News for hackers. Stuff that matters.

Good4boothee

Re:uBlock Origin filter to block autoplay videos in TechCrunch on Tuesday November 03, 2026 @05:47AM (#50350345)
Last time I tried to manually block some autoplay video with ublock I ended up with invisible video, that still started to play sound, sometime after page loaded. Maintaining filter lists is thankless job, at least looking at ublock github issues tab, where people complain about broken filters few minutes after target page made some changes.
Investors drop stock after report when earning didn't reach predicted level, but confusing part is that sometimes the results are exactly as predicted (and in theory priced in) but some investors are still disappointed and start the sell-off.
Common circuit breakers are at: 7%, 13%, 20% or 10%, 15%, 20% So a 25% drop, but for entire market, would be very newsworthy. As in: the press would be already trying to choose between calling it black/bloody/Halloween Friday.
There are multiple YT channels proclaiming Russia is finally collapsing/losing war with Ukraine, huge "It is happening" in thumbnail; few of them put out a variation of such video every week, not even bothering to excuse their previous, wrong prediction. And any reporting related to AI bubble is exactly as terrible. I might as well just check Bloomberg/FT/QZ, news there will be devoid of technical details and still more useful than those endless armchair-experts' speculations.
Re:Deterministic Factoring in Time N^O(1) on Friday October 30, 2026 @08:53AM (#50303194)
Does this impact RSA in any way or those deterministic time methods are irrelevant (as in much too slow) for key breaking?
How? In past it was sold to website owners as something that will improve their position in search results. Now they see for what it was, a way to make it easier for Google to slurp content for their "zero-click search results" feature. And now even that clutch isn't required, LLMs can rip the content from any website, regardless of their owner's intentions.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @05:35AM (#50301596)
> Tether's entire business model, providing an almost-unregulated USD cryptocurrency, relies on them not arbitrarily banning people

No, their entire business model relies on bank/CC providers don't ban them. Somehow, they treat all crypto related transactions as iffy but USDT, bought to buy crypto, got under much less scrutiny. The entire problem their solver was that new users couldn't move cash to exchanges fast enough to join bull runs.

Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @12:03PM (#50291235)
Direct Carrier Billing is (was) also a thing. It had crazy silent mode where site can charge you (adding new item to your normal phone bill) just by serving special HTTP header - that your mobile internet provider picked up. As ripe for abuse as it sounds.
Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @09:45AM (#50288962)
> I'm not going to mess with biotech because I have no idea

Looking at https://news.ycombinator.com/item?id=50276998 lack of knowledge doesn't prevent people from using random biotech keywords as measure against LLM's assisted reverse engineering.

Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @09:35AM (#50288803)
Everyone here complains about moderators closing questions and those ridiculous answer rewrites. Didn't anyone encounter rude question authors? Most entitles people on the earth. I pity the LLMs and discord channels that now handle them. By the way such encounters also led me to discover that SO places limits on removing own content posted there.
Re:Qwen has alter egos triggered by flipping a single neuron on Wednesday October 28, 2026 @12:24PM (#50276256)
I am more afraid of accidental situation (as opposite to customer support bots, designed to give no quarter) where such bug propagates (by slop being included in training set) and all LLMs agree with other while humans are considered the weird ones, and nothing can cause the former to change their mind.
Re:Nvidia and Micron Make Up 34% of America's Earnings Boom on Wednesday October 28, 2026 @09:23AM (#50273155)
I just want to remind everyone that SK Hynix was once able, on its own, to bring average yearly growth for entire South Korea economy down to zero.
The solution needs to be convenient, in practice that trumps security every time. If i need to run my existing apps in Linux VM under seL4, others, fully featured hypervisors will look more enticing.
Yeah, for any legit business that sounds like unrequested stream of sensitive messages, that they have to dispose of, preferably without even reading them.
The common part for all those horror stories is usually "I wrote to people from X I knew, and they said they can't do anything about it either".
Re:Anthropic Is the Most Ridiculous IPO of 2026 [pdf] on Tuesday October 27, 2026 @08:42AM (#50258253)
In general? It wouldn't. But there already exist ETFs that include/exclude companies or entire sectors based on some ESG/SRI criteria. So, there are investors who care about such concerns.
Re:Python's experimental JIT to be removed on Tuesday October 27, 2026 @08:29AM (#50258125)
Looking at amount of JIT related (for example type confusion) security bugs in V8 I am not surprised other developers are vary of its inclusion.
Re:PhysicsForums and the Dead Internet Theory (2025) on Tuesday October 27, 2026 @06:39AM (#50257068)
> There is tons of real, human interactions online. I see it on reddit constantly.

Are people responding to submissions, reposted by bots, a genuine interaction? It is one kind to know there are some bot accounts on reddit, and other to experience it first handed. For example, recently some karma farmer posted half of original post, and comments that appeared under it still referenced second page, because entire threads also got copied verbatim from previous submission, using different accounts.

It really feels like reddit admins don't do enough to combat that behaviour. Maybe, just like admin of PF, they think fake activity is better than none at all?

Isn't that in a huge issue in general, as software keeps getting more and more complex? If someone asked me to guess if random network attached device has nodejs somewhere inside, I might as well flip a coin.
Isn't average corporate worker attrition at 11-12%? so they could achieve that much just with hiring freeze.
Re:Anthropic S-1 on Monday October 26, 2026 @09:56AM (#50243787)
I stopped at "Our Capital Structure" section. When it says "Class F stock" gets 50.1% voting power, doesn't it in practice make all other classes are non-voting, not just the "Class N"?

Edit: the risks sections feel like California's Prop-65 disclaimers

> Our results of operations may also fluctuate due to a variety of additional factors:

> - the number of employees hired

> - declines in the values of foreign currencies relative to the U.S. dollar

That huge list feels completely random. Are all S-1 that bad? They can be punished for omission, so they list everything that could happen even if doesn't really make any sense?

Re:Websites Should Be Printable on Monday October 26, 2026 @08:55AM (#50242796)
> Here's the functions this does for me, in order:

Is for anyone else, the text that follows, unreadable black on almost black background?

Re:AI compute is the new oil–and needs a new market on Friday October 23, 2026 @08:01AM (#50207608)
It depends on exact wording but in general Moore's law has been dead for few years. Compute (CPU/GPU) continues to squeeze more performance with better architecture, but RAM and NAND(SSDs) are already as simple as possible and only improvements in density come from stacking multiple layers.
> Then you will have to pay a different rate for better graphics.

That is already a thing in NVidia Now, why would Xbox do it differently?

With how prevalent the autosave is in modern games I got used to it and I kinda assume it will be true for all of them. I was totally surprised when Lok:SR remaster crashed, and I finally noticed it doesn't do any on its own, like ever.
Isn't this just moving goalposts? I remember people asking few months ago "if LLMs are so great at programing why we aren't seeing more aps". And latest Steam Next Fest was flooded by AI generated game demos.

The people who "don't know much about X but want to do X", use LLMs to bridge the gap. The barrier to entry still remains and is different in niches/industries. Why would OpenAI waste their time and money checking where LLM are already good enough, when other people will perform discovery and even pay them for that privilege?

So how exactly does Cash App verify users that signup for new accounts? If the process is so lax, shouldn't they be forced to temporary block it? To say nothing about money laundering charges, that would be raised against any bank in such situation.
Re:Railway Security Disclosure on Thursday October 22, 2026 @06:13AM (#50193428)
Really? Security announcement on blog subdomain, while the largest text on their home page is "Ship software peacefully" slogan, without any mention of the issue? And after looking at it for a while I still don't know what it exactly is, some kind of Terraform/CloudFormation GUI?
They are both - with Anthropic - gatekeeping access to their most advanced models in name of "security", so it is up to them to defend it as the right decision.

The entire article is form over content, it boils down to obvious: economics changed, LLMs actually can check every minor release diff for security fixes, including decompiling binary files; if you have any idea how to improve process of releasing updates, tell us.

Re:PHP 8.2.35 on Wednesday October 21, 2026 @11:37AM (#50182807)
Really makes me appreciate using language with exceptions and not that crazy "manually check if error handling is required - and do it everywhere". The fix adds:

    if (ZEND_HAS_OOM()) {
        goto oom_nodeset;
    }
all over the codebase.

Older »