Hacker News: schnatterer

New comment by schnatterer in "How to perform CPR and defibrillation training video (2020)"

schnatterer — Sat, 05 Sep 2026 20:53:12 +0000

6 concise minutes of something we all should know and care about

How to perform CPR and defibrillation training video (2020)

schnatterer — Sat, 05 Sep 2026 20:53:12 +0000

Article URL: https://commons.wikimedia.org/wiki/File:Save_a_Life_Cymru_-_Training_video.webm

Comments URL: https://news.ycombinator.com/item?id=49580544

Points: 5

# Comments: 1

New comment by schnatterer in "Codex Security"

schnatterer — Wed, 29 Jul 2026 11:29:28 +0000

Can we interpret this as a reaction to Google open sourcing mantis? https://github.com/google/mantis/

New comment by schnatterer in "CarPlay Is Additive"

schnatterer — Sun, 05 Jul 2026 06:23:02 +0000

What about privacy? No one here wonders what kind of data your car leaks to Apple/Google?

New comment by schnatterer in "Half-Baked Product"

schnatterer — Sat, 04 Jul 2026 12:23:32 +0000

What would you say are the main lessons to be learned here for all sides?

New comment by schnatterer in "Podman v6.0.0"

schnatterer — Sat, 04 Jul 2026 06:54:59 +0000

Any experiences running k3d on podman? It's my daily provider of local kubernetes.

New comment by schnatterer in "Android Developer Verification: Threat masquerading as protection"

schnatterer — Thu, 02 Jul 2026 11:03:14 +0000

Meanwhile in Luxembourg: Google loses fight against EU’s $4.7 billion Android fine https://www.msn.com/en-us/money/other/google-loses-fight-aga...

New comment by schnatterer in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"

schnatterer — Mon, 27 Apr 2026 07:06:12 +0000

Can you give some examples for the claim that most of the attacks don't make it upstream? My gut tells me that, yes, mostly binaries have been compromised. But I am sure you have some real-world examples proving the point.

New comment by schnatterer in "Moving from GitHub to Codeberg, for lazy people"

schnatterer — Fri, 27 Mar 2026 06:27:50 +0000

This repo also holds a lot of info about setting up two way mirrors between GitHub and Codeberg: https://codeberg.org/Recommendations/Mirror_to_Codeberg

Last commit is two years ago, but still a good overview.

New comment by schnatterer in "‘ELITE’: The Palantir app ICE uses to find neighborhoods to raid"

schnatterer — Thu, 15 Jan 2026 20:00:32 +0000

Original 404media article:

https://www.404media.co/elite-the-palantir-app-ice-uses-to-f...

https://archive.ph/wa32f

New comment by schnatterer in "Floppy disks turn out to be the greatest TV remote for kids"

schnatterer — Tue, 13 Jan 2026 07:34:03 +0000

The toni boxes are also quite hackable https://tonies-wiki.revvox.de/

At least the older model. Don't know about their latest model with gaming and everything.

New comment by schnatterer in "Package managers keep using Git as a database, it never works out"

schnatterer — Sun, 28 Dec 2025 11:52:41 +0000

> Even GitOps tools that embrace git as a source of truth have to work around its limitations

I'd say this only applies to huge scale (or monorepos, as mentioned in the article). Another workaround might be gitless gitops via OCI.

Europe: WhatsApp opens for third-party apps

schnatterer — Sun, 07 Dec 2025 11:23:43 +0000

Article URL: https://faq.whatsapp.com/916543719558426

Comments URL: https://news.ycombinator.com/item?id=46180944

Points: 45

# Comments: 17

New comment by schnatterer in "ICC ditches Microsoft 365 for openDesk"

schnatterer — Fri, 07 Nov 2025 19:21:16 +0000

OpenDesk is basically a huge helm file that configures the individual apps. Given enough RAM it should be rather simple to deploy. You can start right away, there is a community edition: https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk

New comment by schnatterer in "Linux phones are more important now than ever"

schnatterer — Tue, 16 Sep 2025 19:21:23 +0000

I am surprised that no one criticized kernel architecture as base for a secure mobile OS, yet.

Let me heat up the discussion using this quote

> The Linux kernel has atrocious security. It has an anti-security architecture, implementation and culture. The Linux kernel is not a good base for building any new operating system with a focus on privacy and security

https://grapheneos.social/@GrapheneOS/114665594121762341

New comment by schnatterer in "Cognitive load is what matters"

schnatterer — Sun, 31 Aug 2025 06:15:29 +0000

> business logic and http status codes Why hold this custom mapping in our working memory? It's better to abstract away your business details from the HTTP transfer protocol, and return self-descriptive codes directly in the response body: { "code": "jwt_has_expired" }

While the logic behind it sounds reasonable, REST does the exact opposite with the same goal: simplicity, easy to learn, i.e. reduce mental load. I know there are other reasons for REST/SOAP/Graphql, etc. Still makes mental load a somewhat subjective matter to me.

I migrated a 10-year workout history from runtastic to fitotrack app

schnatterer — Mon, 31 Mar 2025 19:20:59 +0000

Article URL: https://github.com/schnatterer/Runtastic2FitoTrack

Comments URL: https://news.ycombinator.com/item?id=43538725

Points: 3

# Comments: 0

New comment by schnatterer in "Everyone knows all the apps on your phone"

schnatterer — Mon, 31 Mar 2025 19:18:07 +0000

I'd like to add one more finding about the perils of root access: https://github.com/chenxiaolong/my-avbroot-setup/blob/c52e44...

> The term [rooting] generally also includes the functionality for making runtime code patches (eg. with Zygisk) and making runtime filesystem modifications (eg. Magisk modules).

> Out of the many root-enabled apps I've studied or reverse engineered, the vast majority fail to handle arbitrary inputs properly (especially filenames). For example, some root-supporting file managers turn a seemingly benign action like listing a directory into local privilege escalation. This is trivially exploitable, especially with browsers auto-downloading files with server-provided filenames to /sdcard/Download/.

To avoid repeated root access UI prompts, some apps spawn a long-running shell session, write commands to stdin, and rely on parsing stdout and searching for the shell prompt to determine when commands complete. This approach is prone to desync, which can lead to commands being skipped or other inputs being interpreted as commands.

All in all, I simply do not trust most root-enabled apps to not leave a gaping security hole, so I avoid them entirely. There are apps that do handle root access in what I would consider a more proper way, by spawning a daemon as root and then talking to the daemon over a well defined binary protocol. Unfortunately, this approach is the extreme minority.

New comment by schnatterer in "Everyone knows all the apps on your phone"

schnatterer — Mon, 31 Mar 2025 19:14:58 +0000

As someone who cherishes the power of root privs, I'd still like to make a point for alternative solutions that came up like distros such as GrapheneOS or CalyxOS or non-root filtering options via VPN. If it weren't for backups I could manage my everyday life without root. For all other cases I would root and later unroot my phone via an OTA update :D https://github.com/schnatterer/rooted-graphene/

Hopefully GrapheneOS deliver on their promise to provide a better backup solutions than seedvault.

New comment by schnatterer in "Everyone knows all the apps on your phone"

schnatterer — Sun, 30 Mar 2025 13:11:12 +0000

I found this description about the security risks of rooting very eye-opening https://madaidans-insecurities.github.io/android.html It also explains the sandbox.