<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: nobody42</title><link>https://news.ycombinator.com/user?id=nobody42</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 13 Sep 2026 06:08:21 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=nobody42" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by nobody42 in "Make your first edit to OpenStreetMap"]]></title><description><![CDATA[
<p><a href="https://streetcomplete.app" rel="nofollow">https://streetcomplete.app</a> - basic task-based, on-the-ground, app for Android<p><a href="https://every-door.app" rel="nofollow">https://every-door.app</a> - intermediate on-the-ground app for smartphones<p><a href="https://rapideditor.org" rel="nofollow">https://rapideditor.org</a> - AI-assisted mapping in browser<p><a href="https://www.hotosm.org" rel="nofollow">https://www.hotosm.org</a> - task-based mapping in browser<p><a href="https://josm.openstreetmap.de" rel="nofollow">https://josm.openstreetmap.de</a> - advanced editor for desktop (this post)<p><a href="https://www.comaps.app" rel="nofollow">https://www.comaps.app</a> - actually use the map with ability to make minor changes</p>
]]></description><pubDate>Sat, 12 Sep 2026 22:35:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=49677920</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49677920</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49677920</guid></item><item><title><![CDATA[New comment by nobody42 in "How to debloat your Xiaomi 15 Ultra without root access"]]></title><description><![CDATA[
<p><a href="https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation" rel="nofollow">https://github.com/Universal-Debloater-Alliance/universal-an...</a></p>
]]></description><pubDate>Wed, 02 Sep 2026 20:05:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=49541706</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49541706</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49541706</guid></item><item><title><![CDATA[New comment by nobody42 in "Stopping the smart TV from being used against you"]]></title><description><![CDATA[
<p>Problem is, smart devices are heavily subsidized in an expectation for future profit from data collection.</p>
]]></description><pubDate>Fri, 28 Aug 2026 22:25:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=49484990</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49484990</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49484990</guid></item><item><title><![CDATA[New comment by nobody42 in "State of the Map 2026"]]></title><description><![CDATA[
<p>You can record the track with StreetComplete [0] and upload as a note (records tracks only in foreground). Then convert it to actual path in website editor. [1]<p>[0] <a href="https://streetcomplete.app" rel="nofollow">https://streetcomplete.app</a><p>[1] <a href="https://www.openstreetmap.org" rel="nofollow">https://www.openstreetmap.org</a><p>Also: <a href="https://wiki.openstreetmap.org/wiki/Upload_GPS_tracks" rel="nofollow">https://wiki.openstreetmap.org/wiki/Upload_GPS_tracks</a></p>
]]></description><pubDate>Fri, 28 Aug 2026 20:42:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=49484015</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49484015</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49484015</guid></item><item><title><![CDATA[New comment by nobody42 in "State of the Map 2026"]]></title><description><![CDATA[
<p>Why you want to enable one of the biggest monopolies on the planet, that gatekeeps innovation? [0] [1]<p>Lets say you are building a delivery robot. You need not just situational awareness with LiDAR, but also a map for route planning. Will Google give you access for such technology if your innovation is a direct competitor?<p>If its not a delivery robot, but firefighter robot?<p>[0] <a href="https://www.eff.org/deeplinks/2013/05/google-abandons-open-standards-instant-messaging" rel="nofollow">https://www.eff.org/deeplinks/2013/05/google-abandons-open-s...</a><p>[1] <a href="https://wp-events-plugin.com/blog/2018/07/17/google-maps-api-pricing-increases/" rel="nofollow">https://wp-events-plugin.com/blog/2018/07/17/google-maps-api...</a></p>
]]></description><pubDate>Fri, 28 Aug 2026 20:34:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=49483908</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49483908</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49483908</guid></item><item><title><![CDATA[New comment by nobody42 in "CoMaps integration with the wider FLOSS ecosystem"]]></title><description><![CDATA[
<p>OsmAnd is painfully slow, I keep it around just for unique features like transport routes and surface quality.<p>CoMaps rendering is almost instant and map palette is easier on the eyes.</p>
]]></description><pubDate>Thu, 27 Aug 2026 16:15:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=49467224</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49467224</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49467224</guid></item><item><title><![CDATA[New comment by nobody42 in "CoMaps integration with the wider FLOSS ecosystem"]]></title><description><![CDATA[
<p>Yess!<p>Please make an effort to improve underlying OpenStreetMap dataset:<p><a href="https://streetcomplete.app" rel="nofollow">https://streetcomplete.app</a> - basic task-based, on-the-ground, app for Android<p><a href="https://every-door.app" rel="nofollow">https://every-door.app</a> - intermediate on-the-ground app for smartphones<p><a href="https://rapideditor.org" rel="nofollow">https://rapideditor.org</a> - AI-assisted mapping in browser<p><a href="https://www.hotosm.org" rel="nofollow">https://www.hotosm.org</a> - task-based mapping in browser<p><a href="https://josm.openstreetmap.de" rel="nofollow">https://josm.openstreetmap.de</a> - advanced editor for desktop</p>
]]></description><pubDate>Thu, 27 Aug 2026 14:10:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=49465204</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49465204</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49465204</guid></item><item><title><![CDATA[New comment by nobody42 in "VMs won't contain cyber-capable agents"]]></title><description><![CDATA[
<p>> it found a CUPS server (with a known CVE that had not made it to oldstable packages), but was not able to complete exploitation due to AppArmor.<p>It's evident that Mandatory Access Control has become, ahem, mandatory.<p>Both VM and inference engine processes should be confined, at least. There's a project where it's already done for many applications. [0]<p>Additionally, `lockdown=confidentiality` in kernel boot flags greatly reduces attack surface. (interferes with unsigned modules like NVIDIA drivers) [1]<p>Then AppArmor profiles could be written for absent applications with a learning-mode tool [2]<p>Nothing is bullet proof, but these approach significantly reduces potential consequences [3]<p>[0] <a href="https://github.com/roddhjav/apparmor.d" rel="nofollow">https://github.com/roddhjav/apparmor.d</a> (I'm the contributor)<p>[1] <a href="https://madaidans-insecurities.github.io/guides/linux-hardening.html#boot-parameters" rel="nofollow">https://madaidans-insecurities.github.io/guides/linux-harden...</a><p>[2] <a href="https://github.com/nobody43/apparmor-suggest" rel="nofollow">https://github.com/nobody43/apparmor-suggest</a> (I'm the author)<p>[3] <a href="https://en.wikipedia.org/wiki/Swiss_cheese_model" rel="nofollow">https://en.wikipedia.org/wiki/Swiss_cheese_model</a></p>
]]></description><pubDate>Thu, 27 Aug 2026 01:03:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=49458086</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49458086</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49458086</guid></item><item><title><![CDATA[New comment by nobody42 in "Arch Linux disables AUR package adoption"]]></title><description><![CDATA[
<p>It's just entropy.<p>Favorable environment of Linux distros is an initial phase of technology. This state is gone for years now, AI is just making it evident. Adapt or become obsolete.</p>
]]></description><pubDate>Fri, 31 Jul 2026 18:29:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=49126904</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=49126904</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49126904</guid></item><item><title><![CDATA[New comment by nobody42 in "Ditching Vagrant: VMs with KVM and Virsh on Debian"]]></title><description><![CDATA[
<p>It's usable (?) as a toy: numerous gui inconsistencies and lack of security isolation [0].<p>Can't say whether the of lack funding (move to Cockpit from Red Hat) is the reason, or maintainer is just an obstructionist (strictest feature policy).<p>[0] <a href="https://github.com/virt-manager/virt-manager/issues/358" rel="nofollow">https://github.com/virt-manager/virt-manager/issues/358</a></p>
]]></description><pubDate>Fri, 10 Jul 2026 12:48:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48859153</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48859153</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48859153</guid></item><item><title><![CDATA[New comment by nobody42 in "LineageOS Statistics"]]></title><description><![CDATA[
<p>Is this some kind of FUD?<p>Shady sponsors (if there is any) doesn't matter when transparency is in place. Want to reveal malicious intent? Provide a PoC.<p>Only hardware that supports bootloader relocking are Pixel devices. There are no others to consider development effort - plain simple. No, you can't use an unlocked device as a daily driver. Up to a minute out of your hands (or triggered reboot from public power outlet, due to outdated Lineage firmware) - and your bootloader is rewritten with one that collect your FDE secret and sends it to a remote server.<p>Opaque hardware? Which hardware are better and more transparent than Titan and upcoming OpenTitan? Bruteforce protection which considers <i>current ambient temperature</i> - what more do you need?<p>I can't say anything about VPN affiliation, but everything else is complete bollocks.</p>
]]></description><pubDate>Wed, 08 Jul 2026 13:21:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=48831604</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48831604</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48831604</guid></item><item><title><![CDATA[New comment by nobody42 in "Organic Maps"]]></title><description><![CDATA[
<p>"There's no life where data broker isn't needed"</p>
]]></description><pubDate>Tue, 07 Jul 2026 12:02:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=48816558</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48816558</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48816558</guid></item><item><title><![CDATA[New comment by nobody42 in "CoMaps – FOSS Offline Maps"]]></title><description><![CDATA[
<p>Every time GrapheneOS "just works" should be mentioned, because some ecosystems are straight hostile to user-controlled systems.</p>
]]></description><pubDate>Tue, 07 Jul 2026 11:50:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=48816437</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48816437</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48816437</guid></item><item><title><![CDATA[New comment by nobody42 in "CoMaps – FOSS Offline Maps"]]></title><description><![CDATA[
<p>Its a renderer. It bakes live OSM data once very few weeks.</p>
]]></description><pubDate>Mon, 06 Jul 2026 21:20:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48810664</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48810664</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48810664</guid></item><item><title><![CDATA[New comment by nobody42 in "Loupe – A iOS app that raises awareness about what native apps can see"]]></title><description><![CDATA[
<p>Because exposed, non-private, abused by-default is a business model. The company is incentivised to not provide restricted access - otherwise you can't have a cut from apps revenue. It's defective by design.</p>
]]></description><pubDate>Sun, 21 Jun 2026 13:24:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=48618778</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48618778</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48618778</guid></item><item><title><![CDATA[New comment by nobody42 in "Loupe – A iOS app that raises awareness about what native apps can see"]]></title><description><![CDATA[
<p>Outdated, but gives the general idea:
<a href="https://github.com/nandan-desai-extras/PrivacyBreacher" rel="nofollow">https://github.com/nandan-desai-extras/PrivacyBreacher</a></p>
]]></description><pubDate>Sun, 21 Jun 2026 12:53:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=48618518</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48618518</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48618518</guid></item><item><title><![CDATA[New comment by nobody42 in "New Nginx Exploit"]]></title><description><![CDATA[
<p>Memory safety is good, but does not protect from every threat. In this day and age infrastructure operators should familiarize themselves with proactive defenses, MAC: SElinux and AppArmor. It required much friction earlier, but there are more tools to ease the usage today.<p><a href="https://presentations.nordisch.org/apparmor/" rel="nofollow">https://presentations.nordisch.org/apparmor/</a><p><a href="https://github.com/nobody43/apparmor-profiles/blob/master/nginx" rel="nofollow">https://github.com/nobody43/apparmor-profiles/blob/master/ng...</a><p><a href="https://github.com/nobody43/apparmor-suggest" rel="nofollow">https://github.com/nobody43/apparmor-suggest</a><p>Disclaimer: I'm the author of both repos.</p>
]]></description><pubDate>Thu, 14 May 2026 22:28:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48142102</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=48142102</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48142102</guid></item><item><title><![CDATA[New comment by nobody42 in "Copyparty, the FOSS file server [video]"]]></title><description><![CDATA[
<p>Attack surface of this thing gives me existential dread.</p>
]]></description><pubDate>Thu, 27 Nov 2025 15:07:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=46069909</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=46069909</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46069909</guid></item><item><title><![CDATA[New comment by nobody42 in "Debian Extended Long Term Support"]]></title><description><![CDATA[
<p>> Freexian aims to keep the updates available for individual users and non-profit organizations.</p>
]]></description><pubDate>Sun, 23 Nov 2025 16:46:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=46024913</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=46024913</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46024913</guid></item><item><title><![CDATA[New comment by nobody42 in "The privacy nightmare of browser fingerprinting"]]></title><description><![CDATA[
<p>Best among existing. Anti-fingerprinting field is still in it's early stages.<p>I wouldn't say Tor Browser is the best because it requires custom configuration to be usable conveniently, which will make the connection non-uniform (and the user will stand out).<p>>Tor is pretty good for protection. Then there's always i2P as well…<p>Tor and i2P does nothing for (anti)fingerprinting - the program which render the web pages does.<p>>Saying one browser can protect the best is pretty hard to prove.<p>Not a proof but things to consider: <a href="https://privacytests.org/" rel="nofollow">https://privacytests.org/</a></p>
]]></description><pubDate>Sat, 22 Nov 2025 21:34:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=46018468</link><dc:creator>nobody42</dc:creator><comments>https://news.ycombinator.com/item?id=46018468</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46018468</guid></item></channel></rss>