News for hackers. Stuff that matters.

lexlambda

OpenStreetMap data really is a godsend for such OSINT purposes. Works much better in populated areas too, with more features like roads, shops, electric lines that can be used to search.
You must realize, age verification is for more then just Googles Android apps.

Such a strong new legal framework must consider consumer hardware actually in use:

- Android variations Like GrapheneOS, Huawei's HarmonyOS, older phones running custom ROMs - Linux phones, which are sold in the EU and by EU companies

- Desktop operating systems

All of them can run Web Apps, and thus need age verification

as far as I'm aware, Adroid is not the same as the requirement here, which requires specific Google attestation.

There is GrapheneOS, HarmonyOS by Huawei, LineageOS for older phones and many more Android ROMs.

Additionally, Linux phones exist and are already sold in the EU to consumers, not just a prototype.

There's really no justification around limiting the OS selection.

There is also Linux, Windows, MacOS and many more operatint system not limited to phones.

Re:Organic Maps on Sunday July 05, 2026 @10:46AM (#48794682)
Organic mentions Open Source, but I just saw that FDroid mentions the following: "This app contains non open source components - compiled binary data files (including but not limited to .mwm map files) under a non FLOSS license"

Anyone has context on the following not hidden over Git-* issues (I was left thoroughly confused trying to understand it)?

Re:Google changes its search box on Thursday May 21, 2026 @01:59PM (#48226632)
Why? To sell you something. If the traditional web incentives were to disappear, the internet will become just ads, selling things & work.

The web won't die. It will just become even more commercialized than it already is. You might recognize most of the things listed.

Selling things: Restaurants, hotels, local businesses; Ads: more of the same

Work: a) Projects people collaborate on and need to share information b) Writing articles to boost a resume

And maybe sharing what people do, they do it for free, see social media.

I second what the other commenters have said.

There are several factors at play making conflicts almost impossible:

- A central device can be immediately synced to. For Nextcloud, it could be a server, for direct synchronization that I use (Syncthing), my phone (almost always online) is the intermediate device for all.

- You are usually online when creating accounts/password, so an sync can happen directly after a change

- And finally: How often do you actually _create_ accounts rather than just read the database? And how often do you do it on two devices in quick succession?

Re:Ubuntu 26.04 on Friday April 24, 2026 @07:05AM (#47888521)
LMDE is Debian-based, I believe you meant Linux Mint itself, which also doesn't use snaps.

You get all the driver support and tools from the Ubuntu base, with some nice additons. However, not all desktop environment are supported.

Re:Cal.com is going closed source on Thursday April 16, 2026 @02:40AM (#47789456)
A slight factor differentiating security systems here is involved to the advantage of defenders: Attackers have to find a whole exploit chain, while defenders only need to fix one part of it.
Re:Cloudflare targets 2029 for full post-quantum security on Tuesday April 07, 2026 @01:51PM (#47678889)
> news.ycombinator.com:443 is using X25519, which is not post-quantum secure.

This is the result of Cloudflare's test "Check if a host supports post-quantum TLS key exchange" offered on https://radar.cloudflare.com/post-quantum.

Hoping there is already a migration plan. Fortunately many modern tools make it easy to switch to PQ, maybe someone knows which stack HN is running and if it would be possible.

Re:Hold on to Your Hardware on Friday March 27, 2026 @08:32AM (#47541936)
This is a filter added by you (or by an overzealous list maintainer), it does not happen by default or even with the provided additional filterlists.
Re:Discord Launches Teen-by-Default Settings Globally on Tuesday February 10, 2026 @05:48AM (#46957941)
Yes, it is indeed not always clear what constitutes forgery (Germany).

> A document in the classic sense requires an embodied declaration of intent that identifies an issuer and is suitable for providing proof in legal transactions. In the case of a lawyer's letter, the signature is an essential part of the standard repertoire of authenticity.

https://www.heise.de/en/news/Document-fraud-via-email-Why-th...

So removing some parts to make it _could_ make it safe, to Not create a "risk of confusion":

> Even if computer processing creates the appearance of a genuine document, the typical characteristics of the original must be present to establish a serious risk of confusion. Likewise, the BayObLG did not consider the offense of forging evidential data according to Section 269 of the German Criminal Code (StGB) to be fulfilled.

Like posting an archive.is link, others can actually read it. No login required for reading replays, no popups and signup nagss.
The donation is more or less virtue signaling rather than actual insight.

The problem can not be helped by research research against cybercrime. Proper practices for protections are well established and known, they just need to be implemented.

The amount donated should've rather be invested into better protections / hiring a person responsible in the company.

(Context: The hack happened on a not properly decomissioned legacy system.)

Re:ADS-B Exposed on Tuesday October 14, 2025 @10:48AM (#45580753)
This is certainly missing some kind of legend explaining the colors of the lines, and what data is actually shown.

Is "red" high or low velocity? And as an example, I do not understand what the "Boeing vs. Airbus" selection is trying to represent, as well as how "Altitude & Velocity" are supposed to be displayed at the same time.

Project certainly requires a bit more care if any discussion should happen around it.

Re:Fastmail Desktop App on Monday October 13, 2025 @02:30AM (#45565318)
I find it rather strange that so many email providers have to develop their own "app".

There are so many good clients out there, and I'd rather have 1. The team focus on their core offering, and 2. the existing email client is for the same reason (limited developer time, and matureness) a much better choice for security

Re:Email immutability matters more in a world with AI on Thursday October 02, 2025 @04:09PM (#45454894)
Immutable as in the message won't be altered/deleted by the sender. This is. This is about user control, as opposed to chat apps or social media, where posts are frequently edited, get taken down after an outrage or links can disappear to link-rot.

From article: "An email is your copy, and the sender can’t revise it later."

Re:WhoBIRD is now deprecated on certified Android devices on Saturday September 13, 2025 @05:09PM (#45235332)
I assume, since the statement specifically mentions CERTIFIED devices, that they do intend to further develop the app.

As always with Google policies, this means users will need to jump through more and more hoops (as today with custom ROMs and banking apps already). I really hope first and foremost that this policy can be reverted, and if not, that the community develops means of technological circumvention (examples mentioned by others include an "app runner" app or letting others identify the app).

It is a sad state the Android ecosystem is heading to.

So true. In such an LLM-driven game though, I would imagine the player would just ask the NPC: "I forgot what to do" or even "Can you explain it in other terms?" (if the quest description isn't clear enough).
Reading the article further, they do note that "A suspected memory leak in Windows’ OS-buffered cache region could be the problem.", although I concede that no source is provided for that.
Icon themes modifying the developer-provided icons was always a strange thing to me in many Linux distributions. Even often hard or hidden to disable this behavior.

My workaround already was using Breeze, since it does the least modification compared to other themes available by default. Glad to see it continue in this direction.

Re:Bus Bunching on Thursday July 24, 2025 @05:27AM (#44668721)
Some of the proposed solutions are problematic. A public transport systems absolutely needs to be reliable for the people who use it.

Skipping stops is the worst in that regard and breaks the whole point. No schedule causes issues downstream, since now there won't be a schedule to depend on when needing to switch to trains or other busses.

But in general, the only thing to realistically improve without decreasing reliability is the amount of time spent at a stop (also mentioned in the article).

All in all, I see these suggestions as "what to do in a worst-case scenario", i.e. if the service already has major issues.

Re:Superhyperbola on Saturday March 29, 2025 @04:43AM (#43513862)
I was confused by the legends between the first and second image? Both have p=2 and p=4 yet look different, I believe that this is wrong, as the sentence before the second image states "increasing p". Hope I'm not missing something
Important to note:

> Although the survey is not statistically representative of Nature readers or the scientific community at large

I found that the survey seems to have been advertised for with "Has Bluesky replaced X for scientists?" according to this article from Jan 14 [1]. This attracts people who switched more I think. So the 70% figure is nothing than hot air.

It is still interesting seeing the positive sentiments and reasons for switching analyzed.

[1] https://www.nature.com/articles/d41586-025-00037-y

Re:Google Starts Tracking All Your Devices in 8 Weeks on Saturday December 21, 2024 @03:10PM (#42481933)
> Why are we sending out all this info.

You are generalizing. Google and big providers do that, usually (US)services that need to cater to the whole world. But a huge part of the normal web still uses and _needs_ preferred language. No one wants to be forced to use geolocation.

Just one very common example are info pages for sightseeing, they are usually available in all languages that people commonly visit from and just work if you browse to them. Not to mention that geolocation would be useless anyway in that case.

Yep. So much for "built for the web". While I know that a lot of software is only tested on Chrome and Safari, I would expect different when marketing as being web-based.
Re:Sitters and Standers on Thursday December 05, 2024 @11:15AM (#42329510)
Accessible as in "better to understand", helping with bringing the idea to a more general audience.

A lot of people are uninterested in long texts or in this case parts of the expected audience might also have literacy issues.

Re:Sitters and Standers on Thursday December 05, 2024 @10:47AM (#42329275)
Thought the same. It is clear that this presentation is definetely biased towards showing the problems of standing workers, as there haven't been any negative options about sitting presented.

Unfortunately, while medically known and even legislated (forced breaks), problems of sitting workers are still widely ignored (often by themselves too) until too late or trivialized.

Can anyone explain why there wasn't any BGP activity on the Finland-Germany systems when the cable broke, while for Lithuania there was a massive spike?

Unfortunately it's been a long time since I learned about BGP, if anyone could help out here I'd be grateful.

Re:The tragedy of running an old Node project on Tuesday November 19, 2024 @11:37AM (#42185344)
And project specifying "requires python 3.X+" instead of Version X to Y is also a major culprit I often encounter.

Most of the times it will not work with the newest shiny python, which I only notice after already installing it and then having searched search the Github issues.

Re:Two Upstart Search Engines Are Teaming Up to Take on Google on Tuesday November 12, 2024 @09:10AM (#42115586)
> “We could de-rank results from unethical or unsustainable companies and rank good companies higher,” Kroll says of the eco-minded Ecosia.

Understandable knowing Ecosias goals, but I find it rather concerning their vision of a better search involves deciding what is good and bad.

Ranking by quality (against spam & SEO sites) is fine, but it should be applied equally to all Websites, and not target specific companies.

Older »