Hacker News: thomassshttps://news.ycombinator.com/user?id=thomasssHacker News RSShttps://hnrss.org/hnrss v2.1.1Sat, 11 Jul 2026 23:44:16 +0000<![CDATA[New comment by thomasss in "iPhone dumbphone"]]>https://github.com/tstromberg/quietude is how I manage my Pixel phone as well as my kids; I begin with “quietude.sh disable all”, but usually re-enable maps.

It takes a similar approach to the OP - changing restrictions requires a USB cable and a computer.

]]>Mon, 08 Sep 2025 19:29:44 +0000https://news.ycombinator.com/item?id=45172785thomassshttps://news.ycombinator.com/item?id=45172785https://news.ycombinator.com/item?id=45172785<![CDATA[New comment by thomasss in "Malvertising on Google Ads"]]>We had a close call with malvertising ourselves, so we wrote an osquery query to alert on .dmg/.iso/.pkg downloads from unknown sources:

https://github.com/chainguard-dev/osquery-defense-kit/blob/m...

This query should not be your only line of defense, but can provide an early heads up before the package is opened. You can deploy this query with Kolide, as it uses osquery under the hood.

It was once possible to have a query like this that worked on Linux using the user.xdg.origin.url extended file attribute, but Chromium dropped support for it in 2019 for privacy reasons: https://chromium.googlesource.com/chromium/src/+/a9b4fb70b43...

]]>Tue, 07 Mar 2023 22:16:56 +0000https://news.ycombinator.com/item?id=35062037thomassshttps://news.ycombinator.com/item?id=35062037https://news.ycombinator.com/item?id=35062037