frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Mistral OCR 3

https://mistral.ai/news/mistral-ocr-3
118•pember•1d ago•12 comments

TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy

https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Priva...
137•sibellavia•2h ago•32 comments

Garage – An S3 object store so reliable you can run it outside datacenters

https://garagehq.deuxfleurs.fr/
319•ibobev•5h ago•68 comments

GotaTun -- Mullvad's WireGuard Implementation in Rust

https://mullvad.net/en/blog/announcing-gotatun-the-future-of-wireguard-at-mullvad-vpn
473•km•9h ago•99 comments

Amazon will allow ePub and PDF downloads for DRM-free eBooks

https://www.kdpcommunity.com/s/article/New-eBook-Download-Options-for-Readers-Coming-in-2026?lang...
449•captn3m0•10h ago•241 comments

Performance Hints – Jeff Dean and Sanjay Ghemawat

https://abseil.io/fast/hints.html
34•alphabetting•2h ago•4 comments

Show HN: Stickerbox, a kid-safe, AI-powered voice to sticker printer

https://stickerbox.com/
15•spydertennis•1h ago•13 comments

8-bit Boléro

https://linusakesson.net/music/bolero/index.php
31•Aissen•9h ago•5 comments

Brown/MIT shooting suspect found dead, officials say

https://www.washingtonpost.com/nation/2025/12/18/brown-university-shooting-person-of-interest/
22•anigbrowl•17h ago•13 comments

Believe the Checkbook

https://robertgreiner.com/believe-the-checkbook/
77•rg81•5h ago•32 comments

The FreeBSD Foundation's Laptop Support and Usability Project

https://github.com/FreeBSDFoundation/proj-laptop
104•mikece•6h ago•40 comments

Reverse Engineering US Airline's PNR System and Accessing All Reservations

https://alexschapiro.com/security/vulnerability/2025/11/20/avelo-airline-reservation-api-vulnerab...
60•bearsyankees•2h ago•25 comments

Show HN: TinyPDF – 3kb pdf library (70x smaller than jsPDF)

https://github.com/Lulzx/tinypdf
32•lulzx•1d ago•4 comments

Graphite Is Joining Cursor

https://cursor.com/blog/graphite
103•fosterfriends•5h ago•134 comments

Rust's Block Pattern

https://notgull.net/block-pattern/
38•zdw•16h ago•11 comments

Detailed balance in large language model-driven agents

https://arxiv.org/abs/2512.10047
8•Anon84•3d ago•0 comments

The pitfalls of partitioning Postgres yourself

https://hatchet.run/blog/postgres-partitioning
13•abelanger•3d ago•0 comments

Ask HN: How are you LLM-coding in an established code base?

12•adam_gyroscope•3d ago•7 comments

Lite^3, a JSON-compatible zero-copy serialization format

https://github.com/fastserial/lite3
91•cryptonector•6d ago•27 comments

You can now play Grand Theft Auto Vice City in the browser

https://dos.zone/grand-theft-auto-vice-city/
165•Alifatisk•1h ago•43 comments

NOAA deploys new generation of AI-driven global weather models

https://www.noaa.gov/news-release/noaa-deploys-new-generation-of-ai-driven-global-weather-models
18•hnburnsy•1d ago•2 comments

Show HN: I Made Loom for Mobile

https://demoscope.app
41•admtal•3h ago•27 comments

Wall Street Ruined the Roomba and Then Blamed Lina Khan

https://www.thebignewsletter.com/p/how-wall-street-ruined-the-roomba
99•connor11528•2h ago•61 comments

Building a Transparent Keyserver

https://words.filippo.io/keyserver-tlog/
44•noident•6h ago•16 comments

Show HN: MCPShark Viewer (VS Code/Cursor extension)- view MCP traffic in-editor

19•mywork-dev•2d ago•0 comments

1.5 TB of VRAM on Mac Studio – RDMA over Thunderbolt 5

https://www.jeffgeerling.com/blog/2025/15-tb-vram-on-mac-studio-rdma-over-thunderbolt-5
567•rbanffy•22h ago•209 comments

Ask HN: Who here is not working on web apps/server code?

26•ex-aws-dude•1d ago•19 comments

Prompt caching for cheaper LLM tokens

https://ngrok.com/blog/prompt-caching/
244•samwho•3d ago•59 comments

History LLMs: Models trained exclusively on pre-1913 texts

https://github.com/DGoettlich/history-llms
712•iamwil•22h ago•350 comments

Show HN: Stepped Actions – distributed workflow orchestration for Rails

https://github.com/envirobly/stepped
72•klevo•5d ago•10 comments
Open in hackernews

Is Proton leaving Switzerland?

https://www.techradar.com/vpn/vpn-privacy-security/is-proton-leaving-switzerland-legal-uncertainty-of-proposed-surveillance-laws-is-pushing-them-to-make-several-changes
119•_tk_•1h ago

Comments

TheCleric•1h ago
Rough English translation:

https://www-nzz-ch.translate.goog/technologie/proton-ceo-and...

mikelitoris•1h ago
Why are all European countries interested in surveillance all of a sudden in the last 3-4 years? WW3 preparations, just in case? They realized they are harboring a lot of foreign agents? Good ol’ power grab under false pretenses (ala patriot act)? Or all of the above? I hoped Switzerland would never do this, being the “perfect” country they think they are and are so proud(smug?) of being; alas here we are.
Lapsa•1h ago
I reckon gang stalking and politicians receiving death threats got something to do with it.
mschuster91•1h ago
> Why are all European countries interested in surveillance all of a sudden in the last 3-4 years?

That has been going on for decades, actually. What has changed is that people are looking at it.

seydor•1h ago
No it has not. europeans have been pro-privacy and very wary of spying until ~2015? Trump 1 was a point when privacy stopped being a priority
roelschroeven•35m ago
Lots of politicians haven been pro-spying for quite a long time. Lots of people are quite indifferent about it.

The massive shift of communications to digital channels has put mountains of data right there for the grabs, which is extremely attractive for people who want access to all that data.

mschuster91•12m ago
> No it has not. europeans have been pro-privacy and very wary of spying until ~2015?

German here, look how fucking often our politicians tried to push stuff like the Vorratsdatenspeicherung.

Diti•1h ago
My headcannon is that it’s a money thing, and that there must be intense lobbying by the internet surveillance manufacturers (like Thales).
hypeatei•1h ago
I'm not European, but it's probably a mix of intelligence services advocating for it and government regulation as a solution to everything. If you believe that every problem can be solved by a regulator, then the logical endgame is the regulator needing a window into every aspect of your life so they can make sure you're not violating regulations.

The Patriot Act isn't on equal footing as these Chat Control-esque laws we're seeing. The US government spies on people, sure, but they're not mandating encryption backdoors or trying to outlaw VPNs.

gastonmorixe•1h ago
you sure? https://www.apple.com/customer-letter/ (2016)
hypeatei•58m ago
Fair, the US government is not a saint in this respect. I will say that a three letter agency getting upset and requesting a backdoor does seem different than a legislative (executive?) commission proposing laws to backdoor communications.

From a recent EFF post[0], it appears they've backed off the scanning and encryption demands so that's good, I guess. Hopefully that sticks and they don't propose something similar in the future.

0: https://www.eff.org/deeplinks/2025/12/after-years-controvers...

timschmidt•55m ago
In the US, the laws permitting mass surveillance are, at least in part, secret: https://en.wikipedia.org/wiki/United_States_Foreign_Intellig...
drawfloat•1h ago
Snowden revealed PRISM meant the US government just had straight access to servers of major providers, so they didn’t need any of this. I would be shocked if the NSA hadn’t stepped up its data collection efforts in the last decade in secret.
nabla9•28m ago
> Snowden revealed PRISM meant the US government just had straight access

People read this and think that US government had unhindered access to all data in major providers.

According to Edward Snowden, PRISM allowed the government to compel internet companies to turn over any data that matched specific court-approved search terms. such as email addresses, all under Section 702 of the FISA Amendments Act of 2008.

At least some parts of it were likely unconstitutional as it could target U.S. persons, but it was not free for all as "straight access" indicates. It was straight access after FISA court approval.

NSA runs much more invasive MUSCULAR program in the UK without FISA or other type warrant.

timschmidt•1h ago
> but they're not mandating encryption backdoors

https://en.wikipedia.org/wiki/Dual_EC_DRBG#Weakness:_a_poten...

hypeatei•54m ago
Yes, that was an insidious move from the NSA but nowhere near a mandate. No one uses it because of that weakness and they're allowed to do that.
timschmidt•47m ago
My understanding is that https://en.wikipedia.org/wiki/FIPS_140-2 required Dual-EC DRBG to be implemented in any crypto system used by government, including such protocols as SSL/TLS, these algorithms are typically also adopted by industry, and NSA went further by paying RSA and perhaps others to make it the default in their security products.

This came after previous attempts such as https://en.wikipedia.org/wiki/Clipper_chip

sheepscreek•38m ago
Surveillance isn’t bad per se. It’s when everything is so hush hush (which surveillance is by definition) and you lose sight of who has access to what, we humans start to get silly ideas. We’re imperfect and corruptible. Only in this case, it’s so hard to catch any illegal corrupt activities taking place.

So in my opinion, it’s a band-aid to more deep seated problems that more often than not creates new problems. I don’t know enough about how EU intends to do. I guess even eventual mandatory declassification (like a reasonable 5 yrs delay) would deter bad actors/politicians that aren’t well meaning from misusing it.

impossiblefork•24m ago
Why do you think surveillance isn't bad per se?

It's certainly not compatible with privacy.

sunshine-o•18m ago
Yes I believe what was revealed about 10-15 years ago about the "mass surveillance" conducted by the US and what is happening in Europe are totally different things.

The US conducts mass surveillance at a planetary scale, as an "Empire". It was implemented secretly by its 3 letter agencies with the help of various actors.

Europe is doing it in the open with laws and regulations and only targets the people in its territories. One simple reason they would have to do this way is they simply have no equivalent in capabilities to the NSA, CIA, etc. or big tech.

zem•1h ago
I feel like over time governments and government agencies naturally attract and retain people inclined towards overreach, especially if they live in a bubble where there are always good and valid reasons for said overreach. you need a branch of the government explicitly combatting this tendency for it not to happen.
seydor•1h ago
Certain countries like Greece use surveillance against political opponents. In this case, the PM himself oversaw the spying of the current opposition leader, journalists and others.

There's also lobbying from "security" companies who are pressuring governments to purchase and install their systems, but they require realtime spying of everyone.

tclover•1h ago
wake up, EU is turning into the dictatorship
snickerbockers•57m ago
Its not just Europe. america is too, it just seems less egregious because the American people are used to seeing the government contract out constitutional violations to private corporations which have incestuous links to the government.

With recent AI advancements, an orwellian hell is all but inevitable. If you (by which i mean the powers that be not you specifically) don't build it then some competing faction will and they'll be in control of it. Its the classic prisoner dilemma.

retinaros•47m ago
most of the laws voted against terrorism in europe were aimed at removing freedom and track people while they freely imported millions of people from the countries that they deemed dangerous without any background check, without even helping those people from totally different cultures to integrate within european society
jajuuka•38m ago
I think it might be opportunism. Many western societies have struggled with post covid reintegration and the amount of social media kids are involved with. Not to mention rising nationalism and far right orgs. So it makes a solid catalyst to launch these mass surveillance programs in the name of protecting children and natives.

Governments are never perfect. They are always in a precarious position where they can turn quite harsh quite quickly. I can't speak to each EU nations politics but things have been turning towards the right for a while and they are finally in positions where they can make these demands and get them passed.

derelicta•38m ago
European States are vassals of America. They probably just reminded us poor helvetes that our neutrality and sovereignty was on paper only, and that if we opposed them, we would end up like Venezuela or Lybia.
sph•36m ago
The State must grow, and this is the lowest hanging fruit. What are they gonna do, try to fix the economy? Housing? Youth prospects?

It’s a win-win for the politicians and the pensioners that vote them, that believe any nonsense about children safety.

sunshine-o•31m ago
> Why are all European countries interested in surveillance all of a sudden in the last 3-4 years?

Something I realized recently is how low the approval ratings of European leaders are:

- Macron and Starmer are about 18%

- Mertz is 25% (only 6 months in)

- Von Leyen is 23%

This is ridiculous.

We often perceive Trump as highly unpopular but he is cruising between 40 and 50%, that's double.

So those leaders, according to the numbers, are becoming illegitimate or the system is broken. So we are just waiting for a spark to put the house on fire.

Mass surveillance within your territory is really a weapon against your own population, it is not to catch spies (they are trained to evade them).

impossiblefork•16m ago
I've observed that one path to becoming ridiculously authoritarian is to be unpopular and about to be thrown out of office, so I think you've the nail on the head with this remark.

I didn't know the approval ratings were this low.

ActorNightly•28m ago
>Why are all European countries interested in surveillance all of a sudden in the last 3-4 years?

Because they look at what happened US, at the rise of popularity of fascism throughout the world (which is mostly perpetuated by key media players under the mask of being "anti-woke"), and basically decide that the people can no longer be trusted.

And they are fully correct.

Ive said this before on here, but the whole idea of privacy from surveillance is not applicable anymore in todays world.

The standard line of arguing is that people should be able to speak the truth free from government knowing about it and trying to silence them. The problem with this

* Most of the "truth" that these people refer to has been literally false propaganda, or ability to say slurs on social media.

* Despite that fact, not a single public media person speaking these lies has been silenced in any way by the government, despite things like patriot act existing in US or equivalent things in EU. The only time people have been silenced in places like UK is when posting extremely out of pocket stuff.

Furthermore people also say that you don't want to give the government the power to do this now because a government that you may not like will want to do this. Well, to no one surprise, the people with this libertarian mindset (and the so called "centrists") overwhelmingly vote right wing, and consequently, right wing runs on a platform of freedom, but when those people get in power, they not only actively tries to silence actual truth and free speech, but also they just don't give a fuck about the law and do what they want anyways.

So as unfortunate as it is, its a much better outcome for the current state of administration in EU to take a more invasive role in policing the populace, because economic growth and stability over long term is worth way more than some idealistic approach based on above. Historically this has shown to be true over and over again, while the latter has shown to result in economic decline. So its wortwhile to sacrifice some personal rights in return for a better future - we already do this to a large extent so this is nothing new.

In terms of applicability to the regular person, please understand that the privacy ship for you has already long sailed. You already can be tracked and analyzed in extreme detail, by really any person or company that is willing to buy advertising data and do correlation. There are companies that literally do this and contract out to the government. Also, you aren't that important enough to care about.

layer8•11m ago
It’s “all of a sudden” because E2EE messaging has become mainstream, and the telephone and email tapping abilities of old aren’t effective anymore.
daft_pink•1h ago
It’s too bad you can’t just choose your location with services like this.

I want very secure email that’s US located because some of the contents are US regulated, I’m not worried about the US hacking me and I doubt if they really wanted my information I could do anytyhing to keep it from them.

I’m sure there are people that would love Switzerland.

To each their own.

edent•58m ago
BitWarden offers users a choice of US or EU hosting.
Y_Y•1h ago
... for Germany and Norway
julenx•1h ago
> Wir haben angefangen, unsere gesamte Infrastruktur zu kopieren. Unsere Daten befinden sich nun auf Servern sowohl in der Schweiz wie auch in Deutschland und Norwegen. Wenn nötig, können wir die Systeme in der Schweiz innerhalb von kurzer Zeit herunterfahren. Ich hoffte immer, solche Schritte nie einleiten zu müssen. Aber das Umfeld in der Schweiz ist für uns zurzeit zu unsicher. Wir hatten keine andere Wahl, als unseren Wegzug zu planen.

They started to copy the infrastructure, and the data is currently in Switzerland, Germany, and Norway. They can technically shut down the systems in Switzerland on short time. He (Andy Yen, CEO) always hoped they'd never need to take such steps, but the environment in Switzerland is too insecure for them at the moment. So they had no other choice but to plan their way out.

starquake•43m ago
So the title is incorrect? They haven't left Switzerland yet?
dang•38m ago
We've changed the submitted URL from https://www.nzz.ch/technologie/proton-ceo-andy-yen-wer-geset... to a third-party article that seems to have more background.

(Also, HN is an English-language site, so articles here should be in English - https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que... - even though we have deep respect for the German language and other languages)

layer8•22m ago
The original article is still very much worth reading, using the translation tools that are nowadays built into web browsers.
garbawarb•1h ago
Are Germany and Norway better?
sfc32•1h ago
Are they planning to payback all the Geneva cantonal and CERN money they took?

I seem to recall that one of their original selling points was that they were based in Switzerland which does not have data sharing agreements with the US under the Patriot act, unlike the EU.

Cynical view - they prefer to IPO in another market than Swiss, the real reason for the move.

alephnerd•1h ago
> they prefer to IPO on another market than Swiss

You can publicly list in exchanges despite not being domiciled in the exchange's host country.

For example, Chinese and EU domiciled companies IPOing on the London Stock Exchange (LSE) due to a mix of easier access to liquidity and simplified rules and regulations.

layer8•19m ago
They are a non-profit, and they could actually get more subsidies if they moved their headquarters to the EU.
hypeatei•1h ago
I used Proton at one point, but I realized that email is inherently insecure and any cloud storage can be E2EE if you encrypt the files yourself before uploading (which you should)

It's nice to see that they're giving the finger to the Swiss government but ultimately it doesn't matter as many jurisdictions are mandating the same things.

fsflover•1h ago
> any cloud storage can be E2EE if you encrypt the files yourself before uploading (which you should)

Except the metadata I guess.

mmooss•1h ago
Also, the people with whom you email likely won't encrypt things on their end.
fsflover•53m ago
Decentralized E2E instant messaging is the solution.
rolph•59m ago
client encryption is about keeping the MITM out of your fibre.

if you are scared of spooks using metadata, that can be managed with some warwalking around cafes/campus, a wifi extender, a burner phone tether, and action in discretion.

at that point WTF your doing had better be a noble cause, not a malediction.

justsomehnguy•55m ago
> but I realized that email is inherently insecure

I've always seen Proton benefits as a moot point because it's not E2E to the other side. You can encrypt all you want but as soon as you actually communicate with anyone (this is the email after all) you are now give all your messages to a third party often times without any encryption at all.

zahlman•44m ago
The recipient of the email is definitionally not "third party".
smeej•38m ago
The recipient's email service provider seems to be the "third party" at issue here.
smeej•37m ago
I do at least appreciate that emails from one Proton account to another Proton account are secured by default. It has made it much easier for me on the few occasions I've needed to send someone something securely but haven't wanted to walk them through setting up PGP. "Create a free Proton account" is a much easier process.
iagooar•1h ago
They leave for Germany, of all places. Germany is one of the European states with most arrests for posting entries on social media. I guess they will pack their stuff and move on in 1-2 years from now.
why-o-why•1h ago
What were those posts about on social media? Care to share?
Longhanks•1h ago
E.g. https://taz.de/Hausdurchsuchung-wegen-eines-Tweets/!5799732/
input_sh•31m ago
There is no arrest in that story?
1123581321•1h ago
It was easy to find news stories. Here are a couple from neutral sources.

https://apnews.com/article/germany-women-misogyny-raids-inte...

https://www.yahoo.com/news/german-police-launch-nationwide-o...

It seems reasonable to be concerned about a government that wants the power to reveal Internet users, but I couldn’t say on what basis Proton expects legal protection to continue after the move.

dbdr•47m ago
Neither of your links mention arrests, one specifically says "None of the suspects were detained". They don't seem to back up the original claim about Germany arresting the most people based on social media posts.
ActorNightly•15m ago
Germany has a big alt-rising in the form of AFD, and consequently, they do track social media heavily. There is also a non-insignificant fundamentalist Muslim population.

For things like troll posts or just general hate speech, most of the time the police visit your house and ask you questions and give you a stern warning. And remember, police in EU isn't like police in US - when you get visited by police in EU, you aren't afraid that you are going to get shot up or thrown on the ground and tazed if you did nothing wrong. In extreme cases where you are calling for things like beheading, yea they def arrest for that.

Source: close friend that lives in Germanty works for a company that does business with German government. I don't know first hand but he is pretty aware of the policics in EU and I have no reason to believe he would be exaggerating.

On anther note, Germany policing is quite progressive actually. For example, if you run, you don't get a charge for evading/eluding - its actually legal to run from police because "desire for freedom is a human right".

ActorNightly•23m ago
Germany has AFD which is even more Nazi-like than Trump to certain extent.

They should be policing their social media heavily.

dang•36m ago
Related. Others?

Swiss government look to undercut privacy tech stoking fear of mass surveillance - https://news.ycombinator.com/item?id=45223231 - Sept 2025 (3 comments)

Proton begins moving hardware out of Switzerland due to proposed legislation - https://news.ycombinator.com/item?id=44915796 - Aug 2025 (5 comments)

Proton Partially Exits Switzerland - https://news.ycombinator.com/item?id=44669496 - July 2025 (2 comments)

Lumo: Privacy-first AI assistant - https://news.ycombinator.com/item?id=44657556 - July 2025 (123 comments)

Proton threatens to quit Switzerland over new surveillance law - https://news.ycombinator.com/item?id=44014808 - May 2025 (228 comments)

Tell HN: Swiss surveillance monitoring nearly everything – impact on Proton etc? - https://news.ycombinator.com/item?id=38937352 - Jan 2024 (8 comments)

rsync•27m ago
Their CEO states:

"(proton fraud detectors) are looking for certain patterns in use. And they collect clues on the dark web. For example, if you find Proton mail addresses in criminal Internet forums, the accounts behind them will be blocked."[1]

I've never participated on a "dark web" or .onion forum but I could imagine doing so for a variety of reasons ... are there not very interesting discussions occurring there ?

I would be classified as a criminal for being part of that discussion ?

Should I be retroactively classified as such for my discussions on cypherpunks in the nineties ?

[1] https://www.nzz.ch/technologie/proton-ceo-andy-yen-wer-geset...

aquariusDue•18m ago
I always believed stuff like Proton and Tutanota to pander to individuals who cared about privacy but who fell ultimately to their shiny marketing campaigns.

Anyway most people would be better served when disavowing any notion that email is secure or that VPN services operated by companies (as opposed to ones you control) are good for anything other than bypassing region locks.