Hacker News: arkadiyt

New comment by arkadiyt in "Removing the modem and GPS from my 2024 RAV4 hybrid"

arkadiyt — Thu, 14 May 2026 20:22:44 +0000

This is addressed in the blog :)

New comment by arkadiyt in "Removing the modem and GPS from my 2024 RAV4 hybrid"

arkadiyt — Thu, 14 May 2026 19:20:37 +0000

It's from the linked rav4world post

New comment by arkadiyt in "Removing the modem and GPS from my 2024 RAV4 hybrid"

arkadiyt — Thu, 14 May 2026 18:24:18 +0000

There's still a fuse for the DCM even in this car but:

- It has an internal battery and will keep running for quite a while after pulling the fuse. This is a safety feature in case you get in a crash that disconnects the 12V battery

- It will break your in-car microphone as discussed. Repairing that requires opening up the dash

- That won't do anything for disconnecting the GPS antenna

New comment by arkadiyt in "Removing the modem and GPS from my 2024 RAV4 hybrid"

arkadiyt — Thu, 14 May 2026 17:45:53 +0000

In a perfect world they wouldn't collect it either, but I'd rather Apple have it than the car manufacturer (or rather, only Apple vs both Apple and the car manufacturer)

Removing the modem and GPS from my 2024 RAV4 hybrid

arkadiyt — Thu, 14 May 2026 17:08:00 +0000

Article URL: https://arkadiyt.com/2026/05/13/removing-the-modem-and-gps-from-my-rav4/

Comments URL: https://news.ycombinator.com/item?id=48138136

Points: 954

# Comments: 493

Removing the Modem and GPS from My 2024 RAV4 Hybrid

arkadiyt — Wed, 13 May 2026 16:31:03 +0000

Article URL: https://arkadiyt.com/2026/05/13/removing-the-modem-and-gps-from-my-rav4/

Comments URL: https://news.ycombinator.com/item?id=48124118

Points: 10

# Comments: 0

New comment by arkadiyt in "The Car That Watches You Back: The Advertising Infrastructure of Modern Cars"

arkadiyt — Tue, 05 May 2026 06:48:26 +0000

When I removed the DCM the in-car microphone stopped working, but I bought one of these to get it working again: https://www.autoharnesshouse.com/store/AHH-DCM77.

Also even with no modem, if you use CarPlay on your phone _via Bluetooth_ then the car will just use your phone's internet connection, so I only use CarPlay via a wired USB connection.

Aside from that the car works great, everything is 100% functional. I suppose I don't get OTA updates, which I'm fine with.

New comment by arkadiyt in "The Car That Watches You Back: The Advertising Infrastructure of Modern Cars"

arkadiyt — Tue, 05 May 2026 06:41:34 +0000

I bought a 2024 RAV4 Hybrid and

1) physically removed the modem (the "DCM") and

2) disconnected the GPS antenna from the head unit

Took a little research but was still an approachable project

"cat readme.txt" is not safe if you use iTerm2

arkadiyt — Fri, 17 Apr 2026 18:43:32 +0000

Article URL: https://blog.calif.io/p/mad-bugs-even-cat-readmetxt-is-not

Comments URL: https://news.ycombinator.com/item?id=47809190

Points: 318

# Comments: 185

LexisNexis confirms data breach as hackers leak stolen files

arkadiyt — Thu, 05 Mar 2026 04:13:39 +0000

Article URL: https://www.bleepingcomputer.com/news/security/lexisnexis-confirms-data-breach-as-hackers-leak-stolen-files/

Comments URL: https://news.ycombinator.com/item?id=47257475

Points: 9

# Comments: 1

Reddit, Meta, & Google Voluntarily Gave DHS Info of Anti-ICE Users, Report Says

arkadiyt — Mon, 16 Feb 2026 00:09:50 +0000

Article URL: https://gizmodo.com/reddit-meta-and-google-voluntarily-gave-dhs-info-of-anti-ice-users-report-says-2000722279

Comments URL: https://news.ycombinator.com/item?id=47029228

Points: 60

# Comments: 8

Making end-to-end encrypted AI chat feel like logging in

arkadiyt — Tue, 30 Dec 2025 01:27:16 +0000

Article URL: https://confer.to/blog/2025/12/passkey-encryption/

Comments URL: https://news.ycombinator.com/item?id=46428400

Points: 9

# Comments: 0

New comment by arkadiyt in "Do not accept terms and conditions"

arkadiyt — Tue, 21 Oct 2025 19:05:55 +0000

Apple Health data is end-to-end encrypted, even without using ADP. They don't have access to it: https://support.apple.com/en-us/102651

New comment by arkadiyt in "Surveillance data challenges what we thought we knew about location tracking"

arkadiyt — Tue, 14 Oct 2025 21:36:00 +0000

> intercept SMS including the verification codes sent by apps like WhatsApp

For anyone worried, this approach:

1) Breaks the existing phone from receiving WhatsApp messages, so you can notice that behavior

2) Can be prevented by setting up a WhatsApp pin in your settings

LLMs suggest women seek lower salaries than men in job interviews

arkadiyt — Mon, 18 Aug 2025 17:15:47 +0000

Article URL: https://www.computerworld.com/article/4028148/bias-alert-llms-suggest-women-seek-lower-salaries-than-men-in-job-interviews.html

Comments URL: https://news.ycombinator.com/item?id=44943018

Points: 3

# Comments: 1

New comment by arkadiyt in "Show HN: Real-time privacy protection for smart glasses"

arkadiyt — Thu, 14 Aug 2025 02:44:22 +0000

I don't need something to protect the privacy of others from me, I need something to protect my privacy from others. The majority of people who use smart glasses are not going to be using this - where is the product that will protect me from them?

Tea App Users' Faces and IDs Reportedly Posted to 4chan in Security Breach

arkadiyt — Fri, 25 Jul 2025 16:47:08 +0000

Article URL: https://www.cnet.com/tech/services-and-software/tea-app-users-faces-and-ids-reportedly-posted-to-4chan-in-security-breach/

Comments URL: https://news.ycombinator.com/item?id=44685222

Points: 46

# Comments: 2

Anker comes clean about its Eufy security cameras (2023)

arkadiyt — Fri, 06 Jun 2025 01:46:11 +0000

Article URL: https://www.theverge.com/23573362/anker-eufy-security-camera-answers-encryption

Comments URL: https://news.ycombinator.com/item?id=44197159

Points: 5

# Comments: 1

New comment by arkadiyt in "Why I no longer have an old-school cert on my HTTPS site"

arkadiyt — Sat, 24 May 2025 04:28:20 +0000

If using a non-FS key exchange (like RSA) then the value that the session key is derived from (the pre-master secret) is sent over the wire encrypted using the server's public key. If that session is recorded and in the future the server's private key is obtained, it can be used to decrypt the pre-master secret, derive the session key, and decrypt the entire session.

If on the other hand you use a FS key exchange (like ECDHE), and the session is recorded, and the server's private key is obtained, the session key cannot be recovered (that's a property of ECDHE or any forward-secure key exchange), and none of the traffic is decryptable.

New comment by arkadiyt in "Why I no longer have an old-school cert on my HTTPS site"

arkadiyt — Sat, 24 May 2025 02:33:19 +0000

> does a 4096 not give you more security against passive capture and future decrypting?

If the server was using a key exchange that did not support forward secrecy then yes. But:

    % echo | openssl s_client -connect rachelbythebay.com:443 2>/dev/null | grep Cipher
    New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384

^ they're using ECDHE (elliptic curve diffie hellman), which is providing forward secrecy.