News for hackers. Stuff that matters.

_a9

This is what I do too. If i need to use or test something i don't trust then I use an old phone. All of the phones use crDroid(1) and I have scripts to quickly wipe and reinstall the OS whenever I need a full nuke.

(1) https://crdroid.net/

I used this a while back while running a waybackmachine style site for a large social media platform. I wanted to keep it simple with sqlite but when it got popular it started to become a problem. Marmot was the only thing that I was able to get to work with the amount of data I was pulling in. It would sync the master db from the main archiver server to all the ha servers so the user would be able to access it immediately no matter what ha server they got. The dev team was nice to talk to when I had some issues in setting it up.

It was definitively a weird backend setup I had made but it just worked once set up so I didnt have to touch any of the frontend code.

The URL scanner doesnt directly scan the file. It checks the URL against other web firewalls and returns stuff like the headers, chain, the sha256 hash of the body (which links to the actual file analysis https://www.virustotal.com/gui/url/9525d0fe32cebf7933bf84dcf...)

You can see and compare the different vendors of each. File analysis goes to all the antivirus' and does the sandbox stuff and the URL analysis goes to things like Google Safebrowsing, phishing check services, etc

tldr different systems for URL analysis (web firewall check) & file analysis (antivirus/sandbox check)

Part 2: Flock and Cyble Inc. Continue to File False Notices

https://haveibeenflocked.com/news/cyble-part2

The Whitehouse website gets cleared for the incoming administration.

The page was moved to: https://bidenwhitehouse.archives.gov/oncd/briefing-room/2024...

Re:Internet Archive down (SSL cert expired) on Wednesday March 27, 2024 @04:24PM (#39844152)
Looks fine on my end for both `archive.org` & `*.archive.org`

  Issued By Go Daddy Secure Certificate Authority - G2
  Issued On Saturday, December 23, 2023 at 7:17:22 AM
  Expires On Thursday, January 23, 2025 at 7:17:22 AM
  Certificate 687b9933480904106777195bb771a07e17391069288804ab239fcecaa3cccc94
  Public Key 72be73116fa44e8638b348117f1f35a95d21240558d5ec4ee7c8c61436aabe84
> Part of it is the change Spotify made to not paying for streams under 1,000 plays. When we first got our January sales report, it was down nearly 70%. Yes, seven-zero %. And February’s figures confirmed it wasn’t a fluke.

> The other part is also based on Spotify. The new fining system is beyond outrageous. We are getting fined for users who had 9 out 10 fake streams according to Spotify. They don’t give us any more details than song, number of total plays and number of fake plays. If that ratio exceeds 90%, they issue a 10 euro fine each month.

> For us and our catalog of over 40k songs ... The THOUSANDS OF DOLLARS in fines each month was the final nail in the coffin though

Yea not sure why they didn't go straight to selfhosting a Gitea instance on some offshore VPS.

If any Suyu devs are reading check out https://kycnot.me/

I've personally used these hosts to provide data to the public that was subject to constant takedowns

  - UDN (Used before the invasion) which is based in Ukraine. Good way to support them I suppose.
  - BuyVM in Luxembourg
  - Incognet in NL (Probably reach out to them first to see if it's OK)
  - PQ.hosting in Russia
Using the 'share/copy link' button has been pointing to x.com since they did the whole x.com change but afaik going to x.com will redirect to twitter.com. No clue what they're on about using one domain but redirecting to the other.
After the twitter files I just assume the government has their grimy little fingers in every company that has access to a large amount of eyes, prime for manipulation
Re:Is Cloudflare down? on Wednesday October 11, 2023 @02:03PM (#37848023)
Discord also down showing a (custom?) Cloudflare error page

https://archive.ph/IFGzo

I dont think erowid content would be good to tell safety of a drug, probably more what type of experience you'd get using a drug at certain doses.

What would be interesting would be training using the data from PsychonautWiki[0] which has all sorts of good data about drug information & safety (and experiences)

[0] https://psychonautwiki.org/wiki/Main_Page

> These fucking "journalists" can go fuck themselves and move to China/North Korea if they love censorship so much.

>> So the journalists should be... censored, and kicked out of the country?

> ...and *move* to China/North Korea if they love censorship so much

No one is talking about kicking out journos but you

Aside from the people that abuse the service to host files (using free accounts or using accounts with sniped nitro) there are a lot of bots that do image/gif generation that upload directly as attachments. You could see people using multiple commands, while generating multiple gifs, until they get one they want to save. Theres also servers like Midjourney. I imagine a lot of what Discord stores is dead files that will never be accessed after the first time.

Another note is that a lot of the meme gifs that are used come from the Tenor and Giphy integration which are only temporarily hosted on Discord's media proxy unless a user downloads it and reuploads it.

> The charges include having an abortion after 20 weeks, false reporting, and tampering with human skeletal remains.
Im not getting the same time delay with curl

- `time wget https://t.co/4fs609qwWt` -> `0m5.389s`

- `time curl -L https://t.co/4fs609qwWt` -> `0m1.158s`

Re:Render nuked my entire account with no notice on Sunday August 13, 2023 @06:40AM (#37108603)
From what I've experienced in the few years using them is that they're pretty strict on abuse, new account or not. I think initially they would null route all ips for the server when getting copyright reports but the past few times they would just email me the report and I had to reply with the fix or else they would null route (or maybe suspend) the server after a day or so of silence.

While I do run a mail server with them I've never had any reports so I can't say anything on that but I'd assume theyre equally or even more strict with email abuse reports they get.

I haven't heard that word being used in years living around there and also being hispanic.

To me it just looks like parent is cherry-picking some domains to try and put words in their mouth.

If the person owns roaches.com out of hundreds of domains then you're going to try to make it racist so the owner looks racist?

I never understood why trying to make innocent things racist isn't considered racist itself.

Controversial Youtuber Ruben Sim also has some (also controversial) vids showcasing the bad stuff that happens on Roblox (Weird developers, moderators ignoring reports, weird/inappropriate groups and items not being removed, etc) [0-2]

This is the same person that was sued by Roblox in 2021[3] but that doesn't nullify the content he has been showing about all the shady shit that Roblox does.

[0] https://www.youtube.com/watch?v=STS1horM6JY

[1] https://www.youtube.com/watch?v=rLF6YUdt8aE

[2] https://www.youtube.com/watch?v=2bUWnxP_YAw

[3] SomeOrdinaryGamers deep dive into the lawsuit: https://www.youtube.com/watch?v=3Dlxp-X7O54

[-] https://www.youtube.com/@RubenSim/videos

Veritasium posted a good video about Oppenheimer the other day if you have 32 minutes

https://www.youtube.com/watch?v=Xzv84ZdtlE0

Re:GPT-4 Details Leaked on Tuesday July 11, 2023 @01:25PM (#36684241)
Wayback failed to load the subtweets but archive.is has a copy but it seems to stop after around 10 subtweets. The threader link that was posted has it all though.

https://archive.is/Y72Gu

I've been looking for something to integrate in my site that just lets unauthed users to add upvotes, downvotes, and maybe some extra ones like 'recommend' or a few general ones like 'cat/dog'. Dont need any alaytics or extras.

Are there any recommended good self-hosted alternatives? This looks nice but requires quite the stack of services.

Re:PhotoPrism: Browse Your Life in Pictures on Tuesday July 11, 2023 @11:11AM (#36682124)
Theres an option to disable it on the local version. Just noticed mine also said that on the upload page and went looking in the options
I would take a look around for eastern european hosters that dont really care for western bs and pick up a vps from there to use as a reverse proxy. You can continue enjoying hetzner and still be insulated by putting it behind a different server that will get (and toss) any abusive takedown requests.

The lowendtalk forums are a good place to find any number of hosters that will fill your need.

Older »