HNHacker News
TopNewBestAskShowJobs

drewfax

880 karma · joined December 9, 2025

submissionscomments
drewfax··on So my ISP was hijacking my DNS
It's pretty much most Indian ISPs and in this case it was ACT Fibernet.
drewfax··on OpenCode Hacked: User credentials leaked
Can someplease explain what is a distillation attack?
drewfax··on Internet access a fundamental right for all age groups – India's Supreme Court
> The court noted that recently there have been growing efforts globally to limit internet access for children below a certain age, especially social media platforms, “in the name of their safety”. However, upon “anxious consideration”, the court decided not to endorse the same.

It's relieving to hear this from the Supreme Court, considering the fact that the current Modi government's usual approach to any problem is banning internet access.

drewfax··on OpenCode 2.0
They've mentioned "requests / 5 hr" limits for each model, which I presume is max number of requests for that model.
drewfax··on OpenCode 2.0
Yeah I am confused by their pricing explanation. All I get is there's some kind of throttling.
drewfax··on GrapheneOS has fixed the Android 17 QPR1 kernel performance regression
> For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota.

Wow, that is so cheap of Google. That company has lost all it's values and deserves to die.

They built their empire with open source projects including Debian, KDE's KHTML (Webkit predecessor), Linux kernel, MySQL etc. But now, these leeches won't even allow OEMs to use different flavor of Android.

drewfax··on Several vulnerabilities have been discovered in the Linux kernel
Linux kernel introduces bug fixes, new features, and major systemic changes all the time. That’s why using SemVer for Linux is pointless and why Linus dropped it.
drewfax··on Humans Are Reading Your ChatGPT Chats, Lawsuit Claims
If anyone assumes their AI chats are private, they must be stupid. Of course, all AI companies are going to evaluate chat sessions for improving their models whether it's disclosed in the privacy policy or not. They're investing tonnes of money into this, so your privacy is a negligible problem for them.
drewfax··on GrapheneOS on AI Usage
Nothing surprising here. AI is a tool just like an IDE, debugger, etc. All the regular tasks like coding, testing and review still holds true. Developer is still responsible for their work. Reviewer is responsible for ensuring code quality and standards. As long as the submitted code is of high quality and does not violate copyright, AI is not a concern.

It's stupid only when an organization refuses to understand AI is a text prediction software and thinks it can replace humans in coding, testing, reviewing etc.

drewfax··on Actively exploited sandbox RCE in all Chromium versions
That's how the system or browser should be configured. Secure by default and any insecurity must be an opt-in. But Google won't do it because their websites are JS heavy monster trucks and millions of websites run their tracking scripts which require JIT enabled by default for optimal page load.
drewfax··on An open DNS recursive service for free security and high privacy
That is the point and business of Quad9. It's not their fault for you not knowing what Quad9 is.

I don't want my family to get malware from sketchy websites. Quad9 offers a simple solution for these usecases. I'll take the false positive anyday over unfiltered DNS.

drewfax··on GrapheneOS says Pixel 11 has MTE support after all
So other projects are not supposed to critize Google? Graphene's focus is on security and they complain about lack of security in your products. Seems valid to me.

Also security and using non-Google OS are not niche usecases. I'm not sure how you are working on Android, the most popular OS while claiming security is a niche usecase. In fact, I have less confidence in security of your work.

drewfax··on Credit Card Rewards Became a $9.2B Wealth Transfer
Credit card usage has been increasing in India.

Source: https://bfsi.economictimes.indiatimes.com/articles/credit-ca...

Besides, NPCI has introduced merchant transaction fee for UPI now causing decline in UPI transactions.

drewfax··on Firefox is now the last major browser that still supports uBlock Origin
New generations don't 'browse' web anymore. They 'consume' YouTube, Instagram, Android TV and other walled gardens. These generation don't even know they could change contents being displayed on their device to their wish. For them it's just whatever the app shows. They don't understand Web, extensions, DNS etc. I don't have hope for new generations. We're are the old men now yelling at AI and App Stores.
drewfax··on Firefox is now the last major browser that still supports uBlock Origin
That's why Brave probably built an in-built adblocker written in Rust. Works great on both desktop and mobile.
drewfax··on Firefox is now the last major browser that still supports uBlock Origin
Now they are doing it to Android with mandatory developer identity verification and Play Integrity. I wonder how those engineers sleep at night.
drewfax··on US citizen charged after GrapheneOS phone wipes during airport search
How would it work? Isn't it easy for the authorities to check the list of users on the device?
drewfax··on [dead]
I suspect this is either some ground work for planting a future backdoor or a noob who found out there's a ~/.cache directory.
drewfax··on Vision 50 Years Phone – Keeping old Android phones fast without root
Is this a joke I don't understand? Aren't Android apps sandboxed? How does these two commands supposed to make my phone fast for 50 years?

rm -rf ~/.cache/* 2>/dev/null

rm -rf /data/data/com.termux/files/usr/tmp/* 2>/dev/null

Source: https://github.com/50YearsPhone/vision-50-years-phone/blob/m...

drewfax··on UPI: Anatomy of a Payment Transaction
Yes, UPI works. But it's a terrible system for privacy and autonomy. It has so many intermediaries, requires phone number and linked to person's identity. It should not be called a peer-to-peer payment system in anyway. It is controlled by the government rather than Visa or Mastercard. That's the only the difference.
drewfax··on OpenWrt One – Open Hardware Router
I too use ASUS RT-AX53U. Decent hardware. But stock firmware was terribly slow. IPv6 didn't even work.

I heard OpenWrt when I searched how to fix the stock firmware. Flashed it and never turned back. Now, OpenWrt is a critical infra in my house for adblocking, DoH, Firewall, Network Segmentation etc. None of these are possible with the stock firmware.

drewfax··on Google Hits 50% IPv6
Similar experience. I bought an ASUS router and enabled IPv6. It slowed down everything down. Immediately flashed OpenWrt on it, IPv6 works like charm.

It's usually bad configuration done by the router vendors. It doesn't mean IPv6 is bad.

drewfax··on GrapheneOS has been ported to Android 17
That completely goes against what they're working towards. I understand why you would want to root your own phone, but GOS is targeting highest security standards and root ain't one of them (for good reason).
drewfax··on Leaving Mozilla
Some things Mozilla could have done correctly:

    - Kept Rust and sold best-in-class tooling like IDEs to enterprises.
    - Polished Firefox OS and distributed apps in their store for a 1% commission.
    - Kept Servo and made the most secure and fast browser that no one else had made.
    - Partnered with OEMs to offer Firefox as the default browser.
Yet the best they could do was pay their CEO for nothing.
drewfax··on Leaving Mozilla
Firefox OS was a brilliant idea. Imagine cross platform and open apps based on HTML/JavaScript that feel native and polished. 2026 would have been amazing if Mozilla executed it right.
drewfax··on Leaving Mozilla
Extensions were why Firefox was so popular among those considered 'abnormal.' Chrome just copied the idea. VPNs, Pocket, and sync services are all great features; it's their implementation and execution that is so poor.

All Mozilla (and Firefox) needs is to be run by developers, not the fucking MBAs.

drewfax··on Haskell Foundation 2026 Update
I tried building a cross platform shared library. I still couldn't get GHC to generate the library with Haskell's Runtime (RTS) statically linked. Tried multiple AI models and nothing could make it work. Eventually gave up after a month.

Also there's no support for Android and iOS, atleast not without spending months in recompiling GHC with haskell.nix or other third party projects.

Eventually I switched to Rust. It's tooling is so mature that I can focus on developing than compiling GHC.

Despite these demerits, I love Haskell language and lazy eval. I wish I can use it one day.

drewfax··on Mullvad exit IPs are surprisingly identifying
Thank you for being on our side Mullvad. I'm using Mullvad through Tailscale. It's been an awesome combination for my self-hosting and privacy needs.
drewfax··on Google broke reCAPTCHA for de-googled Android users
GPL v3 specifically requires the vendor distributing the GPL v3 components to allow the user to change the software on the end user device. This means no more locked bootloader. We would have had choice to install custom Android distributions and thus less Google monopoly.
drewfax··on Google broke reCAPTCHA for de-googled Android users
I wish Linus had adopted GPL v3. He had the power to stop this madness from big tech, but he sided with them. It just reveals that he never fully understood the reason for the existence of GPL in the first place.
Page 1 of 2Next →