News for hackers. Stuff that matters.

throwaway2600Hz

A little late to the conversation, aintcha?

First, I assume I'm being watched at all times, particularly considering this is internationally wired e-mail through a public email hosting service with less privacy protection than a glass-walled dressing room facing a public street. And a flashing red neon sign. Less than that. The spy agencies already have it and know this stuff exists, so I disadvantage nobody by sharing it with them.

Second, I know the U.S. government has it out for me. If I throw this garbage in the trash and do nothing, it will arouse a lot more suspicion than if I report it like a good little internet user.

I'm not above opposing the U.S. government's other agencies if the cause is just, but in this instance, fighting to protect the colossally stupid (so colossally stupid it makes the whole thing feel like a set-up) is pretty low on my list.

Mine was a serious post. The "this is the first five minutes" probably would have been better written "this feels like the first five minutes".

I'm going to hope that your comment didn't realize that and wasn't just taunting me.

Ask HN: Email catch-all is getting sensitive financial documents from Pakistan

I registered a domain for one of my upcoming projects, and I set up an email catch-all to manage it.To the noobs out there, a catchall is a great way to send all email, like [email protected] or [email protected] or [email protected] or [email protected], to an email address you don't want spammed.A few months later, an individual from Pakistan sent all kinds of...

( Read More... | 7 comments | 3 points | on HN )
Re:Ask HN: Malwaremonger’s moral bind on Friday February 02, 2018 @07:16PM (#16295310)
Apple does not have a bug bounty program when it comes to macOS.

Bug bounty programs run by Apple (for their other platforms) and Microsoft require you to agree to their draconian terms and conditions before you can even submit the bug.

Re:Ask HN: Malwaremonger’s moral bind on Friday February 02, 2018 @07:15PM (#16295307)
You're assuming they told me. I would gather not, or perhaps, they did not consider it to be a salable asset, or not one they couldn't develop themselves.
Re:Ask HN: Malwaremonger’s moral bind on Friday February 02, 2018 @07:13PM (#16295297)
Apple does not have a bug bounty program when it comes to macOS.

Bug bounty programs run by Apple (for their other platforms) and Microsoft require you to agree to their draconian terms and conditions before you can even submit the bug.

As to the rest of those pithy comments, I'll try not to take them too much to heart.

Re:Ask HN: Malwaremonger’s moral bind on Friday February 02, 2018 @07:08PM (#16295264)
This was my thought as well. My hope is one will see and respond to this post.

Ask HN: Malwaremonger’s moral bind

I have found a zero-day cross-platform exploit that is nasty (as in make-the-nightly-news nasty). Mitnick doesn’t want it. Zerodium doesn’t want it. Apple and Microsoft don’t even want to hear about it without my agreeing to give them exclusive rights to it (even to the exclusion of each other), before they even look at it.What’s the right and moral thing to do next? Apple and Microsoft are...

( Read More... | 12 comments | 9 points | on HN )