News for hackers. Stuff that matters.

Citizen8396

You'll only get the most critical security updates, and only up to a point.
You can block Apple Intelligence and Siri using Screen Time. Configuration profiles and the typical user-facing settings are not likely to go anywhere either.
If you have a Mac, you can supervise devices locally. macOS itself doesn't really have restrictions on payloads (except for Declarations, which mostly are sent by an MDM server). Both Apple Intelligence and Siri can be blocked by Screen Time anyway; it's basically a user-facing interface to apply the same restrictions.
"Somehow" is addressed in my comment: https://news.ycombinator.com/item?id=48479348
OFAC sanctions are far more nuanced than what you make them out to be. Very often "general licenses" are carved out for providing IT services or technology to individuals for personal use. The purpose of this is for censorship circumvention, which often supports American interests abroad.

This is not something that you apply for; a general license already applies to everyone. The legalese or restrictions companies use exist because they cannot (or will not) validate everyone is who they say they are. This obviously doesn't apply to companies who deal with controlled exports, where they are responsible for whoever ultimately receives the controlled export.

I am not a lawyer and this is not legal advice.

https://ofac.treasury.gov/selected-general-licenses-issued-o...

"Disconnected from reality" ... tell that to the people who have had a lost or stolen device without encryotion. You'd need a backup and then some!

Apple manages a recovery path for users without storing the key in plain text. Must have something to do with those "security aficionados."

Re:Proton Spam and the AI Consent Problem on Saturday January 24, 2026 @09:15AM (#46743733)
No.
Re:Can You Disable Spotlight and Siri in macOS Tahoe? on Friday January 16, 2026 @01:15PM (#46649774)
Haven't tested this, but try:

System Settings > General > Language & Region > Live Text

"Select text in images to copy or take action."

It is correct, if somewhat uncommon in daily use. I published an article awhile ago and the editor revised it similarly.
Re:Strace-macOS: A clone of the strace command for macOS on Wednesday November 19, 2025 @07:23AM (#45978728)
Not entirely. You can selectively remove protections:

csrutil enable --without dtrace

The typical client of a criminal defense attorney is not a minor suspected of petty crime, and their case is unlikely to be informed by the experiences of such a minor.
I would imagine it has more to do with its principal function in recycling ADP back to ATP (fuel for cells). People who are sleep deprived also have impaired glucose metabolism, meaning that the cellular "fuel pipeline" is impeded. Perhaps creatine is especially helpful under these conditions.

https://pmc.ncbi.nlm.nih.gov/articles/PMC1991337/

Disordered sleep can cause executive dysfunction similar to ADHD, but it does not cause ADHD. It certainly can exacerbate it or be diagnosed incorrectly.
Re:uBlock Origin Lite Apple App Store on Thursday October 30, 2025 @08:18AM (#45759206)
There are dubious results for "uBlock" as well on browser extension stores. If it's not breaking rules (copyright violation, malware) it's precarious for companies to take action. It's obvious to me that uBlock Origin is the "correct" result, but how would a company determine that at scale?

The app was removed a day after your article was posted. The app name, developer, icon, and images are all different. It's absolutely a problem, but it was addressed.

If Apple aggressively took action against this with a high error rate, the headlines would probably be about anti-competition, censorship, and upset developers.

Re:uBlock Origin Lite Apple App Store on Thursday October 30, 2025 @08:06AM (#45759117)
I don't think this behavior is expected. When I've tested it, I was able to get DNS to behave in the expected manner. Apple does make design decisions that can be frustrating, but in most cases I find 1) there's a way to work around it or 2) the decision was the lesser of two evils.

Absolutely love GOS as well. What are you using for your DNS server?

Re:uBlock Origin Lite Apple App Store on Thursday October 30, 2025 @08:03AM (#45759094)
How are you setting DNS and on which platform? I've tested this extensively and it does work in my experience.
Re:M5 Macs Support Memory Integrity Enforcement on Wednesday October 29, 2025 @07:14PM (#45754367)
Thanks for sharing, I was wondering if it supported MIE. How are you finding the M5?
They are not mutually exclusive. You can cooperate with police at a lawyer's recommendation. If someone tries to pressure you from talking to a lawyer, they're doing it to manipulate you to their advantage. In your scenario, first time youth offenders almost always will have diversion as an option. If the situation can be remediated so easily, then the cost would not be too great. It seems far more likely to result in a better (or at least neutral) outcome with a lawyer.
Re:My gf thinks videogames cannot be art. What to show her? on Friday October 24, 2025 @03:00PM (#45697991)
The music for Bloodborne is incredible. If this isn't art, I don't know what is.

https://youtu.be/LzdhTGaWzec

https://youtu.be/NHIkUzmNmc0

What "they" don't want you to know:

- You can disable this feature

- Disabling radios from Control Center behaves differently than from Settings

Vulnerabilities are inevitable, especially if you want to support broad use cases on a platform. Defense-in-depth is how you respond to this.
I imagine the latter is sufficient.

PS: make sure you remove that pesky "USB accessories while locked allowed" profile that Configurator likes to sneak in.

Re:Does our "need for speed" make our Wi-Fi suck? Yes. on Friday October 10, 2025 @08:39PM (#45545364)
when done right, raceway along (or even behind the) baseboards works nicely
Well, I guess he won't mind then.
Re:Become unbannable from your email on Wednesday October 08, 2025 @10:36AM (#45516666)
This adds complexity and the added questions of how much you really trust vendors to handle it correctly.

After setting them up, I store one or more at various other locations. The core services people use them for rarely change, and adoption outside of those important services is slow. Even if you only kept one at home and one on your person at all times, this might mean a key would survive something like a house fire.

If given the choice between a hardware token and a passkey, I would prefer the former since it is almost impossible for it to be tampered with (especially without physical access to it).

I do see your point about HSMs and see why people would want such features (especially if there are multiple interested parties involved).

Re:Employees regularly paste company secrets into ChatGPT on Wednesday October 08, 2025 @10:22AM (#45516532)
This is a more general problem: people will sign up for, install, and provide data to just about anything that promises to be useful.
Re:Become unbannable from your email on Tuesday October 07, 2025 @09:36PM (#45511100)
If the secrets are routinely copied or otherwise extracted, then it reduces their security value. What I recommend people do is buy two or more and set them up all at the same time. It is inconvenient though.
Re:Gold hits $4,000 an ounce for the first time on Tuesday October 07, 2025 @05:15PM (#45508974)
> the dollar has lost 51% of its value in the past 12 months.

It has not. The article says gold has increased 51%. USD isn't doing great, but you're way off:

"The value of the U.S. dollar against other currencies dropped about 11% in the first half of this year, the biggest decline in more than 50 years, ending a 15-year bull cycle ... Morgan Stanley Research estimates the U.S. currency could lose another 10% by the end of 2026."

https://www.morganstanley.com/insights/articles/us-dollar-de...

I plead the fifth.
Re:3M May Escape Toxic Chemical, PFAS Manufacturing Legacy on Tuesday October 07, 2025 @04:18PM (#45508300)
The extremely toxic PFOA and PFOS are byproducts of manufacturing Teflon. After decades, we have managed to just barely regulate it. We don't know if these newer compounds will ultimately have similar effects. DuPont had reason to believe these original compounds were harmful, but they suppressed that fact in favor of profit. "Probably fine" is not acceptable, considering we can't meaningfully clean the stuff up.

https://en.wikipedia.org/wiki/Timeline_of_events_related_to_...

Older »