News for hackers. Stuff that matters.

Mindwipe

Re:Ask HN: Which TV do you recommend for privacy? on Monday November 02, 2026 @03:43AM (#50334433)
You can literally just buy any Sony and turn it onto dumb TV mode and not connect it to a network.

That's it, that's all you need to do, and the level of crazy over engineering and spend by some people below achieves literally nothing more at great difficulty.

There are not.

Renting a VPS from a country that genuinely doesn't is pretty risky for numerous reasons, least of all international sanctions.

Re:Apple HomeView on Tuesday October 13, 2026 @11:21AM (#50073141)
The main thing this makes me feel is "why doesn't the iPad recognise the user by FaceID and give my five year old the appropriate experience and block my apps if this can?"

Which is perhaps not the feeling Apple intended.

Re:Apple HomeView on Tuesday October 13, 2026 @11:14AM (#50073024)
Fwiw both Airplay and Google Cast support both modes of operation.

But frankly Apple's developer documentation sucks around this, and unsurprisingly people don't understand what's going on when even developers don't.

Re:Pirating the Pirates on Tuesday September 29, 2026 @09:13AM (#49892681)
They were in no way pirated, they were recorded under the UK's copyright exemption for this purpose.

Also that is a vanishingly small amount of content, the vast majority of recovered Doctor Who episodes were found from broadcaster archives, not the public.

It's really frustrating that there is no ability to reclaim the drive space in MacOS 27, especially on Macbooks with M1 or M2 chips that can barely use the models. Another great sign of how the OS is deeply on fire IMO.
Re:LG TVs caught spying even when offline or on standby on Tuesday September 08, 2026 @02:12PM (#49614302)
You can literally just buy a Sony and do this. And several other manufacturers that run Google TV can be switched to dumb mode.
Every three years, even GW haven't got quite as bad as every two yet.
GW actually launched an official starter website recently.

https://academy.warhammer.com/en-gb

If you just want to learn the plot/lore/story they sell this - https://www.warhammer.com/en-GB/shop/combat-patrol-companion... which is a starter book about the setting, rather than a novel as such.

Re:Stopping the smart TV from being used against you on Friday August 28, 2026 @07:10PM (#49485321)
The EDID is just a model identifier and some capability metadata, it can't tell Windows to do anything.

It's Windows that decides that it should download a driver from Windows Update because it recognises it hasn't got a driver from that hardware, and it's Microsoft that let the vendor submit drivers that are bundled with near malwareto Windows Update.

Re:iCloud+ Hide My Email addresses will remain on icloud.com on Tuesday August 25, 2026 @08:00AM (#49432425)
Good. Thank you for listening, iCloud team.
Re:"Gravity is worth asking about." on Wednesday August 05, 2026 @08:40AM (#49182025)
I doubt you will get many long term Mac users disagreeing that the attention to detail has got consistently worse every year since Lion.

Trying to push poorly done, rushed UI frameworks to match iOS in the wrong form factor has trashed the OS.

> It doesn't support Widevine l1 and never has.

Firefox supports Widevine Level 1 on Windows 11 devices with the requisite hardware and has for a year or so.

Not many providers other than Netflix support it still, but it does.

> But on the other hand, it remains a very powerful incentive for publishers and developers to reconsider their choices, as these devices still do have a non-trivial marketshare.

There's really nothing to suggest this has been the case.

I very much expect Valve to implement a hardware backed attestation and signed driver model for future hardware.

Re:LG to ban residential proxies from smart TV apps on Thursday July 23, 2026 @11:27AM (#49023147)
I genuinely don't recall the last time I saw one of those that didn't require me to at least go to a registration page to accept the terms and conditions in order to actually transmit any traffic.
Re:LG to ban residential proxies from smart TV apps on Wednesday July 22, 2026 @04:07PM (#49012657)
When was the last time you saw a completely open residential wifi access point in the wild?

This seems a little like worrying about getting Dodo poisoning.

It's an open poll on a website with no sampling and no detection for bad actors.

For goodness sake, this is literally useless. It tells us nothing.

Even a games website should be embarrassed of it's journalism trying to run this as a story.

"Sony correctly implements GDPR requirements in the EU" is a less exciting headline I guess.
> For things like movies, they should have negotiated a contract where sold copies are sold copies and cannot be revoked (even if their right to sell/rent copies lapse).

It's difficult to see how this could ever be possible without significant legislation changes. Nobody (but nobody) offers this, and in the vast majority of the world you literally can't buy out music rights in this way for any licensed music in the titles. That's why literally no online store offers this.

Re:Sony Deletes 551 Movies PlayStation Owners Paid For on Wednesday July 01, 2026 @12:12PM (#48749208)
The announcement only seems to have been sent to users in the UK and MoviesAnywhere is a US only service. Also StudioCanal are ultimately the rightsholder who would need to join MoviesAnywhere, and they are not members.

(I am a bit surprised they didn't bung Google and StudioCanal a bit of money to move them to Google Play to avoid the bad publicity though.)

Re:Apple is about to make Hide My Email useless on Tuesday June 16, 2026 @05:52PM (#48562671)
Urgh, that's a huge downgrade. What a shame.
The fact this letter takes aim at something the paper doesn't say is pretty damning. The paper alledges that a series of high entropy identifying metadata about the users system is passed to a very large amount of third parties, including the site being visited, and that has potential to link the real identity of the user to the site they are verifying with.

Yoti's letter then gets angry that "face" data is not passed to third parties. That is not what is alleged.

Not to mention the repeated veiled threats about how they "could" sue academics investigating their systems.

It is absolutely incredibly sus as a letter.

TBH, even LinkedIn seemed to provide me with posts advertising events that happened two weeks ago a bit less pre-acquisition.
Re:Hardware Attestation as Monopoly Enabler on Monday May 11, 2026 @06:35AM (#48093228)
Individual self employed photographers successfully use the DMCA to get significant payouts from large publishers and news organisations every single day.

Like literally hundreds of thousands, every day.

No there aren't, because having identical builds of games with Denuvo actually removed and present is vanishingly rare.

If you compare a game that's had significant performance patches over a period of years and had Denuvo removed to the launch version (as so many of these videos are) then no shit you see performance differences, but it doesn't tell you anything.

That report wasn't suppressed. It wasn't published because the methodology had a 44% margin of error, and subsequently it was totally useless.

(https://arstechnica.com/gaming/2017/09/eu-study-finds-piracy...)

It doesn't provide data suggesting that piracy doesn't hurt sales. It literally doesn't provide any data at all.

The evidence for this supposed performance hit is basically zero.
Re:John Ternus to become Apple CEO on Tuesday April 21, 2026 @02:55AM (#47845414)
That's worrying, because Apple Mpas is still a borderline useless hot mess.
That only works in the context of when the sender isn't the adversary, which isn't the case in an age verification system - it very much does treat the sender as the enemy and untrusted. And again, the revocation chain on the backend is not zero proof.
> The point of this is that you can use the credentials on your phone to prove that you are an adult to a website using zero-knowledge proofs to avoid disclosing your identity to anybody.

No it isn't.

Literally that is not the scope document, and such a solution would not be permitted by the EU as compliant with the legislation.

The app isn't zero knowledge. A prototype workflow has been designed for a one way transfer to sites that is zero knowledge, but it doesn't actually deliver zero knowledge because it you have to verify your age with an external provider to get the credential (which is not zero knowledge), the app has to be secured with either Apple or Google's attestation services (which are not zero knowledge), and the site has to be able to check with the original external provider that the credential hasn't been revoked (which is in no way zero knowledge).

Older »