Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
jeroenhd
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
23 ms
·
391.
▲
by
jeroenhd
5mo ago
> would have a 3D printer to make one off repairs The problem with that is, like many people found out the hard way, that printing is the easy part and 3D CAD design is much harder. Many people now have 3D printers to print all kinds of
392.
▲
by
jeroenhd
5mo ago
Creating a Windows service is a bit harder (as Windows actually uses a real API for services rather than just relying on process spawning and scripting around that), but with task scheduler you can schedule tasks to run once a month in all
393.
▲
by
jeroenhd
5mo ago
It depends on the CAPTCHA, but there's a reason why Apple, Cloudflare, and Google are shifting towards remote attestation for proof-of-humanity. The reCAPTCHA v3 Enterprise version and MtCaptcha cost a whopping 3x as much ($3 per 1000
394.
▲
by
jeroenhd
5mo ago
On the Android side there are faster launchers and faster terminal apps as well. Loading fully-featured, touch-friendly apps just takes a while on hardware like that. I've run postmarketOS on an old Galaxy Tab II back in the day and th
395.
▲
by
jeroenhd
5mo ago
Search engine slop is an annoyance at best, Copilot/Apple Intelligence being everywhere is worse, but I think what does it for many people is how proudly the tech industry is displaying "AI" that will replace people's jo
396.
▲
by
jeroenhd
5mo ago
I think it's worse than that. The biggest market for AI, possibly even bigger than tech, is mass manipulation, lying, and scamming. Destabilizing countries has never been easier now that social media and messengers allow believable lie
397.
▲
by
jeroenhd
5mo ago
There are plenty of other reasons for people to hate the AI industry. the OpenAI, Deepseek and Anthropic people are a whole new collection of tech elites, separate from the old tech elites that were hated before.
398.
▲
by
jeroenhd
5mo ago
80 euro equivalent seems to provide a 2014 Mac Mini with 4GiB of RAM and half a TB of storage over here. Doesn't come with a touch screen, though, and carrying around a PSU for the thing is also a massive pain. I don't think the I
399.
▲
by
jeroenhd
5mo ago
It's a device running Android on a bottom-of-the-range SoC with, according to the description, 5 out of "9" gigabytes of "RAM" running from swap space on the internal storage. Perhaps Doogee could've ported And
400.
▲
by
jeroenhd
5mo ago
Depends on how real you want your Android to be, but Google Android emulator images and Androidx86 exist. Many of these apps run fine in Waydroid as well. A remote desktop UI on a Linux server/VM may be all you need. If you have decent
401.
▲
by
jeroenhd
5mo ago
It's quite common for the manufactured e-waste that gets sold on sites like these. Also expect rootkits pre-installed, lies about the specs in general, typos everywhere, and clearly unlicensed advertising (no way Disney permitted them
402.
▲
by
jeroenhd
5mo ago
LLMs are often used to generate Markdown because they're quite good at it and unlike HTML it's very forgiving. Rendering text into things like chat bubbles or even just generic output panes as it comes in is a massive pain. Every
403.
▲
by
jeroenhd
5mo ago
Definitely, Android/iOS/macOS are easy in comparison. But Google is a multi-billion dollar company, they can figure this out.
404.
▲
by
jeroenhd
5mo ago
> Stop giving them money until their behavior changes I did, for the longest time, because none of the streaming platforms worked on Linux. Their behaviour did not change. The tiniest sliver of a percentage of people who actually care a
405.
▲
by
jeroenhd
5mo ago
I, for one, like streaming apps enough that I don't want to go back to locked-down, expensive DVD players. The alternative to DRM isn't "no DRM", it's "no content". Integrity detection means criminals cann
406.
▲
by
jeroenhd
5mo ago
Massive gaming companies have already started using TPMs + secure boot to detect and ban players. Anyone who upgraded to Windows 11 without compatible hardware or who was/is still using Windows 10 cannot play these games. That was a fe
407.
▲
by
jeroenhd
5mo ago
To verify that the user or someone who had physical access to the device (border checks, etc.) hasn't messed with the firmware. If I were a bank I wouldn't want to be on the hook for someone getting their bank account drained by t
408.
▲
by
jeroenhd
5mo ago
I think you overestimate how far apps are willing to go for stupid reasons. Also, there is still the DEVICE_INTEGRITY check that verifies the hardware side of things so if old devices have to be pushed, app developers still won't let y
409.
▲
by
jeroenhd
5mo ago
I think some people's comments are misinterpreted as well. When people say "the PoC requires ASLR to be disabled" that doesn't necessarily mean the exploit is useless, but it does mean that the risk of automated exploit
410.
▲
by
jeroenhd
5mo ago
They do have some kind of attestation mechanism to actually attest the device state: https://learn.microsoft.com/en-us/azure/attestation/tpm-atte... It seems like the documentation for the feature is aimed en
411.
▲
by
jeroenhd
5mo ago
> My opinion on this is that any method to check integrity, root access or if developer mode is enabled is a security vulnerability by itself, no such app should be able to know that. I think knowledge of such information should be avail
412.
▲
by
jeroenhd
5mo ago
The exact requirements for security updates depends on the Android version you're running and the one your device came with. From the docs: MEETS_STRONG_INTEGRITY The app is running on a genuine and certified
413.
▲
by
jeroenhd
5mo ago
"strong integrity" also takes into account if a security update has been installed recently enough. I don't believe hardware integrity spoofing has been accomplished on Android yet. Software integrity and compatibility with o
414.
▲
by
jeroenhd
5mo ago
Windows Hello offers an attestation API according to the releases I found, though because Microsoft has called at least four products "hello" now, I can't easily find the details. I don't think there's a technical r
415.
▲
by
jeroenhd
5mo ago
App developers need to put effort into enabling these APIs so it's not like Google is actively blocking your favorite apps. Their makers are. Like with reCAPTCHA, there are other services and libraries out there to detect root access a
416.
▲
by
jeroenhd
5mo ago
the only anticompetitive element I can think of is the way they pushed their scanning app to Android phones with Play Services. On IOS they're not in control but still able to launch an app (app snippets the feature is called, I think?
417.
▲
by
jeroenhd
5mo ago
Not entirely, Google's own page says: > Fraud Defense leverages a sophisticated and adaptable risk analysis engine to shield against automated software. It is specifically designed to orchestrate trust for the agentic web, neutraliz
418.
▲
by
jeroenhd
6mo ago
Bluetooth PAN seems to work pretty seamlessly once you've paired your phone and set it up. It's possible some kind of "seamless hotspot" functionality is remotely activating PAN on a paired device.
419.
▲
by
jeroenhd
6mo ago
If you piss off any government enough that you suspect your wires may be tapped, ODoH will not save you and TOR probably will not do much better. If you live in a place with omnipresent government monitoring (China/Iran/etc.), the
420.
▲
by
jeroenhd
6mo ago
You wrap the DNS request in a different layer of encryption than the relay server, so the relay server only knows you tried to resolve something , and the DNS server only knows someone tried to resolve a particular domain. That's ho
More ›