Hacker News: bornfreddy

New comment by bornfreddy in "I returned to AWS and was reminded why I left"

bornfreddy — Mon, 11 May 2026 04:41:22 +0000

That's a huge misrepresentation of fair source licenses. They prevent competing with the original vendor, but still try to retain Right to Repair as much as possible, for example:

> The Fair Core License, or FCL, is a mostly-permissive non-compete Fair Source license that eventually transitions to Open Source after 2 years.

New comment by bornfreddy in "Hardware Attestation as Monopoly Enabler"

bornfreddy — Sun, 10 May 2026 20:17:17 +0000

Well no, there is no need to develop domestic capability. Put laws in effect which disable foreign capabilities and which reward domestic ones, and they will be developed. No endeavor from government needed (which is a good thing, since governments are not really great at doing such stuff).

New comment by bornfreddy in "I’ve banned query strings"

bornfreddy — Sun, 10 May 2026 17:50:50 +0000

I see where (both of you) are coming from, and I'm very privacy conscious (=paranoid) myself, but in this case, as a user, I wouldn't actually mind. It seems to me you would be tracking flows instead of users, which is fine in my book. Now, including Google fonts on every page, using their tag manager, analytics, captcha... That gives me the creeps. Waaay too much information about each and every user. But generic origin query params? Yeah, ok. :shrug:

New comment by bornfreddy in "Google broke reCAPTCHA for de-googled Android users"

bornfreddy — Sat, 09 May 2026 19:59:28 +0000

This. For privacy, it is much better to avoid Google Play services (which are the only supported solution for push notifications in GrapheneOS).

New comment by bornfreddy in "Securing a DoD contractor: Finding a multi-tenant authorization vulnerability"

bornfreddy — Mon, 04 May 2026 20:32:12 +0000

> Presumably they don’t much consider legality.

Or the operation is not even illegal where they come from?

New comment by bornfreddy in "Ghostty is leaving GitHub"

bornfreddy — Wed, 29 Apr 2026 05:52:01 +0000

Well yeah, and there is KDE 3 which was awesome. But for most of the projects their point stands.

New comment by bornfreddy in "Migrating from DigitalOcean to Hetzner"

bornfreddy — Sat, 18 Apr 2026 21:00:04 +0000

> The key: proxy_ssl_verify off — the new server’s SSL cert is valid for the domain, not for the IP address. Disabling verification here is fine because we control both ends.

Yeah - no, it's not. They made the MitM attack possible with this change. The exposure was limited to those 5 minutes, but it should have been a known risk.

Also not certain how they could check the apps on the new server with the read-only database, while it was a replica?

Still, nice to hear it succeeded, the reasons sound very familiar.

New comment by bornfreddy in "Measuring Claude 4.7's tokenizer costs"

bornfreddy — Fri, 17 Apr 2026 21:03:55 +0000

By continuously testing competitors and local LLMs? The reason for rising prices is that they (Anthropic) probably realized that they have reached a ceiling of what LLMs are capable of, and while it's a lot, it is still not a big moat and it's definitely not intelligence.

New comment by bornfreddy in "Claude Design"

bornfreddy — Fri, 17 Apr 2026 18:27:16 +0000

Is there a way one can do DTP using LLMs? InDesign only integrates image generating, if I'm not mistaken. .

New comment by bornfreddy in "Modifying FileZilla to Workaround Bambu 3D Printer's FTP Issue"

bornfreddy — Tue, 14 Apr 2026 20:18:21 +0000

Or use mc (midnight commander).

New comment by bornfreddy in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"

bornfreddy — Tue, 14 Apr 2026 15:17:34 +0000

This is actually where LLMs could be in advantage. Any code which is not clean (i.e. could be obfuscated) will trigger alarms and deeper inspection. It is much more difficult to create a good "underhanded" exploit that LLM will miss than it is to do the same for humans, imho.

New comment by bornfreddy in "Android now stops you sharing your location in photos"

bornfreddy — Tue, 14 Apr 2026 14:53:16 +0000

Trivial? Ha! Way to say that you never tried it. Either that, or that you don't care for things like push notifications. Yes, most of the things work, but not nearly all of them.

New comment by bornfreddy in "Android now stops you sharing your location in photos"

bornfreddy — Mon, 13 Apr 2026 16:18:19 +0000

So in webmail, when you upload an image / file to attach it to an email, you expect it to be renamed? I don't.

New comment by bornfreddy in "Android now stops you sharing your location in photos"

bornfreddy — Mon, 13 Apr 2026 16:11:53 +0000

Have you tried moving on from Google, and preferably not to Apple?

New comment by bornfreddy in "Android now stops you sharing your location in photos"

bornfreddy — Mon, 13 Apr 2026 16:09:34 +0000

+1 for Netguard, it is awesome. A bit clumsy UI, but indispensible.

New comment by bornfreddy in "Android now stops you sharing your location in photos"

bornfreddy — Mon, 13 Apr 2026 16:03:22 +0000

Yeah, there are lots of pages that don't show the (google) map if you don't have google services enabled on your android phone. Not sure if this is something that could be solved on browser level though? I'm quite certain that these pages still work on iphones...

New comment by bornfreddy in "Android now stops you sharing your location in photos"

bornfreddy — Mon, 13 Apr 2026 15:59:54 +0000

True. Sidenote: they are still however push notifications provider, so good luck getting rid of them completely (unless you're fine with not getting the notifications). MicroG is awesome wrt. that as you can turn it on/off as you wish, and it just works. GrapheneOS however only supports Google services in sandbox, but the notifications work sporadically IME (maybe because I keep turning them off and on... not sure). So... Pick your poison.

New comment by bornfreddy in "I run multiple $10K MRR companies on a $20/month tech stack"

bornfreddy — Sun, 12 Apr 2026 12:23:40 +0000

Plus, if/when you start caring about HA, it will be easier.

New comment by bornfreddy in "I run multiple $10K MRR companies on a $20/month tech stack"

bornfreddy — Sun, 12 Apr 2026 12:20:57 +0000

Also use fail2ban. If nothing else to decrease the amount of junk in logs.

New comment by bornfreddy in "France to ditch Windows for Linux to reduce reliance on US tech"

bornfreddy — Fri, 10 Apr 2026 17:05:12 +0000

You mean switch Windows by Microsoft for ChromeOS by Google? Weird suggestion.

As for "security" and "antimalware" solutions being ready, I don't think there is much difference between the OSs there. Windows is no candyland either.

As always, they will need competent people in the right places to pull this through. Tech is just an enabler.