bramhaag

8 ms·

61.
by bramhaag 10mo ago
GrapheneOS has patched this CVE back in September, as long as you've opted into the security preview releases: https://grapheneos.social/@GrapheneOS/115647360248469626
62.
by bramhaag 10mo ago
The poor advertisers don't get great exposure from the helmet cam shots, so we mostly get the boring, wide-angled shots instead on the broadcast.
63.
by bramhaag 10mo ago
This isn't a great time for them: https://social.anoxinon.de/@Codeberg/115652289949965925 https://news.ycombinator.com/item?id=46131693
64.
by bramhaag 11mo ago
Why would releasing the code under a FOSS license prevent you from adding ads?
65.
by bramhaag 11mo ago
Meanwhile, modern Apple users: https://youtu.be/RDBX6FTYLoQ
66.
by bramhaag 1y ago
> The people I know who run all do it for the exercise, not because they like the running. That sounds like torture. Why would you voluntarily practice a form of exercise that you actively dislike, when there are basically infinite optio
67.
by bramhaag 1y ago
It can be quite elegant. You can avoid the whole temporary or external ID mess when the client generates the ID, this is particularly useful for offline-first clients. Of course you need to be sure the server will accept the ID, but that is
68.
by bramhaag 1y ago
The thing that everybody expected to happen, happened. At least the kids are safe. Why were these images not encrypted, and why were they retained for longer than was necessary?
69.
by bramhaag 1y ago
I think it's beautiful he got to go out on his own terms, when he felt it was the right time to do so. I'm often reminded about a case in my own country: a young person had decided it was time to end her life after struggling for
70.
by bramhaag 1y ago
> Does it say GPLv3 on the tin, or does it say "Compatible with GPLv3"? As per [1], it says GPLv3 on the tin. > If you mix BSD and MIT code, the result doesn't suddenly become one or the other, but rather a
71.
by bramhaag 1y ago
I interpreted the conflict clause differently (explicit clause vs no clause = a conflict), but I can understand this interpretation as well. If I understand correctly, the derived work would be distributed under the Combined License (say, G
72.
by bramhaag 1y ago
> So no, this won't allow you to relicense as GPLv2. But you can use GPLv2 code. I don't think your interpretation is correct: If the Licensee Distributes or Communicates Derivative Works or copies thereof based up
73.
by bramhaag 1y ago
Perhaps someone else can clarify this, but I've been cautious about using this license instead of AGPLv3, because even though it includes this clause to close the SaaS loophole: ‘Distribution’ or ‘Communication’: any act of selling
74.
by bramhaag 1y ago
+1 for Aegis. Encrypted backups, easy to import/export multiple formats, and very customizable.
75.
by bramhaag 1y ago
Bandcamp is primarily for independent artists and independent record labels. Depending on what music you listen to, you will either not be able to find anything (e.g. anything popular enough to be played on the radio), or you will be able t
76.
by bramhaag 1y ago
> a container breakout looked out of the question as every possible known breakout had been patched This is the part that concerns me. It only encourages an attacker to sit on an exploit like this until a new container breakout i
77.
by bramhaag 1y ago
> We reported the vulnerability to Microsoft in April and they have since fixed it as a moderate severity vulnerability. As only important and critical vulnerabilities qualify for a bounty award, we did not receive anything, except
78.
by bramhaag 1y ago
Yes, and that's also true for SMS messages and your passwords. That is why having MFA is important.
79.
by bramhaag 1y ago
I use the web app on my phone as well, and it's... usable. The mobile app is quite slow, probably because React Native apps are far from being native, so in that regard the experience is the same. Being able to block all enshittified f
80.
by bramhaag 1y ago
In this case there is also a perceivable benefit for the user. SMS 2FA is vulnerable to sim swapping, this is not possible when TOTPs are delivered in-app. The app is also FOSS [1], so even if you're paranoid you can still inspect what
81.
by bramhaag 1y ago
I wish Firefox wasn't so insecure. On Android, although a built-in isolatedProcess API [1] is available for them to use, there is no sandboxing. No sandboxing on the web in 2025 (!!!). This has been an issue for so many years, yet Mozi
82.
by bramhaag 1y ago
Leechblock NG [1] allows you to block sites on a schedule or add time limits. [1] https://www.proginosko.com/leechblock/
83.
by bramhaag 1y ago
In yesterday's thread about Grok 4 [1], people were praising it for its fact-checking and research capabilities. The day before this, Grok was still in full-on Hitler-praising mode [2]. Not long before that, Grok had very outspoken opi
84.
by bramhaag 1y ago
Is there anything like this that accepts EU customers?
85.
by bramhaag 1y ago
Another way to define fairness could be based on the song duration. Is it fair if two people get to play the same amount of songs, but one picks songs with an average duration of 3 minutes, while the other picks 15 minute long songs?
86.
by bramhaag 1y ago
> In 2026, the Commission will present a Technology Roadmap on encryption to identify and evaluate solutions that enable lawful access to encrypted data by law enforcement, while safeguarding cybersecurity and fundamental rights. There i
87.
European Commission presents Roadmap for lawful access to data(home-affairs.ec.europa.eu)
19 points by bramhaag 1y ago|19 comments
88.
by bramhaag 1y ago
Micay did not fully leave the project [1]. AFAIK he is the only senior developer left, after their other senior developer was forcibly conscripted earlier this year [2]. [1] https://discuss.grapheneos.org/d/12565-is-gos
89.
by bramhaag 1y ago
In which ways is CalyxOS "better"? This comparison is pretty damning: https://eylenburg.github.io/android_comparison.htm Calyx is _not_ a hardened OS, and runs on devices with insecure hardware and firmware (like
90.
by bramhaag 1y ago
GrapheneOS support for Fairphone is unlikely to ever happen. Their hardware is too insecure to satisfy GOS's reasonable requirements [1] and have stated that they aren't interested in improving it [2]. Software is also lacking and

More ›