News for hackers. Stuff that matters.

hurutparittya

Re:A new Android malware from Google on Thursday July 02, 2026 @12:09PM (#48763602)
Fortunately Google thought about this, so government ID and banking apps usually check that they are running on a sufficiently locked down and officially blessed phone through the Play Integrity API.

This makes emulation basically impossible.

Is there any person or organization out there doing significant work against remote attestation being a thing? I'd love to support them.
Re:Collection of potential security issues in Jellyfin on Wednesday April 23, 2025 @03:23PM (#43775754)
So if I understand the last comment correctly...

It's possible to get unauthenticated streams if you know the media paths. Media collections, at least in my experience, usually adhere to a few common organization schemes. This would allow someone with a list of common titles, which are available in various public databases, to leak data by brute force from a public facing Jellyfin instance quite efficiently.

Discounting this as merely "suboptimal behavior" sounds like a mistake.

Re:You need to know about bootc on Monday March 24, 2025 @03:27AM (#43458390)
Well, I've been using NixOS for a while now, and it's by far the most "integrated" feeling distro I've ever tried.
I'm not sure what you mean by "invented", but as far as I know the Chinese lab leak theory is still widely accepted as credible and supported by many facts.
Re:Google change is breaking some digital photo frames on Friday March 07, 2025 @01:39PM (#43292884)
Just... get the TGZ then?
Re:Privacy Pass Authentication for Kagi Search on Friday February 14, 2025 @03:23AM (#43046131)
Any target date for open-sourcing it? :^)
Re:Release Notes for Ghostty 1.1.0 on Saturday February 01, 2025 @03:51AM (#42896934)
Foot would be beyond perfect if it had ligature support.
Re:I2P Anonymous Network on Tuesday November 12, 2024 @07:20AM (#42114951)
Exit node or relay?
Re:An Update on Apple M1/M2 GPU Drivers on Friday November 01, 2024 @08:32PM (#42023020)
I agree, "tech-literate" was a poor choice of words on my part. Tech enthusiast or tinkerer would have been much better options to convey my opinion.

I feel like there used to be a higher concentration of those people here.

Re:An Update on Apple M1/M2 GPU Drivers on Friday November 01, 2024 @08:58AM (#42016510)
I'm always surprised when people speak highly of Apple devices here. While they do have certain advantages, there are some issues that should be dealbreakers for tech literate people. (in my own, possibly biased opinion at least)

In case of Macbooks, it's the fact that they refuse to provide an official GPU driver for Linux and general poor support for things outside the walled garden. The Asahi stuff is cool and all, but come on, is a 3.4 trillion dollar company really going to just stand there and watch some volunteers struggling to provide support for their undocumented hardware without doing anything substantial to help? That sounds straight up insulting to me, especially for such a premium product.

For iphones, it's the fact that you are not allowed to run your own code on YOUR OWN DEVICE without paying the Apple troll toll and passing the honestly ridiculous Apple Store requirements.

And of course, in both cases, they actively sabotage third party repairs of their devices.

Re:Ask HN: Alternatives to Bitwarden? on Tuesday October 22, 2024 @02:23AM (#41911713)
I'd never use anything less than completely open source and self-hostable for this purpose! Which is why I'm having trouble with finding a viable alternative to KeepassXC. I intended to go with Bitwarden+Vaultwarden, but that sounds a lot less appealing now.
Re:Ask HN: Alternatives to Bitwarden? on Monday October 21, 2024 @05:52PM (#41908905)
Not having a built-in syncing mechanism is the #1 reson I'm looking to move away from KeepassXC as soon as possible. Making users kludge together their own makeshift sync methods using file shares and dropbox is honestly comical when syncing is probably one of the main features people think of when talking about password managers.
It's only a matter of time when it's this easy. Some essential service, most likely a bank, will inevitably turn it on in the future. And it only takes one of those to make all freedom respecting providers non-viable for someone. For our safety, of course. :)
I'm sure the Mastodon complainers will build a much better browser!
Re:Welcome to Ladybird, a truly independent web browser on Tuesday July 02, 2024 @06:26AM (#40855188)
I'm also curious about this. When it was just a toy project it made sense to write everything from scratch. If it's supposed to eventually be usable by people, a hard fork of Chromium, or at least some Chromium components might make more sense. Having a browser that improves hackability and user freedom while working just as well as Chromium sounds like heaven to me. Anyways, I'm clueless about browser development so I might be completely wrong.
Anyone who can perform the arcane incantations and rituals required to uninstall, disable, defuse, and circumvent all the user hostile anti-features ( which are only increasing in number by the way ) will do just fine with Linux in my honest opinion.
People will ask me why I'm 'torturing' myself with Linux while their preferred OS requires inputting the Konami code just to install properly.
The main trade-off is that you don't get to enjoy the benefits of upgrading to Linux instead :^)
What do you mean by 'legitimate software' exactly? If you described what a modern anti-cheat solution does to someone without telling them what it is, they'd automatically call it malware. The similarity really is uncanny. It almost feels like the difference between them is more of a technicality.
I'm sure this is all a part of Putin's grand designs. I'm so happy that every single person living on the other side of the Russian border is ontologically evil so I can hate them without feeling bad. /s
I might sound jaded, but I'd be more excited for a Chromium fork that focuses on hackability instead of a brand new browser that'll take somewhere between years to ∞ to be even remotely useful. I get why that'd be less fun to work on though.
I think the Firefox hate is completely justified. At this point the only positive thing about Firefox is that "at least it's not Chrome".
Stop participating in the housing game? How? By becoming homeless?
I'd much prefer if Framework just spent the extra $2 while anodizing to add black dye on what is essentially an ultra-premium laptop in terms of price.

There was a guy on Reddit a few years ago who intended to take advantage of this 'business opportunity', but it didn't go anywhere.

Are they making these in black yet? Or are people still unironically suggesting that you should apply a sticker (dbrand skin) to your $2.5k+ machine if you don't want it looking like an off-brand Macbook.
Re:The Irrevocable SSL Certificates of Cloudflare on Monday May 27, 2024 @12:06PM (#40492057)
Great success. This time it went without any issues and got the certificates revoked within 6 hours of my first email.
Re:The Irrevocable SSL Certificates of Cloudflare on Sunday May 26, 2024 @05:54AM (#40480908)
I tried replying to the existing email thread which did not get a response. Tomorrow I'll attempt starting a new case, with a more clearly worded request. I'll let you know how that goes.
Re:The Irrevocable SSL Certificates of Cloudflare on Thursday May 23, 2024 @11:53AM (#40456281)
That would be the most likely scenario, yes.

Older »