Hacker Newsnew | past | comments | ask | show | jobs | submit | more amy-petrik-214's commentslogin

It's a basic correlation attack. As follows:

- Find the "bad guy" server onion address "hidden service"

- Run a tor relay. Ideally many. No exit node shenanigans needed - hidden service, not exiting TOR. This is quite nice from a legalistic perspective since you're not on the hook for hacks coming off the exit node.

- Run a bunch of clients. Instruct to connect to "bad guy" onion.

- Gather data over time for correlation attacks. Correlate your client to relay to endpoint server.

- At some point, you'll find one of your relays is the guy connecting directly to said hidden service.

Very simple lesson here. One needs to encrypt the information, yes, but failing to consider packet timing as "information" is the fallacy.



The video of the talk about this is well worth watching too.


excellent lore. said to have been the inspiration for the obfuscated C code contest.

https://www.ioccc.org/


IMO embrace low frame rate. Better energy use if its AI based on the first place (cheaper, environment... more cycles for fancier effecs) THEN pair that with e-ink display (also good energy use), I'd go for old school charcoal style but color e-ink is a thing. e-ink with some additional effects could resemble a physical paper moreso then a LCD/LED and so would be less obnoxious in the darkness of night... AND this also could be a low key security camera.


The other interesting fact which is lesser known is that earlier G's of digital phone xfer are in what is somewhat a sweet spot of cracking, not very easy at all, but just easy enough to be crackable. But their encryption is breakable! THe rainbow table is 2 TB and took several months to build - https://github.com/0xh4di/GSMDecryption?tab=readme-ov-file

Now I wonder if later Gs have a bit of a decryption loophole for this reason or that, this state actor or that.


It was not a terrible approach, the use of "poison gas" is a bit of a misnomer. They weren't dousing the theatre with chlorine and melting everyone's lungs for example. It was not deadly poison gas, it was "get high" poison gas. That unintentionally made some people get so high that they died in a state of euphoric bliss.

The gas, high speculated but nobody 100% sure, is thought to be basically super-fentanyl. Fentanyl itself is like hyper powerful heroin, and this stuff was hyper powerful fentanyl. But not fatal per se, certainly intended not.

So all this hubbub about the theatre gas isn't so bad. Per capita if you just walk down the sidewalk in San Francisco's Tenderloin district, you would be exposed to more fentanyl fumes than you would have in that theatre. In the tenderloin residents talk wistfully of the the theatre gassing with superfentanyl, wishing they could have partaken in that bliss. If they had taken a good dozen people off the tenderloin and sent them to the theatre they easily would have smoked it up with between 100 and 1000x times the concentration of opioid fumes.


I built something very similar called Failboard FS (filesystem). As a scientific experiment I took an old video card and wired it to the wall power socket. The chips on it blew with a stinky smoke and a whistling explosion sound and everything and my circuit breaker threw a switch. After getting power back on line, I broke open an old hard drive and superglued that drive platter the to the burn out old video card. TADA! Failboard FS. Great stuff. Advanced. Innovative. Useful. Thank you for taking the time to read this, I hope to present Failboard FS at various conferences and events since it is marginally more practical and sophisticated than the projects most people cook up.


>The sheer number of comments that think the state of "unsubscribe" is good is... saddening. I should not have to click a link to "unsubscribe" from something that I did not subscribe to. There's no recourse for me against these thieves.

Exactly! Total scumbags. The way I would frame the feeling for people who don't get it - Imagine coming home from a walk. Your car is gone. Someone left a note on your front door. "Hi, thanks so much for letting me borrow your car! Call me at this number when you want it back!". The manipulative car thief in this example would deny stealing - pointing out they would return the car whenever asked. So you call them and ask for it back, but a bit of your soul dies - to ask for it back is to play along with the ruse that this is what you consented to in the first place. Or at least "would definitely have consented to if available which you weren't". And the loss of control over consent leaves a persistent sense of violation, after all, someone just stole from you and then has the gall to pretend you consented, to your face (or front door).

Perhaps the car borrower-without-permission should have owed up to being a car thief. Perhaps the subscribe-without-permission thieves should own up to being just spammers. The insult of it all is not so much from the random spam, but this manipulative pretend game where we have some spam shitelist LARPing as a reputed newsletter of great public interest - the gall of the spammer to make-believe that you subscribed.

It would all be easily solved if there were civil penalties for it. I'd gladly go after anyone and everyone who pulled this shit as a public service.


Well after Bush and his comrades Dick and Colon (nee Cheney; Powell), we had the TEA PARTY MOVEMENTS whose thesis was very simple: "politicians, as people, they suck, 400 million are suffering for their aggrandizing shittiness, lets get some people in there to fuck some shit up". And so they did, and they did. And this become the new norm. And now DC had been made even further ugly and toxic. Then Trump appeared, and he basically said the same exact thing as the tea party movement "Draiiinnn the Swap!!", and now - yes - even more ugly and toxic.

All of these has been fueled by social media, which to reduce some of the complexities, determined that "if we divide and polarize american politics we make boatloads of money"


> Sounds to me like the program is working as intended. Sure tourists love it, but if there's nobody local to look around, it should end the way it's been planned it seems to me.

Are we talking about the country of Japan or cat island here? The declining cats of cat island is a wonderful metaphor for the declining population of Japan island.

Makes no sense to me really. Sure the population will decline and maybe in 100 or 200 years Japan's population will recover. Why go through that mess when you can just have 100 million non-Japanese people slide in, just give free citizenship to anyone that has a kid on Japanese soil and don't enforce immigration law, simple as.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: