Hacker Newsnew | past | comments | ask | show | jobs | submit | chmod775's commentslogin

The company behind this appears to be "real" and incorporated in Delaware.

> Urban Cyber Security INC

https://opencorporates.com/companies/us_de/5136044

https://www.urbancybersec.com/about-us/

I found two addresses:

> 1007 North Orange Street 4th floor Wilmington, DE 19801 US

> 510 5th Ave 3rd floor New York, NY 10036 United States

and even a phone number: +1 917-690-8380

https://www.manhattan-nyc.com/businesses/urban-cyber-securit...

They look really legitimate on the outside, to the point that there's a fair chance they're not aware what their extension is doing. Possibly they're "victim" of this as well.


> They look really legitimate on the outside

If that looks use-italics "really legitimate" to you, then you might be easily scammed. I'm not saying they're not legitimate, but nothing that you shared is a strong signal of legitimacy.

It would take a perhaps a few hundred dollars a month to maintain a business that looked exactly like this, and maybe a couple thousand to buy one that somebody else had aged ahead of time. You wouldn't have to have any actual operations. Just continuously filed corporate papers, a simple brochure website, and a couple virtual office accounts in places so dense that people don't know the virtual address sites by heart.

Old advice, but be careful believing what you encounter on the internet!


[flagged]


Don't be rude. "Real person" here might live in any country of the world.

And also, why extension for vpn? I live in country where almost everybody uses vpn just to watch YouTube and read twitter, and none of my friends uses some strange extensions. There are open source software for that - from real vpn like wireguard, to proxy software like nekoray/v2raytun. Browser extension is the last thing I would install to be private.


[flagged]


>> Don't be rude.

> What, there's an issue because I'm not being underhanded about it like [that] guy?

Wow you’ve put something into words here I never consciously realized is an unwritten rule. Sounds silly but yea you’re 100% right; that seems to be exactly the game we play.

For better or for worse.


> being underhanded about it like that (USER) guy?

HN guidelines: Assume good faith.


> you'll have a better shot at dragging an actual person in front of a judge than for 99% of the other crap that's on the chrome web store

Based on what? The same instinct that told you having an address and phone number makes an entity legitimate? The chance the people behind this company live in the US is incredibly low. And even if they do live in the US what exactly would they be getting charged with and who would care enough to charge them?


https://www.manhattanvirtualoffice.com/

The NY address is a virtual office.

https://themillspace.com/wilmington/

The DE address is a virtual office plus coworking facility.


Wow the virtual office concept is so beyond shady. I wonder if there are any legitimate uses of it?

Many:

You run a business from home but do not want to reveal you personal address to the world.

You are from a country that Stripe doesn’t support but need to make use of their unique capabilities like Stripe Connect, then you might sign up for Stripe Atlas to incorporate in the USA so you can do business directly with Stripe. Your US business then needs a US physical address ie virtual office.

Etc


Virtual offices have been around forever and aren't really an indication of being shady necessarily.

That you don’t need an office if your company works remotely? Kind of overkill with a whole office for a company with 3 people working at it and everyone works remotely.

Some things still require a mailing address. PO Box isn't always acceptable. Do you want it to be one of your 3 people's houses? What if one moves?

Obvious option would be the law firm handling your business license. But can we also take a minute to appreciate the absurdity of a PO box ever being deemed unacceptable? It literally exists for this exact purpose, and there are any number of "PO box except not a PO box" schemes out there due to this issue. It ought to be illegal to treat PO boxes differently IMO.

Mainly they want an address if they need to serve legal notice to you. You can't deliver that to a PO box, it has to be handed to someone at a physical address.

Amazing.

> Urban VPN is operated by Urban Cyber Security Inc., which is affiliated with BiScience (B.I Science (2009) Ltd.), a data broker company.

> This company has been on researchers' radar before. Security researchers Wladimir Palant and John Tuckner at Secure Annex have previously documented BiScience's data collection practices. Their research established that:

> BiScience collects clickstream data (browsing history) from millions of users Data is tied to persistent device identifiers, enabling re-identification The company provides an SDK to third-party extension developers to collect and sell user data

> BiScience sells this data through products like AdClarity and Clickstream OS

> The identical AI harvesting functionality appears in seven other extensions from the same publisher, across both Chrome and Edge:

Hmm.

> They look really legitimate on the outside

Hmm, what, no.

We have a data collection company, thriving financially on lack of privacy protections, indiscriminant collection and collating of data, connected to eight data siphoning "Violate Privacy Network" apps.

And those apps are free... Which is seriously default sketchy if you can't otherwise identify some obviously noble incentives to offer free services/candy to strangers.

Once is happenstance, twice is coincidence, three (or eight) times is enemy action.

The only thing that could possibly make this look any worse is discovering a connection to Facebook.


Israeli company. No doubt some Mossad front.

You can get a mailing address and phone number for like $15/mo. You can incorporate a US business for only a couple hundred dollars.

Is the agent address real?

1000 N. WEST ST. STE. 1501, WILMINGTON, New Castle, DE, 19801

It almost matches this law firms address but not quite.

https://www.skjlaw.com/contact-us/

Brandywine Building 1000 N. West Street, Suite 1501 Wilmington DE 19801


Being a real business doesn't necessarily mean they can be trusted. Real companies do shady stuff all the time.

This also works in reverse: shady companies do real business. While the reason might be different the end result is the same.

> Urban VPN is operated by Urban Cyber Security Inc., which is affiliated with BiScience (B.I Science (2009) Ltd.), a data broker company.

BiScience is an Israeli company.


Israel is the new Russia, I guess.

Judging from their website, all links eventually point to either the VPN extension download website, or a signup link. I'm not surprised if some nation state supported APT is behind this shit.

Do you know anyone in that country who will let you stick an rPI behind their modem?

AppleTV has a Tailscale client that you can use an exit node. That's what I do to VPN back to home when I'm traveling.

AppleTV is pretty random and only vaguely incidental to the solution. Tailscale runs on computers. Basically anything will do. If you don't have a home server, just grab a cheap RPi or an old laptop. Or in a pinch drop it onto an old phone from your old phone drawer.

I think most here know that. What interests me is how easy to setup and maintain an appleTV is - you do nothing.

I love my Pi but sometimes I want life to be mindless easy.


I have been thinking about it but it is tricky from a legal standpoint. What I'm trying to arrange next time I visit is to have a secondary line installed at my parents place that is in my name. So that when I pull heavy traffic from that line it doesn't impact them and I can't get them in trouble for posting a message that isn't government approved.

Heavy traffic to access a bunch of gov websites? There's definitely more to your story then.

I'd say, anything heavy and random, use the general VPN and the rest use an rpi at your parents' home.


> Heavy traffic to access a bunch of gov websites? There's definitely more to your story then

They used government websites as an example, not to say that all of their traffic was to government websites.


No it’s his parents who don’t want him interfering with their thriving warez empire

I don’t do FXP anymore :)

Video. Live video

In practice most monoliths turned into "microservices" are just monoliths in disguise. They still have most of the failure modes of the original monolith, but now with all the complexity and considerable challenges of distributed computing layered on top.

Microservices as a goal is mostly touted by people who don't know what the heck they're doing - the kind of people who tend to mistakenly believe blind adherence to one philosophy or the other will help them turn their shoddy work into something passable.

Engineer something that makes sense. If, once you're done, whatever you've built fits the description of "monolith" or "microservices", that's fine.

However if you're just following some cult hoping it works out for your particular use-case, it's time to reevaluate whether you've chosen the right profession.


Microservices were a fad during a period where complexity and solving self-inflicted problems were rewarded more than building an actual sustainable business. It was purely a career- & resume-polishing move for everyone involved.

Putting this anywhere near "engineering" is an insult to even the shoddiest, OceanGate-levels of engineering.


I remember when microservices were introduced and they were solving real problems around 1) independent technological decisions with languages, data stores, and scaling, and 2) separating team development processes. They came out of Amazon, eBay, Google and a host of successful tech titans that were definitely doing "engineering." The Bezos mandate for APIs in 2002 was the beginning of that era.

It was when the "microservices considered harmful" articles started popping up that microservices had become a fad. Most of the HN early-startup energy will continue to do monoliths because of team communication reasons. And I predict that if any of those startups are successful, they will have need for separate services for engineering reasons. If anything, the historical faddishness of HN shows that hackers pick the new and novel because that's who they are, for better or worse.


We've barely found 1-2 ways to make useful AI and there's already professors who've incorporated those into their view of the field to such a degree that they cannot even imagine we might discover another way down the line.

You usually see this lack of imagination in the crusty old sciences, not in something as fast moving as this field. Props to the guy for being ahead off the curve though.

I'm the first to shit on anyone who thinks current LLMs will take us to AGI, but I'm far from insane enough to claim this is the end of the road.


This is such an uncharitable reading. "Housewifes" were extremely common then and were marketed to quite extensively in those product categories. Acknowledging them in some form is not the same as saying "I have deeply thought about the state of our society and have come to the conclusion that all is as should be."

Not quite then as well, since a lot is typically executed in parallel and the implementation details of most number representations make them sensitive to the order of operations.

Given how much number crunching is at the heart of LLMs, these small differences add up.


The majority of treatments people ever thought up and think up today are somewhere between useless and terrible ideas. Whatever you think is looking so exciting right now, there have been a million other things that looked just as exciting before. They do not anymore.

We didn't come up with these rules around medical treatments out of nowhere, humanity has learned them through painful lessons.

The medical field used to operate very differently and I do not want to go back to those times.


Mildly amusing if true, but I can't help but notice that some things the article mentions, like "fact-checking", are never in fact a direct quote from the supposed memo.

Is it so hard to reproduce the entire damn thing so readers can form their own opinion of what it says?

How are we supposed to fact-check this!


> How are we supposed to fact-check this!

You aren’t.


Yes, I've been told that "doing my own research" is bad and I should just listen to the experts.

The chose you are given is to either not listen to anybody and stay uninformed or listen to "experts" and become mis/disinformed.

It's incredible that in some cases people who know nothing about the topic have way less (in percentage) stupid and incorrect facts than people who try to actively educate themselves through "experts".


There are other options besides those. You have two pieces of information: If you trust experts or "do your own research" and if you are correct or not. This leads to four choices:

- You trust experts, and the experts are right -> You are right

- You trust experts, and the experts are wrong -> You are wrong

- You do your own research and are right -> You are right

- You do your own research and you are wrong -> You are wrong

Now, if I had to guess, the people who are more knowledgeable on a subject would likely have a better idea on the truthiness of a statement regarding that subject. Your argument appears to be the opposite.

> It's incredible that in some cases people who know nothing about the topic have way less (in percentage) stupid and incorrect facts than people who try to actively educate themselves through "experts".

I assume this is just an anecdote but could you extrapolate on this point a bit?Is there a study you could show me where they tested "do your own research" people's knowledge vs domain experts? What topics do you think have the highest chance of the "experts" being stupid and incorrect?


We miscommunicated past each other.

I did not mean that those 2 choices I mentioned are the only ones. I meant that the "deep legacy media"/"experts" are trying to convince you that only these two choices (listen to the "experts" or not to listen to anybody; "don't trust anybody else, trust me when I tell you that") exist. This leads to the 2 outcomes I painted: being not informed or being misinformed. Everything else that doesn't fit the current official narrative is branded with bad words.

Obviously, this is a false dichonomy and one should do the right thing (educating oneself with different sources, to form a full picture) despite the namecalling.

I don't have any study (I don't know if they exist) and was purely talking about the topic dear to my heart that I have following on for 25+ years: the Finnish expertise on Russia/Putin. It is horrendous. And I am not even talking about crazy expert opinions that one can disagree with, but core problems with logic and basic facts.

It is even sadder because Finland is trying to brand itself as The Russia expert in EU, is succeeding and this incompetence has real consequences.

The quality of expertise in this example is so terrible that we get the incredible situation when not informed people, using only their common sense, have a higher percentage of reasonable/truthful takes than people who are trying to be informed using "homegrown talent". This is an unbelievable consequence!

I am not saying that this is a general trend or that "experts bad". It's just in this particular case I know the topic and have the knowledge to access the correctness of people who are performing as experts on Russia. I have been having presentations on this topic.

Also, obviously, political "sciences" is different from actual sciences.

This reminds me of the Onion's expert panel on Nigeria, with the difference of journalists also being clueless (not their fault, they can't ask critical questions and challenge "experts", if their whole world view also comes from these "experts"). https://youtu.be/Pwom49awRKg


Because to the vast majority of people doing their own research involves reading random pages on Facebook and consuming fakes.

I am sorry but that's how it goes and that's how I see it in my country. Self proclaimed free-thinkers who eat everything that's on FB.


Right. I shouldn't do my own research because other people believe what they read on Facebook. Nor should you either, of course. Never research!

Forming your own opinion is so last-year. Now we have social media and AI to automate this.

I can form my own opinion on things I know about. If I don't, then it's natural that I will defer to those who I believe know better.

Learning without thinking is useless but thinking without learning is dangerous.


@grok is this true?

I keep seeing this post on HN. Does this trigger some grok workflow only for the user or is it a joke?

It works on Twitter, but not here on HN. It's a joke akin to commenting "Press X to doubt".

It's a joke.

@ doesn't do anything on HN.


I for one trust that the mass media would never lie to me or twist the facts to support a specific narrative!

Never, ever buy this kind of stuff on a subscription. As a business you're often even easier to shake down than a consumer.

What these proposals like to forget (even if addressing everything else) is that you need to slow down once you arrive if you want to have any time at all for useful observation once you reach your destination.

What's the point of reaching alpha centauri in 30 years if you're gonna zip past everything interesting in seconds? Will the sensors we can cram on tiny probes even be able to capture useful data at all under these conditions?


Jupiter is 43 lightminutes from the Sun.

If we shoot a thousand probes at 0.1c directly at the Alpha Centauri star, they should have several hours within a Jupiter-distance range of the star to capture data. Seems like enough sensors and time to synthesize an interesting image of the system when all that data gets back to Earth.


Could the probe just fire off some mass when it got there?


Any mass that it fires would have a starting velocity equal to that of the probe, and would need to be accelerated an equal velocity in the opposite direction. It would be a smaller mass, so it would require less fuel than decelerating the whole probe; but it's still a hard problem.

Be careful with the word "just". It often makes something hard sound simple.


Not trying to oversimplify. But suppose 95% of the probe's mass was intended to be jettisoned ahead of it on arrival by an explosive charge, and would then serve as a reflector. That might give enough time for the probe to be captured by the star's gravity...?


It seems to me that building a recording device that can survive in space, that it's very light, and that can not break apart after receiving the impact from an explosive charge strong enough to decelerate it from the speeds that would take it to Alpha Centauri is... maybe impossible.

We're talking about 0.2 light years. To reach it in 20 years, that's 1/10th of the speed of light. The forces to decelerate that are pretty high.

I did a quick napkin calculation (assuming the device weighs 1kg), that's close to 3000 kiloNewton, if it has 10 seconds to decelerate. The thrust of an F100 jet engine is around 130 kN.

IANan aerounatics engineer, so I could be totally wrong.


You’re just talking about a very inefficient rocket (bad ISP).

A rocket works the same way (accelerating mass to provide thrust), just far more efficiently and in a more controlled fashion.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: