neoCrimeLabs

Joined 12 years ago

Karma
640
Submissions
205
Member since
Mar 5
Security engineer; Boldly striving toward mediocrity, and beyond.
View on Hacker News

Recent submissions

Comment · 7 days ago
5 years, assuming the terms don't change.
Comment · 7 days ago
Are you sure about that? I recall Reverend Mother Gaius Helen Mohiam telling Paul Atreides that long ago, people handed their thinking over to machines, hoping it would free them. Instead it let the people who controlled the machines enslave everyone else.

You are right my original reference was closer to the other books, but people handing over their control to machines, enabling others to control them was from Herbert.

Comment · 8 days ago
I am surprised at how little Frank Herbert's Dune factors into conversation like this.

The Butlerian Jihad occurred not because of an AI uprising, but because the AI was controlled by a few powerful corrupt people known as the Titans. When people handed over their critical thinking and decision making to machines, it allowed a small group of people to disrupt society and take control of it.

This is precisely what is happening today.

Comment · 1 month ago
I presume because if it has a name, it's easier to control the narrative with a larger group of people
Comment · 1 month ago
Looks good, but unless I'm severely mistaken it's a SAAS, not self hosted. As long as it's on someone else's service I don't own it and it's not under my control.

I openly admit, I have not spent much time researching this subject, was just in the back of my brain as I migrate away from SAAS and IAAS.

Comment · 1 month ago
Within 10 seconds I was convinced I needed to try this.

For me, the next step for this is taking all the sensor data recorded for a ride, and loading it into my own fitness tracking database that I own, control, and isn't tied to someone else's profits.

Comment · 2 months ago
I am surprised how little Jacob Applebaum's experience border crossing in 2010 is mentioned in relation to this story, because it is relevant.

https://www.cnet.com/news/privacy/researcher-detained-at-u-s...

While so many people try to come up with technical solutions for legal concerns, the method Jacob used was pragmatic.

You cannot be compelled to turn over what you do not have

If you're concerned about your digital devices while crossing borders, do not forget a viable option is to simply not have a digital device with you when you cross.

Put simply, do not limit your imagination to purely technical means.

Of course, there may be means to compel you to retrieve that data, but typically at border crossings your primary threat surface is physical possession.

Comment · 4 months ago
You reminded me of this story. Windows, not *nix, though.

Years ago my cube-mate was called to support a desktop user who has having problems with their machine that couldn't be fixed remotely. He realized the user's HDD was full, so the first thing he did was clear the user's trash bin. Mysteriously the machine came up with a ton of free space.

The user seemed happy their machine was up. Nor long after, the help-desk called my cube-mate asking what they did to the user's machine; The user couldn't find any of their files that they had organized in the trash bin.

Comment · 4 months ago
Better analogy would blaming a supermarket that hosts an outdoor farmers market because you contracted food poisoning from a stand owned by someone else - NOT for buying food from within the supermarket itself.

Meanwhile one of the other customers has norovirus and is deliberately touching everything so others contract it.

Comment · 5 months ago
Comment · 6 months ago
Agreed with your sentiment, and that was a great example.

Just like any security control, if it's your only means of security, it will not offer much risk reduction. Just like all security controls, the if you want risk reduction use more security controls together. Like all security controls, there is no way to eliminate risk, just reduce it as much as possible while still being able to effectively achieve your mission.

Because of this I believe security through obscurity to be important component in a healthy and mature risk posture.

It irks me when it's dismissed because obscurity is not security. No single security control is security on its own.

Comment · 6 months ago
2008-ish?
Comment · 6 months ago
After Yahoo

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton