HNHacker News
TopNewBestAskShowJobs

sourcelang

6 karma · joined December 22, 2022

submissionscomments
sourcelang··on Paragon Graphite is a Pegasus spyware clone used in the US
Sure, cover your eyes.

This conversation needs to start at a point where we take the status quo of government, intelligence agency and private company operations into account, and not from an idealistic utopian perspective.

Companies or governments with unlimited budgets, zero morals and access to the worlds smartest hackers will always exist. I’m not being some kind of doomer, I’m being realistic.

sourcelang··on Paragon Graphite is a Pegasus spyware clone used in the US
People will post their tired moral objections(as I used to), but in a world where public information is already heavily monitored, censored and controlled, and where people are already arrested for posting song lyrics or making their dog do comedy sketches, why not just completely let the cat out of the bag and stop pretending we have any sort of reasonable control over our own private lives, thoughts or opinions outside of government, intelligence agencies and public-perception altering mega-corporations? I’m quite serious here. There’s almost no point in fighting at this point.

I would personally like to see law enforcement and intelligence agencies double down on their use of these kinds of tools, but, you know, to catch drug traffickers, terrorists, illegal arms dealers, money launderers, actual criminals who want to harm people, or is that too much to ask?

If Trucker John is going to be arrested for posting something vaguely racist under a Twitter video where 5 guys are brutally murdering someone, why not also catch the actual criminals in the video?

I’m dead serious here. Let’s just accelerate. Make the internet and internet-connected devices defacto public property and allow full access to law enforcement. I’d rather have all this be regulated with oversight, than the alternative.

sourcelang··on Microsoft Edge is leaking the sites you visit to Bing
Interesting. Does this actually have any security implications or is my paranoia for nothing?

In my head, “normal“ CAs used by browsers for example are held to a high standard of digital trust. Whereas trust in the US military as a CA sort of implies blind faith. But I honestly don’t feel that I know enough about TLS to know why I should trust, say, digicert or identrust, more or less than the US military.

sourcelang··on Microsoft Edge is leaking the sites you visit to Bing
I remember opening up a new HP laptop with Windows installed, around 2016. Out of curiosity I installed Wireshark and inspected some of the outgoing packets from pre-installed software on the Windows system. Alongside the usual telemetry, I found some packets being sent to an IP registered by the US military, straight to a military base, no proxy or anything. Maybe there’s a perfectly non-nefarious explanation but that investigation sure felt like it confirmed my suspicions…