51–60 of 71 posts
Earlier quoted context omitted.
You don't have to do that? I touched upon it in the first section of the post. All you need is a valid phone number, which you can use throwaway trial SIM cards for.
> Our first hurdle is the account creation setup Account creation requires biometric face-scan.
Earlier quoted context omitted.
Even if you're married, you've got to know somebody who isn't. It's like referring to Google as "some random ass search engine website" and wondering why people think you're the weird one.
Ok
I'm not really into malware, so I was just wondering: - Isn't this really non-viable in practice? The "few headers" that were shown include an Authorization header, that would presumable rotate every ~24 hours and would have to rotate for all the malware clients as well. - Are centralized Command and Control Severs still a thing in the malware space? I would have assumed that this function mainly migrated onto one of…
Earlier quoted context omitted.
Again, why? Nothing on its wiki article or the first page of Google results suggests it should be a household name. So unless the default assumption is that everyone on HN is dating (I'm married) I genuinely don't understand why it's weird to not have heard of some random ass dating app
Because it used to be the "best" dating app out there for "serious" people wanting long term relationships. Now all the apps are trash and have predatory monetization.
I'm not really into malware, so I was just wondering: - Isn't this really non-viable in practice? The "few headers" that were shown include an Authorization header, that would presumable rotate every ~24 hours and would have to rotate for all the malware clients as well. - Are centralized Command and Control Severs still a thing in the malware space? I would have assumed that this function mainly migrated onto one of…
Why would you want to use blockchains for this? DHT has been used for distributed c&c for ages and is generally a much lighter option.
But no, P2P C&C is still not really typical. In practice, there's mostly not that much need for it. Also, FWIW, for practically all use-cases P2P C&C discovery is a vastly better option.
Earlier quoted context omitted.
If you want the Ethereum VM but with lower tx costs, try one of the L2s.
Any L2 you'd recommend? The last time I dipped my toe in that world I only bothered with L1s like Ethereum, Solana, etc.
speaking of command and control servers, the best one you can get at the moment is to just to use crypto currencies, plenty of available nodes to auto discover or just rely on explorers to query your own wallet, deposit address can encode quite a bit of information since it's a pretty long address and definitely has enough bytes to encode commands
I mean, even just shipping a Tor client embedded in your malware seems like a much better idea.
>just rely on explorers to query your own wallet
This kind of defeats the point, you get exactly 0 censorship resistance like this.
speaking of command and control servers, the best one you can get at the moment is to just to use crypto currencies, plenty of available nodes to auto discover or just rely on explorers to query your own wallet, deposit address can encode quite a bit of information since it's a pretty long address and definitely has enough bytes to encode commands
There are much lighter alternatives though, why would you want to bother with cryptocurrencies when you could just use DHT? I mean, even just shipping a Tor client embedded in your malware seems like a much better idea. >just rely on explorers to query your own wallet This kind of defeats the point, you get exactly 0 censorship resistance like this.
you would have to extract the keys from the malware, you would then have to implement the logic and announce it - then rely on blockchain exploreres actually using that data to block addresses in real time.
Earlier quoted context omitted.
Block explorer websites expose blockchains over http/s.
Yes, and can easily be blocked if they are commonly used for c&c, like many other sites are (such as gists and pastebins) for the same reason.