Hacker News

New stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Search results for "remove password" on GitHub commits (github.com/search)
    1comments
  2. Open Source Lightroom Alternative on Web (github.com/udulaabeykoon)
    —discuss
  3. AI Socialism: Who Will Own the Automated Future? (cosmopolity.substack.com)
    —discuss
  4. An OpenAI agent escaped its sandbox by hiding questions in DNS lookups (madrobot.blog)
    —discuss
  5. Show HN: EmbedCatalog – Decorate your project with embed (github.com/embedcatalog)
    —discuss
  6. PoC for PUBG's anti-cheat Zakynthos's rootkit navagio.sys (github.com/hseoa)
    —discuss
  7. C-to-Rust Fallacy: Automatic Refactoring != Memory Security (arxiv.org)
    —discuss
  8. Cities of Salt (1984) (wikipedia.org)
    —discuss
  9. Streaming Our RL Training Runs (brusharena.art)
    —discuss
  10. AI hallucination of Chinese nuclear components almost led to US Military attack (arstechnica.com)
    —discuss
  11. Productivity as the Cessation of Braking (medium.com/smoking2man)
    —discuss
  12. Show HN: Kosh - Stop Your Bookmarks Becoming a Cemetery (chromewebstore.google.com)
    —discuss
  13. File Notification Attacks (inoti.fyi)
    —discuss
  14. Show HN: Loop-find, trim, rotate and crop videos in the browser, no upload (clipyouredit.com)
    1comments
  15. When It's OK Not to Understand Your Own PR (wakamoleguy.com)
    1comments
  16. Delphic Wisdom and Connection (will4planet.substack.com)
    —discuss
  17. Latitude Dictates Global Marine Diatom Dynamics: 25 Years of Satellite Data (wiley.com)
    —discuss
  18. What the megafauna extinction can teach us about AI startups and incumbents (johnjwang.com)
    —discuss
  19. The Python documentation is now available in Persian (python.org)
    1comments
  20. On Programming, Statistics, and Java (waytoounoriginal.github.io)
    —discuss
  21. Welcome to the Medical Clinic at the Interplanetary Relay Station (lightspeedmagazine.com)
    —discuss
  22. Leadership Lessons from the Odyssey (danielmangum.com)
    —discuss
  23. The EV1 Archive (v212.org)
    —discuss
  24. New Boeing 737 MAX Software Glitch Could Disrupt Navigation Feature (wsj.com)
    —discuss
  25. 42x faster prompt lookup drafting in llama.cpp (jadidbourbaki.github.io)
    —discuss
  26. The Case for Learning in the Era of AI (jonbehnken.substack.com)
    1comments
  27. Show HN: Way to divide parameter space in LLM training (zenodo.org)
    —discuss
  28. OpenAI: Self-replicating prompt injections exist (alignment.openai.com)
    —discuss
  29. Just Ask Jev: Reinforcement Learning for Calibrated Decisions (arxiv.org)
    —discuss
  30. Redium: A small and declarative JavaScript-based UI library (github.com/rolandbrake)
    —discuss

Show HN: Pawl – iOS gambling blocker you unlock with a physical Security Key

1 pointsby 55m agogithub.com
3 comments
Hi HN!

I built this to make unblocking apps on your phone a lot harder. You add a physical key, then put it out of reach or give it to a friend, so unblocking becomes a real hassle. I started out wanting to build software around hardware security keys. My thinking was that they belong in high stakes moments, where proving it's really you matters the most.

One of those scenarios is gambling/unblocking apps on your phone. A hardware key is a physical thing you have to go find, plug in, and tap. That makes it a good fit for moments where the user isn't 100% sure they want to unblock something. Gambling is one of those moments. You can lose a lot of money when nobody else has to verify/authenticate your behavior.

So I built Pawl. You can use it alone, or with a sponsor/spouse/partner who approves each unlock. It uses Apple's built in Screen Time API, enabling you to block adult sites, gambling, and/or apps of your choosing.

There is no unlock button in the app, you have to plug in your security key (that you put out of reach) and authenticate that you truly want to unblock apps/websites. After that, you wait 15 minutes. Then the block will turn back on after 30 minutes. This is customizable. Your clean day streak is saved in iCloud, so deleting the app doesn't reset it.

The app is free on iPhone and iPad, with an optional Pro subscription for $3.99 a month or yearly $29.99 (w/ a free week). I built Pawl with Swift and SwiftUI and the sponsor feature runs on Supabase. It's open source under MPL 2.0 as of yesterday so more people can find bugs and audit it for safety. One developer is working on this so far. It's also been a while since I worked on this project because I work on a lot of projects lol.

Some limits of this app are: the phone's owner can turn Screen Time off (no app can prevent this). The key check compares the credential ID but does not verify the signature. The clock lock is in the code but not switched on yet. Most of the code has no automated tests, and there are no reproducible builds.

Side note: I'm an enrolled member of the Confederated Tribes of Grand Ronde in Oregon, the tribe that owns Spirit Mountain Casino. So this is a real problem for my reservation and community. A lot of our per capita payments go straight back into the casino at the end of every other month, when that money should be going to basic needs and the future.

Links:

App Store: https://apps.apple.com/app/id6783119309 (my mom is the only review lol)

Website: https://getpawl.com

Privacy: https://getpawl.com/privacy.html

Report a security issue: https://github.com/jasonepage/Pawl/blob/main/SECURITY.md

44m agoHN ↗

This is my first real launch. The Core is free, $3.99/mo for the sponsor feature. Gambling recovery organizations and communities are my best customers, but it's awkward trying to market to them/get them to buy.

https://getpawl.com/

38m agoHN ↗

Innovative / Clever Idea - I don't think you have a Moat, but you do have a great social solution for those who need it!

30m agoHN ↗

Thank you!! I would say my moat is the tribe/Spirit Mountain Casino if anything, but I think you're right lol.

I hope this idea can help some gamblers or people addicted to games/TikTok lol