Hacker Newsnew | past | comments | ask | show | jobs | submit | harvie's commentslogin

i think it's called EERAM, however having proper closed loop control with hand position feedback would be preferable in my opinion...

I beleive Android 16 now comes with termux-like Linux environment that can be enabled via developer settings menu.

Big difference! That's a full VM, while Termux is more like a Debian container. For most use cases you will have a better time with Termux, which also ships useful Android integrations such as clipboard and notifications.

Wait, isn't Termux based on Alipine?

Nope, it comes with apt. You might be referring to iSH on iOS, which does use Alpine in a VM.

Yeah but it sucks. There's a button in its settings to install a Debian chroot environment; gave it a go and it bricked itself, had to clear the app's storage and factory reset it.

Yeah, I can always use the Android Terminal once. If I re-open it, it says it's corrupted, and has to delete and re-install its minimal Debian environment.

Add to this list that it tends to not work while connected via a VPN. Not sure why but this makes me very skeptical of it.

Probably because their handling of VM networking isn't very robust.

Why should booting a Linux VM require network access right away.

Probably because it's trying to establish a network connection, and it might be running a networking setup that blocks until the network is up. Also, it's trying to run networking with the host so it can run things like the storage balloon driver and mounting the host filesystem.

that's sketch city. Why does it care? What are they looking for?

I'm thinking maybe they just want me to keep using termux over their sketchy shit

A bug in a not even beta program makes it 'suck'?

I don't understand this comment. Yes, absolutely. Alpha versions of software absolutely suck. The end goal is making it not suck, but if it's full of breaking bugs your can't just say it doesn't suck just because they're expected.

If it's not even a beta, then it can hardly be replacement for termux.


Even more reason to keep supporting Termux.

(it's unreliable, see second edit)

Does it? I've looked at it only briefly (like enabled it, waited a while for it to download something big, then got a basic shell) but it seemed much less capable than Termux. Can you get cell tower info or copy to clipboard for example, or use other Android APIs?

Edit: looked into it a bit more, /etc/issue says it's a Debian 13 (latest stable), apt works with sudo (this is a locked-down device where I don't have root permission on, why does it need a fake sudo to use apt?) but of course programs like wavemon are useless because Android doesn't let you access the WiFi interface. There's no settings besides port forwarding and resetting the "partition". I don't see any documentation or info on how/whether you can interface with the rest of the system in any way. Looking on the web for Android terminal or "Linux developer environment" (as the system settings calls it) is predictably useless and only results in Google's unrelated Android SDK or other terminal emulator apps

Edit 2: okay, beware of it: I was curious if the same "you can't make the OS not kill your script" problem also happened in this OS terminal and.. it's worse. So I ran `while true; do date >> latest.txt; sleep 10; done` to see how long it'd stay alive and then did some other tasks like turning the screen off and on, opening a navigation app and zooming into a dense city, and loading a few websites. Locked the screen once more for good measure and then unlocked and opened the terminal. Guess what? It's broken. Not just crashed: I simply cannot start it anymore. The only "error handling" (Fehlerbehebung it says) step it offers is to delete all data and start with a clean system. The stack trace says there's a nullpointer in TerminalWebViewClient, with the next line being in Trichrome. It's a web browser apparently


> apt works with sudo (this is a locked-down device where I don't have root permission on, why does it need a fake sudo to use apt?)

It's a VM running normal Debian. Inside the VM, you do have root, and that sudo isn't fake.


YMMV, but I've had pretty good luck with just force closing it and launching again when getting errors like that. It doesn't necessarily mean the whole environment is corrupt, even though that is the recovery option that is presented.

It is very unreliable though. I hope Android 17 improves it, as other than the restart issues, I've generally found it to be very functional.


Even if you have Android 16 it's not guaranteed the terminal works. It's disabled by Samsung on my Galaxy A55 for some reason. Maybe the hardware doesn't support the feature.

I'm really looking forward to that being more usable, but it isn't quite there yet. The GUI especially.

Yes, it's good, but it doesn't have access to any sensor apis.

What about using PI/2 ? Seems close enough :-D


Gadget mode can do more things than just network. I beleive you can set up your raspberry pi zero to work as USB mass storage microsd card reader. That seems kinda lame, until you realize you can also run transparent encryption on the raspi and unlock your SD card using passphrase entered via USB serial (also possible in gadget mode).


At first it might seem that 6 is furthest to starting point and therefore it's quite likely it will be the last one reached. However whole process is chaotic enough, that once ladybug finally arrives to 4 and/or 8, the starting position has very little impact on overall outcome.


Well the starting position has no impact on the outcome. Each number other than the starting number has exactly 1/11 chance of being the last remaining number.


So basically a LLM from that brief time period back when communism felt like a good idea? what can go wrong? :-)


yes. and the websites require you to verify transactions with (unrooted?) phone.

on the other hand phone does not require you to verify with your pc, so there's no second factor unless there is some unacessible secure island within the phone itself.

funny enough, you can probably use that website directly on the phone that you use as 2F, which probably circumvents the 2F idea (at least as long as you use SMS 2F instead of app that checks for root)


This is much better than the stale-bot bs irreversibly closing perfectly valid issues just because the reporter have not replied for couple weeks.


The stale-bots are even worse than that. The reporter may have responded quickly, and the bug may be acknowledged as real. But if there's simply no activity in the issue for the month following, it will be closed.


Also upstream is extremely well audited. That's a huge benefit i don't want to loose by using fork.


I do want to say that HPN-SSH is also well audited; you can see the results of CI tests on the github. We also do fuzz testing, static analysis, extensive code reviews, and functionality testing. We build directly on top of OpenSSH and work with them when we can. We don't touch the authentication code and the parallel ciphers are built directly on top of OpenSSL.

I've been developing it for 20+ years and if you have any specific questions I'd be happy to answer them.


this, I'm not going to start using a random ssh fork with modified ciphers.


It may still be sensible if you only expose it to private networks.


So could this safely be used on Tailscale then ? I’m very curious though also a bit paranoid.


> So could this safely be used on Tailscale then ? I’m very curious though also a bit paranoid.

You may as well just use tailscale ssh in that case. It already disables ssh encryption because your connection is encrypted with WireGuard anyway.


It could safely be used on public internet, all this fearmongering has no basis under it.

Better question is 'does it have any actual improvements in day-to-day operations'? Because it seems like it mostly changes up some ciphering which is already very fast.


> It could safely be used on public internet, all this fearmongering has no basis under it.

On what basis are making that claim? Because AFAICT, concern about it being less secure is entirely reasonable and is one of the big caveats to it.


Concern about it being less secure is fully justified. I'm the lead developer and have been for the past 20 years. I'm happy to answer any questions you might happen to have.


I'm not fear mongering. I'm just saying

- IF you don't trust it

- AND you want to use it

=> run it on a private network

You don't have to trust it for security to use it. Putting services on secure networks when the public doesn't need access is standard practice.


I remember the last time I really cared to look into this was in the 2000’s, I had these wdtv embedded boxes that had a super anemic cpu that doing local copies with scp was slow as hell from the cipher overhead. I believe at the time it was possible to disable ciphers in scp but it was still slower than smbfs. NFS was to be avoided as wifi was shit then and losing connection meant risking system locking up. This of course was local LAN so I did not really care about encryption.

But I don’t miss having those limitations.


It's still possible but we only suggest doing it on private known secure networks or when it's data you don't care about. Authentication is still fully encrypted - we just rekey post authentication with a null cipher.


lose*


while (true) { if (stop) { break; } }

If there only was a way to stop while loop without having to use extra conditional with break...


Feel free to read the article before commenting.


I’ve read it, and I found nothing to justify that piece of code. Can you please explain?


The while loop surrounds the whole thread, which does multiple tasks. The conditional is there to surround some work completing in a reasonable time. That's how I understood, at least.


Does not seem so clear to me. If so it could be stated with more pseudo code. Also the eventual need for multiple exit points…


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: