Hacker News

New stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Open Source Lightroom Alternative on Web (github.com/udulaabeykoon)
    —discuss
  2. AI Socialism: Who Will Own the Automated Future? (cosmopolity.substack.com)
    —discuss
  3. An OpenAI agent escaped its sandbox by hiding questions in DNS lookups (madrobot.blog)
    —discuss
  4. Show HN: EmbedCatalog – Decorate your project with embed (github.com/embedcatalog)
    —discuss
  5. PoC for PUBG's anti-cheat Zakynthos's rootkit navagio.sys (github.com/hseoa)
    —discuss
  6. C-to-Rust Fallacy: Automatic Refactoring != Memory Security (arxiv.org)
    —discuss
  7. Cities of Salt (1984) (wikipedia.org)
    —discuss
  8. Streaming Our RL Training Runs (brusharena.art)
    —discuss
  9. AI hallucination of Chinese nuclear components almost led to US Military attack (arstechnica.com)
    —discuss
  10. Productivity as the Cessation of Braking (medium.com/smoking2man)
    —discuss
  11. Show HN: Kosh - Stop Your Bookmarks Becoming a Cemetery (chromewebstore.google.com)
    —discuss
  12. File Notification Attacks (inoti.fyi)
    —discuss
  13. Show HN: Loop-find, trim, rotate and crop videos in the browser, no upload (clipyouredit.com)
    1comments
  14. When It's OK Not to Understand Your Own PR (wakamoleguy.com)
    1comments
  15. Delphic Wisdom and Connection (will4planet.substack.com)
    —discuss
  16. Latitude Dictates Global Marine Diatom Dynamics: 25 Years of Satellite Data (wiley.com)
    —discuss
  17. What the megafauna extinction can teach us about AI startups and incumbents (johnjwang.com)
    —discuss
  18. The Python documentation is now available in Persian (python.org)
    —discuss
  19. On Programming, Statistics, and Java (waytoounoriginal.github.io)
    —discuss
  20. Welcome to the Medical Clinic at the Interplanetary Relay Station (lightspeedmagazine.com)
    —discuss
  21. Leadership Lessons from the Odyssey (danielmangum.com)
    —discuss
  22. The EV1 Archive (v212.org)
    —discuss
  23. New Boeing 737 MAX Software Glitch Could Disrupt Navigation Feature (wsj.com)
    —discuss
  24. 42x faster prompt lookup drafting in llama.cpp (jadidbourbaki.github.io)
    —discuss
  25. The Case for Learning in the Era of AI (jonbehnken.substack.com)
    1comments
  26. Show HN: Way to divide parameter space in LLM training (zenodo.org)
    —discuss
  27. OpenAI: Self-replicating prompt injections exist (alignment.openai.com)
    —discuss
  28. Just Ask Jev: Reinforcement Learning for Calibrated Decisions (arxiv.org)
    —discuss
  29. Redium: A small and declarative JavaScript-based UI library (github.com/rolandbrake)
    —discuss
  30. PHP 4.1.1 Simulator: A jsfiddle-style edit-run page for 2001 era PHP (infinitefun.com)
    —discuss

Show HN: Pawl – iOS gambling blocker you unlock with a physical Security Key

1 pointsby 55m agogithub.com
3 comments
Hi HN!

I built this to make unblocking apps on your phone a lot harder. You add a physical key, then put it out of reach or give it to a friend, so unblocking becomes a real hassle. I started out wanting to build software around hardware security keys. My thinking was that they belong in high stakes moments, where proving it's really you matters the most.

One of those scenarios is gambling/unblocking apps on your phone. A hardware key is a physical thing you have to go find, plug in, and tap. That makes it a good fit for moments where the user isn't 100% sure they want to unblock something. Gambling is one of those moments. You can lose a lot of money when nobody else has to verify/authenticate your behavior.

So I built Pawl. You can use it alone, or with a sponsor/spouse/partner who approves each unlock. It uses Apple's built in Screen Time API, enabling you to block adult sites, gambling, and/or apps of your choosing.

There is no unlock button in the app, you have to plug in your security key (that you put out of reach) and authenticate that you truly want to unblock apps/websites. After that, you wait 15 minutes. Then the block will turn back on after 30 minutes. This is customizable. Your clean day streak is saved in iCloud, so deleting the app doesn't reset it.

The app is free on iPhone and iPad, with an optional Pro subscription for $3.99 a month or yearly $29.99 (w/ a free week). I built Pawl with Swift and SwiftUI and the sponsor feature runs on Supabase. It's open source under MPL 2.0 as of yesterday so more people can find bugs and audit it for safety. One developer is working on this so far. It's also been a while since I worked on this project because I work on a lot of projects lol.

Some limits of this app are: the phone's owner can turn Screen Time off (no app can prevent this). The key check compares the credential ID but does not verify the signature. The clock lock is in the code but not switched on yet. Most of the code has no automated tests, and there are no reproducible builds.

Side note: I'm an enrolled member of the Confederated Tribes of Grand Ronde in Oregon, the tribe that owns Spirit Mountain Casino. So this is a real problem for my reservation and community. A lot of our per capita payments go straight back into the casino at the end of every other month, when that money should be going to basic needs and the future.

Links:

App Store: https://apps.apple.com/app/id6783119309 (my mom is the only review lol)

Website: https://getpawl.com

Privacy: https://getpawl.com/privacy.html

Report a security issue: https://github.com/jasonepage/Pawl/blob/main/SECURITY.md

44m agoHN ↗

This is my first real launch. The Core is free, $3.99/mo for the sponsor feature. Gambling recovery organizations and communities are my best customers, but it's awkward trying to market to them/get them to buy.

https://getpawl.com/

38m agoHN ↗

Innovative / Clever Idea - I don't think you have a Moat, but you do have a great social solution for those who need it!

30m agoHN ↗

Thank you!! I would say my moat is the tribe/Spirit Mountain Casino if anything, but I think you're right lol.

I hope this idea can help some gamblers or people addicted to games/TikTok lol