News for hackers. Stuff that matters.

DaSHacka

Re:European RISC-V Industrial Computing Initiative on Tuesday November 03, 2026 @07:11AM (#50351015)
> That goes to show how low the things have gone with the US administration.

As others ITT have pointed out, this is a vibecoded site from one guy lol

https://news.ycombinator.com/item?id=50349860

The interesting thing is how unanimous it is. The zoomers on the left and right disagree on just about everything, except they both agree that radical change needs to happen. Maybe the more moderate zoomers would disagree, but I wonder how many would even identify as such by now.

I'm not exactly sure what's going to happen in the future, but I'm sure that it's going to be wildly different from the current status quo in a number of countries.

Well, and the fact that GP's bag literally broke the car, but sure it's only because the seats weren't leather.
Re:Herdr has released native app on Thursday October 29, 2026 @10:31PM (#50299174)
Darn, title had me thinking they released a mobile app to compliment the TUI daemon.

termux+mosh is fine, but especially on a phone I'd love a slightly more intuitive (or really, efficient) UI. Especially as mosh breaks touch/mouse input on the remote host.

I've never understood the point of the desktop GUI harnesses to run TUI (or at the very least, primarily text-based) programs anyway, but perhaps they're better for onboarding less tech-savvy users.

Explain how GP benefits from Goldman Sachs and similarly large companies refusing to hire them based on their immutable characteristics.
Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @05:23PM (#50296250)
But that's temporary, and phones can roam to other carriers. Bricking large swaths of consumer devices is a much more permanent effect, especially for non-phones (think modern cars, PoS terminals, and other devices with SIMs)
Re:Getting debug access on a Brother printer over Telnet on Thursday October 29, 2026 @05:22PM (#50296231)
I used to assume the same, it's apparently just laser printers and actually not inkjets with the tracking dots. Supposedly the resolution of inkjet printers is too low to embed discreet tracking identifiers that wouldn't be noticeable in the final print.
Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @01:40PM (#50292993)
>Android, YouTube

Before they acquired these, how were they doing? I'll give you a hint: they weren't exactly how we knew them today. Android was literally a concept and YouTube was bleeding money with no realistic path to profitability.

> Everything they make from within flops 99% of the time.

As do all inventions? Of course, you just don't hear about all the failings from individuals or smaller companies that went bust as a result. The important thing is the 1% that succeed are so successful it offsets the losses.

Re:DoorDash to Acquire Instacart on Thursday October 29, 2026 @11:25AM (#50290577)
Exactly, evident in how a taxpayer-subsidized DoorDash is a naive techbro pipe-dream and will stay that way, as it's predictably unpopular.
>racist [noun]

>A person who believes a particular race is superior to others. A person with a prejudiced belief that one race is superior to others.

No where does it mention this new-age "prejudice + power" redefinition.

The word is race + -ism, IE literally "doctrine/practice based on race". The word has nothing to do with power. A black dude in America who chooses to beat up a white dude for his race is racist, even under the assumption he is a systematically oppressed minority.

Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @10:30AM (#50289717)
Those complaining about slop are not the majority of users, and this is different from the "Claude think pieces" that most users take particular issue with.

The discussion is moreso about the vulnerability (and PoC) itself rather than the AI-generated aspects.

Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @10:21AM (#50289561)
Why would you assume that? Being able to brick a substantial portion of citizen's devices would be of great value to many adversaries abroad.
Re:Getting debug access on a Brother printer over Telnet on Thursday October 29, 2026 @09:24AM (#50288647)
This but especially for the tracking dots. In the age of LLMs, I doubt it would be that difficult, so long as you don't hit guardrails.
Re:DoorDash to Acquire Instacart on Thursday October 29, 2026 @09:19AM (#50288574)
How many of their customers fit this description?
> Come again? If you have umbrage against antifa, surely you’re pro fascist?

Just because they call themselves "antifa" doesn't mean its accurate. If the nazis referred to themselves as the "free puppies for everyone and world peace organization", it would not change anything about the morality of their party or the acts committed by them, despite the name.

That wouldn't work if a sysadmin implemented the rDNS lookup mentioned in TFA. The PTR specifically must end in `.googlebot.com`, not `.googleusercontent.com`.
Re:Giving chat feedback gives Anthropic your data on Tuesday October 27, 2026 @03:50PM (#50264788)
Ignoring that your account is shilling for your service, how would such a service help with anything at all?

Encrypted end-to-end..... When the issue is one of the ends is monitoring chats? The issue has nothing to do with OpenRouter or some other middleman intercepting your chats, but the end server itself (and specifically the company managing it) being of question.

The cloud is just someone else's computer, after all.

> We’ll be reading about the crimes of dodge for years

I know their tendancy to have wiring faults could certainly stand to be improved but jeez, that's a bit harsh

Re:I will no longer upload to NEW on Tuesday October 27, 2026 @12:57PM (#50262089)
Well, the BSDs are right there.
Re:I will no longer upload to NEW on Tuesday October 27, 2026 @12:23PM (#50261563)
Maybe so, but we're still going to complain when we're subjected to it.

My most recent experience was calling AT&T because the serial for my modem was whitelisted on an incorrect PON port (AKA the issue was on their end), yet if you correctly answer all the automated bot questions when calling their support line indicating you have an issue with WAN connectivity, it guides you through the process of unplugging your combo unit, waiting 10 seconds, and plugging it back in, then it automatically hangs up on you. Like thanks, that may help Sheryl who thinks the internet is down because her computer's DNS caches an expired facebook IP, but I literally cannot solve this issue myself without help from an AT&T tech lest I violate federal law by breaking into their network closet and do it myself.

I finally got through to a person by incorrectly claiming there was a billing issue and asking that rep to transfer me to the right department, skirting the bot entirely.

Re:Apple introduces the new 14-inch MacBook Pro with M6 on Tuesday October 27, 2026 @11:52AM (#50261149)
Of course it does! You just have to go to a Genius Bar after the release of a new MacBook, and tell them you're interested in buying one. They'll even handle recycling your old one for you!
> There is a significant difference between coordinating community members to brigade and notifying community members about threads which contain factual inaccuracies about the projects technical work or history.

There is no functional difference when the obvious end-result is sending a horde of external people to influence voting in the thread, the definition of brigading.

> As an open-source project and a non-profit foundation, there is not a PR team or firm. It is perfectly normal to have an opt-in notification role for community members who wish to help clarify technical misconceptions in public discussions. It is a transparent and not uncommon practice.

This is absolutely not a common practice. Point to other notable FOSS projects that act in this manner, I've legitimately never seen it from other projects.

> HN has built-in protections against external voting and flagging. Comments that end up being flagged are rarely (if ever) substantive criticisms related to the OS or foundation. In nearly every case they are comments serving to derail technical discussions into personal attacks, armchair psychology, or unsubstantiated accusations against contributors and community members

The behavior of the core maintainers and broader community is still intrinsically tied to the technical aspects of the project, and the discussion at large. When there are threads about OpenAI (and other commercial AI providers) and the U.S., do people stop at discussing solely technical aspects of both, or do they understandably bring up relevant social and communal points as well?

A security project demands particularly high trust, which is where my concern stems. I would love to use GOS without worry, my hope is that the project can course-correct and eventually put this behavior behind them.

> (like repeatedly calling community members "sycophants" and "pathetic").

The community does in fact have some sycophants. I never asserted that every single member is one, or that they are the majority of the community (as they are not). And I called the behavior pathetic, not the member. Your framing of these comments is disengenious.

> Constructive technical criticism of the project happens every day, and is welcomed without issues. Expecting those discussions to remain focused on technical aspects and factual realities rather than personal hostility isn't "crashing out".

Firstly, the "crashing out" was in the context of random trolls messing with core contributors in official communication channels and successfully getting a rise out of them (IE "don't feed the trolls and they'll go away"), though I do infact argue expecting people to solely focus on technical aspects of an inherently multi-faceted project to be unreasonable, for reasons stated above.

Depending on the service, you may not want it to be indexed anyway (IE login pages) or, if you do, most commercial crawlers have methods to allow site owners to verify that the traffic is a legitimate crawler and not an impersonator, see:

https://developers.google.com/crawling/docs/crawlers-fetcher...

(Though restricting the Google UA to only legitimate Google IPs seemingly would break Brave's crawler, though that's their own fault: https://safe.search.brave.com/help/brave-search-crawler/)

https://duckduckgo.com/duckduckgo-help-pages/results/duckduc...

https://www.bing.com/webmasters/help/how-to-verify-bingbot-3...

https://kagi.com/bot

Because "we" want the assets now, and not when we're 60 years old?
I fail to see how my being in the Graphene discord discredits anything I've said. I use the project, so I remain in the Discord to keep up with updates.

You'll notice that I always say I use the project, I think it's excellent usability-wise and I appreciate the technical work you have done. And that, in spite of that, while you are not my "sworn enemy" I still find your behavior pathetic and off-putting.

I'm all but certain the only reason you often get so many throwaway accounts that attempt to troll the official community platforms is because of how often the core contributors take the bait and 'crash out', as the kids would say.

And the reason why there's more and more real accounts on HN (and elsewhere) that now criticize the behavior of the core contributors (and sycophants) is because it's very off-putting to observe the behavior in real time. Each time you behave this way, when every single critical comment in an HN thread has been flagged due to being posted in the Graphene discord and having a legion of sycophants downvote it, there will be more and more people with raised eyebrows.

Louis Rossman comes to mind, someone who could have been a great ally to the project yet got burned by this "persecution complex" behavior for no real reason.

In that very comment you link to, every single reply of anyone even lightly criticizing the project has been flagged. That's not natural for HN, almost all discussions generally go both ways on here (for any given topic, some criticism, some appreciation) and it's clear the discussion has been brigaded.

You claim HN is suppressing your voice and it's being unfair in platforming "libel and harassment" against you, yet you'll notice none of your replies are ever flagged or silently removed by moderators. HN is simply a neutral platform, you are going to get both criticism and support unless it is explicitly suppressed by the moderators. Yet you keep throwing hissy fits when they doesn't automatically censor any dissenting opinions about you on the platform on your behalf.

I've noticed the newer frontier models are a lot better about this and are willing to give concrete answers, where before even in 90/10 scenarios they would always be wishy-washy espousing the "it depends on the circumstances" BS.
Protip, use the Wayback Machine as a proxy to get around firewalls if you only need to view content from a static site.

My work blocks every commercial AI service, but I just want to read the static blogs and benchmarks from the large labs to keep up with recent news and developments in the space and the Wayback Machine trick works perfectly for that.

Most domains are only like ~$10/year. I already have a handful registered for potential project ideas because they're borderline free, for major vulnerabilities I would do the same.
It will never not amuse me that Mozilla changed the Brotli extension to avoid this very connotation

https://bugzilla.mozilla.org/show_bug.cgi?id=366559#c147

I think GP may not realize it's (likely) all legitimate accounts, just from 'devoted' GrapheneOS sycophants. They just get sic'd on HN comments if they opt-in to "Do you want to opt-in to mentions for help addressing inaccurate media coverage of GrapheneOS?" on the official Discord.

Evidently GP hit a nerve[0], though I don't know what they were expecting trying to poke the bear like that.

[0] https://files.catbox.moe/7a0wr2.jpg (From the official GrapheneOS Discord)

Older »