Hacker News Reader

Cider9986on Beta.getmonero.org

Huh, I don't see it showing up blocked in Brave shields.

Cider9986on Fingerprints are the new cookies

> unless you have a ton of sim cards you rotate through

And phones!

Cider9986on Beta.getmonero.org

I think it looks a lot better. There is something about a well-designed website. Definitely worth the XMR.

https://getmonero.org

https://beta.getmonero.org

The one thing I don't like is I feel like the logo on the homepage would look better if it was solid, like the regular logo.

Cider9986on Show HN: WallHop – 12ft.io is gone, so I built a replacement

I heard someone say here that they spin up a full, non-headless browser for each site. I think they definitely pay / have accounts for some sites. That guy deserves so much respect it's insane and no what he did was not that bad and his reputation is not ruined.

Cider9986on Fingerprints are the new cookies

Fingerprinting is really bad for privacy and the defenses against it are not there. See https://fingerprint.com. Tor Browser defeats it but I don't think there's a highly usable browser like Brave you can use and prevent being tracked by it.

Cider9986on Ask HN: What to Build in the AI Era?

Make this but open source: https://getcoldturkey.com/

Cider9986on Passkeys are a trap

Passkeys make it feel like the site is trying to get more info about me; it seems harder to maintain multiple accounts with passkeys. They feel worse for anonymity than a password where you know exactly what you're pasting into the site.

Although this isn't true because actually with a password you have to choose how to generate it and everyone chooses different ways.

Cider9986on House with 15m underground tunnels for sale for 300k

>Would you prefer full webpage archiving with images, CSS layout, and more of the traditional archiver style, OR would you prefer a lightweight page with just formatted text and images, such as the ones you see on Nonograph today, with federated attestation that pages haven't been tampered with?

I think I would prefer the full archival style. I think that has more utility overall but the stripped down one has pros as well. megalodon.jp demonstrates it doesn't have to be extremely slow to get a full archive but it doesn't have the effectiveness like archive.today.

On the one hand everyone likes a fast stripped down version and it would be a new format, but a significant part of an archive is more than just the exact content. The surrounding webpage communicates as well.

I don't have a strong opinion and I'm looking forward to seeing the product.

Cider9986on Show HN: WallHop – 12ft.io is gone, so I built a replacement

Well dang, I thought it would just be a worse archive.today (yes the owner doesn't like that it's used for piracy so much), but wallhop works on wsj, ft, and nytimes. It's quite convenient because it doesn't have the recaptcha from archive.today, I'm curious to see how long it lasts.

It really should be quite easy to make one of these. I mean there's only so much new articles every day. If you just had one account it should be able to get the content on sites with hard paywalls.

Wallhop doesn't have a hard, hard paywall bypass? Maybe it's just not been attempted yet, but 404media paid only is not bypassed. For example: https://www.404media.co/heres-the-video-for-our-seventh-foia...

BPWC works for WSJ, Nytimes but not ft. Archive.today works for NYT, FT, and occasionally WSJ.

Cider9986on Bitwarden Dual License Model

I assumed that the accessibility one is non-standard and Bitwarden's uses the system native one. Because I see Bitwarden in passwords and autofill in settings (or something along those lines). I find it to work way better than on iOS anyway.

I don't think that the visual indication means they aren't using the system way. The accessibility service is probably not a good idea given how much control it can give the app over your system.

Cider9986on Bitwarden Dual License Model

I think they do that on Android but also have the accessibility based option.

Cider9986on Rampart: Browser native on-device PII radaction

The source code should be public domain, no?

Cider9986on Rampart: Browser native on-device PII radaction

You could never trust the US government to protect our information since it moved online.

Cider9986on Bitwarden Dual License Model

https://www.privacyguides.org/en/passwords

https://discuss.privacyguides.net/t/aliasvault-open-source-e...

Cider9986on 2025-10-10 front – Hacker News

Huh, I thought all links to hacker news were banned.

Cider9986on Bitwarden Dual License Model

Yes but this person is using an alternative Android client as well.

Cider9986on Bitwarden Dual License Model

Bitwarden is still releasing free builds but yeah you'd need a new project with a new name to use it from the Play Store or App Store.

Turns out Keyguard, an alternative Bitwarden client is already on the Play Store.

https://github.com/AChep/keyguard-app

Edit: turns out Keyguard is source available but fully copyrighted.

Cider9986on Bitwarden Dual License Model

This is enshittification but I'm not gonna drop Bitwarden unless they do something really bad. I'm already on the F-Droid version from their GitHub for my GrapheneOS phone because that one has no Google services/telemetry.

One of the family members I set up with Bitwarden has said it changed their life and they can't imagine not using it. I would guess that would apply to any crossplatform password manager but Bitwarden is quite good and the one that stuck.

I probably wouldn't move to one of these [1] because I don't like the UI of Proton Pass, the convenience of KeyPass, and 1Passsword is obvious. I'm interested in AliasVault as it seems to be a more privacy-focused password manager, which is cool, but I'd have to look more into it.

[1] https://www.privacyguides.org/en/passwords

[2] https://discuss.privacyguides.net/t/aliasvault-open-source-e...

Cider9986on Telegram Desktop vulnerability allowed any user's file to be stolen

Telegram is worse than WhatsApp. No E2EE by default in 2026 is insane and Telegram's marketing is so deceptive.

Cider9986on A statement on the Tor Project's relationship with Mullvad

Well, it's definitely not like Signal. The idea of it is to give better metadata privacy. It should be similar content privacy to any other good messenger like Signal.

The developer said he stopped writing code many months ago (IIRC). Idk if this means much but something to think about.

They're getting their third audit right now by Trail of Bits. Maybe it's already done and they're fixing the issues.

The developer keeps getting in arguments with this guy, maqp. Well I suppose maqp is getting in arguments with him. At first I was kind of on the SimpleX dev's side, because maqp came off as angry while he argued and at the same time I didn't really understand the discussion.

But maqp's main critique boils down to the fact that SimpleX's goal and marketing is anonymity, by removing user profiles, removing even random identifiers, but they don't implement Tor by default, so your IP address is an identifier.

https://discuss.privacyguides.net/t/simplex-workflow/40646

https://discuss.privacyguides.net/t/how-come-no-anonymous-me...

https://discuss.privacyguides.net/t/2026-instant-messenger-t...

https://discuss.privacyguides.net/t/simplex-vs-cwtch-who-is-...

Cider9986on A statement on the Tor Project's relationship with Mullvad

I think Mullvad is likely the biggest of privacy VPNs but those consortiums likely make a lot.

https://kumu.io/Windscribe/vpn-relationships

Cider9986on A statement on the Tor Project's relationship with Mullvad

They're really the original "trustworthy" VPN that people that know about them will recommend. It's very straightforward.

IVPN is very similar kind of focus and branding, same with Obscura.

https://www.privacyguides.org/en/vpn/

The ones I can recommend that aren't on this list are Obscura and Nym.

Cider9986on A statement on the Tor Project's relationship with Mullvad

Mullvad spends a lot on irl marketing. VPN providers are essentially just about trust as they provide essentially the same service, so marketing is hugely important.

Mullvad and IVPN both don't do affiliate links. Proton is the only VPN that I can recommend that does use affiliate link marketing. They also do a lot of sponsorships. Proton really is a great company with great products.

https://www.privacyguides.org/en/vpn/

Cider9986on A statement on the Tor Project's relationship with Mullvad

It’s not double think. Free speech is about defending other people’s right to speak, not what they say. It opposes the Örebro Party’s / Mullvad cofounder’s opinions, not their right to say them. The network Tor created is literally a place where speech is incredibly hard to censor. Choosing what degree to work with another company is not about the right to free speech.

Cider9986on Ask HN: Why is Ask HN only showing me 14 posts?

When they have a unique name, it doesn't seem to matter.

Cider9986on House with 15m underground tunnels for sale for 300k

Any update on this? Assuming you're involved. https://news.ycombinator.com/item?id=48070516

It is kinda nice to be copying based because it's highly reliable (against paywalls, blocking, IP bans, .onion services and other domain name thingies). It would be cool if there was some sort of reputation system. Obviously on top of the promise above.

Archive.today is great, except for the Google captcha. It's no small feat to run an archiving service especially against copyright law–the archive.today guy seems a bit crazy–I still have mad respect for him.

Something that the people who keep submitting these links get wrong, is on Hacker News you're supposed to submit the original link and then the archive / bypass in the comments. Hacker News is not against against Nongraph or something, most archive.today mirrors are also banned for post submissions.

Cider9986on Ask HN: Why is Ask HN only showing me 14 posts?

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

Cider9986on System-level ad-blocking in Android

It was just an example of garbage I got at the end of the link when going to an amazon page. The deleted posts were affiliate links.

Cider9986on System-level ad-blocking in Android

One time I saw someone trying to hide an Amazon affiliate link in a post by putting the link text as amazon.com/dp/12345 but the link was amazon.com/dp/12345/ref=tracking. There's no affiliate link for Nord here but it's weird to use it as an example over better options: https://www.privacyguides.org/en/vpn/

Cider9986on Lawmakers Introduce Multiple Laws to Curb Flock After 404 Media Coverage

The Surveillance Accountability Act is better as it essentially restores the fourth amendment and would cover Flock but it's still amazing to see mainstream support for privacy laws.

https://www.surveillanceaccountability.com