Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
What a Hacker Stole from Me (mynoise.net)
236 points by wonger_ 16 hours ago | hide | past | favorite | 63 comments





Hacking never included thievery where I come from, nor did it condone doing harm by vandalism.

Seems to me, a vandal has learned how their less than worthy craft is done virtually.


hackers effectively killed https://glslsandbox.com It's been closed for about a year and a half because some hackers spammed it and no one has time to deal with it. There are other sites like shadertoy that do something similar but still, it sucks to see someone's project get shit on by assholes.

As for denial of service issues, because it's free I've mostly hidden behind cloudflare in the hope of not having to personally deal with those kinds of issues on my own stuff.

It's always annoying to me the hacker attitude of "it's your fault if I can break your stuff. You should have implemented it better". Well, I can break your windows, your door, your body and it wouldn't be an excuse that it's your fault because it's possible. Still, I know it's impossible to get rid of the assholes so ...


1. Don't take it personally. They don't know or care who you are.

2. Some kind of rate limiter is becoming essential for servers. Scanning/probing is worse than rude but there's plenty of obnoxious out there.

Fail2ban can easily be configured to handle simple login or vulnerability scans.

If there's not something similar for web servers, it wouldn't be hard to write one. Anyone know of fail2ban or rate-limiters for webservers?


Needs to put Cloudflare (free plan) in front of the website and the problem is fixed

The state of the internet is a bit sad if we need to collectively rely on Cloudflare. And we don't even have other free alternatives (that I know of).

I imagine something can be rigged with fail2ban as well.

Recently I have had to live in a building with severe noise issues, and running appropriately EQed white noise on my speaker helped mask it and maintain at least some sanity and sleep. The mynoise app might not be the fanciest but it does exactly what it says without fail or frills, and works across devices. I don’t think I knew who made it when I bought it, but this story put a face on the app.

When someone attacks you, it is additionally traumatic in that it undermines your trust in people. In this way, it can breed trauma if it makes you become more defensive/distrustful and/or offensive/trust-violating to others. This is not an excuse to the attacker, but if I were asked how we can end this vicious circle I would probably say it’s about long-term mental health (across generations).


I had long-term noise issues with the tenant directly above me. Periodically complaining to the office got sympathy but little else.

Then I created a iOs shortcut that sent a templated email to my landlord each time I told Siri "Loud neighbors." I was surprised at the effectiveness of 3 - 4 emails a week. I suspect it is one thing to shoosh someone while ushering them out of your office. It's another to have to respond to an email every other day.

Of course, your situation may not be a amenable to this strategy. Either way, I feel you brother/sister, and I wish you peace and quiet.


The unfair match between good and bad has most likely been a conundrum for thousands of years. Multiple solutions has been proposed as to how to deal with the bad ones, including; kill them, forgive them, educate and reform them - but nothing really seems to work.

One solution might be to gather them all up and send them to another planet were they can live as they please without bothering the good ones - and some might suggest that this is exactly what they did and here we are :)


I think I saw an article recently where someone used the http protocol to serve gzipped content that was specially crafted to explode in size on the receiver side. This could be a good preventative to crawlers as they don't typically have that much space dedicated to each instance.

I like the general idea of having zero tolerance for bad behaviour.

> One solution might be to gather them all up and send them to another planet were they can live as they please without bothering the good ones - and some might suggest that this is exactly what they did and here we are :)

Sounds like we're the bad ones here.


If we take the planet as a whole, we definitely are!

> gather them all up and send them to another planet...

Has been tried before, they started with telephone sanitizers, hairdressers, and advertising account executives


I thought you were talking about Australia


Pentester/bug bounty hunter here. I appreciate that this is frustrating for the owner to experience, but this reads like normal internet noise to me, or at worst someone fired up burp suite and hit go on a website. Many, many commercial tools run these sorts of attacks en masse by default, some SaaS companies even do it as a product. The entire internet is being scanned constantly and many of those scanners have automated collections of attacks run against websites when discovered. I’m not say it’s right, but it is the reality we live in. I wouldn’t be taking it personally.

You probably need to calm down a bit. Everyone who has any kind of service on the open internet sees this stuff in their logs all the time. Most of it is entirely automated. That's just how the internet works.

It being common doesn't mean it's OK, it also doesn't mean people aren't allowed to be upset by it.

Casual racism and bigotry are common, "You probably need to calm down a bit" is dismissive and condescending.


I've loved this site since I first learned about it. In today's increasingly densified office spaces (in my area at least), this has been an even bigger help to me.

The latest app redesign has been fantastic.

It's worth a small donation just to get access to the huge library he built.

Note that the vast majority of his content is stuff he, personally, recorded on site, mixed, and sliced into equalizer bands. That includes an Irish coastline, an underground waterway, and several forests.


I'm a lifetime member and have enjoyed mynoise.net for many years. It's the best thing I've found for focus and distraction blocking. I have brain.fm, and YouTube music, but I keep coming back to his site because it's just better, more intentional, and more effective for me.

Why would someone try to hurt this guy? This site is great.

I have found that there are people who just want to watch the world burn. There are many reasons, but, at its most basic, hurt people hurt people.

That's something I like to keep in mind, when I'm reacting to someone being ... less than friendly ... By reacting badly, I then make it all right for them to justify doing it again, to someone else. I've found that I can defend myself, without becoming a foaming-at-the-mouth maniac. We can enforce our boundaries with water pistols, most of the time. We don't need nukes.

Everything is connected. This chap may be naive, but he's actually trying to set good connections in motion. I applaud that.


I feel like a lot of people desperately want to make some kind of impact on the world. Something that causes some number of people to acknowledge their existence (or the effects of it).

It takes real effort to do that in a positive way with a society built around surfacing negativity.


I think we need to recognize that there are people who genuinely get off on hurting others, and it really isn't any more interesting than that.

I dunno, that reads a little too simple to me. People aren't magical black boxes of mysterious drives and unfathomable causes, they're components of a larger system and reflections of their environment.

Speaking as a reformed 'teen who wanted to watch the world burn', for some it isn't simple omnidirectional malice, but rather a deep and confusing sense that the world is out to get you (spoiler; in some ways it absolutely is) and an instinct to throw a haymaker just so you feel you didn't go down without a fight.

Once this kind of person begins investigating the causes of their discontent - I myself have come to the conclusion that outdated institutions and capitalism are prime suspects - you can do quite a bit more to focus down that energy on the deserving. If you're young and/or dumb enough to not know the difference between the mynoise guy and 'the system' it's almost a forgivable mistake.

That said, from a practical standpoint, yes. Some people just kinda suck real bad. The why isn't always going to get you closer to a cure.


Most folks find that it’s a lot easier to tear down, than build up.

I’ve always really enjoyed building up, but it’s definitely not the easiest path.

I have managed to make a couple of mid-sized splashes, but many folks have no idea that I was behind them, which is fine with me.


It’s not targeted. Having maintained a site, my experience is the internet is a wasteland of AI crawlers, script kiddies trying to turn every form into an amplification vector, or vulnerability probers.

Right? I got his email too and man, I love what he does, I'm glad he's recovering from his illness etc. I've donated many times. But it's insane for him to think this was targeted. This was some bot/AI gone rogue. Or similar.

If someone wants to take you DOWN they will. And not by downloading a bunch of a files a heap.


It's just possible that someone at some big AI company just pressed a button to add this to their collection of training material. And lazily or otherwise just hit the checkboxes for 'repeat' and 'forever'.

The article explains that it started as a hacking attempt with requests to inject code. It’s not a simple AI company scraper.

Without knowing more about it, this coulda also just be one of the uncountable amounts of automated scanners that are iterating the whole internet constantly trying to find wp-admin etc. type vulnerabilities.

If all my years on the internet have taught me anything, it's that some people are just severely mentally unwell and will attempt to destroy anything they can get their hands on, purely because they can. Sometimes it's for attention, sometimes they just want to watch the world burn, but either way, asking "what did their target do to deserve it?" is pointless because the attacker likely never asked themselves that question either, and could very well just be a straight up sociopath.

As the internet grows, so grows the number of such people on it. In days gone, these people would've been rightly shunned from society, and their ability to cause harm to others was severely limited, unless they were willing to resort to more... extreme methods that would usually come with serious consequences. But the internet has given them a new outlet, a new way to ruin things for people from across the world that would've been far, far beyond their reach before, usually without any risk of punishment.


Feel for the guy. I had a couple of long owned domains stolen recently. They were so low value to anyone but me though, it makes me wonder why someone would bother.

I, too, just keep going back to mynoise.net for ambient sounds. It just looks "right" for the task, and is clearly designed to get out of your way and let you choose the kind of sounds that you want. Amazing site, I highly recommend it.

The attacks are painful, I hope the creator can attract some competent help from here or elsewhere to mitigate this problem.


Lovely, but naive.

But naive in a way that most people (?) would like the world to be.

But ultimately, unfortunately, unrealistic.

Building has always been the kind of difficult that, had you known at the beginning then maybe you wouldn't have started. And still quickly and easily destroyed.

Keep creating and building, otherwise there's nothing else to do. Love the obstacles for challenge of defeating them, don't hate them for their existence. To build X you often have to build A, B, and C (and sometimes all the rest of the alphabet) just to have the right setup to maximise the success of X. It can grind, but focus on the benefits of X.

Which sounds like the position they've taken, thankfully.

(Where X represents "anything" and is specifically not the <whatever it's classified as> platform formally known as Twitter).

The melancholy will return, just ride it out each time. It gets easier, gradually.


> Lovely, but naive.

it’s unbelievable to me that anyone would do this to him.

are you familiar with what he’s done? the amount of work he’s put into helping people?

you should dig a little bit more into the story before badmouthing someone.


I love the guy, I love mynoise, but he needs to chill out. Nobody "did this to him". This is almost certainly, like 99.99% certainly, just normal internet noise and he's just never noticed before. All sites get this sort of thing.

No intent to badmouth from my side. I'm not trying to come from whatever angle it might look like to you that I'm coming from.

Many malicious people don't care if their target does good deeds. In some cases it makes them a bigger target, like hospitals are to ransomware.

A bored teenager doesn't care.

There are people in the world who are profoundly nihilistic [0]. They will do mean shit for no reasons, and move on without caring.

This has always been true throughout human history.

"Father, forgive them, for they know not what they do"

0: often without actually knowing what that word means


Many are fatherless.

Pretty sure the vast, vast majority of them had fathers. At least in the biologicial sense.

And many fathers are useless.

but all ewes are featherless

I really like this perspective, it's right along there with what the Stoics would do:

"The wise act with a reverse clause--meaning that they not only consider what might go wrong, but they are prepared for that to be exactly what they want to happen--it is an opportunity for excellence and virtue.


Doesn't have to be naive we have just decided to not allow this kind of website to exist by forcing them to deal with anyone else.

Want to know why? Because major websites have to do is no matter what so figure minor websites getting screwed doesn't matter.


Regardless of the moral and ethical implications brought up in response to the individual in TFA, you’re spot on. One of my favorite reasons for creating is that it’s me against myself vs reality. Theres not an endeavor I find myself in that this is not true… of course I have the privilege of having accomplished all of my life goals from childhood at an early age, which only led to depression. So I set loftier goals only to complete them. It was only the third time around and confronting failure did it finally click that it wasn’t about accomplishing things and it was all about the journey. I was a latch key kid, so basic stuff like this and everything else that people from well adjusted families that are not poor af I’ve had to learn the hardest way possible. Which I guess in a way is a super power because now whatever I want to do I know what the learning curve looks and feels like and I know that failing a lot is the only way to crawl out of the trough of disillusionment.

Oh I downloaded and use the app but I didn't realise they had a whole site! This is great.

This website is amazing. In love ambient sounds. It is a shame something like this happened. Glad he continues.

Poor guy probably got crawled by LLM bots. The "attacker" probably doesn’t know who this person is. Just a faceless corporation using his sound or white noise content to train and feed llm.

I get similar "attacks" on daily basis, but find out it’s just a bot crawling the certificate transparency logs. Inspecting site certificates, and it’s issued by Let’s Encrypt CAs. Script kiddies, at best, trying to pick off the low hanging fruit.

Hope he doesn’t take these "attacks" too personally going forward. Seems like a good guy overall, maybe too good for this world.


sorry to hear that and i can absolutely relate to this feeling of losing something, of perhaps even being dragged into a game you never wanted to even play, where no one wins and everyone loses something.

the one silver lining is that it seems to have strengthened your resolve, to keep planting and keep building instead of just letting chaos and destruction stop you in your tracks. so in that way maybe you haven’t lost after all and maybe this isn’t even a bad thing, it helped clarify the things you find important in life and even inspire others (me included). thank you!


The MyNoise app has tangibly improved my life. I use a white noise machine at home, but when I travel, MyNoise is my sleep companion and I particularly appreciate that I can set the EQ to block the particular noises that are likely to wake me.

Sorry to hear about the annoying hack…


Agree completely and have been doing the same for years.

And what I find especially nice, when I'm on a spotty connection, is that once you load up your preferred noise it runs locally in your browser, so when your connection craps out it keeps playing seamlessly.


This site is fantastic. Sending a donation. Keep up the good work!

I am so sorry to hear this story, and I am so glad to have found this website!

this is incredibly upsetting.

mynoise is one of the best things on the net.


It's traumatic to be victim of malevolence. There's the injury, but it is the lack of a motivation which is disturbing - it's a loss of innocence.

It does suck. Because it’s a reminder that they’re are jerks out there and hard to avoid. Especially on the web. It also must sting because he’s trying to be a good citizen.

We see this in abusive behavior towards open source maintainers. It saps their will. And 100 thanks < 1 savage attack.

About a year ago the site I worked on had a hacking attempt. I’m not sure why, it was a site that provided online genetic tools for researchers. We had no financials, or even logins. I felt bad in a similar way as when someone broke into my car years ago, or when I had a package go missing.

Move forward/ move on is how I handled it.


I hope Stéphane doesn't let this sort of thing get to him too much - focus on the happy users of the site, learn to combat this sort of attack, and move on. Don't give these assholes any sort of attention.

Universal connectivity was the internet’s biggest promise and it turned out to be its biggest flaw. It turns out if you allow literally anyone on this planet to walk up to your front door, you will end up with the world’s criminals, psychopaths, you know, the ones in a more civilized time would be driven out of town by townsfolk wielding pitchforks, all hanging out on your porch figuring out how to pick your lock, or just to spray paint your house for the lulz and cred.

Look around and you will see every piece of cybersecurity knowledge assumes your porch will be inhabited by bad actors and there is nothing to stop them, so you absolutely need to harden your server as if you are a bank. Have you ever lived somewhere you genuinely don’t need to lock your front door to feel safe? I have, it was amazing, and it depresses me to no end to see the polar opposite to be what is expected on the internet. We were promised a world of peace and unity and total freedom of information but instead we got the tyranny of the petty cyberdelinquent, with no way to enforce prosocial values as we ought to do in a sane society. “On the internet no one knows you are a dog” was a warning, but we would be in a much better world if it’s only dogs we have to share an internet with. When humans get low they can get way lower than the worst dogs ever born.

We are already seeing a Brazilification of the internet. Crime is rampant, so you live in a gated community with private security if you can afford it. On the internet the name of this private security operation is Cloudflare. I hate one private company becoming the de facto gatekeeper of the internet but I cannot blame any individual website (including the one in the article) for using Cloudflare. It’s the thin orange line between a somewhat usable service and getting knocked off the internet by smart fridges every other day because some kid somewhere on the planet got bored.

How will this end? I honestly don’t know.


I heard of this on other websites. AI chatbots are web scraping data off websites, and you have to use fail2ban to block them. People are learning how to teach AI Chatbots to hack websites as well. My website http://blastar.in/ was affected, and I don't host it; a friend runs it for me, but he doesn't respond to email.

…people downloading a bunch of stuff from your website, even maliciously, is not a tenth of the tragedy this webpage seems to make it out to be.



Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: