Hacker News Reader

nickburnson First in-utero stem cell therapy for fetal spina bifida repair is safe: study

  The CuRe Trial is exploring whether stem cells can add regenerative power to surgery, potentially improving mobility and quality of life.
  
  “This is a major step toward a new kind of fetal therapy, one that doesn’t just repair but potentially helps heal and protect the developing spinal cord,” said Aijun Wang, co inventor of the placental-derived stem cell treatment technology and the study’s co-principal investigator [ . . . ].

nickburnson Apple AI servers unused in warehouses due to low Apple Intelligence usage

*deadmau5

nickburnson Motorola announces a partnership with GrapheneOS

No, by all means. Add a couple more paragraphs. Your rant seethes with credibility.

nickburnson AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]

Access points by their very definition are not capable of inter-VLAN routing.

nickburnson AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]

Disagree with your final statement. There's good security (and performance) reason to use any/all viable network isolation/segmentation/separation, etc., whenever/wherever possible. So-called Wi-Fi 'client isolation' is but a single network security strategy. No single strategy should be relied upon exclusively, nor avoided for that matter.

But it seems we otherwise agree on the overall impact of this vector. My point was mostly about the statement regarding any 'bypassing' of encryption.

nickburnson AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]

Much of (if not the vast majority of the 'worthwhile') traffic you're intercepting is still encrypted packets though.

Not to minimize the recon value of the plaintext stuff. But not really fair to say you're 'bypassing' any encryption but for the WPA-specific kind.

nickburnson Tailscale Peer Relays is now generally available

Thank you for the explanation. I was definitely unclear on the service that Tailscale apparently actually provides.

nickburnson Facebook is cooked

¡Mucho gusto!, desde los EE.UU.

nickburnson Facebook is cooked

Sería 'sponsored posts.' Como angloparlante nativo, tenía que comprobar que fuese una palabra de verdad 'patrocinate' (como 'patrocinado').

nickburnson Facebook is cooked

Alright, I'll be the dude to call a spade a spade: it was all done for "clicks."

The sheer banality of that tends to eventually wear on a dude.

nickburnson Tailscale Peer Relays is now generally available

This is pure misinformation. 'Most connections are direct, P2P' makes no sense to anyone versed in basic networking.

nickburnson Tailscale Peer Relays is now generally available

So how does the proxy know where to proxy packets to?

nickburnson Tailscale Peer Relays is now generally available

'Zero trust' has a technical definition that's not really relevant here. See: https://en.wikipedia.org/wiki/Zero_trust.

The concept is separate from 'zero config' (https://en.wikipedia.org/wiki/Zero-configuration_networking), which Tailscale's low technical barrier to entry evokes.

nickburnson Tailscale Peer Relays is now generally available

Zerconf ≠ zero trust. The difference could not be more material in this context.

nickburnson Tailscale Peer Relays is now generally available

They need to know how/where to route your outbound traffic. That inherently includes plaintext DNS, TLS handshakes, and otherwise plaintext traffic (like HTTP for example).

Anybody wanting to see what Tailscale is able to see can simply sniff any router interface passing outbound traffic before it enters the WireGuard tunnel interface.

nickburnson Tailscale Peer Relays is now generally available

The client may be open source. But the service is obviously not.

Don't let that deter you from trusting whomever you choose, though.

nickburnson Tailscale Peer Relays is now generally available

Neat use case. But in fairness, you've simply 'offloaded' NAT traversal/port forwarding to automagic helper protocols over which you have no control even if you wanted it.

nickburnson Tailscale Peer Relays is now generally available

Things are much more unscrupulous than potentially ceasing to be free tomorrow. Nobody who values their privacy would ever route their network traffic through a 'free' service.

nickburnson Tailscale Peer Relays is now generally available

Pretty much this. DNS, SNI, and otherwise plaintext traffic sniffing. That together with user/device 'fingerprinting' (a much more amorphous concept), and that's why such-and-such thing you were just talking about with so-and-so pops up on your screen/feed/whatever, sometimes only minutes later.

I highly doubt any of this can actually be opted-out of. How else would they stay in business?

nickburnson 7zip.com Is Serving Malware

For the router itself? No. For the 'prosumer' admin? Sure.

How many prosumers or otherwise network admins filter outbound traffic though? And of the select few that do—how many are actually 'inspecting' say, outbound TCP/443 (e.g., monitoring traffic volume, looking up destination addresses, and/or inspecting SNIs) for example?

nickburnson Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware

'Apple-documented' being operative here.

nickburnson Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware

I don't doubt it in the slightest. Every corporate surveillance firm—I mean, third-party CDN in existence ostensibly operates in the name of 'velocity'.

nickburnson TikTok is tracking you, even if you don't use the app

Developer link: https://www.patreon.com/pfBlockerNG

nickburnson TikTok is tracking you, even if you don't use the app

pfBlockerNG (on pfSense) does. But you need to specify the feed in both places—i.e., as an IP feed and a DNSBL feed—though.

So technically 'parsers', plural.

nickburnson Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware

I'm much more convinced that you're competent in the field of forensics. But I still don't think suspicious network traffic can be categorically defined as a 'device breach.'

For all you know, the traffic you've observed and deem malicious could just as well have been destined for Apple servers.

nickburnson TikTok is tracking you, even if you don't use the app

Whether or not it does so effectively, you should go for it anyway.

nickburnson TikTok is tracking you, even if you don't use the app

Disable HTML in fact.

Those are my favorite kind of spams.