Top all-time · #6497
tim.sh
Personal blog · timsh.orgsecuritydata
tim.sh is a personal blog at timsh.org about security and data. Since 2025, 11 different Hacker News readers have linked it 15 times, most often “Everyone knows your location: tracking myself down through in-app ads”. It is still writing: the last post was on 2026-06-16, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link tim.sh posts on in-app ad tracking and an investigation of GitHub-hosted malware, citing them as examples of harmful ads and malware distribution. No comment judges the writing itself.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
thoughts, projects and research
Most-linked posts?
- Everyone knows your location: tracking myself down through in-app ads5 people · 5 mentions · first linked 2025-02-01
- Github scam investigation: Thousands of “mods” and “cracks” stealing data3 people · 4 mentions · first linked 2025-02-27
- Everyone knows your location, Part 2: try it yourself and share the results2 people · 2 mentions · first linked 2025-04-17
What Hacker News says?
> the EU doesn’t take into account the unintended consequences of laws it passes when it comes to technology. So, the companies that implement these cookie banners are entirely without blame, right? So what is your solution? Reminder: GDPR is general data protection regulation. It doesn't deal with cookies at all. It deals with tracking, collecting and keeping of user data. Doesn't matter if it's on the internet, in…
Comment linking /tracking-myself-down-through-in-app-ads/
on “AI systems with 'unacceptable risk' are now banned in the EU”Submitted Everyone knows your location: tracking myself down through in-app ads as a story · 1957 points
HN discussionThis article stayed on the front page of HN for a couple of days: https://timsh.org/tracking-myself-down-through-in-app-ads/ The author was in Europe. Aparently, all the rules protecting the privacy of european citizens make no difference in practice. I wonder why, but I believe the EU will look into this soon, since it would be so unconfortable if the king were bad.
Comment linking /tracking-myself-down-through-in-app-ads/
on “Open Euro LLM: Open LLMs for Transparent AI in Europe”Submitted Github scam investigation: Thousands of “mods” and “cracks” stealing data as a story · 388 points
HN discussionThis isn't kaspersky's research? Around a̵ ̵w̵e̵e̵k̵ ̵a̵g̵o̵ ̵(̵?̵)̵ a couple days ago someone made a post on /̵r̵/̵c̵y̵b̵e̵r̵s̵e̵c̵u̵r̵i̵t̵y̵ /r/hacking where he made a scraper and analyzed all the malware he could find. The repo amount was in the ~1000s repos that he shared in a spreadsheet. Github as a domain is feasible as a malware dropper domain due to it being allow listed by Microsoft. The attackers seem to…
Comment linking /github-scam-investigation-thousands-of-mods-and-cracks-stealing-your-data/
on “Kaspersky exposes hidden malware on GitHub stealing personal data”Submitted Everyone knows your location, Part 2: try it yourself and share the results as a story · 318 points
HN discussionFunny, there is a story on the front page right now demonstrating how harmful ads can be. https://timsh.org/tracking-myself-down-through-in-app-ads/
Comment linking /tracking-myself-down-through-in-app-ads/
on “UK betting giant's unlawful marketing kept suicidal gambler hooked”Submitted Switching to Claude Code and VSCode Inside Docker as a story · 265 points
HN discussionSimilar case: https://news.ycombinator.com/item?id=43203158 https://timsh.org/github-scam-investigation-thousands-of-mod...
Comment linking /github-scam-investigation-thousands-of-mods-and-cracks-stealing-your-data/
on “I found 10k GitHub repositories distributing Trojan malware”Submitted Everyone knows your location, Part 2: try it yourself and share the results as a story · 12 points
HN discussionSubmitted $2M laundered: the YouTube crypto tutorials' scam (investigation) as a story · 4 points
HN discussionSubmitted GitHub scam investigation: "mods" and "cracks" stealing your data as a story · 4 points
HN discussionSubmitted Everyone knows your location: tracking myself down through in-app ads as a story · 4 points
HN discussionSubmitted A net of scammer groups on Telegram as a story · 3 points
HN discussionSubmitted Why you should self-host as a story · 1 points
HN discussion
