News for hackers. Stuff that matters.

hex-m

OwnCloud -> Nextcloud, OpenOffice -> LibreOffice, Elasicsearch -> OpenSearch, privacyIDEA -> eduMFA
I'd love a Thunderbird extension that shows where the mailboxes I correspond with are hosted.
Re:It's time to move your docs in the repo on Sunday March 15, 2026 @12:24PM (#47388915)
Reminds me of the "semantic web". Making content machine-readable has positive side effects. (clear structure, reduced ambiguity, separation of data and presentation)

It's another example where the reason for better engineering is to make machines (search engines) happy.

Re:Stay Away from My Trash on Friday February 06, 2026 @03:33PM (#46917769)
tldraw used to be FOSS but they changed the license in 2023. https://tldraw.substack.com/p/license-updates-for-the-tldraw...

BigBlueButton had to fork tldraw because of this. https://docs.bigbluebutton.org/new-features/#we-have-forked-...

According to the WhatsApp-leak, it is 51.41% Android and 48.59% iOS in the Netherlands.

https://github.com/sbaresearch/whatsapp-census/blob/main/cou...

Re:The Post-American Internet on Tuesday January 06, 2026 @05:53AM (#46510854)
"Google-free" FOSS Android-builds (Graphene, /e/, iodé) are available today and usable for most tasks. Just make sure your government IDs and banking apps don't depend on proprietary Google-only features.
Re:HTTP Strict Transport Security (HSTS) on Tuesday December 30, 2025 @05:34PM (#46438889)
Firefox, Safari, Chrome, Edge and even Brave have "HTTPS first" or "HTTPS by default" enabled out of the box. HTTP is only used as a fallback.
It can't handle OpenDocument files (odt, odp, ods) well. Only a one-way import is supported. https://helpcenter.onlyoffice.com/docs/userguides/document_e...

There are parts that are not released under a Free Software license but that's unclear from their marketing-communication. #openWashing

If you want LibreOffice with less Java, you should try Collabora Office. https://www.collaboraonline.com/blog/collabora-online-now-av... (I'm not affiliated)
The dependency is much weaker in this case. Finding somebody else to manage/host Nextcloud is easy while using MS Office without Microsoft is impossible.
Re:Calendars, Contacts and Files in Stalwart on Tuesday May 27, 2025 @09:59AM (#44107109)
The partnership between Nextcloud and Stalwart was announced 4 months ago: https://nextcloud.com/blog/press_releases/nextcloud-stalwart...
Re:LibreOffice 400M Downloads, and Counting on Thursday January 30, 2025 @09:32AM (#42878031)
@jospoortvliet did a comparison of the two projects that's very much worth a read.

https://blog.jospoortvliet.com/2020/06/collabora-vs-onlyoffi...

Re:LibreOffice 400M Downloads, and Counting on Thursday January 30, 2025 @09:27AM (#42877974)
> Part of the source code are located in private repositories. You can't compile the project without them.

https://github.com/ONLYOFFICE/documents-app-android/issues/3...

Web-apps in the browser can't be used for encryption because in that model the server is always trusted to send whatever code it wants. That defeats the point of end-to-end encryption. That's why Mailvelope is a browser add-on and webmail clients don't just embed openPGP.js. This way they can create releases of the crypto-code and distribute them over trustworthy channels.

If Isolated Web Apps (IWAs) take off, it may become an option.

Re:GitHub Passkeys are generally available on Wednesday September 27, 2023 @09:25AM (#37674326)
If you mean "FIDO2 platform authenticator", this project looks promising: https://github.com/AlfioEmanueleFresta/xdg-credentials-porta...
Re:GitHub Passkeys are generally available on Wednesday September 27, 2023 @09:21AM (#37674289)
The term is often used without a clear definition. As a passkey should be used instead of a password, it means that you need "user verification" (PIN or biometrics) to protect the access when the device is lost.

The other thing is that it is more convenient to have "discoverable credentials" (a.k.a. "resident keys") so the browser can check if there are passkeys stored on your FIDO2-authenticator for a specific website. (instead of asking for a username first)

Syncing is optional but if your passkey is not synced, it is usually called a "device-bound passkey" (e.g. Windows Hello).

You don't have to "do" Nextcloud yourself if you don't want to. Find a hoster[0] that does the work for you.

The client apps and the user interface are super boomer friendly.

[0] https://nextcloud.com/partners/

Re:Surveillance Under Surveillance on Tuesday August 10, 2021 @10:28AM (#28129261)
As explained on the site the data comes from OpenStreetMap. Feel free to add cameras from your neighborhood.
Re:Facebook Messenger, Instagram and WhatsApp Outage on Thursday December 10, 2020 @05:27PM (#25379660)
A quick check didn't lead me to a single reproducible iOS app. What are you currently using?
GAFAM is pretty common in french. https://fr.wikipedia.org/wiki/GAFAM
Re:FreedomBox on Monday April 09, 2018 @06:00PM (#16797370)
Both use-cases (VPS and homeserver) are valid. As FreedomBox is just a bunch of Debian packages it should be easy to offer it as a base image (or 'apt install freedombox' it yourself).

The similar project YUNOhost advertises both scenarios. https://yunohost.org/#/install

Re:FreedomBox on Monday April 09, 2018 @05:50PM (#16797304)
FreedomBox has unattended-upgrades enabled by default.
Re:FreedomBox on Monday April 09, 2018 @05:47PM (#16797282)
I agree that the killer feature is still missing. That could maybe be storage-management (NAS) or HTPC (Kodi). People seem to buy such devices.

On the other hand there are nice features already: VPN Server, Seedbox, Ad-blocking-proxy

To mitigate the single-point-of-failure steganography (hidden containers) would help. That would offer compartmentization and deniability. One tool that implements this: https://github.com/bwesterb/pol
EU GDPR: "Valid consent must be explicit for data collected and the purposes data is used for."
Another concept would be to slice your task it into small enough junks so that one would need many of them to extract meaningful information. That's not strictly secure, but nothing is. ;)
Re:Ask HN: What is wrong with Twitter? on Friday May 20, 2016 @08:59AM (#11737387)
The same could be said about the www. There is a technical solution and it's called a recommender system. It tries it's best to rate the more interesting stuff higher. That's what search engines do for the www and it kinda works.