News for hackers. Stuff that matters.

Grollicus

I know of a php exploited about 4 hours before their release time 1400 UTC, using the session bug in an exploit that was passed around. I'm really not very much in the loop about cyber security things.
Not sure if this [1] comment is from them?

Because if there are already publicly available exploits seen, it makes no more sense to keep holding patches back just so that OpenAI etc. can get a nice press release

[1] https://news.ycombinator.com/item?id=50176735

Re:Yandex Takes a Second Data Center Hit in 48 Hours on Friday October 09, 2026 @12:09PM (#50022587)
Just look at the wikipedia article, it has multiple independent credible sources naming russians as the perpetrators.
Re:Yandex Takes a Second Data Center Hit in 48 Hours on Friday October 09, 2026 @11:13AM (#50021665)
The war has public support in russia, even though russia is trying to genocide ukrainians (see Bucha). How much more can they "turn on Ukraine"?
Re:EU Council forces Chat Control via fast-track on Sunday July 05, 2026 @02:00PM (#48796343)
The main argument for this seems to be that they catch many pedos by using image recognition tech on facebook etc.

Thus, discontinuing the permit to use these techniques did have enforcement numbers of those crimes found drop significantly.

I'm wondering if they've given up real policing of these crimes completely?!

Spreading pedo content on Facebook, those people have to be the dumbest of the dumb? Everyone spending even a single critical thought on their crimes won't be caught by this.

And they say enforcement numbers drop significantly? Meaning they don't catch many other people? What the fuck are they even doing? Did they completely give up trying to find the real criminals, and instead fall back on sugar-coated figures to conceal that failure?

Re:Volkswagen started blocking GrapheneOS users on Wednesday June 17, 2026 @05:49PM (#48577375)
Our Mercedes:

- beeps about the speed limit, especially if it misses a sign. For example every time starting on a parking lot it keeps the 5 kph even after multiple turns

- warns about leaving the lane, including trying to stay on the lane by slightly couter steering while ignoring yellow construction lines

- Sometimes when moving off from a standstill in a queue, it triggers all "careful you're about to crash into something"-warnings. I suspect it's detecting exhaust gasses from a car in front?

- You must not, ever, touch the turn signal to announce your will switch lanes soon, while there is still a car next to you. You'll get a loud, obnoxious warning tone. This one is especially annoing as it makes sleeping as a passenger on the autobahn basically impossible.

Re:Stop Using JWTs on Tuesday June 16, 2026 @02:48PM (#48560083)
I'm right now adding rabbitmq for notification pushing to a website. Using JWT authentication to control where and what clients are allowed to read, with short lifetimes and regular token refresh.

I don't see another setup that comes close to the ease of setting this up - add an endpoint that provides jwt tokens to valid sessions, done. With user-individual permissions.

Re:Open Source Resistance: keep OSS alive on company time on Wednesday May 13, 2026 @06:19PM (#48128362)
Even more, if you're working in your free time on something that is very much alike your dayjob (say you clone features from work), your emplyer probably owns* that too.

*: for common values of ownership in german copyright law

How does this look like?
Re:cURL removes bug bounties on Wednesday January 21, 2026 @02:50AM (#46702439)
Re:A first look at Django's new background tasks on Saturday November 29, 2025 @05:45PM (#46091520)
Do you have any source one could follow? mail thread, bug tracker issue, ..?
Re:A first look at Django's new background tasks on Saturday November 29, 2025 @03:42AM (#46086033)
That's intersting to see.

Does the api support progress reporting? ("30 % done")

Of course one could build this manually when you're building the worker implementation but I'd love to have it reflected in the api somewhere. Celery also seems to be missing api for that.

Anyone sees a reason why that's missing? I don't think it complicates the api much and seems such an obvious thing for longer-running background tasks.

Re:NTSB Preliminary Report – UPS Boeing MD-11F Crash [pdf] on Thursday November 20, 2025 @04:05PM (#45997733)
Reminds me of xerox scanner fun, maybe someone scanned it to pdf to publicise?

Nontheless the pdfs have been replaced and the newer ones don't seem contain these errors anymore.

I've tried the Kolbenrückholfeder of your shops non-ai-predecessors fame: https://etel-tuning.eu/produkt/tuning-kolbenruckholfeder/

Didn't work out that well, sadly. At first it gave me a greek pillars, then when trying english translations it at least gave me some springs.

It knew the https://anycrap.shop/product/airhook. But only for light loads like snacks and the "heavgy duty airhook" it wanted to sell me is for a clothesline. While useful, I'm afraid your product engineers have to spend some more time so that we can reliably suspend cars from the air again.

Re:Charlie Kirk shot at event in Utah on Wednesday September 10, 2025 @06:09PM (#45204692)
> I know they are worlds apart, but just look at what happened in Nepal...

They let hotel inhabitants leave before burning it down. The finance minister got caught by the mob and survived. Does make it seem quite controlled, imo.

Shouldn't that be obvious on the payslip?
Why would they do anything else? Last Trump Presidency caused incredible inflation that for a huge part went into the stock market, because where else can it go?
revenue is ~80000mil, that comma is a thousands separator
Re:X CEO Says Platform Should Turn Profit in 2024 on Thursday September 28, 2023 @02:47PM (#37693901)
I suspect people underestimate how much third world shitholes are willing to pay to have more influence over the discussion on twitter. Doesn't matter if it's saudi arabia, india or russia.
Couldn't read the techcrunch article but this one was quite nice: https://tylergarrett.com/tech/2023/03/beloved-hacking-vetera...
Re:CCC captures U.S. military biometrics database on Tuesday December 27, 2022 @04:31AM (#34147050)
German law knows no jurisdiction boundary for german citizens. A german that breaks german law but can't be charged in the country were they did it can still be charged in germany. (Weltrechtsprinzip)
Re:Nord Stream: Tie-ins and hyperbaric welding on Wednesday September 28, 2022 @03:41AM (#33005240)
Because they promised NS2 would stop (which it did, before the war broke out the project was dead) and then they blew up NS1?!
Re:Fran Blanche: This Is Not Legal on Wednesday July 20, 2022 @04:25AM (#32162943)
> One issue I have with her is her insistence that alternative video platforms, such as Odysee/LBRY, will never have a chance against YouTube

Youtube is free to do whatever they want on their own platform, within the law. Arguing that they dominate the market brings antitrust laws into play here. On these grounds their TOS about ContentID (basically we'll decide whatever we want and you'll take it) can be evaded.

yt-dlp supports a lot more than 6 sources (check out https://github.com/yt-dlp/yt-dlp/tree/master/yt_dlp/extracto...) so I don't think that's a useful comparison
Re:Cloudflare had a partial outage on Tuesday June 21, 2022 @03:18AM (#31821138)
While this sucks, at least we'll have a great writeup to look forward to
Re:Public CDNs Are Useless and Dangerous on Thursday June 09, 2022 @09:20AM (#31680810)
That may be technically correct, but doesn't count in front of a judge. They generally don't care for implementation details but they care for the results. And the result is that you made your visitor talk to google.
Re:It costs $110k to fully gear up in Diablo Immortal on Sunday June 05, 2022 @05:16AM (#31629258)
The worst thing (for me) about this is that whenever I go to the Apple App store I get bombarded will all these "games" that just try to make my life actively worse.

I don't understand why they pollute their brand like that.

Re:YouTubeDrive: Store files as YouTube videos on Tuesday May 24, 2022 @03:32PM (#31496553)
I used this as a backup target for the longest time. Simply split the backup file into 10 MB chunks and send as mails to a gmail account. Encrypted so no privacy problems. Rock solid for years.

And as it was just storing emails it was even using gmail for it's intended purpose so no TOS problems..

There'll be a bunch of cheap singular apartments spread all over the US - let's for convenience's sake assume they're about a one hour drive apart from each other but that's a totally random number of course.

You can rent them for very cheap but just as you're about to move in they suddenly become unavailable for whatever reason? Probably the owner lost their keys or something and then lawyers can argue for years if the owner is actually required to hand over the keys. Or maybe the apartment has no way to enter and lawyers can now argue for years if an apartment needs to have a door?

At least that's what I can imagine would happen.

Re:Another Vulnerability in the LPC55S69 ROM on Wednesday March 23, 2022 @11:18AM (#30779345)
After hearing some stories from friends who work with microcontrollers IMO the most impressive thing about this is that Oxide were allowed to publish the vulnerability at all

Older »