News for hackers. Stuff that matters.

Insimwytim

I have committed a sin of starting with the comments without reading an article, assumed it was about reading and writing text by humans and was increasingly confused by your first paragraph.

I tried to translate it as metaphor at first, but it didn't end up being coherent.

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Friday October 30, 2026 @10:38PM (#50312718)
Criminal negligence is a thing.
Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @04:13PM (#50309510)
That's ok, I'm an SRE and I don't know what it means.

I also don't think anyone does. Or what DevOps means. Or how does one differs from another.

It's worthless word salad for some time now.

Just sounds fancier than SysOps.

But Google wrote a collection of loosely connected articles (by different people) and called it a book. So there's that.

Re:The Mythical Man-Month in the Age of AI on Tuesday October 27, 2026 @05:15PM (#50265915)
Maybe he had AI assist him with that comment
Wow, math PR really took over, nevermind blowback from those pesky mathematicians.

Let's throw in more of that stuff, so they wouldn't look at the financials.

Yay, shills are here with downvotes!

Re:There isn't an easy exploit for this PHP vulnerability on Wednesday October 21, 2026 @09:36PM (#50190047)

  Most non-browser TLS clients (so basically everything else, with default settings), things like curl, Python, Node, Go, Java, git, package managers and every script and daemon you've got, do three things that matter here: they trust a CA bundle on disk, they don't check revocation by default, and they don't check CT. So the fact that eMudhra and Sectigo have revoked these intermediates doesn't help them at all. [1]
[1] https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-key... ( https://news.ycombinator.com/item?id=50177916 )
Re:There isn't an easy exploit for this PHP vulnerability on Wednesday October 21, 2026 @08:56PM (#50189746)
> It wasn't even a problem with the most popular logging framework at the time.

I can't say if it was most popular overall, but it (Log4Shell) was a nightmare for many F500 companies.

Re:There isn't an easy exploit for this PHP vulnerability on Wednesday October 21, 2026 @08:49PM (#50189681)
It's also weird that it seem to has overshadowed certificates incident, which, to me, appears to be of at least the same magnitude of impact.
So, this site breaks, we know that much
for a split second branch prediction in my head replaced 'cinder block wall' in the title with 'paywall'
uBlock filter to fix selection:

  www.frontiersin.org##.InfoDrawer
Re:OpenAI Withdraws 3 Math Papers on Thursday October 08, 2026 @10:44AM (#50006423)

  AI progress in software
Oh, yes... the progress... You measure it by LOC, right?
The problem is not that ChatGPT is doing that, the problem is that it's not being sued into oblivion after.
Re:The death of web development education on Thursday October 01, 2026 @05:48PM (#49927458)
This is quite weird that "AI" presumably ruined book sales, since the info from the books were mostly available though the search.

You want it structured? You need the book - "AI" won't solve it for you (well, if we discount cases of word for word reproduction... which we probably shouldn't, but this does not seem to be the argument here).

The kind of people, that read the books, are the kind of people that largely won't settle for a chatbot as a replacement.

Can there be another reason for the sales drop? Unemployment, "death of the junior", wages decline?

  No, these are standard Android APIs included since Android 17 QPR1. These will be available through AOSP and other OEMs via Android 17 QPR2 in December 2026. It's currently exclusive to Pixels because it was released as part of Android 17 QPR1 since QPR1 and QPR3 releases are now Pixel exclusive since Android 16.
  This is simply the first time they've added APIs in a QPR1 or QPR3 release following no longer releasing QPR1 and QPR3 to AOSP after the release of Android 16.
Re:How to Write with an LLM on Thursday September 17, 2026 @07:50PM (#49748403)
You can't even watch funny animal compilations anymore!
Spin up your own instance and ask them to join!
Re:The asteroid currently hitting front end web development on Thursday September 03, 2026 @07:35PM (#49558595)

  Prompt: Answer without searching the internet:
Woah! Must it discard all pre-training as well?

It already slurped "the internet". You can't seriously say it doesn't count!

TL;DR:

1. Not today. November 2025. They don't make it clear.

2. It is unclear what is the source of the claim.

3. Navigation issues happened before, they state it right there. They were more disruptive as well.

Every presented link seem to have this awful Cloudflare js challenge.

Bad article overall.

The author has articles all over the topics. Everything is sensationalized.

Wouldn't think I'd be cheering Antrophic decision, but this is excellent.

They probably were thinking about how that serves them as an ad, not about transparency, but still.

I say they should go one step further and somehow make it harder/inconvenient to turn it off (big tech is good at this already, so...); or, maybe, hide that option behind extra feature under premium subscription or something.

P.S. The comments are pure gold. They don't like they can't fake authorship and have the audacity to be indignant!

Re:A safe MySQL upgrade that wasn't so safe on Saturday August 29, 2026 @10:38PM (#49495190)
Versions are different during the upgrade. That's how upgrade is done.

You spin up replica, upgrade it to the target engine version, ensure it's up to date and switch over. [1]

[1] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_...

Re:A safe MySQL upgrade that wasn't so safe on Saturday August 29, 2026 @06:32PM (#49493888)
That's kinda fun (not in a fun way).

Since the update is done semi-automatically by the means of AWS RDS, does AWS takes any responsibility for that? Unless this use case is warned against in migration notes, I would think they ought to.

Re:SQLite as a Document Database (2020) on Saturday August 29, 2026 @04:56PM (#49493265)
If you applying NOT NULL constraint, why not extract it from json altogether as a separate column? What's the use of it in json?

You may construct it back on retrieval, if you need it in results.

About five hundred dependencies (give or take).

npm being npm.

Re:How Universities Should Prepare Founders on Monday August 24, 2026 @11:12PM (#49428675)
What's worse is when it is used as a job title, a role, which people are hired for!

Sounds like a complete nonsense, yet here we are.

   The term "piracy" is used by record companies to demonize sharing and cooperation by equating them to kidnaping, murder and theft.[1]
[1] https://stallman.org/articles/end-war-on-sharing.html
Thank you, I was beginning to think, that a few scraps of Latin I am familiar with aren't considered to be enough for reading comments on the internet...
LLM users don't want to put in effort, so they offload tasks to LLM.

LLM doesn't seem to be keen to put in effort either!

Is this AGI?

Re:Optimizing things in the USSR (2016) on Thursday August 20, 2026 @05:15PM (#49380380)
I understand why it's appealing for techies, but I feel like talks about importance of OGAS are very much blown out of proportion.

Not that the project didn't have merit on itself (we're talking about proto-internet, basically), but its potential role in planning is exaggerated. If anything, it's a pitch before MVP.

The issues were very much political (denied funding speaks in favor of that), not computational. You can't solve those with math and transistors.

Re:Optimizing things in the USSR (2016) on Thursday August 20, 2026 @04:24PM (#49379766)
It is difficult, this is why it required a whole institution. And not just an institution, but with proper mandate as well.

It also can be necessary.

In fact, Fred Brooks in The Mythical Man-Month, specifically in chapters 3 "The Surgical Team" and 4 "Aristocracy, Democracy, and System Design" explains why strong (even, maybe, authoritarian) central planning is imperative for large [software] projects.

Without proper mandate the work would be undermined constantly. Again, with regard to software projects (which with all accustomed with) a "Broken Ownership" article [0] [1] illustrates (among other things) the necessity of the mandate.

All in all, if you've been stripped of the mandate, lacking resources and your project is sabotaged in other ways, you don't need to look too far in the search of why it doesn't go as ...planned.

[0] https://blog.alexewerlof.com/p/broken-ownership

[1] https://news.ycombinator.com/item?id=37225397

Older »