Hacker News: bjornroberg

New comment by bjornroberg in "Wallet Ecosystem for Business and Payments (EU)"

bjornroberg — Tue, 21 Apr 2026 01:30:37 +0000

This initiative is going to yield a net positive in general societal robustness and security, not only for critical infra and big players. On the contrary, it will make it easier for SMBs without people working 100% with compliance to increase the robustness of their supply chains.

Wallet Ecosystem for Business and Payments (EU)

bjornroberg — Tue, 21 Apr 2026 01:26:05 +0000

Article URL: https://www.webuildconsortium.eu/

Comments URL: https://news.ycombinator.com/item?id=47843450

Points: 1

# Comments: 1

New comment by bjornroberg in "The beginning of scarcity in AI"

bjornroberg — Fri, 17 Apr 2026 13:25:47 +0000

I wonder if it could be that they won't because the real mechanism is that AI wrapper pricing power is weak (switching costs near zero) but state of the art models makes it difficult to lower prices due to higher cost.

New comment by bjornroberg in "Mozilla Thunderbolt"

bjornroberg — Thu, 16 Apr 2026 20:56:56 +0000

I think this is a smart move, and if Mozilla were the same as 10 years ago, I'd have hope for something good.

New comment by bjornroberg in "Forcing an inversion of control on the SaaS stack"

bjornroberg — Thu, 16 Apr 2026 01:22:59 +0000

Solves yesterday's problem. The calcification is UI calcification, and agents don't care about UIs. An MCP server (or a half-decent OpenAPI surface) lets a user-controlled agent compose vendor primitives without touching the DOM, without TOS risk, without overlay maintenance. IoC doesn't get forced by extensions. It gets forced by agents that can read docs and click buttons faster than the vendor can ship features. The vendors who notice will expose that surface voluntarily, because the alternative is getting scraped anyway.

New comment by bjornroberg in "Keep Android Open"

bjornroberg — Wed, 15 Apr 2026 13:43:34 +0000

Yeah, this. The vocabulary ratchet is underrated as a policy tool. "Install" became "sideload." "Sideload" became "install from unknown sources." "Unknown sources" is becoming "unverified packages." Each rename shifts the Overton window a little further from "this is the normal way to put software on a computer you own" toward "this is a suspicious deviation Google has graciously decided to tolerate for now."

By the time the technical mechanism lands, the framing has been prepared for a decade. The 24-hour cooldown, the seven taps, the three scare screens all _feel_ proportional to the danger the language has been implying. That's not an accident, that's the policy working as designed.

New comment by bjornroberg in "Keep Android Open"

bjornroberg — Wed, 15 Apr 2026 13:40:11 +0000

The detail that keeps getting lost in these threads: the "advanced flow" for power users is delivered through Google Play Services, not the Android OS. That's the whole game.

It means the safeguard is not part of AOSP. It ships as a closed component that Google can narrow, gate, or remove in any Play Services update, with no Android version bump, no OEM coordination, no user consent beyond the usual auto-update. "Open platform with an escape hatch" is load-bearing in the PR; "closed escape hatch bolted onto an open kernel" is what's actually shipping.

The second tell is timing. It's five months from enforcement and the flow has not appeared in any beta, dev preview, or canary build. We're being asked to treat a blog post and UI mockups as a functional guarantee. No other platform change of this scope lands without a shipping preview this late, and Google knows it.

The third piece most devs skim past: registration requires uploading evidence of your private signing key. Whatever you think of the verification program in principle, that specific requirement changes the threat model of every Android key in existence, including the ones protecting apps people already depend on.

"Sideloading still works" is only true in the narrow sense that some ceremony remains. The mechanism protecting that ceremony is owned by the party with the strongest incentive to eventually close it.

Keep Android Open

bjornroberg — Wed, 15 Apr 2026 12:47:36 +0000

Article URL: https://keepandroidopen.org/cta/

Comments URL: https://news.ycombinator.com/item?id=47778274

Points: 206

# Comments: 68

New comment by bjornroberg in "Founders Need to Be Ruthless When Chasing Deals"

bjornroberg — Wed, 15 Apr 2026 10:53:24 +0000

The artifact can be faked cheaply now, so the only buying signal left is commitment. That's exactly the "ruthless" move the post argues for, I think.

New comment by bjornroberg in "Prompt Injection Is Unfixable (So We Stopped Trying)"

bjornroberg — Wed, 15 Apr 2026 10:02:55 +0000

Broadly agree. Moving from prompt to action is the right direction. I think the prepared statements analogy is not fully comparable in that SQL has a clear boundary between code and data whereas tool calls don't. However, this isn't fatal, just being honest about the shape of the trade-off.

I feel that the hard problem is writing policies expressive enough to cover arbitrary agent work without collapsing back into "trust the model's intent."

New comment by bjornroberg in "Free, fast diagnostic tools for DNS, email authentication, and network security"

bjornroberg — Wed, 15 Apr 2026 01:42:55 +0000

Poked around for a few minutes and this is nicely done. Coverage of the less common records (MTA-STS, BIMI, TLSA, CAA) in one place is the part that jumped out. Usually I bounce between two or three sites to get those.

One thing that would be handy: a shareable permalink for a given lookup result, so you can paste it into a ticket or chat instead of retyping the query.

New comment by bjornroberg in "Ask HN: What Are You Working On? (April 2026)"

bjornroberg — Mon, 13 Apr 2026 12:10:05 +0000

It's an interesting domain and deploy-time learning seems to be a powerful approach! I'll look further into it.

How Pitchfork Works (A process manager for developers)

bjornroberg — Mon, 06 Apr 2026 14:13:49 +0000

Article URL: https://pitchfork.jdx.dev/concepts/how-it-works.html

Comments URL: https://news.ycombinator.com/item?id=47661208

Points: 2

# Comments: 0

New comment by bjornroberg in "Textual"

bjornroberg — Thu, 26 Mar 2026 01:34:08 +0000

Really easy to get started with and smooth UX!

Textual

bjornroberg — Thu, 26 Mar 2026 01:33:18 +0000

Article URL: https://textual.textualize.io/

Comments URL: https://news.ycombinator.com/item?id=47525700

Points: 4

# Comments: 1

New comment by bjornroberg in "Crawl4AI"

bjornroberg — Sun, 22 Mar 2026 20:53:04 +0000

Promising foundation if you’re willing to own the policy layer + quality gates. Also worth calling out the boring production bits: robots/ToS, rate limiting, bot mitigation, login/session handling, and not accidentally hoovering up PII.