frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Privacy and Security Risks in the eSIM Ecosystem [pdf]

https://www.usenix.org/system/files/usenixsecurity25-motallebighomi.pdf
98•walterbell•2h ago•19 comments

Download Responsibly

https://blog.geofabrik.de/index.php/2025/09/10/download-responsibly/
41•marklit•1h ago•11 comments

DSM Disorders Disappear in Statistical Clustering of Psychiatric Symptoms (2024)

https://www.psychiatrymargins.com/p/traditional-dsm-disorders-dissolve?r=2wyot6&triedRedirect=true
101•rendx•4h ago•47 comments

How I, a beginner developer, read the tutorial you, a developer, wrote for me

https://anniemueller.com/posts/how-i-a-non-developer-read-the-tutorial-you-a-developer-wrote-for-...
213•wonger_•5h ago•104 comments

Sj.h: A tiny little JSON parsing library in ~150 lines of C99

https://github.com/rxi/sj.h
379•simonpure•14h ago•188 comments

Why is Venus hell and Earth an Eden?

https://www.quantamagazine.org/why-is-venus-hell-and-earth-an-eden-20250915/
106•pseudolus•8h ago•149 comments

Simulating a Machine from the 80s

https://rmazur.io/blog/fahivets.html
24•roman-mazur•3d ago•2 comments

A Generalized Algebraic Theory of Directed Equality

https://jacobneu.phd/
6•matt_d•3d ago•0 comments

Lightweight, highly accurate line and paragraph detection

https://arxiv.org/abs/2203.09638
100•colonCapitalDee•9h ago•11 comments

Pointer Tagging in C++: The Art of Packing Bits into a Pointer

https://vectrx.substack.com/p/pointer-tagging-in-c-the-art-of-packing
36•signa11•5h ago•26 comments

40k-Year-Old Symbols in Caves Worldwide May Be the Earliest Written Language

https://www.openculture.com/2025/09/40000-year-old-symbols-found-in-caves-worldwide-may-be-the-ea...
136•mdp2021•3d ago•79 comments

Obsidian Note Codes

https://ezhik.jp/obsidian/note-codes/
74•surprisetalk•3d ago•16 comments

DXGI debugging: Microsoft put me on a list

https://slugcat.systems/post/25-09-21-dxgi-debugging-microsoft-put-me-on-a-list/
247•todsacerdoti•16h ago•72 comments

How can I influence others without manipulating them?

https://andiroberts.com/leadership-questions/how-to-influence-others-without-manipulating
86•kiyanwang•8h ago•61 comments

Nvmath-Python: Nvidia Math Libraries for the Python Ecosystem

https://github.com/NVIDIA/nvmath-python
43•gballan•3d ago•1 comments

Calculator Forensics (2002)

https://www.rskey.org/~mwsebastian/miscprj/results.htm
79•ColinWright•3d ago•35 comments

Show HN: Tips to stay safe from NPM supply chain attacks

https://github.com/bodadotsh/npm-security-best-practices
47•bodash•9h ago•19 comments

My new Git utility `what-changed-twice` needs a new name

https://blog.plover.com/2025/09/21/#what-changed-twice
65•jamesbowman•9h ago•36 comments

Why your outdoorsy friend suddenly has a gummy bear power bank

https://www.theverge.com/tech/781387/backpacking-ultralight-haribo-power-bank
207•arnon•18h ago•250 comments

Procedural Island Generation (VI)

https://brashandplucky.com/2025/09/28/procedural-island-generation-vi.html
53•ibobev•10h ago•4 comments

RCA VideoDisc's Legacy: Scanning Capacitance Microscope

https://spectrum.ieee.org/rca-videodisc
17•WaitWaitWha•3d ago•3 comments

South Korea's President says US investment demands would spark financial crisis

https://www.reuters.com/world/china/south-koreas-president-lee-says-us-investment-demands-would-s...
30•rbanffy•3h ago•7 comments

I forced myself to spend a week in Instagram instead of Xcode

https://www.pixelpusher.club/p/i-forced-myself-to-spend-a-week-in
225•wallflower•17h ago•86 comments

Node 20 will be deprecated on GitHub Actions runners

https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
90•redbell•1d ago•34 comments

Timesketch: Collaborative forensic timeline analysis

https://github.com/google/timesketch
115•apachepig•14h ago•10 comments

How Isaac Newton discovered the binomial power series (2022)

https://www.quantamagazine.org/how-isaac-newton-discovered-the-binomial-power-series-20220831/
64•FromTheArchives•3d ago•15 comments

INapGPU: Text-mode graphics card, using only TTL gates

https://github.com/Leoneq/iNapGPU
63•userbinator•4d ago•8 comments

Unified Line and Paragraph Detection by Graph Convolutional Networks (2022)

https://arxiv.org/abs/2503.05136
91•Qision•16h ago•13 comments

South Korea's President says US investment demands would spark financial crisis

https://www.cnbc.com/2025/09/21/south-koreas-president-lee-trump-investment-financial-crisis.html
147•donsupreme•4h ago•128 comments

Seattle, Tech Boomtown, Grapples with a Future of Fewer Tech Jobs

https://www.wsj.com/tech/seattle-tech-amazon-microsoft-jobs-95f2db27
44•mooreds•4h ago•28 comments
Open in hackernews

Privacy and Security Risks in the eSIM Ecosystem [pdf]

https://www.usenix.org/system/files/usenixsecurity25-motallebighomi.pdf
98•walterbell•2h ago

Comments

pjmlp•1h ago
I will keep using SIM as long as it is possible, not only is eSIM a way for operators to impose restrictions on unlocked pre-paid phones, some really like to take their cut every time that eSIM gets moved, for something free of charge and doable under a few seconds with a regular SIM.
leakycap•1h ago
> not only is eSIM a way for operators to impose restrictions on unlocked pre-paid phones

Are you outside the US? I've used eSIM on iOS many times with a number of carriers and MVNOs and never noticed a fee (unless you're talking about a postpaid carrier's line activation fee, usually around $36, not related to esim or not)

nottorp•57m ago
It's not only the fee. eSIM simply needs too many entities to cooperate just so you don't have to look for a paper clip.
pjmlp•9m ago
In Europe, in the past it used to cost about 5€ and there was a limitation on the amount of swaps.

As it is nowadays, I am not up to date.

vladvasiliu•1m ago
Bouygues France still charged a 10€ fee as of September 2024. Didn't need to move it to another phone though, so I don't know how that works.

That 10 € fee is exactly the cost they would have charged for a physical SIM, shipping included.

Bouygues was one of the companies lamenting the change. They viewed it as a "loss of connection with their customers", whatever that means. I haven't set foot in a phone store in I don't even remember how long, but at least 10 years, so I have no idea what the hell they're talking about.

userbinator•37m ago
eSIM seems like a gradual return to the device-locked model that was IS-95/CDMA in the 90s and early 2000s, where it contrasted with the openness of GSM.
lazycatjumping•1h ago
Thanks to Wireguard and basically 0% battery overhead on Android I always keep it activated. If you don't have a Wireguard endpoint just use Orbot to route it through Tor.

Did that several times using cheap eSIMs while traveling.

Never had a single problem with it (but increased latency because of weird routings around the world).

flowerthoughts•1h ago
> We first show how travel eSIMs often route user data through third-party networks [---] Second, we analyze the implications of opaque provisioning workflows, documenting how resellers can access sensitive user data [---]. Third, we validate operational risks such as deletion failures and profile lock-in using a private LTE testbed.

So not about eSIM the technology, but the business landscape inviting opportunistic business people when the bar of entry is lowered. Table 1 is worth a read. The outrage bait about traffic being routed through China shouldn't matter too much to the common person, since we're mostly using TLS. If you're on DoH (DNS over HTTPS), you're even using it for host lookups.

itake•55m ago
1/ ISP or the website Youre accessing can see the DNS queries and block traffic. My eSIM routes through Hong Kong, which means no ChatGPT.

2/ iPhones don't get you set the DNS provider / DoH for cellular

3/ DoH breaks wifi redirect walls, making it tedious to enable/disable. Like you cant just enable DoH for certain apps or disable it for others.

Gigachad•46m ago
Just get a VPN and then you can route your traffic wherever you want and not have to worry about what the carrier is doing.
IshKebab•4m ago
> DoH breaks wifi redirect walls

Is that really true? I would have thought all the automatic detection features try with unencrypted DNS? They should anyway.

daft_pink•53m ago
The fact that Chinese domestic cell users can only use phones sold in China on eSim, and as soon as they leave China the eSims no longer work, gives me pause that there is some nascent security hole in them.

Why would they take such extreme measures if there wasn’t some issue with the security?

notpushkin•42m ago
To prevent them from using Hong Kong eSIMs to bypass site blocks?
okanat•39m ago
It could be simply IMEI tracking. Turkey also has it. Without being registered in the country registry, the modem just stops getting answers from cell towers.
uni_baconcat•13m ago
Incorrect. Chinese mobile carriers only issue eSIM to their approved models, which are devices sold in China. Once the eSIM is activated, users can roaming with their Chinese phone number to any country just like a physical SIM card.

Also, iPhone and iPad sold in China can install and activate an eSIM from foreign carriers when the device is not located in China. They only banned activating foreign eSIM within China.

futurecat•22m ago
Used an eSim on a trip to Japan recently. I wasn't happy when I realized my IP was in Hong-Kong.