mctt
Joined 10 years ago
Karma
77
Submissions
45
Member since
Sep 26
Recent submissions
Comment · 14 days ago
Do you mean Ken Thompson?
There is apparently a famous talk named "Reflections on Trusting Trust"by Ken Thompson - the one where he describes how a compiler can be tricked to insert a Trojan horse that reproduces itself even when the source is "clean".
Comment · 2 months ago
https://alan.is/insights/between-a-mugger-and-the-feds-what-...
"The duress PIN does not overwrite data. It wipes the encryption key, making the data inaccessible but leaving it technically present on the storage."
Comment · 2 months ago
I installed this on my testing server. Everything worked.
It needed 13.3-U1 so I performed a manual tar upgrade/update because I was still on an older release on the boot USB.
https://download-core.sys.truenas.net/13.3/STABLE/U1/
I didn't use the latest U2 because FreeCORE didn't ask for that.
I have not tested; sh freecore-enroll.sh --revert or RETURN TO 13.3 from the web admin interface.
Comment · 2 months ago
No. The encrypted data is still there, just the keys were wiped.
Comment · 2 months ago
Evidence has not been destroyed. And if we are using that analogy the key to the locked box has been thrown away.
No evidence was destroyed.
Comment · 3 months ago
https://github.com/punnerud/tailscale-mpe-rust
Might be this.
Comment · 4 months ago
Hacker news Sans Ai
https://elijahpotter.dev/hnsansai
Comment · 5 months ago
This reminded me of a comment from CIA whistleblower John Kiriakou;
"It was my experience at the CIA where literally every Israeli prime minister since the 1980s would come to Washington, which they do all the time, and no matter who happened to be in the White House, they would say 'Please bomb Iran, please bomb Iran, please bomb Iran.' And every president would say 'We're not going to do that.' Until this president..." [39:15]
Comment · 5 months ago
Form the article;
"The real safety net is that Bitwarden’s clients are Apache 2.0 licensed."
Comment · 5 months ago
I bought a Pixel 7 from BackMarket to test out GrapheneOS. I have previous positive comments and conversations in my account history.
Comment · 8 months ago
The article does not say anything about F-droid. However, there was discussion about this a few months ago;
F-Droid and Google's developer registration decree
https://news.ycombinator.com/item?id=45409794
F-Droid warns that Google's new "Developer Verification System" will require all Android app developers, even those outside the Play Store, to register personal data and pay a fee to Google to remain installable. The project argues this mandate threatens the existence of free and open-source ecosystems like F-Droid by ending anonymous development and stripping users of the right to choose their own software.
So that is one threat to what we have now. Right now you can install an APK that you trust and have been using for years.
What the article does say is that Samsung is removing several core options from the Android recovery menu, including the ability to sideload updates via ADB or SD cards and the "wipe cache partition" tool. While the reason for this change remains unconfirmed, it appears to be a permanent security policy shift tied to the One UI 8.5 update and the February 2026 security patch.
So why does this matter? Well some users like nocturn9x [0] have been able to take back control of their devices by installing: 1. An Unlocked Boot Loader. 2. An Unlocked OneUI/ROM 3. And then F-droid style installs are not problem.
Specifically, you can still install your trusted APK if you perform these steps, own a device where the hardware eFuses have not been blown and decline "Play Protect" nag screens and OneUI updates.
Comment · 8 months ago
8. External storage works. This is the only mobile OS I've found that has stable support for an External SSD.
I bought a second hand Pixel 7 to test this and an exFat SanDisk Extreme Portable 2TB works with reads/writes perfectly.
Comment · 8 months ago
Yes, and it is very easy. https://news.ycombinator.com/item?id=46223051 "Flash a driver's license at a liquor store to buy a single-use token" And to save a debate, you can swap the phrase "liquor store" for "store" aka supermarket/grocery store.
Comment · 8 months ago
https://www.pangram.com/history/f51a237d-df7c-46cb-8cf2-c5b7...
It scores 100% human written.
Comment · 8 months ago
I got that reference