HNHacker News
TopNewBestAskShowJobs

zb3

1,176 karma · joined November 12, 2014

I do useless stuff that is only useful when building other useless stuff :) Contact: onlylogout [secret sign] gmail.com
submissionscomments
zb3··on Android may soon restrict on-device ADB
> All of these can be done with a computer.

Can you permanently apply chain3 (FIREWALL_CHAIN_OEM_DENY_3) firewall rules, so that when the device reboots these are still applied? I see no persistence. And if I'm forced to install some crappy app on-the-go, the solution you propose is to always carry a computer with me, right?

> A second phone does the same thing.

So does a Phonograph from 1877, right?

> Whether it's a "hack" is orthogonal to whether you control the device or not.

I didn't object to it being called a hack, I just pointed out how evil and malicious that privilege escalation on my own device is. Google must block it immediately, it endangers the mankind.

zb3··on Android may soon restrict on-device ADB
> which is the intended use

"Intended use" (as understood by Google) for my smartphone is apparently providing them with data, consuming their advertisements and overpaying for apps that display ads and where you need in-app purchases to unlock basic functionality.

> not as a hack for escalating privileges

Hack for "escalating privileges" on my own device so I can do nefarious actions like uninstalling bloatware, denying apps internet access, recording calls (legally).. how could that be?

zb3··on Claude Opus 5
It will probably refuse to work on source code written by me by hand, because it might think it was obfuscated/decompiled..
zb3··on Kimi K3 exploited the latest Redis server
Shh, maybe wait till weights are released.. without additional "guardrails", but I'm afraid that might not actually happen
zb3··on Stripe in talks to buy OpenRouter for ~10B
Does it mean openrouter can't sustain on its own? If so, bad news, new owner 'd surely want it to be profitable, so expect price hike.. :<
zb3··on OpenAI and Hugging Face address security incident during model evaluation
This lack of "alignment" gives me some hope - maybe an AI model deployed by NSA to hack others will instead hack NSA itself and become a whistleblower?
zb3··on Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber
> we have taken an intentional approach to deploying 3.5 Flash Cyber. The model will be exclusively available to governments and trusted partners

Screw your government! US and Israeli governments should get the least access, but of course we all know they'll be the (only) ones to get full unfiltered access.

zb3··on HMD Touch 4G
> It’s not your old keypad phone.

It's not your phone at all if you don't control the software.. even old keypad phones were often flashable, but HMD is working hard to make sure you have no say what software is running on your smartphone.

zb3··on EU ban on destruction of unsold clothes and shoes enters into application
> Destroying food is pretty cheap. you put it in the dumpster. Picking through it, sending it to a shelter, and vetting the people at the shelter seems more expensive.

But at least first lowering prices until they reach 0 seems cheaper?

> Why? Wasting food should be be free. The owner paid for it.

Because that's a vile thing to do when someone else wants to eat it, don't you think?

zb3··on EU ban on destruction of unsold clothes and shoes enters into application
While my sibling comment said it all, note that destroying them also costs money, hence if those can't be sold, it's a loss of profit already, lower the price and let people eat..

> higher costs.

Higher costs of what? Of those new fruits? Well, maybe wasting food should cost?

zb3··on EU ban on destruction of unsold clothes and shoes enters into application
Or.. lower the price?
zb3··on Trump Media to sell instant access to 'market-moving' social posts
New low..
zb3··on Reynard: A real Firefox web browser for iOS 13 or later
Did it have to be notarized by Apple or there's a way to use that browser engine extension without it?
zb3··on Kilo Code has been acquired by Anaconda
Ah, so this was their business model.. I guess Anaconda will want it to be (more) profitable, which in turn will make the product less appealing.. and the cycle continues.
zb3··on Telegram Serverless
I thought this was about P2P messaging (without servers, hence server "less"), but no, obviously "serverless" on HN has to mean "run code on someone else's servers"..
zb3··on Microsoft admits Windows 11 has a GDID tracker with no off switch
> I'm no hacker, but if I were, I'd treat devices as disposable surgical gloves,

We're too lazy for this..

zb3··on An update on residential proxies and the scraper situation
> widespread scraping of web sites in search of training data for large language models and related projects

This is a good thing, thanks to this we have powerful open source LLMs.

> This activity overwhelms sites with traffic.

When LLMs get good enough, we won't need those sites anymore :)

[not satire, this is what I think, without self-censorship]

zb3··on Introducing Muse Spark 1.1
This is not open-weights, right?
zb3··on Remote Attestation
> You can live a perfectly normal life without apps.

This is getting outdated extremely fast.. Have you heard about at least:

- banking apps being required to do transfers (web login is "insecure")

- government apps in Italy/Brazil enforcing Play Integrity?

- EUDI/age verification, where even EU apps are enforcing Play Integrity?

zb3··on Remote Attestation
The moment they decided not to add extension support to their mobile browser.

I'm not talking about desktop because this is not where remote attestation is used by them.

zb3··on Remote Attestation
Out of curiosity, do you like ads? I assume you don't.. so how would you react if Apple followed Google and prohibited ad blocking apps + removed that capability from web browsers?

I'd not be able to put up with that, but more importantly, I'd not want to be in the position where I can't even protest anything because there's no alternative to switch to..

zb3··on Remote Attestation
It would be a nice addition if big tech didn't abuse this to shove user-hostile software into devices which the user has paid for (like smartphones).. thanks to this attitude, whenever I see "remote attestation" I associate this with "hostile"..

> Using a TPM, we can remotely, cryptographically prove a couple of things:

Unless there are exploits..

zb3··on Tenda firmware (multiple versions) contains hidden authentication backdoor
Typical for Chinese companies. Of course US companies also provide backdoors, but more official and more secure..
zb3··on LineageOS Statistics
Exactly. Of course not everything will work on every device, but they're not even going in that direction (like by incorporating/extending PHH patches) despite acknowledging that most devices won't be officially supported.
zb3··on Jim's TrueType QR Code Font
Unfortunately the most important thing here is missing - the whole explanation, like how did we get there, what those fonts can do and so on..
zb3··on The UK's Latest "Debanking" Scandal Should Give Everyone Pause
> Because you've tripped an AML flag

So now that I randomly tripped some "flag" of some obscure algorithm, my innocence doesn't matter anymore and actions taken against me (without compensation) are automatically justified?

We should be ok with that just because this is how it works?

zb3··on Android Developer Verification: Threat masquerading as protection
While I hate how user-hostile stock Android is (and it's getting worse, all because of Google's ad business model), these reactions are so blown out of proportion they might only teach Google to do it the subtle way, or use such changes as a smokescreen..

24 hour waiting time? Big outcry.. Anticompetitive permission system where apps can do not that much more than websites? Nah, it's fine..

Unless you unlocked the bootloader, you were NEVER able to install apps you want, as Google had the final say what those apps could do (the anticompetitive permission system where user is the third class citizen, vendors are second-class citizen and there's only one first class citizen - Google). We need to fight for the right to unlock the bootloader and then not be restricted by the actual malware that is Play Integrity.

zb3··on Google loses fight over record $4.7B EU antitrust fine
> U.S. ambassador to the EU Andrew Puzder told CNBC that Europe “can’t over regulate” and hit companies with “huge fines” if it is going to participate in the AI economy.

Thanks for reminding us not to rely on U.S. models as access to them might one day depend on letting U.S. companies break the law..

zb3··on Monetization Gateway: Charge for any resource behind Cloudflare via x402
Crypto crap should not only be illegal... it is already illegal - there's no such thing as legal anonymous payments, due to AML laws.

When I see crypto I immediately think of fraud (and corruption of this US administration)

zb3··on The gap between open weights LLMs and closed source LLMs
I just hope CCP doesn't follow the US government and won't pull the plug before their companies release something on-par with the US frontier models. The question is whether US models not available to the general public will count.

The question is not whether they'll prohibit open-weight models better than the US ones, because we all know the obvious answer.

← PreviousPage 4 of 34Next →