5,197 karma · joined April 15, 2013
I went to federal prison for hacking and internet piracy. Speaker at SLEUTHCON and InterCOP hosted by Interpol.
Aimless thoughts at https://josh.mn; prison stuff at https://josh.mn/prison.
Email is hn@the above domain.
meet.hn/city/us-Minneapolis
There are flats and there are books. Flats are a sheet of 20 Forever stamps that you would get at a drug store. A book is 20 stamps, used or not used.
Generally there are different values associated with flats because you can get cash for them on the streets. You can get them to the streets via an officer if you're ballsy. Or you can just find discreet ways to mail them.
The value of a flat where I was at was about $13-$14 depending on your vendor. A book was generally worth $10. If you were buying bulk (and depending on who exactly you were buying from), that number could go down to $12 and $7 respectively.
If you were buying from someone that was running a ticket (sports gambling) they had more incentive to get rid of their stamps. Some people had tens of thousands of dollars of stamps in their property and they wanted to convert them.
If you were buying from someone running a store (think "buy and resell commissary"), their business model was dependent on flipping books of stamps in exchange for more commissary. They could sell a ramen for 3 stamps ($1.50) when it was worth just 50 cents.
Flats were easier to hide because they are, well, flat.
We've all been reduced to a passphrase.
When I've lobbed this scenario to the security managers/employees at these companies, they all give me a really great answer:
Q: What happens if a sitting senator gets mugged and they have their printed 2fa codes sitting in their wallet?
A: They have a special number they can call.
Edit: oh wow, diffui looks nice!
I'm waiting for legislation around this, but I'm not sure we'll ever get it. I was on the phone with a senior Apple support specialist person and I even proffered this idea of "what if a sitting senator just got mugged." And they said there was a special lane for them.
It's worth separating the two populations:
My users had money and had considered legal subscriptions. They paid me because the legal product was worse—in my case, sports blackouts, a bunch of different apps, etc. They knew what they were buying into and they had weighed the risk. I can tell you right now some of my former users have bought into this market.
Then there's the unwitting: a person buying one of these devices at a too-good-to-be-true price is treating it as a hardware purchase from Amazon, where the actual monetization isn't inferable from the listing. Calling it too good to be true assumes the buyer can see what shit they're standing in. They can't. There's no visible market here. It's just a product page with reviews.
To add to this: the proxy exit is exactly why these cost so little. Demand for residential IPs is booming (check some of the proxy subreddits to see what I mean).
The ironic part is that there's a chance the person who bought one of these boxes to watch pirated sports was the exit node I was using to acquire the feeds in the first place.
That's a new one.
And so I'll comment asking them why it's okay to use a tool that was built on the backs of content it wasn't properly licensed to use to generate a post promoting an anti-piracy product. I'm yet to get a good response, if any. (Sorry for the word salad.)
I've started collecting some of these: https://josh.mn/anti-piracy
(Note: I went to federal prison for internet piracy)
Android is to Unraid as iPhone is to Synology.
After a few runs it picked things up appropriately. I always got dinged on formal education though.
This stuff is gross.
I went to prison for 18 months, my digital and physical life was stolen from me: https://news.ycombinator.com/item?id=45451567 applies to my Dropbox account (and Apple but separate problem); I just received the "your account will be going bye-bye" email. I have very important dead-mom-club stuff in there, and support is useless. :(
Edit: Thanks unofficial Dropbox support channel; thanks Drew :)
Edit edit: Try my luck with my Apple account now, I guess—Tim Cook, you busy?
I'll take a look. Thanks!
What's the next-closest thing? wal-g? barman? databasus? I only get to cosplay as a DBA.
The shitty part about what Spain is doing is that it punishes its own residents who have nothing to do with piracy.
Sports piracy is fundamentally different than music or movie piracy. The Spotify analogy that gets tossed around is wrong. Steam is less wrong but still wrong. Music piracy got "solved" because the labels decided that some revenue was better than no revenue, and the math works when you have a bunch of product in your back pocket that cost you nothing to distribute; gaben made piracy slightly less convenient to those in developed countries.
Sports rights are valuable because they're exclusive and because they're live. In the US, there are blackouts around sports: if you're physically located in New York (at least, according to whatever IP address data vendor a platform is using), you're unable to watch the New York Knicks using league-sanctioned products. That's the US version of this—restricting access to the content itself to protect the rights holder's revenue. It's internal logic and fundamentally sound (though infuriating) if you're one of them.
This is without a doubt categorically worse. A blackout says "you can't watch this game" and Spain is saying "you can't access the internet while this game is on, whether you're interested in the game or not." It's as if the NBA convinced the DOJ to shut down half the internet every time a game was on, just in case.
Before it was DMCA notices (useless) -> lawsuits (whack-a-mole, check TorrentFreak) -> ??? -> infrastructure-level blocking. (I'm an outlier for many reasons but we won't go into those.) Each step is more destructive and less effective than the one preceding it. Spain has reached the end of the playbook, thanks to political interests: ban the internet!
Fans are the product. La Liga's real customer is Movistar, who pays roughly a billion euros a year for exclusivity so they can bundle it into packages nobody would pay for otherwise. The IP blocking isn't an anti-piracy measure—I'd argue there is no such thing as anti-piracy but that's a different thread. The IP blocking is a signal to the next bidder: the government will protect your exclusivity at any cost, even if that cost is the country's internet.
I was about mid-way through my bid when another inmate told me "new guy in B3 is a another hacker." I got really excited—I'd have someone to talk shop with, at the very least.
My takeaway from him was that they're a bunch of contemporary "script kiddies" with a lot of time on their hands.
This tracks.
I still remember retiring that computer. The first thing I did when I got my Pentium IV chip a year later was download Macromedia Dreamweaver. Did me well.