• 1 Post
  • 165 Comments
Joined 11 months ago
cake
Cake day: October 20th, 2023

help-circle
  • I mean… you really can’t. Contracts and even people on the ground more or less reveal this real fast (and is what the OSINT community lives off of). The US and even Ukraine do the same. You can keep it a secret exactly how juicy a target is but you can’t really hide that missiles or tanks or whatever are being built somewhere.


    For example, a buddy of mine lives near a US facility that is near some REALLY nice climbing areas nearby. Every couple of months the army swings by and tells everyone to go the fuck away. And it does not take much brain power to realize that THAT is when they are moving whatever they don’t want people to know is at that base. But any other time? You can literally watch equipment being moved from warehouse/hanger to warehouse/hanger while giving someone a belay.


  • Can we? Yes. Immediately sending peacekeeping forces to prevent the IDF from continuing to engage in genocide and coordination with neighboring countries to figure out whether this is a relocation situation or a proper two state solution (and what that would require).

    Will we? No. Because if we cared we would have done it decades ago. The US doesn’t care because we decided Israel are our allies in the region and most of NATO falls along those lines. And neighboring countries don’t care because they don’t actually like the Palestinian people (and actively block refugees) and mostly just want to hurt Israel through them.


  • It is the biggest “problem” of modern warfare. We don’t fight wars of conquest anymore because that tends to actually make other countries care (because those brown people have resources!). So we attack and then leave.

    It is similar to why France and England (or China/Japan/Korea) were basically at continuous levels of war for hundreds (?) of years. Because when you roll up and kill a bunch of people and maybe steal a goat? The remaining people want revenge. When you conquer them and either ethnically cleanse them to nonexistence or integrate them into your society? They forget why they were angry after a generation or two.

    I very much do NOT believe the world would be a better place with more ethnic cleansing and stealing of land. But we also are in a mess where retaliation between countries just continues with no real consequences to the people who are calling for the attacks. And the civilians just get rightfully angry when their kid is permanently blinded because she was looking the wrong way at the Lebanese equivalent of a Kroger.

    And then you get the keyboard warriors who hop in decades (or even centuries) into the conflict, pick a side, and immediately say THESE terrorists are good guys and THOSE terrorists are bad guys.



  • Supply chains matter a lot and governments, let alone terrorist organizations, fail to protect them.

    US centric, but far too much of policy is “Don’t buy Made in China” with no thought beyond that.

    For this scenario? My assumption is they ordered from their usual supply sources and nothing was hinky. But Israel (or whoever) compromised a port or fedex center along the way and installed some explosives since the only people buying those pagers were terrorists. And nobody on the hezbollah side even bothered to weigh the packages before handing them out.







  • No. There is every reason to “defend yourself”. The key is to actually be aware of what research and efforts are out there and minimizing your risk profile any time you are dealing with a black box.

    I mean, it is known that people can pick locks. Do you plug your ears every time you hear someone talk about how doors can be compromised? Or do you give up on everything and remove every single deadbolt in your home?

    Or… do you do a bit of research and figure out what you can do to make your home harder to break into. Whether it is sturdier screws, a reinforced doorjam, or other methods?


  • I can’t speak to monero specifically

    But:

    • Why aren’t they catching more criminals? They are. They just are finding alternate sources of evidence. Dick Wolf shows love to talk about how cops need to protect themselves from any poison fruit and blah blah blah. The reality is that they immediately go to the poison fruit and use that to make a plausible excuse for why they investigated something else that can confirm information they got from the illegal source. If you’ve ever wondered why they would think to investigate a random unrelated company that ends up being the smoking gun…
    • Why didn’t anyone claim the bounty? Because the CIA and the like don’t want people to know they compromised it?

    Back in my pure research days it was always fun to guess what the latest “big thing” was actually about. It was especially fun when you would be looking for funding opportunities and see really weird stuff that made no sense for the org sponsoring it but would have made perfect sense for a different 3LA.

    It was ALSO real fun to totally never notice when certain funding opportunities dried up and then there was a big push in the news about how we need to outlaw technology those opportunities totally didn’t already compromise.

    Like, for the better part of a decade The Big Thing was graph analysis techniques. And the number of kids who had no idea they were basically writing algorithms to process social media (especially twitter) was downright sad. And the people who DID realize what their work was geared toward? They applied for jobs where they got paid a lot more to do exactly that without needing to pretend it is actually about data storage technologies or optimizing cell tower load.

    And… let’s just say that most of those algorithms ALSO apply toward cryptocurrencies and transaction logs (since they had great applications for bank transactions…) and even doing a number on tumblers and so forth.


  • While I agree this definitely feels like more of a threat than an action, it IS worth understanding the many times that tor nodes have been compromised. Exit nodes are a well documented mess (and have many of the same vulnerabilities normal VPNs do) but eavesdropping and traffic analysis are also probabilities based upon how much of the network any given org has access to.

    If that NGO was doing hinky stuff or just doing a sloppy job? Those cops might actually have a LOT of actionable data that just needs a bit of processing.


    Which is why it is always important to understand what your risks and benefits from a privacy related tool are. People often think “I’ll just put everything through a vpn/tor” which DRASTICALLY increases their risk profiles. But they also don’t understand how tor works well enough to even know what it gives them over a traditional vpn (as opposed to “Dark Web” stuff which is a different mess).


  • If you need an “off the shelf, low effort” IDE then you pick whether you are using VSCode or Vim/Emacs and then go to youtube and google “best plugins for ${LANGUAGE} in ${EDITOR}”. And you get basically a minute of copy pasting to have it set up to about the same level of optimization.

    Aside from that? The reality is that everything takes time to learn. It took you time to learn your preferred emacs config. It took me time to learn default vim and then what my preferred vim config should be and how to take advantage of it. Just like it took time to learn the editor that came with python on windows for years (still might?).

    Which gets back to this being a boomer ass article.


  • Yes. A much less boomer-coded article would be better.

    But as someone who has actually used a lot of the various IDEs over the decades and keeps coming back to vim (and is already expecting to go back to vim within a year because of invasive copilot shit…): Those niche editors? They are either genuinely bad ideas (think TempleOS levels of insanity) or they became plugins for every other IDE. I like vim a lot but emacs is the same (actually emacs is an OS with a text interface but…). And many of those plugins ALSO exist for vscode and atom/sublime and so forth.

    Because good (uncopyrighted…) ideas propagate. That is development and design.


  • I REALLY hate articles like this

    Saying we “lost” this software just shows that people don’t understand what software design/engineering is.

    Basically every screenshot of the “lost” TUIs look like a normal emacs/vim session for anyone who has learned about splits and :term (guess which god I believe in?). And people still use those near constantly. Hell, my workflow is generally a mix between vim and vscode depending upon what machine and operation I am working on. And that is a very normal workflow.

    And that is what we want out of software development. The good ideas move forward. The less good ideas become plugins for sickos. Because everyone loves vscode right now but… Microsoft is shitting that up REAL fast with copilot and just wait until every employer on the planet realizes that and ban it.

    And the rest just ignores the point of an IDE. Yes, taking your hand off the keyboard to touch the mouse LOWERS YOUR EFFICIENCY*. But it also means you can switch between languages or even environments trivially. Yes, it is often more annoying to dig through twelve menus to find what you want or talk a co-worker through how to do basic git operations that would be three commands. But holy crap I hate the people who “can’t work without my settings” that mean they are incapable of doing any “live” debugging or doing any peer programming where they aren’t driving.

    Back in the day we had plenty of people who were angry that not everyone was using vi and a bunch of tcsh scripts to develop because it clearly meant they didn’t understand what they were doing and were too dependent on compilers and debuggers. And it was just as stupid then as it is now.



  • In fairness, “gaijin” is any foreigner. And a lot of laws in Japan are very much based on warped Christian values (can’t imagine who they got that from…).

    But yeah. One of my best friends is Japanese American and the way she sums it up is: You know you truly understand the culture of Japan if you realize why you only want to visit for a few weeks at a time.

    With bonus points for anyone who can read quickly realizing why the general stance toward APA is “Only if you get a REALLY good deal”


  • Doesn’t really change much.

    You NEVER connect to sensitive resources via wifi. Different orgs and levels have different rules about whether a device capable of wifi can even be in the same room, but the key is to not connect it to the secure network. This is commonly referred to as “an airgap”. And if you are wondering how different ships can communicate with each other and The US? Don’t ask questions!

    For less sensitive resources? YOLO that shit. But it is also incredibly trivial to set up a security model where users cannot connect to arbitrary networks.

    So StinkyNet would, presumably, only be usable by personal devices. Which should have absolutely nothing sensitive on them to begin with. And if anything on any of the ship’s sensitive networks was even able to connect to StinkyNet then… the Navy done fucked up.

    Which… might explain the rapid action to punish those who violated policy.


  • And if there is not immense amounts of “do not have a fucking fitbit” levels of warnings and policies, that is a problem for the US Navy itself. Because a lot of those will also cache data and send the last N days once they get back to shore.

    Again, unless they were ACTUALLY doing sensitive stuff (rather than just “sensitive by default” to protect Leadership™ from having to think and make decisions) then we are looking at the same problem the russians have in Ukraine.

    Otherwise? It is a policy violation, not a security violation, in and of itself. What people then share on social media is on them.


    And a friendly reminder: Policy is made to minimize the risk of a security issue and you should follow it (if only because you are paid to). But it is VERY important to understand what you are actually protecting yourself from so that you understand if policy is even doing anything. Otherwise you get complete insanity as more and more bureaucrats and Leaders™ add bullshit so they can get a bonus for being “security minded”.