Michael Altfield
tech.michaelaltfield.net · Personal blog · on HN since 2018
Michael Altfield writes about security, privacy, and open source, including the BusKill laptop kill cord, Lemmy guides, and GrapheneOS.
What HN saysHN commenters link it for the BusKill kill cord, a guide to finding Lemmy communities, and a GitHub defense against hidden Unicode, and thank him for the guide.
19HN people shared it
7linked it in comments
19stories submitted
500story points
4 months agolast shared
2018people per year2026
Most-shared posts
- 1BusKill: A kill cord for your laptop4 people · 334 points · first shared 2020 · 261 comments on HN
- 2Guide to Finding Lemmy Communities (Subreddits)3 people · 32 points · first shared 2023 · 11 comments on HN
- 3Nightmare on Lemmy Street (A Fediverse GDPR Horror Story)3 people · 9 points · first shared 2024 · 1 comments on HN
- 4Trusted Boot (Anti-Evil-Maid, Heads, and PureBoot)3 people · 4 points · first shared 2023 · discussion on HN
- 5GrapheneOS: Yet another contributor attacked and banned by Daniel Micay3 people · 2 points · first shared 2025 · 2 comments on HN
- 6Mitigating Poisoned PGP Certificates (CVE-2019-13050)2 people · 6 points · first shared 2019 · discussion on HN
- 7Android Security Auditing: Investigating Unauthorized Screenshots1 people · 104 points · first shared 2018 · 39 comments on HN
- 8Hardening Guide for PhpList1 people · 3 points · first shared 2020 · discussion on HN
- 9How to check if a .onion is alive or dead (with Hidden Service Descriptors)1 people · 2 points · first shared 2025 · 1 comments on HN
- 10Continuous Documentation: Hosting Read the Docs on GitHub Pages (CI/CD)1 people · 1 points · first shared 2020 · discussion on HN
- 11Guide to install xhprof in WordPress to debug slow PHP page speed generation1 people · 1 points · first shared 2022 · discussion on HN
- 12Persistent, Sandboxed, Single-Site Browser (Firejail and Proxychains)1 people · 1 points · first shared 2026 · discussion on HN
- 133TOFU: Supply Chain Security Harm Reduction1 people · 1 points · first shared 2024 · discussion on HN
- 14Crowd supply review1 people · first shared 2022
- 15Bidi unicode github defense1 people · first shared 2025
What HN people wrote when they linked it
maltfield · 2023-06-11
Because Lemmy is federated, it may be difficult for reddit users migrating to lemmy to find their subreddits.
Here's a guide to help reddit users find popular lemmy communities and subscribe to them across different instances
* https://tech.michaelaltfield.net/2023/06/11/lemmy-migration-find-subre…
ForHackernews · 2026-04-22
Accused of "bad faith posting" by a brand-new sockpuppet account created 4 hours ago?
People can read for themselves and make up their own mind https://tech.michaelaltfield.net/2025/08/19/grapheneos-daniel-micay-ba…
GrapheneOS is technically strong, but they/Micay/you(?) are absolutely not "neutral" or "objective" - GOS is constantly beefing with other projects rather than collaborating to build a stronger de-googled Android ecosystem.
Cthulhu_ · 2025-04-14
Here's a Github Action / workflow that says it'll do something similar: https://tech.michaelaltfield.net/2021/11/22/bidi-unicode-github-defens…
I'd say it's good practice to configure github or whatever tool you use to scan for hidden unicode files, ideally they are rendered very visibly in the diff tool.
mrlyc · 2023-06-14
Thank you for writing the "How to Find Lemmy Communities" guide. It was very helpful.
https://tech.michaelaltfield.net/2023/06/11/lemmy-migration-find-subre…
miles · 2021-05-07
See BLEUnlock[1] for a simple Bluetooth proximity lock solution for macOS or BusKill[2] for a cross-platform wired solution.
[1] https://github.com/ts1/BLEUnlock
[2] https://tech.michaelaltfield.net/2020/01/02/buskill-laptop-kill-cord-d…
bra4you · 2020-08-06
I saw this solved with a USB stick on a keychain and the computer shuts down when the stick is removed. Does anybody still have the link?
Ah. Found it:
https://tech.michaelaltfield.net/2020/01/02/buskill-laptop-kill-cord-d…
ponorin · 2026-07-08
I'll bite.
GrapheneOS has a long history of brigading. They officially encourage it[0] and are now trying to make it a part of their OS[1].
But wait, they are just doing it to The Baddies, right? Setting aside the fact that they frequently claim targeted harassments against them, often with little[2][3] to no[4][5][6][7] evidence (the only heavily cited arguments from them are technical ones), they are using their fanbase for the good of humanity, right? Also, the link I presented earlier[0] doesn't seem that old.
Look no further: Daniel Micay(stinger), threatening another hardened browser Bromite of collaborating with his abuser (submitted one pull request), of stripping their ability to collaborate with him and... changing the license to prevent that, on an open-source project[8]. Don't take my words, the links are there. But honestly I can't think of any reason you have to go that far.
Another crashout on Mozilla's repo: https://web.archive.org/web/20240909072043/https://github.com/mozilla/… . Also notable are his insecurity claims against MicroG, to which one of the contributor replies:
> I'm a bit surprised by you pulling out this issue that was fixed 4 years ago and only affected apps which did not target SDK 23 or higher (which at the time was already a requirement for apps uploaded to Play Store). Your phrasing made me think there might be a new issue, but if this is what you were referring to, all good.
Again, I encourage you to read the…