31–40 of 71 posts
I think the Hinge being referred to is a dating app? I have no idea. https://hinge.co/
I'm not really into malware, so I was just wondering: - Isn't this really non-viable in practice? The "few headers" that were shown include an Authorization header, that would presumable rotate every ~24 hours and would have to rotate for all the malware clients as well. - Are centralized Command and Control Severs still a thing in the malware space? I would have assumed that this function mainly migrated onto one of…
I have built dead simple bots on both session/simplex trying both of them out and session was the more ergonomic one to build on but simplex is more decentralized considering session's more crypto related and wants to ask you for money for node whereas simplex doesn't
Although on the other hand, simplex wants to do client side verification on their official client and their bot creation was really painful to start with so but I do feel like its more decentralized but not sure, Both have consequences but honestly I just really end up shilling signal in the end for most people's usual use cases which is communication but its super great to know that there are alternatives.
Matrix is really cool as well. especially cinny's ui (https://cinny.in)
Earlier quoted context omitted.
I envy the fact you had to google it
Again, why? Nothing on its wiki article or the first page of Google results suggests it should be a household name. So unless the default assumption is that everyone on HN is dating (I'm married) I genuinely don't understand why it's weird to not have heard of some random ass dating app
Could someone ELI5 what this does?
Command and Control Server (C2) refers to the infrastructure required to command and control malware of various forms. The author basically found a creative use of Hinge’s infrastructure and proved it could be used to control malware.
Earlier quoted context omitted.
I want to thank you and the other user (hobofan) for pointing out the use of crypto currencies as C2s. I do bioinformatics for a living, not infosec, so that's another fun little rabbit hole for me to go on...
Hey I actually created something like this when I was once curious. Its called nanotimestamps I found it when I realized that nano had 0 fees and I realized that by using a nano vanity address generator, I can embed data into a series of transactions and then basically embed data into the chain (for free) since there is 0 gas fees Now I created it as a way of getting timestamps of any data onto the chain but you can…
Is this you? https://github.com/Koeng101/nanotimestamps
> also even if I like the tech, I think that crypto's fundamentally really really volatile and I prefer things like index funds being honest
At the risk of derailing the thread, I agree. However, I think "tokenization" is probably crypto's killer app if the messy problem of legal finality rectifying assets on the blockchain with their real-world counterparts can be solved. I touched upon this in a separate post on my blog.
Earlier quoted context omitted.
Hey I actually created something like this when I was once curious. Its called nanotimestamps I found it when I realized that nano had 0 fees and I realized that by using a nano vanity address generator, I can embed data into a series of transactions and then basically embed data into the chain (for free) since there is 0 gas fees Now I created it as a way of getting timestamps of any data onto the chain but you can…
Cool! I wasn't aware of nano; your point about the gas fees is really compelling, as there's a lot of stuff I've wanted to try building on Ethereum et al that I just haven't done because I can't get over the hurdle of paying transaction costs lol. Is this you? https://github.com/Koeng101/nanotimestamps > also even if I like the tech, I think that crypto's fundamentally really really volatile and I prefer things like…
Earlier quoted context omitted.
Tons of posts on Reddit disagree with you: https://redlib.catsarch.com/r/SwipeHelper/search?q=hinge+sel... Maybe you're getting lucky and not tickling their risk-based nonsense, but now that this article has been posted they'll certainly crank that knob up to 11.
Ah, I see, you're referring to this: https://help.hinge.co/hc/en-us/articles/10303221435539-What-... You probably don't use Hinge. The verification is not necessary at all. It's merely used to "verify" your identity to other users. It has no bearing on what I cover in the post.
Earlier quoted context omitted.
Ah, I see, you're referring to this: https://help.hinge.co/hc/en-us/articles/10303221435539-What-... You probably don't use Hinge. The verification is not necessary at all. It's merely used to "verify" your identity to other users. It has no bearing on what I cover in the post.
> Note: In certain regions, Hinge requires users to complete a biometric Face Check™
Edit: e.g. via residential proxy IPs and a bunch of cheap Android phones
Earlier quoted context omitted.
Cool! I wasn't aware of nano; your point about the gas fees is really compelling, as there's a lot of stuff I've wanted to try building on Ethereum et al that I just haven't done because I can't get over the hurdle of paying transaction costs lol. Is this you? https://github.com/Koeng101/nanotimestamps > also even if I like the tech, I think that crypto's fundamentally really really volatile and I prefer things like…
If you want the Ethereum VM but with lower tx costs, try one of the L2s.