Hacker News Reader

My bad. For now, they were just cosplaying as such [0] with anti-consumer decisions in the recent years.

[0] https://en.ubunlog.com/Canonical-will-go-public-this-year/

> According to Shuttleworth, the company is now ready to go public , something they attempted in 2005, but the conditions are now more favorable.

> meaning that some Canonical products will cease to be developed by the company.

nobody42on WTF Ubuntu?

Everything that's built by a publicly traded company is built for shareholders, not for consumer. Switch before it became unswitchable or learn the hard way.

nobody42on PHP 8.2.35

I only managed to use my Nvidia card with the latest drivers:

https://docs.nvidia.com/datacenter/tesla/driver-installation...

nobody42on The One Question I Can't Stand at Restaurants ("What's your phone number?")

[2019] An exposed database tracked whether 1.8 million Chinese women were “breed ready”:

https://www.theverge.com/2019/3/11/18260816/china-exposed-da...

nobody42on Brax Wink. The most private mobile phone. Modular. Open source

Great points above. To add even more, Google is purposefully misleading user when designing user interfaces [0] [1]. Like language, user interface is affecting how we think.

Which only a hard-fork could fix, and who have the resources to fight that.

[0] https://www.accc.gov.au/media-release/google-llc-to-pay-60-m...

[1] https://www.theguardian.com/technology/2021/apr/16/google-tr...

nobody42on Brax Wink. The most private mobile phone. Modular. Open source

I watched Brax a bit, and many of his technical assessments are incorrect. He has an attitude of a snakeoil salesmen. Hard pass.

nobody42on On social reality in China

> Now of course things aren't heaven in China, they aren't in USA either

In democracies gradual improvement is possible. In dictatorship it's not.

The real answer is, where do you want, and your children, to live? With barred university education due to parent's social score? With collapsing schools? With kindergarten target practice of "enemies"?

nobody42on Telegram Desktop vulnerability allowed any user's file to be stolen

Not the case when using https://github.com/roddhjav/apparmor.d/blob/main/apparmor.d/...

(I'm a contributor to the repository)

nobody42on On social reality in China

Without even checking your stats, every stat from tightly controlled territories is juked. Only fifth chief statistician under stalin held his position after four previous were educated on how to count with a firing squad. USSR "prevailed against imperialism" the same way, until it didn't.

But when it comes to owning a home in China, you can't do it - because you can't own the land, only lease it. So effectively, anything could happen with your home.

Then, construction in China is a pyramid scheme. Highly praised amount of infrastructure and empty ghost cities is an effect of that [0]. Combine that with rampant corruption (guanxi)[1] and culture of corner-cutting (chabuduo)[2], and you will end with bridges and multi-story buildings crumbling like sand, waiting to collapse at any moment.

All of that with an addition of aging population due to half-witted decisions of delusional, unchecked power (one child policy) leaves China with construction it wont be able to maintain, not even with immigrants, because of recent decisions of tribal nationalism[3][4].

Trends are saturated about China's prosperity and superiority. But if you want actual prosperity - you cant rely on algorithms alone.[5]

With your stats you imply that a person could feel safe owning a home in China. Could you feel safe accounting for all of that?

[0] https://www.youtube.com/watch?v=oWDty6iNcgA

[1] https://en.wikipedia.org/wiki/Guanxi

[2] https://www.reddit.com/r/China/comments/ub6lwn/what_is_the_c...

[3] https://www.youtube.com/watch?v=NUaYNhzEq_E

[4] https://www.youtube.com/watch?v=4Jilv0b27m4

[5] https://www.firstpost.com/world/tiktok-manipulates-content-b...

nobody42on Hister: A private search engine for the pages you visit and the files you keep

And it's a proper way to use computer nowadays.

Apart from high-overhead solutions like VMs and containers, there are seamless and maintenance-free solutions (after the initial setup):

- systemd service hardening [0] [1]

pretty powerful, but it's a blacklist approach - whack-a-mole

- AppArmor [2]

Whitelist, proactive approach. Contrary to SElinux, it's not a programming language, and could be grasped pretty quickly. I made a tool to easily convert AA logs into usable rules. [3]

[0] https://github.com/alegrey91/systemd-service-hardening

[1] https://github.com/desbma/shh

[2] https://presentations.nordisch.org/apparmor/

[3] https://github.com/nobody43/apparmor-suggest

nobody42on Make your first edit to OpenStreetMap

https://streetcomplete.app - basic task-based, on-the-ground, app for Android

https://every-door.app - intermediate on-the-ground app for smartphones

https://rapideditor.org - AI-assisted mapping in browser

https://www.hotosm.org - task-based mapping in browser

https://josm.openstreetmap.de - advanced editor for desktop (this post)

https://www.comaps.app - actually use the map with ability to make minor changes

nobody42on How to debloat your Xiaomi 15 Ultra without root access

https://github.com/Universal-Debloater-Alliance/universal-an...

nobody42on Stopping the smart TV from being used against you

Problem is, smart devices are heavily subsidized in an expectation for future profit from data collection.

nobody42on State of the Map 2026

You can record the track with StreetComplete [0] and upload as a note (records tracks only in foreground). Then convert it to actual path in website editor. [1]

[0] https://streetcomplete.app

[1] https://www.openstreetmap.org

Also: https://wiki.openstreetmap.org/wiki/Upload_GPS_tracks

nobody42on State of the Map 2026

Why you want to enable one of the biggest monopolies on the planet, that gatekeeps innovation? [0] [1]

Lets say you are building a delivery robot. You need not just situational awareness with LiDAR, but also a map for route planning. Will Google give you access for such technology if your innovation is a direct competitor?

If its not a delivery robot, but firefighter robot?

[0] https://www.eff.org/deeplinks/2013/05/google-abandons-open-s...

[1] https://wp-events-plugin.com/blog/2018/07/17/google-maps-api...

nobody42on CoMaps integration with the wider FLOSS ecosystem

OsmAnd is painfully slow, I keep it around just for unique features like transport routes and surface quality.

CoMaps rendering is almost instant and map palette is easier on the eyes.

nobody42on CoMaps integration with the wider FLOSS ecosystem

Yess!

Please make an effort to improve underlying OpenStreetMap dataset:

https://streetcomplete.app - basic task-based, on-the-ground, app for Android

https://every-door.app - intermediate on-the-ground app for smartphones

https://rapideditor.org - AI-assisted mapping in browser

https://www.hotosm.org - task-based mapping in browser

https://josm.openstreetmap.de - advanced editor for desktop

nobody42on VMs won't contain cyber-capable agents

> it found a CUPS server (with a known CVE that had not made it to oldstable packages), but was not able to complete exploitation due to AppArmor.

It's evident that Mandatory Access Control has become, ahem, mandatory.

Both VM and inference engine processes should be confined, at least. There's a project where it's already done for many applications. [0]

Additionally, `lockdown=confidentiality` in kernel boot flags greatly reduces attack surface. (interferes with unsigned modules like NVIDIA drivers) [1]

Then AppArmor profiles could be written for absent applications with a learning-mode tool [2]

Nothing is bullet proof, but these approach significantly reduces potential consequences [3]

[0] https://github.com/roddhjav/apparmor.d (I'm the contributor)

[1] https://madaidans-insecurities.github.io/guides/linux-harden...

[2] https://github.com/nobody43/apparmor-suggest (I'm the author)

[3] https://en.wikipedia.org/wiki/Swiss_cheese_model

nobody42on Arch Linux disables AUR package adoption

It's just entropy.

Favorable environment of Linux distros is an initial phase of technology. This state is gone for years now, AI is just making it evident. Adapt or become obsolete.

nobody42on Ditching Vagrant: VMs with KVM and Virsh on Debian

It's usable (?) as a toy: numerous gui inconsistencies and lack of security isolation [0].

Can't say whether the of lack funding (move to Cockpit from Red Hat) is the reason, or maintainer is just an obstructionist (strictest feature policy).

[0] https://github.com/virt-manager/virt-manager/issues/358

nobody42on LineageOS Statistics

Is this some kind of FUD?

Shady sponsors (if there is any) doesn't matter when transparency is in place. Want to reveal malicious intent? Provide a PoC.

Only hardware that supports bootloader relocking are Pixel devices. There are no others to consider development effort - plain simple. No, you can't use an unlocked device as a daily driver. Up to a minute out of your hands (or triggered reboot from public power outlet, due to outdated Lineage firmware) - and your bootloader is rewritten with one that collect your FDE secret and sends it to a remote server.

Opaque hardware? Which hardware are better and more transparent than Titan and upcoming OpenTitan? Bruteforce protection which considers current ambient temperature - what more do you need?

I can't say anything about VPN affiliation, but everything else is complete bollocks.

nobody42on Organic Maps

"There's no life where data broker isn't needed"

nobody42on CoMaps – FOSS Offline Maps

Every time GrapheneOS "just works" should be mentioned, because some ecosystems are straight hostile to user-controlled systems.

nobody42on CoMaps – FOSS Offline Maps

Its a renderer. It bakes live OSM data once very few weeks.

nobody42on Loupe – A iOS app that raises awareness about what native apps can see

Because exposed, non-private, abused by-default is a business model. The company is incentivised to not provide restricted access - otherwise you can't have a cut from apps revenue. It's defective by design.

nobody42on Loupe – A iOS app that raises awareness about what native apps can see

Outdated, but gives the general idea: https://github.com/nandan-desai-extras/PrivacyBreacher

nobody42on New Nginx Exploit

Memory safety is good, but does not protect from every threat. In this day and age infrastructure operators should familiarize themselves with proactive defenses, MAC: SElinux and AppArmor. It required much friction earlier, but there are more tools to ease the usage today.

https://presentations.nordisch.org/apparmor/

https://github.com/nobody43/apparmor-profiles/blob/master/ng...

https://github.com/nobody43/apparmor-suggest

Disclaimer: I'm the author of both repos.

nobody42on Copyparty, the FOSS file server [video]

Attack surface of this thing gives me existential dread.

nobody42on Debian Extended Long Term Support

> Freexian aims to keep the updates available for individual users and non-profit organizations.