frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

GrapheneOS fixes Android VPN leak Google refused to patch

https://cyberinsider.com/grapheneos-fixes-android-vpn-leak-google-refused-to-patch/
90•Georgelemental•2h ago

Comments

unethical_ban•1h ago
I know there are bad business reasons, but how can someone classify a VPN leak as "not a security issue" and keep their pride?
boje•1h ago
That assumes there is pride they have to bother to keep.
k4rli•1h ago
Interestingly GrapheneOS being so good brings more money to Google as only Pixel phones are supported.
mcraiha•59m ago
There should be at least one Motorola phone before end of the year that has GrapheneOS support.
oceansky•53m ago
So far. Other companies surely will make their devices compatible if the market share increases for it
snapplebobapple•41m ago
First motorola grapheneos phone i am buying to get fully off the google pain train. Grapheneos tides me over until a real linux smart phone shows up or i die of old age. Now if home assistant could get thread network join*ng working without an android phone with a google account i could ve fully ris of those eh holes.
surgical_fire•15m ago
I am patiently waiting for that one. I have been willing to move to GrapheneOS for a while, but I don't feel like buying Google hardware.
iamtedd•9m ago
> Now if home assistant could get thread network join*ng working without an android phone with a google account

There is already a way to do this. It's fiddly, but not by much. Once set up it's a much better experience, though.

https://www.matteralpha.com/how-to/how-to-use-home-assistant...

winter_blue•19m ago
Sadly, Verizon Pixel phones, even after carrier unlocking, seem to be forever blocked from using GrapheneOS.
zb3•3m ago
I don't see a problem with supporting their legitimate hardware or cloud business models. But of course I see a problem supporting their illegitimate adware and spyware business models.
OutOfHere•1h ago
It wasn't patched by Google because it's a backdoor. For various reasons, modern mainline Android is substantially hazardous to use.
nottorp•59m ago
> Because system_server operates with elevated networking privileges and is exempt from VPN routing restrictions

So a VPN isn't a VPN on Android? Regardless of this bug. Do other locked down operating systems act the same?

Paradigm2020•23m ago
Ios does the same, only way around it is if you have an ?enterprise? licence (250+ devices)

Mullvad and others reported on that one ages ago

unethical_ban•23m ago
MacOS has had instances where their own apps could bypass always-on VPN. I'm not sure if there have been exploits or gaps where traffic could go to arbitrary destinations directly.
mmooss•9m ago
How hard would it be to fix the system_server (and any other) bypass?
zb3•6m ago
Stock Android is spyware and adware, back in the day we called such software malicious and removed it, now it's the default.

Internet Archive Switzerland

https://internetarchive.ch/
293•hggh•5h ago•38 comments

PipeDream on the Acorn Archimedes

https://stonetools.ghost.io/pipedream-archimedes/
37•msephton•2h ago•12 comments

Google broke reCAPTCHA for de-googled Android users

https://reclaimthenet.org/google-broke-recaptcha-for-de-googled-android-users
1316•anonymousiam•22h ago•483 comments

LLMs Corrupt Your Documents When You Delegate

https://arxiv.org/abs/2604.15597
177•rbanffy•8h ago•58 comments

Using Claude Code: The unreasonable effectiveness of HTML

https://twitter.com/trq212/status/2052809885763747935
324•pretext•12h ago•202 comments

The Intolerable Hypocrisy of Cyberlibertarianism

https://matduggan.com/the-intolerable-hypocrisy-of-cyberlibertarianism/
69•ColinWright•3h ago•26 comments

How LEDs are made (2014)

https://learn.sparkfun.com/tutorials/how-leds-are-made/all
76•smig0•2d ago•8 comments

Removing fsync from our local storage engine

https://fractalbits.com/blog/remove-fsync/
42•zzsheng•2d ago•31 comments

A recent experience with ChatGPT 5.5 Pro

https://gowers.wordpress.com/2026/05/08/a-recent-experience-with-chatgpt-5-5-pro/
504•_alternator_•14h ago•364 comments

Mythical Man Month

https://martinfowler.com/bliki/MythicalManMonth.html
275•ingve•2d ago•167 comments

America's carpet capital: an empire and its toxic legacy

https://apnews.com/projects/pfas-forever-stained/
121•rawgabbit•3d ago•64 comments

OpenAI’s WebRTC problem

https://moq.dev/blog/webrtc-is-the-problem/
412•atgctg•1d ago•124 comments

Introduction to Beaver Triples

https://stoffelmpc.com/stoffel-blog/beaver-triples-tuples
3•badcryptobitch•1h ago•0 comments

Making Julia as Fast as C++ (2019)

https://flow.byu.edu/posts/julia-c++
60•d_tr•2d ago•42 comments

GrapheneOS fixes Android VPN leak Google refused to patch

https://cyberinsider.com/grapheneos-fixes-android-vpn-leak-google-refused-to-patch/
90•Georgelemental•2h ago•17 comments

Building the TD4 4-Bit CPU

https://jayakody2000lk.blogspot.com/2026/05/building-td4-4-bit-cpu.html
29•zdw•2d ago•10 comments

David Attenborough's 100th Birthday

https://www.bbc.com/news/articles/cp3pww9g0p5o
772•defrost•1d ago•150 comments

Reviving the IBM Selectric Composer Fonts (2023)

https://www.kutilek.de/selectric/
40•tangus•2d ago•4 comments

What causes lightning? The answer keeps getting more interesting

https://www.quantamagazine.org/what-causes-lightning-the-answer-keeps-getting-more-interesting-20...
138•Tomte•3d ago•33 comments

Killswitch: Per-function short-circuit mitigation primitive

https://lwn.net/ml/all/20260507070547.2268452-1-sashal@kernel.org/
59•signa11•7h ago•12 comments

Forking the Web

https://dillo-browser.org/lab/web-fork/
81•wrxd•5h ago•72 comments

Wi is Fi: Understanding Wi-Fi 4/5/6/6E/7/8 (802.11 n/AC/ax/be/bn)

https://www.wiisfi.com/
315•homebrewer•3d ago•88 comments

Read Programming as Theory Building

https://codeutopia.net/blog/2026/05/09/you-should-read-programming-as-theory-building/
58•birdculture•3h ago•9 comments

AI is breaking two vulnerability cultures

https://www.jefftk.com/p/ai-is-breaking-two-vulnerability-cultures
384•speckx•23h ago•152 comments

Cartoon Network Flash Games

https://www.webdesignmuseum.org/flash-game-exhibitions/cartoon-network-flash-games
389•willmeyers•1d ago•118 comments

Show HN: Free tool to mark points and polygon regions

https://tack.pics
12•magikMaker•2d ago•2 comments

An Introduction to Meshtastic

https://meshtastic.org/docs/introduction/
479•ColinWright•1d ago•175 comments

The React2Shell Story

https://lachlan.nz/blog/the-react2shell-story/
194•mufeedvh•1d ago•39 comments

AWS North Virginia data center outage – resolved

https://www.cnbc.com/2026/05/08/aws-outage-data-center-fanduel-coinbase.html
246•christhecaribou•1d ago•177 comments

Show HN: Mochi.js: bun-native high-fidelity browser automation library

https://mochijs.com/
6•ccheshirecat•3h ago•1 comments