News for hackers. Stuff that matters.

KennyBlanken

There is no way he didn't recognize the severity and massive impact of the vulnerabilities, go and try to find the CVE, fail to do so, think nothing of not being able to find it, and post.

We're also supposed to believe he didn't wonder why nobody else in his social media circles, lists, and forums were talking about it? He says he did what he did because he wanted to let people know.

We're supposed to believe he didn't stop and think "gosh, why is it falling to me to let people know about this?" It was mainstream media news less than 12 hours after it was announced.

Re:Token-maxxing is dead, OpenRouter's token usage plateaus on Monday October 19, 2026 @08:52PM (#50159985)
"Companies"? A huge proportion of Openrouter tokens are coming from Hermes. That is not "companies", that is "AI bros using Hermes to do things that could be done with a dozen lines of python" and inflated by the massive overhead that is the system prompt hermes generates for each request. Even with just a few tools and skill files it can reach 20-30k tokens.

I'm not kidding when I say that if anything comes out which substantially improves Hermes token efficiency,or causes a large number of Hermes installations to fail or stop being used (like a major security vulnerability), Openrouter and some of their providers will be in trouble.

Re:The fire retardant in the seafood chain on Monday October 19, 2026 @08:19PM (#50159766)
Since the article does not make any claims about exposure levels, no, it's not "misleading." You (wrongly) assumed there's no research on safe limits, or that there even ARE 'safe limits.'

Meanwhile you're making a nonsense claim about the capabilities of the sort of mass spectrometer used for this sort of study (like you know anything about mass spectrometers), while also ignoring the well established evidence these chemicals are causing harmful effects to human health.

Probably because you didn't bother to actually read the study summary, yet you felt qualified to whine about it being misleading while hiding behind weasel words like "often" and "seemingly."

Skepticism not a substitute for being informed and educated. Stop doubting and questioning things you're not qualified to doubt or question...especially when you clearly haven't read the material you're so smugly questioning.

https://www.sciencedirect.com/science/article/abs/pii/S02697...

"A significant body of research supports the conclusion that current exposures to BFRs are having an adverse effect on human health and that early-life exposures are of greatest concern. PBDEs have been particularly well-studied and human exposure has been associated with harm to neurodevelopment, especially reduced IQ, as well as reduced fecundability, reduced birth weight, reproductive abnormalities, reduced fertility, papillary thyroid cancer, and alterations in thyroid function (Chevrier et al., 2010; Goodyer et al., 2017; Hoffman et al., 2017; Kim et al., 2014; Lam et al., 2017; Stapleton et al., 2011; Zota et al., 2011). Bromophenols are structurally similar to thyroid hormone, and evidence from in vitro, in vivo, and epidemiological research indicates that, like PBDEs, bromophenols can affect thyroid function (Michałowicz et al., 2022). The effects of brominated flame retardants on thyroid homeostasis may explain their ability to harm neurodevelopment, particularly via disruption of thyroid-hormone mediated development that occurs during fetal development. Several mechanisms for disruption of thyroid homeostasis have been elucidated. In human liver microsomes, 2,4,6-TBP and hydroxylated metabolites of PBDEs were found to inhibit deiodinase, key to regulating levels of active thyroid hormones (Butt et al., 2011). In vitro binding assays found 2,4,6-TBP bound transthyretin (TTR), which transports thyroid hormone, with ten times the potency of the natural ligand, T4, and that a number of BFRs, including some PBDE congeners, increased the response to T3 (Hamers et al., 2006). Results from a placental cell line found that among BFRs, 2,4,6-TBP was the most potent inhibitor of thyroid hormone sulfotransferase (TH SULT), which regulates intracellular levels of thyroid hormones (Leonetti et al., 2018). Mice exposed to 2,4,6-TBP had lower thyroid activity and levels of free T3 and T4 (Lee et al., 2016). Epidemiological research suggests sex-specific effects on thyroid hormone: in placenta samples from 95 North Carolina, USA women, accumulation of 2,4,6-TBP in the placenta was significantly associated with higher levels of T3 in females (Leonetti et al., 2016b). Male infants with higher levels of 2,4,6-TBP had lower T3, though the association was not significant. Evidence indicates that other BFRs affect the endocrine system, including antiestrogenic and antiandrogenic effects, increased production of testosterone and estrogen, and disruption of thyroid function (Chen et al., 2019b; Johnson et al., 2010; Mankidy et al., 2014; Saunders et al., 2013). Because of concerns regarding persistence, bioaccumulation, and toxicity, along with high production volume, BFRs have been the target of regulatory efforts. These include a ban on their use in enclosures for electronics displays in the European Union and in New York State and in all enclosures for indoor electric and electronic products in Washington State (European Commission, 2019; State of New York, 2022; Washington Administrative Code, 2023). A number of product manufacturers, including Apple and HP, also restrict the use of organohalogen flame retardants in their products."

Re:How Delhi cut electricity loss from 50 to 5 percent on Tuesday September 29, 2026 @05:23PM (#49900825)
No, this isn't remotely "typical." You have no idea what you're talking about.

The building might be on a generator. The whole building is most assuredly not on UPS.

Even in hospitals only certain outlets are on UPS - the stuff that absolutely cannot be interrupted - though a lot of hospital equipment now has its own battery system, at least in part for convenience.

I don't know if it's still done but semiconductor plants used to use intertia-based grid smoothing/UPS systems to handle millisecond-level interrupts and voltage fluctuations.

Re:How Delhi cut electricity loss from 50 to 5 percent on Tuesday September 29, 2026 @05:16PM (#49900704)
But all the nuclear power bros told me electricity in France is uber reliable and bountiful because it's all nuclear! We need nuclear power plants for a stable grid!

It's almost like grid inertia is a different problem from matching changes in demand, and nuclear really sucks at the latter...

Putting computer systems on UPSs isn't a Europe thing. Backup generators and UPS units are very common, or at least they were until everyone got infatuated with moving all their data "into the cloud" and stopped maintaining, or building, infrastructure in office space for it.

Now everyone has all their eggs in the Amazon/Microsoft/Google basket, and instead of the (ahem, regulated) telco or electric company going out...the cloud provider does, and unlike before where you could still work locally - now you can't do anything.

But hey, it was cheaper, right?

Oops...

> We were told the drone footage alone would be used in their decision, and we still had to replace the roof to keep coverage.

This is the point where you stop talking to the insurance company and start talking to an attorney as well as your state insurance commission.

If ROI was even remotely a consideration the US military wouldn't be using multi-million-dollar missiles to blow up fishing skiffs which for all purposes appear to be fishermen headed out to...fish.

If ROI was even remotely a consideration, the US military, the world's most complex logistics organization, would not be currently run by a man who couldn't even run a small (SMALL) veterans non-profit, and who spent most of his early months in the job issuing edicts about things like grooming standards and pissing off or forcing out people the US military has probably spent millions of dollars training into leadership positions.

You're assuming the goal is "kill the most Bad People (tm) for the lowest munition cost" where Bad People are who you and I presume are the Bad People.

It's not about cost. It's about doing what a fascist man-child wants done, as fast as possible, or hamberders are getting thrown, and apparently nobody in the US military has a spine.

It's about punishing and terrorizing a civilian population for something they have no control or say over.

Israel found that their AI system for figuring out "who is a Palestinian terrorist" - "Lavender" - which is a total black box - was terrible at actually IDing terrorists: https://www.972mag.com/lavender-ai-israeli-army-gaza/

So they "optimized the ROI" not by improving the black box by switching from multi-million-dollar smart bombs (which would level the supposed terrorist's home plus severely damage everything within a certain radius, but hey, omlettes, eggs, etc) to dumb bombs. Not much better than WW2/Vietnam era tech. Which now means they aim for a particular house, hit something within a couple of blocks and shout "huzzah!"

The goal isn't actually eliminating Palestinian terrorists. It's terrifying and slaughtering Palestinians.

Israel also "optimized ROI" by having snipers execute Palestinian children. The goal isn't killing terrorists. It's systematic genocide to be able to then claim the land there's nobody left to claim. https://www.theguardian.com/world/2024/apr/02/gaza-palestini...

If anyone thinks differently, look at the history of thousands of "special orders" from the military unit that "administers" Gaza and the West Bank. Israeli human rights groups have tried to catalog them all and been unable to because of the sheer number.

Just to give you an example of how stupid the special orders have been: some banned growing of flowers. To give you an example of how thorough the control is: you cannot attend school, operate a tractor, plant a crop, drill a well, or have more than a handful of people congregate without the military authority's authorization.

Re:How do Traffic Signals Work (2019) on Tuesday September 22, 2026 @12:20AM (#49796762)
Many progressive cities intentionally time their lights for this for two reasons. One is to intentionally limit capacity. Once a road gets past a certain density, you end up with problems that make things astronomically worse (for example: people who "block the box" and cause everything to grind to a halt.)

The second reason: trying to incentivize people onto trains, buses, bikes, foot, etc.

Cambridge, MA does this. The light are purposefully timed to not let you travel through multiple greens on the tertiary roads in particular, less so secondary, etc.

Cambridge also gives a substantial amount of time to pedestrians as part of every cycle- no "beg button", because the city does not consider someone on foot to be less deserving of crossing time - specifically to not have the car "be king". By making it relatively fast to get around on foot, they reduce the incentive to drive.

They also heavily structure the residential neighborhood streets with one-way directions designed to make it very difficult to use the streets people live on as cut-throughs when the main roads jam up because that leads to noise, pollution, and danger to people on foot and bike, particularly because the kind of person to use a neighborhood as a cut-through is likely also driving quickly and aggressively.

Re:How do Traffic Signals Work (2019) on Tuesday September 22, 2026 @12:07AM (#49796688)
ASTC systems do not "dramatically reduce congestion." They result in a small (probably single digits) increase in traffic flow at best, which is a rounding error. God, I'm sick of this dude's flyover videos and him being treated like some genius.

Numerous cities don't bother with ASTC systems because they a)don't do very much yet cost a lot of money in equipment and staffing, and b)just further incentivize low occupant vehicle traffic, which is just about the lowest priority in most cities these days because that in turn creates more traffic. If there was one overarching tenet to traffic engineering and urban transportation planning, it's that you cannot solve traffic by building more roads. It doesn't work. It has never worked.

Traffic is something 99% of the population thinks they understand because they sit in it, see it, etc. and probably 95% don't have the foggiest idea how it actually works, and merely have a severely uneducated and highly biased personal opinion. And boy howdy, do they hate bike lanes and bus lanes.

Adding (or removing) a lane does not even remotely have a direct correlation to maximum traffic flow. If you have a three lane road and you make one lane a bus or bike or bus-and-bike lane, you do not lose 1/3rd the traffic flow capacity. It's dramatically less than that.

By making bus transit faster (where each bus holds ~60 people...) and biking safer, not only do you actually reduce traffic, but you also provide emergency vehicles with a faster route through traffic.

In Paris more people travel by bicycle than car. That was a direct result of Paris heavily restricting motor vehicle traffic through the center.

Every person on a bicycle is one less person causing noise, pollution, congestion, wear to the road, danger to others, and using (at least) one less parking space (because you don't just need a place to put the car where it is kept, you also need space for where it is going.)

Simcity designers initially based Simcity off actual real-world stats and planning figures. They had to throw out the figures for parking and road capacity because otherwise the game would have looked like nothing but roads and parking lots.

Zelda Williams is getting the AI videos forwarded to her by fans.

People who are Robin Williams fans aren't making AI videos of him.

The kind of people who are making videos of him are people trying to get engagement on social media.

Either building an audience to then be an "influencer", or to sell the account to a marketing firm who will then use it to kickstart an online brand.

Marketing company has a client with some stupid new kitchen gadget, so they buy a pumped up account that had Robin Williams memes intermixed with some stolen baking/cooking cartoons and memes.

It's always about money...

You've explained WHAT it could run ON. You haven't shown any examples of its intended use, from input to result. I have no idea what is expected of me to be entering into that home automation example, and as everyone has handily demonstrated, it's dogshit at what people actually try to feed it so clearly im not the only one.
I can't wait for all the usual Monsanto fanboys to start popping up with comments that show how wildly ignorant they are, with comments like "we need this tech to feed everyone!"

1)Hunger is entirely artificial and is a problem of US farm bill policy and trade policy (not to mention using food to produce fuel that provides less energy than the energy required to grow it.) We pay farmers to grow and then till the food into the ground. Or to ship it to a warehouse where it rots. Massive amounts of food are thrown away by supermarkets. The list goes on.

2)European farmers, who cannot use Roundup or a large swath of other pesticides and herbicides, *have greater per-acre productivity.

It's always funny how such a "law and order" company not only lies through their teeth but also maliciously files false police reports. As in there's literally video evidence of them calling the police and telling the police things that are not happening.

It's also really annoying me that police departments around the nation are petulantly implying they were "forced" to do this because of lawlessness and silly-villain karens...also claiming, without the press even remotely challenging them, that they're disappointed because "we believe they work."

There literally isn't a single fucking shred of evidence that Flock cameras do jack shit, that isn't from a study Flock paid for, which heavily cherry-picked communities, particularly ones with very low crime rates where a Flock camera happened to be involved and the crime rate which was already low dropped by a couple crimes a year and resulted in a "200% reduction in crime."

Re:CUDA for AMD on Windows on Sunday September 13, 2026 @06:11PM (#49689237)
To save everyone a click: No cuDNN and based off an ancient version of ROCm for windows (7.1 has been out for ages, 7.2 is current.)
I don't buy htat given they felt it was necessary to engage in a massive amount of domestic spying and further expansion of foreign intelligence.
> We're not seeing the hundreds or thousands of other daily reports that are mixed in and have to be acted on.

There is one PDB per day. One. It is a presentation, not just a sheet of paper. And it's assembled by a team who are producing something for someone who (normally) is the most scheduled person alive save astronauts, who are well aware of that person's fixed resources in terms of time and attention.

Acting like the amount of information presented, especially to someone with extensive executive experience as the governor of Texas, is somehow overwhelming, is beyond disingenuous.

The important context missing here is that Bush was infamous for treating the PDBs like a hassle he didn't want to have to deal with.

The important context missing here is that the terrorists practically put up a neon flashing sign saying "WE WANT TO HIJACK AIRLINERS." They literally told instructors they only cared about specific phases of flight - I think one said "we don't need to know how to land." You know, the hardest part of flying a plane?

The important context missing here is that the WTC attack was used to justify a massive amount of domestic spying.

The last important context missing is that the current president has a very similar attitude toward almost any form of briefing, and entered us into a war largely because he didn't understand nuclear weapons treaties and did not listen to anyone who told him that a weapons treaty having an end date is normal - so the treaty can be revised and renegotiated to meet changes in both countries and the rest of the world. You-know-who thought it was a weakness and the US was getting screwed.

It's strange that the author has completely ignored the 3 bit quants which allow someone with a 16GB GPU to have 100-120k and still get full performance. You can't run any of the 4-bit quants on a 16GB gpu with enough context to be useful for all but the most basic tasks.

General purpose agents can need up to 30k just to reply with "1+1=2" because their prompting is so overloaded. 60-70k is decently usable, still not great for anything complex. A long running task in a general purpose agent can easily hit 100k.

What the vast majority of people care about is performance around what desktop consumer GPUs can run. 8GB, 10, 12, and 16GB of VRAM. What do models that will run at full performance, do?

Also important to know is how Qwen3.8-27B stacks up against qwen3.6-35B-A3B, which due to being MoE, will run on a 16GB card with plenty of speed 90% of the time, at higher quant - so you get more parameters and better quant. But 3.8 is supposed to be "better", so...?

> It wasn't me. It was the car. The car ran over and killed the guy! Not me!

I know you were referencing AI, but this problem predates AI by decades.

Go open up any news website, newspaper, or turn on the TV.

"Man struck by speeding car and killed"

"Vehicle plows into pizza shop"

"Truck takes out telephone pole"

...and these days even bystanders will blur plates in the photos they post. The police won't release any info about the driver, the news won't either.

Listen to friends, family, coworkers talk.

"I can't believe that car just ran that red light!" "The other day I was almost hit by a car in the crosswalk." "All those cars honking their horns late at night are keeping me awake."

Etc.

Once you see it, you can't unsee just how thoroughly the auto industry has managed to transfer perception of responsibility from the operator to the object.

"Let's steal the voice of one of the western worlds' most famous female actors, after she explicitly told us no!"
....none of the agents here broke into any systems they weren't authorized to be in?

> should be fined

Weird way of spelling "criminally charged."

> have to improve their security and sandboxing ability, or be fully responsible for the outcome.

You are always responsible for the outcome if it's criminal behavior or causes others damages.

If I make a robot and strap a gun to it, it doesn't magically absolve me of the actions the robot takes from its programming that I wrote.

And before someone says "but this an LLM!"...yeah, which is still programming and data. And being non-deterministic doesn't help your case...it hurts it.

I've known enough people who worked in EMS to know that it's very common for there to be little alignment between 1a)what the dispatcher is told 1b)what comes from dispatcher 2)what they see when they walk in the door and 3)what the person actually needs.
Re:Fable hacked my piano, can I release the results? on Monday September 07, 2026 @01:06AM (#49594104)
Any company would be a fool not to send a C&D given how many people on this site seem to think that "I got a C&D" means "if I don't obey it, I'm gonna get sued."

Anti-SLAPP laws exist for a reason, and if corps can bully anyone, how is it that corps routinely lose lawsuits on either side of the docket, hmmmm?

Keep licking that corporate boot, folks. Corps send C&Ds because they cost them all of maybe $100-200 and they're so effective.

There is a long road between "got a C&D" and "am getting sued." Among other things, a judge is going to want to see that both sides attempted to negotiate. If the company sending the C&D just demands that and then tries to file suit, the judge is going to tell them to go back to step 2 and stop bothering him/her.

Folks, stop telling people that if they get a C&D they have to just fold. Good chance you never hear from them again because the cost of suing you is nowhere near the damages they will be able to prove in court.

Re:Following legal advice, the Nitter project will continue on Sunday September 06, 2026 @04:30PM (#49590580)
And DOGE can get everyone's personal data but nobody can see crash data from his cars or full reports from government agencies about crashes, or where he's flying in his jet, or where he buys and owns properties...

It's getting to the point where his private security are harassing people for walking down the street in their own neighborhood that runs alongside one of his "compounds."

Re:Following legal advice, the Nitter project will continue on Sunday September 06, 2026 @04:25PM (#49590536)
Because despite the fact that they're both free and cost nothing to use, a lot of government agencies, companies, and press refuse to use or crosspost to Mastodon or Bluesky.

Literally the only cost is setting up an IFTTT workflow or a script, or having an AI agent do it for you, etc.

People will complain, in the same sentence, that bsky/mastodon will dilute their follower count and interactions, and "nobody uses it."

Re:Nitter is unarchived and will continue on Sunday September 06, 2026 @04:19PM (#49590481)
I find it hilarious that the world's richest man, who:

- refuses to speak to the press and lies about having a PR department, but still expects the press to cover everything his companies do

- is ignoring environmental regulations wholesale and literally poisoning tens to hundreds of thousands of people with very high NOx emissions, for which there is a great deal of high quality evidence showing causes significant health issues

- knew his giant rocket test would send debris miles, which caused extensive damage to wildlife near the launchpad and substantial private property damage...but he wanted to launch on 4/20

- runs a car company which was caught speeding up the odometers on cars nearing their end of warranty, purposefully either erases logs from its cars involved in crashes or lies to investigators and in court about whether logs exist/are retrievable, and has blamed its customers for car windows randomly shattering, drive units being destroyed by water ingress due to faulty seals (literally telling people they drove in too heavy a rainstorm)...not to mention currently have a significant problem with their suspensions failing, something that is wildly dangerous and just generally does not happen...not to mention being top per vehicle in deaths, fires, crashes...

- felt entitled to get his hands on nearly every kind of personal data the government has

- produces AI tools that have been repeatedly found to have some of the worst safety limitations on deepfake porn, and also sexual imagery involving minors

- set records for the largest number of complaints at numerous federal regulators and at one point his companies combined were under investigation by ~30 different federal regulatory agencies

- literally paid people to vote for his preferred candidate, because....see prior point

...throws such a major wobbly over nearly anyone doing anything he doesn't like "to" him.

Re:Show HN: Open-Source eInk Bike Computer on Saturday September 05, 2026 @04:32PM (#49580384)
"this is just my preference, but I really prefer to just plop my phone on my handlebars"

It's not a preference. There are a slew of issues around physical damage. Running out of power is far more of a problem than you make it out to be. There are major visibility issues (thankfully Garmin is working on this by continuing their idiotic OLED push /s) and water ingress issues. 1M submersion rating is NOT "driving rain while riding at 15-20mph."

The only people I see with phones on their handlebars are newbies.

Or you can not waste your time and hire an attorney to send them a polite letter saying "put the account back or get sued."
Re:1Password Replied to My Disappointment on Thursday September 03, 2026 @11:07PM (#49560072)
> How does the wolf comparison make this a racism thing?

Because wolves are being used as a dogwhistle/proxy for "migrants" by the far right.

Denmark has a problem with wolves crossing into Denmark. So the far right gives speeches about what a menace wolves are, they don't belong here, they don't deserve to be here, they're not FROM here" and so on - while doing a lot of theatrical smiling and winking, or just shifting right into talking about immigrants and migrants, "totally separately and unconnected, bro! I just wanted to talk about them both while i was here!"

You might want to not take anything David Hamburger Helper says at face value given he perpetuates far-right conspiracies / racist tropes like "Pakistani rape gangs."

Re:1Password Replied to My Disappointment on Thursday September 03, 2026 @10:54PM (#49559991)
That's just the latest. David Hamburger Helper is a lot more than just that, and he's been at this for years.

https://jakelazaroff.com/words/dhh-is-way-worse-than-i-thoug...

https://tekin.co.uk/2025/09/the-ruby-community-has-a-dhh-pro...

Jake's blog post points out how David Hamburger Helper is quite skilled at running right up to the line but not crossing it explicitly.

His type is great at using weasel words and dog whistles. The kind of person who thinks he's clever for using hyperlinks in their blog posts to imply the shit they don't have the balls to say outright while going "tee hee I'm so clever for making every mention of Obama's name in my blog post a linking to the wikipedia article about bananas." (David Hamburger Helper didn't actually do this, it's an illustrative example.)

In the US, conservatives pre-you-know-who would say things like "hard working Americans" (ie "not urban blacks on welfare taking public transit and using their food stamps to buy cigarettes and potato chips") or "American family values" (ie "not the gays") and so on.

Re:1Password Replied to My Disappointment on Thursday September 03, 2026 @10:25PM (#49559786)
He's not "voicing being impacted by immigrants", he's advocated for removing anyone who isn't white from the UK.

That is called ethnic cleansing, and yeah, comparisons to Hitler's "policies", especially during the early stages of his rise to power, are quite fair.

Older »