News for hackers. Stuff that matters.

Flimm

Re:cp: -r or -R? on Saturday October 03, 2026 @09:07AM (#49943947)
rsync does not have the ability to copy a file using the filesystem's copy-on-write feature. This is unlike cp, which has the --reflink flag. Here's the bug report on GitHub which the developers closed as "won't fix for now":

https://github.com/RsyncProject/rsync/issues/119#issuecommen...

Re:Banks and Credit Unions to Team Up Against Apple Pay Fees on Saturday September 26, 2026 @04:48PM (#49860396)
What you are missing is that a market left to itself is not necessarily competitive when monopolies/duopolies form.
Re:Obscura: The first VPN that can't log your activity on Wednesday September 23, 2026 @02:21PM (#49820320)
I take your point, but I think Obscura's design would make this a bit more difficult. It would be difficult to distinguish Obscura users from regular Mullvad users. Firefox offers free VPN through Mullvad, so presumably it's not that distinctive to be using Mullvad's network.
Re:Obscura: The first VPN that can't log your activity on Wednesday September 23, 2026 @01:34AM (#49812035)
The claim isn't merely that Obscura doesn't log activity. The claim is that Obscura is unable to, because it is a relay to another VPN provider Mullvad. That is distinct from other VPN providers.
Re:Ubuntu 26.10 completes transition to Rust-based coreutils on Tuesday September 15, 2026 @01:05AM (#49707948)
Neither. They basically see Rust as the future. They want to be able to attract young contributors and to hire young employees who are excited about Rust and who want the safety features. Bear in mind, the average age of the Linux developer is increasing. They also see technical benefits in Rust. And they are increasing test coverage of both the Rust tools and the tools written in C, IIRC.

My source is this interview with the VP of Engineering at Canonical on this topic: https://corrode.dev/podcast/s05e05-canonical/

Google is making it increasingly difficult to freely install software from app stores that they don't control and tax. Quoting https://keepandroidopen.org :

> Starting in 2027*, a silent update, nonconsensually pushed by Google, will block every Android app whose developer hasn't registered with Google, signed their contract, paid up, and handed over government ID.

> Every app and every device, worldwide, with no opt-out.

In practise, Flatpak packages have many more permissions than you might expect, and the sandbox feature gives a false sense of security. For example, the Obsidian Flatpak package [0] is given all of the following abilities without explicit permission from the user (the user has to know where to look to find out about them):

- Home folder read/write access

- System folder media

- System folder mnt

- Microphone access and audio playback

- And more...

The Obsidian snap [1] is installed with the --classic flag, which also grants access to the whole home directory, but at least you have to consciously specify the --classic flag to grant this permission.

[0] - https://flathub.org/en/apps/md.obsidian.Obsidian

[1] - https://snapcraft.io/obsidian

Re:Google Cloud Fraud Defence is just WEI repackaged on Friday May 08, 2026 @11:58AM (#48064964)
I disagree that this kind of scheme is inevitable. We can "evit" it through thoughtful discussion, foresight, alternative mitigations, and even regulation. Certainly, Google can choose to avoid it. On the other hand, the AI bubble will inevitably burst, since compute is not free. I look forward to post-bubble AI.
Re:How to Disable Firefox's New Emoji Picker on Thursday April 30, 2026 @07:58AM (#47961160)
> On GNOME we already have a global shortcut for some emoji picker, I think it's Super + , or something

Actually, on most distros, the default keyboard shortcut for the emoji picker on GNOME/GTK is ctrl-. (same as the Firefox shortcut). This only works on apps that support it. Older Firefox versions did not support GNOME's emoji picker at all, but Firefox 150 supports GNOME's emoji picker using the expected keyboard shortcut.

Re:Warp is now Open-Source on Tuesday April 28, 2026 @05:20PM (#47940959)
The GPL would not have prevented the scenario that the top-level comment complained about. Nothing in the GPL requires rich downstream projects to send money to poor upstream projects. That's by design. The four freedoms that Stallman preaches intentionally permit distributing the software to free riders.
Re:You don't want long-lived keys on Saturday April 25, 2026 @05:56AM (#47900137)
Secrets tend to be randomly-generated tokens, chosen by the server, whereas passwords tend to be chosen by humans, easier to guess, and reused across different services and vendors.
Re:Highlights from Git 2.54 on Thursday April 23, 2026 @08:52AM (#47875154)
To clear up any confusion, Git runs pre-commit hooks, and they can be written in any programming language. There's a completely separate and independent project that gave itself the confusing "pre-commit" name, and it is written in Python. This project aims to make it easier to configure pre-commit hooks. An alternative to it is "prek", written in Rust.
Re:Kilobyte is precisely 1000 bytes on Wednesday February 04, 2026 @03:54AM (#46883295)
Uppercase "B" stands for byte, and lowercase "b" stands for bit. But it's very common for people to miss the distinction, sadly, even professionals are sloppy.
Re:Total monthly number of StackOverflow questions over time on Sunday January 04, 2026 @05:52PM (#46493240)
> "why did you close my question as a duplicate of how to do X with a list? I clearly asked how to do it with a tuple!" (for values of X where you do it the same way.)

This is a great example of a question that should not be closed as a duplicate. Lists are not tuples in Python, regardless of how similar potential answers may be.

It's less meaningful than you think. Widespread prejudice does give you signal on public sentiment, but it doesn't give you much signal on whether the prejudice happens to coincide with reality or not, compared to other methods. People should be open to having their prejudices corrected by more relevant information.
Google doesn't allow you to recover a Google account using only your recovery email address. Despite its name, the recovery email address is not used to recover Google accounts AFAICT, it's only used to receive notifications about security-related events.
The eBooks in Kobo's store are also locked down with DRM.
Can anyone find even one DRM-free ebook on Amazon Kindle?
Re:Make product worse, get money on Saturday November 22, 2025 @07:59AM (#46014453)
Amazon made $56 billion just in advertising revenue in 2024.
Re:Unicode Footguns in Python on Thursday November 06, 2025 @01:34AM (#45832163)
I strongly disagree. Python 2 had no bytes type to get rid of. It had a string type that could not handle code points above U+00FF at all, and could not handle code points above U+007F very well. In addition, Python 2 had a Unicode type, and the types would get automatically converted to each other and/or encoded/decoded, often incorrectly, and sometimes throwing runtime exceptions.

Python 3 introduced the bytes type that you like so much. It sounds like you would enjoy a Python 4 with only a bytes type and no string type, and presumably with a strong convention to only use UTF-8 or with required encoding arguments everywhere.

In both Python 2 and Python 3, you still have to learn how to handle grapheme clusters carefully.

If you're talking about free-as-in-freedom software, promoted by Richard Stallman and the FSF, then they have always been clear that Free software must not forbid commercial usage or require payment. Vendors are perfectly free to sell copies of Free software if they wish, but the license cannot forbid making copies and derivatives, even for commercial usage. See:

https://www.gnu.org/philosophy/free-sw.en.html#selling

Re:Python 3.14.0 on Wednesday October 08, 2025 @04:36AM (#45513617)
Does the library handle arguments that begin with a dash?

Does this code print out the contents of the file named `--help`, or does it print the documentation for the `cat` command?

  filename = "--help"
  await sh(t"cat {filename}")
Re:Python 3.14 on Wednesday October 08, 2025 @04:29AM (#45513566)
If you have uv installed, trying out Python 3.14 is as simple as running this command:

  $ uvx [email protected]
  Python 3.14.0 (main, Oct  7 2025, 15:35:21) [Clang 20.1.4 ] on linux
  Type "help", "copyright", "credits" or "license" for more information.
  >>> 
That was beautifully easy! (Make sure you're on the latest version of uv first (v0.9.0))
Even personalised advertising can be done without sharing personal data with 100+ third parties. For example, ask the user to fill out a survey about their interests, and then serve them more personalised ads based on their survey answers, all without sharing personal data with third parties.
There are many ways to monetize free online websites. The most obvious way is advertising. Advertising can be privacy-respecting.

The Guardian in particular is funded by a trust fund, by donations, by advertising, and maybe by other sources of revenue as well.

This article is on theguardian.com , and it has started to require a paid subscription for all readers who don't want to share their data with 131 third parties. There is no privacy-respecting free option. The paid subscription is £5 per month, and it doesn't eliminate all ads. (This requirement may depend on which country you're in.)
The Winnie the Pooh books by A. A. Milne are no longer under copyright, that copyright expired. However, the Disney animations of Winnie the Pooh are still under copyright, and they have a distinctive style compared to the illustrations in the books. It's mainly about copyright, not trademarks.
Re:Pnpm has a new setting to stave off supply chain attacks on Friday September 19, 2025 @07:30AM (#45300388)
Thank you for the explanation. And thank you for your important work making the ecosystem more secure, for the benefit of 5.5 billion Internet users.

Older »