GoblinSlayer
Re:European RISC-V Industrial Computing Initiative
on Tuesday November 03, 2026 @05:45AM (#50350326)
I don't understand. You will trust it only if you make it yourself?
Re:Resisting Cognitive Surrender
on Tuesday November 03, 2026 @04:16AM (#50349764)
I don't think anybody tries into KISS, most software is bloated and LLMs copy it, they fundamentally can't think out of the box.
Re:European RISC-V Industrial Computing Initiative
on Tuesday November 03, 2026 @03:22AM (#50349436)
There's glorious open hardware rpi pico 2.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
on Sunday November 01, 2026 @10:53AM (#50326778)
At least it doesn't silently launch nuclear rockets, smaller bugs are manageable, like accidentally forcing everything to be UTF-8 is basically nothingburger.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
on Sunday November 01, 2026 @10:07AM (#50326365)
Google already did it and resorted to unsafe rust to be competitive.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
on Sunday November 01, 2026 @10:01AM (#50326322)
May CGNAT save you.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
on Sunday November 01, 2026 @09:48AM (#50326222)
Yep, and UAF is RCE. DoS must be reliable, like memcpy_s bounds check failure that cleanly aborts the process.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
on Sunday November 01, 2026 @08:31AM (#50325527)
Doesn't http3 support it?
Re:Breaking the Open Web Won't Stop the Bad Bots
on Saturday October 31, 2026 @06:33AM (#50314714)
I don't think anybody does a decent ua check, webdevs test only in their favorite browser, i.e. Chrome, so only Chrome is allowed. Is it intended? The very purpose of webcompat is to masquerade as Chrome.
How do you even implement an ua check? How many browsers do you know? How many browsers you don't know? How do you implement an ua check for a browser that will appear tomorrow?
I wrote my own http downloader. Do you know about its existence? How do you implement an ua check for it? Can I call it "wget" to make ua check easier for you? Can I call it "Mozilla/5.0" so that it's compatible with your ua check so that you don't need to change anything?
Re:Linode Security Incident
on Friday October 30, 2026 @08:05PM (#50311795)
Pluggable network stack.
Re:Linode Security Incident
on Friday October 30, 2026 @07:41PM (#50311603)
As I understand, it's LPE. Cloud hosting was always tough.
Re:Linode Security Incident
on Friday October 30, 2026 @07:36PM (#50311561)
I think, it's about reviewing code for bugs.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @12:34PM (#50306354)
Wasn't there a project that aims to replace management with AI?
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @09:14AM (#50303421)
It's also not prohibited to kill bad actors without trial.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @07:30AM (#50302534)
They just freely delete their credit.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @07:17AM (#50302426)
A supply chain attack? Do all these exchanges routinely import new cryptocurrencies?
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @06:54AM (#50302240)
Normally they publish the wallet id, then you send money there using any method you want. What Gemini would do in your place?
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @06:26AM (#50302010)
They can just pocket the corresponding 5.6b USD.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @06:14AM (#50301917)
If you mean Visa's porn jihad, that's most likely a saudi dude threatening to pull a large investment, it obviously has nothing to do with children, but any haram.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @05:09AM (#50301425)
You steal billions, you just pay the police 100000000 to look away.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @04:52AM (#50301321)
Frozen assets are still a wallet with no recourse.
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @04:16AM (#50301099)
>I'll get my money back.
If the police retrieves your money from the thief?
Re:Binance-hacker-1029 – $5.6B stolen from Binance
on Friday October 30, 2026 @04:03AM (#50300997)
You must be rich as Soros to buy a coffee for USD interest. But if you're that rich, you don't need interest, because you won't be able to spend what you have in your life.
Re:The case of the 9 bit AES key
on Thursday October 29, 2026 @06:40AM (#50286979)
Maybe certifications are different? A certified Electron engineer might just read the tutorial how to spend zero effort on apps.
Re:The case of the 9 bit AES key
on Thursday October 29, 2026 @04:05AM (#50285823)
S/MIME?
Re:Ten days later, Git on macOS still trusts the compromised eMudhra c...
on Thursday October 29, 2026 @03:36AM (#50285593)
AFAIK a container build just puts files into a base image, this creates a sort of a commit chained to the base image commit. This means to update the base image you only need to rebase that commit on top of the new base image branch automatically.
Re:Small Programs and Languages
on Monday October 26, 2026 @02:18PM (#50248434)
t3x does it.
https://t3x.org
Re:Today, we hacked what we'd set out to hack: the iPhone
on Saturday October 24, 2026 @05:38AM (#50219587)
In case of ms it's often concurrent userland-kernel transitions, and kernel doesn't control how and when they happen. Copilot is busy optimizing windows 11 and can't riir the kernel.
Re:Using Claude to reduce the attack surface of code
on Friday October 23, 2026 @05:21AM (#50206363)
TLA+ is designed for verification of distributed systems.
Re:Using Claude to reduce the attack surface of code
on Friday October 23, 2026 @04:41AM (#50206085)
What if you ask Claude to audit the codebase and send the result to the authors encrypted with GnuPG, without revealing?