timsh

Super cool! I love how the form factor evolved over time - do you think current Robomates will stay the same or change with time?

If it produces no output, does that mean that there's no code that could act in the future? I first acted out of nerves and deleted the whole node-modules and package.lock in a couple of freshly opened Astro projects, curious if I should considered my web surfing to still be potentially malicious

you can simply selfhost Plausible or other not-invasive analytics to see all aggregated info you might need. it will be 100% yours and compliant with all sorts of privacy laws and principles

Im all in for the ai hate, but this kind of hysteria on HN is devaluing all the serious discussions about AI safety, skepticism and regulation.

They literally show you a full-page popup with clear text snd OPT IN toggle. It doesn’t seem really shady to me (or worth 10 separate posts on HN).

That said, if this popup doesn’t appear when you sign up after 28th, that would be a dark pattern and shady stuff. For now it’s just clickbait

This whole online safety act thing gives me goosebumps.

I had lived most of my live in Russia until migrating in 2022 and I’m pretty familiar with what it means when the gov starts messing with digital censorship.

If you’re not aware, it’s getting systematically harder and harder to browse the free web in Russia despite 50%+ of population using “some” VPN app.

And I’m not even talking extremist / anti-russian resources that the government turned against originally, but most of the independent websites that use CloudFlare free tier, for example. Because cloudflare enables proxying and a couple other IP-masquerading techniques by default, to effectively block a single website you have to block the entire cloudflare IP range and DNS - which is >20% of the web.

As for the VPNs, most of the common protocols and frameworks (eg OpenVPN) are already banned + detected via DPI, and people have to get into more and more sophisticated setups like VLESS+Reality (= most of the non-technical people can’t set it up by themselves or even buy a subscription to such thing). “Simple” shadowsocks, originally popularized in China to fight the great firewall are already almost rendered completely useless.

And it will get worse. The gov service which is responsible for blocking has a very high budget + some pretty neat tech to help them cut off more and more ways to bypass the censorship.

This is the future of any state that gets into this game. The future where you might have to become very proficient in networking and use some “shady” stuff like Tor to just read a blog post about Linux.

It doesn’t matter what it starts with - fighting anti-gov propaganda or, for god’s sake, porn (the least harmful thing for the kids in this horrible ai-post-capitalism world that we live in) — once the regulators get the feeling of power over the free web, every lobbyist, organization and party will come for a part of the web that you personally might enjoy, or even earn living from.

A bit off-topic but wtf is this preview image of a spider in the eye? It’s even worse than the clickbait title of this post. I think this should be considered bad practice.

This whole online safety act thing gives me goosebumps.

I’d lived most of my live in Russia until migrating in 2022 and I’m pretty familiar with what it means when the gov starts messing with digital censorship.

If you’re not aware, it’s getting systematically harder and harder to browse the free web in Russia despite 50%+ of population using “some” VPN app.

And I’m not even talking extremist / anti-russian resources that the government turned against originally, but most of the independent websites that use CloudFlare free tier, for example. Because cloudflare enables proxying and a couple other IP-masquerading techniques by default, to effectively block a single website you have to block the entire cloudflare IP range and DNS - which is >20% of the web.

As for the VPNs, most of the common protocols and frameworks (eg OpenVPN) are already banned + detected via DPI, and people have to get into more and more sophisticated setups like VLESS+Reality (= most of the non-technical people can’t set it up by themselves or even buy a subscription to such thing).

“Simple” shadowsocks, originally popularized in China to fight the great firewall are already almost rendered completely useless.

And it will get worse. The gov service which is responsible for blocking has a very high budget + some pretty neat tech to help them cut off more and more ways to bypass the censorship.

This is the future of any state that gets into this game. The future where you might have to become very proficient in networking and use some “shady” stuff like Tor to just read a blog post about Linux.

It doesn’t matter what it starts with - fighting anti-gov propaganda or, for god’s sake, porn (the least harmful thing for the kids in this horrible ai-post-capitalism world that we live in) — once the regulators get the feeling of power over the free web, every lobbyist, organization and party will come for a part of the web that you personally might enjoy, or even earn living from.

hey, maybe you’d never heard of https://ororo[.]tv this is exactly what you describe, at lease for movies + shows…

just in case - not an ad, not affiliated with them anyhow, just use it for years with all my friends and family.

there are subtitles is 20+ languages, direct download links, no ads, and new episodes come out pretty fast (usually <24 hours from official release).

not trying to justify it even a bit, but shouldn't people in his position (actively acting against the US-supported position) use something more secure? Like proton for starters?

I think most of the activists know the drill (not to use gmail/outlook/icloud... in their activism-related communications).

The difference should be only at the consent level, eg you might see less or more “Accept All” buttons with different design or different ToS linked. I don’t believe there’s a real difference on the code or even SDK level based on geo.

I mean, there should be something! Maybe not with this exact list of apps, but the code should be similar to other "how-to-record-traffic" guides.

author here to answer any questions or discuss an app

Been using coolify to host my blog + analytics + a couple personal projects for around 6 months.

Good for 1-click installs that “don’t need” a lot of maintenance, like Ghost, Plausible, etc.

Had some issues with spikes in CPU usage (similar case: https://github.com/coollabsio/coolify/issues/3226) Monitoring is not enough but I just go straight to the container im looking for and htop it.

For not 1-click I still sometimes feel like bumping into a brick wall, and go for a standalone docker-compose setup outside of coolify. Coolify is too high-level to debug small Docker intricacies (or maybe it’s that I’m bad with that).

It’s not included in the list since it’s the stealer itself - it’s not misleading, it says “stealer”/“grabber”. But yeah the fact that it’s out still there is scary

I don't think that repositories presented and named as Malware or Virus should be deleted - they're good for educational and research purposes I guess. I specifically mean those that impersonate as legit programs (if you can call a "free download" or "mod" apps legit).

oops, here comes the price of a nice-looking Reddit embed. next time I’ll stick to a screenshot :) thanks!

agreed, however there are duplicates in that list + same app for ios / android. if I’m not mistaking I did a simple unique count on it (or catch the 2000 number from 404media post)

I don’t know the answer to this, which is why I didn’t mention it in the post. However, I could speculate that these data-broker companies scrape leaked [hacked and stolen] data from various panels and then match records on their end. kinda OSINT for bad reasons.

The “right” answer is not the one I end up with but rather the version sold by the vendor. this is what Apple and Google would say.

this is so precise. I guess we’ll need a global version of https://datacolada.org/ quite soon to not get hit by a bus in every scientific field

MAID = IDFA on ios + GAID on Android [https://www.start.io/glossary/mobile-ad-id-maid/]

I decrypted them all by installing Charles SSL cert on the iphone. This is why the requests seem not SSL proxied.

wow @apokryptein thanks for posting my article here... I'm shocked it's #1 rn. if anyone has any questions regarding the post - I'm here to answer & talk!