frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Privacy and control. My tech setup

https://toidiu.com/blog/2025-12-25-privacy-and-control/
89•todsacerdoti•3h ago

Comments

jumpingpants•2h ago
> Instead of "privacy" we really should be talking about "control".

Fantastic. This is what I have been shifting towards these past couple years. Hardly anyone likes to be controlled, right?

kgwxd•1h ago
I don't but it seems a LOT of people do. They even seem to prefer it.
sfRattan•23m ago
Control means ownership. Ownership means work.

Until they've been burned by unspoken realities of not owning some piece of their own digital lives, most people will continue to prefer being tenants, rather than owners.

Technology is only the most recent domain in which we can observe the human tendency to prefer the short term, incurious ease and license not to think that tenancy provides over the long term, ongoing work and thorough understanding that ownership demands. To become an owner you need some deeper intrinsically cultivated reason to desire it.

bstsb•2h ago
excellent article, you've inspired me to get off Gmail finally (Google's been sending me angry emails about hitting my storage limit for ages anyway).

side note, your link to Tuta is broken - think it's an internal link by accident

HelloUsername•1h ago
They also wrote "Messanging"
riskeet•2h ago
The average person won’t go through even 2% of the trouble. Your self inflicted lockdown is a niche within a niche. I respect it though!
dinkleberg•1h ago
Who cares what the average person will go through and do though? We’re each responsible for ourselves and how we choose to go about life, even if vastly differs from the general population.
ismailmaj•48m ago
Ironically, if your setup is too niche (e.g. browsing privacy configuration) you can be easily tracked, though no one will bother, but captcha's will certainly not miss you.
myvoiceismypass•44m ago
I mean this article is the spirit of hacker news to me.
afarah1•2h ago
FYI: NetGuard is an open source rootless firewall for vanilla Android which also allows per-app network access control, for those unable or unwilling to go with other OSs. Works by leveraging Android VPN to block instead of tunneling packets.
yjftsjthsd-h•1h ago
Doesn't running as a VPN mean it's incompatible with running an actual VPN at the same time? That's a pretty big caveat.
867-5309•37m ago
pretty sure by design only one vpn can be running at a time per OS
OGEnthusiast•1h ago
What's the story for maps and POI search on GrapheneOS? I'm assuming using Google Maps is a non-starter since that defeats the whole point of all these privacy protections in the first place.
mikeyouse•1h ago
Yeah I think most people use Organic Maps or Magic Earth (with the latter being closed and not as privacy-respecting as the former).
nextos•1h ago
OSMAnd and others can do offline maps and POI search if you want.

You could also run Google Maps web through Tor if needed. Tor is easy to use on Android.

miroljub•35m ago
Take a look at CoMaps. It's fully open source with open governance model.

It reached the level of being usable for general population and it improves rapidly due to gained momentum.

getpokedagain•34m ago
I use organic maps. I also have a seperate user profile that can not run in the background that has Google maps installed and use that sparingly. I've used it once in the last 6 months.
nyx•1h ago
Agree that "control" is a much better framing, since it doesn't suggest a need for secrecy and therefore embarrassing/unacceptable/untoward behavior that needs to stay behind drawn window blinds. I'm also fond of "agency" and "digital self-sovereignty" as alternatives.

But fine, I'll be the one to say it: Cloudflare isn't one of the good guys here and as an entity it shouldn't be trusted. It doesn't matter how pure their stated motives appear to be now, or how unmarred their track record is so far. It's a corporation that has control over an ever-increasing share of internet infrastructure, and is susceptible to the same risks as any other tech monopolist basket that we all decide to put our eggs in. Maybe more risky than the others, given how deep in the stack its influence is buried.

What happens when a government forces it to NXDOMAIN porn or put nuisance captchas in front of dissident blogs? Is there some reason people think this one is different?

ccakes•1h ago
> Cloudflare isn't one of the good guys here

Came here to say the same thing, post was interesting until I got to that point.

> nuisance captchas

Try using the internet outside of the western world and major hubs. Cloudflare make it so painful with captchas and browser integrity checks

arionmiles•1h ago
As much as I'd love to daily drive an OS like GrapheneOS, the risk of running into apps that use Google Integrity API thereby making it impossible to run those apps on Graphene is too much of an inconvenience.

I took a look at this curated list of bank apps[1] supported on Graphene OS and I'm glad that a large majority of them work on Graphene. However, just my luck that one of the banks I use on this list isn't supported.

In my country, the state is enforcing a lot of essential workflows to be digital-first (and in extreme cases digital-exclusive) and I dread to think needing these services at a critical moment and the choice of my OS making it impossible for me. This is more of a commentary on my government's choices but it's a reality for me.

In any case, I don't think it's practical to go cold turkey and switch to a privacy focused phone without testing waters first to see which of your of workflows break and then reason about the tradeoffs/workarounds.

I do admire folks who use GrapheneOS as a daily driver, I'd like to chat them up if I find them in the wild.

https://privsec.dev/posts/android/banking-applications-compa...

delichon•1h ago
I worried about that too, but jumped in and it hasn't been an issue at all in two years. Including three bank apps. And it's usually so easy to reset to vanilla Android if you need to that it shouldn't be your moat.
zackify•50m ago
Same. No issues on any apps for me.
dangus•18m ago
Also, there are almost always alternatives, like the mobile website.

Things like Apple/Google Wallet aren’t significantly superior to a contactless credit/debit card.

About the only bank thing I can think of that actually requires an app is check deposit, which is super rare.

bitwize•1h ago
I've seen a couple of apps try to use Play Integrity, get blocked by GrapheneOS, and keep on running. Maybe I'm being locked out of something, but it's not something I use anyway.

Note that I don't use banking or government apps. If I bank online it's via the web.

kgwxd•1h ago
Is the app the only way to access what you need? I've never once install the app of any bank I've ever used (10ish) and never found myself wishing I had.
ignoramous•1h ago
> As much as I'd love to daily drive an OS like GrapheneOS

The Play Integrity shenanigans is mostly on app developers.

That said, good thing GrapheneOS will launch its own Android phone: https://discuss.grapheneos.org/d/27687-new-manufacturer-theo... / https://piunikaweb.com/2025/10/13/grapheneos-ending-pixel-ex... / https://www.androidauthority.com/grapheneos-phone-wait-or-bu...

Provided GrapheneOS is cleared by Google to launch it as an "Android" device. Given the kind of changes GrapheneOS packs, it may or may not meet Android's mandatory CCD (compatibility) requirements.

closuregarden•1h ago
I run GrapheneOS as a daily driver and slowly removed all proprietary software from my device by looking for FOSS alternatives on F-Droid. Luckily, I'm able to access banking and government in a web browser on a dedicated profile.

I do have a second Android device with a stock ROM that I keep turned off in a drawer in case I ever need to use an app that requires Play Integrity in an emergency.

fylo•1h ago
I believe there is some support for the API although its not perfect.
iamnothere•50m ago
> In my country, the state is enforcing a lot of essential workflows to be digital-first (and in extreme cases digital-exclusive) and I dread to think needing these services at a crticial moment and the choice of my OS making it impossible for me. This is more of a commentary on my government's choices but it's a reality for me.

If my country did this I would get a cheap used device for this purpose and keep it powered off. I refuse to carry a pocket spy for the sake of convenience. I find that it’s rarely an issue.

Lapsa•1h ago
reminder - there's tech out there capable of reading your mind remotely and non-invasively
netule•1h ago
Care to elaborate?
navigate8310•1h ago
The only thorn in the opine is Cloudflare. Everything looks reasonable but CF. I get that DNS is free, it is OP's employer and registry being offered sans margin but it doesn't make up for the fact that CF is on its way to become the biggest gatekeeper and strangle the freenet if it wishes to do so.
OGEnthusiast•1h ago
Them being employed by Cloudflare means you should take the article with a grain of salt IMO.
65•1h ago
This reminds me of the old meme:

> Tech enthusiasts: My entire house is smart.

> Tech workers: The only piece of technology in my house is a printer and I keep a gun next to it so I can shoot it if it makes a noise I don't recognize.

barishnamazov•1h ago
One of my computer science professors from MIT has installed a smart home. I was over for a dinner and he told me a story about how he hit a third-party API rate limit on opening his garage door. Apparently, these things aren't self-hosted for the most part.
ignoramous•1h ago
> Domain: I switched to Cloudflare Registrar recently because they offered a lower price ... I don't think Cloudflare really cares to make money on domain registration.

Well, they don't today.

Speaking of "control", it is bad form to keep both the nameservers and registrar with the same company (think takedown requests / account lockout / etc).

50208•1h ago
The ad blocker is uBlock Origin ... the blog misstates it as uOrigin.
zikduruqe•1h ago
Finally. Someone in the wild that runs passwordstore.org

I thought there was only a couple of us.

barishnamazov•1h ago
> "I don't need to care about privacy because I have nothing to hide." is an argument that I have heard countless times. I found this argument difficult to counter in the past, yet deep-down I knew the reasoning was flawed.

This one is pretty easy to counter. Just ask the person to hand you their phone and go through their messages and photos. There's no one that wouldn't feel restless about it.

zikduruqe•51m ago
I usually ask if they poop with the door closed. We all know what you are doing in there, and we do the same thing. No need to hide.

Or, why do you get your mail in an envelope? I can see that it is your financial statements.

Why do you have curtains on your home? I can go to Zillow and see the interior of your house from years ago.

barishnamazov•41m ago
I think the better argument is (of course, a wrong one), "I trust that big companies won't share my stuff publicly".
ismailmaj•52m ago
My next low hanging fruit is certainly to make my LLM usage local, my queries contain much more sensitive information than what is mentioned by this post.

In the past I dropped off privacy when it was too inconvenient. For example I dropped protonmail because of bad search, left Linux desktop for Windows due to missing software, etc, I still haven't found the sweet spot for LLMs yet.

For the rest, I'm currently running the full macOS, iOS, safari, Apple passwords and I'm decently happy with this middle ground.

omnifischer•28m ago
For you

- WhatsApp is an exception

For others

- Google is an exception

newuser999999•14m ago
> I use Cloudflare's DNS because I trust them more than other companies; purely based on their business and how their incentives align

The author fails to mention that they are currently working at Cloudflare, I think that should be made clear otherwise I see it as misleading to the reader, like so many pointed it out, Cloudflare is just a corporation like any other corporation out there...

beached_whale•6m ago
At least of now, they do when around when they talk about DNS

I canceled my book deal

https://austinhenley.com/blog/canceledbookdeal.html
234•azhenley•3h ago•148 comments

All-optical synthesis chip for large-scale intelligent semantic vision

https://www.science.org/doi/10.1126/science.adv7434
21•QueensGambit•1h ago•1 comments

Privacy and control. My tech setup

https://toidiu.com/blog/2025-12-25-privacy-and-control/
91•todsacerdoti•3h ago•45 comments

Demystifying DVDs

https://hiddenpalace.org/News/One_Bad_Ass_Hedgehog_-_Shadow_the_Hedgehog#Demystifying_DVDs
52•boltzmann-brain•2d ago•4 comments

Scaffolding to Superhuman: How Curriculum Learning Solved 2048 and Tetris

https://kywch.github.io/blog/2025/12/curriculum-learning-2048-tetris/
99•a1k0n•6h ago•21 comments

The compiler is your best friend

https://blog.daniel-beskin.com/2025-12-22-the-compiler-is-your-best-friend-stop-lying-to-it
118•based2•6h ago•76 comments

Akin's Laws of Spacecraft Design [pdf] (2011)

https://www.ece.uvic.ca/~elec399/201409/Akin%27s%20Laws%20of%20Spacecraft%20Design.pdf
242•tosh•11h ago•66 comments

When square pixels aren't square

https://alexwlchan.net/2025/square-pixels/
89•PaulHoule•8h ago•41 comments

Microtonal Spiral Piano

https://shih1.github.io/spiral/
47•phoenix_ashes•5d ago•9 comments

My role as a founder-CTO: year 8

https://miguelcarranza.es/cto-year-8
43•ridruejo•5d ago•55 comments

The most famous transcendental numbers

https://sprott.physics.wisc.edu/pickover/trans.html
120•vismit2000•9h ago•65 comments

Show HN: Use Claude Code to Query 600 GB Indexes over Hacker News, ArXiv, etc.

https://exopriors.com/scry
274•Xyra•14h ago•101 comments

Stewart Cheifet, creator of The Computer Chronicles, has died

https://obits.goldsteinsfuneral.com/stewart-cheifet
120•spankibalt•4h ago•38 comments

Kitchen optimizations

https://www.natemeyvis.com/kitchen-optimizations/
47•Theaetetus•1w ago•90 comments

SigNoz (YC W21, open source observability platform) is hiring across roles

https://signoz.io/careers
1•pranay01•5h ago

The rise of industrial software

https://chrisloy.dev/post/2025/12/30/the-rise-of-industrial-software
194•chrisloy•13h ago•150 comments

Efficient method to capture carbon dioxide from the atmosphere

https://www.helsinki.fi/en/news/innovations/efficient-method-capture-carbon-dioxide-atmosphere-de...
232•lrasinen•8h ago•249 comments

Doom in Django: testing the limits of LiveView at 600.000 divs/segundo

https://en.andros.dev/blog/7b1b607b/doom-in-django-testing-the-limits-of-liveview-at-600000-divss...
154•andros•3d ago•47 comments

RunAgent Genie – Ultimate Prompt Engineering Game with Advanced Guardrails

https://genie.run-agent.ai/
3•sawradip•1h ago•1 comments

Back to the future: the story of Squeak, a practical Smalltalk written in itself [pdf] (1997)

http://www.vpri.org/pdf/tr1997001_backto.pdf
85•fanf2•1w ago•22 comments

How AI labs are solving the power problem

https://newsletter.semianalysis.com/p/how-ai-labs-are-solving-the-power
83•Symmetry•8h ago•160 comments

Reality crushed Ÿnsect startup that had raised over $600M for insect farming

https://techcrunch.com/2025/12/26/how-reality-crushed-ynsect-the-french-startup-that-had-raised-o...
17•fcpguru•4d ago•3 comments

Blog: PyPI in 2025: A Year in Review

https://blog.pypi.org/posts/2025-12-31-pypi-2025-in-review/
7•miketheman•3h ago•0 comments

Nvidia GB10's Memory Subsystem, from the CPU Side

https://chipsandcheese.com/p/inside-nvidia-gb10s-memory-subsystem
54•ingve•9h ago•4 comments

Who invented the transistor?

https://people.idsia.ch/~juergen/who-invented-the-transistor.html
54•todsacerdoti•9h ago•51 comments

Show HN: Frockly – A visual editor for understanding complex Excel formulas

9•jack_ruru•6d ago•3 comments

Meta created 'playbook' to fend off pressure to crack down on scammers

https://www.reuters.com/investigations/meta-created-playbook-fend-off-pressure-crack-down-scammer...
165•lossolo•3h ago•77 comments

France targets Australia-style social media ban for children next year

https://www.theguardian.com/world/2025/dec/31/france-plans-social-media-ban-for-under-15s-from-se...
147•belter•7h ago•188 comments

Tixl: Open-source realtime motion graphics

https://github.com/tixl3d/tixl
163•nateb2022•5d ago•25 comments

RoboCop – Breaking the Law. H0ffman Cracks RoboCop Arcade from DataEast

https://hoffman.home.blog/2025/12/26/robocop-breaking-the-law/
72•birdculture•4d ago•3 comments