HNHacker News
TopNewBestAskShowJobs

n3rdy

338 karma · joined December 13, 2012

submissionscomments
n3rdy··on Inside the seedy underworld of spammers and phishers
> In our terms botnet can be a mix of a free and paid Mailgun accounts. Botnets can include anything from 2-3 to dozens and hundreds of accounts created at different time and using different billing plans.

My criticism is I've never heard of a botnet referred to as a group of accounts. To me, a botnet is a group of host computers that run some sort of proxy server (tens of thousands of hosts). I've never given thought to what someone would call a group of email accounts aimed at exploiting a service, but to me botnet seems like it would be specific to a network of computers, sometimes compromised, sometimes not, running a type of proxy or automated software.

> We are talking about Mailgun service - the time they need to invest in building some solution on top of Mailgun that pays back is just not worth it.

The problem is when it comes to a service like yours, if it really is that hard to bulk mail, then the guys using your service aren't the guys getting a 1 in 125m response rate.

Anyone sending that kind of volume would assume their messages were going to a spam folder, and sending larger volumes to compensate for it.

Someone going through the hoops you set in place, are doing it because your service gets inbox. This means they can send bulk email to higher quality lists, and their response rate will be significantly higher than 1 in 125m, more like 1% to 2% response rates.

In this case, the people actually sending mail through your service probably don't even bother making those accounts themselves. They likely find people who specialize in circumventing your security measures, and pay a premium of $x to $xx per 1,000 accounts.

> On the other hand, phishing attacks are very dangerous and this is our biggest threat - we've noticed that they get very high quality lists with 0 bounces, so it might be real bank users and build pages for every atack.

This too, but don't forget about simply cracking passwords for the accounts. Simple math. Take the top 100 most used passwords, assume your users are just as naive as most the internet, and you have x% users you can assume will be compromised at some point in the future.

n3rdy··on Inside the seedy underworld of spammers and phishers
Since when is a botnet a collection of free email accounts?

Since when has a spammers return on investment been low?

Since when have spammers only used hijacked "legitimate" business domains instead of just using some wildcard email domain setup?

Its not enough that he posts his strategies online to make it easier for his adversaries to learn from, but this guy doesn't even sound like he grasps the fundamentals of what is supposed to be his profession?

n3rdy··on Meta: The Most Advanced Augmented Reality Interface
> The videos there are misleading.

I was thinking the same just based on the repeated "there is nothing like this being developed", which I may have believed if I didn't come across Oculus Rift just a few hours prior.

n3rdy··on Yahoo buys GeoCities (1999)
What exactly did you have on this website?

Once is happenstance, twice is a coincidence, three times is an act of war. :O!

n3rdy··on Kiera Wilmot, student who caused small explosion, won't face charges
If you knew inhaling anthrax powder would kill you, why did you suggest it in the first place?

To be fair, it wouldn't kill all of us to do such an experiment. Not that anyone would think it was a good idea either way. So even assuming the other comment was telling you to "kill yourself" is dishonest on your part.

n3rdy··on Kiera Wilmot, student who caused small explosion, won't face charges
Have you ever tried making a drano bomb?

It's dangerous because its possible to lose some digits if you hold the thing in your hand too long, but if someone were intentionally trying to lose a finger that way, they would find it more difficult than they imagined.

n3rdy··on IRS faces class action lawsuit over theft of 60 million medical records
> A tragic story, but my money is on the IRS in this one.

Or at least 20% of it is.

n3rdy··on Linux local privilege escalation 0day, 2.6.37 - 3.8.10
His naming conventions are splendid.
n3rdy··on Apple using moving letters as captcha
Why not? If it can grab all 20 frames, it has 20 times more data than it would normally have to solve the captcha.

Even if the captcha recognition's success rate is only 5%, its overall recognition rate is going to go through the roof.

You also get to do something you can't do with static captchas, compare the results. If 70% of the frames recognized the first letter as A, it's likely to be A, and so on.

As the letters move, they briefly do the really hard task of segmentation for you.

If there is any incentive to crack this captcha, it will be cracked very soon if not already, it looks like a very easy one to write.

n3rdy··on Bad as Shit
> It's "crazy stuff really does sometimes happen in the real world, but you'll never be able to verify this specific story either way".

Not necessarily..

804-840-0000 804-840-0001 804-840-0002

So it wasn't always impossible to confirm, just time consuming. Except now you would need a time machine to confirm this, since I'm sure they have changed the phone number since this story started making its rounds.

n3rdy··on IRS targeted groups critical of government
Or just scrap the whole tax thing. We were building roads and services before taxes.

Every justification for taxation not only has evidence that there is no correlation between tax revenues and resolved problems, but that we are more than capable of solving these problems ourselves through voluntary collaboration, rather than coercive.

n3rdy··on IRS targeted groups critical of government
> Linking every Sovereign Citizens group to the Tea Party movement is just a smear.

FTFY

n3rdy··on Why I am always on the lookout for a PayPal alternative
He isn't complaining about the chargeback policy. He's complaining that paypal double dips on the currency conversion, even if the money never reaches his bank account.

Paypal could just send the USD directly to his bank, and the bank would convert the currency before crediting his account, so it is an unnecessary burden and loss of money for him.

n3rdy··on Water Planets in the Habitable Zone
If this is the case, dibs.
n3rdy··on Are you a psychopath?
I like how it asks what type of phone I use on a scientifically validated test.
n3rdy··on Can you crack a code?
not too long ago, the act of making, using, or distributing encryption software made you a criminal in the eyes of the fbi
n3rdy··on The Promise to Develop Ethical Software
Tesla may be a good candidate. My only reservation is I do think he may have tried or did invent weapons to sell to the military.
n3rdy··on Why your password can’t have symbols—or be longer than 16 characters
Our engineers have thick skin, they can handle it. However, we don't know how sensitive a potential hacker might be, and would feel terrible if we offended someone who wasn't expecting so see such profanity.
n3rdy··on Why your password can’t have symbols—or be longer than 16 characters
Or change your password using a computer, to a more iphone friendly password.
n3rdy··on NASA has three smartphones orbiting the earth as mini-satellites
In hindsight, I really could have worded my original question better. It didn't even occur to me that the way I worded the question implied maintaining its position, my bad.

I was just curious if you could get the balloon to maintain an altitude within low earth orbit, without concern for where the balloon actually drifts.

I was imagining a way to get the balloon to behave as a buoy at sea (not anchored), floating above the thicker atmosphere the same way a rubber balloon or raft would drift at sea.

n3rdy··on NASA has three smartphones orbiting the earth as mini-satellites
Not sure if this is off topic, but shouldn't it be simple to make a high altitude balloon out of a material that doesn't explode so easily when it gets to the lower pressures in low earth orbit?

Or even some kind of contraption that slowly releases gas from the balloon as it detects lower pressure in the atmosphere to help it maintain altitude and prevent the balloon from rupturing?

n3rdy··on How Much Sweat It Takes From Zero to Billionaire
Most people wont even risk ego, let alone capital, to achieve that kind of success.
n3rdy··on How Much Sweat It Takes From Zero to Billionaire
This is more fault of government and how they use tax money, not the people who created their own wealth.
n3rdy··on Google Outage
Google Outage: When you need to kick a site offline, Google now provides the most powerful network for all your nefarious packet flooding needs. Don't be too evil. Wink! Wink!

I mean, Google Outage: When you need to know if a site is offline!

n3rdy··on What happens when you give 4chan images of the Boston Marathon?
What super power does law enforcement possess that us lesser humans don't?
n3rdy··on What happens when you give 4chan images of the Boston Marathon?
I think there is a big difference between the news saying "THIS IS THE GUY! THIS IS THE MONSTER!" and people on a forum speculating that "this may be worth looking into further".

The people who turn it into a witch hunt are likely not the people actually using their heads enough to know what to be looking for in the images.

n3rdy··on Physicists To Test If Universe Is A Computer Simulation
IMO one other motivation would be a safe way to create a strong AI, for both predictive purposes, development of new technologies, and medical advancements.
n3rdy··on Bounding the speed of ‘spooky action at a distance’
> Because just observing the polarity changes it, so you can never be sure what position it was in originally.

That does put a crimp in my universal router plans, but that's really interesting by itself that just looking at the atom affects its polarity.

n3rdy··on Bounding the speed of ‘spooky action at a distance’
> Then he didn't understand what you were asking. It can easily be faster than the speed of light because no information can be transmitted through this phenomenon.

If its observable then how could information not be transmitted?

I'm the furthest thing from a physicist but if quantum entanglement causes an atoms polarity to change because millions of miles away another atom it is entangled with did the same, that would seem like an excellent way to encode information into bits, supposing you can change the atoms polarity at a whim.

n3rdy··on My Code made it to a Hollywood Movie
Now if it were my code in a movie, it would probably be something I was very proud of. Hollywood, having no idea what the code actually does, instead makes the code brick the hero's machine at the worst moment. Hero dies. Everybody blames me. :(
← PreviousPage 2 of 7Next →