Hacker News: be_erik

Security Analysis of the Official White House iOS App

be_erik — Sun, 29 Mar 2026 14:10:32 +0000

Article URL: https://www.atomic.computer/blog/white-house-app-security-analysis/

Comments URL: https://news.ycombinator.com/item?id=47563292

Points: 6

# Comments: 0

New comment by be_erik in "Acme Weather"

be_erik — Sat, 21 Feb 2026 15:30:57 +0000

Ha, this looks like someone took mine and got a real designer to polish it.

https://wthr.cloud

Justices Strike Down Trump's Tariffs

be_erik — Fri, 20 Feb 2026 18:21:20 +0000

Article URL: https://www.nytimes.com/2025/02/20/us/politics/supreme-court-trump-tariffs.html

Comments URL: https://news.ycombinator.com/item?id=47091691

Points: 3

# Comments: 1

New comment by be_erik in "Show HN: Witr – Explain why a process is running on your Linux system"

be_erik — Fri, 26 Dec 2025 22:54:38 +0000

If you're looking to build and install this from source, here's the incantation:

CGO_ENABLED=0 go build -ldflags "-X main.version=dev -X main.commit=$(git rev-parse --short HEAD) -X 'main.buildDate=$(date +%Y-%m-%d)'" -o witr ./cmd/witr

Call me old-fashioned, but if there's an install.sh, I would hope it would prefer the local src over binaries.

Very cool utility! Simple tools like these keep me glued to the terminal. Thank you!

New comment by be_erik in "GraphQL: The enterprise honeymoon is over"

be_erik — Sun, 14 Dec 2025 19:19:12 +0000

The appeal of GraphQL is that it eliminates the need for a BFF and easily solves service meshing. Over fetching is more of a component design problem than a performance issue.

New comment by be_erik in "Ratatui – App Showcase"

be_erik — Thu, 06 Nov 2025 05:29:38 +0000

I use this one pretty often. It’s great. https://chawan.net/

New comment by be_erik in "Gemini in Chrome"

be_erik — Fri, 19 Sep 2025 02:41:15 +0000

I don’t understand who this is for? I just tried Anthropic’s extension and it feels like writing automated selenium tests.

LLMs interacting with markup is not the best abstraction layer.

New comment by be_erik in "Cursor hits $9B valuation"

be_erik — Mon, 05 May 2025 15:18:18 +0000

It’s how a lot of code is being generated by owners of small startups with minimal engineering engagement. PMs are producing full walking skeletons of designs that used to take a week to polish to that fidelity.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 12:48:22 +0000

By installing MDM you’re effectively chaining your security to the security of the MDM. The MDM gives you the ability to install arbitrary code via a blessed backdoor. There’s no reason currently not to suspect that anything said on that phone (signal or not) is compromised.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 04:35:49 +0000

They used an internal fork delivered via MDM. There are no guarantees that Signal can make about the software running on those phones and per the reports it’s a lot of phones.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 04:30:07 +0000

This is currently my bet. This looks like something I would set up— state actors are not in my threat list. But, I’m usually being paid to protect the employer not the employee.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 04:27:16 +0000

This is so frightening. I worked in corporate security, and that was occasionally a leaking ship, but this wouldn’t even fly with our engineers even if we wanted their message history. This is negligence.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 03:45:09 +0000

There’s chatter on bsky.

But tl;dr anything said on those phones is assumed to be compromised until proven otherwise by time or a whole lot of very interesting security verifications. So far the evidence that this is a very large leak looks probable based on the evidence presented.

New comment by be_erik in "The Signal clone the Trump admin uses was hacked"

be_erik — Mon, 05 May 2025 03:42:56 +0000

Yeah, I was shocked to see this buried. If the allegations are verified this could be a huge leak on what a number of people were led to believe is a secure by default platform. It turns out when you can’t trust the CI/CD pipe those guarantees go out the window.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 03:40:26 +0000

Installing Signal using this method provides none of the guarantees Signal can normally provide by being an open verifiable application. It not only opens you up to state actors, but also IT folks like us. This is very much tech news. It helps explain why MDM is both critically important for businesses and terrible for security.

New comment by be_erik in "Technical analysis of the Signal clone used by Trump officials"

be_erik — Mon, 05 May 2025 03:36:55 +0000

This news story has been strange for me for awhile because on one hand NO our public officials should not be using Signal, but it isn’t because Signal is a bad technology choice. Signal is great. It’s probably the most useable service that’s verifiably secure.

New comment by be_erik in "Reverb's Next Chapter as a Private Company"

be_erik — Tue, 22 Apr 2025 17:40:29 +0000

Etsy finally got rid of Reverb.com and handed it to a Fender related private equity firm.

Reverb's Next Chapter as a Private Company

be_erik — Tue, 22 Apr 2025 17:40:29 +0000

Article URL: https://reverb.com/news/reverb-servco-creator-partners

Comments URL: https://news.ycombinator.com/item?id=43764541

Points: 2

# Comments: 1

New comment by be_erik in "Zoom outage caused by accidental 'shutting down' of the zoom.us domain"

be_erik — Thu, 17 Apr 2025 01:20:27 +0000

I was really hoping to find out they were hosting their DNS on GoDaddy. I still want it to be true.

New comment by be_erik in "Meilisearch – search engine API bringing AI-powered hybrid search"

be_erik — Mon, 14 Apr 2025 14:00:50 +0000

Is meilisearch ready for production workloads? I would love to use some of the feature set, but is the only option for HA running multiple instances and keeping them in sync?