News for hackers. Stuff that matters.

Merkur

Re:China's top-secret spaceplane can't hide in low-Earth orbit on Wednesday October 28, 2026 @01:37PM (#50277582)
It can not be a copy of a top secret american space plane, simply because that space plane wouldn’t be top secret if it could be copied.
This game is rigged by pigs at the trough.
Re:The people holding up the internet on Thursday October 08, 2026 @04:43AM (#50003346)
It’s not a failure of corporate. It’s a failure of community. Would it be better if all internet infrastructure would be controlled by corporate? I would argue: no, it wouldn’t.

Perhaps It should be NPOs like ISOC or IETF that supports private open source engagement into internet infrastructure ?

Re:Diesel prices in U.S. top $6 a gallon for first time on Friday September 11, 2026 @10:16AM (#49658836)
It is, but it isn’t because of free market economy.
Re:Diesel prices in U.S. top $6 a gallon for first time on Friday September 11, 2026 @10:14AM (#49658813)
$6 a gallon is about €1.36 a litre - thats cheap compared to a European average of €2 per litre.

Still that makes very clear why Venezuela had to happen before Iran.

Re:No Man's Sky Cosmos on Thursday September 10, 2026 @03:05AM (#49639525)
It’s the simulation effect - From the perspective of a interstellar travler you too are not meaning different from any other two legged quasi intelligent naked ape. :)

Dwarf fortress or rim world solves that by generating personalities.

So simple, nice :)
Re:Rsync 3.5.0: a huge number of security fixes on Friday August 14, 2026 @02:09AM (#49295243)
Wow! Thanks a lot!
he’ll Yea, make it mail based with full backward comp ability to arpa!
nice :-) i'll try that! thx
Re:SSH-cast – record / watch agents SSH sessions on Thursday July 30, 2026 @03:26PM (#49114529)
A minimal, self-contained pair of Go binaries to record SSH sessions and watch them live or replay them later. No server-side component: everything runs on your local box.
Re:Why Don't People Use Formal Methods? (2019) on Thursday July 30, 2026 @01:58PM (#49113410)
Interesting read, thank you. I share your goal, and I think with AI- coding proving code right has become more relevant than ever.

What prevents that we, just move the goal post? Moving the bug from code to spec? The spec must always be simpler and more easily to understand and debug than the code. But in praxis that means it can’t be fully specific in most of the use cases?

Re:Logic for Programmers by Hillel Wayne on Thursday July 30, 2026 @01:50PM (#49113315)
I once talk about the art of programming in a job interview and got flashed by a bachelor of biz with: but isn’t it suppose to be engineering? I died a little bit inside…
I don’t understand - Why did they write this? It seems to add nothing to the domain?
Re:Logic for Programmers by Hillel Wayne on Thursday July 30, 2026 @02:09AM (#49106566)
I read the free part. Looks interesting, but the math heritage is dominant as promised.

It seems to favor the compact and efficient kind of code that is brittle in the hand of a mildly competent junior dev, or a heavy multitasking senior.

I like smart code, in fun projects, but on the job I prefer fast to read and to reason code. Don’t try to be fancy.

So I guess that’s a book to challenge my assumptions. I like that. Thx.

Yea, LLM remove the burden of typing - so if token cost don’t explode the new high-level languages will be above the current - and the new low-level language will maybe just weights…
Re:Where the Automation Has to Stop on Sunday July 12, 2026 @04:17PM (#48884328)
I feel the same, but still believe there is a way to organize my work to make it happen. It’s more like leading a team of juniors: don’t let them drag you into their private rabbit holes, enable them to implement how ever tiny or big chunks they are able too. The common problems is exactly a Junior habit: always inventing new stuff instead of moving existing pieces, always adding never removing and punching holes in blackboxes to workaround mystery.
Re:A New Look for Google Search on Wednesday May 22, 2019 @03:52PM (#19984805)
Agree, but I think it is still better than before, because of the color differences to the headline.

I still would prefer a true Icon.

Re:US has underestimated Huawei, says founder on Tuesday May 21, 2019 @12:55PM (#19971974)
It would be ok if America would ban Huawei from building national infrastructure - it wouldn’t be very capitalistic tho.

But it is down right evil to impose extraterritorial sanctions against a company and preventing other to do business with them.

Your phone nummer is global unique id of your person. Even more as many nations require you register the phone number with personal informations.
While waiting for the article to load i was thinking - was zero or one the first number? Or was it two, because you need at least two to start counting?

Then i realized that i was offtopic in a kinda funny way

While Waiting until the article has loaded, i tried to figure out if Zero or One came first ... doh

RFC Should functions have a color?

The title is a reference to http://journal.stuffwithstuff.com/2015/02/01/ what-color-is-your-function/ a joyfull rant about async functions and promises.I like to request your comment on a similar topic. While coding in go - I often find me asking: is this package go-routine save? Many times I find the answer in the doc's or can ask on the internet, sometimes I need to look at the code."go...

( Read More... | no comments | 2 points | on HN )
great! thanx!

Dynamic User Model

Hi,I could need a pointer, I have the feeling I am one inch away from understanding - but still something is missing. could you provide a hint or a resource or an sample implementation?it's about creating a dynamic user model for my CMS. I observe the user and record it's interactions with the web page. I also managed to lift those interactions in a business domain - ie. interpret interactions...

( Read More... | no comments | on HN )
Re:Confidant: an open-source secret management service on Wednesday November 04, 2015 @07:35PM (#10510820)
Indeed! After all we live in a world where many ssl private certificates are only protected by OS file system rights on a internet facing server. And clear text database passwords in config files are common, in all content management systems - and even many customer relationship systems!

mysqldump got a CLI argument to provide the password! As far as I know - visible to anyone with some access on the system. the documentation warns about that and suggest to create a config file to store the password.

security is a spectrum - but if it's about password storage in modern web applications live on the lower end.

I am increasingly frustrated by that - and if I raise concerns many admins stick to binary security "storing stuff unencrypted on disk is okay, cause the attacker is inside already" followed by "you must store the key somewhere" it's wrong and it's true at the same time. it's also sad - because not only the users, but also the ppl paying us trust us to keep them save. and we don't. :( we can say "it's a spectrum" and we are truthful - but we just can't keep em safe. I think it's important to recognize that simple fact.

...or is it me who is just meticulous?

Re:Confidant: an open-source secret management service on Wednesday November 04, 2015 @05:20PM (#10510225)
I did not know such thing is possible. very cool! thx for pointing it out! :)

but still..some rhetorical questions: Is KMS based on this concept? Is it's implementation open sourced? Is it verified to run unchanged in the instance I pay? Who is verifying it? Who is paying the one verifying it? Can I meet him / her to drink a coffee and build trust between us?

pls, do not misunderstand me. I got more trust in the amazon techs than in my own ability to admin a complex linux system on bare metal. But while all that is great progress toward security we still need to make a leap to find a solution. don't we?

Re:Confidant: an open-source secret management service on Wednesday November 04, 2015 @04:52PM (#10510057)
Please correct me if I am wrong, but I think there is no secure way to store stuff in an virtual environment.

I wish I am wrong - cause my heart always bleeds if I see db passwords in configuration files! But As long as there is a hypervisor you do not control access to - you must trust the owner of the bare metal to (1) honor your privacy (2) be competent to secure his system. Trust is nice, but it is not security.

granted - Confidant and KMS seem better solution than most. Will look into it at more detail. thx for open sourcing it and moving the solution forward.

Re:Go 1.5 Beta on Wednesday July 08, 2015 @04:19PM (#9854324)
cool Release! i realy like the all the improvements in tooling. thx!

Older »