TheDong

Joined 12 years ago

Karma
10,231
Submissions
2,624
Member since
Aug 28
View on Hacker News

Recent submissions

Comment · 1 day ago
It's almost impossible to verify the code on the hardware wallet really matches the code they released and that the hardware has not been tampered with.

Maybe the sim card is on a timer to broadcast your keys after a year, so you just can't detect cellular signal usage now.

To securely own bitcoin you have to first create a new chip fabrication plant to then make your own hardware wallet.

Comment · 4 days ago
Asahi linux only supports older M series processors still, and there's a lot of caveats with it.
Comment · 4 days ago
I purchase the hardware, I should be able to do what I want with it. I want apple hardware for the good processor specs and battery life and general hardware quality.

Apple should be forced to release the necessary hardware specs to develop drivers so that I can use my hardware I purchased as I want. They should be required to let me own my own signing keys to boot my own software.

Anyway, I'd personally want bootcamp because it's a step closer to being able to install Linux, an operating system that lets me have a good tiling window manager that works.

Why the heck would anyone want to use macOS willingly, where the window manager and file browser are both complete unconfigurable trash.

Comment · 9 days ago
F-Droid on android was a far better app store than Google's.

An Open Source / Free Software Only app store on iOS which only allowed reproducible builds would be so much better than the iOS app store for security.

I would trust that so much more, and I feel like anyone even marginally technically competent would too.

If Mozilla made its own app distribution platform for Firefox and Thunderbird, I'd also naturally trust that.

At this point, I do not trust apple at all. The iOS app store sells ads. If I search for my bank's name, a different bank comes up as the first result.

If you search 'Ledger Bitcoin Wallet' on the app store, someone who pays more for the ad slot can present you with a crypto stealer (which has happened in the past! the app store review didn't catch that obvious bullshit).

The app store's "due diligence" and "vetting" all went out the window as soon as they started selling the top search spot to the highest bidder.

Comment · 9 days ago
That dancing anime girl is from this video, "loli god requiem" https://www.youtube.com/watch?v=Ci_zad39Uhw

It's a video of an underage-looking ("loli") anime girl insulting the viewer for being a pedophile.

At this point it's mostly used by pedophiles in a sorta tongue-in-cheek way.

Of course, all the best security professionals are either pedos, israelis, furries, or all of the above, so it's not really surprising.

Comment · 11 days ago
Oh, wow, that makes it even sillier. If I want to delete certs from my system certificate store, I can do that, the stdlib should not be making that choice if it's not even packaging the things.
Comment · 11 days ago
I mean, they're the TLS certs are baked into the stdlib 'tls' package, not the compiler itself.

It's just an unfortunate unforced error that the go TLS package is bundled along with the compiler, in the same way Safari being bundled with iOS updates is an unforced error meaning a safari security bug requires a full OS update.

Comment · 12 days ago
gTLDs at least have some minimal level of accountability and security standards.

ccTLDs are at the whim of the country. If you went with the '.su' ccTLD from the soviet union some years back, well, that would have been quite unfortunate.

Legally I feel like they're also worse. Like, say you're an abortion clinic operating in the regressive country of the US, and you get a '.us' ccTLD, surely it's more likely the government outlaws abortions and censors your domain via the registrar than if you used a '.com'?

Comment · 15 days ago
Reverse engineering doesn't help for iOS very much since even if you build your own version of their app with that feature unlocked, iOS doesn't allow you to sideload.

You'd have to pay $100/year for an apple developer account and then refresh the app every 14 days (since publishing your own hacked version on the appstore would plainly be a copyright and trademark violation, and if you use a developer account to load a developer version of an app on your device, you have to constantly refresh it).

Switch to one of the linux phones if you actually want to install software on your device.

Comment · 15 days ago
I mean, Tesla demoed, promised, and took reservation money for a roadster reboot that _also_ didn't contain any technology China didn't have in 2017, and at this point they still haven't delivered on that and it feels safe to call it a scam.

Just because the technology is technically feasible doesn't mean that a specific company is not scamming you when they promise it.

And Tesla already has enough of a history of fake promises (your tesla will be a self-driving robotaxi earning money while you sleep within a few years, FSD will take you across the country while you sleep by next year, humanoid robots, the new roadster is taking reservations now and will deliver soon, regulation is the only thing holding up FSD, etc etc).

Comment · 16 days ago
Comment · 17 days ago
And "discord" means "disagreement", "lack of harmony", "arguments" in English. Even weirder name for a chat application in an even more commonly used language.

"Slack" associates pretty strongly with "slack off" (get no work done) too, so that one's also strange.

I think "Zulip" has the best naming of all these.

Comment · 17 days ago
I wouldn't be surprised if Samsung or Xiaomi eventually forked to make their own "developed in the open" Android.

Though given how little those companies have respected their users so far, I feel like this is a bit of a monkey's paw.

Comment · 17 days ago
Google is doing better here than Apple. Most google devices have an unlockable bootloader.

I have old Chromebooks and Nexus Tablets that are EoL, but I can install linux on them and give them a second life.

The source code for my old EoL pixel phones is out there, it's just a matter of effort to port Ubuntu or PureOS or one of the other Linux phone distros to them.

It's Apple that is being as evil as possible when it comes to stomping down alternatives, they don't release iOS source code, they bricked most of my old devices when they EoL'd them by not letting me unlock the bootloader and install my own OS, they don't release drivers.

I'm deeply unhappy with Google's current direction, but they're still lightyears from the level of evil Apple inflicts upon us.

Comment · 18 days ago
First let us install other browser engines on iOS, and then we can talk.

Safari has the most obscene monopoly of any browser ever. IE 6 came pre-installed on windows machines, but you could always install Mosaic or such.

Google Chromebooks come with Chrome as the only default browser, but you can still run Firefox on Chromebooks just fine (even in two different ways, the supported android app version, and the semi-supported linux terminal + launching firefox that way).

Heck, iOS's monopolistic behavior is so bad that multiple regions (the EU + Japan) have already ruled against their behavior, though in reality Apple has complied in a way that makes it impossible to actually make a second browser engine for iOS still (going against the spirit of the law, but the courts haven't caught up to them yet).

Safari is also an awful browser in that it requires someone to buy an expensive machine to see if their site works on it.

I can run a windows trial copy in a VM to see if my site works in IE, I can run Chrome or Firefox on linux to verify if my site works in them. I can install a free android emulator on any common OS to see that my site renders right in those.

But Apple doesn't give me a legal way to freely run an iOS simulator nor even a macOS VM on my linux machine, I have to pay money, to buy their hardware to see if my site will work on Safari.

And even worse, Safari is the browser with the largest number of rendering bugs and quirks currently, while also having a huge number of users (since iOS users can't install another browser), so any web developers are basically forced to shell out for apple hardware.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton