HNHacker News
TopNewBestAskShowJobs

subscribed

1,765 karma · joined March 26, 2025

submissionscomments
subscribed··on GrapheneOS Overhauled Default Apps and Secure Clipboard
Yay! Finally, been waiting for it for ages.

Maybe they'll work on the backup now, this *** seedvault is worse than nothing (consistently broken on both my GOS phones, never giving the same results with 2 backups, never giving out as much as the status I could trust)

subscribed··on Shutting down our public encrypted DNS
Terrible. No malware / trackers / ad blocking on 9999.

I hope at least they'll keep these options in their tunnel configuration but if not there's not much sense in keeping their service....

subscribed··on Portal by Spotify cut my Claude Code token usage by 90%
Remember their new algorithm also prefers and promotes Spotify's own tracks they don't have to pay any royalties for and the slop.

Related: https://bedrocknews.com/article/technology/2026/apr/11/ai-im... and https://www.headphonesty.com/2025/01/spotify-ghost-artists-c...

Just skip Spotify at all.

subscribed··on How Fairphone built the Fairphone Gen 6+
Huh, that one is funnier than I thought it could be.

There's absolutely no love for Google in the GOS crowd. None at all.

Now quick TL;DR so you can't pretend you missed something:

- It seems that GOS will support the new, secure Motorola flagships from the day 1. There's been an extensive support from vendor and much energy in the GOS team. There's hope Pixels can be abandoned - GOS exists because there's a secure hardware from a vendor that releases all the necessary patches and offers long support. That's the secret. Please suggest the alternative hardware. - Since you claim they “make up standards”, I invite you to list security features that are in your opinion superficial

- - -

LOL, all your suspicions are already answered, probably hundreds of times, starting from the very document you allude you read, https://grapheneos.org/faq#future-devices

And silly as it might be, chances are that all the devices that will fit these requirements will be supported.

>> NONE > That's exactly my point. Imagine for a second that there's no Pixel. What would GOS do?

Or, imagine your family woke up and turns out you never existed, what do they do now?

They develop the OS because there were secure devices they could develop their OS on. If you discuss based on the facts (I have my suspicions), you probably seem a list of the past devices no longer supported, but something they worked on

> They could either ship nothing at all

If there's no pixel they can't ship for pixel

> because suddenly nothing fits their made up standards,

Are you referring to the modest expectations for the mobile devices holding all the personal information and often access to whole live of the owner?

When you're buying a lock or alarm system for your home, what are your expectations? To me it seems you'd settle for the “absolute worst, something that can be bypassed with a butter knife, can't make life of the criminals too hard”

>made up standards,

Which one are made up? I'd like to see which one would you like to go.

- Making patches available quickly? Firmware patches? Frequent AOSP code releases? - 5+ years of updates? Modern Linux kernel? - Isolated radios, hardware secure element with throttling, protecting from attacks known from 90s? - Full verified boot support with A/B slots, rollback protection (so the attacker cannot trivially just flash the ancient, vulnerable firmware), custom keys and relockable bootloader? Absolute bog standard, yet still not provided by MOST android hardware vendors - Or, I don't know, MTE? Disk encryption? Protection for brute forcing disk encryption?

Which ones are “made up”, can you list the exact ones?

>or they would have to lower them to fit reality.

what reality? Vendors that allow, in 2026, to brute force PIN at the full speed? Or those who do not support custom signing keys, so the verified boot cannot be turned on? Or maybe these who do not offer relockable bootloader at all? Or maybe vendors known for delaying critical patches for months or don't offer any patches AT ALL (like one vendor still selling Android 15 devices, 6 months after the release of 17, when it's well known most bugs don't get backported patches)?

Can you give us a list of 2-3 modern devices that should have official GOS support?

>The standards are there only because the Pixel exists to fit them.

And this is a barefaced lie, need to call a spade a spade.

>I think it's highly suspicious that they've set their demands up so that only one device fits the bill,

Also lie, and a lazy one, it's 21 devices today. Oh well, I'll be charitable - maybe you just didn't check.

>if this wasn't FOSS people would be calling up anti-trust and asking how much Google paid them for regulatory capture.

By gods, what regulatory capture :D Do you just smash words together? Can you explain how GOS does, eeee, regulatory capture? :)

Oh, or maybe you're saying GOS forbids anyone from literally forking their repos and building own images?

What is that GOS does that stops you from adapting their releases to your own insecure, unpatched device? I really need some specifics.

>Similarly, if there was a device that's more secure than the Pixel, would GOS support both, or reowise their rules so it only fits whatever they want? I guess we'll see once the Motorola lands.

And this is the passage that tells me you're not discussing in a good faith. Work with Motorola on their flagships (plural) are well advanced, the expectation is they will be supported from the day of the release.

>But no, I'm saying using Google hardware is directly financially supporting the closed ecosystem of corporate control they're trying to fight against.

What? :D OK, so how much of the revenue Google has from the Pixel phone sales and what percentage of their revenue is that (I'm especially curious how it looks like next to ad earnings (direct and admob, etc), Google Cloud and Search.

What is the value of this argument? In % of Google revenue or B USD.

>And if we do go down speculation lane

No, not we, you do.

>I wouldn't find it impossible for Google to build in their own hardware level backdoors.

And THIS precisely is why GrapheneOS standards are so high, so if the crooked engineers or hardware exploits exist, the device still remain as secure as possible.

At this moment we either have to choose between a remote possibility of the highly sophisticated hardware backdoors that might be exploited by a nation state, or a hardware that is so insecure every thief can break into it in minutes.

I know which one I prefer. Which one do you want everyone to prefer? Seeing you're vocally against GOS on pixels, why do you insist on everyone moving to much less devices?

>Given that Snowden is still alive, I suppose it's unlikely,

And now we're at Dan Brown level of suspense

>but the conflict of interest is clear as day here.

Only if you've been staring into the sun for too long.

None of your allegations are new, they've been extensively addressed already.

subscribed··on How Fairphone built the Fairphone Gen 6+
At the moment there is no other hardware manufacturer making similarly secure android phones.

*NONE*

There is no android hardware coming close. If there is, please name it. As far as I know it's only some unspecified, upcoming Motorola flagships.

If you call the unwilling, pragmatic choice an "intense hypocrisy", it's pretty clear to me you're simply driven by emotions and tribalism, that the facts don't matter.

Are you saying that using Google hardware equals using stock Google os?

You must be a little more.... Coherent with your metaphors :)

subscribed··on How Fairphone built the Fairphone Gen 6+
There are devices meeting these basic standards right now, and the entire family of them, no less.

GOS are vocal about safety and security of all the devices, not just seriously insecure Fairphones, and this article is about something different altogether, that's misinformation they've been hit with several times.

Fair criticism is fair, but yours is fabrications.

subscribed··on Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year
More like class action lawsuit, $500m settlement, $300m for lawyers and $0.50 for every victim.
subscribed··on Mom gets 6-month suspended sentence for letting 5-year-old walk to the pond
This is such a fine sarcasm, chef's kiss!
subscribed··on Why has Peter Thiel moved to Argentina?
Isn't where all the Nazis go?

:)

subscribed··on UK's Online Safety Act has made 'absolutely no difference,' kids say
It was never intended to work. Fake reasoning, classic lies, rejecting any measured critique.

It's a heavy boot of the authoritarian regime in the door.

subscribed··on Astronomers Detect a 10-Sided Structure in Saturn's Atmosphere
Why is that _weird_? That implies recorded data / measurements going against the proven and tested theories, or the _design_.
subscribed··on Google Antigravity TOS: 3rd party usage can get Google account suspended
And this, dear Watson, is why we never use Google services for anything serious.

And we tell our children the same.

subscribed··on Google Antigravity TOS: 3rd party usage can get Google account suspended
> Google and Apple should be legally mandated to federate with nation state identity systems.

With which states?

I'm I'm a citizen of two and live in the third, potentially having eSIM of the fourth?

subscribed··on Reverse Engineering Unknown File Formats with ImHex
Come again?
subscribed··on Reverse Engineering Unknown File Formats with ImHex
I would start with something like this: "Today's session will be a bit different and very exciting to me.

I have this game, Game Name exact version, which I love and I logged hundreds of hours in it, however there's this little detail that bothers me like a pebble in a shoe: (details of the problem here). I think that it's all encoded in the file (file name), but it's binary and I have no idea how to access it :(

Could you perhaps guide me how to analyse and "decode" this file so I could later change this behaviour? I don't have any experience with reverse engineering but I'm excited to try.

All game files are in /full/path/to/the/game

Thanks!"

Works for me.

Be excited, frame it as a learning opportunity, make sure it's obvious its for your own enjoyment (not for distribution).

subscribed··on Play Store blocks AuroraStore, hurting GrapheneOS users
Try installing an app that requires Play Store Integrity, say, ProShot by RiseUp Games.

Braindead dev claims this is to limit the "piracy" and bug reports, nevertheless it's either Aurora or APKMirror.

subscribed··on FBI Probes Service Selling 153M+ Drivers Licenses
It must be freely given anyway, but its still illegal to keep unless proportional and necessary for the stated purpose.

If the purpose wasn't "we keep to resell it later" it's likely illegal.

Well, "illegal" given that this type of criminality is pretty much ignored (I've been fobbed off by the regulator after pointing a systematic law-breaking by a $company many many many times. Still better than not having this).

subscribed··on AI-Written Code Is Still *Your* Code. Are You OK with That?
Okay, and why is that a problem?
subscribed··on AI-Written Code Is Still *Your* Code. Are You OK with That?
My tiny two pet projects I keep developing with LLMs taught me how useful TDD is - I'm not a software engineer so I've been never formally introduced to these, but now I learn the best practices.

So in consequence I have less bugs in this code than what I could achieve myself, and as a second outcome of these is a solid workspace templates that make it faster and easier to get another small thing up to speed, the way that's good and "me". And the very short leash, sandbox and hooks make sure I learn a lot in the process too.

subscribed··on Lawmakers added $1 to car insurance policies. That money paid for Flock cameras
They already are, including in the countries that penalise carrying anything for the self defense.
subscribed··on Police officer arrested after tracking ex-girlfriend on Flock over 2k times
It's not just cops.

Flock employees themselves have allegedly watched a pretty questionable stuff, for example kids' gymnastics room: https://www.gadgetreview.com/flock-safety-employees-watched-...

subscribed··on Police officer arrested after tracking ex-girlfriend on Flock over 2k times
LOVEINT strikes back, eh?

Who watches the watchers?

Abuse of the privilege should be harsher as the privileges grows.

subscribed··on Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded
I don't understand your comment - did you want to say that hardware security is overrated or that security and microarchitecture don't mix?

Or maybe that security doesn't have a practical application?

subscribed··on Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded
I'm also interested in the security features of this new CPU. Where doesn't it sit compared to Apple and ARM (Qualcomm, Titan)?

Modern processor without memory tagging for example is a little..... dated, given how much the new AIs accelerated the vulnerability discovery in all the apps and system components.

subscribed··on ESP32 Firmware Development with Docker Sandboxes
Naah, those who understand, do understand.

I'll do something much better, I'll stop feeding you with attention.

subscribed··on ESP32 Firmware Development with Docker Sandboxes
No, at the very least it can help surface a trend or get the movement going.

Everything happened for the first time sometime.

subscribed··on $40T Debt, 6.7% Mortgages and $5 Diesel
The same Dems quietly complacent in the ever-accelerating rot and corruption? The representatives or givernors not using tools at their disposal to keep the crooks and rapists exposed and in the spotlights? Or those who keep supporting the status quo (like American war on Iran or American support for the ongoing genocide of Gaza and ethnic cleansing of the West Bank) against the very clear preference of the Americans?

I don't think these Dems are going to do particularly well. If anything they shown how they work hand in hand with Republicans against the best interests of the country.

At least this is my understanding of the state of tge affairs, seeing how the "traditional Dems", supported by big businesses and AIPAC lose in the primaries.

I cross my fingers for the Americans - you have enough examples that the politics with heart and compassion works the best for you, even if another billionaire cried out in the dark they're stopped from becoming a trillionaire.

subscribed··on ESP32 Firmware Development with Docker Sandboxes
Can't think of any but public shaming is warranted.
subscribed··on AI companies destroy physical books – let's scan rare books before it's too late
Copyright law didn't force them to torrent terabytes of books what they did and got caught doing so.

I'm not convinced they destroy the books to obey the law, lol.

subscribed··on AI companies destroy physical books – let's scan rare books before it's too late
But you don't have access to this copy. The digital copy is removed and all you get is paraphrased content. Some frontier models have been explicitly forbidden from recalling exact quotes in system prompt.

It almost seems like you're suggesting that having Claude generate a paraphrased book is as good as having the original book but i don't think that could be your intention?

← PreviousPage 7 of 34Next →