Top all-time · #9609
Wonder's Lab
Personal blog · wonderfall.devsecuritysystemsai
Wonder's Lab is a personal blog at wonderfall.dev about security, systems and ai. Since 2022, 8 different Hacker News readers have linked it 8 times, most often “Docker and OCI Hardening Guide”. It is still writing: the last post was on 2025-02-20, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for posts on self-hosting, GrapheneOS and F-Droid. Comments cite or argue against points on containers, GrapheneOS and F-Droid update speed, without judging the writing itself.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Thoughts and research on security, privacy and pharmacology.
Most-linked posts?
- Docker and OCI Hardening Guide4 people · 4 mentions · first linked 2022-09-22
- F-Droid: how it weakens Android's security model3 people · 3 mentions · first linked 2022-02-24
What Hacker News says?
> you must go way out of your way to ignore how containerization makes everyone's job easier and even trivial to accomplish You'd have to go out of your way to ignore how difficult they are to maintain and secure. Anyone with a few hours of experience trying to design an upgrade path for other people's container; security scanning of them; reviewing what's going on inside them; trying to run them with minimal privil…
Comment linking /docker-hardening/
on “Self-Host and Tech Independence: The Joy of Building Your Own”Submitted Some thoughts on autoregressive models as a story · 79 points
HN discussionThat's a bit too coarsely grained IMO. There are different ways to resolve the question of security vs usability, varying by threat model and user confidence. Graphene's approach is not inherently untenable: using the play store can be done via a separated profile - which is probably good opsec anyhow. An alternative approach (which I believe the Graphene team are aware of, but don't necessary encourage) is to use F…
Comment linking /fdroid-issues/
on “GrapheneOS: The private and secure mobile OS”Submitted F-Droid: how it weakens Android's security model as a story · 40 points
HN discussionThey follow bad practices. For example it takes them too long to update apps, with no appreciation to the update (meaning if there was a critical CVE ), and other. Look at this site[1], showing some reasons why google play store is preferred. [1] https://wonderfall.dev/fdroid-issues/
Comment linking /fdroid-issues/
on “Appreciating F-Droid as an app developer”Submitted Docker and OCI Hardening Guide as a story · 6 points
HN discussionSubmitted Docker and OCI Hardening Guide as a story · 4 points
HN discussionSubmitted Docker and OCI Hardening as a story · 2 points
HN discussion
