Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Fun with Red Star OS

sizeof.cat

Post reply on HN
Print view View original

121–130 of 179 posts

Re: Fun with Red Star OS

#121

Post by mistrial9 »

reaperducer wrote: post #111
danielvaughn wrote: post #5

Earlier quoted context omitted.

In a former job, I had to inspect network traffic on my mac. So I install Charles, open it up, and start looking around. I was astounded how much network activity is going on that I had no idea about .

Macs have always had incredible network use, even way back in the dialup days when I started working with them. The software seems to be designed to assume a perfect, exceedingly fat network connection at all times, and that all processes can do what they want with it. In all the years I've been using Macs, as far as I can tell, there is nothing in the OS that says, "Oh, the person is sending e-mail over a crappy cel…

this needs clarification -- the Operating System under Mac OSX is designed during the Great-TCPIP-Expansion, and is NOT chatty, in fact things that were chatty were slapped down regularly. Since then, the MBAs at Apple Inc have built their "I Phoney" world, and certainly have added stupid chat. The details matter, for those that wish to move forward

Re: Fun with Red Star OS

#122

Post by dheera »

Latty wrote: post #45
dheera wrote: post #16

Earlier quoted context omitted.

Why are VMs so bad at virtualizing? An ideal VM should be indistinguishable from a real machine. For example a virtualized system running Android should generate fake IMU data, not sit at 0 linear acceleration all the time. And have a real-looking fake IMEI, not a string of 0s.

> An ideal VM should be indistinguishable from a real machine. Ideal for what purpose? virtio is a good example of where that breaks down. For a lot of use cases, directly exposing an explicitly virtual device rather than emulating real hardware can be much more efficient and avoid bugs. For example, it may help a virtualised system avoid some layers of caching or optimisation if they are redundant because they are n…

> Ideal for what purpose?

To shove it at companies like Tencent who will ban you for trying to run WeChat in a virtual machine, and restore freedom to the user to run software how they want. WeChat also randomly scans for Wi-Fi networks, I'm guessing they sniff VMs with tricks like that.

It should also be a violation of disability law to force users to use a hardware mobile phone to run a particular piece of software. VMs open the doors to custom accessibility solutions.

They shouldn't even have the right to know what it's running on, they should just hand me bytecode of a suggested (but not required) client, and open a port on their server for service.

Also in general to shove it at any company with potential spyware. I always run unknown closed-source software in a VM and I should have the basic right to do that. But sometimes those companies try to detect VMs. If the VM engine is good enough they shouldn't be able to.

Re: Fun with Red Star OS

#124

Post by mmh0000 »

tejohnso wrote: post #94
jeroenhd wrote: post #34

> Spoiler, he doesn’t give a fuck about your hentai porn. These operating systems do actually contain code that add a signature belonging to your install of the machine to pictures and video files, so be wary if spreading your hentai porn in Kim's country because it can be traced back to you. That said, there's a lot of panic about fears of having it reach out across the internet and infect your entire network withou…

> If you're comfortable with running Windows 11,you're already sharing more data than... Do you know of any good writeups on the details of Windows 11 data sharing?

Straight from the horse's mouth:

https://docs.microsoft.com/en-us/windows/privacy/required-wi...

Keep in mind, this is what is logged if you select "basic" telemetry. By default Windows logs even more than what is detailed there. It is an insane amount of data.

Re: Fun with Red Star OS

#126

Post by jeroenhd »

trasz wrote: post #73
jeroenhd wrote: post #34

> Spoiler, he doesn’t give a fuck about your hentai porn. These operating systems do actually contain code that add a signature belonging to your install of the machine to pictures and video files, so be wary if spreading your hentai porn in Kim's country because it can be traced back to you. That said, there's a lot of panic about fears of having it reach out across the internet and infect your entire network withou…

>These operating systems do actually contain code that add a signature [citation needed]

https://linuxreviews.org/Red_Star_OS mentions the UUIDs being added. More details are available in talks like the one from the CCC: https://www.youtube.com/watch?v=8LGDM9exlZw

Re: Fun with Red Star OS

#127

Post by anthk »

rwmj wrote: post #23
dheera wrote: post #16

Earlier quoted context omitted.

Why are VMs so bad at virtualizing? An ideal VM should be indistinguishable from a real machine. For example a virtualized system running Android should generate fake IMU data, not sit at 0 linear acceleration all the time. And have a real-looking fake IMEI, not a string of 0s.

Hi, virt engineer here. Partly because it a very hard problem (in fact, theoretically impossible if you include timing attacks), but mainly because you don't need to emulate the hardware very accurately in order to get common operating systems to run. Getting them to run is all that we're paid to do, and that's a difficult enough job already. One strange aspect of this is that only a narrow range of current OSes run…

That's bullshit because Qemu it's an emulator too, so it will run Solaris and W95 perfectly.

I am not a virt engineer but I could run W95, OS2 and heck, even Mac OS 9 under Qemu, recently.

Seriously, if you are a virt engineer, drop your title down :).

Qemu has an ISA pc module, and you need to disable kvm just to be sure. Set the CPU to Pentium and everything will be fine.

Re: Fun with Red Star OS

#128

Post by vkou »

echelon wrote: post #109
no_time wrote: post #100

Earlier quoted context omitted.

How about MS stealing executables and running them on their own servers on the default config of win10? If you had a build of your own application with hardcoded keys in the binary, there is a high chance MS has it now. https://news.ycombinator.com/item?id=21180019

That's absolutely appalling. I used to exempt Microsoft as the "one good MAGMA" under Nadella's leadership, but they're clearly stepping back into evil territory: - stealing your Windows files and secrets - capturing our industry with Github (the development ecosystem is accreting here) - Github Co-pilot training on GPL - Microsoft pay website injection in Edge - heinous Xbox DRM - LinkedIn is still scummy and full o…

> - Github Co-pilot training on GPL

Why is training Github on GPL bad, but training a language model on public domain books and texts not?

Edit: Thank you for explaining the problem.

Re: Fun with Red Star OS

#129

Post by vkou »

whimsicalism wrote: post #64
BuildTheRobots wrote: post #54

Earlier quoted context omitted.

The KGB used to require all typewriters to be registered, so they could identify the authors of anything they found objectionable. Being able to track who produced an image that's doing the rounds spreading "propaganda" seems like it adds a lot of value (from an authoritarian point of view, at least).

LOL yeah the US does the exact same thing. I would pay to read a newspaper that (somewhat satirically) reported on the US the way we report on our adversaries. Complete with referring to police as "security forces", including wild speculations about the backstabbing behind-the-scenes of their top politics, etc.

> I would pay to read a newspaper that (somewhat satirically) reported on the US the way we report on our adversaries

If you really want this, just start reading foreign news.

Re: Fun with Red Star OS

#130

Post by LogonType10 »

reaperducer wrote: post #117
lostcolony wrote: post #101

Earlier quoted context omitted.

So looking at a document, you'd not be able to know what typewriter it was written from, no. However, looking at a document, you may be able to tell the make and model of the typewriter, due to different typefaces and known mechanical differences across the make/model. That, coupled with a location or list of suspects, would allow you to examine specific typewriters. You may be able to determine a letter was written…

So looking at a document, you'd not be able to know what typewriter it was written from, no. Actually, yes. Typewriters, especially well-used ones develop their own quirks. The "e" is a little higher or lower. The "o" gets a little filled with ink. It's mechanical, so parts wear, things get a bit off, and with enough use, each typewriter develops its own fingerprint. It's been a thing in mystery novels at least back…

How reliable is this compared to bite marks?
Post reply on HN