>We don't really have a standard way to definitively say "I am a citizen" in the US.
In most countries of the world, the best way to prove your citizenship is to apply for a visa. That is you world apply for a US visa and get an official rejection, because US citizens don't need/cannot get a visa, and the rejection document would be the proof of citizenship.
.. that seems extremely dangerous, because I wouldn't trust that refusal to not raise red flags for the rest of your life. I've not heard of people routinely doing this or announcing it as a valid method of proof of citizenship which they accept.
Most countries not just "collect citizenship data", they require you to have a valid non-expired ID, valid non-expired residential registration, a fresh digital photo, verified phone number and a valid tax number. All of that without any US interference.
My crude understanding is that in the 90's, the US controlled basically all the world's large-scale financial clearing network, and after 9/11 declared a holy war against anything that didn't provide visibility to US intelligence (like the surviving medieval Middle Eastern 'Hawala' banking system) and the ability for the US to sanction it on a fine-grained basis.
Since that time, we have grabbed on tighter and tighter, and are finding that the world is starting to seek out a less politically volatile patron for a financial system.
It's pretty wild, I work in finance and hawala was specifically called out in my anti money laundering training. Really seems like cultural chauvanism and thinly veiled racism to eschew an entire traditional monetary support system.
I think you should create some visible but harmless nuisance using this shell escape, so that it's likely to get noticed, but doesn't damage anyone's valuable data.
Perhaps just run "bash -c 'stress --cpu 64 ; echo fix your shell escape'"l " or something like that.
Creating a nuisance is not a good way to go about it.
Some security practices sometimes feels like someone stabbing you just to prove you could be stabbed.
Then they point at the wound and say: "See? You should be more careful."
Yes, the risk is real, but creating harm to demonstrate it isnt the same as protecting people.
Well, ruining everyone's day on that particular host is not a nice way to "bring this to attention".
If I ever experienced something like that, I'd be banning the person (or limiting their resources drastically) for 60 to 90 days to bring the impact of this matter to their attention.
Anything affecting users on a system is not harmless.
Poe's Law is in effect when the thread is a hair away from getting political. I thought it was obvious that the commenter is joking based on the oblivious tone, and because this is HN.
>They are not a file storage system. They were not designed to be a file storage system. Nobody at the IETF was thinking about them being used as a file storage system when they wrote RFC 1035. And yet here we are.
That's plain wrong. DNS was specifically designed to store arbitrary data, cf. the Hesiod name class.
In most countries of the world, the best way to prove your citizenship is to apply for a visa. That is you world apply for a US visa and get an official rejection, because US citizens don't need/cannot get a visa, and the rejection document would be the proof of citizenship.
reply