News for hackers. Stuff that matters.

5d8767c68926

Re:Big U.S. Banks Are Stiffing Account Takeover Victims on Friday October 07, 2022 @04:50PM (#33126707)
How do I lock down my "real" account? For instance, I want to disable the ability for anybody to pull money, and I must manually push into a billing account which only maintains limited funds.

I briefly looked into this at one point and as best as I could tell, Chase would only let you disable ACH on business accounts.

Re:How to Download All of Wikipedia onto a USB Flash Drive on Thursday October 06, 2022 @07:58PM (#33115754)
Already been done [0]. Unfortunately, the first attempt, the probe crashed, but given the physical durability of the media, it is expected to still be readable.

[0]: https://www.archmission.org/spaceil

Re:HHS purchases $290M worth of drugs for nuclear emergencies on Tuesday October 04, 2022 @08:37PM (#33089363)
Is this still technically true? Since the movie was released, both sides developed bunker busters to dig deep into fortified military installations. If salt mines did become part of the continuation strategy, you would think they would be likely to be targeted in an exchange.
Re:The Anthropology of Farming Simulator on Monday October 03, 2022 @08:56PM (#33075576)
I suspect having that cross training is also desirable that there will always be someone who can run machine X and that everyone becomes disposable.
It does feel like an odd complaint. I have had mismatched desktop elements for a very long time now. What's another oddball entry on the list?
>...and creating a new distro (with a bad case of NIH) that no one asked for

Eh, after suffering through many Gnome We-Know-Best design decisions, I would be happy for a new entrant in the space that was user focused on creating the best possible experience. An immensely tall order, but I think the demand is there.

Re:Lua, a Misunderstood Language (2021) on Thursday September 29, 2022 @04:15PM (#33026502)
Cannot offer any justification for the error. Just that I have done it more than once, and each time it has taken me too long to debug the underlying cause.
Re:Google is shutting down Stadia on Thursday September 29, 2022 @03:23PM (#33025774)
Eh, I'm not sure that has ever been a stated policy other than an offhand remark when Steam was much smaller. Valve is unlikely to have the legal right to strip away DRM from other companies games. Especially now that everyone runs their own store front.

Maybe, just maybe they would release DRM-free Valve games, but that is as far as I could imagine they would go.

Re:Lua, a Misunderstood Language (2021) on Thursday September 29, 2022 @01:42PM (#33024425)
>... a comma at the end of the line turned his Python scalar into a unary tuple

I have been burned by this mistake a handful of times. Each instance managed to eat up a shocking amount of time. I definitely consider it a misfeature.

Re:What to Do If a Nuclear Disaster Is Imminent on Thursday September 29, 2022 @02:08AM (#33017047)
Rule of threes: three minutes without air, three days without water, three weeks without food. I feel like this rule is dated from a thinner time, so feel free to adjust for BMI.
Re:What to Do If a Nuclear Disaster Is Imminent on Thursday September 29, 2022 @01:55AM (#33016952)
The only winning move for sure. Living inside a major population center (near major military bases!) means that if bombs were really falling, I would be vaporized or fatally irritated in the opening salvo.
Re:What to Do If a Nuclear Disaster Is Imminent on Thursday September 29, 2022 @01:53AM (#33016936)
>...near SF, which I hope isn't a target in such a war

You are talking about a city right on the coast, a top-20 most populated in the country, representing the tech center of the nation. Why wouldn't it make the cut?

>... This has the added benefit of sorting the values as well

I don't think you can rely on this? Happy to be proven wrong, but set does not guarantee iteration order. There may be a distinction if all elements are available at set construction, but that seems like a fiddly rule I would rather avoid.

YMMV, but a tuple should be faster than a list for construction and iteration. Though, I believe it is a pretty negligible amount.
Re:Gas Leak in the Baltic Sea on Tuesday September 27, 2022 @10:49PM (#33003748)
That's the wild thing about this. It would take very minimal resources to pull off this kind of action.
Re:Closing a 30 pixel gap between native and web on Tuesday September 27, 2022 @08:26PM (#33002899)
We're taking about a trillion dollar company who can afford all of the talent and has very limited time pressure. I would prefer they do it correctly.
Re:WhatsApp Remote Code Execution in Video Call on Tuesday September 27, 2022 @01:07PM (#32998107)
Has that attack ever been observed in the wild?

While I don't know if the current incarnations of Nix/Guix will succeed, I think we are slowly making progress towards reproducible builds everywhere.

I have been thinking about picking up this miniITX, Cooler Master NR200P[0]. Similar form factor that would be completely adequate for a daily driver and could accommodate a sizeable GPU if required. The problem is that the smaller builds are still niche so you have to pay a premium on an appropriate motherboard and power supply.

[0]: https://pcpartpicker.com/product/29drxr/

Now I am curious.

- how big is it if you exclude non-Python3 compatible? - how big if you only wanted the latest version of everything?

Meta has repeatedly demonstrated they will do whatever it takes to capture user data. Kid VPNs, in app browsers, etc. Is it any surprise that people are deeply suspicious of any coincidences that arise from using a supposedly private channel.?

Given evidence at hand, it is hard to view Meta as anything but a bad actor.

Re:MinIO passes 1B cumulative Docker Pulls on Wednesday September 21, 2022 @06:58PM (#32932713)
I have thought there needs to be much more trivial plug-and-play caching solution that works for the major services: npm, pypi, cargo, docker, etc. Right now, is is justifiably annoying enough that nobody worries about it until they are squandering terabytes of bandwidth or dealt with an external outage.
Re:Faster CPython 3.12 Plan on Tuesday September 20, 2022 @12:09AM (#32907557)
To be that guy... Didn't Guido officially step down as BDFL?
Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN on Sunday September 18, 2022 @05:07AM (#32885787)
Specifically, I want a backup key off-site. Anytime I enroll a new service, I need to retrieve my backup key from storage for the purposes of enrolling. Depending on how/where the backup is stored (bank box, parent's house across the country, etc) that would make the system less workable in practice.
Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN on Sunday September 18, 2022 @02:27AM (#32884964)
The thing that trips me up is the ability to make backups in the event it is lost/stolen. Seemingly not all services allow registering an additional key, and even if they do, the practicalities of juggling redundant fobs would be cumbersome.
Re:35M Hot Dogs: Benchmarking Caddy vs. Nginx on Friday September 16, 2022 @06:53PM (#32873053)
Nginx security page [0] lists a non-zero amount of exploitable issues rooted in manual memory management.

[0] https://nginx.org/en/security_advisories.html

Re:35M Hot Dogs: Benchmarking Caddy vs. Nginx on Friday September 16, 2022 @12:59PM (#32868945)
When would it matter? I write in Python, so performance was never a concern for me, but I am curious the scenarios in which this was likely to be the weakest link in real workloads.

Given available options, I will take the network software written in a memory safe language every time.

Re:Ethereum Classic hashrate doubled this month ahead of ETH merge on Wednesday September 14, 2022 @08:55PM (#32845618)
Ethereum Classic is also the moment when the founders proved that "code-is-law" iff it is not personally costly to the right people.
Redis is the product everyone knows? Pick a tool and it is almost a guarantee there is a less well known implementation that is better on dimension X.
>They'll probably notice it when they reconcile accounts for SEC reporting, starting Oct 1.

I know several accountants who do not work for trillion dollar companies. Variances in the millions are a daily thing. The more money moving around, the more unqualified people categorizing it and the more likely there is mystery money that cannot be rectified.

Re:Woman sues after DNA from rape kit used to arrest her on Tuesday September 13, 2022 @08:47PM (#32831964)
Genuine question: had the couple refused to let the cop enter and he barged in anyway (exigent circumstances owing to potential physical assault) - could the cannabis be used against the couple as evidence of a crime or would the non-invited search limit discovery?

My hope is that the cannabis would then be fruit of the poisoned tree and reaffirms my belief that you would never work with the cops to any degree.

Older »