frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains
167•birdculture•1h ago•39 comments

France threatens GrapheneOS with arrests / server seizure for refusing backdoors

https://mamot.fr/@LaQuadrature/115581775965025042
59•nabakin•32m ago•4 comments

NSA and IETF, part 3: Dodging the issues at hand

https://blog.cr.yp.to/20251123-dodging.html
224•upofadown•5h ago•92 comments

Inside Rust's std and parking_lot mutexes – who wins?

https://blog.cuongle.dev/p/inside-rusts-std-and-parking-lot-mutexes-who-win
48•signa11•4d ago•6 comments

Chrome Jpegxl Issue Reopened

https://issues.chromium.org/issues/40168998
114•markdog12•5h ago•35 comments

Show HN: Cynthia – Reliably play MIDI music files – MIT / Portable / Windows

https://www.blaizenterprises.com/cynthia.html
60•blaiz2025•3h ago•17 comments

Corvus Robotics (YC S18): Hiring Head of Mfg/Ops, Next Door to YC Mountain View

1•robot_jackie•32m ago

Serflings is a remake of The Settlers 1

https://www.simpleguide.net/serflings.xhtml
83•doener•2d ago•24 comments

Shai-Hulud Returns: Over 300 NPM Packages Infected

https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24
579•mrdosija•6h ago•457 comments

We stopped roadmap work for a week and fixed bugs

https://lalitm.com/fixits-are-good-for-the-soul/
170•lalitmaganti•1d ago•255 comments

Slicing Is All You Need: Towards a Universal One-Sided Distributed MatMul

https://arxiv.org/abs/2510.08874
70•matt_d•5d ago•5 comments

RuBee

https://computer.rip/2025-11-22-RuBee.html
308•Sniffnoy•14h ago•53 comments

Disney Lost Roger Rabbit

https://pluralistic.net/2025/11/18/im-not-bad/
391•leephillips•6d ago•184 comments

Historically Accurate Airport Dioramas by AV Pro Designs

https://www.core77.com/posts/138995/Historically-Accurate-Airport-Dioramas-by-AV-Pro-Designs
8•surprisetalk•3d ago•1 comments

Japan's gamble to turn island of Hokkaido into global chip hub

https://www.bbc.com/news/articles/c8676qpxgnqo
230•1659447091•14h ago•365 comments

µcad: New open source programming language that can generate 2D sketches and 3D

https://microcad.xyz/
350•todsacerdoti•20h ago•112 comments

Fast Lua runtime written in Rust

https://astra.arkforge.net/
69•akagusu•3h ago•40 comments

Ask HN: Hearing aid wearers, what's hot?

292•pugworthy•15h ago•162 comments

Lambda Calculus – Animated Beta Reduction of Lambda Diagrams

https://cruzgodar.com/applets/lambda-calculus
121•perryprog•12h ago•8 comments

The Rust Performance Book (2020)

https://nnethercote.github.io/perf-book/
181•vinhnx•5d ago•28 comments

I built a faster Notion in Rust

https://imedadel.com/outcrop/
114•PaulHoule•4d ago•62 comments

New magnetic component discovered in the Faraday effect

https://phys.org/news/2025-11-magnetic-component-faraday-effect-centuries.html
186•rbanffy•4d ago•68 comments

Show HN: Virtual SLURM HPC cluster in a Docker Compose

https://github.com/exactlab/vhpc
28•ciclotrone•4d ago•6 comments

Show HN: Stun LLMs with thousands of invisible Unicode characters

https://gibberifier.com
168•wdpatti•14h ago•75 comments

Fran Sans – font inspired by San Francisco light rail displays

https://emilysneddon.com/fran-sans-essay
1063•ChrisArchitect•23h ago•130 comments

I put a real search engine into a Lambda, so you only pay when you search

https://nixiesearch.substack.com/p/i-put-a-real-search-engine-into-a
26•shutty•6h ago•5 comments

Building the largest known Kubernetes cluster, with 130k nodes

https://cloud.google.com/blog/products/containers-kubernetes/how-we-built-a-130000-node-gke-cluster/
73•TangerineDream•2d ago•55 comments

Ego, empathy, and humility at work

https://matthogg.fyi/a-unified-theory-of-ego-empathy-and-humility-at-work/
129•mrmatthogg•15h ago•41 comments

Set theory with types

https://lawrencecpaulson.github.io//2025/11/21/Typed_Set_Theory.html
99•baruchel•2d ago•15 comments

The Cloudflare outage might be a good thing

https://gist.github.com/jbreckmckye/32587f2907e473dd06d68b0362fb0048
217•radeeyate•14h ago•153 comments
Open in hackernews

France threatens GrapheneOS with arrests / server seizure for refusing backdoors

https://grapheneos.social/@watchfulcitizen@goingdark.social/115605398547420414
154•nabakin•52m ago

Comments

nabakin•52m ago
This is a better link from a French privacy non-profit but I can't change it now: https://mamot.fr/@LaQuadrature/115581775965025042

@dang or other mods, could you change it?

Google Translated text:

> Two articles in Le Parisien yesterday, followed today by one in Le Figaro, have launched a shameful attack against GrapheneOS, a free and accessible open-source operating system for phones. At La Quadrature du Net, it's one of the tools we favor and regularly recommend for protecting against advertising tracking and spyware.

> Echoing the propaganda of the Ministry of the Interior, newspapers describe GrapheneOS as a "crime-related phone solution," and a police officer adds that its use is suspicious in itself because it indicates an "intention to conceal." By portraying GrapheneOS as a technology linked to drug trafficking, this attack aims to criminalize what is actually a secure privacy-preserving tool.

> In these articles, the head of the cybercrime section of the Paris prosecutor's office – who was behind the arrest of Pavel Durov – also threatens the developers of GrapheneOS. In an interview, she warns that she will "not hesitate to prosecute the publishers if links are discovered with a criminal organization and they do not cooperate with the justice system." https://archive.is/20251119110251/https://www.leparisien.fr/...

> The government regularly tries to link privacy technologies, particularly encryption, to criminal behavior in order to undermine them and justify surveillance policies. This was the case in the so-called "December 8th" case, where a police narrative was constructed around the (secure) digital practices of the accused to portray a "clandestine" and "conspiratorial" group. https://www.laquadrature.net/2023/06/05/affaire-du-8-decembr...

> Now, drug trafficking is being used to attack these technologies and justify the surveillance of communications. The so-called "Drug Trafficking" law was thus used as a pretext to try to legalize "backdoors" in encrypted applications like Signal or WhatsApp, without success. https://www.laquadrature.net/2025/03/18/le-gouvernement-pret...

> An article in Le Monde diplomatique from November extensively examines the history of the political exploitation of drug trafficking to justify security and surveillance policies. The police attack on GrapheneOS fits perfectly within this pattern. https://www.monde-diplomatique.fr/2025/11/BONELLI/68915

> In its response published yesterday, GrapheneOS points to the authoritarian tendencies of the French government, one of the most fervent supporters of the "ChatControl" regulation under discussion at the European level, one of whose goals is to put an end to end-to-end encryption. https://grapheneos.social/@GrapheneOS/115575997104456188

Additional context:

https://grapheneos.social/deck/@GrapheneOS/11557599710445618...

https://grapheneos.social/@GrapheneOS/115583866253016416

https://grapheneos.social/@LaQuadrature@mamot.fr/11558177594...

https://grapheneos.social/@GrapheneOS/115589833471347871

https://grapheneos.social/@GrapheneOS/115594002434998739

shlip•16m ago
I think you meant https://mamot.fr/@LaQuadrature/115581775965025042 instead of a link to "Le Parisien", which is not a non profit, but a newspaper owned by LVMH/Bernard Arnault, and known for having rightist opinions.
nabakin•15m ago
Oops, that's correct, ty
shlip•14m ago
No problems :) The full "Le parisien" article is available here FWIW:

https://archive.ph/20251124161701/https://www.leparisien.fr/...

tehjoker•36m ago
I believe this is the OS recommended to journalists that report on Palestine because freedom of speech doesn't apply without aggressive assertion of your rights.
rurban•35m ago
Into jail with those officials. Clear violation of their constitution
inglor_cz•32m ago
It is France. The state is them.

Edit: I wonder why this is downvoted. The bureaucratic class holds enormous power in France, and has constantly acted against digital rights and privacy with impunity. The only institution that can somewhat restrain them is ECHR.

monerozcash•32m ago
This is not something that's actually happening.
aja12•24m ago
Yet.

When ChatControl will be in place, it'll only be a matter of time

jeffbee•23m ago
Right?? The daily display of uncritical thinking is at least slightly amusing, though.
hirako2000•29m ago
Some advocacy groups are denouncing the collusion and lobbying taking place between industrials, governments, and the media.

https://eu.boell.org/en/2024/04/25/press-freedom-france

https://ipi.media/france-media-freedom-threats-capture/

BLKNSLVR•28m ago
Is it safe to assume, then, that Google and Apple already have backdoors in their operating systems as likely requested by many governments around the world (not least of which the one from their home country)?

Or is GrapheneOS the only one built securely enough to need to be leaned upon?

Either way, makes Google and Apple look bad and/or incompetent and GrapheneOS look like some kind of beacon of user protection / privacy rights / other things that are the opposite of the direction the world seems to be moving.

srmatto•25m ago
Or that GrapheneOS is small enough to bully.
TheCraiggers•22m ago
The EU doesn't seem to shy about forcing Apple or Google to do things, so I don't think it's a size thing.
teaearlgraycold•14m ago
France isn’t the EU though.
TheCraiggers•5m ago
True, but from what I understand France and Germany quite often get their way in the EU.
VWWHFSfQ•22m ago
I seem to remember the FBI attempting to compel Apple to decrypt a criminal's iPhone, only for Apple to refuse and claim that it wasn't possible. I'm not sure exactly what happened after that. I think it was suspected that the NSA was able to do it by exploiting an unpatched zero-day. So they didn't need Apple's help anymore and the issue was dropped from the public's eye.
mewse-hn•18m ago
https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d...
wutwutwat•17m ago
That was show put on for the sole reason of the public seeing it.
mindslight•14m ago
I recall there being a little more substance to it at the time. But looking back from where we are now, that is a succinct way of describing its results.
Enginerrrd•12m ago
If you follow the things that have been disclosed / leaked/ confirmed when they’re 20+ years out of date, then yes the probability this is true is significant.
zb3•16m ago
Cellebrite did the job using a vulnerability..
pluralmonad•16m ago
I always assume these public performances are merely performances and that no one hears about the actual dirty work.
verisimi•8m ago
And of course Apple is quite right not to miss the marketing opportunity, on behalf of the shareholders. While acquiescing to lawful demands of course.
roywiggins•15m ago
I don't remember Apple ever saying that it was impossible for them to do it, just that they didn't want to.

It was always kind of assumed that they could, by eg signing a malicious OS update without PIN code retry limits, so the FBI could brute force it at their leisure, or something similar.

mattnewton•11m ago
They said it was impossible for them to build a backdoor into iOS that would only be accessible to legal requests from law enforcement, which is true in the strict sense. So law enforcement bought a vulnerability exploit from a third party.
JumpCrisscross•12m ago
> remember the FBI attempting to compel Apple to decrypt a criminal's iPhone, only for Apple to refuse and claim that it wasn't possible

Apple refused “to write new software that would let the government bypass these devices' security and unlock” suspects’ phones [1].

> not sure exactly what happened after that

Cupertino got a lot of vitriol and limited support for its efforts.

[1] https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d...

akerl_•10m ago
There's a couple overlapping things here:

1. Apple can and does comply with subpoenas for user information that it has access to. This includes tons of data from your phone unless you're enrolled in Advanced Data Protection, because Apple stores your data encrypted at rest but retains the ability to decrypt it so that users who lose their device/credentials can still restore their data.

2. Apple has refused on multiple occasions, publicly, to take advantage of their position in the supply chain to insert malicious code that expands the data they have access to. This would be things like shipping an updated iOS that lets them fetch end-to-end encrypted data off of a suspect's device.

calvinmorrison•8m ago
Not to mention, while apple will publically deny it, there are government agents working undercover at every major tech firm. They may or may not know. They certainly exist.
estebank•16m ago
Every time I travel internationally I immediately get notifications for Android OS updates. I'm pretty sure they are for satisfying local regulations about the phone's behavior, including the topic at hand.
teaearlgraycold•15m ago
This has never happened on my iPhone
ortusdux•13m ago
They are just done in the background?
JumpCrisscross•11m ago
> They are just done in the background?

Are you hypothesising?

hirako2000•11m ago
Apple charges a storage tax so why not ship all that data by default
sigmoid10•13m ago
Interesting. I have never seen anything like that in many years of frequent travelling while using Android. Which countries did you see this in? And are you using stock Android or some vendor's version?
estebank•4m ago
Stock android. Traveling between US, Europe, LATAM and China.
kwanbix•8m ago
I am not saying there are no backdoors, but this never happened to me.

And I am an Android user since the first G1 phone.

pengaru•12m ago
Of course the likes of Apple and Google are complying with lawful orders from the governments of countries they do business in.

Businesses that don't generally cease operating in said country. LavaBit was a highly visible instance of a business shuttering itself instead of complying with such lawful orders.

sigmoid10•10m ago
That's also the ploy of basically every VPN provider out there. They say they don't store or give out data, but they still adhere to lawful requests. That necessarily includes requests from countries where they legally offer their service, even if their HQ is in some country with lax legal frameworks. It also means, if there is a legal way to coerce them into recording your data or handing it over, they will do so.

https://www.pcmag.com/news/nordvpn-actually-we-do-comply-wit...

SoftTalker•12m ago
Yes, it's safe to assume that companies follow the law in countries where they operate.
dgan•26m ago
Given the fact that most protests are organized on facebook groups, how does one keep him/herself aware of eventual protests to come without Facebook/instagram? I d gladly join for a cause i support
mhitza•24m ago
Any actual source for the claim?
ChrisArchitect•18m ago
[dupe] https://news.ycombinator.com/item?id=45999024
avh02•14m ago
Link warns I'm leaving grapheneos.social and then when you click the redirect tried to download some .bin file, wtf?
freehorse•5m ago
The url is just redirecting to https://goingdark.social/@watchfulcitizen/115605398411708768

Maybe consider replacing the redirecting url to the destination url? Not very good not being able to see the actual url linked imo.

crtasm•5m ago
the submitted URL makes HN show grapheneos.social as the domain. the actual URL is https://goingdark.social/@watchfulcitizen/115605398411708768