Hacker News new | past | comments | ask | show | jobs | submit | mindcrash's comments login

April 27 2025: Port of Seattle - EMPTY

April 30 2025: Port of Rotterdam - Congesting shipment containers originally inbound towards the United States but halted (by Chinese exporters?). Also risking storage and transhipment of containers inbound to Rotterdam. (Heard on local news a few minutes ago)

If Trump keeps this up, within ~12 weeks he is not going to destroy the economy of the United States but the entire West...


>If Trump keeps this up, within ~12 weeks he is not going to destroy the economy of the United States but the entire West...

He'll find someone to blame for forcing him to change direction.


Goblin is even better, the backing AI model for example recognizes, and properly responds to (!), foreign language while the OP does not.

For example when I add the major task "Pannekoek bakken" ("Baking a pancake" in Dutch) and break it down into subtasks Goblin breaks down the task in Dutch.

OP's tool does realize what I want to do but responds in English which could be a bit of a problem for people who are not that foreign language savvy.


Fair enough! I can tweak this by adjusting the system messages for the AI, Neuro Tools uses Google Gemini's models that do have support for a wide variety of languages. Goblin Tools uses OpenAI from what I can tell. Thank you for leaving a comment

I can't edit my comment it seems. But I've pushed an update, if the AI detects a different language, it'll reply in that language. I tested with Dutch and German and seemed to work fine :)

So it doesn't use AI? That's a green flag for me.

Although they should have made this crap nobody wants opt-in anyway:

"You are always in control and can choose to remove Recall completely from your device by following these steps (under “Recall as an optional component.”). With removing any feature, Windows may keep temporary copies of non-executable binaries of the feature that are eventually removed over time."

How to remove:

"Recall is an optional feature for Windows. It is available by default for devices that aren’t managed by an organization or school.

To remove Recall, type Turn Windows features on or off in the search box on your taskbar. Uncheck Recall from the dialog and restart your PC. Any snapshots that were previously saved will be deleted when Recall is removed.

To re-enable Recall, type Turn Windows features on or off in the search box on your taskbar. Select Recall from the dialog and restart your PC."

Note this particular bit:

"It is available by default for devices that aren’t managed by an organization or school."

It's absolutely fucking absurd and sickening that MICROSOFT DOES NOT SEEM TO ENABLE THIS BY DEFAULT for business workstations, but home users, who very likely don't even know how to uninstall features from their PC, are fair game...


Way back then I exposed massive data collection from Twitter by Google which made it possible to plot locations at which you used Twitter in Google Maps by simply putting your Twitter handle into the search field. Somehow they knew about these locations even when you opted out of sharing ___location data with Twitter (I checked) -- so this was only possible by Twitter privately providing this information to Google.

This "experiment" has since then been shut down, but exposing this and many other other forms of activism permanently has cost me my Twitter account, to the point that asking to reinstate it several times because I was permanently suspended for no valid reason led to X Support directly rerouting every attempt to appeal this decision into the digital trash can.

Let's say nothing surprises me anymore.



Mine was even creepier.

This one used data shared by the user (opt-in on sharing geolocation in the app or browser), which then is publically exposed through the API (like this feature says it would).

Mine doesn't give a shit, geolocation was shared even when turned off by the user in Twitter.


Sorry for misrepresenting the functionality of the original cree.py project.

What it does is download all photos that the user shared on Twitter, extract GPS tags from EXIF, and put markers on Google maps, annotated with these photos.


Could you link to some of it? Sounds extremely interesting!

See screenshot: https://xcancel.com/kpcuk/status/601451439215353857

Do note that at first it was assumed just Chrome was involved, but then people started to message me that they also saw it when using the apps, Firefox, Safari and other browsers aswell.


Sounds like they showing geoip for tweets/profiles?

IP isn't exposed by the Twitter API.

Also, sharing geolocation has been turned off by said user because reasons -- which make sense if you look at the ___location in the screenshot.

Geolocation has been turned off by me and others aswell.


Thanks!

It's really indefensible to post this without linking to your research to show people what you found.

Believe it or not, I wrote about it on my now permanently suspended Twitter account.

Here is a remnant from someone who replied at the time:

https://xcancel.com/kpcuk/status/601451439215353857

By the way: somewhat later we (thanks to a group effort) figured out it wasn't "just" Chrome as mentioned, and this basically led to the strong assumption there was some serious data sharing involved.

And yes that screenshot from this person is 100% real; my pins for example were sprinkled all across Brighton in the UK near places with Wifi access (I recently went on a city trip there at the time), and my home town in the Netherlands.


Tweets were geolocated, with a 'see tweets near me' page until about 14 years ago, so it's entirely feasible that at least some of that infrastructure has survived the feature being removed.

"Tweets near me" was based on people sharing geolocation with Twitter (one of the things you can opt-out of when setting up your profile).

I didn't share any geolocation with Twitter. At least not voluntarily.


Doesn't every site route every support request for every reason into the digital trash can? You're supposed to just make a new account, using as many mechanisms as possible to make sure the site can't link it to your old account.

I’m not even sure that’s possible for some sites.

A few years ago I tried to create a separate digital footprint from scratch (just an experiment out of boredom when my isp offered a second number for free). I used an ultra cheap never before used android phone and set it up outside my home.

Google went nuts. All sorts of captchas, security checks and attempts to link me to other information popping up on every step. Eventually it wouldn’t let me use the phone unless I provided a credit card number.


Apple secretly linked my account to my >15 year old inactive account as well as another random account that isn't even mine. Nothing happened of it until I let my iPhone sync its settings to a new iPad. The iPad spammed a password input form for my old account that blocked all other UI elements. It didn't accept any password even after a password reset. Took me an hour to make the tablet usable again. The password form still randomly pops up every few weeks and there seems to be no way to fix the mess.

Bonus: the iPad's device name is now "My iPhone" because it also synced the device name from the phone.


I had this same issue. About once a week it would prompt me for the password for an old Apple ID. I eventually started over from scratch to work around the issue.

That's the modern tech landscape for you. They really want to know who you are because they make more money that way. For a similar experience, try Tor Browser.

I too sell my phone and buy a new one and also get a new phone number each time I get banned

Someone from X Support replied, basically told me to fuck off and that this would happen after my second or third appeal... so no.

I am Dutch and know of at least one pretty harsh lawsuit against a former employee of Tesla with autism against Tesla in the Netherlands regarding the work environment, sooo...

Also baffled they can still do shit like this with Senate and Congress looking the other way...


Official and thorough support for SBOM* within major package repositories can not come sooner.

* https://en.wikipedia.org/wiki/Software_supply_chain


Also note there's a escape hatch by running Windows 11 in a KVM virtual machine, and providing direct access to the graphics card (PCI pass through) through Looking Glass:

https://looking-glass.io/

I recently saw someone booting up a Windows 11 VM, launching Steam within the VM and then commencing to launching and playing Cyberpunk 2077 from Steam.

It absolutely blew my mind. (for real.)


According to the article deep cuts were made everywhere except launch support staff.

So yes, that surely might raise proverbial eyebrows.


> Also looks like they're kids and don't have the hang of security

According to the testimony they know enough to almost completely compromise a Azure tenant to the point that a foreign actor almost, ALMOST, could gain access with high privileges with a DOGE created username/password combination without being noticed because all monitoring was disabled.

The only thing which prevented that to happen was a luckily still enabled security policy restricting access to US IPs only (!) and flagging suspicious activity.

Believe me you'll need to have to know a shit ton about how Azure security works to pull something like that off without leaving evidence. I've got quite some experience in making sure this kind of shit doesn't happen.


It's straightforward to make something insecure :-)

Making it secure is the hard part.


Yeah, but it's actually not that straightforward to successfully turn the security of a heavily hardened Azure tenant to dogshit unless you know your way around and know exactly how Azure security works and what to strip out of it.

That's my point.

Same applies to properly hardened AWS and GCP tenants aswell.


So, what would happen if they used VPNs in USA?


I would have set a security policy which does not allow any kind of inbound admin related traffic from any unknown IP or device at all, including domestic IPs (and VPNs).

But that's just me, I don't know what the preferences of other dev(sec)ops engineers are.


That's because Silicon Valley had actual story consultants from the Valley.

Among them:

- Todd Silverstein, founder Vizify

- Tsachy Weissman, Professor Electronic Engineering, Stanford University

- Dick Costolo, frmr CEO Twitter

- Jonathan Dotan, founding director of the Starling Lab and Fellow at the Stanford Center for Blockchain Research, Stanford University

And more.


Consider applying for YC's Summer 2025 batch! Applications are open till May 13

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: