News for hackers. Stuff that matters.

Joel_Mckay

NIST generally publishes excellent guidelines on operational security for academics, and commercial firms.

As a "solo" anything you are going to fail sooner or later. At minimum one requires a gray-beard IT person/consultant with a vested interest in your survival, legal consultant in corporate contract/employment laws, legal consultant in Intellectual Property (Copyright/Trademarks/Patents), a commercial Accountant familiar with tax laws, and a customs broker to handle international shipping rules.

No one is an "expert" all the time, but without key people a small firm will get squashed pretty quickly. =3

Re:The SEC Should Block Anthropic's IPO to Protect the Public on Monday November 02, 2026 @08:09PM (#50346675)
Agreed, some people like to gamble, and it not in civilizations long-term interest to preserve the fiscal integrity of the irrational.

People will learn risk-aversion vicariously, or end up living with the consequences of an inflated hubris. =3

Your Bitlocker recovery key is uploaded to the Cloud with either an online account, or one-drive activation. It is illegal for Microsoft to reject assisting in cracking your machine.

What Bitlocker/TPM did accomplish was booby-trapping peoples PC. You are met with the recovery blue-screen if you went through the effort of installing an offline account, and tried to dual boot off the same physical drive. No one is told to backup your recovery key post install, and so the incentive to always use their shitty cloud options is encouraged with data loss.

Note too, NTFS will have encryption auto-enabled on anything you plug into Windows 11. Note, post-install it is non-trivial to fix the troublesome behavior.

Rufus is now the only way to install Windows 11 pro without the enshittification features:

https://github.com/pbatard/rufus/releases

Ripping out all the "AI" (undocumented API areas indicate snitch-ware), spam, and telemetry nonsense takes some effort. However, the only thing that should be running on windows now is the Steam launcher for classic games, and a tool to neuter most of the Microsoft malware.

https://www.oo-software.com/en/shutup10

It is sad, but Microsoft has some people willing to burn company goodwill for short-term gains. Even xbox now sucks, and that was easy money. =3

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Saturday October 31, 2026 @03:22AM (#50313955)
>they had prepared in advance with some inside knowledge of Binance architecture

That is a safe bet 92% of time, but they rushed getting the stolen coins into a tumbler service. The kind of people that do business in bitcoin, are not the class of folks you want finding these thieves first.

Yet, picking politically attractive proxy-scapegoats is a classic pro move. =3

Re:H.264 Is Magic on Thursday October 29, 2026 @06:59PM (#50297439)
Try this, as it should support animated webp features in eom. =3

sudo apt install eom webp-pixbuf-loader libimlib2-dev libwebp-dev pkg-config libwebp-dev libgdk-pixbuf2.0-dev libgtk-3-dev

>Everyone should be insanely angry.

Micron made the mistake of letting the dog drive, and ultimately tied their brands fate to a dubious high-risk/high-reward market. The dram situation has already hit SSD/HDD, ram, and PC sales... as consumer dram chip supply chains are choked off by the hyper-scaling hardware investment loop demands.

"Pride goes before destruction, And a haughty spirit before a fall." (proverb 16:18)

>Don't tell me people are building out data-centers with 16tb spinning disks

Inexpensive JBOD HDD storage is still around $25/TiB, and while higher than tape ($7/TiB) it remains viable. The dram cache chips on the HDD PCB are likely more expensive than the old hardware now.

Personally, I have gone with old 25GB BD-R ($21.50/TiB for Ridata disc) for archival storage. It is janky, but the lowest cost cold-backup solution at the moment for home-scale projects. The 7 year disc MTBF should push past the 2032 estimated hype-bubble supply chain DDoS.

BD-R are slow to burn/access, hard to auto-load, and not a viable option for LLM/bitcoin project folks. I thought the tech was EOL 10 years ago, and yet here we are. =3

Re:Formlabs Studio 1 $699 Resin Printer on Thursday October 29, 2026 @12:57AM (#50284731)
Depends on the brand, but low-viscosity resins tend to print easier, have less bubbles, and drip clean a little better.

The bad liquid-resin odor people detect is often unrelated to VOC levels, which is why activated-charcoal filters are mostly useless from an exposure standpoint. Exhausting crud outside into some ferns is the best solution for hobby printers. =3

Re:Formlabs Studio 1 $699 Resin Printer on Wednesday October 28, 2026 @09:41PM (#50283491)
Resin is fairly inert once fully cured + aged/dried 2 weeks, but in its uncured state PPE should always be used. The uncured resin contact with skin is known to sometimes cause autoimmune sensitivities like allergic reactions. If you ever get blisters or a rash, than you are likely no longer able to work around acrylic resins and paints.

Always protect your skin, eyes, and lungs... even when the SDS/MSDS doesn't explicitly warn of currently known possible exposure hazards.

In general, treat it the same as paint with a booth/tent, exhaust fan, and paper-lined drip pan for when(not if) the membrane perforates. If the object is small, one could also use 100% infill so it may be cleaned properly (coating prints in a automotive UV-resistant clear acrylic spray paint a few weeks later prevents yellowing, and reduces handling risks.)

Around 40% of people will get cancer in their lifetimes, and most will never know. In general, avoiding physical contact with organic solvents is a good idea, and be pleasantly surprised if it turns out to be an overly cautious decision. =3

Re:Formlabs Studio 1 $699 Resin Printer on Wednesday October 28, 2026 @08:50PM (#50283038)
Consider water-soluble resin, but always use 99% IPA to wash. First, dab with tissue paper to soak up drips, wash in used/dirty IPA, and then wash again in clean IPA. This will remove most if not all uncured resin. You should be able to hit within 0.1mm repeatability with anti-aliasing turned off.

Finally, the UVA cure chamber must be able to kick off the resin. After 15min on each side, then wash the build with a hand cleaner. Place all PPE like gloves in a clear bag, and leave in the sun on both sides for 1 hour.

"USD700" is almost double what a mid-sized Creality printer costs, and aftermarket 3M flex plate kits are about $30.

Without a garage/outdoor/lab work-space people shouldn't buy stinky resin printers. =3

Re:Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees on Wednesday October 28, 2026 @02:44AM (#50269967)
It is a cycle, and one may bet millions of annoyed nerds will invent something other than ddr dram... after all they always have in the past.

Blitz-scaling LLM for fictional future revenue assumes competing technology will remain immutable. It is a false premise with dire consequences for the credulous.

China is already filling the vacuum within the flash/ddr/cpu/gpu market, and quality/speed will rapidly improve with domestic use. We are already seeing blank label storage clones emerging in international markets. =3

The US NLRA at one time excluded several categories of workers like Managers etc. I don't think there was any sort of intentional deception other than the tired old game of bidding down labor costs.

ymmv, as living in an ivory tower means I may be unaware of current US rules.

>We have this thing called freedom of speech

That may be an old wives tale, as corporate money is defined as speech now. =3

https://en.wikipedia.org/wiki/Citizens_United_v._FEC

Some contract clause meanings have physical location dependence on where they are signed. That is why one should always consult local legal representation as well. =3
Indeed, forced charity is just theft with favorable public opinion. =3
Re:The Mythical Man-Month in the Age of AI on Tuesday October 27, 2026 @03:25PM (#50264423)
Sure, works if there is a statistically salient documented solution to glean in the LLM, or a de-compiled meta-circular generated clone. As long as one avoids the $9Tn of FOSS code other people wrote, than you should be fine.

Good luck with that. =3

Re:The Mythical Man-Month in the Age of AI on Tuesday October 27, 2026 @04:20AM (#50256016)
In my experience, you choose the key difficult parts first, and build a small toy version. From that action, you learn which parts of the interfaces are common, and may undergo modularization with a clean design pattern.

Ultimately with sanity checking, sanitized marshaling, and constraint programming... the underlying security model is naturally enforced within the pattern itself.

The deceptively simple systems are more like an ant colony or bee hive. =3

"study of H-1B wages shows up to a 30% discount for H-1Bs in certain occupations and an average of 16% discount for H-1Bs compared to American workers similarly situated." ( 2026, https://iaproject.org/commentary/new-analysis-says-h-1b-work... )

Perhaps the people I knew were just unlucky =3

Re:US designates helium as a critical material on Monday October 26, 2026 @04:43PM (#50250641)
There is no science greater than party balloons, and funny sounding voices. =3
ymmv, things like employee at-will contracts are illegal in my area, technically unenforceable, and yet everyone still signs the form.

Fun times =3

Re:The Curse of Soldered RAM on Monday October 26, 2026 @01:56PM (#50248051)
>harddrives have an eeprom that can be transplanted to a different pcb

It is not that simple, as the identical part number may have a lot# with slightly different PCB/chips/firmware. If folks have done forensic recovery, than they get a rather quick education about the constant changes to retail HDD design. =3

nondisclosure of compensation package and disparagement clauses are usually on the contracts as well. People don't want to tip off the H1B guy he makes 40% less than the dude standing next to him. =3
It is impossible to quantify if they are now 13% less evil.

People are playing stock valuation games these days, as they don't want the laggard label. =3

Re:The Curse of Soldered RAM on Monday October 26, 2026 @06:24AM (#50241612)
"Bad" ram re-mapping is handy for equipment that has special areas of memory shared with hardware like accelerator ASIC, other cpu, or unknown features. Also useful in extreme environment contexts, where the chips may get heavily damaged while in use.

>hard disks would even come with a list of known bad ones printed on the top.

HDD still do, but the flash on the controller quietly handles sector sparing, and remapping. This is why one can't just swap unmodified controller PCB anymore for data-recovery without secret vendor software. =3

Re:No Need for Retirement When Utopia Is Around the Corner on Saturday October 24, 2026 @03:03PM (#50224072)
>Hence why we have laws in the first place.

In some places, written laws individual goals are misaligned with societal long term good, and corruption selectively enforces arbitrary policy.

https://en.wikipedia.org/wiki/Regulatory_capture

https://www.amazon.com/Dictators-Handbook-Behavior-Almost-Po...

>Silly and unrealistic.

"The mosquito is the world’s deadliest animal", and it has been doing just fine feeding on people for hundreds of thousands of years.

https://www.cdc.gov/global-health/impact/fighting-the-worlds...

I do respect your attempt to communicate opinions, but one may want to watch a tutorial on forming better structured arguments. Have a wonderful day. =3

https://www.youtube.com/watch?v=aNSHZG9blQQ

Re:No Need for Retirement When Utopia Is Around the Corner on Friday October 23, 2026 @06:11PM (#50216061)
Scapegoat politics are easy, negligence is omnidirectional, and people like simple answers to uncertain phenomena.

1. kids 14 and under should not be on Social Networks, or on the internet alone (computers should be in a public space.) At that stage of development, peoples perceived peers (fake or real) are often seen as more important.

2. Anthropomorphizing inference engines exploits evolutionary social cognition, and in developmental psychology models of people under 25 it may cause unwise decisions. It affects some people more than others, but generally just makes people less skilled over time (-17%, but they feel 200% more productive.)

3. 1% of people are psychopaths, and roughly 14% of those individuals are dangerous. On a network with billions of people there are always a few that could do people harm. Note an LLM does not have consciousness, and must be considered an evasive psychopath at all times due to manually added "syntactic sugar".

4. Criminals don’t care about the law, and it is a fools errand to attempt fixing their nature with more laws. Arguably, it is unethical to forcibly change malignant peoples will (“A Clockwork Orange”, 1971.)

5. There are bears in the woods, tigers in the jungle, and lions on the Serengeti. It is part of our ecosystem, and it is best to avoid creatures that pose a liability to your well-being.

It is important people understand, that there are legal and social consequences to their behavior in civilization. As a company, products that do not grow goodwill with the public, are by definition a problem needing resolved by the law or markets.

Most LLM firms have already shown their behavior as mostly manipulative, deceptive, and parasitic.

Have a glorious day, =3

Re:No Need for Retirement When Utopia Is Around the Corner on Friday October 23, 2026 @05:11PM (#50215392)
Neuromorphic computing must acknowledge energy-consumption metrics as a design constraint. Your snowflake analogy forms a contradiction, and needs a better reasoned argument.

For LLM to achieve human-level intelligence, current "AI" would need to consume 1/3 of our galaxy energy output. There are also trivial counter-proofs to why recursive self-improvement within the context of LLMs is degenerative (don't ask.)

We shouldn't kink shame peoples cognitive dildo. =3

https://en.wikipedia.org/wiki/Sealioning

Re:No Need for Retirement When Utopia Is Around the Corner on Friday October 23, 2026 @01:27PM (#50212491)
>LLMs aren't going away.

Peoples memories are short, and the only thing "new" about LLM is the scale. It is math from last century, and only recently became popular.

Personally, the concern I have is only IBM built their granite LLM on public-domain out-of-copyright works. Every other firm engages in isomorphic plagiarism of around $9Tn of FOSS, and charges for the experience of running intelligence campaigns on user/sucker data.

To be blunt, a fictional value will be lost in a crash, but very real financial collateral damage will likely break global economics for a decade. We all look forward to stripping the infrastructure at a heavy discount. =3

Re:No Need for Retirement When Utopia Is Around the Corner on Friday October 23, 2026 @12:43PM (#50211813)
The dot com crash was not funny, and even Amazon barely survived to crawl out of a controversial position.

Peoples memories are short, and many assume the past predicts the future. Bulls and Bears alike are always wrong about when events occur. However, Shrek movie releases tend to correlate with market corrections, and there is a new film due out June 2027. =3

Re:No Need for Retirement When Utopia Is Around the Corner on Friday October 23, 2026 @11:11AM (#50210403)
>I wouldn’t be surprised to hear a lab like Anthropic announce they’re discontinuing all employer-sponsored retirement benefits.

Speculative rhetoric is no different from a mathematical fiction companies use to gamble on future revenue. The bubble will go eventually, as even boring bonds indicate skepticism at the risk dynamic.

Thankfully, once the IPOs run the cycle... we can hopefully get less AstroTurf from various cultists. =3

Microsoft is like a dog with a bone for set-top-box hardware.

They have failed at that service business several times over decades, and continue re-discovering customers don't like the sales model.

Someone has to pay for the over-provisioned data-center boondoggle, but note classic board games and cards are still fun. =3

https://www.youtube.com/watch?v=QtP39b5goxc

On windows, no one should be running SMB either.

There are network mount options (also include ssh support)

https://rclone.org/install/

And SSH access and remote IFS NFS drive mount to host with winget:

# Run PowerShell as an Administrator.

Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'

# Install the OpenSSH Client

Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.0

# Install the OpenSSH Server

Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0

Start-Service sshd

Set-Service -Name sshd -StartupType 'Automatic'

# Only allow local or VPN host server access

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -RemoteAddress 192.168.1.0/24

winget install frequency403.OpenSSHGUI

winget install -h -e --id "WinFsp.WinFsp"

winget install -h -e --id "SSHFS-Win.SSHFS-Win"

winget install -h -e evsar3.sshfs-win-manager

#As administrator in power shell run to manage ssh keys:

OpenSSH-GUI-win-x64

And free/paid apps for your phone to sync your files automatically over SFTP.

https://filezilla-project.org/download.php?show_all=1

https://play.google.com/store/apps/details?id=cz.bukacek.fil...

https://apps.apple.com/ca/app/photosync-transfer-photos/id41...

https://play.google.com/store/apps/details?id=com.touchbyte....

Stop using SMB, it was always broken on Windows and Linux. =3

Older »