News for hackers. Stuff that matters.

FredFS456

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @06:15PM (#50320782)
Note that even the latest OpenWRT is vulnerable to this, I'm running OpenWRT 25.12.6 and the kernel version is 6.12.112
https://abliteration.ai/

But also if you're working on a local device, any Chinese model will agree to it most of the time.

Re:Show HN: Steal My Bitcoin on Sunday October 25, 2026 @04:44AM (#50229507)
DoS is independent of the vulns though. From what I understand, you can craft a request of x size which consumes ~200x the memory on the server. Parallelize that and you can DoS servers with only a few GB of memory, even with the 1MiB Nginx limit.
Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @07:14PM (#50226433)
They can be running a vulnerable version of PHP but also recording all traffic in a way that does not allow for wiping evidence afterwards. For example, if the PHP server was behind another server routing the raw IP packets and running tcpdump. Since the author of the site controls the TLS cert private key, TLS does not protect again the author eavesdropping.
Re:Xiaomi MiMo v2.6 on Tuesday September 22, 2026 @01:53PM (#49805410)
I prefer GLM 5.3 (Flash or not) over Deepseek 4.1 Flash because the GLM models are significantly less verbose.
Re:The Largest Electric Aircraft Just Flew [video] on Friday September 04, 2026 @08:15AM (#49563521)
At cruise, yes. However during takeoff and go around they run at higher RPM to develop more thrust. Using batteries for takeoff and only using fuel for cruise or backup power is smart.
Depends on where you're flying to and from in Asia, and how far.
Re:Crypto in 2026: Oh, This Is the Bad Place on Tuesday June 23, 2026 @12:24PM (#48647399)
From my own comparisons, when converting, say, $1000 USD with Wise the spread+fee is about half of any of the banks that I have accounts with. Where Wise takes a huge cut is if you convert $10 at a time.
Landlines only work when there is no power if: - you use an old school landline phone (not cordless) - your landline is actually copper going to the house (I've seen fiber to house + conversion to twisted pair by a box with a battery) - upstream infrastructure either still has (possibly battery) power
I think specifically for example of getting Nvidia chips to China, many Singaporeans would say that that is only illegal because the US deems it so. There is no moral reason.
I agree with you that the migrant workers are effectively a serf class. However, I think it's fine that the SG government severely discourages owning a car. It's a small island with lots of people, there would be gridlock if everyone wanted their own car. The public transportation system is amazing and works well.
I haven't used Dark Sky but on my Android phone, Meteoswiss is definitely very very good
They do have very basic EQ but for sure you have enough documentation to modify the speaker itself if you'd like.
I bought one just this week because of this. They really went above and beyond:

- mechanical CAD, schematic and PCB files: https://docs.teufel.de/download/MYND/Open_Source_Hardware_Fi...

- firmware: https://github.com/teufelaudio/mynd-firmware

- Bluetooth API documentation: https://cdn.teufelaudio.com/image/upload/v1748589486/product...

- battery repair/replacement guide: https://cdn.teufelaudio.com/products/MYND/pdf/Teufel_MYND_RM...

I believe that they designed the mechanical parts to be 3D-printable as well.

Re:Why Nextcloud feels slow to use on Monday November 03, 2025 @09:07AM (#45799067)
I think you could replace Nextcloud's syncing and file access use cases with Syncthing and Copyparty respectively. IMO the biggest downside is that Copyparty's UX is... somewhat obtuse. It's super fast and functional, though.
Re:The Synology End Game on Friday August 29, 2025 @05:08AM (#45061859)
There are some new NAS boxes hitting the market (UGreen being one of the brands that are cheaper, but also Minisforum) which have solid hardware but aren't locked down at all. They're just x86 boxes with bog-standard hardware so you can just run whatever OS you want, and they support that use case.
Platform screen doors can isolate tunnel temperatures from platform temperatures.
Re:Why are banks still getting authentication so wrong? on Tuesday May 13, 2025 @03:17PM (#43976556)
Zurich Kantonalbank (ZKB) has a very similar system, probably because they're also a big bank in Switzerland
Multimode transceivers are still a slight bit cheaper ($30 for 10GBASE-LR vs $22 for 10GBASE-SR on fs.com) but that's more than offset by the single mode fiber being slightly cheaper, even for short distances.
Re:Announcing the data.gov archive on Friday February 07, 2025 @06:32AM (#42971488)
IMO US elections have already been less-than-fully-democratic for a while, what with the voting registration and ID nonsense, as well as obvious gerrymandering and voter intimidation. At the very least, significantly less democratic than a number of other western countries.
> There was a LTT video where they mentioned how WiFi used to be better in some locations so those rooms were more desirable and the hotel's solution was to make it standard for everyone. They seemed to be suggesting that they brought down the quality rather than balanced.

This was from their podcast 'WAN Show' a week or two back, specifically about hotels in Las Vegas.

Re:Exotic New Superconductors Delight and Confound on Friday December 13, 2024 @05:52PM (#42413058)
There's some fusion startups successfully making >10T magnets using ReBCO tape now, so hopefully things will scale up/cost down enough to be used in MRIs.
Re:Exotic New Superconductors Delight and Confound on Friday December 13, 2024 @05:49PM (#42413044)
There's a few fusion startup companies using superconducting ReBCO tape to make their magnets. From the results that they're getting, I think we've largely cracked the engineering problems of making "wire" from ReBCO and it's largely just a scaling game now. I do want to point out that they're still cooling with liquid hydrogen at ~20K for high current capacity though.
A cheap USB switch would also work, that would reduce the switching to switching monitor inputs and pressing the button the USB switch
Re:Thunderbird for Android Now Available on Wednesday October 30, 2024 @02:07PM (#41998353)
I dunno if it's native or not, but the Fastmail app doesn't work when you're offline.
Speed of light in an optical fibre is about 2/3 that of the speed in air
Re:The all-new Kindle family, including the first color Kindle on Thursday October 17, 2024 @02:17AM (#41866899)
When I bought my Paperwhite around 2013, I noticed that ads were an option on the kindles sold in the US but not in Canada. In Canada there was only the no-ads version.
ARM cores can be used with UEFI and other hardware autodiscovery mechanisms. Not a limitation of the instruction set but rather the willingness of vendors to do the work. Many ARM servers have UEFI implemented.
Link to Dennis's website with slides for a talk he did on this topic:

https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecova...

Older »