Hacker Newsnew | past | comments | ask | show | jobs | submit | VWWHFSfQ's commentslogin

> Someone should copyright the American flag

You're someone


It's just an internet meme phrase. "X is not a serious Y" just means that X is a joke.

It's a dumb phrase and overused in contexts like this.


That’s not the meaning here. It means that Microsoft lacks the qualities required to be taken seriously, like competence or reliability.


"Is not serious" is not serious?


> given the leeway the government gave that predatory website.

They are only blocking it because the French gambling mafia/authority is not getting their cut. They do not care in any way at all about a "predatory" gambling website.

They just want their share.


They want them to follow legally enacted laws in an open democracy.


It's all about nuance. The gambling mafia comment is pure gold.


If you’re aware of the organization called “FIFA” you can’t believe this is true.

I responded to the wrong comment, I ment to respond to the GP.


Fifa is Swiss, not French.


I didn’t say anything about the French.


The context was France: https://news.ycombinator.com/item?id=48998632

Since Fifa is Swiss, it has nothing to do with this court ruling. So indeed, why bring it up?


So why bring it up.


FIFA is the most corrupt organization in sports.


So why are all 50 US states not allowing sports betting?


I don't care about sports betting. I care about government blocking websites just because it exists on the internet. It was already illegal for Polymarket to accept bets from French people.

FanDuel cannot operate in France but their website isn't blocked. So how do we explain this?

France, EU, Italy, Spain, La Liga are just consistently making fools out of themselves trying to block everything on the internet when they don't like it.

Maybe it's just because regulatory censorship is inconsistent and doesn't make any sense. It's like the China firewall but even dumber and less effective.


So if something is illegal you don't think it's moral to enforce that people don't do it because just being illegal should be enough?

Note there's no liability on the ISPs, they do not have to pay a fine for not having blocked it, they do not have to ban alternative DNS. In Europe there is apparently a legal mindset that you can recruit a third party to conduct an action that is not onerous to enforce a blockade. A court can point to someone who has a DNS server and order them to block certain lookups.


Your entire argument is based on the fact that France cannot fight all websites at once? Will you change your opinion if Fanduel and others are blocked in 6 months as well?


The decision was made in the context of foreign interference with elections.


Sometimes countries can formulate energy policies that accomplish two goals at once.

They can keep taxes on refined petroleum products low in order to not destroy the present economy, while simultaneously fostering a budding renewable energy industry. USA is the second largest producer of renewable energy in the world behind only China. California + Texas by themselves rank 6th in the world.


Well the US could just pump their wells and outproduce the entire rest of the world in crude oil and refined products like gasoline if it wanted to. Or if it was forced to.


> Well the US could just pump their wells and outproduce the entire rest of the world in crude oil

The US is already the largest producer of crude oil in the world.

They took first place around 2018 and is currently ~30% above no. 2 (Saudi Arabia).

https://en.wikipedia.org/wiki/List_of_countries_by_oil_extra...


Isn’t that what it already does? At least in 2025 the numbers I see have the US as the top producer


It's a bad metric, but also Zig didn't migrate all of their issues from GitHub. Run the same count on GitHub and you'll see the full picture


> There is a reason why ASML's next-generation research photolithography machine is currently being installed and developed in upstate New York, and not somewhere in the Netherlands. The same reason that Cymer is still in San Diego instead of being relocated to Europe.

What is the reason?


Because it's American tech funded by the USA CHIPS Act and the Department of Energy. Tightly controlled by the US government.


> At 1 million euros per head.

Over 5 years...


Which still a great salary and competitive with the US, in academia.


That’s not salary that’s research funds to hire students and start the lab.


> Europe is in its own set of problems and it is not in the same situation that US used to be after WW2 (only major economy not affected by bombing).

Both Japan and South Korea were equally devastated and yet they managed to build world-class technology industries in the subsequent decades. I think the problems with Europe and the EU are a lot deeper than that.


A lot deeper than active wars and energy supply issues???

Europe's economy has been slowing down since 2007, which is the peak of conventional oil. The problem of Europe is that is doesn't have access to abundant energy like the US does. The US likes to think that they have a better economy because they are smarter/work harder, but the reality is simple: abundant energy makes the economy.


If you measure economical performance with PIB per capita, yeah, for sure, US has a better economy.

If you measure with anything else useful like (healthy) life expectancy or happiness level, state of the democracy, etc... like if you think the the economy must serve the people and not the other way, I'd say Europe is way more successful despite the real issues.

Actually, I'm baffled at how US performs poorly for their people given they have abundant energy. Norway and Iceland also have abundant energy and their people are seeing the benefits.


>Actually, I'm baffled at how US performs poorly for their people given they have abundant energy.

You feel that way because the media (and the internet) is hyper focused on the bottom 50% of Americans. The households with 2 people earning <$40k per year each.

If you look at the higher brackets (you have to look because "Americans in the 75th percentile live great" is not a clickable story) America is a better place to live if you work a job that pays well.

The plots for "comfortable living vs income" in the US and Europe are different, and that difference is endlessly arbitraged and any boring news day to pump out another "Life in Europe is better" story.


Sorry but I don't share your view. A society where the bottom 50% can't live a decent life is just dysfunctional. I don't care which country is best for the riches (and actually, Europe is good for the riches), I care that the economy is there to allow everyone to live a decent and meaningful life.


The issue is that "decent life" is a benchmark that (besides being subjective) is set relatively rather than absolutely.

So being in the bottom 50% in the US sucks when you look around your country, but is actually pretty "decent" when you look around your planet.


This perspective implies that you should be vigilant to keep out poor or unskilled immigrants who might struggle to afford the quality of life you require for citizens.


>You feel that way because the media (and the internet) is hyper focused on the bottom 50% of Americans. The households with 2 people earning <$40k per year each.

Poverty in the US is similar to poverty in Sweden, according to this dataset:

https://ourworldindata.org/grapher/poverty-share-on-less-tha...

But the median American earns far higher wages than the median Swede:

https://ourworldindata.org/grapher/daily-median-income

I think there is just a lot of misinformation out there. Americans love to complain, and other countries love to criticize the US. These effects create systematic misconceptions which no one bothers to fact-check.


I mean the real unspeakeable secret is how the American mid-high-middle-class/upper-class has so effectively turned financially transparent despite being the wealthiest group in the country. The 65% to 99% are just an absolute hulking bag of cash.

The battle in the US is between the mid-low-middle-class/lower-class and the 1%. Which is just so incredibly effective at diverting attention from where all the actual money is. When you can pull your head out of the swamp of social media and fountains of clickbait/class ragebait, there is this huge elephant sitting in the room with it's finger over it's mouth doing the "shhh, be quiet" motion.



> I'm baffled at how US performs poorly for their people given they have abundant energy. Norway and Iceland also have abundant energy and their people are seeing the benefits.

It's just a totally different scale of comparison that does not work - those Nordic countries are smaller than many counties in US states. It's like comparing Iceland to Santa Barbara, etc.


>Actually, I'm baffled at how US performs poorly for their people given they have abundant energy. Norway and Iceland also have abundant energy and their people are seeing the benefits.

Norway produces oil at Saudi Arabia levels per capita:

https://ourworldindata.org/grapher/oil-prod-per-capita?count...

The US has about 70x the population of Norway, hence far lower per-capita production.


The problem Europe has is an allergy to people making money. Oil prices aren't what drove every Euro tech worker to San Francisco for 25 years.


Since 2007, the European economy is in contraction if you look at physical indicators like "how much stuff do trucks move" or "what area is being built". That correlates directly with the peak of conventional oil and the fact that oil has been harder to get in Europe since 2007.


>The US likes to think that they have a better economy because they are smarter/work harder, but the reality is simple: abundant energy makes the economy.

The most valuable American companies are not exactly in energy-intensive industries:

https://companiesmarketcap.com/


Everything depends on energy. Driving a car is a lot cheaper in the US because of abundant energy. That has an impact on the economy (the economy is pretty much trucks moving stuff around).


If have a hard time linking a slowdown from 2007 on to oil instead of the GFC.


I don't understand that sentence.


GFC = Great Financial Crisis. I'd look at that first rather than some peak oil for Europe's underperformance.


Is "GFC" the subprimes crisis? Because that one, in 2008, may well be a consequence of the peak of conventional oil. It's not "some peak for Europe", it is THE peak for the world of, well, conventional oil, which means anything that is not the shale oil in North America.


It started in 2007. I don't see the peak oil connection there - what is it?


Peak oil means that oil becomes harder to get. That's the definition of the peak: the production increases until the peak, and decreases after. When the economy is directly correlated to oil, it means that a decrease in oil results in the economy slowing down.

> I don't see the peak oil connection there - what is it?

We got an economical crisis right when we reached peak oil production. Again, there is an extremely clear correlation between oil production and the economy.

Since 2007, the US has had access to shale oil and the likes, so they haven't reached their peak yet. Europe, on the other hand, has reached their peak in 2007. And since then, the economy (if you look at physical indicators, not artificial proxies like the GDP) is slowing down. Again an extremely clear correlation.


The world runs on Siemens, Bosch, Rolls Royce, Bayer. Even adversarial countries buy German Marine Diesels for their warships. Europe makes better warships than the US, who has spent the last 40 years twiddling it's thumbs and can no longer make modern frigates apparently, and prefers to spend it's naval efforts on the Tsar's moronic toy boat.

Unilever makes up half of the non-food items in your grocery store. Nestle makes up half the food items.

Novartis played a huge part in the Covid vaccines and also is just a giant medicine company in general. Novo Nordisk should be familiar to you.

ThyssenKrupp. It's twice the size of US Steel, which recently had to be sold to a US subsidiary of Nippon Steel because they sucked ass at keeping up with the times.

Britain makes better gas turbines than China and Russia for example. Europe reliably produces top tier weapons systems and infrastructure, competitive with American, often surpassing American systems currently. Thales, BAE, Airbus, Saab, Rheinmetal. The US Abrams tank uses a clone of a German gun. The Bradley is a BAE design. The US has always loved using European produced and designed large guns, such as from Oerlikon or Bofors, because they are always world class. Most of their military industry is.

Michelin tyres is a french company.

A lot of these names survived WW2. Thinking Europe doesn't know how to build big stuff, important stuff, etc, they seem to do a better job than the US at maintaining essential industry talent and continuation of industry. By value and jobs, the automotive industry facing competition will struggle, but Europe survived the rise of Japanese automakers far far better than US automakers did, primarily because they didn't just sit back and twiddle their thumbs for decades as the rest of the world advanced. Well, okay, Britain automakers struggled, but that's a good thing.


>> Further validating our finding of targeting, our forensic analysis shows Kouloglou received multiple Apple threat notifications about targeting with mercenary spyware on three occasions: March 2, 2023, August 29, 2023, and April 10, 2024. It is important to note that threat notifications from Apple and other companies are not real-time alerts. They are typically sent to users in batches, often months or more after targeting takes place.

>> Kouloglou reports to us that he did not recall receiving the Apple notifications we observed.

Am I understanding this correctly that Apple sent him notifications that he was being monitored and he ignored them?


"he did not recall receiving the Apple notifications" so he didn't notice them.


That is kind of surprising given he is on the comittee investigating pegasus. I'd assume someone on the comittee would be paying much more attention to this than a normal person.

I wonder what triggered him to suspect he was hacked then. Since presumably something triggered him to have his phone forensically investigated.


> That is kind of surprising

Have you seen notifications on iOS? There are even notifications for the notifications.

But this type of notification I believe is delivered via iMessage and email. So unless you’re actively using iMessage or your icloud email then chances are all this is practically invisible.


People seem to have this fiction that parliamentarians working on a committee actually have some expertise. This can happen but is actually rare. They are not elected for skill but for political reasons, and then the parties pawn them to different committees.

So in other words he probably speaks about security, whatever his staffers feed him, but most likely has no clue whatsoever what it's about.


Or that Apple could either run searches on the names of affected users against publicly known members of government or have close relationship with governments to flag exactly this.


If he knew he was compromised, and was okay with it for one reason or another (like money or other coercion), this is what his cleanup would look like.

Not saying this is likely. Just another possibility.


Could those have been intercepted or suppressed somehow?


It's possible, if the attacker controls the device enough. I don't think a big "you're being targeted" warning is something you don't notice, or forget.


Do they send them via notification infrastructure or email? Personally I almost never check the email associated with my Apple ID so I would miss those. But if all my Apple devices were notifying me and I had a badge in Settings.app, I’d notice.

Then again, you’d think that’s the kinda thing malware developers would spend some time learning to hide from the user.


Do we know how Apple sends these? Is it just a notification, or also email?


https://support.apple.com/en-us/102174

>A Threat Notification is displayed at the top of the page after the user signs into account.apple.com.

>Apple sends an email and iMessage notification to the email addresses and phone numbers associated with the user’s Apple Account.

You can see what it looks like in https://reddit.com/r/iphone/comments/1c10jai/i_have_received...

I wonder how they detect it, is it for known IOCs that they've already found elsewhere, or do they have heuristic detection that flags things that might need further investigation.


I could be wrong here, but I can’t see any way of viewing old notifications.

It isn’t hard to accidentally dismiss one then wonder what it was. Why there isn’t there an interface for looking back?

Edit: below it says there are emails and notices on web login.


If a notification is dismissed on iphone, there's indeed no central UI to see it again on the phone. That's a sad state of iphone. Many people have asked, but Apple just doesn't care enough to do it. Now I hope this kind of high-profile security incidents could nudge Apple towards taking action.


Any source for that “Apple just doesn’t care”, as opposed to thinking there are security/privacy tradeoffs or other considerations that cut against such a feature?


Ok, apple does not care, but gives “security/privacy” consideration as a public reason for not doing anything.


If Apple can store the sms/iMessage, and email history, and health/journal history, and my Wallet payment history, in a safe manner I would think Apple can store notification history in a safe manner. How would notifications be meaningfully different from these?

I think the proof of Apple’s level of care is in their lack of attention to this issue.


> How would notifications be meaningfully different from these?

Ephemeral transit layer owned by third-parties constantly,

vs

cold storage of secrets your architecture owns from start to finish.


> Ephemeral transit layer owned by third-parties constantly

This is a good description of SMS and RCS.


and also a good description of Apple APN notifications being pushed to a Garmin watch,

or a car,

or your off-brand earbuds.


Which, again, is not meaningfully different. Yet it seems you insinuated so. Can you explain in detail?


Hopefully it wasn’t you who flagged me after asking me to explain in detail…


I did not flag you, but I certainly see why someone might.


Go on.


Go on with what? Asking you again to answer what you repeatedly avoid to answer?


This is the opposite of avoiding answering you. https://news.ycombinator.com/item?id=48787084


With modern cryptography techniques, Apple could certainly do it if they cared enough. I guess the potential benefit doesn't justify the potential effort and cost related to the change, from Apple management point of view.


If they cared, they would give user triple confirm option to choose for example.

Oh wait this is apple, they always know whats best for the user and do the choices for them, even when wrong. So all is as expected


Or he lied about noticing them to avoid embarrassment.


I mean his device was pwnd completely. Its not a stretch that attempts to warn are suppressed.

That or he didn't notice or could have assumed the notice itself was one of many phishing attempts against large orgs.

If I saw a notification that my account was compromised by Pegasus I'd personally assume phishing.


Kouloglou is a famous investigative journalist, not you and me. Yes you and I might think we're being scammed, but someone who actually spent a lot of their life getting death threats probably would pay more attention.


Fairly sure that if anybody using a advanced piece of hacking software, they are also going to delete any messages that are related to detection of such hardware.

PC viruses used to do that stuff going back so many years ago. Suppressing any notification under Windows, by disabling the AV software, its notifications, windows notifications related to it.

So it will amaze me that this is not done by any modern espionage software. Especially as the notification methods are known. Given that his device is hacked, that means a lot of avenues are under control of the espionage software. Even mails etc ... So impersonating the end user, to confirm they read a warning, is extreme easy.

I find it rather odd that people are so fixated on the idea if Kouloglou read it or not.


Maybe the software can only exfiltrate information, rather than change it.


If i was going to write software on this level, that will be used by governments. There is no way, its going to be a nice little program that only extract information.

Its going to have every trick in the book (and outside it), to stay hidden. And it will have payloads to alter its behavior, updates, etc...

Nobody is going to pay you big fat money envelops for software that anybody can write in a afternoon. You want it to be as capable as ever, and you do not want it found!


I mean maybe the exploits they found weren't good enough to allow them to do whatever they want with the phone.


That seems to be the case, although he claims to have somehow missed them. Overall this is one of those stories that's obviously an outrage, except for the fact that every country on Earth spies on the rest, and quite a few private entities do as well. Still the way the game is played if you get caught you have to act ashamed, and the people catching you get to gloat.

It's silly, but it's a show the public never tires of.


In this case he was investigating misuse of Pegasus spyware specifically, and was targeted with it while doing so. That's obstruction of justice, morally speaking, and would feel very scary, in that it would make you feel that this company might be so powerful that investigating it is personally dangerous.


That's certainly the feeling the story is meant to engender yes.


Alternate spin: He now has a conflict of interest. He’s now too biased to work on the committee.


For who?


The US does not spy on Five Eyes government leadership or that of Israel. And perhaps more: in the wake of Snowden, which obliterated many diplomatic relationships the U.S. has with other countries, Obama issued a directive that the U.S. would not monitor heads of state and government of close friends and allies (even outside Five Eyes) unless there was a compelling national security reason. As far as we know that directive has remained in force with each successive administration as well.

They spy on most others though. Germany’s Merkel, successive French presidents etc all had their phones hacked by US there is widely reported news of.


US does spy on Five Eyes

https://en.wikipedia.org/wiki/United_States_espionage_in_Aus...

"In December 2010, leaked US diplomatic cables indicated senior New Zealand Defence Ministry officials had been spying for the United States, secretly briefing the United States embassy on Cabinet discussions about the Iraq War."

https://en.wikipedia.org/wiki/Foreign_espionage_in_New_Zeala...


That’s pre-Snowden


Nothing has changed post-Snowden, other than that the general public have gone back into a state of apathy on the subject of reigning in their out of control surveillance state.


I didn’t say anything has changed, the 2010 example he mentioned is pre Snowden.


> The US does not spy on Five Eyes government leadership or that of Israel.

Doubt.

> unless there was a compelling national security reason

There always is.


Absolutely, and there's the same compelling reason for them to spy on the on the US in turn. I can't emphasize this enough, everyone is spying on everyone else. Close alliances give the impression that they don't because they tend to handle scandals in-house, it's for everyone's benefit to do so in most cases. Snowden's disclosure was a very unusual event and put everyone in a position of needing to act shocked, appalled, and put on a big show for the public; sweeping it under the rug was impossible. For all that many here would wish otherwise, Snowden wasn't a watershed though, it was a blip.


> Doubt

Can you substantiate your doubt with even one piece of hard evidence?


Sure. The NSA exists, and it routinely violates the rights of the USA's own citizens, the ones that actually have constitutional rights. The idea that it would suddenly draw the line on foreigners is just absurd.


It violates everyones’ human rights - not just the US’ own citizens - because human rights are universal whether some American thinks it or not.


You can probably share specific evidence of NSA violating U.S. citizen rights. But can you share specific evidence if NSA spying on a five eyes nation or Israel post-Snowden?


Yes, the US has an intelligence agency called the NSA, which works with intelligence agencies in the five eyes. There is something called the five eyes agreement that does draw that line.


> There is something called the five eyes agreement that does draw that line.

Believe such nonsense at your own peril.

https://en.wikipedia.org/wiki/Israeli_espionage_in_the_Unite...

> In 1951, Mossad and the Central Intelligence Agency agreed not to spy on each other and US and Israeli services cooperated closely since then.

> Nevertheless, there were strong indications afterwards of ongoing Israeli espionage against the United States, confirmed by the 1985 arrest of Israeli spy Jonathan Pollard, one of the most damaging security leaks in US history.

> Israeli espionage reached a high-profile peak in the mid-1980s, shattering assumptions that allies "do not spy on each other".


I'm curious what peril your cynicism about the five eyes agreement has saved you from.


The peril of sleeping easy at night, comfortable in the fantasy where no one would ever spy on me just because they pinky promised not to. Not keen on believing evil bits either.


1. I think burden of proof is on the opposite side. (Previous legislations/directives were circumvented without problem)

2.Asking for hard evidence of top spies secretly spying on heads of other states is … (not sure if there is a word for it; some blend between: unrealistic, unreasonable and oxymoron’ish. If they do their job well, you will not find it out, also it might be illegal or punishable to present such evidence)


Can you substantiate your certainty with anything other than the public statements of people whose job is to lie about things like that?


> As far as we know that directive has remained in force with each successive administration as well.

People can state a lot, as long as your not caught.

Nothing prevent you from having the UK spy on the Germans, and feeding that intel back. Or Israel, or ... Hey, the US did not spy on a EU ally. Well, not directly and it neatly bypassed any official statements.

They might have simply gone to one of those secret court hearings and have it bypassed with a gag order in place. Officially its not done, unofficially, its been approved.

The whole "as long as you do not tell me your doing it" approach, and the politicians involve maintain deniability (even if they had the wink).

And you do not need to specific target the head off state. Plenty of side routes to still get information on meetings, that involve those heads of states. Even if your not "directly" spying on them.

So no, its a naïve way of thinking. Maybe in 20 years from now we find out, that they did spy on EU leaders. Maybe directly, maybe indirectly ... even with that directive in place. I will be amazed if they did not. Its the US we are talking about.


> unless there was a compelling national security reason

But there never is a lack of compelling national security reasons.


There is some directive (not law, not constitution - not that those are untouchable now) and we expect current us government to adhere to it, just because it would be nice?

Color me extremely sceptical.


> every country on Earth spies on the rest,

It's entirely possible an EU country did this; they're only vaguely guessing Belarus or whoever. In most countries, it's a big deal if the spies are caught spying on the domestic government.

> quite a few private entities do as well.

It's a risky game, doing that. You don't get any of the professional courtesies, and you're not usually eligible for the prisoner exchanges.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: