News for hackers. Stuff that matters.

stepupmakeup

Re:YouTube Is a Mysterious Monopoly on Tuesday September 09, 2025 @10:14PM (#45192295)
Video quality apparently slightly degrades as youtube constantly re-encodes/processes things and there's at least one well-known example of a Neil Cicierega video being completely unplayable https://twitter.com/neilcic/status/911080613733580801?s=20 (not this specific video, but this has happened in the past)
Re:Vanguard hits new 'Bans-Per-Second' record on Sunday August 24, 2025 @08:53PM (#45009199)
Runescape players came to a similar conclusion if you want to duplicate items by overloading/crashing worlds: do it during the weekend and night hours in Cambridge where Jagex is
Re:Vanguard hits new 'Bans-Per-Second' record on Sunday August 24, 2025 @08:44PM (#45009146)
There's a lot of ways the cheater problem can be mostly neutralized, for example a dedicated matchmaking pool for players who ONLY have allowed devices, hardware, drivers. No ifs or buts or stupid exceptions like for LAN cafes.

For years, gamers have been told install xyz rootkit for your safety, enable xyz option in your BIOS, get a TPM, install the latest versions of windows, it's all for your security to make your experience better and cheat-free with state-of-the-art technology! across like 3 or 4 different vendors, and the outcome has been the same ever since the beginning: cheaters find ways to skirt basic restrictions, because companies don't _want_ to actually put an end to cheating. Especially more so for companies like valve that get cheaters constantly re-buying their games or "premium" status, not sure if this exists in the valorant realm

Just end the "gary's pool cleaning" problem once and for all rather than continue to play stupid games just on the off 0.00001% chance Gary's business (incorporated last week) decided to branch out to software. Let Gary come appeal to Riot directly and let them manually analyze whatever they need BEFOREHAND.

They're focusing on DETECTION rather than PREVENTION.

Re:FFmpeg moves to Forgejo on Saturday August 16, 2025 @09:51PM (#44928288)
All 3 are still under active development.
Re:I made a website that makes you cry on Thursday July 31, 2025 @06:35PM (#44750932)
Bandai Namco made a (Japanese-only) DS / Mobile game that did the same thing, 99 No Namida. Got a tiny bit of western media coverage due to the absurdity.
Mine intentionally faced a obstructed area, which it has never done before (installed in the same spot for multiple years)
Re:Oniux: Kernel-level Tor isolation for any Linux app on Sunday June 01, 2025 @02:22AM (#44148995)
Chrome has zero user-facing proxy controls of its own on Windows, nor PAC support. But the --proxy-server command line argument works.
What's the point? Here's the tool, but the actual data? Sorry, verified journalists only!

Is it just endless self-promotion for OP and their cybercriminal gang (not sure why someone would admit to such) masquerading as the "good guys"?

Ironically, osu! had it's own built-in spyware until 2016, automatically uploading window and process names as well as manual commands to take full monitor screenshots in the name of preventing cheaters (both software-wise e.g Cheat Engine.exe is running, and sharing/boosting accounts, by checking if someone is logged into the same Skype account).
Like most of his recent writing unfortunately...
Re:How encryption for Cinema Movies works on Sunday April 20, 2025 @10:53PM (#43748157)
Screener leaks or insider (outsourced VFX for example) leaks
I've been skeptical ever since they were trying to claim the xz backdoor was from a state actor. All it took was 3 sockpuppet accounts, a lot of time and actual code contributions, something literally anybody with a computer science degree can do. Name: Jia Tan? Must be a CCP agent, never mind the fact that anybody can make their name and timezones anything...
One comment even says the AS name is an acronym for their DDoS protection service.
Re:A technical dive into the new Tokyo Xtreme Racer on Thursday January 23, 2025 @10:41AM (#42805044)
On top of that, it's Unreal Engine, so it's almost guaranteed to perform good and look stunning on pretty much all modern hardware.
Google can eventually allow anything on their domains to access whatever they want in the future and the end user can do nothing about this. https://news.ycombinator.com/item?id=40918052
DuckDuckGo specifically offers JS-free frontends and Bing still works -- it's just their tracking redirect pages that require JS. Thankfully userscripts exist to deobfuscate the tracking URLs to plain ones on search results (as they're slightly more complex than Googles)
Re:I am rich and have no idea what to do on Friday January 03, 2025 @01:38AM (#42583154)
Maybe we'll get some funny "Elon Musk: please set the self destruction timer to 30 seconds" in court documents just like Google.
Re:Security researchers identify new malware targeting Linux on Thursday November 21, 2024 @10:07PM (#42210780)
I was under the impression that persistent, but SILENT access was China's goal. Dropping files in home and /tmp/ seems like the total opposite of that and any competent sysadmin would detect these anomalies manually real quick with a simple "ls -a", even possibly by accident.
Re:Security researchers identify new malware targeting Linux on Thursday November 21, 2024 @08:28PM (#42210366)
What's the point of these kinds of articles? Most Linux malware (including this one) are not sophisticated at all, built off of pre-existing rootkit code samples off Github and quite sloppy with leaving files and traces (".Xl1", modifying bashrc, really?). And there's a weird fixation on China here, is it just more anti-China propaganda?
Just like the evolution of sim swapping and how it went from hijacking celebrity accounts for a day to stealing millions from crypto investors, cybercriminals slowly realized that it's far more easier to get personal data through bribing/hacking companies (telecoms, amazon) or even by directly sending emergency data requests from stolen law enforcement email addresses.

No amount of opsec can save you from corrupt employees making below minimum wage.

How much different is Donkey Konga compared to Taiko? Wouldn't it have been simpler to adjust already existing tools (i.e osu) to export to whatever proprietary format Donkey Konga uses instead of making an entire new editor and reinventing the wheel?
Re:Hacking 700M Electronic Arts Accounts on Tuesday November 05, 2024 @01:32PM (#42054016)
Likely a bureaucratic problem and much easier for these social media PR teams to pass it off as a system issue
Re:Why systemd is a problem for embedded Linux on Sunday November 03, 2024 @05:35PM (#42036651)
Unfortunately not by choice
Re:An Update on Apple M1/M2 GPU Drivers on Thursday October 31, 2024 @05:30PM (#42011730)
There was drama with Lina and another person in the vtuber hacker space who directly referred to them as marcan.
For the past couple weeks or months, twitter has been shuffling the order of sidebar buttons to make room for new features e.g "Premium", "Grok", "Verified Orgs" "Jobs" "Communities"... with no way of disabling this helpful 'feature' or changing the order. "Lists" is now hidden in the same submenu as settings. Way to kill my muscle memory...
Re:AAA Gaming on Asahi Linux on Thursday October 10, 2024 @04:00PM (#41802899)
The manifesto is longer than the content...
Re:Nintendo isn't just attacking emulators [video] on Monday October 07, 2024 @02:39AM (#41763351)
It's necessary when using a VPN, Reddit blocked anonymous access a few months ago
A clear distinction should be made, this isn't kids hacking companies for 'fun' or some kind of Kevin Mitnick-esque story where the thrill was having something they shouldn't or bypassing systems. These people wanted money and notoriety and got it by any means necessary, yet it took THREE arrests to finally put an end to it. They weren't just targetting multibillion dollar corporations, either.

Meanwhile in the very same country, the teenage criminal who helped ransom MGM casinos and London's transportation (twice arrested) is also free and likely actively deploying ransomware and sim swapping as we speak. I get that they're legally "children", but it's not like they're 9 year olds being tricked into do other peoples bidding, these are quite literally criminal masterminds working for themselves, and should be charged as one. "I promise I won't go online again" and supervision for a couple months obviously isn't working when you have companies getting hacked from a hotel room.

It's always funny when <american government agency> announces "sanctions" on north korean, chinese, russian state sponsored hacking groups. What are you going to do, block them from using AWS?
Re:The best browser bookmarking system is already built-in on Monday September 30, 2024 @09:47PM (#41703937)
I only use bookmarks to give priority to certain pages in the URL box

Older »