Recent submissions

Comment · 1 year ago
Same campaign
Comment · 1 year ago
The autorun.inf would be in the flash drive, not the executable they uploaded to Any.Run. Were any pics of the flash drive contents shared?
Comment · 2 years ago
Nothing sophisticated about this attack.
Comment · 2 years ago
The people who DDoSed Internet Archive never claimed to be behind the breach. That was some media companies who misreported this.

The breach happened over a week before the DDoS attack, according to Troy Hunt.

Stop looking for conspiracy theories.

Comment · 2 years ago
Article says API token was stolen in original breach.
Comment · 2 years ago
This is bad enough. This alone is a privacy bug/data leak.

Theoretically, someone could scrape the pages and compile a list of exposed email addresses.

Comment · 2 years ago
There is a strange dynamic between the threat actors who conduct these breaches and researchers.

When not used for extortion and for "status" in the hacking community, they share them with researchers (commonly HIBP) to warn people about a site's security and so that site is forced to fix things.

Definitely a strange dynamic.

Comment · 2 years ago
Comment · 2 years ago
It's doubtful to me that this is due to malware.

Many malware hijack search settings. However, very few hijack default browsers themselves these days. In the past (10 years ago) it was much more common.

Furthermore, I don't know of many malware that touch the .PDF file extension associations, and there are plenty of other associations that would be better to hijack.

Feels more like a sloppy fix to comply with EU's DMA.

Comment · 2 years ago
Comment · 2 years ago
So you bought and fed 14,500 books into the AI to make these summaries?
Comment · 2 years ago
Title is clickbait. I am sure the content of the article clears it up, but the title implies Microsoft is forcing all users to pay for normal security updates.

In reality, it's your choice to stay on an end-of-support OS and purchase updates if you wish to remain secure.

Comment · 2 years ago
Because the title makes it sounds like Microsoft will charge for any security update in the future.

These are for end of life products and it is very common for companies to require additional support contracts to keep supporting them.

You do not have to continue using said version of Windows, upgrades are now essentially free, and as long as you are on a supported version of Windows, you will continue to get free security updates.

Comment · 2 years ago
Such BS clickbait. This article should be removed from Ycomb.

Microsoft is not charging anyone for security updates unless you wish to use the operating system after end of life.

Comment · 3 years ago
There is absolutely nothing wrong with trying different titles on a story.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton