jeroenhd

24 ms·

571.
by jeroenhd 7mo ago
That's exactly what this hack is doing: using root to alter the app's internal storage. The Twitter video does it manually, but the problem is the same as when one does it through automated means.
572.
by jeroenhd 7mo ago
The reference wallet uses a minimum API level 29 ( https://github.com/eu-digital-identity-wallet/av-app-android... ) Although, hardware attestation should be available for Android 8+. Only older Android versions can be s
573.
by jeroenhd 7mo ago
That's not the real age verification app (there is no "EU app", every member state releases their own), it's the proof of concept that was made to demonstrate the system. This stuff is also why the EU doesn't want t
574.
by jeroenhd 7mo ago
If you use SLAAC and don't use mDNS, I suppose, maybe? But if you break DNS often enough that you need to remember IP addresses, you can just do DHCPv6 if you want IPv4-like address allocation. It'll be even easier because you can
575.
by jeroenhd 7mo ago
From the linked thread: https://ai.google.dev/gemini-api/docs/billing#tier-spend-cap... The warnings firing off hours later is obviously awful design, but the warnings are just warnings. The spend caps are somethi
576.
by jeroenhd 7mo ago
Localhost doesn't appear on autodiscovery. Whatever you ran into had nothing to do with IPv6, but rather with your application not binding to the address you were telling it to bind to. On IPv6, localhost binds to ::1, not anything rea
577.
by jeroenhd 7mo ago
You can probably just tap the HTTP(S) connection to spy on the data coming through. I think it's a mistake to assume any kind of privacy for this service. The biggest argument for remote attestation I can think of is to make sure nobod
578.
by jeroenhd 7mo ago
I disagree, I get plenty of spam from Mailchimp. Spammers seem to be able to add email addresses to Mailchimp without verification, and they just keep making new accounts/"campaigns" to re-add my email addresses. Legitimate c
579.
by jeroenhd 7mo ago
One of the big challenges with IPv6 remains that many of the knows-just-enough-about-networking people, like support staff, often never received any IPv6 training (or, for that matter, even enough IPv4 training that they don't need to
580.
by jeroenhd 7mo ago
Their www sub-subdomain is broken it seems. https://ipv6.he.net/certification/ has instructions on how to get started.
581.
by jeroenhd 7mo ago
With current GPU prices, I find it difficult to find hardware to run competent models. gemma4's 26B MoE model seems to offer the best performance per megabyte of RAM, but it's not good enough to use the way one would use cloud mod
582.
by jeroenhd 7mo ago
With IPv6 privacy extensions it's impossible to tell which device you're talking to inside of a /64. You'd need to do something silly like DHCPv6 to get that kind of remote device-level tracking.
583.
by jeroenhd 7mo ago
I recommend going through Hurricane Electric's multiple-choice tests. It's not exactly a how-to guide or course, but it'll mention all of the terms and technologies you need to look up to get things right. They'll even s
584.
by jeroenhd 7mo ago
They supported IPv6 for a short time, but then stopped their experiment. An excellent reason to move away from Github, I find.
585.
by jeroenhd 7mo ago
"unused tokens" are the force driving token cost down. If everyone used all of the tokens they thought they were paying for, prices would explode. People with subscriptions that don't get out everything they can are subsidizi
586.
by jeroenhd 7mo ago
IPv6 addresses can be plenty memorable. Mine starts with 2a10:3781:xxxx, and the rest of the address is whatever I want it to be. About as recognizable as my IPv4 address. If I wanted to memorize the addresses for some reason (maybe I broke
587.
by jeroenhd 7mo ago
Running Gemma-4-E2B-it on an iPhone 15 (can't go higher than that due to RAM limitations) versus a Pixel 9 Pro, I don't really notice much of a difference between the two. The Pixel is a bit faster, but also a year more recent. Th
588.
by jeroenhd 7mo ago
Google's models work quite well on my Android phone. I haven't found a use case beyond generating shitposts, but the model does its job pretty well. It's not exactly ChatGPT, but minor things like "alter the tone of this
589.
by jeroenhd 7mo ago
In other countries, police contract companies to develop software and run and manage the software themselves. Putting up a continental drag net to sell to government agencies is something I've only heard of from the US. Nobody is sayin
590.
by jeroenhd 7mo ago
I'm pretty sure I set up most of what "Simple S3" using with Apache2 and WebDAV at least fifteen years ago. Every month there's a post of "I just want a simple S3 server" and every single one of them has a diff
591.
by jeroenhd 7mo ago
While I think it's the right move to disable location tags by default, I also think Google should've waited until a solution to the missing functionality had at least hit the WHATWG spec.
592.
by jeroenhd 7mo ago
I don't know when Google's EXIF protections are supposed to kick in, but so far my photos auto-synced to Nextcloud still contain location information as expected. I don't think this has anything to do with Google Photos. Peop
593.
by jeroenhd 7mo ago
You can probably get around this problem by compressing the file and uploading it in a .zip. Google Files allows for making zip files at least, so I don't think it's a rare feature. I think the linked spec suggestion makes the mos
594.
by jeroenhd 7mo ago
Nvidia is opening their source code because they moved most of their source code to the binary blob they're loading. That's why they never made an open source Nvidia driver for Pascal or earlier, where the hardware wasn't set
595.
by jeroenhd 7mo ago
The analysis was AI generated. This was Claude brute-forcing itself through building a library.
596.
by jeroenhd 7mo ago
Apple's AI stuff also uses cloud features, though you can't use them on other platforms. The problem with Apple's new cloud features is that they generally just suck. I'm surprised iCloud works so well with how hard they
597.
by jeroenhd 7mo ago
You can explain away every failed product launch with "it's a developer product", not meant for consumers. This wasn't like HoloLens or Google Glass. They marketed these devices to consumers and then sold these devices t
598.
by jeroenhd 7mo ago
At some point apps should just start pointing the finger at the cause of these problems. Linking users with Spanish IPs to a page explaining soccer internet censorship won't stop the bad reviews entirely but at least it'll be more
599.
by jeroenhd 7mo ago
> An attacker can just mint new certs from a broken root key. In Chrome at the very least, the certificate not being in the certificate transparency logs should throw errors and report issues to the mothership, and that should detect abu
600.
by jeroenhd 7mo ago
I find the "Heard five seconds earlier, the difference between a serious collision and stepping aside" take hilarious. As if there is no other way to prevent a collision in five seconds other than the pedestrian getting out of the

More ›