Hacker News: fsflover

New comment by fsflover in "Apple update looks like Czech mate for locked-out iPhone user"

fsflover — Sun, 12 Apr 2026 14:21:27 +0000

Doesn't this mean that no matter how securely your phone is locked, Apple (and probably the three-letter agencies) can always unlock it by installing an appropriate update?

New comment by fsflover in "Apple update looks like Czech mate for locked-out iPhone user"

fsflover — Sun, 12 Apr 2026 14:19:01 +0000

GNU/Linux exists on mobile, too. Sent from my Librem 5.

New comment by fsflover in "WireGuard makes new Windows release following Microsoft signing resolution"

fsflover — Sat, 11 Apr 2026 20:37:14 +0000

I would still ask them, and even if they can't help, they fight for such rights for everyone.

New comment by fsflover in "WireGuard makes new Windows release following Microsoft signing resolution"

fsflover — Sat, 11 Apr 2026 06:56:38 +0000

This is why orgs like https://eff.org exist.

New comment by fsflover in "Open Source Security at Astral"

fsflover — Thu, 09 Apr 2026 16:02:09 +0000

This is the point. They can use and modify it, but they also have to share their modifications, i.e., help its development. Yet most megacorps never even touch this license.

New comment by fsflover in "Ask HN: Any interesting niche hobbies?"

fsflover — Thu, 09 Apr 2026 12:44:42 +0000

Qubes OS is a niche security-oriented operating system that runs everything in VMs with about 70k users [0]. Even less users contribute with amazing things like running in RAM [1] or using very minimal VMs with Debian and Fedora [3] to minimize the attack surface and bloat.

[0] https://doc.qubes-os.org/en/latest/introduction/statistics.h...

[1] https://forum.qubes-os.org/t/qubes-os-live-mode-dom0-in-ram-...

[2] https://forum.qubes-os.org/t/how-i-learned-to-love-liteqube-...

New comment by fsflover in "Open source security at Astral"

fsflover — Thu, 09 Apr 2026 12:31:37 +0000

The solution is to use AGPLv3.

New comment by fsflover in "LittleSnitch for Linux"

fsflover — Thu, 09 Apr 2026 07:56:06 +0000

It contains Firefox and Chromium. You are right that they may call home, but at least it's very limited and easily configurable. Could be too much for you but fine with me. Also Debian does change their config by default to minimize privacy issues: https://news.ycombinator.com/item?id=32582260

New comment by fsflover in "LittleSnitch for Linux"

fsflover — Thu, 09 Apr 2026 07:02:54 +0000

What else is this about? Debian repositories still contain no malware and if you install software exclusively from them, you'll be safe.

New comment by fsflover in "Microsoft terminates VeraCrypt account, halting Windows updates"

fsflover — Wed, 08 Apr 2026 21:54:21 +0000

Waydroid allows to run Android apps that don't require SafetyNet. If your bank forces you into the duopoly with no workaround, it's a good reason to switch.

New comment by fsflover in "Microsoft terminates VeraCrypt account, halting Windows updates"

fsflover — Wed, 08 Apr 2026 20:40:25 +0000

There are still phones not obeying the megacorps. Sent from my Librem 5.

New comment by fsflover in "Microsoft terminates VeraCrypt account, halting Windows updates"

fsflover — Wed, 08 Apr 2026 20:37:46 +0000

Instead of proprietary SecureBoot controlled by megacorps, you can use TPM with Heads based entirely on FLOSS with a hardware key like Librem Key. Works for me and protects from the Evil Maid attack.

New comment by fsflover in "Veracrypt project update"

fsflover — Wed, 08 Apr 2026 20:28:44 +0000

If arbitrary app stores are allowed without restrictions, isn't that equivalent to allowing installation of any apps?

New comment by fsflover in "Binary obfuscation that doesn't kill LTO"

fsflover — Wed, 08 Apr 2026 20:24:17 +0000

Somehow your approach was not chosen by Intel ME or AMD PSP, and they remain unbreakable.

New comment by fsflover in "Microsoft terminated the account VeraCrypt used to sign Windows drivers"

fsflover — Wed, 08 Apr 2026 16:05:13 +0000

So why don't you stop using the OS that has a completely different approach to computing?

New comment by fsflover in "Veracrypt project update"

fsflover — Wed, 08 Apr 2026 14:51:53 +0000

Qubes OS is such OS: it runs everything in VMs with strong hardware isolation. My daily driver, can't recommend it enough.

New comment by fsflover in "Project Glasswing: Securing critical software for the AI era"

fsflover — Wed, 08 Apr 2026 13:10:40 +0000

> and “all” of the vulnerabilities are out of it too

This is a good point; however the isolating code should be much smaller and easier to verify.

New comment by fsflover in "Binary obfuscation used in AAA Games"

fsflover — Wed, 08 Apr 2026 13:09:04 +0000

The one not described as "security through obscurity".

New comment by fsflover in "Binary obfuscation that doesn't kill LTO"

fsflover — Wed, 08 Apr 2026 06:56:20 +0000

The problem with this is, you spend a lot of effort for low benefit. You should spend it on actual security instead.

New comment by fsflover in "AI may be making us think and write more alike"

fsflover — Tue, 07 Apr 2026 21:18:42 +0000

> I think AGPL would make it less useful for the honest people

I don't understand what you mean here. AGPLv3 guarantees the four essential freedoms to all users. It only restricts developers from removing users' rights, like the GPL family.

> On top of all that I don't know if it would be possible to sue companies that have been given de facto legal immunity to steal IP.

For that we should support NGOs fighting for users' rights like https://eff.org.