Top all-time · #19889
Altay Akkus
Personal blog · altayakkus.substack.comsecuritydata
Altay Akkus writes Altay's Blog, a personal blog at altayakkus.substack.com about security and data. Since 2024, 3 different Hacker News readers have linked it 9 times, most often “Extracting AI models from mobile apps”. It is still writing: the last post was on 2026-01-26, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link a post about a mobile app that detects currency client-side with a model. One commenter cites it as an example of similar AI models being put into apps.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Some funny, hopefully interesting, stories. Launched 2 years ago.
Most-linked posts?
- Extracting AI models from mobile apps3 people · 4 mentions · first linked 2024-12-27
What Hacker News says?
I did some research few weeks ago on the topic of database lookup timing side-channels, conclusion is: They don't really exist (for SELECT FROM WHERE commands atleast). https://altayakkus.substack.com/p/timing-side-channel-on-sql...
Comment linking /p/timing-side-channel-on-sql-where
on “Listen to the whispers: web timing attacks that work”Submitted Extracting AI models from mobile apps as a story · 467 points
HN discussionCheck out my reverse-engineering/cracking of Microsoft's App just doing that, SeeingAI. https://altayakkus.substack.com/p/you-wouldnt-download-an-ai
Comment linking /p/you-wouldnt-download-an-ai
on “Show HN: I created a PoC for live descriptions of the surroundings for the blind”Submitted You wouldn't download an AI – Stealing mobile AI models with Frida as a story · 5 points
HN discussionIf it's going on in any large scale way on a major site, I've not encountered it (but it might not be something they'd shout about) but similar types of models are being put into apps frequently, as seen in this post recently posted to HN: https://altayakkus.substack.com/p/you-wouldnt-download-an-ai (a mobile app that detects currency client-side) One problem is legal liability around training and testing. If you us…
Comment linking /p/you-wouldnt-download-an-ai
on “Ask HN: What do you use for content moderation of UGC?”Submitted Show HN: Partial content web crawling using HTTP/2 and Go as a story · 3 points
HN discussionSubmitted Timing Side-Channel for SQL SELECT WHERE (?) as a story · 2 points
HN discussionSubmitted Are neobanks driving the fraud industry? I analyzed 7.594 cases as a story · 2 points
HN discussionSubmitted How the EMV protocol beat skimming as a story · 2 points
HN discussion