News for hackers. Stuff that matters.

Freak_NL

Do you have kids? I can assure you that children are quite good at automatically blocking out everything related to intercourse and other sexual acts until they reach puberty. Like an advertisement for mortgages, they will just treat it as something that is probably relevant to adults, but not at all interesting to them.

Seeing some girl getting ploughed by a slab of a guy might raise questions (which is excellent, questions are always good, because then you as a parent can guide their understanding), but it won't harm them in the slightest.

Repeated exposure to porn is a problem, but that comes from teenagers having an intrinsic interest in sex and private exploration of unsavoury websites on the internet, not accidental viewing of a naughty billboard.

Are a few clips or screenshots shown on billboards going to influence people to that extent?
If the goal is to get companies to get their security in order, than showing porn is certainly one of the most effective ways. It'll put political pressure on the company that owns the billboards, for one.

Show a cute picture of Big Bird telling people to eat more pizza, and the company will just reset some passwords. Show a couple of choice scenes from Brazzers and the CEO just got a call from a government minister and suddenly the leaky hardware is getting replaced at breakneck speeds.

Works well too if the goal is just to get people to object to digital billboards.

Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @06:38AM (#50271433)
Which is a valid fallback, but only with lower speeds. If someone made the call to go manual and continue at speeds over 30 km/h…
Re:Amazon's "Digital Pacifier" for Toddlers on Monday October 26, 2026 @04:40AM (#50240870)
You don't even have to do it before you have children. You can wait until they are six or so and have the autonomy to pick what they want to watch (under your guidance). For children younger than that, you pick what they watch and when they watch it. Every time.

Do start hoarding the better shows and series you know.

Yeah, the Dutch banks really fucked us over by putting the bank code in the IBAN, so IBANs can't be moved to another bank.
Re:How Block Blast harvests its players for ad money on Saturday October 24, 2026 @05:32AM (#50219561)
I started reading on the assumption it was posted here because it was interesting, but this paragraph cinched it:

> 1. You finished your last three rewarded ads. Every time a rewarded ad starts, the rule pushes false onto a list and keeps the latest three (lines 174–183). If the ad SDK reports that the reward was earned, it flips that entry to true (191–199). The check needs all three to be exactly true:

Pointlessly spun out prose. Pointless headers everywhere. Pointless lists. Yes, we understand what a list of booleans is, and that the game looks for a state where the last three are true. No need to spell it out like that.

Why do people post crap like this? Why do people post it to Hacker News? There is some merit to dissecting an attention sink ad-driven game, but this article just makes me feel like my attempt to grasp the meaning and writer's views fails every time — like I'm trying to grasp stalks of grain in a field, but my hand keeps passing through them as if they were holograms.

I would very much like to read people's thoughts with a forbearance for awkward prose, bad spelling, or suboptimal outlining, instead of that I get rewarded by text where the human who prompted it is suddenly absent.

Fuck this new AI world.

Re:The Quake Fan who built the map editor everybody uses on Saturday October 24, 2026 @04:32AM (#50219281)
Anyone looking to get into single player Quake should grab an engine like IronWail and just go through all three Brutalist Jams. These are essentially map packs with contributions from various mappers, linked by a museum like base map (as many jams do). Each successive Brutalist Jam pushes the boundaries of what a thirty year old base game can still do.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @03:38AM (#50177297)
Log4Shell required that the attacker be able to generate a log message containing specific parameters. It was a severe exploit, but not one that worked in every Java application with the affected Log4j versions. Attackers had to find calls that logged user submitted text or query paths first. So the list of prerequisites was larger: had to be using Log4j and had to have logging of user generated text.

Still a very large attack surface, but not nearly as ubiquitous as this one.

Nope. The basic rule is that you don't do things with wolves you shouldn't do (like feeding them and thus gradually letting them get comfortable around humans), and that you don't do boneheaded shit like leaving a small child alone in nature (which is common sense in most of the world). For a wolf a three year old child is just about the same as a boar or small deer.

Anyone over the age of 12 though? Wolves won't bother you unless you've managed to fuck up nature to such an extent that they can't find their usual diet (deer, boar, etc.), and even then attacking an adult is really desperate.

There was an interesting interview with an Italian expert about wolves and people in the news this week:

https://www.nrc.nl/nieuws/2026/10/15/we-zullen-moeten-wennen...

Scroll down to where they do that under Spatial Efficient.
Iosevka is more of a parfois-serif I guess.
I have no idea why they chose 'ligation' instead of just ligature, but it was jarring every time I encountered it.
I was wondering why it did that. This is really the kind of site where this is not a feature you should use.
NEVER run out of improvements to be made. Rule number one of getting audited.

Always leave an obvious-once-you-see-it, but minor, defect somewhere for the auditor to latch on to. One they can earmark for you to come up with a plan to address the issue before they grant you the certificate (and which you'll be able to write up in no time because you planned for it).

A good auditor and a company actually taking this stuff seriously can benefit from 27001. That probably accounts for 5% of all 27001 certifications out there.

If you're lucky you get an auditor who's just there along for the ride towards early retirement in a few years, and who'll joke with you and eat your lunch. Had one of those once. Doesn't help your security one bit of course, but it makes audit time more relaxed.

ISO 27001 means they have processes in place that proof that risks are monitored and continuous improvements are being made. ISO 27001 means they have policies, and can show those policies to the auditor.

Never assume that having that certification means that shit is actually secure. It just means the company can do the audit dance.

Re:Fridges in French supermarkets hit by cyber attack on Monday October 12, 2026 @01:08PM (#50059450)
* Fridges are welcome to send a panic message.

* Fridges are read-only through their remote interface.

Both of these can be true if you must connect them to the internet.

Tongue-in-cheek, but my Moccamaster which I bought second-hand is still doing great after 15 years. Two deep cleaning sessions in all that time and just running it with vinegar a couple of times a year seems to be all it needs.

The device is dead simple. No advanced electronics. Nothing complex that can break. Just a coffee maker fine-tuned to near perfection.

The only flaw it has is the handle for the pot. I've resorted to replacing the plastic handle with a fancy walnut one I made myself. I needed that because we tilt the pot sideways to fill the reservoir with water (because of the placement on the kitchen counter and the cabinets above), and that plastic handle is not designed for sideways stresses.

Re:All I wanted was a custom domain email on Thursday October 08, 2026 @06:47AM (#50004209)
Thanks, good to know. I know they removed a family plan at one time, but I hadn't seen this new one yet.
Re:House with 15m underground tunnels for sale for 300k on Wednesday October 07, 2026 @09:29AM (#49992582)
I wasn't impressed by the 15 metres, but it turns out that is the maximum depth reached, not the length of a tunnel.
Re:All I wanted was a custom domain email on Monday October 05, 2026 @02:54AM (#49961498)
Same here. Fastmail is great. The only thing that bothers me is not having a family plan so I can cheaply give my kid his own inbox in due time.

Although to be fair, I welcome competition, and I like seeing people end up with other solutions. I would hate it if Protonmail and Fastmail were the only viable services offering this.

Re:Show HN: Free alternative to graphics design giants on Monday September 28, 2026 @10:39AM (#49878744)
Tip: you are blocking text selection for the terms of use and in a number of other spots. People often use text selection to copy and paste words for a variety of reasons. Some people select blocks of text to help mark what they are reading, and some people use it to paste the words in a dictionary or translation service of their choice. (Or when making a bug report to copy the version number from the about screen.)

Don't block text selection for prose, only for UI elements.

WooCommerce.

Unless you want and can go with Shopify and go all in on their platform, WooCommerce is what you need to host an online store on hosting of your own choosing. Alternatives seem to lack the numbers to tackle issues when something goes wrong without too much downtime.

(WooCommerce being a popular WordPress plugin.)

Re:People Hooked on Vapes Try a New Way to Quit: Cigarettes on Wednesday September 23, 2026 @09:35AM (#49815937)
For many demographics nicotine by itself poses a clear health risk. Basically that's pregnant women and anyone under 25 whose brains are still developing, according to the CDC. The WHO further states that nicotine use also increases cardiovascular risk, and that's for everyone. This last one was new to me too until a while ago (although fortunately I never take nicotine in any form).

That is what is left if you ignore the big one, which is its addictiveness. By itself that is probably not directly harmful, but the ways of consuming nicotine mostly are. Nicotine pouches carry some health risks, but are obviously not nearly as bad as snus and other crap like that containing tobacco.

Re:People Hooked on Vapes Try a New Way to Quit: Cigarettes on Wednesday September 23, 2026 @02:50AM (#49812547)
A common assumption. A filter filters out harmful stuff right?

Except they don't:

https://exposetobacco.org/wp-content/uploads/Cigarette-Filte...

There have been calls in the Netherlands (perhaps even at the EU level) to ban filtered cigarettes, for the simple reason that they are misleading and offer no protection, but are harmful to the environment because of the non-degradable micro-plastics.

Re:People Hooked on Vapes Try a New Way to Quit: Cigarettes on Wednesday September 23, 2026 @02:32AM (#49812438)
Part of the problem is that vapes easily let you ingest a lot more nicotine than cigarettes. Researchers in the Netherlands found that some teens are vaping so much they effectively have the nicotine intake of a three pack a day tobacco addiction. This is due to a combination of (illegal) vapes being available in all sorts of fruity and hip child-friendly flavours, illegal vapes simply containing more nicotine, and vapes coming in reservoirs good for 9000 or so 'puffs'.

If you stuck with plain vapes bought through a legal channel, that risk factor would have been absent.

There is quite a large gap between checking in with your kid and having an AI analyse their homework and assignments and raising an alarm if anything appears to slip. The latter is a solid WHUP-WHUP-WHUP-WHUP-WHUP on the helicopter parent spectrum.

Missing homework once or twice is part of life and a really good life lesson with low risk besides.

Re:I said no and Apple said yes on Tuesday September 22, 2026 @05:56AM (#49798761)
Sensible. Add in a 'Nee, flikker op met je kutcookies' button for cookie consent banners, and you're golden.

This 'maybe later' dark pattern seems to have gained so much traction that UX folk just use it because everyone uses it. There is probably some handwavy reason for it that amounts to not wanting to give the user the feeling they are doing something definitive, but it just ends up being another grain of sand on the micro-annoyance pile of today's tech.

Keeping track of your kids' homework is your concern? Doesn't it only become your concern, briefly, when the school contacts you about your kid not getting their homework done?
Re:Ask HN: How to recover Google auth after phone stolen? on Thursday September 17, 2026 @03:06PM (#49745131)
OTP works with a password manager too. I have Authy on my Android, and Pass on my Linux computers. The second is backed up properly. This approach just means that enabling 2FA (which is mostly OTP in any case) just means registering the OTP URI in two locations instead of one.

Additional benefit: I can generate an OTP for any service protected like this without having to get my phone from wherever it is.

Older »