Live data from Hacker News

Image Scrubber: tool for anonymizing photographs taken at protests

everestpipkin.github.io

331–340 of 410 posts

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#332

Earlier quoted context omitted.

> I literally could not imagine a more transparent way to serve this application. Just distribute the code for local execution? Sure, it's less accessable for the target audience, but it is more transparent. But what else is new? Most users are willing to sacrifice privacy and security for convenience. That's how we got into this whole mess.

Hmm 1. This is local execution 2. What's so secure about a downloaded executable run directly from the OS? It could send information to a remote server just (or more) easily, and less transparently

> What's so secure about a downloaded executable run directly from the OS?

I did not suggest distributing an executable. I suggested distributing code, so that the user could audit it before execution.

I did not realize this tool executed all of its logic in the client when I made that post. It is rare to find websites with plainly-written, unobfuscated, uncompressed, vanilla Javascript that don't rely on any server-side processing.

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#333
post #192

Earlier quoted context omitted.

First-degree is premeditated. Third-degree is depraved-heart ("murder as a result of callous disregard for the value of life"). What evidence supports a first-degree charge? If you want him to walk, charge him with first-degree. Good luck proving premeditation beyond a reasonable doubt. The depraved-heart charge is a slam dunk, and is clearly the right one if you actually want justice.

In some, murder committed by acts such as strangulation, poisoning, or lying in wait are also treated as first-degree murder.[0] [0]: https://en.wikipedia.org/wiki/Murder#Degrees_of_murder

Did you read the autopsy report?

Criminal died of over dose of drugs in his system and condition of his heart. His heart condition reflects his lifestyle. Lack of oxygen was not at all the cause of death.

Officer is not responsible for his death at all.

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#334
post #285

Earlier quoted context omitted.

haveibeenpwned is explicit about not entering passwords you use . If you want to check a password that you intend to use then download the database and check for yourself.

I don't get it. If I check for a password I used before, presumably I want to keep using it if it's safe. Otherwise what's the point?

If you think a password has been compromised then change it.

HIBP offers you a way to validate a password has been compromised, HIBP does not offer you a way to determine it has not been compromised or is otherwise suitable for use. It’s a service for excluding compromised passwords from use.

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#335
post #155

Earlier quoted context omitted.

This definitely seems like a good faith attempt to litigate the history of black oppression in the USA from first principles.

I am not aware of facts supporting the claim that african americans live under an authoritarian regime. I am aware that a number of african americans have been unjustly killed by police. That is a different claim than african americans are systematically oppressed by the US government. For instance, compare what is happening in the US to a real authoritarian regime such as the USSR. The government made millions of in…

Why do you believe what you're told about a faraway land, but disbelieve what you can see for yourself in your own community?

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#336

The timing of the release of this tool seems a bit innapropriate, given the state of rioting in a few US cities now. It's going to be incredibly draining on law enforcement in the US for a few years to identify and prosecute criminals involved in riots. Most victims already who have lost their homes, their businesses, and even their loved ones will mostly likely never see the criminals brought to justice given the sc…

I admit the protest in Hong Kong was largely peaceful, but it's hard to deny that a fringe of protestors were looting and resorting to violence as well. There is no key difference between law enforcement by police in HK and the US.

One wonders whether the American protests are getting quite so much CIA cash...

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#337

Earlier quoted context omitted.

I don't get it. If I check for a password I used before, presumably I want to keep using it if it's safe. Otherwise what's the point?

FWIW, I don't think the post you're responding to is correct? At least, I couldn't readily find a place where HIBP tells me not to fill in the form. And it bothers assuring me that it goes to great lengths not to make it obvious what password my client is checking. Your question is on target--one I've wondered myself--but I've come to the conclusion that it isn't for people who already have the sense not to put their…

Pop open dev tools and take a look at the network traffic when you put "silverfish3" into that form:

It sends a GET request for "https://api.pwnedpasswords.com/range/89F5D"

and gets back 548 rows of the form:

001F74CD3E241B7820C996DA4FB3BDF9FE7:2

...

54C7FB299EC06A0B979C5DE14F1AE61F653:40

...

FFE6FF5698CEC527CD18269D1B7697C8743:1

Note that middle example row with ":40" at the end? Prepend "89F5D" from that GET request the javascript generated to that row's contents "54C7FB299EC06A0B979C5DE14F1AE61F653"

Now compare that to what you get when you run this (This is a macOS specific invocation of the command, but something very similar should work pretty much anywhere):

$ echo -n "silverfish3" | openssl sha1

(stdin)= 89f5d54c7fb299ec06a0b979c5de14f1ae61f653

You might (perhaps rightly) not trust Troy's site to not switch out the javascript underneath you, but you _can_ trust the API, and could always run:

curl https://api.pwnedpasswords.com/range/89f5d

Or, if you're testing that "dichotomy7" password:

echo -n "dichotomy7" | openssl sha1

(to get (stdin)= 772be5bd14dc626ec7fa952b51ae28c482e92d39)

then:

curl -s https://api.pwnedpasswords.com/range/772be | grep -i '5bd14dc626ec7fa952b51ae28c482e92d39'

will show you your result of that dichotomy7 password having been seen 5 times.

You've only revealed the first 5 characters of the 40 character sha hash to the server. That might have been one of the ~500 passwords with that same hash, or any of the rest of the 150 bit space of other strings that hash to that prefix that are not part of their database.

I would be perfectly happy running echo -n "{{a real valuable password of mine}}" | openssl sha1 locally and then feeding the first 5 characters of that into "random apis on the internet".

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#338
post #67

Earlier quoted context omitted.

What if you stop an EMT from checking the pulse of somebody who your co-worker has been choking to death for minutes? Does that make you an accomplice, too? If your city charged these cops justly then nobody would be burning it down; cure your disease and the symptoms will go away.

Yup, I'd love if we were able to be a unified front and collectively say the mayhem will not stop until all four involved are charged. And if they're not convicted... 1992 will look like a joke.

Did you read the autopsy report?

Criminal died of over dose of drugs in his system and condition of his heart. His heart condition reflects his lifestyle. Lack of oxygen was not at all the cause of death.

How is officer responsible for his death?

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#339

Earlier quoted context omitted.

I doubt any criminal really wants to be captured on video. Having just watched a couple of videos this morning of "protesters" viciously kicking their unconscious victims in the head, I'm very much against the idea of anonymizing any of this.

Depends on how it's used. For example it could be useful for people protesting authoritarian governments, such as in Hong Kong. For blurring rioters during a crime spree, I don't think there's anything moral to be gained from protecting criminals.

Though I'm on the side of the Hong Kong citizens, I doubt this would help much, since the government is going to have extensive videos of their own. Not to mention a likely capability to capture immediately or almost immediately off of people's phones.

On a somewhat related note, I wonder if the thousands of people being recorded committing various crimes in the US right now realize that their faces are almost certainly being compiled in various government and private databases, to be matched via facial recognition for the rest of their lives. Yeah, not necessarily a good thing, but am I wrong?

Re: Image Scrubber: tool for anonymizing photographs taken at protests

#340
post #165

Earlier quoted context omitted.

In both cases, the protestors were violently attacked over and over. Also, both Ghandi and MLK were murdered for their efforts.

Yes, a peaceful protest can be violently attacked and still be a peaceful protest. It's not required that the police be peaceful, only the protesters.

And that is exactly why they were successful. When governments/police crack down on peaceful protests, it shines the light on the oppressor's behavior and creates a strong sympathetic reaction. That reaction is what evokes the change.
Post reply on HN