HNHacker News
TopNewBestAskShowJobs

gear54rus

882 karma · joined May 25, 2014

An engineer passionate about JS and basic tech freedoms (e.g. right to repair, OSS, net neutrality).

I think the web with all its shortcomings is the best thing to happen to tech industry and I want it to succeed. That does NOT mean it should be used for everything.

submissionscomments
gear54rus··on Walled Gardens Can Kill
FWIW when sth like this happens, you can try to go to a place like APKPure and actually download the damn thing without anyone telling you that you can't.

Also works for pinning versions of apps that ship some malware (like safetynet detection) with a new update. Apps installed from there are not linked to play store by default and so updates are not checked.

gear54rus··on Walled Gardens Can Kill
I do wonder if there's something like RDP but for phones.. Like if you could keep a burner phone on somewhere at home maybe and RDP into it to use these crappy malware apps so that they don't complain.

Would require transparent file and copy buffers I guess. In addition to remote desktop functions.

gear54rus··on Hardening the Firefox Front End with Content Security Policies
That's crazy. Did it happen to a public extension or an unlisted one?
gear54rus··on Hardening the Firefox Front End with Content Security Policies
Exactly. It's been clearly established that web extensions' code is more priveleged than a page code, as it should be. The amount of people going 'muh sesoority' in this thread is baffling.
gear54rus··on Hardening the Firefox Front End with Content Security Policies
I don't think this is being enforced in practice, thankfully.
gear54rus··on Hardening the Firefox Front End with Content Security Policies
One of the possible workarounds would be to just remove the damn header before it causes any further inconvenience. I think they do allow `webRequest` API usage in the store, don't they?
gear54rus··on Ask HN: What are you working on? (March 2025)
I got frustrated with the current web becoming more and more unusable and made a browser extension to fix that.

It's an addon that allows one to modify any web page behavior. You can write rules for things like redirecting reddit to old reddit or keeping youtube videos playing in the background.

It's like Tampermonkey/Greasemonkey/etc but it works on HTTP request level and can modify scripts/styles/markup before they are ever rendered making it considerably more powerful.

Currently it only works on Firefox (and Firefox Mobile) because it's the only browser that supports the necessary APIs. It's seen its first release already but the UI is a bit lacking :)

AMO: https://addons.mozilla.org/en-US/firefox/addon/web-defuser/

Sources: https://gitlab.com/gear54/web-defuser

Example rules: https://gitlab.com/gear54/web-defuser/-/snippets

gear54rus··on I Quit Google Search for AI–and I'm Not Going Back
As opposed to 'ai' littering all of the response with more subtle ads that aren't even marked?
gear54rus··on uBlock Origin is no longer available on the Chrome Store
Taking this as an opportuinty to pitch an extension I developed to do that and more: https://addons.mozilla.org/en-US/firefox/addon/web-defuser/

The main difference between this and current element blockers is that Web Defuser allows you to block annoying behaviors (by modifying requests/responses in flight) in addition to elements.

At the moment it's a bit lacking in the UI department, I'd appreciate early adopter feedback (you can contact me at gmail with my username).

gear54rus··on Introducing command And commandfor In HTML
> set UIs back

Oh that's why 90% of online interactions are now on the web now ... stupid me thinking because it's a superior solution.

And before you say '90% are actually on mobile', well mobile doesn't use shit from 1994 also. Wonder why.

gear54rus··on Mozilla flamed by Firefox fans after reneging on promises to not sell their data
It does not suppport extensions on mobile, bascially useless at being a user agent in the true sense of the word.
gear54rus··on Reviewing the cryptography used by Signal
I'd be enthusiastically using it for 'normal' communication if they haven't idiotically removed SMS support.

Without that, they won't ever reach mass adoption because WhatsApp and Telegram are already there and are superior in basically every way.

gear54rus··on Setting up a trusted, self-signed SSL/TLS certificate authority in Linux
And thankfully, just like a loaded gun, there are still ways to get it without paternalistic types getting in the way.
gear54rus··on Caddy – The Ultimate Server with Automatic HTTPS
is there write up or code for that?
gear54rus··on I'm Done with Ubuntu
Just in the same boat as you but I wanted to play VR, you know? So had to go to 10 just because Valve doesn't support lower windows versions.

So if you don't upgrade you better be happy with what you have for the rest of your life haha.

gear54rus··on I'm Done with Ubuntu
> every upgrade broke something

A tangent, but I just realized that there's no OS nowadays that I feel comfortable upgrading at all lol.

- Windows? Make sure to find that script which disables all the preinstalled crap like defender and updates

- MacOS? It's time for apple intelligence boi

- Ubuntu? System encountered a critical error popup on startup

- Android? Your rooted phone is now again detectable by play integrity malware

So my workflow is instead to make some time and do a clean install every 2 years or so. Keeps the clutter out too (re-install only things I actually need).

gear54rus··on Httptap: View HTTP/HTTPS requests made by any Linux program
> How many times have we seen people install spyware because of claims that it will remove spyware?

That is the kind of example that completely disproves your point. How many times do we have to fall into 'just lock everything down for safety' pit and end up with being forced to look at even more ads as a result before we learn?

The only way to be safe is to be informed, 'just works' doesn't exist. Don't trust anyone but yourself.

gear54rus··on Httptap: View HTTP/HTTPS requests made by any Linux program
Apparently there's JS interface for it too: https://www.npmjs.com/package/mitmproxy

But the problem with it is that you have to configure proxy in the app (they do got transparent and wireguard modes but there's still quite a bit of configuration).

gear54rus··on Httptap: View HTTP/HTTPS requests made by any Linux program
There's at least https://adnauseam.io/ for that already
gear54rus··on Httptap: View HTTP/HTTPS requests made by any Linux program
can it modify requests or responses? with the current web getting increasingly user-hostile a need for tool like this was never more apparent

especially if it doesn't require proxy configuration

gear54rus··on Bitwarden is turning 2FA on by default for new devices
At least they are not 100% head-in-ass sesoority yet and still allow to at least self-host to disable that crap.
gear54rus··on Liberux: Linux phone
So go back to asking for directions on every corner or backtracking during the road trip, is that what you're saying? :)

Throwing away progress is not the answer to fighting the corporate greed and device lockdowns.

gear54rus··on Show HN: I made a tool to save multimedia from various platforms
So does it support downloading something that requires a specific account? This sounds like a job for a browser extension and not a website.

Otherwise a very good idea and definitely necessary in today's world.

gear54rus··on IMG_0001
View count is nice but I'd like to be able to share a video that I got with someone else, I think that would be a great function.
gear54rus··on Rewrite Git history via drag-and-drop
> "right click the commit, click modify, make edits, resolve any conflicts"

I don't know why the docs are this way, it's literally that. Maybe old version or something. This page is closer to the truth.

https://docs.syntevo.com/SmartGit/Latest/Manual/GUI/Branch/R...

You can download it and check it out, they have trial licenses.

gear54rus··on AI poetry is indistinguishable from human poetry and is rated more favorably
Eventually for various definitions of eventually (most of which denote a time period longer than your life).

Longer, if they keep diluting the term and selling shit labeled as AI.

gear54rus··on Hetzner cuts traffic on US VPSs, raises prices
Ampere seems to be unavailable in EU region (out of capacity). Were you able to create it recently?
gear54rus··on Rewrite Git history via drag-and-drop
> many people will pay for a GUI interface

Then many people should purchase SmartGit client. Which supports more of the same thing (with couple more clicks, granted) but also has a proper tree view. Also supports linux ffs.

Never working with git without it again.

gear54rus··on Hetzner cuts traffic on US VPSs, raises prices
Don't think we're close to that point yet. You can still get the same server for free from oracle free tier if you're willing to put up with god awful enterprisey control panel.

Also that linode CPU is virtualized (i.e. at least some of that cache is shared).

gear54rus··on MacOS sometimes leaks traffic after system updates
A self-hostend STUN/TURN server maybe? I don't know but I'm def not installing a VPN for this. Considering I might have another one already running. The issues that would arise from this are numerous.
← PreviousPage 4 of 24Next →