HNHacker News
TopNewBestAskShowJobs

v4n4d1s

1,277 karma · joined February 19, 2015

I do stuff with computers.
submissionscomments
v4n4d1s··on FBI has obtained 7k Lockbit ransomware decryption keys
In a recent press release [1] the USDT said "According to the Department of Justice, LockBit has targeted over 2,500 victims worldwide". Now finding 7k decryption keys gives us a more realistic view on the insane problem ransomware has become and how many companies pay without publicy declaring a security incident.

[1] https://home.treasury.gov/news/press-releases/jy2326

v4n4d1s··on Apache Guacamole 1.1.0
Try Xrdp https://en.wikipedia.org/wiki/Xrdp

I use it on a bunch of Ubuntu 18.04 systems, works out of the box with apache guacamole.

v4n4d1s··on Apache Guacamole 1.1.0
Switch to freerdp 2.0 and swiss german keyboard layout are my highlights.
v4n4d1s··on Web port of the original Diablo game
It's already down...

https://www.pcgamer.com/the-original-diablo-is-now-playable-...

https://www.techradar.com/news/spend-your-lunchtime-playing-...

v4n4d1s··on User Inyerface – A worst-practice UI experiment
My Bank has a password character limit of 32, which actually is a 31 character limit and I was the first person to notice.
v4n4d1s··on Buy a Raspberry Pi 4 Model B
Just ordered two 4GB variants. They're getting strong enough to replace my 3 node proxmox cluster at home for most of my services.

Not happy with micro-HDMI though.

v4n4d1s··on Nokia phones sent identifiable data to Chinese server
Yes, I'm fully aware of this. There's also the problem of having a closed source baseband processor in pretty much every device.

But bypassing these mechanisms is a decision they had to make. If they're just lazy or incompetent, these userspace apps should be sufficient as a mitigation.

Check this out for a more sophisticated way: https://privacyinternational.org/node/2732

v4n4d1s··on Nokia phones sent identifiable data to Chinese server
Send you a mail from a newly created mail account.
v4n4d1s··on Nokia phones sent identifiable data to Chinese server
I have a Nokia 3 and a Nokia 7.0 Plus, both had a bunch of com.evenwell.* packages installed.

I think all HMD devices have those packages.

v4n4d1s··on Nokia phones sent identifiable data to Chinese server
This has to be fixed by HMD and I hope for an official investigation as most other manufacturers are probably doing the same.

In the meantime, I recommend the following:

1. Remove any unnecessary packages through ADB (https://www.xda-developers.com/uninstall-carrier-oem-bloatwa...)

2. Use Shelter (https://f-droid.org/en/packages/net.typeblog.shelter/)

3. Use a VPN-Firewall such as NetGuard (https://f-droid.org/en/packages/eu.faircode.netguard/) or NoRoot Firewall (https://play.google.com/store/apps/details?id=app.greyshirts...).

v4n4d1s··on Ask HN: Which tool have changed your life recently?
I used to run a Microsoft Exchange Server for my family, just switched to Mailcow-Dockerized, which is really awesome.

https://mailcow.email/

v4n4d1s··on Engineers Shouldn’t Write ETL
Thanks for developing easymorph! Free version helped me through my bachelors degree. It's my go-to tool to introduce people to ETL and similar concepts.
v4n4d1s··on Ask HN: Are any remote desktop solutions good enough for full-time use?
I've been using Apache Guacamole for a few years now to connect to my RDP / VNC machines at home. One of the biggest points is beeing able to connect to a machine with a modern browser without using any Plugins. As far as I know version 1.0.0 is going to be released soon, so just wait for this as the setup is a huge PITA.
v4n4d1s··on Ask HN: What discontinued company/product do you wish was still around?
Have you tried the Nintendo Switch?
v4n4d1s··on Ask HN: What Engine Is Better for games: Unity, Unreal or Unigine?
There's no simple answer to your question.

It all comes down to your use case: Are you trying to learn game development or are you developing the next AAA-Title with hundreds of developers? Which platforms are you targeting? Are you willing to pay for the engine and/or the assets?

v4n4d1s··on List of April Fools Day Announcements (2018)
Stackoverflow added a rubber duck https://i.imgur.com/t1468Bt.jpg
v4n4d1s··on What It Felt Like in Hawaii When Warning of an In-Bound Missile Arrived
Anyone got data (Heartrate etc.) from Apple Watches / Fitbit / Other Tracking devices?
v4n4d1s··on Ballistic Missile alert in Hawaii
Maybe an error: https://twitter.com/NutzFordBucks/status/952243050675281922
v4n4d1s··on Big Data Set for Crypto Backtesting
Why? Backtesting is already an idiotic way to write a trading bot and by only using data between August and November you basically get a completely wrong, over-optimized algorithm.
v4n4d1s··on “We have obtained fully functional JTAG for Intel CSME via USB DCI”
I don't understand your question. Please clarify.
v4n4d1s··on Request for Education Startups
It's not K-12, but some of you may be interested in reading this paper about the online exams service at ETH Zurich (Switzerland).

http://dspacecris.eurocris.org/handle/11366/478

v4n4d1s··on Disabling Intel ME 11 via undocumented mode
Thank you
v4n4d1s··on Disabling Intel ME 11 via undocumented mode
Search for "AMD PSP".
v4n4d1s··on Void Linux
I met Richard Stallman in 2013. He used a Lemote Yeelong which was powered by a MIPS Loongson CPU.
v4n4d1s··on Intel Reveals Post-8th Gen. Core Architecture 10nm+ Ice Lake
"The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact."
v4n4d1s··on Announcing the Windows Bounty Program
Dear Microsoft

>Any critical or important class remote code execution, elevation of privilege, or design flaws that compromises a customer’s privacy and security will receive a bounty

Windows 10 has a major design flaw which compromises your customers privacy and security. You call it Telemetry and it can't be disabled completely(definitely a bug! Nobody would make such a stupid decision, amiright?).

Please send me further instructions on how I can claim my 250k.

Also: Why is there nothing for Server 2016?

v4n4d1s··on A vulnerability rating of your IP address
This tool does not provide enough information about the scan and the detected "problems".

1. It's only scanning for default ports.

2. It told me about having a CVE-Score "3/3", please provide me with the exact CVEs, so I can patch my system accordingly.

3. Running a webserver on Port 80 is not insecure per se, it's just not encrypted.

4. No feature to rescan, provided information is probably old.

While I like the overall design, I think this tool is not for technical people, but for everyone who uses the word "cyber" on a daily unironically basis.

v4n4d1s··on Show HN: Rqlite v4.0 – With node-to-node encryption
Can this be used as a "drop-in" replacement for sqlite or do I have to modify my application for it?
v4n4d1s··on Dear JavaScript
Haha, oh wow. Sorry for that. I have JS disabled and didn't get that notice.
v4n4d1s··on Microsoft leak reveals new Windows 10 Workstation edition for power users
There are two main arguments:

- You can't disable telemetry completey. Some people want it, some don't. Let the user decide.

- Microsoft does collect an insane amount of data.

https://docs.microsoft.com/en-us/windows/configuration/basic...

Page 1 of 3Next →