HNHacker News
TopNewBestAskShowJobs

oneshtein

680 karma · joined February 26, 2023

submissionscomments
oneshtein··on Android 16 QPR1 is being pushed to the Android Open Source Project
When it open source, it can be patched to fix RCE. Binary blobs are much harder to patch, so just buy a brand new car with brand new RCE.
oneshtein··on Why aren't smart people happier?
We cannot "test-drive" politics. We are testing in prod without rollback or backup.
oneshtein··on This week in 1988, Robert Morris unleashed his eponymous worm
Account "guest" with no password was provided by default back then, to help others do some work remotely, debug connection issues, or chat with admins.
oneshtein··on Are-we-fast-yet implementations in Oberon, C++, C, Pascal, Micron and Luon
«The term micron and the symbol μ were officially accepted for use in isolation to denote the micrometre in 1879, but officially revoked by the International System of Units (SI) in 1967.»
oneshtein··on Google flags Immich sites as dangerous
Everybody wants to dominate others using their strongest ability: smart, rich, strong, popular, fast, etc.
oneshtein··on Public trust demands open-source voting systems
Problem of distrust cannot be solved completely, but probability of cheating can be reduced significantly by using multiple independent vendors of voting machines, better if they are from different countries, AND using paper ballots, so voters will have choice.

Don't put all eggs into a single basket.

oneshtein··on GOG has had to hire private investigators to track down IP rights holders
Android is not backward compatible. Many old apps are crashing or refuse to work on newer Androids.
oneshtein··on GOG has had to hire private investigators to track down IP rights holders
Android is Linux. It has loads of users and loads of games.
oneshtein··on Lead Limited Brain and Language Development in Neanderthals and Other Hominids?
I ate salty products like crazy after year or two on pure water. My doctor told me to drink mineral water or tap water instead of pure water — the problem is gone.
oneshtein··on Electricity can heal wounds three times as fast (2023)
But this is true: the Tragedy of commons (AKA «keep profits, externalize costs») is a common thing in unregulated capitalism. Regulated capitalism tries to solve it with rules, lot of rules. Socialism tries to solve it with bureaucracy, lot of bureaucracy. Communism (no profits) and monarchy (monarch eats the costs) are somewhat immune to this problem.
oneshtein··on Tor browser removing various Firefox AI features
How to connect it to Ollama? I use PageAssist[1] extension for that.

[1]: https://github.com/n4ze3m/page-assist

oneshtein··on What is going on with all this radioactive shrimp?
> at the request of the hospital's maintenance manager

This one?

oneshtein··on Free software hasn't won
Yep, open source developers don't want/need to get paid, so give them f*ck and use their code for free.
oneshtein··on Free software hasn't won
Jails are created to secure users. Jailbreak is created to make users insecure!!!
oneshtein··on Free software hasn't won
> Pinephone's kernel is maintained by 1 person in their spare time

Most open source projects, except few popular ones, are maintained by 1 person in their spare time.

oneshtein··on A years-long Turkish alphabet bug in the Kotlin compiler
Kotlin is not for humans.
oneshtein··on A years-long Turkish alphabet bug in the Kotlin compiler
So, instead of adding two full letters, with proper upper case and lower case, you added two halves to hack Latin alphabet. This is the bug.
oneshtein··on A years-long Turkish alphabet bug in the Kotlin compiler
Yep, but you decided to abuse Latin alphabet instead of creating your own code page with your own letters and with your own rules.
oneshtein··on A years-long Turkish alphabet bug in the Kotlin compiler
It's the bug in the Turkish locale. They hacked Latin alphabet instead of creating a separate letter with separate rules.
oneshtein··on Google blocks Android hack that let Pixel users enable VoLTE anywhere
A phone company cannot test every phone in the world to block or whitelist it.
oneshtein··on Why do LLMs freak out over the seahorse emoji?
Gemini told me to create a team of leading scientists and engineers. :-/ However, we both agreed that it better to use Th229 based nuclear clock to triangulate location of a nearby time machine, then isolate and capture it, then use it to steal a warp drive schematics from the future to save humanity.
oneshtein··on Arenas in Rust
Vec size is dynamic, so no.
oneshtein··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
How to backport security fixes to vetted packages?
oneshtein··on Introduction to GrapheneOS
I have Pixel 6 with Graphene and Pixel 5 with stock OS. Also, I have an old ZTE Nubia, which still works. None of them was rooted.

Nubia was hacked remotely. It received no updates for years, so it was an easy target. I unlocked Nubia and plan to install LineAge OS to it when my Pixel 5 will die.

Pixel 5 was hacked from close distance via WiFi or BT.

Pixel 6 with Graphene is not hacked yet.

Lack of root doesn't protect me.

However, I use SafeDot to monitor phone access to microphone, camera, GPS, so I'm alerted when it starts to beep, which creates problems for spies, so SafeDot is banned by Google at request of СІА. I cannot fix this, because Google controls my phone instead of me. SafeDot still works on Pixel6 GrapheneOS with warning notification about it «unsafety» though.

oneshtein··on Europe is locking itself in to US LNG
Follow the money.

Russia warns Europe that it will freeze to death if help to Ukraine will continue -> Russia stops NS1 to demonstrate their economical superpower -> EU companies are looking for $18 billion compensation -> NS1 blows up to make an excuse.

oneshtein··on Introduction to GrapheneOS
Yeah, I have few bricked devices which reached the your goal.

No, I cannot rely on the app sandbox. If someone else controls a device, then this device can be used against me.

Your antivirus, scanner or not, is useless on your device for you.

My antivirus on my device is useful for me. It works fine on GrapheneOS (Pixel 6), but banned by Google on Pixel 5, which is not supported by Google with security updates. WTF?

oneshtein··on Introduction to GrapheneOS
There are technical solutions for this problem, which are banned or delayed by GooGle.
oneshtein··on Introduction to GrapheneOS
So, your proposition is to remove their ability to install antivirus software, like Google does in Android?

Users know about this problem and know how to mitigate it. Get out of my way, please.

oneshtein··on Introduction to GrapheneOS
Developers cannot trust a random phone «owner».
oneshtein··on Introduction to GrapheneOS
> Giving root breaks Android security model.

It's true only if user is the threat for the user, e.g. a user with low IQ but high curiosity, but such user usually cannot install GrapheneOS.

← PreviousPage 4 of 32Next →