News for hackers. Stuff that matters.

Onavo

Well, it seems no different from the current GPU export controls
Re:Radiation Map of the World on Sunday November 01, 2026 @10:12AM (#50326408)
Any more affordable alternatives to the radiacode scintillator devices?
Re:When electric cars were for women on Saturday October 31, 2026 @10:36PM (#50322245)
Are smashed tail lights legal to drive with where you are at? I am pretty sure you are supposed to replace them..
Re:Simple circuits can create complex behaviors on Saturday October 31, 2026 @02:17PM (#50318535)
The Soviets allegedly used the same principle to make cheap single sensor missile seeker heads.
I never really saw the point of Anubis. It feels like a anti DDoS tool that's being repurposed for web scraping.
Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @08:58PM (#50312171)
> Err...have you actually asked someone to get into a Cessna?

Yes? In practice once you convince them to get into the plane the only real issue in the air for those new to flying is air sickness.

Also fun fact a good number of pilots claim to have a fear of heights (never met one irl except online in aviation forums).

If you are in aviation/aerospace, don't be afraid to share the joy of flying. There's nothing quite like cruising at 90-100 knots @ 3000-4000ft AGL on a nice clear day.

Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @08:55PM (#50312154)
I believe this is when the term "okay boomer" is warranted.
Best is still the apple privacy proxy.
Also fun tip, if you are ever stuck behind the Anubis PoW proxy, node.crypto is sufficient hardware acceleration to solve it in under a second.
Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @04:28PM (#50309711)
Half of aviation safety (especially for commercial aviation) is done on the ground and has nothing to do with aerospace engineering. Stuff like shift times for pilots and ATC, mandated rest periods, proper ground equipment in zero visibility conditions etc. Many developing countries cut corners on maintenance and spare parts. Mandated use of safety technologies (the DC helicopter incident was entirely preventable). Airports that are designed with safety in mind. If you have a dual engine failure immediately after take-off on an airliner in the middle of a built-up city you are generally fucked. Midwestern airports are the best if you have to do a forced approach. Transport category aircraft (basically anything bigger than a 12 seater plane) don't really have many options, they can't easily land on the runway like smaller planes. That's why the Hudson was a miracle. Your airliners stay safe through constant maintenance and inspections. Dual engine failures are very rare (unless through deliberate pilot action like the recent case in India).

On the engineering side you can look up ETOPS and the various ICAO and FAA and EASA standards for airliner class aerospace engineering https://en.wikipedia.org/wiki/ETOPS

Trust me, y'all think airplanes are "safe" because of some sort of magical protocol. No single protocol actually works. It's mostly lots of layers that are stacked on top of each. It's why in aviation, catastrophic failure modeling uses something called the Swiss Cheese model; you need every single hole (error or failure) to line up to generally trigger a complete breakdown in safety. It may sound counter intuitive, but by aviation safety philosophy, a canvas and wooden frame plane operated under commercial standards and kept to a strict inspection schedule is "safer" than e.g. a privately operated 737 that doesn't follow manufacturer maintenance standards.

NASA has plenty of guidelines for writing "safe" aviation software. I doubt any software engineer will be willing to entertain the level of effort and certification needed to comply with those for e.g. their Django side project.

Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @03:15PM (#50308850)
Oh yeah, and you will find very quickly that most people are a bunch of flaming hypocrites when it comes to flying. Lots of wannabe aerospace engineers in tech. Half the people I have met who put aviation on a pedestal hate flying but love to trumpet the statistics of how safe commercial aviation is. Try asking them to get into a Cessna and all of a sudden the excuses come out. It's oh noes I have a fear of heights, oh noes general aviation is less safe and only slightly safer than a motorcycle, oh noes the FAA is corrupt and allowed the helicopter crash in DC to happen, oh noes I have a family etc.

Aviation safety discussions on hacker news have barely more more depth than biotech and healthcare discussions here. It's extremely ironic because a tremendous number of pilots are engineers, and especially software engineers. It's not exactly a cheap hobby. But you don't see massive numbers of English majors come crawling out of the woodwork to join a discussion on the safety of C++ vs Rust, but tech bros flock to worshipping aviation as a platonic safety idol like moths to a flame.

Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @01:06PM (#50306864)
Fuck aviation, stop using it as a dead horse metaphor for safety through human protocols. I am private instrument rating holder and there's very much a top down push for single pilot ops. Your newer jets (even the jetliners) are all designed with that in mind even though they may not be certified as such.
Isn't Cami Clark just the classic sleep-their-way-up type? She didn't end up in the Whitehouse unlike a certain other one but her marriage at 20 was to a 64 year old...

(According to the Wall Street Journal)

Some of the interpretations won't be correct without grounding them in old case law. That's the expensive part, in many jurisdictions, the official interpretations by the tax department are not free.
Re:Why Is This Fingerprinting Script Creating Bioweapons? on Wednesday October 28, 2026 @02:59PM (#50279091)
No love for botulinum eh?
Until somebody invents a solution for bypassing paywalls at scale, they are not going away. It's like people asking "why don't AI companies release their training data".
According to Wikipedia, Heymann was involved in two computer programmer suicides? Just what the hell are they doing there? Isn't Mass a liberal state?
Who were the prosecutors and lawyers involved in the Aaron Swartz case? Where are the pitchforks for them? You can't just hide behind "The Government".
Re:Ghostty 1.4.0 on Tuesday October 27, 2026 @03:27PM (#50264451)
If I don't want to use the wave of "venture backed ghostty wrappers" for remote mobile coding similar to Claude Code remote, what options do I have? Any plans for a first party remote solution that's not SSH?
Y'all need to abliterate it yourself. Complete refusal removal on every axis will only get you pwned. They should make a UI for abliteration creation and maybe let you upload a diff or LoRa or something.

Abliteration is a very simple technique. You just send in input sentences that it will refuse and then observe the residual streams and then zero out the refusal vectors. It's not some sort black magic.

Re:World Wars I and II Military Aviation Museum Collection on Monday October 26, 2026 @04:09PM (#50250175)
I wonder which planes from that era are "nice to fly" by modern standards. As a point of reference, the Cessna 172 trainer originates from the C170 which was designed right after World War 2. It's an extremely forgiving and well designed plane.

People like to say that the tech industry is young but most don't realize that general aviation is only a few steps removed from the early days of Wright Brothers and their contemporaries like Dumont and Blériot. It's mostly civil aviation and military-adjacent aircrafts like the X experimentals that are truly pushing the boundaries.

It's a pity that clean sheet designs of airplanes made from composites (most famously your Diamonds and Cirruses) are dreadfully expensive to maintain relative to the old school aluminium frame designs. The composite (carbon fiber polymers) airframes have way better aerodynamic characteristics and benefit a lot more from the past 50 years of aerodynamic advances. Though given the fact that modern EVs have very aerodynamic external aluminium shells, I wonder if some of the limitations of shaping aluminium into complex aerodynamic shapes have been resolved (composites are much simpler to shape, they are basically fabric version of 3D printing).

Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @09:23PM (#50227281)
You can see the commenters arguing with me about ASLR in the old thread. Half the commenters here, including quite a few "thought leaders" (not gonna name names or ad hominems but everybody knows who they are), insist that there are ways to implement this exploit at scale without having to do rowhammer-style spam brute forcing. I am still waiting. There's a lot of FUD and hearsay in the tech circles grapevine but very little evidence of actual working exploits against a modern Linux server outside of "attempts".

https://news.ycombinator.com/item?id=50188948

I am still waiting for them to put their money where their mouth is.

Re:Kimi K3.1 Pro and K3.1 Pro Highspeed on Friday October 23, 2026 @04:59PM (#50215255)
What about via US hosted data center resellers like Fireworks?
If you have well-defined, long running tasks that are relatively disposable but requires constant ML monitoring and overwatch e.g. web crawlers, monitoring prices, logs etc. DS4 Flash is perfect for those.

For tasks like crawling and real time log analysis etc., the costs really add up at scale.

Re:Kimi K3.1 Pro and K3.1 Pro Highspeed on Friday October 23, 2026 @01:20PM (#50212393)
The more interesting question is how much more performance can be squeezed out by post training the open weights through RL.
Re:There isn't an easy exploit for this PHP vulnerability on Thursday October 22, 2026 @06:44PM (#50202123)
Also just to reply to RagingCactus's sibling comment which was somehow downvoted to death (HN users, never change.) for quoting the Wiz post, the two PHP vulnerabilities alone are still not to bypass ASLR.

CVE-2026-109619 is the main memory related vulnerability but it alone isn't enough to break OS level ASLR unless you spam it (brute forcing).

Re:There isn't an easy exploit for this PHP vulnerability on Thursday October 22, 2026 @06:00PM (#50201660)
Then show me how it would work on modern Linux servers that has ASLR on by default short of spamming it DoS style.

If you claim only ancient LAMP boxes are vulnerable, then that's like me saying your "your 80 year old grandma is more prone to accidents".

Try finding a modern Linux distro without ASLR enabled defaults.

Older »