Live data from Hacker News

YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

boingboing.net

241–250 of 449 posts

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#241
post #54

Earlier quoted context omitted.

I always think he’s mostly right, but a little too uncompromising, but then everything he says comes true. I don’t know how he predicted so far ahead at the time, it’s humbling. As a software author working at startups, am I part of the problem? I don’t understand how to make a good living without locking down the code to some extent, with few exceptions (it’s hard to found red hat)

He is literally a genius. The question you should be asking yourself is “why do I have to take freedom away from others to earn a living?”

No, the question you need to ask yourself is 'how small of a living can I stand?'. I make a living programming audio software that's GPL-compatible (I'm using MIT license on the grounds that nobody succeeds in the music business unless they allow themselves to be exploited). Stallman can use anything of mine, I just can't use the capital F free stuff GPL users create in exchange, but I get to feed 'em if anything I do is worth having.

I do make a living, it's just a very poor and insecure living. I sleep a lot easier, though, and it's very unmistakably a 'First World' living even if it's sort of constrained. How small a living can you stand? How rich do you have to be to have 'enough', and do your 'quality of life' calculations include personal guilt over screwing people over, or not doing that? Software freedom matters to my day-to-day life, but so does the fact that my income's low enough that I qualify for Section 8 housing. Without that, I'd lose some things making it possible to be writing the free software.

Can you afford to be on the side of good, or do you have to play for team evil in order to keep the doors open? If it's the latter, can you plan for a heel/face turn and execute a dramatic betrayal of Team Evil? I did (sort of). I was selling the audio software for years and merely keeping all my code proprietary (and getting sucked into the hype mechanic, more and more) and when I made my exit and went full Patreon I executed a clear, very public transition from commercial to open source, even reserving that as a threshold for the Patreon to hit. Took a major loss in revenue right away, but made that threshold pretty soon, and now I don't have to go back. But I wouldn't have been able to do it without years of exposure as a commercial developer.

Just like doing an IPO or executing an acquisition strategy, you can execute a heel/face turn into Free Software if you handle it properly. You need to care about the values of it, that's part of the return for you, but I'm still seeing annual returns in excess of, say, index funds. I'm growing at about 34% a year (started out more, but that's over the last year and ignores launch) and I feel I can continue to expand at that rate through taking on more interesting (and costly) projects. Note that this is not passive, this is working capital and is continually funding new stuff I'm able to take on. Hey, if it works for Amazon… ;)

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#242
post #63

Earlier quoted context omitted.

What I am worried is that a lot of the "cool stuff" is disappearing from the web. I remember back in the day (late 90's) we had CrackStore, Phrack, Fravia, DeCSS, the box.sk domains a vibrant reverse-eng. community and a lot of really cool content. Nowadays with the USA policing a lot of that content has disappeared, and slowly people are pushed not to do new content. There are some very small efforts in some subredd…

In fact are there any other good gathering places than some obscure subreddits?

Subreddits are weird. Because of how Reddit works, it's awful easy for the place to be governed by state actors and various coordinated brigades. So you can be there, sure, but if you're in the wrong place with information someone doesn't want seen, it won't do you a lot of good as you'll get the "oh look, 25 downvotes in a matter of seconds, someone's on point today" effect. It's REAL easy to police Reddit and enforce your agenda if you're organized and have teams of bots or sockpuppets.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#243

What's next, cracking and reverse-engineering? Debugging? (Anti-authoritarian) programming ? As usual, Stallman tends to be quite prescient: https://www.gnu.org/philosophy/right-to-read.en.html (perhaps more like "right to watch" in this context.)

The big thing RMS misses in that article is all the bio-identification that has been happening the last couple years. Dan is going to get caught because the machine takes a picture of him when he logs in with a password instead of the fingerprint reader, cause you know can't have a PC without a camera pointed at the user..

If only there was a way to condition users to have a picture taken of them every time they unlock their device ...

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#244

Earlier quoted context omitted.

Because every security system is potentially flawed, contain bugs and therefore is vulnerable to hacking.

But knowing the flaw makes it insecure.

It was insecure whether you knew it or not.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#245

Earlier quoted context omitted.

>"Be sure to hit that like button and subscribe!" When I hear this standard YouTuber meme, I always trip hard over the dislike button and never quite make it to subscribe. :^)

They have to say it because otherwise people don't subscribe. I know some youtubers who never did it hut had to resort to saying it because their subscriber numbers where stagnating otherwise.

I need to experiment with this. I don't say that mantra and my channel is slowly growing (by about 100% a year and starting to do a hockey-stick curve, but starting from very little). I should take a minute at the end of a video (or even the beginning!) to make a case for supporting the actual channel, on the grounds of it'll help the message get out.

I can phrase it as 'like OR DISLIKE and subscribe and click the bell icon', and explain how the dislike button is the same thing (both go to 'engagement') plus a little feedback for me the creator. So you can help the channel AND try steering me away from more channel-whoring by disliking and subscribing. Hell, maybe it helps you more. Please dislike and subscribe :D

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#247

The internet promised so much, but is being ruined by corporations and governments. I can't help but feel the ruining is accelerating. I hope the infosec community can come up with some kind of decentralized way to actually share free speech. If anyone is capable, they are. The discovery problem is an illusion. If you build it, they will come.

>I hope the infosec community can come up with some kind of decentralized way to actually share free speech. If anyone is capable, they are. There are decentralized/open/ethic friendly services alternative to big corporations services. In the case of Youtube there's PeerTube[1] for exemple (even if in that case there's a IP leak due to the p2p protocol if I remember correctly). The sad thing here is that people decid…

This is why we need a solution that separates the social network from the storage platform. Maybe as a first step, have a system that combines your peertube, bitchute and youtube accounts together, like a semi-rss feed. Maybe you should be able to use your google account on the alternate platforms. Google won't like such adversarial compatibility, but if done client side there won't be much they can do.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#248

Earlier quoted context omitted.

It's like they've got too much content anyway, so why not just start banning stuff?

Ironically, they remove the videos that people watch, not the thousands of terabytes of videos with 3 clicks in the last 6 years.

It would be sad if they removed the videos with 3 click in the last 6 years, because those are the ones of your granddaughter, living thousands of km away, taking her first steps, or reading her first reading primer by herself. These are the things that help families stay in touch. Just because they don't attract mass clicks (and aren't intended to) does not detract from the value they have for the small number of viewers to whom they matter.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#249
post #32

> Yesterday, Youtube froze Kody Kinzie's longrunning Cyber Weapons Lab channel Did his channel get unbanned? Kody's website links to this active channel with its first video uploaded in Oct 2017: https://www.youtube.com/channel/UCgTNupxATBfWmfehv21ym-g edit: Yep looks like the ban was a mistake ️ > In a subsequent comment, a YouTube spokesperson confirmed to The Verge that Cyber Weapons Lab’s channel was flagged by m…

It is not just this isolated case. Youtube changed their terms and conditions in such a way that affects all educational content related to infosec, more info in the other HN thread here: https://news.ycombinator.com/item?id=20346865

To be fair, it's reasonable to forbid instructions on how to attack specific online third-party systems, just that the phrasing of YT's policy is too ambiguous and can be extended to any educational infosec content.
Post reply on HN