News for hackers. Stuff that matters.

0rzech

AFAIK, none of Turris' models supports WPA Enterprise, which I'd consider necessary for enterprise-grade routers. OTOH, their products are Open Source and Open Hardware, are still pretty powerful, and are much cheaper than enterprise HW with similar capabilities.
> I never see security upgrades for the kernels they use. Not one. Not ever.

Turris [1] has already been updating their routers for years and they continue doing it.

[1] https://www.turris.com

Re:French national assembly votes 0.055€/GB internet tax on Saturday October 31, 2026 @06:37AM (#50314737)
Same in Poland. You pay tax on printers, printer paper, disc burners, writable discs and so on, and in return you may legally make backup copies of the copyrighted works and share them with your close relatives. IANAL, though.

The best part is that this year they've added smartphones, tablets and laptops to the list of taxed devices, which is ridiculous and pure greed. And the minister argued that the manufacturers will bear the increased cost themselves, which just adds insult to injury. She also said that other countries do that already (Germany was the example AFAIR, hehe), but she just conveniently left out the fact that Poland already has one of the highest VAT rates in the EU, so our devices will be even more expensive relative to their base price, than they already are.

Re:JetBrains Thinkrail on Monday October 26, 2026 @09:22PM (#50253595)
You're right, AFAIK.
Re:ThinkRail from JetBrains on Monday October 26, 2026 @09:21PM (#50253582)
> Obviously, they are still a corporate, but, until now they've respected me as a consumer unlike many other corporations. I value that.

I concur. Great prices, great products, great customer support.

Polish diacritics are: ą ć ę ł ń ó ś ź ż (uppercase: Ą Ć Ę Ł Ń Ó Ś Ź Ż). They are all separate letters.

By the way, many people think that Polish alphabet is just English with diacritics, but in reality neither q, nor v, nor x are part of it.

Sometimes it is, sometimes it isn't. But it wasn't OP's argument, was it?
Flutter is migrating to Impeller, which has much better runtime characteristics and font rendering. It's already being used by default on desktop and mobile. [1][2] But your point still holds, of course.

[1] https://docs.flutter.dev/perf/impeller

[2] https://flutter.dev/go/can-i-use-impeller

Re:Malicious Rust crate Arrayref runs a build-time payload on Friday August 21, 2026 @12:11PM (#49390234)
There are more differences.

Packages can release updates arbitrarily, while standard libraries tend to have longer release cadences.

It's also more difficult to put arbitrary code into an stdlib, because stdlibs are scrutinized better.

Also, it's harder for some random anonymous developer to gain push access to stdlib repository.

One of the reasons so much Rust code is in libraries is not because there are no people to write it (duh), but because putting these in std commits maintainers to keeping backwards compatibility and slows down included package's release cycle.

Re:Malicious Rust crate Arrayref runs a build-time payload on Friday August 21, 2026 @11:30AM (#49389631)
They won't, but the less attack vectors, the better.
Re:Malicious Rust crate Arrayref runs a build-time payload on Friday August 21, 2026 @11:27AM (#49389594)
Is Rust ecosystem really that much better, if at all? This is a genuine question.

You can't disable build.rs, Rust Analyzer executes proc macros as soon as you open the project, minimum days since release has not yet made it into stable (though luckily it is planned for 1.100), and the number of project dependencies goes easily into several hundreds (still better than npm's few thousands, though, and I know that some deps are from Cargo workspaces), and on top of that, lots of packages stick to 0.x version for years.

Personally I see Rust community's packaging and security culture more akin to that of JS than to Java et al.

Re:Malicious Rust crate Arrayref runs a build-time payload on Friday August 21, 2026 @11:13AM (#49389375)
It absolutely is a culture thing. I've seen many threads asking about backend frameworks in Go, and every time there were lots of answers akin to "screw framework dependencies, stdlib is more than enough".
Re:What's New in Flutter 3.47 on Thursday August 13, 2026 @07:04PM (#49292837)
This is not true on many levels:

  * Most of the team stayed at the company.
  * The layoffs hit mostly DevOps and infra people in Flutter team.
  * At least part of the laid off roles were moved offshore to Germany, India etc.
Re:What's New in Flutter 3.47 on Thursday August 13, 2026 @04:22PM (#49291344)
I started with https://pub.dev/packages/flutter_bloc and then migrated to https://pub.dev/packages/state_beacon for my app, and so far I've settled on it. But when I publish libs to pub.dev, I stick to built-in SDK stuff.
Re:What's New in Flutter 3.47 on Thursday August 13, 2026 @08:30AM (#49284935)
The fact is, more and more companies are actually picking Flutter. :) Sony praises Flutter on embedded. LG has added extension to allow Flutter apps on its WebOS. Toyota is developing a Flutter game engine, which is already used in some of its cars.
Re:What's New in Flutter 3.47 on Thursday August 13, 2026 @08:21AM (#49284854)
Correct. At the cost of using more RAM, of course.
Re:What's New in Flutter 3.47 on Thursday August 13, 2026 @07:56AM (#49284654)
Completely opposite experience for me.

I love working with Dart (which IMO is _not_ "worst parts of Java and Javascript (...) turned (...) into a language", "Terrible to write, terrible to read, terrible to use" - quite the opposite, actually) and its toolchain, including Flutter.

I find the architecture simple to follow, no need for "either print apps as fast as possible or to emulate some Clean Code like behavior", though I do think some people use overcomplicated state management solutions. But nobody forces anybody to do that.

My experience with Web has been fine so far and I've seen fully cross platform Flutter apps working absolutely fine on mobile, desktop and web.

This is not to gaslight your experience, YMMV after all.

And React Native, with its dependency hell, project rot, npm ecosystem under the hood, and transpilation with lax runtime leaking into TS, is a total no-go for me. Though I base this opinion partially on my experience with NodeJS, and partially on that of my friends who use RN.

Btw. Does your platform support bundling UI in addition to streaming it from the server? How large is the bundled runtime?

PS. Clicking on "see all supported platforms →" on your project's homepage gives 404 for https://docs.hypen.space/docs/adapters .

Re:What's New in Flutter 3.47 on Thursday August 13, 2026 @06:37AM (#49283992)
While the server side is still growing and obviously not as huge as Java etc., Dart definitely is being used on the backend. For instance, https://pub.dev/ itself is written in Dart: https://github.com/dart-lang/pub-dev . :)

The language, like any other, does have some weaker parts, but in general is _very_ nice to write in - thanks to both the language itself and the toolchain built around it.

The apps compile to native binaries for production and are run in Dart VM during development. The SDK is multi purpose. You can write "scripts", you can write CLI apps, servers and with Flutter - the rest of them.

Re:I Regret Migrating to Codeberg on Saturday July 25, 2026 @04:19AM (#49045623)
We're back to square one, then. :)
Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @12:28PM (#49037973)
Oh, I didn't know that. Thanks!
At this point it's probably better to switch to Firefox or Brave.
> Your Google Account holds a lot of valuable information, from cherished photos to important emails and documents.

No, it does not. I create an account only when I'm forced to, e.g. on Google-certified Android phones, where I keep all synchronization off.

I'm eagerly waiting for official GrapheneOS phones. Pixels are a no-go for me because of the price-to-perf/quality ratio.

PS. It takes about 50 minutes to hunt down and turn off hopefully all the data grabbing features on a Samsung Android phone. Madness!

Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @07:41AM (#49034167)
Radicle uses its own P2P protocol - Gossip. Indeed, Tangled uses the same protocol as Bluesky - ATProto. https://forgefed.org, on the other hand, is based on the ActivityPub protocol.
Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @07:35AM (#49034109)
> Codeberg effectively says that it only welcome mature enough projects that it feels worthy to host

This is also one of the reasons I migrated away.

Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @07:02AM (#49033793)
> No idea where yet; I don't want to go to Github, and I believe there were similar concerns about Gitlab, so I don't know where to go yet.

Perhaps https://radicle.dev or https://tangled.org would be fine for you?

Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @05:55AM (#49033254)
> I'll admit that their blog post [1] is more inclusive

Amongst other unwanted activities, their blog post mentions "Projects written and maintained with heavy use of LLMs". If you often chat with LLM, or ask the agent to review your changes, it's writing and maintaining the project with heavy use of LLMs too.

IMHO, this is even more restrictive and ambiguous than "projects that mostly consist of code written by "generative AI"-tools".

And what if a project is hand-written, but the tests are LLM-generated and then refactored by a human? Well, tests are part of a project, so it's bad too.

Also, while reading their blog post, I couldn't shake the feeling that they disdain niche single-person projects. Apparently they never intended to be a "dumping ground", as many people from their community now claim. But it's insulting to assume that when you share your small single-person project, you just "dump" something, as if it is some kind of trash by definition.

Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @04:27AM (#49032741)
I think your impression is right, at least judging by https://codeberg.org/ethical-foss/open-slopware .
Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @04:15AM (#49032635)
Interestingly, nothing happens in my case, even after unblocking JS on their site. I suppose it's because I do block JS by default.
Re:I Regret Migrating to Codeberg on Friday July 24, 2026 @04:13AM (#49032620)
They warn against JavaScript being on by default and recommend using it only on trusted websites. It's a solid advice.
Re:Warm Burnout: editor and terminal color scheme on Friday May 01, 2026 @06:12AM (#47973008)
Looks great aesthetically and props for the author for both the theme and its homepage!

What I look for in a theme is:

    1. Being easy on the eyes.
    2. Easy distinction between different keywords etc.
    3. Good contrast.
Unfortunately, the light version of this theme succeeded in only 1. for me (I tried it in JetBrains IDEs). The background color is great, though.

The best light theme I've seen so far is Selenized for VSCodium [1] and for VS Code [2]. There's a Selenized light for JetBrains IDEs too. [3]

[1] https://open-vsx.org/extension/santoso-wijaya/helios-selene

[2] https://marketplace.visualstudio.com/items?itemName=santoso-...

[3] https://plugins.jetbrains.com/plugin/23800-selenized-theme

Older »