News for hackers. Stuff that matters.

Caligatio

The HN title and the original sub headline are inaccurate per the published correction at the end of the article.

CORRECTION: In a previous version of this article, we reported that that the UKHSA had refused to release data that could link the Covid vaccine to excess deaths, as it argued that “releasing the data would lead to the ‘distress or anger’ of bereaved relatives if a link was found.” This was inaccurate; the UKHSA did not argue that the data could lead to the distress or anger of bereaved relatives if a link were found. In fact, it argued that the data could lead to “the families of the deceased being subjected to unsolicited approaches by the media and anti-vaccine campaigners”. This correction has been published following a partly upheld complaint to the Independent press Standards Organisation.

Well, guess it's worth spending a little time looking at it.

It appears that it's the Cloudflare Security Center scanning service? This would also explain how my unpublished service was located as I use Cloudflare for my DNS.

I haven't done any investigation but some scraper and/or bot configuration uses OS X as its user agent.

I run an unpublished service used by 1s of people and was hit by an influx of supposed OS X user agents that didn't correspond to my actual user base.

Re:OSS-SEC: 432 Linux kernel CVEs (in less than 32 hours) on Wednesday July 22, 2026 @02:22AM (#49002549)
This is a confusing comment because Debian/Ubuntu/etc (you referenced apt) have separate security repositories that exist for this purpose. They have only security fixes and don't try to unnecessarily fix "other" stuff. I have not heard of the security repos pushing out a breaking update before.

`unattended-upgrade` uses only a subset of repos (ie security) and does this for you. If you actually wanted to schedule reboots, it can do that too.

EV drivetrains can specifically cause interference on AM frequencies so EV manufacturers have been wanting to drop AM support.
Re:GitHub RCE Vulnerability: CVE-2026-3854 Breakdown on Tuesday April 28, 2026 @02:24PM (#47938391)
I am personally now drawing a clear delineation between projects for my internal consumption (e.g. ansible scripts) and projects that have potential use for the general populace. For the prior, I now host a private Forgejo instance. For the latter, I'll put it on GitHub but mirror it to my Forgejo instance.

I was pleasantly shocked that Forgejo is literally a single binary with a relatively easy config. All my internal services reference my Forgejo instance so, if I need to bail on GitHub, it's low friction for me.

You can disable the new right click menu with one registry tweak: https://www.elevenforum.com/t/disable-show-more-options-cont...
Which edition of Win 11? I've just disabled it in Win 10 and 11 via the GPO which may require some flavor of "Pro"
Re:What Happened to Egghead Software on Friday August 22, 2025 @11:38PM (#44992926)
I grew up in the Chicago suburbs and there definitely was an Egghead in my town.
SmarterEveryDay has a whole series[1] on manufacturing that covers how the US is losing/lost the ability to create tooling. I believe the "Smarter Scrubber" episode[2] is the one that explicitly talks about how not only has the US lost manufacturing capacity but it also lost the ability to spin up manufacturing. The tool and die episode also touches on it[3].

[1] https://youtube.com/playlist?list=PLjHf9jaFs8XUZ3azgCNyawIQ5... [2] https://youtu.be/GDzBE6vz5r0 [3] https://youtu.be/3ZTGwcHQfLY

I can't speak to any particular dam closure but there's a lot more to maintaining dams than one might believe: https://www.youtube.com/watch?v=XiUOBdEUqjY (Practical Engineering - All Dams Are Temporary)
You should use: calendar.monthrange
Re:Replace Philips Hue Automation with Home Assistant's on Monday December 09, 2024 @12:03AM (#42363202)
Going this route then eliminates the free/included Google Assistant integration that comes along with using the bridge and app, correct? I really would like to ditch the hub but also want to use voice activation on a few lights.
Re:GrapheneOS on Pixels getting extended Android support on Sunday December 08, 2024 @05:34AM (#42356344)
As a point of clarification: all Pixel phones starting with the 6 were guaranteed 5 years of firmware support. Some phones only had 3 years of OS upgrades (vs 5 years of security patches). Now everything is getting 5 years of OS upgrades.
Re:Postzegelcode on Monday July 01, 2024 @01:29AM (#40842797)
And like almost all things that are interesting, here's a Ton Scott video about the same topic: https://www.youtube.com/watch?v=XxCha4Kez9c
I have a reverse proxy that is in front of all my services (caddy) which uses a wildcard cert to avoid this very concern.
The US Government has been doing deficit spending and the national debt continues to grow at an alarming pace. To fix this, we can raise revenue and/or reduce spending. The easiest thing is to just improve enforcement of the existing tax laws (which are already agreed upon) via increasing the resources available to the IRS
https://www.politico.com/agenda/story/2018/07/18/tax-filing-...

Scroll down to the section that mentions Americans for Tax Reform and links to the presentation: Doing taxes keeps citizens aware of the tax burden imposed upon them by the government. A Return-Free scheme would allow the government to raise revenues invisibly

In case you're not aware of Norquist, https://gop-waysandmeans.house.gov/wp-content/uploads/2023/1...: The paradox for taxpayers is that visible, painful taxes are the taxpayer's best protection against runaway government spending and taxes.

Re:My Windows Computer Just Doesn't Feel Like Mine Anymore on Saturday June 22, 2024 @01:19AM (#40756485)
The network config for out-of-the-box Ubuntu server has been stable for 6 years. You need to modify netplan's config: /etc/netplan/*.yaml (default is 00-installer-config.yaml). This renders volatile systemd-networkd configs in /run/systemd/network which, in turn, will configure systemd-resolved appropriately.

If you've opted out of netplan, then you need to configure one of systemd-networkd or NetworkManager manually (on server, NetworkManager is only present if you've installed it).

I personally used to be opposed to netplan but I had to do some very esoteric network configuration which was super easy with netplan.

I'm guessing MasterCard is viewing this as a payment mechanism that only needs the physical customer as the payment authentication. If it's 0 friction (which I doubt), I could see people opting to just look at a camera to pay rather than fumbling to get your phone out.

Fumbling with your phone sounds like a silly statement but so did fumbling with your wallet.

> due to back-room collusion between the federal government and automotive manufacturers over fleet average MPG ratings. It's out of control and has moved into the realm of corruption.

I really don't know how you're linking MPG ratings and maintenance costs as some sort of collision. Maintenance costs certainly seem like they're increasing but I attribute that to cars turning into fickle computers that happen to have wheels and require specialized knowledge to diagnose. I do routine maintenance on my car but am terrified of doing anything that touches the 480V system.

Re:(Z-Library) Seized Domains on Wednesday May 29, 2024 @03:48PM (#40516153)
According to the indictment, the operators tried to elicit money/property from authors/publishers. I didn't bother looking up the referenced emails to see what was actually said.

https://www.justice.gov/usao-edny/file/1553496/dl

If it's legal but burdensome (somehow) to host a particular industry, requiring more money to deal with the increased burden seems reasonable. For instance, if their legal department needs to deal with complaints from various countries, that probably costs more than $250/month.

That being said, I doubt that's the core issue in this case.

My limited understanding is the location/country of the proposed violation or the violators need to be a signatory. In this case, Palestine is a signatory so the actions of Israel in Palestine as well as the actions of Hamas (acting anywhere) are within the court's jurisdiction.
Re:Big Tech to EU: "Drop Dead" on Sunday May 19, 2024 @02:43AM (#40404748)
I always scratch my head about articles that lump Meta, Apple, and Google together when it comes to regulations. They all have different problems that require different solutions.

Apple - consumers give the company for hardware which is locked into a closed ecosystem. Apple extracts extra revenue by enforcing this closed ecosystem. There can be no competition other than not purchasing their hardware in the first place.

Google - consumers sometimes give them money (for both hardware and services) which Google then uses to push their other products to the detriment of their competitors. Due to Google's size, the competition is at a massive disadvantage. Also, given that most consumers don't give them money, Google needs to make money off of their consumers and the most profitable method is to monetize PII.

Meta - consumers basically never give them money (excluding Oculus) so Meta needs to make money off of their consumers. The most profitable method is to monetize PII.

I have a little more sympathy for Google and Meta's situation as the EU wants them to maintain their free services while simultaneously reducing their ability to monetize their most valuable asset, consumers' PII (note that PII ultimately belongs to the consumer but it's still the thing that the companies use to make money). There needs to be some sort of happy medium here when people want something without paying for it but also don't want what's valuable about them being a user - their PII - to be monetized.

To be clear, these multi billion/trillion dollar companies don't need anyone defending them. However, it would be interesting to see what the EU's position would be if Meta started as an EU company.

It's pinned on the hospital because there was a CPS consultant on the hospital's payroll that was seemingly allowed access to the children/records as a CPS consultant by using their hospital employee role.

Basically, hospital employees have reasonable access to patients/records as part of their care but CPS needs to go through a process for the same access. This particular employee wore both hats to obtain alleged illegal access to the children/records.

I don't know if you read the lawsuit but, if the statements provided are true, Texas CPS exceeded any reasonable definition of appropriate behavior. The child was deemed not abused by multiple doctors as well as Oklahoma CPS. Texas CPS proceeded to take the children away from their parents and placed them in foster homes despite the standard procedure dictating they be placed with relatives. The actual behavior of the Texas CPS agents was also egregious.
Re:Jellyfin 10.9.0 on Sunday May 12, 2024 @03:40AM (#40332834)
I've been using Plex since 2014 (i.e. before there was a need for privacy settings) and can personally attest to all of these sharing features being opt-out rather than opt-in. I was not pleased to see viewing history randomly showing up in my inbox (thankfully I don't have anything embarrassing) and then needing to search how to opt out of sharing and analytic stuff.
Re:Jellyfin 10.9.0 on Sunday May 12, 2024 @03:26AM (#40332783)
I use Arch on my desktop and it's definitely more up-to-date than stable. The Plasma 6 upgrade rendered one install a black screen and I've had to rescue installs because I wasn't on top of Arch News.

I do enjoy my Arch desktop but it's a labor of love.

Re:Jellyfin 10.9.0 on Sunday May 12, 2024 @03:21AM (#40332758)
I'm guessing I've done 6 in-place upgrades over the last decade and have yet to have one fail.

It sounds like maybe you've had issues but the process does typically work.

Older »