HNHacker News
TopNewBestAskShowJobs

AJ007

7,857 karma · joined January 6, 2011

submissionscomments
AJ007··on EuroLLM: LLM made in Europe built to support all 24 official EU languages
Mistral is pretty much toast? Their models perform poorly and I'm not sure why anyone would use them. Maybe there is a catching up point somewhere in the future, hopefully.
AJ007··on Internet's biggest annoyance: Cookie laws should target browsers, not websites
What about by default web browsers are required to have Javascript disabled and uBlock installed and running? They could do a reverse Google, and make it so its impossible to uninstall uBlock.

If we are going to go down the path of mandating legal liability on software makers of a neutral communication medium, then the EU should just break the commercial web.

AJ007··on How I ditched smartphones
The last gen iPods (that looked like an iPhone) were basically this. Also I've had friends who stopped paying for their cell service, same thing, just needed wifi.
AJ007··on Pixnapping Attack
From reading comments on hn over the past couple of years, I'm disappointed how terrible the security practices and knowledge has become. All of this stuff is about to get a lot worse with generative AI.

There are complaints on this story, and on the recent one about the fsf phone project about how inconvenient it is to not be able to access banking apps on your mobile phone. I can't be bothered to enter my banking password every 30 minutes on my desktop! What, I'm supposed to have two phones?

The first thing someone is going to do when they steal your phone (after they saw you enter your password in public) is open your banking and money apps and exfiltrate as much as they can from your accounts. This happens every single day. None of those apps should be installed or logged in on your phone. Same goes for 2FA apps. That's like traveling with Louis Vuitton luggage which is basically a "steal me" sign.

That's the most basic stuff for people who aren't a CEO of a company that is in the crosshairs of state sponsored espionage attacks.

The problems with "bare bones secure OS" device remain the same from a physical access standpoint: social engineering, someone sees your password, steals the device. But otherwise, yes, the devices you install a bunch of spyware/adware games on and take to bars should not be the ones you are doing your banking, 2FA, work, etc on ever.

AJ007··on Pixnapping Attack
With JS disabled!
AJ007··on The RSS feed reader landscape
What if all we need is for bloggers to post a recommended feed with links to external posts in a separate RSS feed? The feed readers ingest the recommendation feeds and count them. I've been following ActivityPub and other protocols, by damn that stuff becomes a mess quick. The absolute simplest approach is probably the right one for now.

The fundamental problem with recommendation engines are the platforms are forcing content on the users based on what increases engagement (and possibly ad $) on their platform -- not what is valuable to the user.

If I'm following a particular blogger, and their signal to noise ratio is 9:1, if they recommend an article it would be vrey likely I am also interested in it. If I'm following a larger group of people, I may be interested, in aggregate, what they are interested in. All very basic stuff that seems to have been abused and forgotten. Other than e-mail, rss is the odd man out in 2025 which also makes it so much more valuable.

Any third party RSS feed service could ingest these feeds and spit out whatever other type of recommended feed they want. The could just view a hn/reddit style feed solely with counts of the people they want to follow along with "vote" counts and some decay algorithm. They could have a chronological feed that just shows everything. The users are in control again, not Meta/Facebook/IG, Reddit, Bytedance, or etc.

AJ007··on The RSS feed reader landscape
I've been using newsboat for years. I've thought about trying out miniflux for a while, but a few days ago I got a different idea.

First, the newsboat DB is SQLlite so it's easy to access. I wrote a few scripts that built static HTML pages of all of the feeds along with a feed style page. I copied the HN page html/CSS, which to me feels like the maximum compact view while still being readable.

Now I have a bash script that will refresh all of the newsboat feeds and then open the static HTML page in the default web browser.

Thinking a lot about the impact of "vibe" coding recently made me wonder why anyone needs to be locked in to not just a set UI but any sort of rigid external control of how the user sees and interacts with information.

I want to see all my news chronologically. Now in a single place I have hn, lobste.rs, numerous twitter/x feeds, mastodon, and a lot of other blogs all visible chronologically. If someone was noisy I could apply keyword filters to the feeds and block certain things out. If I wanted to, I could put this on a server and access it through my phone.

This was definitely "the easy" way to do this. You could raise $1 million and do the same thing the hard way.

AJ007··on Microsoft is plugging more holes that let you use Windows 11 without MS account
This should have been the EU approach to Apple. Instead we got third party "App Stores" to install software Apple still approves and controls. It could have been a three paragraph law.
AJ007··on Microsoft is plugging more holes that let you use Windows 11 without MS account
I had a similar issue, after cleaning up a Windows machine for someone else, making sure Firefox with uBlock was running. I took a look at it a few weeks later and there was some bullshit Microsoft Bing search bar or AI thing on the toolbar. Wiped, installed Linux.

Microsoft is setting fire to the bridges and those will be users which they will never be able to get back again.

Linux works great for gaming except some anti-cheat stuff which probably won't be legal anymore anyways in Europe under the PLD.

AJ007··on Modern messaging: Running your own XMPP server
Not my project, but I was hoping to see more stuff like https://prose.org/

As others have pointed out, for iOS Monal is good.

AJ007··on Benefits of choosing email over messaging
Each had a unique set of pitfalls. Out of the 3 Usenet seems to be functionally dead for it's original purpose. Perhaps there was no possible outcome where usenet would scale along with the internet.

The email spam issue is trivially solvable with a contact whitelist, which is a UI issue. Email as it is right now is definitely very usable, but keep me the hell away from anything from Microsoft.

IRC is alive and small. On the optimistic side it outlived Skype. Maybe 25 years from now IRC will still be working and Discord will be dead. There has been a lot of buy in on Matrix, but I'm unconvinced the protocol is going to thrive long term due to design choices made.

Reddit is doing what Usenet did. In my ideal world, reddit would be part of the fediverse along with Usenet & Twitter and the UI would close to hn.

AJ007··on Benefits of choosing email over messaging
Delta Chat certainly could emerge in that direction. https://delta.chat/
AJ007··on In Praise of RSS and Controlled Feeds of Information
But that's a bullshit excuse, just like with email the answer to spam posting is the person gets un-followed/unsubbed.

When its an algorithm, the user is incentivized to produce content in order to increase their chances of getting a hit. Secondarily the loss of visibility increases value of advertising on the platform. It's a lose-lose for users, first they are forced to use the platform more for fear of missing something, second the user has to post more to get any reach. The platform wins on increased engagement, overall content depth, ad revenue, and the ability to sneak in a whole lot of shit the user never was interested in or followed. Facebook & Instagram now are functionally high powered spam engines.

Interestingly the FT has an article today about a drop in social media usage ( https://www.ft.com/content/a0724dd9-0346-4df3-80f5-d6572c93a... ) - one chart titled "Social media has become less social" shows a 40% decline since 2014 of people using social media to "share my opinion" and "to keep up with my friends" In many ways, what is being referred to as social media has become anti-social media.

An algorithmic email feed would be useless, as would any sort of instant messenger, yet that's exactly what social media turned in to. Twitter/X is teetering in that direction. The chronological feed still works and is great. Anyone who posts a lot and doesn't balance out the noise with signal I just unfollow.

I might be wrong about this one, but one outcome of generative AI might be an engagement cliff. Some users will be very susceptible to viewing fake photos and videos for hours (the ones still heavily using FB likely are), but others may just choose to mentally disengage and view everything they see on FB, IG, Tiktok as fake.

AJ007··on Meta will listen into AI conversations to personalize ads
All of the future billion dollar model training runs might be for conversion rate optimization.

User mentions they didn't sleep well. Model delivers jarring information right before user's bed time. Model subtly suggests other sleep disruptive activities, user receives coupons for free coffee. User converts for ad for sleeping medication.

(This is already happening, intentionally or not)

Notably the open source models OpenAI released right before gpt5 are likely good enough to be substitutes for 95% of typical ChatGPT use cases.

AJ007··on I only use Google Sheets
A good reason why no one should ever have their Windows install linked to a Microsoft account, same for MacOS.
AJ007··on F-Droid and Google’s developer registration decree
In F-Droid's case this is absolutely a regulatory reaction -- this is directly related to the DMA (and to some extent, the Epic lawsuits.) Google does not want third parties bypassing Google in any way -- which probably ties in to the whole AOSP thing.

> How much longer will free and open source be tolerated?

I don't think they have a choice. Imagine what would happen to Google if half their software stack was Oracle and the EU had backdoors in to all of the management and CEO's devices and private communication. Why not use Chat Control to verify that they are complying with the spirit of EU law? Turn on the remote microphones while they are at it too.

On one hand we can lament the death of open source. Yet, open source has never been healthier. There has never been more open source software available to use and in development. Even when in it comes to AI, the best open source models are actually really damn good, better than anything that existed roughly 12 months ago. As much as Google, Apple, and Microsoft want to force you in to their closed ecosystems they fear being locked in to their competitor's closed ecosystems even more!

This could be a 10 page comment, but yes, the regulatory environment is a real threat to open source and the open internet in general. Most of those threats have been coming from the EU, with things like Chat Control and PLD. Which is unfortunate, because the future of the free world will rest entirely with the United States (Also possible that the EU will be dissolved, the monetary union will have a very difficult time during the next financial crisis.)

On the other hand, software developers and users, have become too reliant on Android which is functionally a fake open source project now. I can't think of a stronger incentive to stop Android development than telling them you can't develop here without paying us.

AJ007··on Cost of AGI Delusion:Chasing Superintelligence US Falling Behind in Real AI Race
Eh, reads like someone who uses ChatGPT but can't tell you what model they have.

For my personal projects I have a list of difficult bugs I keep that LLMs can't solve. Right now that list is empty. Anyone using LLMs for coding, using the best tools and practices, can see what a massive capability leap has occurred in the past 9 months.

If the US is going to end up "losing", it is going to be first through power generation -- China's coal plants produce more power than the US as a whole. Robotics is a whole other topic and shouldn't be bundled with LLMs.

AJ007··on Cloudflare Email Service: private beta
Agreed.

One thing I've grown concerned about, after watching the Twitter migration fizzle out, is we can imitate the old internet on a small scale, but on a large scale it just doesn't work. For Twitter specifically, the outcome was even worse, many users just migrated to other more centralized services or existing monopolies (like Instagram.)

Users are too used to being able to instantly stream 4k HDR 60fps. They are too used to limited amounts of spam. They are too used to having most non-agreeable content filtered. All of this stuff that big tech delivered now is replicate-able at the cost of tens of billions of dollars. The only business model that can pay for that is owning a giant ad platform.

Thinking about all of the issues the EU has had enforcing things like GDPR, which big tech companies largely haven't followed for years or straight up lied to their customers about, along with a possible failure of the DMA now due to tariffs.. and yet on the other side of the Atlantic, the US utterly failed to ban or control Tiktok. Endless announcements of upcoming deals that were either lies (Oracle protecting American's data) or postponements.

Meanwhile, all of the spam, hacking, bots, and DDoS attacks persist and grow, along with layer upon layer of (probably intentionally) poorly written and often conflicting legislation across multiple jurisdictions have truly made it impossible for the internet as it was designed and meant to exist to continue. (Sure you can just set up a basic web forum like you could do 20 years ago, not use Cloudflare, not host it at a major datacenter, and ignore all of the GDPR and age verification laws, but good luck. Hell, it doesn't even sound like it's really legal to run a Mastodon server anymore.)

One small hope is that if internet companies follow any pattern we've seen in other industries, when the growth ends, the managers will switch to tearing the conglomerates apart in to pieces and selling them off. One day CloudFlare might be split in to 30 pieces, along with Alphabet, Meta, and Amazon. But it could be a while.

AJ007··on You did this with an AI and you do not understand what you're doing here
This is the bull case for AI, as with any significant advance in technology eventually you have no choice but to use it. In this case, the only way to filter through large volumes of AI output is going to be with other LLM models.

The exponential growth of compute and data continues..

As a side note, if anyone I'm communicating with - personally or in business - sends responses that sound like they were written by ChatGPT 3.5, 4o, GPT-5-low, etc, I don't take anything they write seriously anymore.

AJ007··on LaLiga's Anti-Piracy Crackdown Triggers Widespread Internet Disruptions in Spain
Lecture? They should be stripped of their intellectual property rights.
AJ007··on Scammed out of $130K via fake Google call, spoofed Google email and auth sync
If you have to have use a phone, at minimum disable notifications and never answer it. First it removes all of the urgency. Second, the caller has to provide some way for you to contact them, which gives you a second point of contact to validate.

Never, ever, use a cloud password manager, that's just dumb. Combining these things together in some sort of master account -- be it Google, Apple, Microsoft -- is also terrible. It's like leaving all of your savings accounts, checking, and investments at a single bank.

All of this stuff is going to get way worse because of AI. You'll be talking to real people you know personally who are 100% not AI but were tricked in to asking you to do something by other AI enabled scammers. However aggressive I've suggested people be in the past probably isn't going to be enough for 5 years from now.

These things have always been possible, and have been done, but now they can be done at scale, with advanced testing to figure out what works on who, whereas before it was targeting the guy who kept posting pictures of expensive watches on his public Instagram.

AJ007··on ChatControl update: blocking minority held but Denmark is moving forward anyway
That's all bullshit because we already live in a panopticon. Everyone's physical movements are tracked, facial recognition works even on partials, there are HD cameras everywhere, continuous uploads of videos to TikTok and Instagram mean fugitives can no longer hide in the public world. Phones, Alexas/Homepods, vehicles etc can be remotely converted in to bugs with a court order (and a bunch of other devices probably are without.)

Whether its car thieves or drug dealers, these exist in the West today by explicit choice, not because it is impossible to stop.

AJ007··on ChatControl update: blocking minority held but Denmark is moving forward anyway
They have evil intentions, but they are also idiots. The nature of an authoritarian government is one that requires maximizing control for survival. As a particular country shifts to a more authoritarian government, and those people who enabled dumb ideas fall out of power (right, left, or whatever) those same tools will be used by their political adversaries to control, imprison, or kill them.

Why are they idiots? Because western Europe is not yet authoritarian and thus there is little personal benefit to hasten a slide towards it, there are so many other ways to gain power in a free society. (I wouldn't bet money that Europe will remain free in 25 years.)

There is a secondary problem here -- anything that decreases the information security of European countries hands more power to the US and China (and to a lesser degree other nations with advanced infosec capabilities like Russia and Israel.) If you are European (I'm not) the first thing that should be done is investigate the people pushing this stuff.

AJ007··on Google: 'Your $1000 phone needs our permission to install apps now' [video]
I suspect the solution may be a compact tablet running a touch-friendly Linux distro, and the "phone" is just a mobile hotspot. If you want some fantastic camera built in, that's a separate problem.

I've been more neutral about this in the past, but the current and future integration of LLMs (and other ML models) into the base operating system will mean these mobile phones do less of what the user wants and more of what the user does not want.

Secondly, Apple is in the process of becoming an adtech company and will not provide an alternative to Google.

Thirdly, Google may be forced to divest Android and the mobile business. If so, the buyer is likely to be as bad, or worse, because they'll have to figure out how to pay for the whole thing.

AJ007··on Google: 'Your $1000 phone needs our permission to install apps now' [video]
This is what bothers me about the whole "App Store" stuff with the EU. This entire fight about Apple being required to allow third party "App Stores" -- how about simply the user can load whatever software they want to on the device which they are the owner of?

The amount of legalism that's been brought in by both sides, Apple/Google and the regulators, layered in lies (we need to approve the software, register the developers, to protect the user from software), is divorced from the reality of the hardware-software relationship. This has led us down a path where everyone is debating the topics that Google, Apple, and revolving door regulators choose rather than the underlying reality.

There is a simple solution to all of this: Google and Apple should no longer be allowed to operate any sort of "App Store" or software distribution channel.

AJ007··on Are OpenAI and Anthropic losing money on inference?
Whenever someone has complained to me about issues they are having with ChatGPT on a particular question or type of question, the first thing I do is ask them what model they are using. So far, no one has ever known offhand what model they were using, nor were not aware there are more models!

If you understand there are multiple models from multiple providers, some of those models are better at certain things than others, and how you can get those models to complete your tasks, you are in the top 1% (probably less) of LLM users.

AJ007··on FCC bars providers for non-compliance with robocall protections
Between the 0 real security and the generational jump in capability fraud now has because of AI, there is no excuse for the continued existence of traditional voice or SMS. We'll never be able to solve compromised devices or social engineering of others, but the idea that anyone/any software in the world can push a message to a device and then immediately communicate with that person is absurd.
AJ007··on Ultra-processed foods make up more than 60% of us kids' diets
Or even horse https://en.wikipedia.org/wiki/2013_horse_meat_scandal
AJ007··on Ultra-processed foods make up more than 60% of us kids' diets
Corn syrup is just a vegetable?
AJ007··on Tough news for our UK users
I have no idea why we need to require site operators to verify users ages? Just force the mobile phone companies do it. It would be pretty trivial for apple, with a front facing camera, face detection, and then just read everything on the screen. If something bad or offensive is shown, the phone is disabled and a notification is sent to the parents and the police.

The western internet as we knew it is dead. Privacy is dead, we already live in a post-Snowden panopticon. With multiple always-on microphones in every public room and often in private rooms too. HD cameras are everywhere. If you live in any major city, hundreds to thousands of hours of footage, which might contain you, is being uploaded for public view and AI training daily.

There have been other open source deathblow laws passed in the EU like the Cyber Resilience Act and the Product Liability Directive which have been repeatedly dismissed by other commenters on hn. Earlier stuff like the GDPR was dismissed too as only affecting big companies. The arguments in support of these laws have basically been you are small so you don't need to follow them. That seems like lot of disrespect for the EU's legal system but maybe it's well deserved.

It's only a matter of time until ID verification will be mandated even to make a post like this one on sites like hn. Western companies assisted authoritarian prison states in monitoring, censoring and controlling their citizens, when they should have been doing the exact opposite. Now it's really hard to argue that it isn't possible here.

← PreviousPage 3 of 34Next →