HNHacker News
TopNewBestAskShowJobs

subscribed

1,765 karma · joined March 26, 2025

submissionscomments
subscribed··on US Military's cyber command unit grapples with cluster of deaths by suicide
Cool things are not necessarily illegal. You ever done anything cool in your life?
subscribed··on Improving GPT‑5.6 Sol in ChatGPT, expanding GPT‑5.6 Luna access for free users
Also had a terrible experience with Gemini with codibg: it would just show me trimmed diff (to show the changes it made), then........ commit the actually trimmed contents to the original files, discarding everything that was in between.
subscribed··on Now you can securely link multiple phones to one Signal account
Why Linux though? Which one? On what phone?
subscribed··on A year of fighting scrapers on my 1.5 million-page website
Ibwas looking for something specific late last year, and I made three bookings (ca €500 each) for places found on the $site with the $bot.

I didn't ask the not to use this site, my query was broad and complex and would take me days to do it myself. I wouldn't

I'm quite certain they earn a hearty commission off it, and I think it was mostly possible because the site was "friendly" to bots. Otherwise I probably wouldn't choose the site because it's never any of my top choices when I look for this myself.

So, maybe you monetise it like this? You asked, I answered. Doesn't fit every site or business profile.

subscribed··on Welcoming the Nepalese Government to Have I Been Pwned
OK, I have no idea what are you on about, your vague generalisations attempt to throw the entire effort of this branch on me, so I'll just pass, it's not worth any more of my time.

Also because of the other reason.

subscribed··on Welcoming the Nepalese Government to Have I Been Pwned
I'm talking specifically about this specific kind of crime, don't generalise my statement.
subscribed··on Welcoming the Nepalese Government to Have I Been Pwned
Police officers help for free.

If they find during an investigation that you're avictim of a crime they WILL tell you where they found the data and what was exactly in it.

Troy? He'll basically resell you your own stolen data, because that's the only way to know if the password leaked was 20 years or 1 month old, and to what services exactly. If you're leaked in infostealer dump, you'd learn from the police what was associated with your email in this dump, so you know to snort if it was only empty password store from your Firefox, or financial data exposing you to ruin.

Troy? Oh, he can tell you that too, but for a price. He'll sell you your personal data back.

(I've looked far and wide and there doesn't seem to be ANY way to list as much as the domains of the email/password dumps without paying for access to the API)

subscribed··on On non-rooted Android 17, ADB uninstall of system apps fails
I love rethink but stopped using it on my up-to-date GOS. It randomly stops and no app can reach the internet (or me), randomly it doesn't obey the split tunneling rules or doesn't forward the connections to the tunnel at all (thus blocking all internet if wg proxy is enabled), and couple of other things.

I'll check Rethink again because all in all it's a fantastic software, just doesn't work very stable for me.

subscribed··on On non-rooted Android 17, ADB uninstall of system apps fails
It's pretty trivial to get your own almost-GOS with root. The official GOS release simply doesn't support it in the production images.

Why not root has been explained many times and you actually either want the official image with no root exactly because of the benefits, or you want custom image because you don't need these benefits.

For location faking Mock location works on GOS,l.

I see much bigger problem with not having a reliable backup than not having root.

subscribed··on On non-rooted Android 17, ADB uninstall of system apps fails
If this is your stance it's trivial to have your cake and eat it. You can easily build your own GrapheneOS based image, which will then be unable to use attestation (because your own keys you'll use for the secure boot won't match).

And I'm not trying to be snarky, if that's the only thing, it's solvable right now. Everything else will work.

And concerning "you can't just buy a device and install is" - android and iOS are far more secure than any desktop os, and both pixel/iPhones are far more secure than any computer (or any other phone as well (we'll get the third one next year)). GrapheneOS actually explains "whys" in their hardware support faw section.

Generally maintaining an os is a hard work, so that perhaps explains why there's not many mature offerings.

subscribed··on The title cards in Blade Runner are amazing
Oh noes, all the poor people who taught themselves how to speak English from books and movies, not the street or school.

Third category, behind a crafty LLMs.

subscribed··on Atlassian Rovo Exfiltrates Data, Bypassing Controls
And that works pretty well for me. Jailbreak in depth :p
subscribed··on Atlassian Rovo Exfiltrates Data, Bypassing Controls
I read it as an intentional exfiltration.

It's incredibly hard to block all rovo on Atlassian pages. I tried adblock, it failed, I settled for the custom chrome plugin. And yet, every once a while a new way to disturb my peace shows it ugly head.

So why intentional, again? Because it's impossible to disable it until you have a very certain, very expensive plan.

Nonconsensual data exfiltration.

subscribed··on Cloudflare Workers and Containers now support inbound TCP connections and gRPC
That's brilliant. Workers proved priceless for me, now it's going to be even better.
subscribed··on Don't be a meat proxy
Of course, you've got this one sensible part right (IMO). But there's other sensible part you seem to have missed: it's also rude to send the LLM output to someone else without reading.
subscribed··on Moonshot’s Kimi uses 20k Nvidia chip cluster from Alibaba
Try getting something new from Arista, Juniper or Fortigate. Lead times are sad.

(new in terms of the most recent models, not just "something with X number of ports")

subscribed··on Google is actively hiring someone to save the world from AGI/ASI
It's exactly like UK's Labour Government government once did -- they hired David Nutt, a top "neuropsychopharmacologist specialising in the research of drugs that affect the brain and conditions such as addiction, anxiety, and sleep", as a head of the Advisory Council on the Misuse of Drugs, and then immediately fired him after he criticised making possession of cannabis penalised harsher.

He in effect said that evidence doesn't support it, that the move is politicized and that he won't be lying to the public about harms.

https://www.npr.org/2009/10/30/114335303/u-k-drug-adviser-fi...

http://news.bbc.co.uk/2/hi/uk_news/8334774.stm

So this is like that: you keep hiring until you get the one that says what you want. This is how the mass media always managed to get a "climate emergency sceptic" - in the sea of 99% scientists agreeing to the point there's also some kooks ready to present their case for money.

subscribed··on Google will expand age checks on Android worldwide till the end of the year
It's okay that it doesn't match your experience but it's also a case that you shouldn't extrapolate your expectations and experience onto others.

There's plenty of overworked, stressed or ignorant parents who really wish they could care or they don't at all.

"should have enough digital literacy" doesn't survive reality check - reportedly 12-26% adults in the UK (% depending on the country) is reported to have very poor/lack of basic literacy skills. 25% approximately are functionally illiterate.

Reportedly (I'm not an American), 36 million of US adults are functionally illiterate; 43% cannot read a simple job application; 41% of low-income households lack digital literacy skills.

Those are only two prominent examples. More developed countries (especially in Europe) will fare better, many countries will fare much worse.

I think your heart is in the right place but the reality stays in disagreement.

subscribed··on Our position on open-weights models
Single counterexample for single counterexample: Belgium's Leopold - not sure if Western colonialism is so much better (and notice I didn't even bring up "western India")
subscribed··on GrapheneOS protections against data extraction from locked devices
Yeah, it's planned for years and years at this point.

Sure I know there are more urgent priorities but at the moment there is no backup for GOS phones. It only works for some people in some situations. For me it never reliably worked, ever.

subscribed··on GM Backs Sodium Ion Batteries for U.S. Grid Storage
That's quite staggering.

First shutting down working and safe nuclear power plants in favour of coal, then that.

At this rate I start wondering who actually makes this policy, at most turns exposing the country more to the energy markets issues and making them more reliant on OPEC and Putin.

subscribed··on Bitchat is now on Radicle
Maybe. I have bitchat installed and on in the rather large city. I have yet to see another person on :)
subscribed··on Bitchat is now on Radicle
Thanks, in a bit, I'm browsing therapistfinder.com right now.
subscribed··on UK AISI / Caisi Preliminary Assessment of Kimi K3's Cyber Capabilities
Of course, I'm not claiming PRC is a friend of the world. And I agree with your last point, however I don't think it's feasible to self-host Kimi-3 sized inference.
subscribed··on Android May Soon Restrict On-Device ADB
In the bikes they're mostly aimed at preventing tank slappers/death wobble. I have a dampener on my bike myself, but it still allows me to countersteer as harsh/rapidly as I want, and that means crashing into a railing or a cliff wall if I overshoot.

No technology prevents the crash, they just lower the chance of it happening accidentally (like, say, ABS or DCT). I can remove almost all of the guardrails on my bike choosing more aggressive riding mode.

Countermeasures to the accidentally allowing a malware to "do something" already exist and were described in the original article. The comment I was responding to wants a removal of the whole capability, hence my cases.

subscribed··on UK AISI / Caisi Preliminary Assessment of Kimi K3's Cyber Capabilities
But also the American models (case in point: Fable) refuse to engage in *defensive* activity, so anyone who's not the American government or one of the handful American companies has no choice but to turn to Chinese models to defend themselves.

Not everyone is an attacker, but now the public discourse is "but the evil Chinese will break everything" - yeah, that's because no one is permitted to do vulnerability checks of their own software or infrastructure with the capable models.

Security team in my company is salivating seeing the news, because we have a fighting chance to find and patch many vulnerabilities we didn't previously notice, thanks to the Chinese models.

subscribed··on Bitchat Is Now on Radicle
Yes, it's in the first paragraph of https://bitchat.free/.
subscribed··on Bitchat is now on Radicle
Yes :)
subscribed··on So Reddit has decided that plain HTML is unsafe
I know it was 3 days ago, but I just got an additional data point.

In the Amazon app, the same I normally use, on my normal account, I used Switch Accounts option, and proceeded to create a separate, additional Amazon account.

I entered a different, new email address and my real name.

Amazon happily sent me a verification email, I entered the code. I was then prompted to enter a phone number, I did so (it's a number I never used with Amazon (to my second phone)).

Amazon then requested me to enter the code it sent over on *WhatsApp*. I tried to take a screenshot but it came out all black.

I don't have WhatsApp account with this number.

There was an option to resend it through a normal text message but first it sent out a code on WhatsApp. That should never be a default.

subscribed··on Android may soon restrict on-device ADB
There's a vulnerability in my bike - when I push my left handlebar hard forward when riding down a road, I can crash into a pillar.

I think a possibility of knowingly pushing the handlebar should be removed from me, just in case. After all I could do it.

And while we're at it I just realised my car has a similar vulnerability, but triggered by a slightly different mechanism, but the effect is exactly the same, I can crash into a pillar.

Edit: oops, I just discovered that if I have a banking app installed on my phone, then tap my screen in the specific places, enter several numbers, including the number I receive in text, suddenly I lose all the money.

That's staggering!

← PreviousPage 9 of 34Next →