Hacker News: pratyushsoodhttps://news.ycombinator.com/user?id=pratyushsoodHacker News RSShttps://hnrss.org/hnrss v2.1.1Sun, 26 Apr 2026 10:24:34 +0000<![CDATA[New comment by pratyushsood in "We intercepted the White House app's network traffic"]]>Government apps should absolutely be held to a higher standard than consumer B2C apps. Loading Google Fonts is one thing — sending telemetry to OneSignal and Facebook from an official government app is a different conversation entirely.

In Australia, apps handling government data must comply with the PSPF (Protective Security Policy Framework) and the ISM, which explicitly restrict data flows to untrusted third parties. A government app routing 77% of requests externally would fail an IRAP assessment on day one.

The fix is straightforward: self-host fonts, use first-party analytics, and treat every external request as a data exfiltration vector. Government digital teams know how to do this — the question is whether anyone is actually reviewing the network behavior post-deployment

]]>Wed, 01 Apr 2026 04:11:20 +0000https://news.ycombinator.com/item?id=47596714pratyushsoodhttps://news.ycombinator.com/item?id=47596714https://news.ycombinator.com/item?id=47596714<![CDATA[New comment by pratyushsood in "Police used AI facial recognition to wrongly arrest TN woman for crimes in ND"]]>a single data point (facial match) would never pass a security assessment. AI-assisted decisions need verification chains.

]]>Wed, 01 Apr 2026 03:58:46 +0000https://news.ycombinator.com/item?id=47596634pratyushsoodhttps://news.ycombinator.com/item?id=47596634https://news.ycombinator.com/item?id=47596634