

controversial97··on Pornhub blocks Utahns ahead of new age verification law
https://archive.is/3OJsw
controversial97··on Ask HN: Will Virtual Reality Ever Make a Comeback?
At six months from graduation your best option is to push through the hard parts and get the degree.

It does not matter if you do a thesis on one thing then end up working doing something else, that happens to lots of people.

Finding a job is stressful, nobody likes disappointment or being rejected. You have to try anyway. Each thing you try has a chance of working.

controversial97··on Ask HN: Does Microsoft use Windows to compile Windows?
In September 2020, most of the source code for windows XP and server 2003 was on a torrent. That leak did not include winlogin and some drivers.

A couple of people compiled it.

Here is a video of compiling the windows 2003 source code on an XP box.

https://odysee.com/@AlphaNerd:8/windows-server-2003-full-bui...

controversial97··on The Mullvad Browser
So ... it is a fork of Mozilla Firefox with privacy-friendly settings by default, some script blocking, and dns lookups done via Mullvads encrypted dns service

Sounds ok to me, I have a longish and probably out of date list of settings that I like to chance in a new instance of firefox. I trust mullvad to not log dns more than I trust my ISP and I live in the UK so unencrypted dns here is being logged and stored by order of the government.

Keeping a fork of firefox in sync with mainline firefox to get security fixes is a load of work, it is good that somebody is doing it, in this case I think the tor project is doing a lot of the work.

controversial97··on IPv4.2
The linked website is ipv6 only. If it does not load you are probably using an ipv4 only ISP.

Also, it's an April 1st joke.

controversial97··on Startup Bank Had a Startup Bank Run
https://archive.is/pe8MY
controversial97··on Facebook LLAMA is being openly distributed via torrents
The torrent is 224GB total, a load of 13 to 16GB .pth files
← PreviousPage 2 of 6Next →