News for hackers. Stuff that matters.

ianso

Re:Fairphone 6 and PostmarketOS working main camera on Tuesday August 18, 2026 @08:32AM (#49344712)
I didn't know about the FLX1S+, which looks about as close as to what I want as there is right now.

What I'm looking for is an 8GB phone that I can run Docker on, to host apps like DHIS2 & OpenMRS3 (so a JVM). I have the impression that this isn't easily possible with Halium-based kernels, but I'm not an expert.

Edit: oh and full access to the radio chips, so I can set up mesh networks (and a cherry on top :-))

Re:Fairphone 6 and PostmarketOS working main camera on Tuesday August 18, 2026 @04:46AM (#49343073)
Apologies for self-linking here, but it's not just cool things, in my opinion it could transform humanitarian aid work. I wrote a use-case/short-story about it here:

https://ianso.blogspot.com/2025/11/what-we-dont-have.html

Re:Fairphone 6 and PostmarketOS working main camera on Tuesday August 18, 2026 @03:57AM (#49342759)
This is awesome stuff. Fully mainstream Linux with a normal userland running on a modern handset with all features will unlock a tremendous amount of change once it's there.

Things like running a distributed database for a community on top of the devices they own, hopefully also running true mesh networking.

Re:GitHub should charge everyone $1 more per month on Thursday January 15, 2026 @01:53AM (#46628996)
I think there could be a GH feature request that could do something like this in my opinion (opt-in though, not opt-out).

In my personal GH account there is a "sponsor" button that shows me what dependencies I have that I could sponsor. Unfortunately the list is empty.

My _organisations_ have hundreds of repo's, but there's no "sponsor" option at the org level in GH that says what dependencies the orgs use and then set up batch transactions at that level.

The dependency data already exists in dependabot for a lot of stuff, so it wouldn't be starting from scratch.

Re:Android/Linux Dual Boot on Thursday November 20, 2025 @02:51PM (#45996848)
Very good question!

SDR + something like Reticulum or Yggdrasil would definitely provide the infra or network fabric for the kind of thing I'm thinking of.

However, a normal Android, e.g. a Pixel 7, can't to my knowledge be turned into a web server or a podman host for containers. (I know of people hosting websites on old Androids that are flashed or hacked).

Given phones already have a WiFi/WLAN radio chip, it's a shame to need extra kit for connectivity.

It's something that's been on my mind a lot recently and so you provoked me into writing down a series of scenarios in story format that illustrates what SHOULD be possible using current hardware, were it not, as dlcarrier says, locked down like a games console.

Here you go:

https://ianso.blogspot.com/2025/11/what-we-dont-have.html

Re:Android/Linux Dual Boot on Thursday November 20, 2025 @09:46AM (#45993077)
I think this stuff is super important, simply because there is a ton of stuff we can't do using our phones today.

Think mesh networking, resilient ad-hoc application clustering, non-Internet P2P, like Freifunk but everywhere. We shouldn't have to depend on Google or any of the big tech companies for anything except the hardware.

That would offer much more freedom. There are also contexts where this kind of thing could also enable life-saving applications. And unlike todays Internet where a database query in Cloudflare or a DNS bug in es-east-1 can disrupt half the services we use, this kind of technology really could withstand major attacks on infrastructure hubs, like the Internet was originally designed to do.

The dumbest part of this is that all Wikimedia projects already export a dump for bulk downloading: https://dumps.wikimedia.org/

So it's not like you need to crawl the sites to get content for training your models...

Re:I have made the decision to disband Hindenburg Research on Thursday January 16, 2025 @01:24AM (#42722007)
No offence to Mr. Andserson but it reads a bit like someone has done an 'Inception' on him - subtly planted the seed of a train of thought that would lead him to disband his efforts, all the while believing it was his own idea.
Does anyone else think this should be made into a movie?

Massive respect to this ED.

Re:Why Everyone Hates the Electronic Medical Record on Tuesday January 30, 2024 @12:55AM (#39186827)
Popping up here to mention OpenMRS, a healthy open-source EMR used by hundreds if not thousands of facilities across the world, mostly in Africa and Asia. An old version is packaged/integrated with some other apps into Bahmni, which is a full-blown hospital management system.

Honestly, people complain about software all the time and all software sucks to some extent, some more than others of course. Complaining about all EMR just because the USA bodged a national rollout in their uniquely messed up healthcare situation is a bit myopic.

Re:I want to convince you to have an on-premise offering on Tuesday December 05, 2023 @01:32PM (#38535011)
Funny that the article focuses on huge corps for on-prem. I work for a non-profit and we deploy stuff to hardware in Afghanistan, Haiti, Sudan... You can't assume the Internet works and if it does, it could be a 1Mbps VSAT connection.

Needless to say we don't have a Fortune 500 budget. When I see a nice, affordable app that says "and here's a Docker image!" next to the SaaS options, I am like ( ˘ ³ ˘ ) ♥

Love this! See also ssllabs.com and sshcheck.com.
This reminds me of "two stories of the pistol", some anecdotes where a sentry actually does almost kill some idiot senior officers:

http://everything2.com/title/Two+stories+of+the+pistol

Re:GPG and Me on Wednesday February 25, 2015 @04:20AM (#9105965)
Sorry but what is the actual point of this blog post?

GPG is just one guy. Who's practically beggared himself writing and maintaining the tool.

GPG is actually used by human rights activists, journalists etc. That, right there, is reason enough to celebrate it and NOT "kill it off".

I think the massive pile-on this is creating is really dumb, to be honest. So Moxie thinks it could be done better; that's great. He's good enough that he can "show, not tell".

Why waste time denigrating a project that's basically a labour of love for one guy that is actually tremendously important, even if it's "90's technology"? Old doesn't necessarily mean bad.

Re:The Internet Shaming of Lindsey Stone on Saturday February 21, 2015 @02:51PM (#9086620)
Apposite: "Don't Pile On" - http://rc3.org/2015/02/14/dont-pile-on/
Re:NASA’s $349M monument to its drift on Tuesday December 16, 2014 @08:26AM (#8756979)
This is such a stupid framing to the article. The sixth paragraph states clearly why it was built and it has nothing to do with NASA drifting - it was being pulled:

"But, at first, cautious NASA bureaucrats didn’t want to stop the construction on their own authority. And then Congress — at the urging of a senator from Mississippi — swooped in and ordered the agency to finish the tower, no matter what."

Why condemn NASA for cronyism and Congressional stupidity?

Re:Name that Ware, March 2014 on Thursday March 27, 2014 @04:41PM (#7483303)
This is getting interesting - see the comments - apparently it may be part of an Aegis missile? Not something you'd want to end up in a grey market in Shenzhen!
Re:Twister: Anonymous, private BtC/DHT/Torrent P2P microblogging on Tuesday December 31, 2013 @10:05AM (#6990769)
I think the BtC protocol was used to ensure that peoples usernames were guaranteed unique, and linkable to a private key, i.e. verifiable. I think the whitepaper has more info, reading it now:

http://arxiv.org/abs/1312.7152

Hum, I think between you, nl, and nwg, point 1 is looking very shabby... I think I'll revise it shortly.
Yup, because I misread the paper :-/ I thought it also stated that entity A had done large amounts of churning, which it hasn't. I'll fix that, thankyou...
>>Bitcoin is, by design, highly vulnerable to network analysis.

>By design as in, that's the only way the network could conceivably work.

This network, yes. But you can construct truly anonymous cryptocurrencies with e.g. zero-knowledge proofs, yet the author(s) chose not to. This would have enabled AP, maybe answering PGs question in point #2 of his post (https://news.ycombinator.com/item?id=5547423).

I didn't know the original code was that buggy, I confess I was lulled a bit by the line "This was the only major security flaw found and exploited in Bitcoin's history" in the wiki article. Maybe it needs changing in the light of https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposu... :-)

That's true, but then it's equally true that DJBs software, while absolutely excellent, is definitely idiosyncratic. If DJB anonymously published code using the same style, e.g. the configuration language, refusal to use standard UNIX daemons, etc., anyone who read the code would know immediately that it was him.
Yar, I realise the Hezbollah thingy is only tangentally applicable, but I couldn't find a better example of a single mistake compromising an identity and thereby a network. I think that someone (maybe Cory Doctorow?) wrote a better, at-length post about how hard it is to stay anonymous but I couldn't find it, so I used this example instead.

Point 6 is my main stepping-stone from 'organised and capable' to 'government'. FWIW governments have deliberately set up 'dodgy banks' as a way of attracting money launderers and then busting them, so I think it's valid.

I didn't know that PG suggested something similar, thanks for the pointer :-)

Older »