News for hackers. Stuff that matters.

jas-

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Sunday November 01, 2026 @09:17AM (#50325927)
Thanks. Let's look at few pieces of public information on North Korea's APT groups.

CISA: https://www.cisa.gov/news-events/cybersecurity-advisories/aa... USHHS: https://www.hhs.gov/sites/default/files/dprk-cyber-espionage... USDOT: https://home.treasury.gov/news/press-releases/sm774

These seem dated, >5 years, but don't seem to indicate a level of sophistication needed for the heist.

The reports do touch on laundering the coins, but that still wouldn't excuse the "there will be signs" related to a large influx of monetary resources right?

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Saturday October 31, 2026 @12:47PM (#50317760)
I see a lot of focus on the "how" this happened, big deal.

Computer security is a farce.

Let's address the elephant. I find the accused to be very unlikely.

20 minutes?! $6.3B?!

Their APT groups have been classified as advanced but not elite, this suggests a huge jump for their groups.

"There will be signs".

There should be an influx of purchases right? Or at least a large number of imports perhaps through shell companies to further obscure the sources as this nation.

Based on what I am told and read about this nation they are poor, can't afford to feed their people, etc., etc. Additionally, the quality of education is reported to be low due to the isolation.

Where are the shipments into the country and where does that money lead? Until these signs occur I am skeptical.

That kind of money is what the FBI, Interpol and other investigators specialize in right?

I don't participate in any digital currency, but if I did I would think a worldwide investigation with collaboration amongst these agencies would be in order.

DARPA and the USPTO have technical details on both taxpayer-funded research and patented technologies associated with these concepts. Some of the originating work came from fears of US enemies abroad experimenting with mind control.
I would rather see a Star Wars fight of the chess pieces. But this is fun none-the-less!
Re:When did Google get so f-ing weird? on Sunday September 27, 2026 @08:00PM (#49872059)
Reading the comments and all I can think is "first world problems"
Until you see the IP of your project disappear and get rolled into their solution
Star Trek was a documentary
If the activities were truly cool and impactful, and not illegal or unlawful as you suggest, wouldn’t it be possible that the suicide could be due to a culture of not speaking out and then left to deal with the after effect of guilt? A slanderous retort vs a different lens to review the events isn’t helpful
If you speak to the correct people about illegal activities and unlawful orders you will not.
Re:Tailscale didn't stop the Hugging Face intrusion on Friday July 31, 2026 @05:56PM (#49128999)
Or the infamous promotion of legislation without representation
Re:The unreasonable difficulty of time series forecasting on Tuesday July 21, 2026 @06:19PM (#48999148)
Maybe trying to predict entropy would be easier
Thanks for sharing this
Re:Against "Stochastic Terrorism" on Thursday July 16, 2026 @08:12PM (#48941943)
Can you provide correlated events to these? It would certainly help the argument
Re:Inkling: Our Open-Weights Model on Wednesday July 15, 2026 @06:35PM (#48928064)
It's a similar problem the human DNA solved by telling our teenage selves that our parents are dumb and we needed to move to a new tribe. Genetic diversity, but a digital equivalent.
It reads like a Turing test bot doesn’t it? Sus
All one has to do to validate this is to look at their own code to understand why it may look like slop.

Anytime a port, a prototype or any other beta/alpha version of a piece of software is coded, isn’t that what we as humans do already?

To say that a human is any better isn’t sound judgement or logical.

Re:Chatting with an AI Won't Make You a Top Programmer on Sunday June 21, 2026 @02:39PM (#48621423)
Pretty sure that isn’t the point of using LLM’s
I digress; this article actually has helped identify useful knowledge gaps around topics I have researched. https://drensin.medium.com/elephants-goldfish-and-the-new-go...

While you have to think about things objectively no matter what, when I start researching topics like physics, using AI as suggested in that article has proven very useful.

You need to be able to advertise the networks to each other using a routing protocol such as ospf
The sheer volume of bug reports negates the perceived importance
Yes. It is the equivalent of reading a technical review of a product by the product owner
Re:Field Artillery Training. 1914 on Friday February 27, 2026 @06:23AM (#47179239)
Thanks for putting this online
Re:What does " 2>&1 " mean? on Thursday February 26, 2026 @08:51PM (#47175289)
Red hat and other RPM based distributions recommended kickstart scripts use tty3 using a similar method
Re:Carelessness versus Craftsmanship in Cryptography on Sunday February 22, 2026 @11:44AM (#47112480)
“ The response might've been different if the author had already given a patch”

For a security related issue? Not sure that is a wise decision.

Thanks for providing this!
Re:One engineer said "retarded" in a meeting. I just fired him on Saturday February 01, 2025 @10:11AM (#42898906)
If we are just going to stigmatize one word, perhaps, as a group, you should also consider the following list and fire people for these as well?

The only real consistent thing is as each generation becomes "woke" or "enlightened" (as previous generations called it), one or more phrases will be termed offensive by the younger generation and changed to something else.

https://en.wikipedia.org/wiki/List_of_disability-related_ter...

Re:AES-GCM and breaking it on nonce reuse on Tuesday June 11, 2024 @11:31PM (#40654181)
Great post! Thanks for taking the time to put this up.

What do you think the ratios are regarding improper use of nonce with this mode?

Most implementations that I am familiar with intentionally generate a random nonce to help lower the percentage of app devs doing this very thing

Be worried when laws get passed against barter systems that would circumvent these systems

Older »