Hacker News: chislobog

New comment by chislobog in "Playa Phone"

chislobog — Mon, 31 Aug 2026 19:13:03 +0000

No phonebooks there. Just a map. Oper-a-tor?

New comment by chislobog in "Dimethyl Mercury Exposure Incident at MIT"

chislobog — Sat, 29 Aug 2026 08:49:10 +0000

some will be unfriendly or hostile towards the safety-conservative.

New comment by chislobog in "Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded"

chislobog — Tue, 25 Aug 2026 15:09:03 +0000

This basically answers my question about dark weather in the future for all of this. If Google is standing on an issue of trusting their clients to be in the right bucket of profitable customer to get through agreements and NDAs on what they’re proving unless you’re a multi national juicy enterprise target they’re really not the people I want to deal with. I don’t know what kind of deal Google has but I suspect they finance a substantial amount of “evolutions” for their purposes through the blob device vendors.

New comment by chislobog in "Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded"

chislobog — Tue, 25 Aug 2026 15:03:24 +0000

I think that Samsung sells rooted devices to companies or organizations engaged in their partner program. There’s at least one company using those commercially in Europe to offer a modified device. I wonder if there is a gray market for Chinese boot loader unlocked devices, or if that’s dealt with on a service per device transaction level with some cellphone shop. If you can buy a device from Samsung with an unlocked boot loader and customized security updates in a sort-of private contract, where they acquire them with who knows what arrangement today that started with their partner program, it seems like a price issue more than a practical issue or policy limitation. I see the software for unlocking devices frequently but I suspect it is a short lived game for those people, either using factory provisioning while they have access to the software or otherwise monetizing the effort to offer these tools and services. Probably malware, definitely device info collection, but it just ends up at the same conclusion. if there is friction, why? Is Goog adversarial to developer devices now? Athe devices without friction in some other way made compliant or unsuitable for general use? Is unlocking the boot loader so much a risk to the firmware delivery and control scheme for the baseband propriety stuff and chipsets or is it just that it’s vertically integrated in western markets through device financing by telecoms? — I do mean to seriously ask what is their holdup. They can’t afford to develop the software and hardware simultaneous tracked and offer that product if it leaves the control of their promised end user as a client?

New comment by chislobog in "Briar is in maintenance mode"

chislobog — Sat, 18 Jul 2026 12:18:02 +0000

I wonder if one side I very low power emitter designed to connect to the other head-side unit, presumably designed to connect to your device. Some bt headphones are designed with a weak unit and strong unit.

New comment by chislobog in "Iran requires insurance on ships using Strait of Hormuz, fees likely to follow"

chislobog — Mon, 22 Jun 2026 20:28:57 +0000

A road trip perhaps to the Lucius D. Clay Barracks near Wiesbaden.

Dagger base, etc. BND pretending to be blind to co-operation efforts and practically subservient to Cryptologic activity seeking NSA and others.

New comment by chislobog in "Police advised to disable Bluetooth on Axon body-worn cameras to avoid detection"

chislobog — Fri, 08 May 2026 12:22:38 +0000

Correlation of even anonymized hardware emissions and location history for commercial use such as advertising would eventually identify police or company specific hardware. A product for this purpose already exists in Signaltrace, and probably exists as an in house solution for large campus operators like Walmart, universities, or a place like HP.

Signaltrace: https://www.leonardocompany-us.com/lpr/elsag-signaltrace

New comment by chislobog in "Apple fixes bug that cops used to extract deleted chat messages from iPhones"

chislobog — Thu, 23 Apr 2026 12:24:08 +0000

Apparently if I’m reading the work of others correctly a notification component and subsequent other interaction logs, in this case that the notification was not generated, is also logged in knowledgeC pointing to at least some metadata of non-notified messages logged.

New comment by chislobog in "Apple fixes bug that cops used to extract deleted chat messages from iPhones"

chislobog — Thu, 23 Apr 2026 12:18:22 +0000

I’ve been looking into reproducing the extraction of unredacted data. Found this, and it’s speculative, but Magnet Forensics has an internal “infomercial” on reconstructing content from notifications, too.

“find the inclusion of this information interesting because there is a chance that this still contains communications even when the record has been deleted from the sms.db file. I've yet to find definitive proof that this is the case however and it's possible that it is purged at the same time as sms.db is cleared.”

From: https://web.archive.org/web/20220120174606/www.doubleblak.co...

New comment by chislobog in "Apple fixes bug that cops used to extract deleted chat messages from iPhones"

chislobog — Wed, 22 Apr 2026 23:46:22 +0000

Looking at the detritus in the filesystem on Jailbroken iOS devices you will observe that iOS decides to vacuum, purge, and let linger all sorts of databases and logs until something triggers a cleanup which is usually time or an iCloud sign-out induced erase and subsequent sync. People have been complaining for years about excessive phantom “system storage” and “other data.” Interestingly the photos thumbs database can grow seemingly indefinitely in size for some weeks or more if you’re regularly deleting all of your photos and saving to photos from apps or taking photos. I suspect that there a lot of behavioral data records that is left on most devices until a convenient period of inactivity passes and the possible user behavior analysis and reporting functions of iOS allow whatever cleanup happens after processing on device. It would be useful to capture iCloud backup restores from physical devices to corellium virtual devices with some creative matching of your existing idevices identifiers. Could see what triggers a cleanup during backups, local or otherwise, get a good look at what is being restored from iCloud. I also think it’s possible that iCloud can sync a database, say safari bookmarks, pushing it to the device inducing a state where the device bookmarks are moved to inaccessible tables and left there, unavailable to the end user, but not out of sync with the current active session state. Of course this is just my musing based on observations of weekly ffs extractions of a few devices over the last 5 years.

New comment by chislobog in "Xz Repository Censored by GitHub"

chislobog — Sat, 30 Mar 2024 02:31:37 +0000

Is there a precedent for this message in particular? Instead of just regular 404 like they do for DMCA and government security takedowns there is a note on the page. Perhaps it is a warning designed to indicate that there is an issue when someone goes to investigate why the url is broken.

New comment by chislobog in "Ask HN: Do you know any application that uses webtorrent?"

chislobog — Sun, 25 Feb 2024 09:06:49 +0000

Facebook, Twitter, Eanes ebay all use torrents internally for various things. The story might be

https://arstechnica.com/information-technology/2012/04/exclu...

https://innovation.ebayinc.com/tech/engineering/bittorrent-f...

https://blog.twitter.com/engineering/en_us/a/2010/murder-fas...

https://news.ycombinator.com/item?id=3803026

New comment by chislobog in "How to Hold KEMs (Key Encapsulation Mechanisms, Cryptography)"

chislobog — Sun, 25 Feb 2024 07:38:59 +0000

I wish I understood this. The language, or terminology really, is opaque and that isn’t a fault of the always insightful author

New comment by chislobog in "Inside Windows Product Activation (2001)"

chislobog — Thu, 22 Feb 2024 03:16:25 +0000

I went to go look at what the GSA and feds do for QB and ran into something new to me. Many companies that license software will offer terms for a special contract and perpetual licensing.

But then in the new order[0] “recent report by the Government Accountability Office (GAO) indicates that agencies buy and manage software licenses in a decentralized manner, struggle to create accurate inventories, often purchase unneeded capabilities, and generally do not facilitate better purchasing by sharing pricing or terms and conditions across the Government. Furthermore, most agencies do not have a designated central oversight authority to manage software agreements. This memorandum addresses these and other challenges in information technology

And

“ Enterprise Software Category Team (ESCT),6 co-managed by the General Services Administration (GSA), the Department of Defense (DoD), and OMB, will guide the development of Government-wide software license agreements for mandatory agency use, and OMB will encourage or direct use of best-in-class existing software licensing agreements. This memorandum further requires agencies to develop implementation plans, in accordance with ESCT guidance, to address how agencies will move from their existing agreements to those mandated by the ESCT. Agencies must also justify and obtain ESCT approval to pursue new agreements that overlap or conflict with the ESCT mandated agreements.”

It goes on.

Perpetual licenses are a good idea to have as an option because the company or product might disappear, or in some cases, as I have seen, a company will refuse to sell a licensed version of something for less than benevolent reasons.

We can all appreciate the efficiency of adding more bureaucracy and lawyers (general counsel) and layers of managers (the various committees you now have to wrangle into agreement).

It occurred to me though that part of the utility of small group acquisitions is that different organizations can buy what they need or want when they decide to without this mess, and the licensing can be arranged to suit the need of that organization. I think this also damages the small seller or company that makes niche programs. Perhaps my business gets contracts from small specialized government teams and groups because it’s a better option for them than the Microsoft sized competition, and now they have to deal with the additional mess of justifying this purchase in addition to being on the same contract terms and volume purchase agreements with the Microsoft sized companies as say the entire IRS.

So, my quickbooks compatible software for managing and displaying old versions’ files used by a dozen people in Navy purchasing is at odds with a license from quickbooks used by IRS to allow examiners access to older versions. My income becomes maintenance fees to QB. (This is hypothetical)

[0] https://www.whitehouse.gov/wp-content/uploads/legacy_drupal_...

New comment by chislobog in "Lockbit just emailed this to all of their affiliates"

chislobog — Tue, 20 Feb 2024 12:19:03 +0000

lockbit doesn’t use email to contact clients.

New comment by chislobog in "Signal v7.0.0 with phone number privacy"

chislobog — Sun, 18 Feb 2024 01:39:39 +0000

Even more curious about these numberless messages then.

New comment by chislobog in "Signal v7.0.0 with phone number privacy"

chislobog — Sat, 17 Feb 2024 22:42:33 +0000

I started getting “unknown” message requests on three unrelated phone numbers through my different signal accounts on Jan 24 2024. The contact info doesn't have a phone number, crypto scams.

I guess this is the result of the beta. See screenshot please.

https://ibb.co/F014n88

New comment by chislobog in "OnlyFake: A site where ‘neural networks’ churn out fake IDs"

chislobog — Tue, 06 Feb 2024 12:10:06 +0000

I registered for login.gov using my face and an ID, which allowed me to register for submitting tax records among other things.

New comment by chislobog in "Ex-CIA Coder Who Sent Secrets to WikiLeaks Gets 40 Years"

chislobog — Fri, 02 Feb 2024 19:48:13 +0000

I doubt anyone here would say this directly so I will: the csam charge is an assured way to punish this man without a trial about the other issues. If CIA planted CSAM on a computer they would do it in such a way as to comport with the expectations of a forensic examination, by legal standards.

An organization that commits crimes in other countries to do their job, and commits crimes possibly in America regularly, wouldn’t frame someone? Why? They can frame an undesirable politician in another country, but not someone who betrayed their trust and committed an act of aggression and treason from within? That’s laughable.

New comment by chislobog in "Gary Bowser and gaming's most infamous piracy case"

chislobog — Thu, 01 Feb 2024 13:04:03 +0000

The way you describe him sounds like you come from someplace where regulatory capture is a good thing.