News for hackers. Stuff that matters.

a022311

Re:Apple Security Research Device on Saturday October 24, 2026 @09:16AM (#50220963)
> I'd be happy with a 'compromise' where there's a factory reset where you can install your own code but it blows an e-fuse to indicate that device is no longer 'OEM certified secure' state.

You just described what Samsung does with their phones. You can unlock them, but even if you later switch back to the normal OS, some features are permanently disabled by that fuse.

Re:Color Names on Friday October 23, 2026 @06:34AM (#50206858)
I think I'll return here whenever I need pixel art!
You could use SpamBlocker and configure it to block everything. AFAIK you can't do this at the android level. If you don't need outgoing calls either, just use a data-only SIM.
Re:'That's so AI ' What gen Alpha's biggest insult tells us on Thursday September 24, 2026 @10:22AM (#49831044)
Do they have the motivation to learn though? You could say the same about gen Z with books; it's just that many have never cared enough to make it a habit.

That having been said, the new generation mostly does computing with a smartphone/tablet and these kids are very adept at handling them. If a child wants something, it'll find a way to make it happen and they're good at that. Creating spreadsheets and organizing files is simply not on their list. If it were, they'd be better at it than most people who grew up before computers.

Re:Cherenkov Radiation - traveling faster than light on Friday September 11, 2026 @09:55AM (#49658497)
It's funny because I was reading about Cherenkov radiation just yesterday and the same statement was made (although with a proper clarification afterwards).
Re:Actively exploited sandbox RCE in all Chromium versions on Saturday September 05, 2026 @03:42AM (#49574117)
I'm glad I've already done that! I haven't seen any difference in performance like others mention though. Weird. The only override I've made is for a website which needs to run some client-side cryptography code and it would take ages without the JIT.
The article doesn't give much more information than the title. Almost zero details.
Re:Malicious Rust crate Arrayref runs a build-time payload on Friday August 21, 2026 @08:10AM (#49386898)
> The requirement `1.0.107` is a caret range, and with only `1.0.106` and `1.0.107` ever published it resolves to the malicious `1.0.107`.

Uhh no it isn't? This seems to be a pretty low quality article

Re:Teaching my kid to code with a modern MUD on Tuesday August 18, 2026 @09:02AM (#49345024)
I'd say Canon and Scratch are different tools with different purposes. Both are simple and interactive enough for children to love. The main difference I see is that Canon abstracts away a lot of the game state management logic and you get to focus on creating characters, items and having lots of fun. Scratch looks like it has a steeper learning curve and while it is a good introduction to programming, it gets pretty hard to navigate once project size increases. As someone who started programming with Scratch, I think that making a text adventure game like the ones Canon does in Scratch would be much more complicated and the end result wouldn't be half as nice.
One man's trash is another man's treasure. The mistake is being absolute and ignoring this fact.

This post reminded me of Engineering for Slow Internet (https://brr.fyi/posts/engineering-for-slow-internet), another case where careless assumptions by better-off people can have a huge impact on others.

Looks incredibly cool, although it ran at ~4 tok/s on my browser (I assume because I've disabled V8). I believe your numbers though. I always wanted to try using something like this to create an AI assistant for my phone. If you try to create something without AI, you'll quickly run into the problem of using NLP to map input to the equivalent of AI tool calls. On the other hand, shelling out to a full-blown LLM for every input is slow, costly and if you want it local, greatly restricts its computing power and the number of devices it can run on. Needle and similar models solve this problem nicely: they're incredibly cheap and handle NLP (not in a predictable way of course, but with great success rates), so you can quickly run predefined actions or shell out to a proper LLM for more complicated tasks. You have the best of two worlds.

You may have inspired me to give it a try!

Re:A new Android malware from Google on Thursday July 02, 2026 @07:39AM (#48759849)
Not sure Jolla deserves to be trusted, you'd be much better off with GrapheneOS. In any case, try out SimpleX for a messenger. You can also take a look at https://xn--gckvb8fzb.com/an-overview-of-privacy-focused-dec...
Re:FUTO Swipe – A new swipe typing model on Wednesday June 24, 2026 @09:33AM (#48659557)
I agree, it's by far the best mobile keyboard I've ever tried. I especially love the shortcuts for copy/paste/select all/cut which send the actual Ctrl-C. I can finally use terminals! :-P
Re:FUTO Swipe – A new swipe typing model on Wednesday June 24, 2026 @08:08AM (#48658496)
I can't see what's wrong with that (you choose whether to accept suggestions or not), but you can always blacklist predictions by long-pressing on them.
Re:FUTO Swipe – A new swipe typing model on Wednesday June 24, 2026 @07:53AM (#48658373)
FUTO keyboard actually has an option for this (enabled by default) called "Smart key-hit detection". It adjusts hitboxes based on dictionary predictions for what you just typed.
Re:FUTO Swipe – A new swipe typing model on Wednesday June 24, 2026 @07:49AM (#48658343)
I'm using Colemak on my phone, but can't get used to it on my desktop, so I'm stuck with QWERTY! :D
Re:FUTO Swipe – A new swipe typing model on Wednesday June 24, 2026 @07:47AM (#48658331)
Back when I was using QWERTY with Microsoft SwiftKey, I used to swipe a bit, but it never really felt comfortable for me. I've tried swiping again after switching to Colemak on my phone and everything is so close together that the accuracy is very low. I wonder if this model will help improve accuracy on other layouts too (or even languages!).

I hope FUTO does start caring about language support, because for example their AI powered text prediction is only available for English. I'd happily train a model for them in my native language if they provided instructions on how to do so. And I'd help with swipe typing too.

Re:How many of the 170k English words do you know? on Friday June 19, 2026 @06:48PM (#48604210)
I'm Greek too and I got 81 (well technically I misclicked one in a hurry, would've been 82). It did help a bit though. Surprisingly enough I've learnt many of the more advanced words from technical blogs!
Re:GrapheneOS has been ported to Android 17 on Wednesday June 17, 2026 @04:58AM (#48567659)
Yep, I've used both. Desktop mode isn't exactly there yet, but hopefully with the general availability it will get with Android 17, it'll smoothen out. As for the Linux terminal I ended up sticking with a fork which provides a few extra features (https://github.com/outlawsanzhang/koiTerminal)
Re:Apple's weird anti-nausea dots cured my car sickness on Wednesday June 17, 2026 @03:49AM (#48567156)
Depends. One of the reasons I stopped using Spotify was because its offline mode refused to work when my device had all radios off (who even thought of this?). Once I turned on Wi-Fi, even without connecting to a network, it would load immediately.
Re:Apple's weird anti-nausea dots cured my car sickness on Wednesday June 17, 2026 @03:47AM (#48567142)
Yes IPC is definitely a security hole, but because the two apps communicating need to both explicitly support it (I really doubt there'd be an exploitable vulnerability here of all places), it's a much smaller concern. Here I'd mainly worry about apps like Google Photos talking to Google Play Services. GrapheneOS has mentioned they'd like to implement IPC scopes to isolate apps, just like contact scopes and storage scopes.
Re:Apple's weird anti-nausea dots cured my car sickness on Wednesday June 17, 2026 @03:42AM (#48567096)
Funnily enough, the Huawei P30 Pro I was using previously (back when these things could run Android with GMS) had network toggles for all apps. They weren't in the permissions menu, as they were meant for data saving purposes but you had the additional granularity of choosing if an app could access mobile data or Wi-Fi separately.

That solved the problem of ads in games much better than DNS :D

Re:LittleSnitch for Linux on Thursday April 09, 2026 @07:01AM (#47702040)
I guess that makes sense, since it's pretty new. OpenSnitch is great software in terms of functionality but I find the UI lacking. If LittleSnitch can keep the same functionality, while improving the UI, I'm switching. My other current concern here is that the LittleSnitch UI is just a Webview and I think it would be much better if there was a native option (ideally GTK-based for me, but Qt would also be acceptable). Webviews are slow and full of bloat.
Re:Show HN: A game where you build a GPU on Sunday April 05, 2026 @05:07PM (#47653891)
This is excellent, both educationally and from a UX standpoint! I've tried multiple times to read explanations on how transistors work and bounced off, but this time I think I've finally understood how to use them, at least practically. I feel like this is a great continuation of https://nandgame.com which taught me quite a bit about how small circuits combine to form something big (although I never finished it, I hope to finish this one at least). Another thing that I find interesting, is that while it is clearly developed primarily by AI, the result is exceptionally better than nearly every other AI-assisted project I've tried.

Some suggestions: - What I miss from NAND Game is the challenge of optimizing for efficiency. You'd build a component and it would let you know if it could be built with fewer NAND gates and you'd try to simplify the circuit. For example, while I did "NAND it" with 4 transistors, I did "The dual" with 5 and given the explanation I got afterwards I could have used one less. - This definitely needs to get better on mobile - The description for the first level using BitLine and BitLineBar (I think that was the Sense Amp?) doesn't really explain what it's supposed to do and I had to deduce it from the truth table.

Re:Show HN: A game where you build a GPU on Sunday April 05, 2026 @04:52PM (#47653758)
Yeah, my old MacBook got really laggy and the fans were spinning hard. Still worth it!
If that's what you call a democracy, sure... I don't think most people will agree with you though.
The same argument could be said for other age verification methods. Nothing stops a kid from getting their older cousin to verify their identity for something and it will never be possible to prevent this.
Owned by Russia? How'd you reach that conclusion? Just take a look at the sanctions imposed on them and the US support for Ukraine in the war. Also: it seems you've fallen into the "Russia is our enemy" propaganda trap.
Re:Ask HN: How to get started with robotics as a hobbyist? on Saturday February 14, 2026 @03:24PM (#47018030)
IMO ever since the EV3, LEGO's robotics hardware has been on a downfall, being much less open and more focused on "connect it to your tablet with Bluetooth to do some basic programming". They also offer less ports and sensors and I think there aren't any custom sensors either. If you can find an EV3, it's the best thing you can get.

Older »