Hacker Newsnew | past | comments | ask | show | jobs | submit | welder's commentslogin

https://ahamlett.com

> UPDATE: It is going to take a while to go through all the submissions and add them. If you'd like to help with the process, please send a PR directly to this project

Just run this Python script then paste the output into your pwd.lisp file. You're welcome :)

https://chatgpt.com/share/6968f169-c868-8006-8824-6ba0f2b433...


Here's the source code minified and bundled:

https://www.gallery.vsassets.io/_apis/public/gallery/publish...

Unzip that archive and the source is in extension/dist folder.


I’m confused - is it the actual source code, or minified/bundled code? I don’t think those two are the same thing - unless of course you write your code minified. That would be really impressive.

That would be really impressive levels of psychopathy.

> Hanging out with other humans is good – and if you can’t find a community… you can always build your own.

I did just that, and built https://wonderful.dev

It's based around jobs for devs, but right now it's just a place to chat about tech.


They literally said that online communities wasn't what they were talking about though.

> And this was when I finally realised something that should have been obvious. I had a small group of close friends who were spread across the country. I had a wider group of friends and acquaintances who I’d talk to online.

> But what I lacked was a community.


If I have an in-person community that's non-tech it's enough for me to only have an online tech community. That's how it was for me growing up, and it would be great to have that again.


yeah but it isn't about what you want. Ofc you like the idea, you built the damn thing. But the author of the post (which you replied/advertised to) explictly talked against this kind of thing. It's like a Budweiser ad on a mosque


Meta commentary: there’s something interesting in the fact that my first instinct was “great another piece of vibeslop”, which inverted completely to genuine interest when I recognized your username.

The “personal brand” and track record might be getting even more important now that the bar to building something has dropped to the floor.


I don't think you will attract any competent "devs" with a platform that is locked behind a GitHub 2FA login. I am not going to create an account at Microsoft to use your platform.


Python script to check if any of your repos have the listed compromised packages in pnpm or npm lock files:

https://chatgpt.com/s/t_6924b232a8f88191a146a510c6631143


Move away from the UK. This is a UK law forcing Apple to share your data if you live in the UK.


I wish govt would put a condition on the mobile carriers to fix SS7 vulnerabilities.


Yeah, but how could their secret services then snoop on everyone?


update to the latest software


Carriers will never fix issues that they have a revenue stream off of. They sell services to detect call forwarding attacks, sim swap attacks etc to banks and other services.

Its like robocalling, fraud texts and calls you received. Carriers can't sell services to filter them if they fix the issues that allow these to happen in the first place.

Way to fix it is to make the carrier liable. It will be fixed instantly.


I get 20 to 30 spam calls a day now.


At some point this year I was getting 14-20 spam calls per hour. I'm in Italy.


Wow. Did you have to get a new number?


In EU? Where are you located?


I’m in France. I don’t get 30 a day, but at least 2 to 5. I automatically ignore unknown callers and my voice mail message basically says to send a SMS instead.


My Android phone has a feature to not ring unless the number is in my contacts OR they call twice in 15 minutes and my voice mail message tells people to call me twice to reach me. The scammers never do.


Wow, I have about 2 or 3 per year. It's always a robot voice telling me the police is looking for me.


I'm in the US.


Isn't that simply fixed by shutting down the old 2G and 3G networks, like is happening in a lot of countries now?


No. SS7 predates cellphones. It's the legacy control plane for the PSTN (public switched telephone network). It was never designed for security since it originally never crossed corporate boundaries as everyone had to use the monopoly provider. (Except for international calls).


I admittedly don't know that much about it, but the googling I did indicated the SS7 is only active when you roam/call to legacy networks with 2G/3G that aren't all-IP?


Even when the phones on both ends use IP calling technology, the interconnection between phone companies is usually not IP.


From what I've read that tends to change when the phone companies in question have shut off 2G and 3G though. The only reason to keep using SS7 is for intercompatibility with legacy networks who still have 2G or 3G devices on them.


You can't shut down 2G, because there are a lot of devices, mainly embedded systems like alarms, lift emergency call button, GPS trackers, etc. that still use 2G. Also 2G is the only reliable network connection in a lot of areas that are not otherwise reached by 3G/4G/5G, mainly because a 2G connection is more tolerant to low signal and noise, and also is low frequency, thus 2G is the only option available in situations such as on top of mountains and stuff. And finally there is still a lot of people, maybe elders, that don't have/want a smartphone (mainly because they are more complex to use etc.) and still use an old Nokia with 2G networks (they only need to call or send SMS in the end).

Also: VoLTE is not a thing since a lot of years, and probably there are even a ton of smartphones out there that does not support it (and thus switch back to 2G/3G to place voice calls).


You claim that they cannot be disabled, while this is already happening [0][1][2]. Some countries, like Switzerland, already completed the shutdown years ago [2].

[0]: https://newsroom.vodafone.de/2g-abschaltung-macht-lte-und-5g...

[1]: https://www.telekom.de/hilfe/2g-abschaltung

[2]: https://www.rosenberger-telematics.com/en/news/switching-off...


It's easy to make the switch in a rich country with less than 10 millions of inhabitants, mostly living in big cities.


Check out reference 2. This is being done across the whole of Europe. It has already been done in Australia.


It's the same "we can't introduce chip-and-pin because of all the credit card readers" argument that kept carding an issue a decade longer in the US than in the EU.


Ever since the analog TV shutdown and the refarming of those low frequencies to 4G LTE, you see that 4G actually has higher coverage than 2G/3G (this both in sparsely-populated places like Australia and dense ones like Japan).

And for 2G especially GSM has a physical cell size limit due to TDMA that LTE does not have so in sparse areas the same transmitter location can reach further.

If in your country 2G still has better coverage that's not due to technical superiority of the standard but due to decisions made by the operator.


I think you are wrong. 2g and 3g is slowly but surely being killed everywhere. Which is a shame because it's much easier on batteries then 4g, but they want that bandwidth.


A lot of this is a chicken-and-egg problem.

For example, lower-frequency bands have longer reach, but lower bandwidth. Because everyone has 2G support, it makes sense to put 2G on the lower frequencies as fallback, with 3G/4G/5G on higher frequencies as optional bandwidth booster. But this also means 5G reliability is being limited by its frequency! You could have better 5G - if it could use the frequency currently occupied by 2G...

It also doesn't help that 2G and 3G aren't forward-compatible. They require their own dedicated frequency, so you need to sacrifice a lot of potential bandwidth for a small number of low-data devices. 4G and beyond can play nice with future tech: a single base station using a single frequency can handle both 4G and 5G connections at once - it'll dynamically allocate the air time as needed.

About the elderly: my 95-year-old grandma uses a tablet for video calls and a big-button 4G-capable feature phone. My 85-year-old other grandma has fully embraced her smartphone. Turns out they really like seeing pictures of their great-grandkids! Give them a reason to switch and they will adopt it - they both ditched their land lines.

Same with elevators and stuff: schedule a kill date 5 years into the future and they'll be replaced by 4G-capable units instead of ancient slightly-cheaper 2G-only ones when their warranty inevitably expires.


It's not that simple. There are a ton of legacy systems that upgrading would cost a lot of money and it's not the fact or replacing a 100 euros smartphone. A lot of these systems have a critical (safety) function, and thus if they stop working there would be consequences (I've mentioned the elevator alarm, but consider alarms for plants in remote areas that use 2G to send out alarms, let's say a pumping station for sewer, remote sensors in the mountains, dataloggers, electronic bracelet given to people that has restrictive sentences, etc).

This is the same reasoning why they keep active the "old" analog telephone network, why not everyone is switched to VOIP, because there are situations where it's still used by stuff that is critical or too expensive to replace.

> with 3G/4G/5G on higher frequencies as optional bandwidth booster.

There are 5G bands in the ~700MHz bandwidth (that was recovered by switching to more efficient encoding for DTV) that could be used that are even lower than 2G that is around 900MHz.

They could (and probably will) dismiss 2G for consumer use, but keep some frequencies that are used by operators that provide MTM SIM.

> Give them a reason to switch and they will adopt it - they both ditched their land lines.

I've tried to make my grandma learn how to use a phone to send SMS multiple times and failed. If she uses a mobile phone (rare situation) she uses it as a landline phone, that is type the number that she wants to call, not even using the contacts in the phone. To be fair I had difficulties explaining how to use a cordless landline phone.

Speaking of elderly, there are a lot of them that have dedicated devices that they can use to make emergency calls to registered numbers, that probably use 2G network (some other use even landline). Since these devices are even provided for free by the national healthcare system, I see that there is not much money to spend to upgrade them.

BTW, are we sure that all the smartphone out there support VoLTE? If not, to make phone calls they need to fallback to 3G/2G, it was a common problem not many years ago, with some providers (Iliad) that even started supporting VoLTE like less than 2 years ago...


I can tell you that here in Australia we shut down 2G in 2011 and 3G in 2022-2023.

And yes many things broke, train ticket vending machines stopped working, smart meters stopped working, etc. But then the got replaced.

2G and 3G is a horrible waste of bandwidth compared to 5G. Keeping them on and wasting all that bandwidth is borderline negligence.


Interestingly, my country turned off 3G before 2G.

I think the reasoning was that the heavy data 3G users had already upgraded to 4G and beyond, and low data 3G users could fall back to 2G, so retiring 3G would have negligible impact - while opening up a lot of bandwidth for 4G and 5G.

On the other hand, there were plenty of 2G-only low data users around, so retiring that early would break stuff for a lot of people. Keeping it around longer gave people more time to upgrade.


It's already been completely shut down in large swaths of the world.

> mainly because a 2G connection is more tolerant to low signal and noise

Huh? Everything I've heard about 2G indicates that it is an incredibly noisy protocol with horrible congestion characteristics, and that it craps out even when there's only a few devices. Maybe it's only winning because it has nearly completely disappeared?


this would require some encryption and still can be intercepted. Any ideas how to fix that?


No, I'm talking about anyone with SS7 access basically has root on the whole network and can query for locations of any phone number anonymously... no audit trail, no access control.

https://youtu.be/xfWyU5iXJ3I?t=860

https://youtu.be/wVyu7NB7W6Y


right, that's how police and criminals do it, I am aware how it works, what I wonder is how do you fix it, replace the protocol? encrypt it?


Why when we have bandaids like ss7 firewalls.


I wish he had real data on lines of code written by AI vs Human using WakaTime, instead of guessing the 98% number.


Please change that now! It's the muscle memory of never typing a password that prevents you from being victim to phishing.


Location: SF, NY, Brazil, Dominican Republic, Germany

Technologies: We're not an agency, just some friends who've worked well together in the past at various companies and are all now independent contractors. We're 5 senior eng + 1 PM from silicon valley companies specializing in TypeScript, Go, Python, Swift, but we've worked in other languages in the past. We can work as a team or individually as you prefer.

Remote: Yes

Resume: https://wakateam.com

Email: team@wakateam.com


You should start a business for your construction projects, then use a business bank like Mercury instead of Chase and get all the nice business features.


What are the nice business features you're referring to?


Paying vendors


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: