NotPractical

8 ms·

151.
by NotPractical 2y ago
No, it's not close at all. macOS allows you to sideload, EU iOS still does not. macOS allows you to write programs for your own device without paying Apple $100 every year, EU iOS still does not. macOS provides an environment for gener
152.
by NotPractical 2y ago
Love the brutal honesty! Even as a macOS user I admit that it's difficult to justify learning the Apple-proprietary tech needed to port apps to it (and automated testing is indeed a nightmare). Curious as to your thoughts on Android?
153.
by NotPractical 2y ago
> Safari listed as supported Interesting, does this work on the latest releases? If so you might want to let this fellow know to adjust their threat model accordingly :) https://news.ycombinator.com/item?id=41912226
154.
by NotPractical 2y ago
Yes, on WPA2. WPA3 introduced per-client encryption keys.
155.
by NotPractical 2y ago
Seems the article hasn't been updated to indicate his role as head of the Yuzu and Citra projects (recently DMCA'd by Nintendo).
156.
by NotPractical 2y ago
Chrome uses it too. However the CDP protocol allows any local app to control the browser so you can use that to open the browser in windowless mode, examine the list of passwords at chrome://passwords, then open a bunch of tabs to
157.
by NotPractical 2y ago
This is a much more likely attack scenario than browser zero days.
158.
by NotPractical 2y ago
* Some functionality is off-limits for sites loaded via HTTP. (Another commenter mentioned clipboard access.) * Browsers will display annoying warning symbols whenever you try to access sites via HTTP. * If you live in a shared living space
159.
by NotPractical 2y ago
Those are vague examples of what the NDK could be used for, not an exhaustive list of all supported use cases. And Syncthing is really just trying to re-use their existing code on Android (example use case #2). It doesn't even require
160.
by NotPractical 2y ago
I'm always happy to see F-Droid exclusive apps. Gives Google less power over what they can do.
161.
by NotPractical 2y ago
fopen(), fwrite(), etc. are a part of libc and as such are officially supported [1], but they become somewhat useless with SAF. (It makes sense that you'd at least have to use some Java to open a file picker and request access, but why
162.
by NotPractical 2y ago
> Take the downvote button away from imbeciles People that aren't familiar with Android's proprietary labyrinth of a filesystem API, you mean? If you had provided evidence that it does instead of just saying so in your first re
163.
by NotPractical 2y ago
You have to use `termux-setup-storage` to gain access to shared storage. If you're referring to an app's private app data folder, there's no way to access that without root via any app.
164.
by NotPractical 2y ago
You're right, it's far from perfect, but it shows that it's not difficult to restrict native access to specific files/folders using the kernel and not weird Java IPC (which I guess should be obvious anyway). Google could
165.
by NotPractical 2y ago
You're nearly correct, actually. In addition to security, SAF was supposed to provide a consistent interface to access files from various sources, including network sources, not just the local filesystem. Unfortunately the implementati
166.
by NotPractical 2y ago
I wonder how many people using Syncthing actually obtained it from the Play Store and not F-Droid? The whole point of it is decentralization, right?
167.
by NotPractical 2y ago
SAF is a slow, buggy mess, and it only works in Java/Kotlin, so it's understandable that they don't want to use it. GrapheneOS manages to allow native access (via Java or machine code) to only specific user-selected directori
168.
by NotPractical 2y ago
> lack of meaningful right to repair regulation over the past two decades https://www.theregister.com/2023/05/25/minnesota_right_to_re...
169.
by NotPractical 2y ago
> Trump's VP nominee likes what the FTC is doing Actions speak louder than words, and the DNC's VP passed the most comprehensive right to repair legislation ever in the U.S. in his home state: https://www.theregister
170.
by NotPractical 2y ago
Most likely, Lina Khan will be removed, the FTC will return to being largely inactive, and John Deere (and Big Tech) wins.
171.
by NotPractical 2y ago
Not surprised that you're being downvoted despite telling the truth, because "politics is off-topic while technology is on-topic" (even though politics is often deeply intertwined with technology).
172.
Redbox left PII on decommissioned machines(digipres.club)
294 points by NotPractical 2y ago|162 comments
173.
by NotPractical 2y ago
> Some interesting talks and videos [...] GNU is Bloated! by Luke Smith Strange reference because that video isn't relevant to the topic at all. It's about the difference between GNU coreutils command line options and other sta
174.
by NotPractical 2y ago
I see this kind of sentiment on HN a lot and it's weird to me. Like, what's the issue with discussing on a hacker forum ways that Google is making Android worse for hackers? Especially considering the alternative is iOS and it&#x2
175.
by NotPractical 2y ago
> they refuse to acknowledge the way is via Java user space I don't think that has much to do with it. Google's problem with Termux is that it downloads and executes native code. Also, you're phrasing that like refusing to
176.
by NotPractical 2y ago
After some reflection I'm not too proud of this comment :)
177.
by NotPractical 2y ago
But is it time to give up just because there hasn't been much progress yet? It seems now that we have #2 there's little incentive for #1, whereas there was plenty incentive for #1 before even if little action.
178.
by NotPractical 2y ago
Smartphones are special, since they're practically mandatory at this point, are the primary gateway to the Internet and digital platforms for a lot of people, and are specifically designed to be general purpose computing devices (even
179.
by NotPractical 2y ago
AOSP is a separate initiative from Google to release the source code of Android to the public on a regular basis. Development of Android happens almost entirely in-house and contributions/requests from the general public are treated wi
180.
by NotPractical 2y ago
Google did not compete in an anticompetitive matter (w.r.t. app stores) and a federal judge determining that they did means nothing because it will likely be appealed by another judge. They will probably win their appeal because the verdict

More ›