HNHacker News
TopNewBestAskShowJobs

sybercecurity

769 karma · joined July 6, 2017

Just some schmo.
submissionscomments
sybercecurity··on New gTLD Application for .lan
Full collection of proposed new gTLDs: https://newgtldprogram-aps.icann.org/statistics

Also see a .bldg application, which also might conflict with some legacy naming schemes.

sybercecurity··on Florida County Finds 11 Unpermitted Flock Cameras with Unidentified Owners
Who owns the property they are on? If it is public, is it a permanent installation (like they dug a hole) or attached to a utility pole?

Sounds like one way of discovering the owners is to simply impound the lot and see who comes to claim them. In the old days of admins, this was called the "Flip the switch and let 'em bitch" solution.

sybercecurity··on Trump's AI rebrand causes 'unprecedented' demand for Slovenian website names
Guessing that a large percentage of these are defensive registrations, or speculation.
sybercecurity··on Spencer Pratt on X: most political advisors are so bafflingly incompetent
Part of the problem is that they are often asked to produce talking points/briefs on subjects that have little-to-no knowledge of on a very short deadline. There is an over-reliance on whatever group, social media outlet, or webpage that has something they can include in talking points.
sybercecurity··on Trump Orders US to Rename AI to SI – "Super Intelligence"
Anguilla hardest hit...
sybercecurity··on WWLD #1: Domains and gas station hotdogs
Story doesn't really go with the headline. The story is really about how the website/company owner did not do the registration themselves, but had a one-time employee do it on their personal account. The lesson is: "Always use an account managed by the company for company things."

You can argue that many registrars try and get you to pay for a lot of add-ons. Being a registrar is a race to the bottom, so most try and increase revenue through add-ons like hosting, "extra security", etc.

sybercecurity··on Cybersecurity Has an AI Doomer Problem [video]
To be fair, cybersecurity also has a quantum doomer problem as well. Thinking about the worst case is often rewarded and thus, encouraged.
sybercecurity··on Anthropic Says Iran Used Its American AI Model to Target U.S. Navy Warships
Anthropic really leaning into that "No Such Thing as Bad Press" theory aren't they?
sybercecurity··on 1.1.1.1 now supports post-quantum DNSSEC
Note that 1.1.1.1 is a validating resolver. Some zone still needs to sign using the algorithm. That number is basically zero once you remove test zones.

Still, there will be a migration to PQC as in other protocols. DNS doesn't have the same "store and decrypt later" threat, so it could be a lower priority over other protocols in use.

sybercecurity··on Apple's Siri Recap Will Remember Your Conversations for You
So Apple looked at Microsoft's "Recall" project and thought they could do that in an even creepier way?

Also, some states have laws around recording of conversations without every party's knowledge/consent. How will that be achieved?

sybercecurity··on US sanctions Italian hosting provider Autistici Inventati
Declaring a group of "hackers" as global terrorists? Mark off that spot on your Cyberpunk Dystopia Bingo cards.
sybercecurity··on Tim Curry has died
Dang, forgot about her. That makes the rule of thumb. Well, until we notice another pattern that isn't there...
sybercecurity··on Tim Curry has died
Tim Curry, Dolly Parton, who is number 3?
sybercecurity··on Why people aren't buying Mark Zuckerberg's AI future
Aren't buying? It's all we're talking about in the metaverse!
sybercecurity··on U of Michigan drops first-semester grades to ‘curb mental health crisis’
A few years ago, there was a mini-trend of showboating about how many universities that accepted you. It is not difficult to apply to dozens of schools, with the assumption that you are not going to attend, but only to post that you got accepted on social media. Type A parents encourage this since it reflects on them as well (must be a good parent if the kid got accepted to 20+ universities).

Universities have caught on to this trend, and use other heuristics for acceptance like "has this person ever emailed us or visited the campus?" and not just taking applications as the only input. So acceptance rates have started to reflect this. Sorting through 1000's of throw away applications to find those who might actually want to attend.

sybercecurity··on Would you trust your boss with data about your brain?
That isn't the first question. The first question is: "How many people in the organization besides your boss has access?"
sybercecurity··on Flood warning: How citizens' AI agents will swamp public services
A subset of problems would be "how to differentiate citizen's agents from scammers/DoS attacks".
sybercecurity··on Elon Musk: In 36 months, the cheapest place to put AI will be space [video]
Sales pitch for a rocket company.
sybercecurity··on Why Substack Is Collapsing: Subscription Model Has Maxed Out
Wonder if "internet content subscriptions" could be an indicator of overall economic health. When people see their budgets being stretched, many look to cut expenses and unread newsletter subscriptions would be high on the list. Paid subscriptions its own isn't a good indicator, but maybe something worth looking into. Is also translating to other sites and services?
sybercecurity··on The Red Cross plans to extend its protection to cyberspace
Was following this work for the past few years. There were several proposals on how to do this from DNS RRs, to HTTP headers and TLS extensions. I appreciate the effort, but wonder if it will actually accomplish anything. Maybe state sponsored/managed campaigns will take emblems into consideration but I doubt criminals will. Plus if there is shared infrastructure, they may be caught in the blast radius anyway. Like attacking satellites (e.g. Starlink) to disrupt communications may also impact NGO operations nearby also using the service.
sybercecurity··on Cookware Got Worse on Purpose: Who Owns Pyrex and All-Clad Now
Yes, but it would require lawmakers and regulators to put reforms in place to move away from financializing-all-the-things to something different. Right now, the money is in financializing-all-the-things, so that isn't going to stop. Most can't even articulate with the something different could be - reindustrialization with stronger labor laws? Anti-monopoly moves to break up big corporations into smaller ones and prevent M&As?

The ultimate check is some form of socialist revolution, which then ends up swinging to the extreme the other way. There never seems to be a balance.

sybercecurity··on Usps.com and All Subdomains Down
Getting timeouts from dig, but the gTLD servers still show the delegation. So it's a problem with the usps.com auth zone servers.
sybercecurity··on I'm just so bored of AI
I am starting to believe the theory that the IT industry (well, the Silicon Valley part) is just chasing the dragon to try and relive the glory days of the early Internet boom. So it's trying to will the next big thing into existence.

Blockchain wasn't it, crypto became a haven for scams so normal people avoided it. AI is just the latest tech to be artificially pumped to make it appear "Silicon Valley" still has the magic.

sybercecurity··on A.I. Doomaxxing Is Bad for Our Economy
I think the term someone coined is "Doomtrolling" - the tendency to oversell AI as fundamentally upending IT, security, the economy, social order, etc. Both sides (pro and anti AI) do it.
sybercecurity··on The White House Wants Anthropic to Block All Jailbreaks. It May Not Be Possible
It likely isn't: https://arxiv.org/abs/2512.10100

Feels like the days when SQL injection was seen all the time. We learned mixing instructions and data is a bad idea and a constant game of whack-a-mole. Now a new generation gets to learn this lesson.

sybercecurity··on The Slate Truck's price may have leaked, starts at $24,950
Having a light truck really comes in handy, this might fill that need. Range wouldn't be an issue most of the time. Just depends on how big the market is with these groups:

Young people: affordable, useful for moving (dorm, apartments, etc.), outdoor activities.

Wealthier w/ land: cheap enough to be a 3rd (4th?) vehicle useful when running to Home Depot or Ikea to get stuff.

sybercecurity··on Our politicians fear engineers so much that they risk high treason charges
Fear or ignorance? I've had similar discussions back in the day and there were two themes in all the arguments:

1. Major cloud providers are professionals (implying you somehow aren't). They do this so well people pay them, so they must be better at it than anyone else on earth.

2. Perceived ease of use: management has been using Gmail/MS Office for so long they naturally assume there is no alternative. Why switch from something that works? Plus when something goes wrong they have a full team fixing it instead of the local IT guys (back to argument 1).

sybercecurity··on Promoting Advanced Artificial Intelligence Innovation and Security
Because it's an EO, which is not a law. EOs can only direct how the executive branch functions. Sometimes it could include calls for regulation if there are pre-existing regulatory powers.
sybercecurity··on Meta asks users to pay for WhatsApp, Instagram and Facebook
This looks aimed at influencers at first. The only feature touted is more data about viewers and followers.

If it were a non-horrible version of social media, maybe. I get the feeling it will be just the same with more data to target your herd (sorry, "followers").

sybercecurity··on Ask HN: Is the future of CS mostly applied and mostly in biology?
Or lean into the "science" part of CS. There is a lot to examine about how complex systems actually operate. Like what does "typical" network traffic look like? Is there even such a thing that can be broken down into categories like "enterprise", "home", etc.? It's been hard to create a tool to mimic or create synthetic traffic loads for testing.
Page 1 of 10Next →