Hacker News
1Graphene OS: a security-enhanced Android build
- GrapheneOS is a privacy-focused Android rebuild that aims to improve security and user privacy on Google Pixel devices. It removes unnecessary code, adds security features, and gives users more control over their device settings, while still allowing compatibility with Google Play Store apps through a sandboxed implementation.
User experience and features
Users praise GrapheneOS's security features, granular controls, and privacy protections. Discussion covers app compatibility, banking apps, NFC payments, and alternative app stores like F-Droid and Aurora Store.Device support limitations
Debate around GrapheneOS only supporting Pixel phones. Team explains strict security requirements, working with new OEM for 2026/2027. Some users want broader device support while others defend focus on security.Security and privacy tradeoffs
Discussion of reliance on Google Pixel hardware despite privacy focus. Covers hardware security requirements, baseband isolation, and whether hardware-level backdoors are possible. Team emphasizes security research and lack of backdoor evidence.
2There is no memory safety without thread safety
- The article discusses the concept of memory safety in programming languages, arguing that the traditional distinction between memory safety and thread safety is not useful. The author suggests that the real focus should be on preventing Undefined Behavior (UB) in programs, using Go language examples to demonstrate how concurrent programming can lead to memory safety issues.
Memory safety definition
Debate over whether Go's memory safety issues are theoretical vs practical, with some arguing memory safety is binary while others view it as a spectrum based on real-world exploit risks.Go's practical safety
Discussion of whether Go's data race issues matter in practice, with many noting they rarely encounter segfaults in production and that Go is still much safer than C/C++ for most use cases.Thread safety approaches
Comparison of different concurrency models like message passing vs shared memory, and how language design choices around thread safety impact developer experience and bug prevention.
3Scientists may have found a way to eliminate chromosome linked to Down syndrome
- This research demonstrates a method to remove extra chromosomes from cells with Down syndrome using CRISPR-Cas9 technology. The study successfully developed an allele-specific approach to target and eliminate specific chromosomes from human cells, showing potential for treating trisomy 21 and improving cellular function.
Ethics of eliminating Down syndrome
Debate around whether eliminating Down syndrome is ethical, with arguments both for prevention as medical progress and concerns about eugenics. Some view it as positive medical advancement while others worry about societal implications.Personal experiences with Down syndrome
Stories about interactions with Down syndrome individuals, highlighting their unique perspectives and joy, while also acknowledging challenges faced by families caring for those with the condition.Technical implications
Discussion of how the research works, its applications in IVF, and limitations of current prenatal testing methods. Focus on whether it could help existing cases or only future pregnancies.
4Visa and Mastercard: The global payment duopoly (2024)
- The global payment processing market is dominated by Visa and Mastercard, controlling 90% of transactions outside China with a combined value of $850 billion. This duopoly emerged from American banks in the 1960s, benefiting from network effects, scalability, and bank distribution partnerships.
Payment systems by country
Discussion of various national digital payment systems like Brazil's Pix, India's UPI, and China's solutions. Focus on how these systems provide free/low-cost transfers and challenge Visa/Mastercard's dominance.Credit card fees
Comparison of credit card fees between regions, particularly EU's 0.2-0.3% cap vs US's ~2%. Discussion of how these fees impact businesses and whether higher fees provide value through rewards/protection.Alternative payment solutions
Challenges of building alternatives to Visa/Mastercard, including merchant adoption barriers, fraud risks with ACH, and limitations of current solutions like FedNow and cryptocurrency.
5Celebrating 20 Years of MDN
- MDN, the trusted web development documentation platform, celebrates its 20th anniversary. From its humble beginnings as a community wiki, it has grown to host nearly 14,000 pages of documentation, serving millions of developers monthly. The platform has fostered collaboration among browser makers and continues to empower developers in building a better web.
Team and organizational changes
Discussion about MDN's team evolution from 2020 layoffs to current 15-person team structure, including partnerships with OpenWebDocs and other contributors keeping the documentation updated.Documentation quality concerns
Users debate MDN's documentation clarity, outdated content, and organization issues, particularly around framework tutorials and web extensions, while MDN team actively engages with feedback.Value and appreciation
Developers share positive experiences using MDN as an essential resource over the years, with examples of building projects and learning web development through its documentation.
6Open Source Maintenance Fee
- WiX Toolset is introducing a mandatory Open Source Maintenance Fee for revenue-generating users, effective April 5th, 2025, with WiX v6.0 release. Monthly fees range from $10 to $60 based on organization size, payable via GitHub Sponsors, to support project sustainability. WiX Developer Direct customers are exempt.
Maintenance fee model
Model allows projects to remain open source while requiring commercial users to pay for maintenance/support. Maintainers can focus on paying customers while hobbyists retain free access. Companies paying get support, others build from source.Open source sustainability
Discussion around how to make open source projects sustainable. Debate between charity/honor system vs structured payment models. Companies often reluctant to pay unless forced, though many agree maintainers deserve compensation.Implementation concerns
Concerns about enforcement mechanism using EULA vs controlling binary access. Questions about payment duration, license compliance, and potential confusion. Some suggest simpler approaches like subscription-only binary access.
7Steam, Itch.io are pulling ‘porn’ games. Critics say it's a slippery slope
- Itch.io and Steam are removing adult-themed games from their platforms due to pressure from Collective Shout, an organization targeting payment processors. The move affects many games beyond those with explicit content, impacting titles dealing with mental health, LGBTQ+ themes, and other sensitive topics, raising concerns about censorship and creator livelihoods.
Payment processor power
Discussion of Visa/Mastercard's outsized influence in controlling content through financial censorship, with calls for regulation of payment processors as utilities and concerns about their unchecked power to dictate moralityAdult content segregation
Debate about whether adult content should be separated from mainstream platforms like Steam, comparing to how adult materials are handled in bookstores, video stores and other retail environmentsMoney laundering concerns
Discussion of how anti-money laundering regulations and risks affect financial institutions' willingness to work with adult content, balanced against censorship concerns
8Itch.io: Update on NSFW Content
- itch.io has temporarily deindexed adult NSFW content from browse and search pages due to pressure from payment processors following a controversial game incident. The platform is conducting a content audit and will implement new compliance measures, with some content facing permanent removal to maintain payment processing capabilities.
Payment processor censorship
Discussion of how payment processors like Visa/Mastercard are acting as unelected censorship boards by forcing platforms to remove legal adult content, creating concerns about concentrated corporate power over digital commerceAlternative payment solutions
Debate about cryptocurrencies and other alternative payment methods as potential solutions, with skepticism about practical viability due to adoption barriers and technical limitationsLegislative action
Discussion of the Fair Access to Banking Act and other regulatory approaches to prevent payment processors from discriminating against legal transactions, including calls for common carrier designation
9Windsurf employee #2: I was given a payout of only 1% what my shares where worth
- A former Windsurf employee shares their decision to join Cognition instead of Google DeepMind, despite losing significant share value. They express excitement about continuing work on AI and coding, comparing Cognition's energetic atmosphere to Windsurf's early days, and look forward to developing advanced IDE and coding tools.
Negotiating compensation
Strong consensus to maximize base salary over equity at startups. Equity described as "lottery ticket" while salary is guaranteed. Multiple stories of worthless equity after acquisitions. VCs and founders pushing equity serves their interests, not employees'.Acquisition realities
Headline acquisition prices are misleading. Actual payouts much lower, often tied to retention packages. Employee equity frequently diluted or made worthless. Founders/investors get paid while employees get minimal returns.Startup ethics
Growing recognition that startup compensation model exploits employees. Value created by workers accrues mainly to founders/investors. Employees treated as replaceable despite critical contributions.
10It's a DE9, not a DB9 (but we know what you mean)
- The article clarifies a common misconception about D-subminiature connector naming conventions, specifically that the widely-used term "DB9" for 9-pin serial connectors is technically incorrect. The proper designation is "DE9," where "E" denotes the shell size for 9 pins, while "B" refers to a larger 25-pin shell size. Despite this technical inaccuracy, "DB9" became commonly accepted through widespread usage.
Connector naming confusion
Extensive discussion about how DB9/DE9 connectors are technically misnamed, with debates about whether precise terminology matters vs common usage. Includes comparisons to RJ45 and other connector naming issues.Historical connectors
Discussion of long-lasting connector standards including D-sub (1950s), XLR, phone jacks (1870s), and European TV connectors (1922), highlighting their endurance and evolution over time.Pin configurations
Exploration of various pin configurations possible within D-sub shells, including non-standard arrangements, high-current pins, coax variants, and examples like VGA's 15-pin implementation in DE shell.