News for hackers. Stuff that matters.

silverliver

Re:Decreasing Certificate Lifetimes to 45 Days on Wednesday December 03, 2025 @04:50AM (#46132503)
This is too short and the justification provided is flimsy at best.

I predict that normal people will began to get comfortable with ignoring SSL errors, even more than they already are. Perhaps we will see the proliferation of https-stripping proxies too.

> We know exactly how to do these things digitally. Many European countries have had stored-value payment schemes in the 90s. Japan still does today.

But how do they prevent people double spending the same amount? Say someone has 100$ and boards on a plane. During the trip, this person buys a bag of potato chips sold for 90$. At the same time, his bank account is automatically charged 90$ for a bill.

With credit cards, handling this case is baked into the system. As far as I am aware, direct debt has no equivalent.

I'll just repost what I posted in the last thread:

> There is no on-device scanning without compromising privacy. Scanning that can detect child abuse can also detect human rights activists, investigative journalists, and so on. I imagine this technology can be easily used by the government to identify journalists by scanning for material related to their investigation.

> On-device scanning is a fabrication that Apple foolishly introduced to the mainstream, and one that rabid politicians bit into and refuse to let go.

And I'll add this: Citizens lose of their right to privacy is the death of their democracy.

Re:Just Let Me Select Text on Thursday September 25, 2025 @04:51AM (#45370652)
Don't modern screenshot apps allow for selecting text? just take a video and select away.
Ha! We've become the robots!
This is my plan as well. If we loose the ability to run GrapheneOS, I'll get an iphone and treat it as a locked down home router, and use a linux phone with open source apps for my calls/messaging.

I will also do everything in my power to halt support for Android in favor of web apps. No sense duplicating work for two separate platforms if one is just a crappy clone of another.

One look at the victims (or their mangled remains) immediately discounts all three.
Re:Self Propagating NPM Malware Compromises over 40 Packages on Wednesday September 17, 2025 @07:26AM (#45274427)
This is the right answer. I'm willing to stick my head out and assert that languages with a "minimal" standard library are defective by design. The argument of APIs being stuck is mood with approaches like Rust's epocs or "strict mode".

Standard libraries should include everything needed to interact with modern systems. This means HTTP parsing, HTTP requests, and JSON parsing. Some laguages are excellent (like python), while some are half way there (like go), and some are just broken (Rust).

External libraries are for niche or specialized functionality. External libraries are not for functionality that is used by most modern software. To put your head in the ground and insist otherwise is madness and will lead to ridiculous outcomes like this.

There is no on-device scanning without compromising privacy. Scanning that can detect child abuse can also detect human rights activists, investigative journalists, and so on. I imagine this technology can be easily used by the government to identify journalists by scanning for material related to their investigation.

On-device scanning is a fabrication that Apple foolishly introduced to the mainstream, and one that rabid politicians bit into and refuse to let go.

Are all UN nations bound to this declaration or at least those joining after 1948?
Re: on Wednesday September 03, 2025 @04:38AM (#45113516)
What was allowed to happen in Palestine has set a new standard for the value of human life and morals. It was not only set for the Palestinians but also for the other side and everyone else.

Perhaps this is no consolation to the victims, but the pendulum will continue to swing both ways as it always has. These monsters and their offspring will reap what they sowed. Humanity too will reap this reward.

Re:FreeDroidWarn on Tuesday September 02, 2025 @04:03AM (#45100296)
OP, I recommend switching to the LGPLv3. It ensures users remain in control over your part of the code while avoiding this type of reaction.
Re:Nous Research presents Hermes 4 on Sunday August 31, 2025 @12:12PM (#45084279)
Still better than OpenAI HR.
I hope AI never gets legislated where you live, and if it does, I hope other countries don't and absolutely pulverize your country and any chance of these nonsensical reactionary laws taking hold elsewhere.

The solution to some people being susceptible to influence is not to cover the entire world with styrofoam. Mind you, I too stared suicide in the eyes and unlike you, I was not lucky enough to escape unscathed. That said, I will never propose something as unhinged as this.

lmarena did the same thing and saw its usage take a nosedive. I wonder if the same thing will happen here.
It wouldn't unless the US is willing to justify having their domestic companies fall under the jurisdiction of other countries. Geopolitical reciprocity is still alive an well as the US is starting to find out.
Re:US Intel on Wednesday August 27, 2025 @04:15AM (#45036823)
This was always going to be the logical conclusion to US hostile policy regarding the the proliferation of IC fabrication. The US, not cost, was the primary factor that discouraged many countries from pursuing their own IC fabrication capabilities. Had they not been so hostile, many countries would have had enough capacity to cover for the US until it rebooted its own industry.

This is also the same trap that China is barrelling into right now and they will absolutely find themselves in the same position eventually.

Re:Uncomfortable Questions About Android Developer Verification on Wednesday August 27, 2025 @03:49AM (#45036658)
Can Google be sued for misleading and defrauding phone owners?
Re:Uncomfortable Questions About Android Developer Verification on Wednesday August 27, 2025 @03:42AM (#45036613)
My bank retired their online banking website in favor of their app.

Not only that, but many of their core services (national payment network) are now exclusively offered in their app and no where else (yes, they will not allow you to do them in person or through their ATM). Your bank _will_ disable their website when you are the only one left using it.

I am not exaggerating. There is no way for me to use these core services if I don't use their app and they wont allow me to use their app thanks to their google play policy.

Unless otherwise mandated, their website will go away and they will have their way with your rights and make you pay for it.

Don't shrug this off. Fight this while you still can.

I wonder who will flinch first. I highly doubt domestic manufacturing can scale up fast enough to meet demand but It'd be fun to be proven wrong.
Honestly, you don't.

Your government is completely out of control. I can't care about you if you, UK citizens, choose not to do anything about it. You are the only people on the planet in any position to do anything about this.

Good luck.

This deplorable company has just condemned humanity's right to open computing. They sold themselves as open, smothered out all other open competitors, and then once they had complete dominance over the open phone market did this.

Even if Google backtracks now. Governments will latch on to this idea just like they have with client side content scanning. This will never go away. Thank you google you despicable pieces of shit.

What now? Where do we go from here?

Agreed that it's a se-inflicted problem. Like others have stated, restore the network-access permission and have it disabled by default with a big warning shown when the user attempts to enable it (remove the warning if the app has been verified by google).

This has nothing to do with malware. The sleazy fucks at google just want absolute control over our devices. It's as simple as that.

Yep, at this point aiding google is simply inexcusable. Taking into account the scale of the harm to humanity, what is being done by these google developers is truly evil. These developers cannot feign ignorance. Not with this level of harm.

I wonder if the individuals implementing this will ever be held accountable for their crimes. I would certainly be in support for it.

> Unfortunately the government is winning

In the UK. Their abuse will be restricted to people living within their borders unless the US allows it. The UK is not in any position to harass US companies, even more so now that they lack EU's backing.

Only UK residents (including their children) will really be harmed by this nonsense.

This is why open source software is stronger than ever despite its shortcomings and efforts of large orgs to kill it. Rather than bending backwards and treating it like property (as originally demanded by Bill Gates in his open letter decades ago, we did the right thing and treated it like knowledge (e.g. like mathematics).

Intellectual property was a horrible flawed idea that the world will continue to pay for dearly for decades after it is finally discarded.

Then to use Rossmann's counter-argument (TFV): Let's walk in a police station and have the nice policemen take a look instead.
Isn't democracy rendered impossible with laws like this?

I mean, if slavery was still legal or LGPT still illegal, would the government have been able to use this technology to smother political movements before they ever start? Wouldn't the government be able to add client-side scanning for words or phrases they don't like (not just images of child abuse)?

For democracy to work at all, people must at least be able to freely discuss there contrarian thoughts amongst themselves, even if they run contrary to the ruling party's wishes. I did not expect the cradle of democracy to be the one to kill it.

Consoles are a monopoly too and I hope governments go after them next.
Re:Mastercard deflects blame for NSFW games being taken down on Wednesday August 06, 2025 @03:58AM (#44809073)
I would argue that entities such as VISA and Mastercard have so much power that they are government-like entities and should be treated as such (i.e. a common carrier).

Older »