Kind of hard to understand how a bug would have generated a second pair of key so bad, and how would human would have ended up using them. Never attribute to malice what can be attributed to stupidity, but sometimes you wonder.
And an equal amount of stupidity in the whole ecosystem, apparently there are no "unit-tests" for trivial failure modes, like 8 bits of entropy, before adding a CA to the trusted list.
What next, googling the public key finds a 2 year old pastebin with the private key?
They were referring to the comment they were replying to, which claimed that the original code was written (by humans) as poorly as AI does today. But AI today wouldn't write bugs that basic.
In many countries, running an exit node is a very fast way to have cop knocking at your door and seizing all your stuff.
To run a tor exit node, you either have to try your best to stay anonymous, preferably be based in a country who don't care at all about cyber crime, and run them on a dodgy hosting provider who dgaf. Or you have to create a legal entity, either a non-profit or a company, depending on the country register as a hosting provider (so that you are not consider legally responsible for what comes out of your server if you abide by some rules), and you will still have to respond pretty fast to any police inquiry.
If anything, it's a miracle that there is 3000 of them. Although you can safely assume that a good portion of them (if not the majority) are operated by state intelligence services, cybersecurity companies and bad actor, who will log everything that pass through their node (and might be able to decrypt them one day).
agree I think tor is such a cool technology but even the thought of what is getting routed through there on my machine or even a machine I rent is enough for me to stay away from it
I watched Adrian Crendshaw's DefCon talk about how people got busted using Tor and have also stayed away since then. I have used it in conjunction with TAILS a few times, but other than that, I don't mess with it any more.
DEF CON 22 - Adrian Crenshaw- Dropping Docs on Darknets: How People Got Caught
Same thought for me with Freenet about 15 years ago.
I liked the idea of it, especially since it was a time where ISPs were really cracking down on BitTorrents. But after seeing a few index sites inside the network, I quickly realized how much of that network was CSAM.
I once worked at a very pro-hacker firm (USA) - our CTO, good as he was, once tried to migrate our Ubuntu based servers to BSD, this being a very high tier performance oriented HFT firm, purely on his love of the distro.
A good dozen engineers in a team of 50 ran relays, one bold fool ran an exit node and was falsely fingered for CSAM type crimes during my tenure. The net effect was no one ran relays anymore. The poor exit operator remains an Irish to this day because he has dozens of headlines about his arrest and none about the dropped charges.
Yep, running a relay is fine ! I did it for several years (even got the free shirt!). And it is still useful because more relay improve the network for hidden services (which are insanely cool to self-host some stuff, free NAT traversal !).
This somewhat begs the question. I know some smart tvs are sold cheap because they are secretly used in botnets. By multiple bad actors independently even, it's enough common of a strategy.
How come no one has done that for the dark web? That we know of at least? It would be incredibly annoying for cops to suddenly go knocking on 15 thousand doors of completely random people.
US government literally has a gigantic data centre purely for the purpose of storing encrypted data traffic that might be decoded one day. We can only assume that anything going through any US controlled TOR node ends up there.
It's not just that the world is built around human-shape, but it's also that humans are very, very adaptable. Our hands are a marvel of evolution allowing us to do extremely precise tasks while still being adaptable to all kind of movement : Screwing in, out, grabbing weird shape in 6dof, rotating along several axes, ... And ours arms, our legs, etc, have similar benefit. As an example, we are not a fast specie, but we can walk on even ground, rough ground, steep inclined, we can climb rock and more. If you see a place, you can probably go there.
This is why human are still used for many, many tasks, including in industry where a lot of things are handle by robot. Yes, you can have an automatic belt feeder, or moving tray system, to move pcb from the pick and place machine, to the furnace, to the assembly, etc. But it means your assembly line is fairly rigid. Accommodating a new process, a different size of pcb or whatever become a costly endeavor. A human on minimum wage can cheaply move things from machine to machine, check if everything is alright in the process, adapt to new processes, new floor layout, very easily and cheaply.
Robot don't need to be exactly human shape, but having robot with the same adaptability has human have a huge advantage for companies where adaptability is a core part of the business.
> It's not just that the world is built around human-shape, but it's also that humans are very, very adaptable. Our hands are a marvel of evolution allowing us to do extremely precise tasks while still being adaptable to all kind of movement
Not just our hands but really our whole bodies.
I recently taught one of my kids to ride a bike and once they got it I thought to myself:
"Somehow millions of years of evolution have somehow allowed us to ride a machine that was invented <200 years ago"
“When man invented the bicycle he reached the peak of his attainments. Here was a machine of precision and balance for the convenience of man. And (unlike subsequent inventions for man's convenience) the more he used it, the fitter his body became. Here, for once, was a product of man's brain that was entirely beneficial to those who used it, and of no harm or irritation to others. Progress should have stopped when man invented the bicycle.” — Elizabeth Howard West
The difference is whether or not a factory is designed with robotics as the driving principle or with human labor as the driving principle. They will be completely different, and as a result a lot of those things that would cause issues are simply engineered away.
This only works for high volume / low margin. Humans excel at rapid change - for now.
> Our hands are a marvel of evolution allowing us to do extremely precise tasks while still being adaptable to all kind of movement
It's easy to overlook, but to me it's amazing that humans are able to type! Subtle, precise movements by our fingers to express language were presumably not skills our ancestors had an evolutionary advantage for.
Yeah, for all we know there's a creature at the bottom of the ocean that's just as intelligent as humans, but it's hard to build a civilization with fins.
There was always people trying to make $$ with piracy (I mean, didn't the tpb owner basically all became millionaire thanks to it ?), but I feel like in recent years it had become worse. It's likely because since the 2010' many countries (mostly “western” country tbf, but also Japan and now Korea) have become way more aggressive with hunting and prosecuting piracy services operator. So in a way, like with drugs, higher risk means that a lot of “in it for the love of the game” kind of people left the scene and only more, errrmmm "money focused" people stays.
If anybody ask, it's not me who said it, but you can also easily use Shodan to find a lot of open Bitmagnet instances. Many people who self-host do not seem to be aware of the “questionable” decision of docker to always listen on 0.0.0.0 by default and make a firewall rule to expose your service to the entire web (you can also find instances of jackett and some *arr stack, but most of them are at least password protected).
The issue is that in many cases, this is not what is being sold on Amazon. There is good chinese brand/product (I love my chinese IEM), but when looking for many household items, you will find the white label, probably not compliant with local regulation, type of product. When it is not an outright scam.
I actually have a recent example : I do woodworking and for the last step of finishing some of the thing I build, I use a mixture of beeswax and linseed oil. Beeswax has been harder and harder to find locally. Not so long ago, every hardware shop had some. Now it has been displaced by synthetic product. So unless you know a local beekeeper, you are sol.
So, resigned, I went to Amazon. It had a trove of listing for "100% natural beeswax". Turns out, ALL of them are paraffin dyed to look like beeswax. You can report it to Amazon, they don't care. They will reimburse you, but never remove the listing.
The beeswax I get from a local apiarist looks nothing like that under a blacklight, and in fact is quite (pale) orange. Carnuba wax mixtures fluoresce yellow. My box of paraffin fluoresces blue brightly enough to be visible in full sunlight, much brighter than the image. Rosin fluoresces bright, radioactive orange in case you're wondering.
I closed my amazon account months ago, but I have also experienced this problem. I have a hiking staff I really like that needs to be re-oiled and waxed. I'm having the darndest time finding both things. The beeswax, and most places seem to only want to sell "boiled" (solvent treated) linseed oil so it cures faster.
You can rent bare metal server for that. The real advantage of cloud solution is a cohesive offer, ease of scalability, and many other things which boils down to "we take care of things for you". It can be worth the $, i can also be a huge waste of $.
Far lower than 0.01x. Batching can get like a 30x boost, and horizontal scaling makes that impossible, so your upper limit is basically 0.03x. Then you throw it on a volume with 1/1000 the IOPS of a basic consumer drive. So more like 0.00001x, and you can pay through the nose to bring it up to 0.01x maybe.
People have zero concept of how incredibly absurdly fast even a slow computer is. Storage is literally 1000x faster than it was 15 years ago. My first job was firmware for enterprise storage arrays and IIRC we were aiming for 3M IOPS. That's not much more than what kids can put in their PS5 now, and these were arrays running companies like Walmart and JPMC.
I also use the storage box and easily have 30Mo/s bandwidth (and 130Mo/s+ from a hertzner server), so that's strange that you seemed capped at 3Mo/s. Are you not in Europe ? You should probably contact the support to report it, because that almost definitely now how they intend their product to be.
Mo/s means megabytes per second (the French abbreviation for mégaoctets par seconde). It measures data-transfer speed and is equivalent to MB/s (capital B) in English.
Kind of hard to understand how a bug would have generated a second pair of key so bad, and how would human would have ended up using them. Never attribute to malice what can be attributed to stupidity, but sometimes you wonder.
reply