Hacker News Reader

ycombinatrixon Apple's git still trusts the compromised eMudhra certificates

Buddy, 3 letter agencies don't need these weak keys, they straight up own root CAs.

ycombinatrixon Go will reject certificate chains containing eight distrusted SPKIs

Web of trust required a lot of work by users and was pretty bad in practice. This isn't that.

This would effectively be the same "root CAs come pre-installed" but they would be notaries rather than root CAs, with a predefined trust policy (maybe minimum of 2 notaries per leaf certificate)

Users would still just see a green lock icon same as before, no action needed.

ycombinatrixon Ofcom concedes defeat in 4chan case

The rest of them presumably wanted to continue doing business in the UK & did not want to IP-block the entire country.

ycombinatrixon Go will reject certificate chains containing eight distrusted SPKIs

https://en.wikipedia.org/wiki/Convergence_(SSL)

shame it wasn't adopted. rent seeking CAs would never go for it.

ycombinatrixon Character.ai has initiated voluntary Chapter 11 bankruptcy

Depends on the type of bankruptcy.

ycombinatrixon The baffling intelligence of a single cell (2024)

Wow you weren't kidding. It is really well done.

ycombinatrixon Fingerprints are the new cookies

There are projects that do this already e.g. https://github.com/lwthiker/curl-impersonate

ycombinatrixon A single license fee of £100k.00

You can still get arrested for it in Missouri: https://missouriindependent.com/2022/02/11/prosecutor-isnt-p...

ycombinatrixon Texas city demands $2M for public records on Flock usage

That's such an insane response from the government. Why the hell are they printing, cutting and photocopying emails?

ycombinatrixon Show HN: Google Maps Scraper MCP

ycombinatrixon Ask HN: Email leaked while traveling abroad?

I don't get spam from a variety of languages.

The only foreign language spam I got was from Pokemon Go after I played it while visiting France & Spain. I received French and Spanish emails from them for years.

ycombinatrixon 192GB Framework Desktop open for pre-order

Wow. Having to disassemble & reassemble your entire laptop for that sounds annoying as hell.

ycombinatrixon 192GB Framework Desktop open for pre-order

What was the laptop debacle? I know people were upset over sponsoring DHH.

ycombinatrixon Ask HN: Email leaked while traveling abroad?

Doesn't explain why the email was in German.

ycombinatrixon Raspberry Pi blocks changing RAM chips

like what Android shows when the bootloader is unlocked

ycombinatrixon Apple introduces M6 and M5 Ultra

How did it become sluggish?

ycombinatrixon IPFS Maintainers Winding Down

developers, not end users

ycombinatrixon Firefox is now the last major browser that still supports uBlock Origin

>Anyone can build a custom extension to do anything an extension is allowed to do

Yes, that's why google moved to manifest v3 and extensions can't do as much.

ycombinatrixon Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot

run a redlib instance, bots hit these hard: https://github.com/redlib-org/redlib

ycombinatrixon Cops Used Flock to Track a Man Across State Lines for a Pretextual Weed Search

No, I saw you take the $5. Good luck convincing the police you didn't.

ycombinatrixon Web Scraper Bright Data Sets $1M 'Bug Bounty' as Industry Scrutinized

Paywall

ycombinatrixon Show HN: Fonts.Free

Nice. I like the submission page too, adding fonts to Google Fonts is a nightmare.

ycombinatrixon Kim Dotcom Loses Court of Appeal Bid to Block Extradition to the U.S.

This whole saga has been insane. New Zealand is a vassal state.

ycombinatrixon All phones sold in the EU to have replaceable batteries from 2027

one step at a time

ycombinatrixon Hyperlinks in terminal emulators

Not true. At the very least it can leak your IP address. There's a reason whatsapp & other messaging services have an internal proxy for generating web previews.

ycombinatrixon UUID package coming to Go standard library

especially when they don't depend on libc.

ycombinatrixon Remotely unlocking an encrypted hard disk

I meant "just use dm-verity" as in "don't do full disk encryption"...

ycombinatrixon Remotely unlocking an encrypted hard disk

FYI your decryption key can be MITMed during this process by anyone with physical access to the system, which defeats the purpose of encrypting the disk in the first place.

Just use dm-verity for remote servers.

ycombinatrixon Emails to Outlook.com rejected due to a fault or overzealous blocking rules

How is it not a disguise? It means you can't block marketing emails without also blocking the legitimate support emails.