News for hackers. Stuff that matters.

JoBrad

Re:Northflank Breached on Friday October 30, 2026 @02:58PM (#50308581)
It’s about incentives. My company spends about 400k/month USD in both Azure and AWS (different workloads). When I ask my AWS team for help, I usually get actionable info, a separate standalone call (if the request warrants it), and a follow up from my TAM and Account Exec. Every request to my Azure team has basically been “here are some YouTube/MS Knowledge links” + let me know if you figure it out. Roughly the same spend on both platforms, and wildly different levels of helpfulness (and yes, we have an Azure EA).

Are the people on my Azure team smart? Probably. Are they incentivized to actually help me solve a problem? No. They’re obviously incentivized to increased my license spend.

Re:Official Claude Code extension compromise on Friday October 30, 2026 @02:13PM (#50307950)
Except this doesn’t impact VSCode at all, apparently.
Re:Official Claude Code extension compromise on Friday October 30, 2026 @02:07PM (#50307877)
I’m fine with that. I use a top-level directory for all of my code, and restricting extension access to that directory is a great idea.
Re:Official Claude Code extension compromise on Friday October 30, 2026 @02:04PM (#50307823)
I remember when Crowdstrike was all about mobilizing your spare computer to DDOS the bad guys.
Re:Git for US Legislation on Wednesday October 28, 2026 @08:14AM (#50272368)
My read was that the people who are getting fleeced aren’t paying enough attention.
The lede is certainly buried, but calling out an affected development toll on a tech site isn’t a bad call.

Pretty disappointed that Apple hasn’t pushed out an emergency patch to address this, though.

Apple seems like an odd company to lump into this group. Any evidence for this? I removed the cert using a CLI command on my Mac.
Re:Docker Is Weird on Friday October 23, 2026 @08:18AM (#50207793)
What do you use instead of containers?
It’s not really a different narrative, though: They started with the idea that the phone should be nearly all screen (which was very controversial at the time) and designed the software around that. No one had a UI or UX that was as fully committed to this idea as the iPhone, although they certainly got inspiration from others.

You’re right that Apple isn’t usually a first mover within a product segment. But that have a tendency to nail what they consider to be a better execution of that product.

Re:Whistle: Speech to Text in 16.9 MB on Friday October 09, 2026 @12:33PM (#50022996)
I do this with a summary prompt + a JSON config. The config keys are the full name of the thing that gets commonly mistranscribed, and the values include a phonetic spelling of the name and a n "entity id" which is just the name of a markdown file that provides information about the entity, which the LLM can use to infer what should have been referenced if it's not clear.

My prompt is pretty simple:

    - Intro of the purpose (faithful, high-quality summaries of meeting transcripts useful for readers who did not attend the meeting)
    - Some basic rules
        - Summarize only what is actually said in the transcript.
        - If a speaker's name isn't clear from the transcript, describe them generically (e.g. "a participant") rather than guessing
        - If the transcript is a fragment or cuts off, say so rather than inventing a resolution
        - Only state a causal or explanatory link between two facts (e.g. why someone is absent) if that link is clearly stated in the transcript
        - Preserve relative time references precisely rather than flattening them. If a speaker says something will happen "in two hours" don't reword it as "today" or "same day"
        - Maintain the original voice and framing to keep original intent
        - Attempt to infer meeting attendance based on who actually spoke or was spoken to
        - Prefer plain, direct sentences over compound or clever phrasing
        - Respond directly with the summary. Do not preface it with phrases like "Here is a summary" or "Based on the transcript".
    - A preferred structure for the summary, with examples
    - An instruction to attempt correction of mis-transcribed words based on the included JSON configuration, but only if the certainty is high. If unsure, leave as-is, but add (spelling?) after the word to flag it.
    - The JSON config as a string.
I invoke this with a skill that can also update the JSON config if I identify new mistranscriptions, so it gets updated regularly.
It’s news because it still needs to be called out. Not everyone recognizes AI-generated content, but even if everyone did, calling it out serves a real social purpose.
I don’t think this is the right option: if the target were legitimate, then we would welcome this level of impact. But if our (US) partner countries had the option to declare themselves exempt from applying individual sanctions, that seems like a good escape hatch.
Re:iPhone Duo on Monday September 14, 2026 @07:01AM (#49694874)
I think that’s just the frame peeking out from the case.
Re:iPhone Duo on Wednesday September 09, 2026 @10:20PM (#49637556)
This Reddit thread shows a slight “bend”[1]. I’m distinguishing between an intentional allowance for bending vs a deformation that shows up later due to folding. But this is obviously splitting hairs because whatever we want to call it, the thing people don’t like about folding phones is the bend in the display where the fold occurs. And it looks like the Duo has that. Maybe the optical and technical tricks Apple has thrown at the problem will make the slight bend so inconspicuous as to be a non-issue. To me, telling that story is more impressive than claiming it doesn’t exist.

[1] https://www.reddit.com/r/pics/s/URdlaUpIrH

Re:The Twelve-Factor App on Friday August 28, 2026 @09:07PM (#49485975)
I used to solve this with the Authy desktop app, now discontinued. I firmly believe MFA shouldn’t live in your password manager (what’s the point of MFA, then?). Thoughts on MFA options?
Re:Python's pre-declared constants are kinda weird on Tuesday August 25, 2026 @10:01PM (#49443274)
That’s a fun library :)
Re:Gateway 2000's hilariously bad ads in the 90s (Part II) on Saturday August 08, 2026 @11:19AM (#49222670)
Each of your points escalated over the last one, somehow.
The drive through window staffers at restaurants do this, and it’s crazy. They will tell me my order and total, accept payment, and send me to the next window, all while listening to the next person tell them their order.
Re:CarPlay Is Additive on Friday July 03, 2026 @06:28AM (#48773332)
Not only does my wife’s vehicle pause CarPlay audio when I mute it, it can also pause the radio, and pick up when I play it again.
Re:Claude Code Is Steganographically Marking Requests on Wednesday July 01, 2026 @10:13AM (#48747165)
Is China the little fish here?
I’d love to read why it’s a wrong comparison.
I’ve never seen these style arguments pass the “show me a good example” phase, at the scale that would be needed to “prop up the economy.”
An optimistic view is that the jobs displaced by AI will be like the jobs displaced by industrialization: while fewer people will be needed to do the task, there will be more demand for the task over time, opening up new jobs with different skill sets than the previous job required.

At least one data point in favor of this view is the middling success of the AI rollout so far. Of course it’s eclipsed in the short run by the number of jobs cut to fund AI rollouts.

Re:Moving beyond fork() + exec() on Saturday June 06, 2026 @12:02PM (#48426276)
That’s how you get zombie processes and memory leaks.
It’s not about this administration. The lawsuit was filed in 2021.
Then they don’t need to unmask users to get testimony, right?
On the other hand, I’d hate to accidentally rearrange my cards while trying to party with an alternate one.
Re:The Gay Jailbreak Technique on Friday May 01, 2026 @03:33PM (#47979170)
Are you suggesting they have explicitly loosened the guardrails for LGBTQ+ individuals, where they wouldn’t for grandmas?
I think the point was fine motor control at 2.
Cloudflare isn’t anywhere near being the second worst registrar. I’ve never had anything remotely similar to this occur, and I’ve had hundreds of domains with Cloudflare for years.

Older »