HNHacker News
TopNewBestAskShowJobs

joshmn

5,197 karma · joined April 15, 2013

Just your friendly, local federal prison alumnus.

I went to federal prison for hacking and internet piracy. Speaker at SLEUTHCON and InterCOP hosted by Interpol.

Aimless thoughts at https://josh.mn; prison stuff at https://josh.mn/prison.

Email is hn@the above domain.

meet.hn/city/us-Minneapolis

submissionscomments
joshmn··on PS5 Relapse Exploit
It hasn’t been announced. GTA 5 was released for PC about 18 months after it hit consoles.
joshmn··on U.S. postal inspectors shut down website selling counterfeit postage labels
Great question: I would guess about 15% of the inmate population sends mail home on any given day. That number certainly jumps up if a facility is locked down, probably by at least double.
joshmn··on U.S. postal inspectors shut down website selling counterfeit postage labels
The USPIS (mentioned in the article) once came to the federal prison I was at to tell inmates that using stamps as currency was illegal.

There are flats and there are books. Flats are a sheet of 20 Forever stamps that you would get at a drug store. A book is 20 stamps, used or not used.

Generally there are different values associated with flats because you can get cash for them on the streets. You can get them to the streets via an officer if you're ballsy. Or you can just find discreet ways to mail them.

The value of a flat where I was at was about $13-$14 depending on your vendor. A book was generally worth $10. If you were buying bulk (and depending on who exactly you were buying from), that number could go down to $12 and $7 respectively.

If you were buying from someone that was running a ticket (sports gambling) they had more incentive to get rid of their stamps. Some people had tens of thousands of dollars of stamps in their property and they wanted to convert them.

If you were buying from someone running a store (think "buy and resell commissary"), their business model was dependent on flipping books of stamps in exchange for more commissary. They could sell a ramen for 3 stamps ($1.50) when it was worth just 50 cents.

Flats were easier to hide because they are, well, flat.

joshmn··on Two parallel neural ectoderm progenitors contribute to the developing brain
But how do you stop buying ice cream?
joshmn··on Ask HN: How to recover Google auth after phone stolen?
I had similar issues: https://news.ycombinator.com/item?id=45451567 (including my personal domain, Dropbox; my Apple account is still MIA...)

We've all been reduced to a passphrase.

When I've lobbed this scenario to the security managers/employees at these companies, they all give me a really great answer:

Q: What happens if a sitting senator gets mugged and they have their printed 2fa codes sitting in their wallet?

A: They have a special number they can call.

joshmn··on Getting phpBB 1.4.4 working in Docker
I recently got a reminder that my vbulletin license had expired.
joshmn··on Cloud in a Bottle: making self-hosting accessible to everyone
An aside: Fantastico was such a wonderful piece of software for me to learn and toy and tinker with web stuff. I was so impressed by the simplicity of it. (I phased out of the shared scene a almost two decades ago; I guess everyone moved to Softaculous, https://softaculous.com/fantastico/)
joshmn··on Gemini 3.7 Flash
What’s the prompt you used for this?

Edit: oh wow, diffui looks nice!

joshmn··on No more asking 'who are you'; we have all been reduced to a passphrase
Oh, this. Author here.

I'm waiting for legislation around this, but I'm not sure we'll ever get it. I was on the phone with a senior Apple support specialist person and I even proffered this idea of "what if a sitting senator just got mugged." And they said there was a special lane for them.

joshmn··on Read this before you buy that TV streaming stick
I had a streaming piracy site that I went to federal prison for. I can chime in on these people.

It's worth separating the two populations:

My users had money and had considered legal subscriptions. They paid me because the legal product was worse—in my case, sports blackouts, a bunch of different apps, etc. They knew what they were buying into and they had weighed the risk. I can tell you right now some of my former users have bought into this market.

Then there's the unwitting: a person buying one of these devices at a too-good-to-be-true price is treating it as a hardware purchase from Amazon, where the actual monetization isn't inferable from the listing. Calling it too good to be true assumes the buyer can see what shit they're standing in. They can't. There's no visible market here. It's just a product page with reviews.

To add to this: the proxy exit is exactly why these cost so little. Demand for residential IPs is booming (check some of the proxy subreddits to see what I mean).

The ironic part is that there's a chance the person who bought one of these boxes to watch pirated sports was the exit node I was using to acquire the feeds in the first place.

joshmn··on Apple Silicon Exec Explains Mac Mini AI Demand and On-Device Future
"Login to order"

That's a new one.

joshmn··on AI content is everywhere on social media, especially LinkedIn
Sometimes I'll search LinkedIn for posts on internet piracy. It's usually companies or those affiliated with companies promoting their anti-piracy product—typically streaming. I'd wager about 90% of them are straight-up, uninspired LLM-generated slop.

And so I'll comment asking them why it's okay to use a tool that was built on the backs of content it wasn't properly licensed to use to generate a post promoting an anti-piracy product. I'm yet to get a good response, if any. (Sorry for the word salad.)

I've started collecting some of these: https://josh.mn/anti-piracy

(Note: I went to federal prison for internet piracy)

joshmn··on How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024)
I'm hardly a sysadmin and I think Unraid is great. My usecase is some Docker containers and media backups. The UI gets the job done well, whereas Synology tries to dumb things down and make things pretty.

Android is to Unraid as iPhone is to Synology.

joshmn··on Amazon without the knockoffs
Is there a best and not-so-best category for certain odds?
joshmn··on HackerRank open sourced its ATS. My resume scored 90/100. Oh wait 74. No – 88
I ran the ATS myself and had a similarly quirky experience. I was in the 70s because it couldn't find my GitHub profile, and then it didn't like some of the popular Ruby libraries I'm the author of.

After a few runs it picked things up appropriately. I always got dinged on formal education though.

This stuff is gross.

joshmn··on A website that lists websites to submit your website to
Reminds me of HotScripts, which is still around for anyone looking for nostalgia: https://www.hotscripts.com/category/scripts/php/scripts-prog...
joshmn··on An interview with an Apple emoji designer
Been waiting for seahorse myself.
joshmn··on Dropbox CEO Drew Houston to step down
The shame has passed and I served my time. What I owe now is not doing it again—which I'm not.
joshmn··on Dropbox CEO Drew Houston to step down
It's the digital equivalent of your house burning down, your devices are inside it, and you never bothered to bring the 2FA codes you definitely wrote down to the bank.
joshmn··on Dropbox CEO Drew Houston to step down
Previous discussion: https://news.ycombinator.com/item?id=45844197
joshmn··on Dropbox CEO Drew Houston to step down
If there are any Dropboxers here (drew—I emailed you a few weeks ago, but I imagine you're busy):

I went to prison for 18 months, my digital and physical life was stolen from me: https://news.ycombinator.com/item?id=45451567 applies to my Dropbox account (and Apple but separate problem); I just received the "your account will be going bye-bye" email. I have very important dead-mom-club stuff in there, and support is useless. :(

Edit: Thanks unofficial Dropbox support channel; thanks Drew :)

Edit edit: Try my luck with my Apple account now, I guess—Tim Cook, you busy?

joshmn··on Pgbackrest is no longer being maintained
barman seems to cover "Natural disaster" in their docs. Seems good.

I'll take a look. Thanks!

joshmn··on Pgbackrest is no longer being maintained
I have a moderately sized 2TB production database I have enjoyed using pgBackRest on, and was—this week—going to set it up on another 8TB database we have.

What's the next-closest thing? wal-g? barman? databasus? I only get to cosplay as a DBA.

joshmn··on Issue links now open in a popup
is `current_user` really costing that much?
joshmn··on Spain to expand internet blocks to tennis, golf, movies broadcasting times
I ran a sports streaming service ("pirated sports streaming service" ?). The US Government said I was making $250k MRR as a solo indie dev (I wasn't, but that's great validation). I'm pretty qualified to talk about this.

The shitty part about what Spain is doing is that it punishes its own residents who have nothing to do with piracy.

Sports piracy is fundamentally different than music or movie piracy. The Spotify analogy that gets tossed around is wrong. Steam is less wrong but still wrong. Music piracy got "solved" because the labels decided that some revenue was better than no revenue, and the math works when you have a bunch of product in your back pocket that cost you nothing to distribute; gaben made piracy slightly less convenient to those in developed countries.

Sports rights are valuable because they're exclusive and because they're live. In the US, there are blackouts around sports: if you're physically located in New York (at least, according to whatever IP address data vendor a platform is using), you're unable to watch the New York Knicks using league-sanctioned products. That's the US version of this—restricting access to the content itself to protect the rights holder's revenue. It's internal logic and fundamentally sound (though infuriating) if you're one of them.

This is without a doubt categorically worse. A blackout says "you can't watch this game" and Spain is saying "you can't access the internet while this game is on, whether you're interested in the game or not." It's as if the NBA convinced the DOJ to shut down half the internet every time a game was on, just in case.

Before it was DMCA notices (useless) -> lawsuits (whack-a-mole, check TorrentFreak) -> ??? -> infrastructure-level blocking. (I'm an outlier for many reasons but we won't go into those.) Each step is more destructive and less effective than the one preceding it. Spain has reached the end of the playbook, thanks to political interests: ban the internet!

Fans are the product. La Liga's real customer is Movistar, who pays roughly a billion euros a year for exclusivity so they can bundle it into packages nobody would pay for otherwise. The IP blocking isn't an anti-piracy measure—I'd argue there is no such thing as anti-piracy but that's a different thread. The IP blocking is a signal to the next bidder: the government will protect your exclusivity at any cost, even if that cost is the country's internet.

joshmn··on DIY Soft Drinks
What are your, um, favorite gum providers?
joshmn··on Rockstar Games Hacked, Hackers Threaten a Massive Data Leak If Not Paid Ransom
I didn’t know about this case. When you said it I thought it must have been a US federal case. Nope.

https://news.ycombinator.com/item?id=45844197

joshmn··on Rockstar Games Hacked, Hackers Threaten a Massive Data Leak If Not Paid Ransom
I was in federal prison with Sebastien Raoult, one of the ShinyHunters guys. We were in the same unit and talked regularly.

I was about mid-way through my bid when another inmate told me "new guy in B3 is a another hacker." I got really excited—I'd have someone to talk shop with, at the very least.

My takeaway from him was that they're a bunch of contemporary "script kiddies" with a lot of time on their hands.

This tracks.

joshmn··on Show HN: Dull – Instagram Without Reels, YouTube Without Shorts (iOS)
In my vast personal experience, https://www.law.cornell.edu/uscode/text/18/1030 is the most absurdly vague law in existence.
joshmn··on Big data on the cheapest MacBook
My dad spun up my Pentium Deschutes (400MHz!) machine the other day. Same hard drive from when I was 10 years old. “clouds.psd” was on the desktop.

I still remember retiring that computer. The first thing I did when I got my Pentium IV chip a year later was download Macromedia Dreamweaver. Did me well.

Page 1 of 34Next →