News for hackers. Stuff that matters.

Narretz

Re:Qpack amplification attacks against HTTP/3 servers on Wednesday October 21, 2026 @07:24PM (#50189048)
That's a DoS / memory consumption attack, so not as dangerous as the rest from today.
Re:The Future of CSS on Wednesday October 21, 2026 @06:27AM (#50178588)
that's true. But even for some of the easiest cases some browsers don't support them. input[type=month] for example still has no custom UI in Firefox or Safari. And Chrome has had one for 14 years!
Where do you draw the line? Some SaaS acceptable? VPS? Bare metal? Or your own server in your own home?
It's not a question of gained ground. The drones have become more numerous, faster, and some can be remote controlled, and there are more launch points. Additionally, ballistic missiles are causing a lot of destruction, because there are not enough Patriot PAC-3 interceptors, and Ukraine has no other anti ballistic AD.
Re:Claude Fable 5.1 and Claude Mythos 5.1 on Tuesday September 01, 2026 @02:15PM (#49525709)
Sounds like it specifically does not apply to subscription usage.
Re:Twitter Viewer – View Twitter Without Account on Thursday August 27, 2026 @07:44AM (#49463204)
Gonna be interesting for how long it stays available like this. It's a scraper's dream.
Re:Nitter project received cease and desist on Tuesday August 25, 2026 @01:43PM (#49437751)
my guess is many people use nitter to do automatic scraping of Twitter for various projects, i.e. they can't believe they "have" to do it because so many people still use Twitter.
I'd say there's also oversight/supervision. Which was manual at the start with a human signing off on commands/incrementally built allow/block lists, and now seperate models evaluating commands and blocking them based on some parameters. This is the weakest model, but it'll evolve as well.
Re:Claude Fable 5 on Tuesday June 09, 2026 @02:07PM (#48465043)
Iirc correctly Opus 4.7 had the same problem, safety filters were triggered way too easily at the beginning.
Re:Claude Fable 5 on Tuesday June 09, 2026 @01:59PM (#48464896)
There a few benchmarks out there where all existing models have abysmal scores. So it's not actually a problem if Antrophic's older models are bad, especially if the jump to the newest model is huge, and the competition is also way below it.
Re:GitHub just suspended GitHub-actions[bot] on Tuesday May 26, 2026 @07:56AM (#48278482)
They are now reporting that is a major incident:

> We are investigating authentication issues leading to failure in starting Actions runs and downloading actions. At this time the majority of Actions runs is impacted.

Re:Postmortem: TanStack npm supply-chain compromise on Tuesday May 12, 2026 @02:54AM (#48105079)
> Cache entry Linux-pnpm-store-6f9233a50def742c09fde54f56553d6b449a535adf87d4083690539f49ae4da11 (1.1 GB) saved to GitHub Actions cache for TanStack/router, scope refs/heads/main — keyed to match what release.yml will look up on the next push to main

Imo I think this shouldn't have been possible, as in release should use its own cache and rebuild the rest fresh. It's one thing that the main <> fork boundary was breached, but imo the release process should have run fresh without any caches. Of course hindsight is 20/20.

Re:Postmortem: TanStack npm supply-chain compromise on Monday May 11, 2026 @06:07PM (#48101315)
--before doesn't save you globally, only min-release-age does, which is in npm since March iirc.
Re:Postmortem: TanStack npm supply-chain compromise on Monday May 11, 2026 @06:04PM (#48101281)
Isn't this article wrong about npm minumum release age. 1. The config is min-release-age. 2. For some reason they have chosen to make it days instead of minutes: https://docs.npmjs.com/cli/v11/using-npm/config#min-release-...

Completely unforced fragmentation of the dependency manager space imo

Dispatch and scheduled tasks have been available for a few weeks already, although with limitations.
Re:Claude App Down 3/2/26 on Monday March 02, 2026 @12:11PM (#47220833)
I can't check how much usage I have left because that part of the Claude website does not load ...
Re:Fastest Front End Tooling for Humans and AI on Wednesday February 18, 2026 @05:04PM (#47067072)
Kinda crazy that ts-node is still the recommendation when it hasn't been updated since 2023. And likewise crazy that no other lib has emerged that has typescript compilation and typechecking. Of course if it works, don't fix it, but typescript has evolved quite a bit since 2023.
They are talking about the cost to run the Actions control plane and the scheduler that is not executed on the runner itself.
Re:Why did Crunchyroll's subtitles just get worse? on Monday October 06, 2025 @08:38PM (#45498039)
Amazon Prime did it as well and it was absolutely horrible. Character names got completely butchered, and changed from one scene to the next.
Re:Apple announces the ultra-slim iPhone Air on Tuesday September 09, 2025 @02:25PM (#45186266)
That was 10 years ago. The stability has improved massively. What was the last phone that bent under normal circumstances?
Re:Apple announces the ultra-slim iPhone Air on Tuesday September 09, 2025 @01:49PM (#45185622)
It still has 6.5 inch display and the camera sticks out like a sore thumb. Where's a 5 inch display normal thickness phone?
Re:US Court nullifies FTC requirement for click-to-cancel on Wednesday July 09, 2025 @04:31PM (#44514454)
I have a crazy suggestion ... maybe Congress should make this a law?! Does Congress still do this outside of insane huge budget bills?
Trump's handling of military strikes/operations, which have been mostly symbolic. Killing Soleimani, and not retaliating to the retaliationary strikes. A completely useless strike on Shayrat airbase in Syria. Pulling out of Yemen strikes this year because it was ineffective (never admitting to this though). Trump wants to be known as a deal maker. I don't think that has changed, he's just become more delusional regarding the practicality.
Israel doesn't talk about destroying Gaza, it just does it.
I guess because many men are needed for the IRGC and related organisations.
That's a big leap. Nothing suggests a ground operation or occupation, which was the most costly part of the Iraq war, and importantly, was part of it from the beginning. Experience suggests that Trump would rather walk away from Iran after an exchange of strikes and claim victory then double down in a land war.
There's no way of knowing that Russia wouldn't have incited the "rebellions" anyway. Once the writing was on the wall that the majority of Ukrainians didn't want to be Russia's puppets, Putin would likely have acted one way or the other. Why take chances?
It can't be coincidence that a few weeks ago users wanted to twist grok's arm and make it post right-wing aligned answers/opinions, but grok itself said it's programmed for unbiased/factual answers (for what it's worth). This is probably a test run gone wrong to make grok more aligned with Musk's opinions.
> It just "happens" to be also available to select for the end-user after product-launch

RAW (any format) is an essential requirement for many photographers. You just can't get the same results out of a jpeg.

Re:Twitter.com – Is Twitter Down? on Monday March 10, 2025 @01:06PM (#43322621)
Wdym with "curate your feed"? See only posts of people your follow? That's always been possible with Twitter.

Older »