The dispute centers on GrapheneOS’s claim that it is the target of a smear campaign, alongside tension between its developers and Murena, associated with /e/OS. Some commenters see privacy-focused operating systems as allies and urge the groups to stop attacking one another; an /e/OS user says the system delivers security updates reliably. Others argue that criticism of privacy tools should not be taken as an attack on GrapheneOS itself, since people who value privacy and criminals may use the same tools. One commenter goes further, portraying GrapheneOS as a big-money project with an unclear team and asking users to trust its assurances about banks, app compatibility, and Google traffic.
Commenters divide over claims that law enforcement is promoting less-secure devices to expose users. One sees a multinational police operation and warns that activists, reproductive-rights advocates, Palestinians, and LGBT people could be targets; another says the claim lacks evidence and wants journalists to investigate. Several commenters defend privacy as a basic right, arguing that state surveillance threatens people beyond the criminal groups it is ostensibly aimed at. Others criticize the presentation: Mastodon’s post limits and layout make the case look reactive or conspiratorial, they say, and a blog post or reported article would communicate it more credibly.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
RAMBO demonstrates how malware on an air-gapped computer can encode stolen data into radio signals emitted by its RAM. An attacker with a software-defined radio and antenna can capture and decode the signals at up to 1,000 bits per second. (arxiv.org)
CVE-2026-98432 is a critical Linux IPv4 TCP handshake use-after-free, remotely exploitable without authentication and potentially allowing root command execution on servers with multipath TCP listeners. Upstream fixes are available, but Ubuntu and RHEL had not yet shipped patched kernels as of October 29, 2026. (atlasum.net)
Colin Percival discovered that Intel Hyper-Threading could leak cryptographic secrets and developed an exploit to recover an RSA key. He argues scholars who find security flaws should coordinate quietly with affected teams so patches are ready before public disclosure. (daemonology.net)
Binance says it has covered 90% of the $6.3 billion in cryptocurrency stolen in a hack and will absorb the losses rather than pass them to users. It has set aside more than $6.34 billion and says sourcing the remaining assets may take longer. (bbc.com)
Plymouth canceled its Flock license-plate camera contract after the system wrongly tracked a couple, but the company did not respond to removal requests. The police chief disconnected the cameras’ power to ensure they stopped recording vehicles. (thedrive.com)
A hacking group said it exploited a vulnerability in software used to manage LED advertising screens, displaying pornographic footage on a highway billboard in Egypt and accessing screens in several other countries. Egyptian authorities opened an investigation and suspended roadside displays, while the incident raised questions about security at the billboard operator. (cairoreport.org)
Today's best Hacker News stories, summarized and screenshotted, one email a day.