News for hackers. Stuff that matters.

Noujin

Re:0-day security update available for Metabase on Friday August 07, 2026 @06:00AM (#49208125)
Why the hell does nobody talk about the crazy exploitation way? Calling the reset password endpoint, triggering a 400 but receiving an active session through that? Did they inject a compromised email?
Re:Ask HN: Who is hiring? (August 2025) on Monday August 11, 2025 @08:27AM (#44863412)
I'd love to work at Picnic, but is there really no remote? I am from Germany.
Re:Ask HN: Who is hiring? (August 2025) on Monday August 11, 2025 @08:20AM (#44863366)
You say remote, but your application form requires to check some box in regards to moving to travelling to New York. Is that an error?
Re:Agile Is Dead on Tuesday November 26, 2024 @03:28PM (#42249705)
No satire
Re:Agile Is Dead on Tuesday November 26, 2024 @03:23PM (#42249656)
OP I feel like you should quit your job now and find a better place.
Re:Fly.io dropped their Terraform provider on Tuesday November 21, 2023 @06:12AM (#38362119)
Without a public announcement Fly.io dropped their Terraform provider to an unmaintained state. Their official advise on what to do now is to use:

"first-party tooling: flyctl and/or the Machines API."

Which totally misses the point of Terraform.

Just found a post about this in their forums:

https://community.fly.io/t/fresh-produce-volumes-endpoints-i...

Re:CloudFlare is blocking traffic to Discord on Friday September 29, 2023 @08:26AM (#37702850)
me2
Re:An Interactive Guide to SVG Paths on Monday July 03, 2023 @05:15PM (#36578953)
A few months ago I looked into how to do an angled gradient in SVG and was baffled that is isn't supported. Now looking at this spec, it's also not in there. Why the hell is this something nobody talks about. Photoshop has it since ages...
Re:SETI@home Is in Hibernation on Saturday March 18, 2023 @07:08AM (#35208031)
How did the Ethereum research community disappoint us all?
Re:SETI@home Is in Hibernation on Saturday March 18, 2023 @07:06AM (#35208026)
It's still taking time I think. We understood that L1 should never have been the place for the end consumers and that's why all the chains (Bitcoin-Lightning; ETH various systems like StarkNet, zkSync, Loopring and so on) are currently in the process of finding out how to make everything that is happening on L1 possible on L2. On Ethereum one big part left out is still the the general ability to run EVM code on L2, but that is happening like right now.

Biggest problem after that will be user experience, but I am currently in the Ledger Connect (now Ledger extension) Testflight beta and it makes using dApps on iOS with a hardware wallet a really good experience. No cables, no app switching, no weird abstraction barrier. The new Stax also seems like a well thought out wallet that was created with a focus on UX. Only thing I don't yet see is a good NFC integration for existing payment terminals.

I still think the industry is really early. Layer 3 is now a topic for privacy preserving user interactions which is super interesting. It doesn't then stop at being your own bank, but with it you will be able to really control your own identity without anyone standing in the way. For needing less trust sharing your data and being self sovereign. Using the chains just as a highly accessible, authorized data store.

Re:CCC captures U.S. military biometrics database on Tuesday December 27, 2022 @03:43PM (#34153526)
Yes I understand this, but with great power comes great responsibility. They should know this & not abuse it. Somebody that tries to educate the general public should not just shout, but take part in a dialogue.
Re:CCC captures U.S. military biometrics database on Tuesday December 27, 2022 @07:32AM (#34148087)
I always loved the CCC and what its members are doing, but the "new" face (including Fluepke, Lilith) make them look inexperienced, naive, loud without being constructive and everything feels a bit unscientific. Also they don't really respond to any critique and just say they don't want to talk about the stuff they're criticizing.
Re:Twitter API hacked, user database being sold online on Sunday December 25, 2022 @03:51PM (#34131100)
What does this even have to do with elon?
But that’s the thing. Tesla wasn’t able to tell when the radar was “uncertain”. So when do you trust one data source more than the other? If it was so easy to label misinformation as such, the misinformation would probably not have been communicated in the first place. Tesla explained this at AI day 1.

Google Meet macOS audio ducking

Since a few weeks I noticed my microphone volume is ducking while other people talk. I am using a Scarlett solo with a dynamic microphone on macos. One colleague of mine is using the same audio interface and has the same problem on macos. Has anybody else noticed that?Weird thing is that this indicates a system feature or problem, but in Discord & Slack it doesn't happen at all. Also the...

( Read More... | no comments | 2 points | on HN )
> if it's truly decentralized then there's no need to publish it.

How do you come to that conclusion?

Re:Operations is not Developer IT on Friday September 03, 2021 @05:07PM (#28409429)
I think the same. It's so typical everyone here tries to pin characteristics to exact professional groups. The amount of anecdotal evidence here is too damn high.
> I haven't tried the full self driving beta since I wasn't about to give Tesla ten grand so the car can change its own lanes, but I can't imagine it's any better.

So you admit you know nothing about the FSD beta (you think you will enter it by buying FSD) and then say you can't imagine it's any better? Please look for yourself. It's all over YouTube and comparing Autopilot to the FSD Beta is like comparing apples to oranges.

Source on your claim?
No that's not correct. These are people that didn't buy FSD, still have the old hardware and now decide to subscribe to FSD monthly. The chip costs are factored in when buying the 10k package. But now in Tesla's worst case, someone subscribes, gets the chip for free and then instantly cancels. An easy solution for Tesla should be a "upgrade your hardware and get x months for free situation" for a higher price or a contract for a specific number of months that you sign up for after the upgrade.
The summon feature doesn't use the FSD tech stack. It's really old by now.