HNHacker News
TopNewBestAskShowJobs

drewfax

743 karma · joined December 9, 2025

submissionscomments
drewfax··on Humans Are Reading Your ChatGPT Chats, Lawsuit Claims
If anyone assumes their AI chats are private, they must be stupid. Of course, all AI companies are going to evaluate chat sessions for improving their models whether it's disclosed in the privacy policy or not. They're investing tonnes of money into this, so your privacy is a negligible problem for them.
drewfax··on GrapheneOS on AI Usage
Nothing surprising here. AI is a tool just like an IDE, debugger, etc. All the regular tasks like coding, testing and review still holds true. Developer is still responsible for their work. Reviewer is responsible for ensuring code quality and standards. As long as the submitted code is of high quality and does not violate copyright, AI is not a concern.

It's stupid only when an organization refuses to understand AI is a text prediction software and thinks it can replace humans in coding, testing, reviewing etc.

drewfax··on Actively exploited sandbox RCE in all Chromium versions
That's how the system or browser should be configured. Secure by default and any insecurity must be an opt-in. But Google won't do it because their websites are JS heavy monster trucks and millions of websites run their tracking scripts which require JIT enabled by default for optimal page load.
drewfax··on An open DNS recursive service for free security and high privacy
That is the point and business of Quad9. It's not their fault for you not knowing what Quad9 is.

I don't want my family to get malware from sketchy websites. Quad9 offers a simple solution for these usecases. I'll take the false positive anyday over unfiltered DNS.

drewfax··on GrapheneOS says Pixel 11 has MTE support after all
So other projects are not supposed to critize Google? Graphene's focus is on security and they complain about lack of security in your products. Seems valid to me.

Also security and using non-Google OS are not niche usecases. I'm not sure how you are working on Android, the most popular OS while claiming security is a niche usecase. In fact, I have less confidence in security of your work.

drewfax··on Credit Card Rewards Became a $9.2B Wealth Transfer
Credit card usage has been increasing in India.

Source: https://bfsi.economictimes.indiatimes.com/articles/credit-ca...

Besides, NPCI has introduced merchant transaction fee for UPI now causing decline in UPI transactions.

drewfax··on Firefox is now the last major browser that still supports uBlock Origin
New generations don't 'browse' web anymore. They 'consume' YouTube, Instagram, Android TV and other walled gardens. These generation don't even know they could change contents being displayed on their device to their wish. For them it's just whatever the app shows. They don't understand Web, extensions, DNS etc. I don't have hope for new generations. We're are the old men now yelling at AI and App Stores.
drewfax··on Firefox is now the last major browser that still supports uBlock Origin
That's why Brave probably built an in-built adblocker written in Rust. Works great on both desktop and mobile.
drewfax··on Firefox is now the last major browser that still supports uBlock Origin
Now they are doing it to Android with mandatory developer identity verification and Play Integrity. I wonder how those engineers sleep at night.
drewfax··on US citizen charged after GrapheneOS phone wipes during airport search
How would it work? Isn't it easy for the authorities to check the list of users on the device?
drewfax··on [dead]
I suspect this is either some ground work for planting a future backdoor or a noob who found out there's a ~/.cache directory.
drewfax··on Vision 50 Years Phone – Keeping old Android phones fast without root
Is this a joke I don't understand? Aren't Android apps sandboxed? How does these two commands supposed to make my phone fast for 50 years?

rm -rf ~/.cache/* 2>/dev/null

rm -rf /data/data/com.termux/files/usr/tmp/* 2>/dev/null

Source: https://github.com/50YearsPhone/vision-50-years-phone/blob/m...

drewfax··on UPI: Anatomy of a Payment Transaction
Yes, UPI works. But it's a terrible system for privacy and autonomy. It has so many intermediaries, requires phone number and linked to person's identity. It should not be called a peer-to-peer payment system in anyway. It is controlled by the government rather than Visa or Mastercard. That's the only the difference.
drewfax··on OpenWrt One – Open Hardware Router
I too use ASUS RT-AX53U. Decent hardware. But stock firmware was terribly slow. IPv6 didn't even work.

I heard OpenWrt when I searched how to fix the stock firmware. Flashed it and never turned back. Now, OpenWrt is a critical infra in my house for adblocking, DoH, Firewall, Network Segmentation etc. None of these are possible with the stock firmware.

drewfax··on Google Hits 50% IPv6
Similar experience. I bought an ASUS router and enabled IPv6. It slowed down everything down. Immediately flashed OpenWrt on it, IPv6 works like charm.

It's usually bad configuration done by the router vendors. It doesn't mean IPv6 is bad.

drewfax··on GrapheneOS has been ported to Android 17
That completely goes against what they're working towards. I understand why you would want to root your own phone, but GOS is targeting highest security standards and root ain't one of them (for good reason).
drewfax··on Leaving Mozilla
Some things Mozilla could have done correctly:

    - Kept Rust and sold best-in-class tooling like IDEs to enterprises.
    - Polished Firefox OS and distributed apps in their store for a 1% commission.
    - Kept Servo and made the most secure and fast browser that no one else had made.
    - Partnered with OEMs to offer Firefox as the default browser.
Yet the best they could do was pay their CEO for nothing.
drewfax··on Leaving Mozilla
Firefox OS was a brilliant idea. Imagine cross platform and open apps based on HTML/JavaScript that feel native and polished. 2026 would have been amazing if Mozilla executed it right.
drewfax··on Leaving Mozilla
Extensions were why Firefox was so popular among those considered 'abnormal.' Chrome just copied the idea. VPNs, Pocket, and sync services are all great features; it's their implementation and execution that is so poor.

All Mozilla (and Firefox) needs is to be run by developers, not the fucking MBAs.

drewfax··on Haskell Foundation 2026 Update
I tried building a cross platform shared library. I still couldn't get GHC to generate the library with Haskell's Runtime (RTS) statically linked. Tried multiple AI models and nothing could make it work. Eventually gave up after a month.

Also there's no support for Android and iOS, atleast not without spending months in recompiling GHC with haskell.nix or other third party projects.

Eventually I switched to Rust. It's tooling is so mature that I can focus on developing than compiling GHC.

Despite these demerits, I love Haskell language and lazy eval. I wish I can use it one day.

drewfax··on Mullvad exit IPs are surprisingly identifying
Thank you for being on our side Mullvad. I'm using Mullvad through Tailscale. It's been an awesome combination for my self-hosting and privacy needs.
drewfax··on Google broke reCAPTCHA for de-googled Android users
GPL v3 specifically requires the vendor distributing the GPL v3 components to allow the user to change the software on the end user device. This means no more locked bootloader. We would have had choice to install custom Android distributions and thus less Google monopoly.
drewfax··on Google broke reCAPTCHA for de-googled Android users
I wish Linus had adopted GPL v3. He had the power to stop this madness from big tech, but he sided with them. It just reveals that he never fully understood the reason for the existence of GPL in the first place.
drewfax··on Mythos Falls into the Wrong Hands
This feels like a PR stunt by Anthropic. We understand, Mythos is a great model. But please stop unneeded publicity for the sake of IPO.
drewfax··on Five men control AI. Who should control them?
One man controls entire country. Yet we call that freedom and democracy.
drewfax··on WireGuard makes new Windows release following Microsoft signing resolution
> make sure partners understood this

Since when they were partners to Micro$lop? First, it's thug like behavior taking the ability to run code on our own computers without their approval. Second it's even more evil justifying this behaviour by calling the developers "partners".

drewfax··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
GrapheneOS is doing lot of things right in this regard. Robust permission system adopted from AOSP and hardening by default in every imaginable way. Things like hardened malloc, storage scopes are excellent security features. Malware cannot do much even with the default settings.
drewfax··on OpenWrt 25.12 Stable Release
What do you mean by persistent configs? OpenWrt always preserved the config between upgrades.
drewfax··on Motorola announces a partnership with GrapheneOS
Samsung phones and TVs have tons of adware built in. I'm pretty sure they won't want GrapheneOS on their phones. Motorola, on the other hand, has always shipped stock OS with minor customization. The only problem with Motorola is that their support is very short (like 2 years).
drewfax··on Microsoft May Have Created the Slowest Windows in 25 Years with Windows 11
Vista changed the Windows security upside down. It brought all the modern kernel features Windows embraced upon. But they went overboard with graphics that average consumer hardware was not ready for. Despite that I don't remember it came with any bloatware like Windows 10 and 11.
Page 1 of 2Next →