HNHacker News
TopNewBestAskShowJobs

xinayder

843 karma · joined April 30, 2016

submissionscomments
xinayder··on I'm Archiving Picocrypt
Tell that to C-level executives. They don't understand this, and until then, we, developers, can only be afraid of losing our jobs to a mediocre AI.
xinayder··on More honey bees dying, even as antibiotic use halves
This is so interesting. A while back I took an online course about native bee species in Brazil. We have more than 700 different species of stingless bees.

There's a few interesting common species whose response to being threatened are worth mentioning. The jataí (small, wasp-like bees) run away to hide when threatened; the arapuás (small, completely black bees) try to bite you. The mandaçaias have a similar behavior to the jataís.

And one thing I learned as well is that we have a native bee species called "lemon bee", which they are predatory bees that invade hives and release a substance that smells like lemon (hence the name), which intoxicates bees in their hive. The attacked bees either leave their home or die, to which the lemon bees just invade their colonies and steal all the food. They literally make a gas chamber inside the hive.

I am fascinated by the amount of bee diversity we have in Brazil. If anyone's interested to check them out, search for "melipona".

xinayder··on Brazil central bank to launch Pix installment feature in September
And it was only breached because criminals approached an IT guy from the affected bank and offered him R$5000 to hand out the passwords used to login to their internal systems. Once the hackers were inside, they had control of bank accounts and started moving money around.

So no, it wasn't a breach to BCB, neither it was caused by system insecurity, but rather, human error in a downstream implementation.

xinayder··on Tencent Releases Hunyuan World Model
This looks really cool. I only have two remarks:

- the examples showing someone controlling the character using a controller are fake, you can see the joystick motion doesn't correspond to what's happening in the 3D world

- Tencent says you can integrate this model in your workflow, but what would it be used for, since it uses its own file formats? Is it mainly for conceptual art, or can you actually make it generate a BSP map, for example, which you can import to Hammer (Source Engine map editor) or TrenchBroom?

xinayder··on The EU could be scanning your chats by October 2025
What is misrepresented?

It's not "only Denmark". There are just a handful of countries in the EU opposing Chat Control, not because they care about privacy.

xinayder··on Upcoming coordinated security fix for all Matrix server implementations
I use Firebase (GCM) and it also doesn't work. But I'll try using ntfy next.
xinayder··on Upcoming coordinated security fix for all Matrix server implementations
I've been using it for over 2 years now and I agree there's a spam problem on public chatrooms.

However, what's making me want to quit is that for more than 3 months now, message notifications have been completely broken on Android (Element X and its forks), and there's no fix for it. I completely miss out on important things and now have to build the habit of opening Element X once or twice every 15 minutes, so that it loads the messages from the server, and shows what people have been messaging me lately.

I no longer get message notification details on my phone, instead a generic "you have new messages" pop-up. There are at least 6 issues on GitHub detailing the same issue, but there isn't a fix and it looks like this is not a priority for the development team right now, even though it makes Element X practically unusable.

xinayder··on Code highlighting extension for Cursor AI used for $500k theft
So the $900M product runs on volunteer-ran infrastructure, without giving anything back to the Open VSX registry?

Seems like software development industry in a nutshell: multi-millionaire companies freeloading on volunteer work :)

xinayder··on Code highlighting extension for Cursor AI used for $500k theft
Do you use devcontainers or a custom-built solution? Would you mind sharing how you do your dev work using containers? I've been looking to try it out, and this attack might be the tipping point to where I actually do that.
xinayder··on Code highlighting extension for Cursor AI used for $500k theft
How different is Cursor to VSCodium?

Nonetheless, I think this is more a vulnerability in the Open VSIX registry side, than Cursor AI. If anything, the forks and VS Code should block/sandbox extensions by default, or have a granular permission system to allow users to consciously choose whether to allow an extension to use network resources or not.

xinayder··on Top Most Secure Smartphones of 2025 to Keep Your Data Safe
I open the website with uBlock Origin and there's a flashy, animated cryptocurrency ad on the header.
xinayder··on Bitcoin's Security Budget Issue: Problems, Solutions and Myths Debunked
I like that no one brings up the question that Bitcoin is not really decentralized. Most of the Core devs are paid by a company (iirc it was Blockstream but might've changed), and ultimately, the paycheck they receive dictates which direction the most used Bitcoin wallet should go, which dictates the direction of the project as a whole.

There were several attempts of merging important BIPs, which were rejected because some developers thought it wasn't in line with the direction their employer wanted.

xinayder··on How not to lose your job to AI
At a glance it seems like the post is really "use AI if you don't want to lose your job to AI", which made me want to stop reading. Can anyone confirm if they felt the same?
xinayder··on Git 2.50
Official release notes: https://raw.githubusercontent.com/git/git/master/Documentati...
xinayder··on WhatsApp introduces ads in its app
Has anyone reported this as a DMA and GDPR violation to the EU? They're using personal data to show personalized ads, without an option to opt-out entirely, and I'm pretty sure they will offer the same shitty deal for EU users: either pay for less intrusive ads, or sell your data for personalized ones.
xinayder··on Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass
How is secure boot stopping them from overwriting my kernel image on the first place? Won't it just report that the kernel image was tampered and thus you cannot boot to the system?

It does nothing to prevent overwriting the kernel image.

xinayder··on Android 16 is here
The trend nowadays is to remove icons, because UX designers think it makes the control too bloated and users don't perceive icons anyways (joke).
xinayder··on Android 16 is here
It used to be better when Material Design came out. It was more rectangular, looked better. Take a look at Android 10. It was much more "expressive". Now, it's just round, as if they're trying to copy the trend set by Apple.

I updated my Galaxy S21 to Android 15 and I hate it. The new design occupies TOO MUCH space, I could check almost all my notifications (I only have 3-4 apps that send me notifications) with a quick scroll from the top, but now a single notification occupies like 1/5th of the screen, making it much more difficult to take a look at all my notifications at once.

The other stupid thing, they moved the media playback to the quick settings panel and made it a tiny widget on the lock screen, on the bottom, where you barely pay attention to it. I removed this widget thinking it would restore the old functionality, but I was wrong. Now, whenever I listen to music, I cannot control playback from the notifications panel or the lock screen, I must manually open Spotify and control it from there.

I don't know what drugs UX designers are on but I can safely say this is not convenient for the user and we didn't ask for it.

xinayder··on Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass
If an attacker has root privileges to my Linux system, what's stopping them from overwriting my Linux kernel image in my boot partition with one that has backdoors?
xinayder··on Material 3 Expressive
I have One UI 7. Most screenshots I've seen from Android 15 looked like One UI 7, though, so that's the reason for comparison.
xinayder··on Material 3 Expressive
They managed to connect me to an emotional level that I just want to throw my phone away and get a phone that supports postmarketOS. I despise the new designs so much, they are so useless and try to take away important information on the screen for absolutely no reason. While making everything round and trying so hard to copy iOS, but making a shitty job at it.
xinayder··on Material 3 Expressive
The update to Android 15 was TERRIBLE. I updated it the past days, it's literally a bootleg copy of iOS interface. I despise it so much, much more than the move from Material Design to Material You. Everything occupies so much space, there is less information available for you, and important things like changing the music in your lock screen is confined to a tiny space.

At least they got the Expressive right in the name now, Material Expressive (HATE).

xinayder··on 'ProtectEU' security strategy: a step further towards a digital dystopian future
Also known as EU Going Dark, just a rebrand since ChatControl and GoingDark got traction. They expect people to forget it quite easily.
xinayder··on Brazil's government-run payments system has become dominant
Do you have a guide on how to use it or what services accept crypto for this purpose?
xinayder··on Brazil's government-run payments system has become dominant
In a sense it didn't change much. It's not like the government can access your transaction data all the time. They still need to go to court and request a warrant for that, to break your bank secrecy.

It's not different from what we had before.

EDIT: it didn't actually change a thing. Banks are still required to maintain transaction data private, and agencies, including the government, MUST obtain a warrant to break transaction data secrecy.

xinayder··on Brazil's government-run payments system has become dominant
And the Receita (IRS) app has an option to pre-fill the tax declaration form, which works wonders most of the times. It requires a manual review to certify that everything is correct, but from the times I had to declare my taxes (I'm living abroad so I don't have to do it anymore), it was as easy as loading the pre-filled details and just verifying if everything was correct.
xinayder··on Brazil's government-run payments system has become dominant
I can't find the details of the UK system, but it's not "monopolized" in Brazil. Perhaps due to the fact that the infra is provided by the Central Bank, and banks choosing to implement Pix support must implement the Pix APIs in their system.
xinayder··on Brazil's government-run payments system has become dominant
Fun fact, before Pix, every bank was trying out different digital wallet solutions. It was a pain to go to a store and realize they support Bank A's digital wallet, which, not surprisingly, doesn't interoperate with Bank's B.

I went to buy açai at a shop one day and didn't have cash. Only way I could pay was with Itau's iti, but I only had money in my PicPay account.

Pix was a godsend that saved us from the thousands of different, non-interoperable digital wallets the fintechs were creating.

xinayder··on Brazil's government-run payments system has become dominant
I'd much rather let the Central Bank handle my instant payments, than Meta.
xinayder··on Brazil's government-run payments system has become dominant
This is the difference in Brazil. Because it's ran by the Central Bank, there are some fraud protections. For example, if you receive money by mistake, you have the option to return a transfer to the original sender. And if you don't do that almost immediately, the sender can actually sue you and get the bank to revert the transaction (once proven you've deliberately chosen to not return the money).

There are also other security features tailored for the crime aspect of Brazil (since some people argue Pix increased the number of flash robberies); you can limit how much money you can transfer via Pix during day and night time, and even request a second confirmation before the transfer actually goes through. And if you prove you've been robbed, the bank can easily revert the transaction and you can get your money back.

← PreviousPage 5 of 15Next →