Hacker Newsnew | past | comments | ask | show | jobs | submit | fareesh's commentslogin

Regular listeners know he knew exactly what he was doing i.e. the cancellation was priced in.

seems like brave works well and isn't getting correctly fingerprinted


doesn't cloudflare already offer this if you proxy?


Yes! It’s amazing. This is an option for non-technical users or anyone who can’t or won’t move their domain to Cloudflare’s DNS.


liveview feels a bit too magical

client disconnects, state desyncs, then reconnects, then liveview figures out via crdt and other things how to accurately diff the state

feels like i have to trust it too much - i'd have a lot more confidence if people were vocal about how they are running it at scale, battle-tested etc. etc.

shopify is straight up yolo running rails edge, which is a crazy endorsement


I watched a few demos and it is clearly magic and I was very impressed. Though I can't picture how a more standard run off the mill web app would be built with it.


Demos on youtube?


Yes.


from what i understand:

- if you compile from source and deploy via adb nothing changes

- if you use a closed source binary, the identity of the owner becomes mandatory

so the issue is anonymously published closed source software?


> if you compile from source and deploy via adb nothing changes

That's not how I understand it. Do you have a source?

"Starting in September 2026, Android will require all apps to be registered by verified developers in order to be installed on certified Android devices."

https://developer.android.com/developer-verification


https://android-developers.googleblog.com/2025/09/lets-talk-...

> Android Studio is unaffected because deployments performed with adb, which Android Studio uses behind the scenes to push builds to devices, is unaffected.


Thanks.

So, simply sending a download link for an APK to a friend is not enough anymore - I now have to teach them how to install and use adb.

EDIT

> we are also introducing a free developer account type that will allow teachers, students, and hobbyists to distribute apps to a limited number of devices without needing to provide a government ID.

Depending on how they implement that, this would at least partially improve the situation. Sounds like no ID is required, but I assume the whole ordeal with registering each app is still mandatory.


from what i understand the apk route still works fine, you just have to be willing to attach your identity to it via their verification + signing process


> anonymously published closed source software

Yes, like the software for my ebike conversion kit for which I only have the APK. I have vetted the software and would like to install it. If Google blocks that, then fuck them.


> - if you use a closed source binary, the identity of the owner becomes mandatory

So I can't just build an apk and distribute to others? What's the process for providing identity?


Paying Google $25 for the privilege of giving them a picture of your face and license to save in their cloud.


I've read both sides of the story and it does not make sense why he would change the root password and not communicate this with RubyCentral or make any attempt to contact them about the change. That in itself suggests malice.


This, cutting through the noise, this is it.


they were funded by a company run by a guy who read DHH's blog and cut funding unless they excommunicated him


Can't seem to connect to qwen.ai with DNSSEC enabled

> resolvectl query qwen.ai > qwen.ai: resolve call failed: DNSSEC validation failed: no-signature

And

https://dnsviz.net/d/qwen.ai/dnssec/ shows

aliyunga0019.com/DNSKEY: No response was received from the server over UDP (tried 4 times). See RFC 1035, Sec. 4.2. (8.129.152.246, UDP_-_EDNS0_512_D_KN)


i use node/npm moderately

is there a runnable command to determine if the package list has a compromised version of anything?


the Android change doesn't impact your ability to plug in your own device and run your own code or someone else's code

the change impacts closed source software distributed without verification which is by definition unknown so the "want" is not possible - i.e. you can't know if you want to run it.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: