Live data from Hacker News

“Warning: Do Not use my mirrors/services until I have reviewed the situation”

article.gmane.org

161–167 of 167 posts

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#161

Earlier quoted context omitted.

If the USB device from the article is doing anything along the lines of BadUSB or EFI compromise, then re-imaging your server won't accomplish much. https://trmm.net/EFI

it is pretty likely the USB device is this http://www.cru-inc.com/products/wiebetech/mouse_jiggler/ to prevent the computer going to sleep while this is utilized http://www.cru-inc.com/products/wiebetech/hotplug_field_kit/ These are pretty standard plays in seizing computers these days. One should note that the grsec linux patchset has functionality to not load drivers for any plugged usb devices, as well as log when…

Maybe it was a USB Emily Dickenson, or even worse, a USB Slavoj Žižek?

http://www.gamespot.com/articles/gdc-panel-tackling-the-emil...

>Will Wright, the creative mastermind behind SimCity and The Sims, spoke last, charming the crowd with a fluid mix of academic design insight and brash humor. "I'm convinced that if she was alive today, she'd be an Internet addict," Wright began. Citing television show Futurama as a key influence, Wright presented his idea for an Emily Dickinson desktop agent. Wright explained that, like a mix between Tamagotchi, the Microsoft Paper Clip, and Seaman, the Dickinson agent would be moody, portable, dependent, somewhat annoying, and observant of all your computer-based actions.

>Wright envisioned that the agent could be sold on USB memory sticks, in order to cleverly "backdoor" the program to unsuspecting customers. "USB Emily," as Wright dubbed the agent, would then interact with the user via IM, e-mail, and pop-up messages. USB Emily might snoop into the user's programs and documents in order to find keywords to comment upon or send poems about. Over time, the user would "slowly bootstrap a relationship with her."

>Referencing some of the emotional problems from which Dickinson suffered, Wright explained, "I want to put the player in the role of her psychotherapist." In one scenario, the player might help USB Emily through her problems and eventually befriend her. But in the two "degenerate cases," USB Emily might either become romantically obsessed with the user (a reference to her often erotic poetry) or fall into a suicidal depression (in which case the program might delete itself).

http://games-beta.slashdot.org/story/05/03/10/1723254/emily-...

>Will Wright's was the final design up for consideration, and was a truly inspired idea. It included such charts as the one to the left, showing the overlap between Emily Dickinson readers and GTA players.

>Then he put forth his goals. He wanted to have the mood dependency and portability of a Tamagotchi, the helpful/annoyance of Clippy, and the relationship and creepy aspects of seaman.

>What he came up with was USB Emily Dickinson. The game would be a small program bundled with a USB memory drive, which is now a large business and an almost impulse buy. The "Emily" program would sit on the drive, and would occasionally interact with you in order to begin to derive an emotional relationship with you. * These interactions would include Instant Messaging, email, and interruptions while writing. Over time, the program would develop a model of behavior depending on how you'd interacted with it. Will's thought was that, while you could eventually get her to a stable state it was more likely that she'd become romantically obsessed with you, or suicidally depressive. In the latter case, he said, she would have the option of deleting herself off the USB drive.

>To respect the license idea, again, Wright opined that the program could be adapted for any famous figure, and to have many different USB individuals operating on the same computer. If you had enough ports you could even have them interact with each other through natural language generation. Thus, you could slot drives to view a conversation between Marx, Twain, and Homer Simpson. While all of the ideas were stellar, Wright took home the first prize for the second year in a row.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#162

Earlier quoted context omitted.

> It is entirely possible it is survivor bias on my part but I get the suspicion that a global sort of 'cyberwar' that has been rumbling along for years is heating up rapidly. It might have been a freudian slip or some kind of intuition, but when I was describing my life plans to my family, I said something along the lines of "I don't want to manage people, I want to stay on the front lines with the code." Except I d…

It is a difficult place to operate from. One of the things that depressed me about robotics for a long time was all the investment in robots that could kill other people. The logical conclusion though, is you can either own that problem and spend your efforts on developing and making available countermeasures to code that can kill, or you can let go of the problem. In a similar way when you have kids you want the bes…

Mark Pauline of Survival Research Labs gave a talk at SIGGRAPH some time during the 90's, about a project he was working on that involved enabling letting people operate lethal weapons over the Internet in an environment that somebody might actually get killed.

His goal was actually to provoke Congress to explicitly pass a law against tele-operating lethal robots.

I guess that didn't work out so well...

https://en.wikipedia.org/wiki/Mark_Pauline

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#163

Earlier quoted context omitted.

I agree about C and C++, but is there a language that exists today that you think would be better for writing security-conscious code? Should a language be invented that is specifically for writing security-conscious code?

Ada is a language that is specifically for writing secure code.

Correction, Ada is a language specifically for writing correct code. Correct is only a subset of secure.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#164

Earlier quoted context omitted.

I'm surprised that this comment has been voted to the top. First, it has little to nothing to do with the comment posted, which concerns not a "cyberwar" but the possible police seizure of a Tor server. The assumption is it's either a false alarm or a police raid. No one thinks this was done by ISIS. Second, a post using the word "cyberwar" in a non-ironic manner at the top of HN?! O tempora o mores! So while your ob…

Obviously I can't comment on why things get voted or don't get voted on, my observation is that people upvote comments they enjoy or agree with and down vote comments they disagee with and/or would rather not read. But I can respond to your other question. > Did you mean to post elsewhere? No, I meant to post it here. The author, Thomas White, writes of losing control of his Tor exit node servers, not to this audienc…

Yes, it's a very interesting post, and I'm glad it was posted here, regardless of how things turn out.

Your comment/observation is also very interesting, but had little to do with the Tor issues. So I was confused.

But I get sometimes things trigger tangentially related things, which is as you've said what happened here.

And thanks for addressing my comment is such a polite manner, especially after my snarky critique of your use of the word "cyberwar". Apologies for coming across in a negative manner, if you took it that way (except for the 'cyberwar' bit, I wasn't actually trying to be negative, I was mostly just confused about the comment's context).

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#165

Earlier quoted context omitted.

I'm surprised that this comment has been voted to the top. First, it has little to nothing to do with the comment posted, which concerns not a "cyberwar" but the possible police seizure of a Tor server. The assumption is it's either a false alarm or a police raid. No one thinks this was done by ISIS. Second, a post using the word "cyberwar" in a non-ironic manner at the top of HN?! O tempora o mores! So while your ob…

> I'm surprised that this comment has been voted to the top. Chuck's been around HN for a while, and has insightful comments frequently - that he posts this sort of "radical" comment implies that a non-nut is seriously considering it and quite possibly it's worth pondering as an idea.

>Chuck's been around HN for a while

Yes, my comment was that I didn't get why ChuckMcM posted it in this particular context, not who he was. I've also been around HN for a while, not always under this username.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#166

Earlier quoted context omitted.

I agree about C and C++, but is there a language that exists today that you think would be better for writing security-conscious code? Should a language be invented that is specifically for writing security-conscious code?

Rust, for the former, Cryptol for the latter (just one caveat: written by the NSA/influenced people).

Hey, thanks a lot for recommending rust. Since your comment, I've investigated it, and it's exactly what I'm looking for!

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#167
post #109

Earlier quoted context omitted.

Sadly, the fastest route to martyrdom is quite literally by biting a bullet, so no, AK-47's all round. Keyboards don't have quite the same sacrificial qualities.

Islamist groups are not so fixated on martyrdom and the proverbial 72 virgins as you may have been led to believe.

Islamist Groups ight not be as homogenous as the GP implies, either. Some higher ups might actually have perfidious goals. But what am I talking about, religion was never used as means to manipulate followers, ever.
Post reply on HN