News for hackers. Stuff that matters.

HackerThemAll

Not to justify what is happening at data centers, but just enter "worker electrocuted" in the web search (be it Google or others) and read the news. There are hundreds if not thousands articles about that.

But on the Hacker News the news about accidents related Google clicks best. Everyone harvest clicks on news related to Google company.

Re:The Great American Rascal: Tom Sawyer at 150 on Friday October 30, 2026 @04:00AM (#50300981)
When speaking about Tom Sawyer, it's hard to not have the piece of the same title by Rush playing in your head.
Re:We Won't "Just Hang Out" on Thursday October 29, 2026 @03:48AM (#50285668)
Agreed.
Re:The case of the 9 bit AES key on Wednesday October 28, 2026 @07:09PM (#50282262)
Those are not the "software engineers" but coders, those who like to say that the university degree doesn't add anything in programming.
Re:C vs. C#: racing VLC's Gaussian blur on Monday October 26, 2026 @04:53AM (#50240969)
It's possible it's a deliberate project decision to support very old CPUs. But it could be multi-targetting different CPUs and using SIMD whenever available.
Re:Recreate the Apollo Guidance Computer on Monday October 26, 2026 @04:34AM (#50240826)
Would a modern tiny MCU survive the space conditions, such as high energy radiation blasting its transistors? I seriously doubt it. The original Apollo computer was so big that nothing could break it.
Re:The result of the C++26 DIS ballot on Monday October 26, 2026 @04:28AM (#50240782)
> The answer was to add as many features to the language as possible.

Because Java is losing market to languages with many features. Which is good. Given history of Java under Oracle supervision, and the availability of Rust, Go and C#, I won't ever touch any JRE-based language.

Re:The result of the C++26 DIS ballot on Monday October 26, 2026 @04:25AM (#50240763)
That's why the world looks more favorably at Rust than C++ now.
Samsung what? Fridge? Air conditioning? Dishwasher? Excavator? A single more word of explanation would make it crystal clear, whereas now I need to wonder whether it is about TV, computer monitor, smartphone or who knows what.
Re:Remove pgrust: the entry is cheating on Friday October 23, 2026 @11:08AM (#50210351)
I’ll sit out this drama until pgrust 0.5.
> I take full responsibility for my actions.

I would like this to materialize, but that's just empty words.

> It was not remotely my intention to cause any of the subsequent side effects.

What were your intentions, then?

> my intention was to alert others in a similar position to be aware of the importance/urgency of the updates.

Have you lived under the stone for the past few years with respect to cybersecurity? Yes you have. All of you ignore security as in "it doesn't apply to me", "they won't break into my software because I'm truly the best 10x developer in the world" etc.

> I have learned my lesson.

I certainly doubt that. A person with IQ only a tiny bit bigger than Trump's wouldn't seek public attention so badly to disclose a security hole in a public forum.

When such praise-seeking habits have stopped being embarrassing?

Re:A farewell to Arc browser on Thursday October 22, 2026 @06:26PM (#50201940)
Yeah to me it's the wolf in grandma’s clothing.
Re:A farewell to Arc browser on Thursday October 22, 2026 @01:52PM (#50198818)
I found it funny that people use Chromium-based browsers and pretend they're unique.

If you want freedom, features and manifest v2 then just use and support Firefox.

Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @01:42PM (#50198655)
> France is shooting themselves in the foot.

Various European countries are very good at that, starting from UK brexiting the EU, Germany shutting down all their nuclear power plants. Do not get started on accepting unlimited illegal immigration.

Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @01:36PM (#50198560)
What exactly are you trying to convey here? That this penalty is not an issue? Would you be willing to pay it from your pocket then? Quad9 is not Cloudflare nor Google. It's a nonprofit, in case you blinked right at the sentence that mentioned this.
Re:Tesla Roadster on Sunday October 18, 2026 @05:27PM (#50145656)
3k comments loaded quite a while.
> applied to 2,300 jobs

This is precisely the problem. Until people were applying manually, the amount of resumes to read was manageable. But if 2300 people apply each to 2300 jobs, then every company receives 2300 candidates, presumably for one position.

How would a company manage this other than blindly discarding 2290 and interview 10 people?

Re:Codex is EATING my Mac's disk space on Sunday October 18, 2026 @03:11AM (#50138667)
Prompt it to create a bash script that will clean those directories and schedule it every few minutes.

Apparently OpenAI is unable to fix this properly, even using its state of the art AI.

Re:Development statistics for the 7.2 kernel on Saturday October 17, 2026 @05:52PM (#50135486)
Then Linux kernel should be rewritten in FreePascal now.
Re:Claude reveals ECDSA curve origins on Saturday October 17, 2026 @02:09PM (#50133491)
It just means that we should use cryptographically-secure PRNG for EVERYTHING even remotely related to crypto, and even for low priority systems. Everything, including passwords that we routinely generate and store in vaults/password managers.
And you need to SUM them to get the actual disk consumption. Add every 54 MB or so to get 489 megabytes (466 MiB) in total.

  26.09.2026  11:44        55 325 476 SGr-Iosevka-Bold.ttc
  26.09.2026  11:44        55 529 052 SGr-Iosevka-ExtraBold.ttc
  26.09.2026  11:44        52 411 832 SGr-Iosevka-ExtraLight.ttc
  26.09.2026  11:44        55 813 148 SGr-Iosevka-Heavy.ttc
  26.09.2026  11:44        54 856 068 SGr-Iosevka-Light.ttc
  26.09.2026  11:44        53 842 504 SGr-Iosevka-Medium.ttc
  26.09.2026  11:44        54 954 816 SGr-Iosevka-Regular.ttc
  26.09.2026  11:44        55 088 816 SGr-Iosevka-SemiBold.ttc
  26.09.2026  11:44        51 327 812 SGr-Iosevka-Thin.ttc
               9 File(s)    489 149 524 bytes
In contrast - NotoSansMono-VariableFont_wdth,wght.ttf - 1.7MB, gives me all the variants Iosevka needs half a gig for.
download the zip file from github and unpack it.
No, Meta, really? Who would have thought?

10% of their global income is from scam, In Poland reportedly 37%. Do you think they'll stop faking reality, and dividing and deceiving people when they make money out of that?

Half a gig for a single variant of this font? No, thank you. That just doesn't make any sense. Perform some minification and/or publish just TTF or OTF.
Re:Where is all the new, good software? on Tuesday October 13, 2026 @10:56AM (#50072743)
Let's continue that a year from now.
Re:Where is all the new, good software? on Tuesday October 13, 2026 @06:01AM (#50069273)
It's an alpha phase. Why you people consider a project that is being actively developed for only couple of weeks a finished product? It's improving on a daily basis. Adobe and Microsoft had several decades. You're asking for the same in order of weeks? And for free? Is it me who is unreasonable here?
Re:Where is all the new, good software? on Tuesday October 13, 2026 @05:05AM (#50068766)
> We see nothing.

Clear your glasses. For example - https://getartcraft.com/apps Thanks to those people we may soon have great alternatives to monopolies.

Re:A Modern Web App in C on Tuesday October 13, 2026 @04:56AM (#50068678)
> there's no way a C web server will be free of RCEs in today's world.

That's a bold claim not supported by facts. The following one had not had any RCE for 27 years, since its inception, and counting. I am certain there are more C web servers written securely.

https://cr.yp.to/publicfile.html

Re:A Modern Web App in C on Tuesday October 13, 2026 @04:51AM (#50068633)
I like everything about it EXCEPT the Apache HTTP Server (if I understood the article correctly). It should be discouraged nowadays. Its lack of progress, lack of features, poor performance and lack of security makes me never consider it again.

To give you more context. I recently closed a security gap in a customer's web server that most likely resulted in a data leak. That web server stored (of course) database backups and other personal data. The directory listing was visible and accessible from the open internet, because - note that - the .htaccess file where the access was disabled had INVALID END OF LINE CHARACTERS according to Apache (and it wasn't me who prepared it in the first place). Therefore - note - the server IGNORED that file and its default setting was OPEN ACCESS and enabled directory index. It's wrong on so many fronts. The Apache's philosophy is not "I cannot parse the config file, therefore I disable access to the directory tree until administrator notices and fixes it". It was not logged in the server logs as "invalid EOL detected". Apache after over 30 years of development cannot parse all 3 end of line sequences - the process which is TRIVIAL to the point of being ridiculous. Deciding not to include CRLF or bare CR is not about performance. It's just the decision of its makers, there's no justification these days. It violates "be liberal in what you accept and conservative in what you send". In 2026, when the cybercriminals are everywhere, just waiting for the data, scraping it all over, the server's default should be "close everything until it's explicitly open" and "if the config is broken, disable access and/or fail".

Yeah, and for the contrary I spotted Claude app being ugly. When I turned off Claude, then put my computer to sleep and later woke it up, it made my fans spin loudly, and after I checked, there were like 2 dozen Claude processes and a lot of Python. What was it doing - I have no idea, but it was crazy. I'm setting up a VM with nothing but Claude and necessary tools. I feel Claude is not honest with everything it is doing.

Older »