SQL is not a programming language.
HN user
marcusfrex
d65a149bb37b6c0f8a062e9161859bf0d5d95bce81323e6b8c21ca71fa5f2b03
Switchborn, the raw cyberpunk odyssey from Marcus Frex, skewers the "enshittification" of cybersecurity, a hollow race to cheap illusions where automated scanners and AI hype peddle pretty PDFs over genuine protection, as exposed by blunders like the 2017 Equifax breach. Marcus champions unbuyable artistry, human curiosity, and integrity amid corporate checklists, urging listeners to demand real fortresses over flattering facades in a digital world where true security whispers from the shadows of consequence. A rallying cry for discerning defenders, ethical innovators, and rebels against the commodified void.
Switchborn, the enigmatic podcast from Marcus Frex, unravels the double-edged sword of cyberwarfare through the lens of Stuxnet, a once-secret U.S.-Israeli digital strike that crippled Iran's nuclear ambitions but ignited a global arms race when it escaped containment.
Marcus dissects how tactical triumphs unravel into strategic blunders without endgame foresight, blending historical intrigue, ethical contradictions, and whispers from the digital shadows where Switchborn lurks as a harbinger of unforeseen consequences. A must for cyber strategists, policy skeptics, and explorers of tech's chaotic undercurrents.
This episode explores a 2014 Istanbul hack where Marcus exploited a careless developer’s sloppy code to breach bank systems, revealing the chaos beneath corporate illusions of "bought" security. Blending sharp critiques of complacent coders with poetic musings on Switchborn as a prophetic force, it’s a call to tech rebels and dreamers to embrace the artistry and anarchy of true hacking.
NodeJS was/is/and always will be satanism anyway.
Switchborn is a captivating weekly podcast hosted by Harun Esur (aka Marcus Frex), a cybersecurity expert and underground persona who emerged from decades of anonymity to share his unfiltered memories.
Blending cyberpunk introspection, rebellious wisdom, and raw storytelling, Switchborn invites listeners to explore the hacker ethos: walk to the edge of the post-quantum desert, follow the star, and let the challenges forge you or not.
Perfect for thinkers, and rebels seeking depth beyond the screen. Tune in for Marcus's evolving tales of control, chaos, and digital freedom.
It got old and you are missing the whole point.
If someone will think exactly like your mindset, he will likely damage potential evidence, opportunities, and the case right from the start and loosing the whole position if it is the Veilith. This is highly sensitive technology—there's no room for jokes.
All details are in the web page but if you want to get into technical details here I leave the link to the whitepaper;
Imagine a briefcase where different keys open different compartments. One key might show your grocery list, another shows your real important documents. If someone forces you to open it, you can give them a "fake" key that shows harmless stuff.
This is called "deniable encryption" - you can honestly say "there's nothing important here" when using the decoy password.
And it is impossible to understand whether any one of the compartment is a random content or an encrypted one.
Imagine a scenario where you're coerced—whether through threats, torture, or even legal pressure—to reveal the password to your secure vault. In countries like the US, UK, and Australia, refusing to provide passwords to law enforcement can result months in prison in certain cases.
Veilith addresses this critical vulnerability with perfect deniable encryption. It supports multiple passwords, each unlocking distinct blocks of encrypted data that are indistinguishable from random noise—even to experts.
In high-stakes situations, simply provide a decoy password and plausibly deny the existence of anything more. Dive deeper by reading the whitepaper, exploring the open-source code, or asking me any questions you may have. Let's secure your data like never before!
Additionally I work with heads of different companies and banks directly and as I understood that I should be focusing on Value Propositions for them rather than bothering with reinventing the wheel. Many thanks again you probably made drastical difference with my understanding on business.
Thanks, I will try that.
Yeah I have been there for so much. But I need to make good sums of money to live but I need to make more. Actually what I meant with “broke” is not actually poor but just enough to roll the dice let’s say.
Thanks so much, appreciated for your time and willing.
The problem is I can’t. I can’t give my freedom for a 9 to 5 job.
Yes, Turkey and Azerbaijan are pure evil and Westerner Christian White Armenia is innocent and poor. Right.
https://www.youtube.com/watch?v=dkZHOlQtYO8 https://www.youtube.com/watch?v=pFA7a6OtJvE
It is not for a few minutes but it had been nearly an hour. Seriously considering to switch to another provider. Damn!!
No matter what i will not step into any 737 Max crap until it reaches at least 10 years of stability.
If a security researcher comes from developer and/or system administrator background then he/she uses his/her experiences and habits to guess where to look first.
That's why it is always suggested to start from point zero to be a solid security researcher.
Transip.eu is solid. I have been working with them since 2014. And i have (and still) used Linode and DO too.
Actually i am not worried about bcrypt. I just wanted to use more enterprise level approved KDF other than individual work.
But regarding criticizes probably there will be bcrypt, scrypt and argon2 implementations as options on the next release.
We are working on Enterprise version of it which will be having this option.
Yes, definitely you are right.
And at the same time using various other methods "depending on the master key" makes it impossible for an accurate time and process estimation for brute-force attacks.
Actually installer compiled using Visual Studio 2015 on Windows 10 platform. Nothing specifically edited to the way of SHA1 but we fix it on next release.
> It is a very poor introduction to the application on the majority platform.
Yes you are right it can be better and will be.
> How does this handle situations where the generated password isn't accepted by the site? eg. Is too long, absolutely must have at least one symbol and one number, etc.
You can specify password length if it gets too long and it's character set provides symbols, numbers and letters in it.
> How does this handle changing passwords?
It has a renewal mechanism to switch to a new password.
> How can I know from the master secret that xyz.com is on the 4th password?
Can you explain more about what you mean?
You are definitely right.
It's probably because different understanding of same terms. With "complexity" word we mean hardness to generate. It doesnt adds up more algorithms but character sets and hashing algorithms for PBKDF2 respectively.
Forgiva is not a key-derivation algorithm itself to compare with Argon2 but a combination way for various hashing and encryption algorithms along PBKDF2 "depending on master-key". So it's as much future-proof as master-key generated algorithm sequence.
And in this case which methods would you offer and prefer for future-proofing with comparison to other KDFs?
Probably i should explain what i meant with "got outdated and requires a better version" sentence. It is a race and as stronger algorithms comes to life -and stronger attack methods invented against them-, others gets simply weaker and weaker just like happened to MD2 and then MD4 And then MD5.
Sorry for misunderstanding.