Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. English: A vs. An(redblobgames.com ↗)
    5comments
  2. I built non-autoregressive decision models with RL a year ago(convaiinnovations.com ↗)
    230comments
  3. AI-generated posters don’t have to be horrible(john.hartnup.uk ↗)
    697comments
  4. Measure internet censorship. Contribute to the largest open dataset(ooni.org ↗)
    27comments
  5. How Hacker News ranking works: scoring, controversy, and penalties (2013)(righto.com ↗)
    discuss
  6. Brood War Bench(swerdlow.dev ↗)
    54comments
  7. Compiler-style optimization for drawing via Skia(arxiv.org ↗)
    2comments
  8. Deodands put a price on objects that caused death(jstor.org ↗)
    10comments
  9. Mayday Mysteries(maydaymystery.org ↗)
    1comments
  10. Two parallel neural ectoderm progenitors contribute to the developing brain(stanford.edu ↗)
    228comments
  11. ZK-JPEG: Zero-Knowledge Image Editing and Compression(iacr.org ↗)
    5comments
  12. Show HN: CUA-S1 – A System One Model for Computer Use(github.com/trycua ↗)
    4comments
  13. UFO Series Home Page: "UFO" TV Series from 1970(ufoseries.com ↗)
    14comments
  14. Suzanne Ciani's Buchla Cookbook(echo.orpheusinstituut.be ↗)
    18comments
  15. Android 17 is the first since 3.x to add new APIs without releasing to the AOSP(grapheneos.social ↗)
    639comments
  16. Tin: full-text search for Postgres(planetscale.com ↗)
    70comments
  17. Supabase (YC S20) Is Hiring for OrioleDB(supabase.link ↗)
    discuss
  18. The Secret Life of Circuits(coredump.cx ↗)
    67comments
  19. New evidence for hidden chambers beyond Tutankhamun's tomb(nature.com ↗)
    32comments
  20. Black Holes or Black Hole Stars? Astronomers Spar over 'Little Red Dots'(quantamagazine.org ↗)
    42comments
  21. GPT-6 Astra Solves a WWI German Radio Cipher(prinzai.com ↗)
    159comments
  22. I think you should almost never use AI to write(erichgrunewald.substack.com ↗)
    96comments
  23. San Francisco Onion Futures Company(onionfutures.com ↗)
    150comments
  24. Adventures in Microcontroller Circuit Debugging(bigmessowires.com ↗)
    5comments
  25. How to Write with an LLM(sockpuppet.org ↗)
    370comments
  26. Microsoft director: AI scraping 'the largest theft of labor in human history'(tomshardware.com ↗)
    20comments
  27. Cloudflare Quick Tunnels(cloudflare.com ↗)
    306comments
  28. If math is more than proof, we need to better celebrate the rest of it(terrytao.wordpress.com ↗)
    228comments
  29. Saving another 100TB of RAM(cloudflare.com ↗)
    107comments
  30. Btrfs/ZFS/bcachefs under workloads classic benchmarks skip(bartosz.fenski.pl ↗)
    74comments

I captured 72 hours of idle Android packets behind pfSense

37 pointsby 2h agopraveentechworld.com
17 comments
2h agoHN ↗

So i wanted to know what an Android phone actually transmits when you aren't touching it most articles say "Google collects a lot of data" but nobody knows to what extent and publishes some proof lets say some packet captures

Stock Android 16 averaged 348.4 requests/hour to Alphabet ASN 15169 endpoints turning off location and usage diagnostics in settings still left 194.2 requests/hour active mostly checkin.gstatic.com Wi-Fi BSSID surveys. Running GrapheneOS with Sandboxed Play Services dropped traffic to 12.1 requests/hour, while pure GrapheneOS registered zero.

Data is uploaded here : https://doi.org/10.5281/zenodo.22848749

43m agoHN ↗

I'd be curious how LineageOS stacks up against GrapheneOS.

Also, anyone know if there are downsides to blocking checkin.static.com?

2h agoHN ↗

please share your thoughts if i should have done things differently

1h agoHN ↗

Stock Pixel 8 (Default Settings)-> 348.4 req/hr

of which: Nearby Wi-Fi Routers (Location Triangulation) is 84.2 pings/hr

So a stock (idle!) pixel 8 is checking where you are more than once per second (without maps running, without asking for directions) and asking what you're doing almost five times a second.

Is there any slope at all? Like, does it ask more frequently in the beginning and less after an hour+ of idle, or is it fairly static?

Would be very curious to see what adding social media and voice assistants does to this, especially with a controls against a silent room and a room with a radio/movies/TV/pure music playing.

Does the voice assistant send more data in the conversational context? How much more? If it is indeed more, how much voice is theoretically being transmitted given the average words per bitrate?

It could also be interesting to see if the stock device transmits more in a conversational environment. Like, if the device is idle, why would it be transmitting more while sitting in an office instead of a quiet lab?

43m agoHN ↗

You could not have posted AI slop, and written your own thoughts as if you were an actual human being with something to say in their own voice.

41m agoHN ↗

Soulless LLM-ese. The content is needlessly stretched to occupy space, paragraphs, and tables. Any actual insights could have been condensed and conveyed with 80% less text.

The "Complete 72-Hour Raw CSV Dataset" CSV contains 13 records. That incomplete data is formatted incorrectly: rows 6 and 11 are missing payload_bytes, so their description shows in the wrong column.

The "How DeGoogled Are You" section is mostly a separate issue from the test described in the article, and it has no place being at the top. The article is about how Android phones are passively phoning home. For example, switching from Chrome to Brave won't reduce idle phone-home, as Android users can't uninstall Chrome, and the idle activity was not related to Chrome. The same goes for most of the other recommendations in that widget.

32m agoHN ↗

Seems like you used AI to steal the results from the same experiment done a decade ago to be honest. Heard this story in a YouTube video long ago.

58m agoHN ↗

Shockingly bad, any move away from big tech is a good one in my opinion. And I’ve got a lot of moving to do!

Care to run the same experiment for an iPhone?

52m agoHN ↗

Grapheneos with Google play services (sandboxed) only send 12 packets per hour, instead of around 350.

That’s great, but the sandboxed Google play services are by default set to normal in battery usage. Meaning it’s subject to dooze and other ways to artificially limit its background activity.

You neee to set the battery usage to unrestricted to reliably revive notification.

I wonder what the packet count would have been with unrestricted Google play services.

44m agoHN ↗

I'm less interested in the quantity, and more in the content of those packets. Do they contain my GPS movement history? A list of installed and opened apps? My contacts list, messaging text log, and list of visited websites?

The data I really care about protecting would fit into a few kilobytes, so knowing the phone sends, for example, a minuscule 2 MB/day, brings me no comfort.

33m agoHN ↗

This isn’t new. The disgraced Lunduke did this same test nearly a decade ago and observed the same results. Android is malware disguised as a consumer operating system.

31m agoHN ↗

Was there any TLS interception in place? Mind you, that can be detected and ignored...

Cause the (obviously AI generated) page is fairly ambiguous in this regard. In one section it claims certain pieces of info were sent outright. In others, it refers to them as "Privacy Threat Vector" items. Were they possibly sent or were they actually sent? Why is this left unclear? Why is transmission alone counted as evidence of later misuse? What data is technically necessary to send as part of a protocol?

I'm really quite tired of the run of the mill "privacy minded" folks thinking they're the hot shit because they can launch WireShark, and gawk at packets flying about. Like no, various corporate SNIs appearing in a chatty network log is not evidence for illegal or unethical corporate espionage/surveillance, especially not a clear one. Nor is the network log being chatty any evidence one way or another. Do you really think that surveillence is a more likely explanation for them than just regular enterprise sprawl?

If you're bringing receipts, bring them whole, disclaimers and limitations included. Any analysis that stops before decrypting the traffic is deeply unserious, and only serves to discredit actual research findings & real violations of privacy.

31m agoHN ↗

If you turn the WiFi/mobile off with airplane mode (and ensure wifi is off) this should go away right?

31m agoHN ↗

Doesn't really work for me. It's just a site likely checking what the browser tells it any the system. Meanwhile I have a VPN blocking most connections and every Google app is either uninstalled or disabled.