Hacker News new | past | comments | ask | show | jobs | submit | GordonS's comments login

Since one of the most recent massacres a day or two ago, there has been a noticeable shift away from Israeli apologism. But the MSM has absolutely been staunchly Pro-Israel throughout the genocide.

All of the media I've been following have been consistently skeptical of Israel's actions since at least November. In particular, I've noticed that the IDF's press events at the big hospital they cleared out (multiple times!) have consistently fallen flat, with all the journalists expressing extreme skepticism of the military's claims in their articles about it.

Bias more often hides in the news you don’t see, not the ones you do.

For example, many people have heard about 40 beheaded babies. How many have actually heard of Zaka? An ultra-right first responder volunteer group that made up this and several other stories that were plastered all over western media with zero attempt to verify it. Even Israeli media extensively reported on this group’s activities, but NYTimes and WSJ has been weirdly silent about all this up until very recently.

You all saw Nytimes’ investigation into hamas’ systematic use of rape. How many of you saw the news from NYTimes that both the parents and kibbutz of one of the central victims of the story said there was no sexual assault. And this also is a fabrication of Zaka.

Again, these facts are extensively reported in even Israeli media, several months ago. US media have recently started talking about this, and even now barely scratched the surface.


I don't know what you've been reading/viewing, but every MSM outlet in the UK has been very obviously pro-Israel (as well as every story I've seen coming out the US, in the likes of the NYT etc) - to the point where it'd be comical, if what they were doing wasn't so deadly.

In their stories they usually have a tiny bit of criticism of Israel's actions, but even then always with caveats - I suspect this is to give the appearance of balance, and possibly to allow pro-Israelis to complain about how the press is against them. (to be clear, I'm not saying anything against yourself, it's a general observation!)


On false pretenses, such as the presence of WMD.

Presence of WMD was an excuse for Iraq war.

Intervention in Afghanistan was a response to 9/11.


Apologies, I was thinking of Iraq, not Afghanistan.

Members of the Neo-Nazi Azov battalion were hosted in the British parliament just a few days ago. My jaw literally dropped when I saw the photo of bumbling buffoon Boris Johnson standing with them.

I was just wondering if a no-op AV might work! But I thought perhaps not, as I thought Microsoft insisted on AVs running as PP/PPL (Protected Process / Protected Process Light), which isn't realistic for OSS.

Are you able to point to one please? Would love to try it and see if it works!


Isn't this what this post is about?

Ach, I think you're right, that looks to be what they're doing.

Had a similar problem with a Samsung washing machine here in the UK, one of the more expensive models too. After just a few months, it developed problems.

I had to spend hours on the phone to their support people, who would tell me to reset it, switch it off and on again, wait a few days and try again etc - just... useless. I practically had to bed them to send someone round. Eventually they agreed, and a local repair guy came round - he spent a few minutes looking at it, declared it a write-off, and told me he advises all his customers to avoid Samsung!


Different people are interested in different things; personally, I'm mostly here for the sci-tech, but I also find other things interesting, and here on HN I often see unique takes, approaches and opinion for such topics.

I'm glad HN is bigger than sci-tech.


Is there some kind of device that can detect bugs like this? (I'm thinking of the "bug sweepers" I've seen in films)


I posted this on my Discord, one of our members is a security guy and pointed out that anyone concerned about things like this would be using a device called a NLJD, Non-Linear Junction Detector: https://reiusa.net/nljd/, which can detect circuit boards:

> The NLJD antenna head is a transceiver (transmitter and receiver) that radiates a digital spread spectrum signal to determine the presence of electronic components. When the energy encounters semi-conductor junctions (diodes, transistors, circuit board connections, etc.), a harmonic signal returns to the receiver. The receiver measures the strength of the harmonic signal and distinguishes between 2nd or 3rd harmonics. When a stronger 2nd harmonic is represented on the display in red, it indicates an electronic junction has been detected. In this way, a hand-held ORION is used to sweep walls, objects, containers, furniture, and most types of surfaces to look for hidden electronics, regardless of whether the electronic device is turned on.


Exactly the kind of thing I was looking for! Although, I guess for a bug hidden within an electrical device (like that in the article), this approach wouldn't work?

I wonder how well these work against shielding? Might it be possible to build your own device like this?


It would ‘work’ - but not be useful, because you’d already expect a circuit in that location.


No; USB2 cables are passive and shouldn't have any circuitry.


On the keyboard and the USB controller on the host (right next to the port) however…

So unless they’re dumb enough to put it literally in the middle of the cable? My point stands. These tools don’t typically have the resolution to tell.


The article has a section on that very topic: https://ha.cking.ch/s8_data_line_locator/#detection


Thanks; I did actually read the article, but missed this section (and likely some others) as the page doesn't work well on mobile.


The article covers that under the section "detection".

TL;DR: You can easily detect it while it communicates via GSM, and the device is also shielded quite badly, resulting in lots of easily detectable RF interference while it works.

All you need is a cheap RF detector. Having access to a full spectrum analyzer or a SDR will make this even easier.

All this gets much harder while the thing lies dormant, waiting for noise activation or commands. So the "quick bug sweeps" you see in the movies are more difficult.


> So the "quick bug sweeps" you see in the movies are more difficult.

Not if the sweepers are talkative (assuming that the device is sound-activated).


Good ones record long spans of audio, then transmit them in short infrequent bursts outside of working hours. You can leave GSM recording equipment overnight and analyze logs, but even when you see it in the logs it'll be hard to locate the device physically when it's not transmitting.


We used to have keychain lights that would start to blink whenever a nearby phone went off, I can imagine it could be set off by a device like this lol.


> So the "quick bug sweeps" you see in the movies are more difficult

Isn't that what nonlinear junction detectors are for?


Sure, the question is if you're surprised to get a positive from a USB cable. Wouldn't be surprised to find a diode inside there...


When in doubt, rip it out. If you suspect bugs, then get rid of any suspicious cable you can't prove the provenance of.


Scot here, can confirm these tiny, winged devils have always been around to some extent.

Still, I prefer them to midges :-/


We had a aircraft called a Mosquito that was given a status of two kills if brought down by Axis forces during WW2 due to being a major pest.

We need to field one called a Midge. It would be a drone and there would be millions of them.


There is the midget mustang. It's an aerobatic aircraft, so not quite fit for an airforce: https://en.wikipedia.org/wiki/Mustang_Aeronautics_Midget_Mus...


Midget means small and a midget mustang is a small horse! Midge should mean "daemon insect".

The sodding things (Scottish Highland midge) really are quite unpleasant: https://en.wikipedia.org/wiki/Highland_midge


Geez, yes, we only have mosquitos and I didn't think there's a worse thing :/

Though I encountered them only in quantity in Milford Sound in New Zealand. I was in Scotland for three months (Edinburgh) and did not encounter them. Have they spread?


You only see them during summer... which usually lasts around 8 days ;)


Hang on.. they're not the same thing?!


No, see Gerdesj's sibling comment, it's the perfect description! (midges are smaller, but you get clouds of them!)


No. Midges are smaller than fruit flies.


Virus scanning user uploaded files always seemed like a very sensible thing to me.

I've used ClamAV before in web apps, and it was fairly easy to get working - but it has a few big flaws: it's very slow, it uses a huge amount of memory, and detection rates are... honestly, pretty terrible.

I've used Verisys Antivirus API for 2 recently projects, and it works great, a huge improvement over self-hosted ClamAV. There are a couple of other virus scan APIs available, including Scanii[1] which I think has been mentioned on HN before, and I Trend Micro has something too - but their pricing is secret, so I have to assume it's expensive.

[0] https://www.ionxsolutions.com/products/verisys-virus-api [1] https://scanii.com


How are those better than ClamAV? I am not saying they aren't but you just said the detection rates of one is terrible compared to the rest.


Things got a lot better for ClamAV after the Cisco purchase, but detection rates remain attrocious. There are some commercial signatures available, which would certainly help, but it still doesn't come close to the detection rates of commercial scanning engines.

ClamAV needs lots of memory to work - we needed at least 8GB in one project I worked on (where we also used commercial signatures), 4GB was just about enough for another. The more signatures you have, the more memory it uses.

ClamAV chews through a lot of CPU, and it's so very slow. For example, scanning a 25MB MSI file from my test corpus takes 65 seconds - and that's on a fairly beefy machine!

I've used both of the services linked above, and both seem excellent - detection rates and performance are far superior to ClamAV, and they Just Work(TM).


Wow. It almost looks alien - insanely cool, and thanks for the push, it's quite an interesting article.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: