News for hackers. Stuff that matters.

JHorse

Re:I found a Vulnerability. They found a Lawyer on Saturday February 21, 2026 @10:48AM (#47101856)
Survival (post diving accident) as a Service
If you haven't already seen theMcSweemey's classic "I'm Comic Sans, Asshole", I highly recommend you go check it out posthaste

https://www.mcsweeneys.net/articles/im-comic-sans-asshole

Re:JavaScript Trademark Update on Saturday June 28, 2025 @10:49PM (#44409972)
One Rich Asshole Called Larry Ellison
Re:Googles hidden penalties against websites on Tuesday September 05, 2023 @04:26PM (#37397235)
Apart from just generally being insecure, I believe google penalizes what it classes as misconfiguration/bad practices on the server side
Personally, I'm more interested in the ideal Bear to Picnic Basket ratio.
Could it just be that doctors who attend these meetings are more career (and less patient) focused than their compatriots?
I like that framing. Personally, I've always thought of doctors as "professional educated guessers"
Nothing is stopping them from lying.

Signaling that their infrastructure has been compromised is kind of a weird lie for them to make though...

Buuuut, since 703 allows law enforcement agencies to harvest data captured by intelligence agencies any statement that doesn't specifically exclude those intelligence agencies is essentially meaningless.
Suuuuper pedantic.

For instance, 2 and 3 narrowly specify just law enforcement agencies, of which the CIA and NSA are not.

Their Canary has more to do with their infrastructure being compromised. It's likely one or more of these statements are no longer true:

1. Cloudflare has never turned over our encryption or authentication keys or our customers' encryption or authentication keys to anyone.

2. Cloudflare has never installed any law enforcement software or equipment anywhere on our network.

3. Cloudflare has never provided any law enforcement organization a feed of our customers' content transiting our network.

4. Cloudflare has never modified customer content at the request of law enforcement or another third party.

5. Cloudflare has never modified the intended destination of DNS responses at the request of law enforcement or another third party.

6. Cloudflare has never weakened, compromised, or subverted any of its encryption at the request of law enforcement or another third party.

H2 2022 and H1 2023
Re:Button Pushes You on Saturday July 29, 2023 @09:13PM (#36926662)
Slightly off topic, but I love the way that blog design uses the right gutter for annotations. Keeps it in context beautifully.
Re:How critical theory is radicalizing high school debate on Saturday July 29, 2023 @12:05PM (#36921564)
Good.

This country has been in desperate need of revolutionaries for far too long.

Respecting the structures and rules of polite society let the Climate Change "Debate" feed denialism that's literally burning the world down around these kids right now.

They're going to need to make some radical moves quickly once they get to positions of influence, and it's heartening to know that they're preparing for that.

Re:Show HN: This blog post shows its Hacker News score on Saturday July 29, 2023 @07:06AM (#36919010)
It's probably against their TOS, but you could always glom onto the search from https://hh.algolia.com

Insomnia generated query:

  const options = {
    method: 'POST',
    body: '{"query":"blog.var.so/hnvotes","analyticsTags":["web"],"page":0,"hitsPerPage":30,"minWordSizefor1Typo":4,"minWordSizefor2Typos":8,"advancedSyntax":true,"ignorePlurals":false,"clickAnalytics":true,"minProximity":7,"numericFilters":[],"tagFilters":["story",[]],"typoTolerance":true,"queryType":"prefixLast","restrictSearchableAttributes":["title","comment_text","url","story_text","author"],"getRankingInfo":true}'
  };

  fetch('https://uj5wyc0l7x-dsn.algolia.net/1/indexes/Item_production/query?x-algolia-agent=Algolia%20for%20JavaScript%20(4.0.2)%3B%20Browser%20(lite)&x-algolia-api-key=8ece23f8eb07cd25d40262a1764599b1&x-algolia-application-id=UJ5WYC0L7X', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));
Response:

   {
   "hits": [
   {
    "created_at": "2023-07-29T09:29:26.000Z",
    "title": "Show HN: This blog post shows its Hacker News score",
    "url": "https://blog.var.so/hnvotes",
    "author": "xelia",
    "points": 4,
    "story_text": null,
    "comment_text": null,
    "num_comments": 0,
    "story_id": null,
    "story_title": null,
    "story_url": null,
    "parent_id": null,
    "created_at_i": 1690622966,
    "_tags": [
     "story",
     "author_xelia",
     "story_36918440",
     "show_hn"
    ],
    "objectID": "36918440",
    "_highlightResult": {
     "title": {
      "value": "Show HN: This blog post shows its Hacker  News score",
      "matchLevel": "none",
      "matchedWords": []
     },
     "url": {
      "value":  "https://<em>blog.var.so</em>/<em>hnvotes</em>",
      "matchLevel": "full",
      "fullyHighlighted": true,
      "matchedWords": [
       "blog",
       ".",
       "var",
       ".",
       "so",
       "hnvotes"
      ]
     },
     "author": {
      "value": "xelia",
      "matchLevel": "none",
      "matchedWords": []
     }
    },
    "_rankingInfo": {"..."}
  }
 ],
 "nbHits": 1,
 "page": 0,
 "nbPages": 1,
 "hitsPerPage": 30,
 "exhaustiveNbHits": false,
 "exhaustiveTypo": false,
 "exhaustive": {
  "nbHits": false,
  "typo": false
 },
 "query": "blog.var.so/hnvotes",
 "params": "..."
 "queryID": "6ca1c94fa4928783a82328ca57bd19ba",
 "serverUsed": "d9-ca-1.algolia.net",
 "indexUsed": "Item_production",
 "parsedQuery": "\"blog . var . so\" hnvotes",
 "timeoutCounts": false,
 "timeoutHits": false,
 "processingTimeMS": 9,
 "processingTimingsMS": {
  "fetch": {
   "query": 8,
   "total": 8
  },
  "request": {
   "roundTrip": 13
  },
  "total": 9
 },
 "serverTimeMS": 9
  }
EDIT: Fix formatting
Re:Code Duello: The Rules of Dueling on Saturday July 29, 2023 @03:28AM (#36917798)
"Rule 5. As a blow is strictly prohibited under any circumstances among gentlemen, no verbal apology can be received for such an insult. The alternatives, therefore -- the offender handing a cane to the injured party, to be used on his own back, at the same time begging pardon; firing on until one or both are disabled; or exchanging three shots, and then asking pardon without proffer of the cane. "

So, slapping someone in the face is such an ungentlemanly offense that the only civilized way to make amends is to get beaten with cane and/or shot at.

The 1700s must've suuuuuucked.

Re:The Resilience of Costco on Saturday July 29, 2023 @02:32AM (#36917514)
Orrrrr, one of the reasons Costco is able to pay its employees better than industry standard is because they don't have a system for counting individual items that requires a significantly larger number of employees.

Totally agree with you on the rabbit hole.

Re:The Resilience of Costco on Saturday July 29, 2023 @02:24AM (#36917475)
"Costco loses only 0.1% of revenue to theft annually. For context, that's 90% lower than Walmart's shrink rate."
Re:FBI: Without Section 702, we can't ID cyber criminals on Saturday July 29, 2023 @12:19AM (#36916863)
Excellent primer on 702 from the EFF https://www.eff.org/702-spying
Re:The Resilience of Costco on Friday July 28, 2023 @11:44PM (#36916650)
Towards the end of the page it summarizes

> For 40 years, Costco has succeeded with a simple formula: reinvest merchandising profits into lower prices and better products

Significant enough investment in tech infrastructure to get it caught up to what might be considered reasonable seems to go against that principle.

Re:Plans Develop for High-Speed Rail in the PNW on Friday July 28, 2023 @11:20PM (#36916536)
If we're talking about high speed rail into Seattle, then you have pretty solid public transit options from the city center to where you would most likely be traveling to.
I'm guessing that the seal created by ones posterior during the aforementioned exorcism would provide significantly more protection against bioaerosols than any standard lid.

theres also this

> This suggests standard lid usage reduces but does not eliminate flush-related bioaerosols. Lid-use changes their characteristics and apparently prolongs their residence time in room air

You really think if Apple completely boycotted China that China wouldn't retaliate?
People on the other end of encrypted conversations outside of the UK would also be surveilled.

More broadly, any backdoor built into any app can and will be exploited by bad actors. Theres no "safe" way to break end to end encryption for just the " good guys".

Even if they pulled all manufacturing from China, they could still potentially be kneecapped if China blacklisted them from purchasing things like gallium.

https://www.theregister.com/2023/07/27/prices_of_gallium_and...

I think it's more that not capitulating to China would potentially result in destroying Apples supply chain. China could potentially kill Apple, the UK can kill a portion of Apples user base.

Older »