Hacker News: happyhardcore

A 0-click exploit chain for the Pixel 10

happyhardcore — Fri, 15 May 2026 13:39:54 +0000

Article URL: https://projectzero.google/2026/05/pixel-10-exploit.html

Comments URL: https://news.ycombinator.com/item?id=48148460

Points: 363

# Comments: 172

New comment by happyhardcore in "Hosting a website on a disposable vape"

happyhardcore — Mon, 15 Sep 2025 18:35:40 +0000

https://bogdanthegeek.github.io/blog/index.xml

New comment by happyhardcore in "Hosting a website on a disposable vape"

happyhardcore — Mon, 15 Sep 2025 15:51:37 +0000

For this I used GCP free tier -- not sure why everyone acts like Oracle are the only free tier around when GCP and AWS offer always-free tiers too. It's just runing socat to forward to the vape over tailscale. Is there something I'm missing?

New comment by happyhardcore in "Hosting a website on a disposable vape"

happyhardcore — Mon, 15 Sep 2025 15:44:16 +0000

I've found [1] to be the best guide for getting started with them; you need to make a copy of the firmware partitions that you re-flash after installing Linux onto it in order to get the 4G modem working. It's honestly absurd how much you're getting for a fiver with it; add a power bank (or make your own from scavenged vape batteries in the spirit of this post) and you have a full Linux machine with WiFi and 4G that can work almost anywhere.

[1] https://wvthoog.nl/openstick/

New comment by happyhardcore in "Hosting a website on a disposable vape"

happyhardcore — Mon, 15 Sep 2025 00:00:14 +0000

VPS with public ipv4, connected to home network over Tailscale and forward the traffic with socat. You'd probably be fine opening a port directly but a small VPS is free most places so might as well make the most of it.

New comment by happyhardcore in "Espressif's ESP32-C5 Is Now in Mass Production"

happyhardcore — Thu, 01 May 2025 13:33:37 +0000

You can generate the keys on-device during the initial provisioning and have it encrypt the flash with that key, so every device generates its own unique key and there isn't any practical way to extract it; even the developer can't flash it directly, and OTAs are required to update the firmware. This effectively means nobody can flash the chip anyway since you can't know the keys. Is there some sort of attack vector here I'm missing that gets mitigated by preventing flashing entirely?

New comment by happyhardcore in "Espressif's ESP32-C5 Is Now in Mass Production"

happyhardcore — Thu, 01 May 2025 09:53:11 +0000

How is this different in practice to the regular ESP32's secure boot, where you can technically flash the chip with whatever you like but unless you have the signing key the bootloader will refuse to load it?

New comment by happyhardcore in "Resigning as Asahi Linux project lead"

happyhardcore — Thu, 13 Feb 2025 17:10:19 +0000

We don't know if he's gone to the cops, but more often than not the police will not be able to help you in these sorts of situations. The way that Kiwifarms target people is incredibly hard to stop and I don't think they particularly need ammo; the way to not "give them ammo" would be to stop standing up for trans rights, and the fact that he hasn't is commendable.

New comment by happyhardcore in "Large Enough"

happyhardcore — Wed, 24 Jul 2024 15:50:30 +0000

I suspect this is why OpenAI is going more in the direction of optimising for price / latency / whatever with 4o-mini and whatnot. Presumably they found out long before the rest of us did that models can't really get all that much better than what we're approaching now, and once you're there the only thing you can compete on is how many parameters it takes and how cheaply you can serve that to users.

New comment by happyhardcore in "Show HN: Beeper Mini – iMessage client for Android"

happyhardcore — Tue, 05 Dec 2023 16:10:32 +0000

How so? Other than the security issues that get exploited by NSO group from time to time (that appear to be mitigated fairly well by lockdown mode if that's something that's important to you) or the obvious flaw that you can't talk to anyone that doesn't have an iPhone it seems to be a perfectly good platform. The alternatives either have worse encryption (Telegram, RCS), worse privacy (WhatsApp), or the same platform lock-in as iMessage (Google's RCS).

New comment by happyhardcore in "Show HN: Beeper Mini – iMessage client for Android"

happyhardcore — Tue, 05 Dec 2023 15:16:00 +0000

It's really impressive that a high school student [1] has managed to reverse engineer iMessage. What I'm wondering is:

1. How stable is it; would it be trivial for Apple to patch this?

2. If it's as simple as reverse engineering the protocols, how has it taken this long?

[1] https://github.com/JJTech0130

New comment by happyhardcore in "I use a Raspberry Pi as my daily computer"

happyhardcore — Fri, 28 Oct 2022 13:55:45 +0000

I started out using a cheap MicroSD and it only lasted a week or two before failing; I've since replaced it with a 128 GB SATA SSD with a USB3-SATA dongle I bought off Amazon. No SD card needed and it's served me incredibly well. I figured that even the best MicroSD card isn't going to be designed to run as a computer's boot drive, and SATA SSDs are cheap and plentiful.

New comment by happyhardcore in "Framework Ethernet Expansion Card is now available"

happyhardcore — Wed, 14 Sep 2022 10:14:07 +0000

It's worth bearing in mind that _all_ ports on the device are expansion cards, including the USB-C port that the device needs to actually charge. In any case I think WiFi is 'good enough' for most use cases, and as such the number of laptops that provide ethernet as standard is rapidly diminishing. I very rarely need an ethernet port on my laptop, but for the times I do it'd be very helpful to have it installed rather than needing a dongle flapping about.

New comment by happyhardcore in "Steve Jobs emails himself (2010)"

happyhardcore — Thu, 08 Sep 2022 14:27:57 +0000

Ah, TIL. Thanks for clearing that up!

New comment by happyhardcore in "Steve Jobs emails himself (2010)"

happyhardcore — Thu, 08 Sep 2022 12:02:37 +0000

Pancreatic cancer actually has one of the worst survival rates; in the UK around 25% of people diagnosed survive past a year, with 5% living more than five years after diagnosis [0]. Chemo in those circumstances often has the effect of prolonging life while significantly decreasing the quality of life, and as such many people choose not to go through with it.

[0] https://www.cancerresearchuk.org/about-cancer/pancreatic-can...

New comment by happyhardcore in "HDMI Firewall"

happyhardcore — Wed, 22 Jun 2022 09:41:29 +0000

This just solved a problem I have that I never knew there was a solution for! It seems really weird to me that every OS doesn't have a native solution for changing external monitor brightness; I thought it was down to the monitor but clearly it isn't. Thanks for the link and thanks for your work on Lunar!

New comment by happyhardcore in "GitHub Copilot for individuals available without waitlist, with free trial"

happyhardcore — Tue, 21 Jun 2022 16:37:56 +0000

I've easily saved a couple of minutes each day by not having to search some API docs, since Copilot already knows how my variables should fit into the function call. Even if it's just a minute a day, 20 days a month, it works out being worth $10 easily if you're on a typical western software dev salary.

New comment by happyhardcore in "GitHub Copilot for individuals available without waitlist, with free trial"

happyhardcore — Tue, 21 Jun 2022 16:35:06 +0000

I've found copilot invaluable for throwing together quick scripts, especially in languages I don't quite understand. Writing e.g. a bash script, and being able to add a comment saying

    # Print an error message in red and exit if this program returns an error

and have it print out

    if ! some_program
    then
        echo -e "\e[31msome_program failed\e[0m"
        exit 1
    fi

makes it so much quicker to cobble together something that works without having to context switch and go Google something. That being said, I've found when writing more complex code it has a real tendency to introduce subtle bugs that can really catch you out if you're not paying attention.

Purely from the amount of time I've saved I'd say it's well worth the $10/mo for my employer (it only has to save a few minutes a day to be worthwhile). Very excited to see how they improve it in the future!

New comment by happyhardcore in "Clap: The New Audio Plug-In Standard"

happyhardcore — Wed, 15 Jun 2022 22:49:16 +0000

Looking at Ableton 11's feature set it seems they're running out of ideas; CLAP support would definitely be the kinda thing that could compel people to upgrade to a future version.

It being MIT licensed also gives it a much better chance of getting integrated into all sorts of smaller DAWs and cheaper ones too that might not have wanted to deal with all the nonsense that comes with VST.

New comment by happyhardcore in "We were a few days away from being settled for life"

happyhardcore — Mon, 28 Mar 2022 16:34:22 +0000

Agreed. If I ran a SaaS startup with a team of three and $1m ARR I'd feel pretty confident that things are gonna be alright for me.