Hacker News: ryukafalz

End-to-end encrypted relays for OCapN

ryukafalz — Thu, 15 Oct 2026 23:53:15 +0000

Article URL: https://spritely.institute/news/end-to-end-encrypted-relays-for-ocapn.html

Comments URL: https://news.ycombinator.com/item?id=50111953

Points: 8

# Comments: 0

New comment by ryukafalz in "The engineering that allows articulated buses to bend"

ryukafalz — Thu, 15 Oct 2026 20:55:32 +0000

The bus version of an EMU train

New comment by ryukafalz in "Everyone's Packing Up"

ryukafalz — Fri, 02 Oct 2026 21:46:29 +0000

Can confirm, I'm one of those people. I mean I had an account on a Mastodon instance before that, but it became my primary social platform when Twitter got taken over.

New comment by ryukafalz in "GrapheneOS project: pixel 11 no longer supports hardware memory tagging (MTE)"

ryukafalz — Sat, 29 Aug 2026 23:05:04 +0000

Or a lapdock for an all-in-one equivalent. The latest NexDock finally has a decent touchpad.

New comment by ryukafalz in "I'm switching my phone from Android to Linux"

ryukafalz — Wed, 05 Aug 2026 23:15:47 +0000

I've just switched over to Ubuntu Touch again recently. We'll see if I stick with it, but... at least on my device (Fairphone 5), VoLTE works now!

New comment by ryukafalz in "Kill The Cookie Banner"

ryukafalz — Sun, 26 Jul 2026 17:38:24 +0000

> But in many cases, you could just click "reject" and the banner would also disappear...

Oftentimes the reject flow is substantially more annoying than the accept flow. I click reject myself when it's an option, but I can absolutely understand how people might get conditioned to click accept when clicking reject might result in more popups.

New comment by ryukafalz in "In Emacs, everything looks like a service"

ryukafalz — Fri, 10 Jul 2026 12:37:43 +0000

It certainly did for me, because it let me trivially write code that integrates deeply into the rest of the system.

A simple example: I wrote a function that let me highlight an X.509 cert in a YAML document, regardless of indentation, and pass it to 'openssl x509' to show me what it is. This has saved me lots of time over the years not having to copy/paste, fiddle with whitespace, etc. But it's only valuable because the functionality is now right at my fingertips in the environment I'm already in!

New comment by ryukafalz in "Scheme Is a Hoot"

ryukafalz — Wed, 08 Jul 2026 02:41:01 +0000

Presumably to run in the browser? Guile Scheme is great for native programs but you need Hoot to run it in a browser.

New comment by ryukafalz in "Phosh 0.56.0"

ryukafalz — Sun, 05 Jul 2026 15:34:05 +0000

I've never understood tap-to-pay being a dealbreaker issue. It takes me just as long to pull out my credit card as it does to pull out my phone, and you can use them on the exact same terminals.

App support and camera quality I can understand more. I'm on a Linux phone using Phosh (FLX1s), and there's Android app compatibility, but it is a little rough (and of course things that rely on Play Integrity won't work). I've managed to avoid tying myself to anything that requires Google for now, but I acknowledge that I'm lucky there.

New comment by ryukafalz in "Android Developer Verification: Threat masquerading as protection"

ryukafalz — Thu, 02 Jul 2026 14:04:48 +0000

I just recently, in the US, got bounced through a bank authentication system (Wells Fargo's) when trying to order something from Amazon that required me to use their mobile app. I don't use an Android or iOS phone; as best I can tell there is no way to successfully complete that authentication. I even have a hardware TOTP token from the bank now, but even that they won't accept.

Now, my card info did in fact get compromised recently, and that's probably why I ended up needing that stronger auth flow. But the fact that I literally can't complete that stronger bank authentication without Google or Apple is... yeah. No.

I have since signed up for a different credit card that I plan to use from here on out.

New comment by ryukafalz in "Nintendo has raised its employees base salary by 10%"

ryukafalz — Wed, 01 Jul 2026 18:21:00 +0000

Where is this happening? I think I would walk out and never come back if I walked into a fast food place and couldn't order until I downloaded an app.

New comment by ryukafalz in "European digital ID wallets rely on safety services of Google and Apple"

ryukafalz — Tue, 30 Jun 2026 13:53:35 +0000

But if the EU cements their citizens' dependency on Google/Apple even further by effectively mandating the use of these devices, it gives Google/Apple more leverage. Imagine if them pulling out of the EU meant nobody could use their digital wallet? What if the use of digital wallets has become more mandatory by then?

New comment by ryukafalz in "Digital euro clears key hurdle as EU seeks to break free from U.S. credit cards"

ryukafalz — Tue, 23 Jun 2026 17:13:49 +0000

How much you wanna bet that digital euro implementations will in practice depend on two US corporations? The EUDI wallet implementations being rolled out seem to so far. (Apple and Google, in case it wasn't obvious.)

New comment by ryukafalz in "Prompt Injection as Role Confusion"

ryukafalz — Mon, 22 Jun 2026 17:48:52 +0000

I don't know a ton about how LLMs work (I really should learn), but something like this feels like it might be the way forward to me.

The software running the model knows unambiguously what came from a user and what did not, what came from a tool call and what did not, etc... and having some way of exposing that to the LLM as part of the text itself feels like it fits better with how a neural net works than a set of surrounding tags does.

New comment by ryukafalz in "There are no instances in ATProto"

ryukafalz — Fri, 19 Jun 2026 23:44:03 +0000

To refer back to the comment I was replying to: is that the sort of thing you could realistically run on a raspberry pi? At home?

New comment by ryukafalz in "There are no instances in ATProto"

ryukafalz — Fri, 19 Jun 2026 21:36:14 +0000

Wouldn't you then not be able to see replies from anyone besides the dozen accounts your relay follows too? If I run a personal Mastodon instance and someone replies to one of my posts, their instance will send it directly to mine and I'll see it. My understanding of the ATProto architecture is that it doesn't support directed messaging like that.

New comment by ryukafalz in "Commodore Releases Flip Phone"

ryukafalz — Tue, 16 Jun 2026 12:41:52 +0000

I really want to like this, but as someone who's daily driven Sailfish before (albeit not in a while), one of the things you'll likely miss if you're in the US is group MMS support.

Maybe Commodore is paying Jolla enough that they'll be able to add group MMS support by the time this launches? But if not... it's something you might not even think could be missing, and not having it can be a problem if people expect to be able to send you group texts.

New comment by ryukafalz in "Developer gets Half-Life running at 30 FPS on a Nokia N95"

ryukafalz — Thu, 11 Jun 2026 20:49:11 +0000

This with DisplayPort Alt-Mode so it can be docked for desktop use is pretty much my dream device.

New comment by ryukafalz in "The foundations of a provably secure operating system (PSOS) (1979) [pdf]"

ryukafalz — Mon, 18 May 2026 13:08:13 +0000

Consider two processes on a *nix system, and for the sake of argument let's say they're sufficiently isolated from each other as to have only one communications channel between them. If that communications channel is a unix domain socket, one process can send a file descriptor (effectively a capability) to the other over the socket. Each process has a file descriptor table in the kernel whose integer keys are only meaningful to that process in particular, and the kernel provides a mechanism to transmit file descriptors across a socket. The kernel mediates in this case.

If the communications channel is not a unix domain socket and is instead something like a TCP connection, you don't have this option available to you.

You aren't always just sending bits from one process to another!

New comment by ryukafalz in "Google broke reCAPTCHA for de-googled Android users"

ryukafalz — Sat, 09 May 2026 18:11:19 +0000

This is the way to do it if you're gonna have a digital ID. Thank you Germany for setting a better example than many!