News for hackers. Stuff that matters.

Panino

Article title: Nvidia tells data center operators to limit business from Chinese customers

Submission title: Nvidia tells data center operators to limit business to Chinese customers

Pretty different meaning.

Re:Ask HN: Justine.lol down. What happened to jart? on Monday November 02, 2026 @05:32PM (#50344934)
I've also been wondering this.
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @02:16PM (#50213214)
I use Lockdown Mode and the functionality I get is nothing like a $50 device. If you're being serious can you link to some $50 devices for sale that are on par with a recent iPhone Pro running in Lockdown Mode?
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @01:50PM (#50212809)
We don't know if Calif bypassed MIE.

When they hacked the M5 (one week after release!), they used a data-only attack, which is outside the scope of MIE. That could be the case here, or something else entirely. We don't know.

https://news.ycombinator.com/item?id=48139219

Re:Margaret Hamilton has died on Wednesday October 07, 2026 @08:02PM (#50000398)
This thread reminds me of the time a 12 year old girl made a password generator and dudebros here were frothing at the mouth shouting they could make better passwords than her.
Sort of. In many cases the solutions are cheaper and easier than the actions that cause climate change, but certain people oppose progress for political reasons -- and those political reasons are no deeper than "my opponents like it so I'm against it."
Re:I Stopped Using OpenBSD on Monday October 05, 2026 @04:13PM (#49970027)
(2024)
I think you misunderstand what GP is saying. Context, in this context, is the conversation leading up to the statement that gives the statement meaning. You have to use context to understand what is actually being communicated. For all we know, Netanyahu was only saying that devices are insecure, and to drive the point home, said something scary to the interviewer to get them to understand on a personal level (since many people don't really even pay attention unless they think something affects them personally).

Netanyahu is a monster (I seriously thought he was going to prison any day now back in 2017, what is even happening?) so I assume the worst here. I'd love to see context but I don't owe Netanyahu my personal time tracking it down.

But context is criticially important. I guess they're not teaching it in school anymore? They taught us this in elementary along with the 5 Ws, which is another loss. And while I'm on the subject, kids don't know how to cite sources anymore. Made up quotes via text as image. Cool citation "bro."

Re:Software Sandboxing: The Basics on Sunday September 20, 2026 @06:04PM (#49780552)
Justine Tunney wrote a port of OpenBSD pledge to Linux, in the form of a wrapper for seccomp-bpf.

https://archive.is/3FSWy

Not sure why her TLS cert expired months ago. Ted Unangst (OpenBSD dev) also seems to have disappeared, which is concerning.

Re:Fed Raises Rates as Warsh Bucks Trump to Contain Inflation on Wednesday September 16, 2026 @02:18PM (#49730891)
Article without any blocking or popups:

https://text.npr.org/nx-s1-5968724

Re:My practical approach to surfing the web safely on Monday September 07, 2026 @06:47PM (#49603841)
> also: many sites actually work well enough without JavaScript

Some work better without JS. The most common are information-based sites with a paywall or signup or whatever. The JS loads some huge wall over the content. Bonus, no cookie popups or another annoyances, and most ads are loaded with JS. Popups are getting ridiculous.

Re:Carbon-aware electricity pricing, measured daily on 38 grids on Friday September 04, 2026 @12:58PM (#49567185)
My electricity provider has a near real-time graph of energy generation by source (wind, solar, coal, etc.) and I use this during off-peak times to decide when to use or avoid certain loads. For example I love charging batteries when solar is producing more energy than is being used by customers.

For a global map, check out Electricity Maps:

https://app.electricitymaps.com/

> Not saying you’re wrong, but sequestering CO2 probably isn’t enough.

My comment was in response to someone suggesting or implying that nothing can be done, not that the 2 points I made were enough.

I agree with you, especially about the ocean. The oceans have absorbed an enormous amount of CO2, increasing ocean acidity and killing ecosystems not even including the heat they've absorbed, also killing ecosystems. Meanwhile commercial fisherman (aqua farmers) are literally bombing coral as a fishing "method." We need an international effort at changing the people who do farming because the people we have are the worst we can get and they do an enormous amount of harm at basically all levels. Besides the ecological harm, they're just so bad at their jobs that despite selling one of only 3 products humans can't live without, they still can't stay in business without bailouts so routine they don't even consciously recognize them as such.

We need a lot less naysaying and a lot more concrete plans led by people who have successfully done it. I've already done the 2 things I mentioned (soil carbon, biochar) on the scale that is available to me. Additionally our rooftop solar covers maybe 1/3 of the roof and produces 2-3x our annual usage in an all-electric house. We're freegan. My used EV burns no fossil fuel. We compost aggressively including toilet material and make biochar which we co-compost. We have a xeriscape garden and use an amount of water most people would probably consider impossibly low. This is all with a mindset of continuous improvement, always assuming that more gains are yet to be discovered and put into practice. Anyone can adopt this mindset. If anyone thinks the above is way too much for you, I started it all just by switching the incandescent light bulbs in my house to LEDs. That was the first step, and then I took another, and then another. That's all. And we're saving a ludicrous amount of money but that's not the only reason we're doing it, and wasn't the original motivation.

We need to do everything, no buts.
> And there won’t be a way to roll back those changes

It's possible to sequester CO2, and here are a couple ways.

1. Use permaculture or regenerative agriculture to aggressively increase SOM (soil organic matter) / carbon content of the soil. Typical degraded farmland is around 1.5% SOM. For every 0.1% increase per acre, roughly 1 ton of carbon is sequestered. Setting an ambitious increase to 10% would take decades but would increase yields along the way. There are billions of acres of farmland, so a lot of carbon can be removed from the biosphere. Additionally, since people naively mimic farmers for home gardening etc., if farmers were part of the solution, then more home growers would be, too. With a couple decades of regenerative ag you can go from 1.5% to 7.5%, but with more time and motivation you can go higher.

2. Research and then put into practice industrial-scale pyrolysis for energy generation. So, instead of burning methane (aka "natural gas") to boil water to spin a turbine, we could pyrolysize organic material to emit and burn syngas to boil water to spin a turbine. The resulting biochar can be co-composted and when finished, used as a soil amendment.

With a different mindset a lot can change, and quickly.

> What can I as an individual actually do to stop this?

You've never been responsible for the entire world, that's a defeatist fiction put on your shoulders by people who want you to give up and not take responsibility for your actions.

Take some real time to think about your own actions, your share of the blame. Then begin the process of improving your actions. As a handy benefit, you'll begin saving money, and you can reinvest the savings into more projects that also save money. Eventually your carbon footprint will be a small fraction of what it was and in its place you'll have a pile of money.

I've experienced this with a hybrid Camry that was barely driven. A 1 amp trickle charger used occasionally solved the issue.
> I'd love if the roof and the hood of my plugin hybrid could have solar panels built in. I drive it very rarely and short distance.

An old neighbor of mine had a Prius with a factory-installed small solar panel, definitely 50W or less, that IIRC was connected to the 12V battery. So one of the benefits would be in counteracting draw from various always-on computers in modern vehicles.

Wikipedia says the bZ5 is available only in China. Normally electrek mentions country availability in articles but appears to have neglected it this time.

Still, I think this is noteworthy for showing that Tesla vehicles are overpriced.

Re:Haiku R1/Beta6 Released on Wednesday August 26, 2026 @05:27PM (#49456195)
Thanks for the response, that's all great to hear. :-)

I overlooked reading the guarded_heap section on the announcement page, that's excellent work.

Re:Haiku R1/Beta6 Released on Wednesday August 26, 2026 @04:52PM (#49455737)
It's been a while since I last seriously used Haiku but wow, this is an impressive beta with a ton of new milestones:

> Haiku now supports “NVMM”, the NetBSD Virtual Machine Monitor

> There is now a port of the Go programming language compiler

> Firefox

> performance optimizations

From the pics it looks like KeePassXC and GIMP run on Haiku? Sweet!

> After evaluating various alternatives, we eventually devised an allocator based in large part on OpenBSD’s

Interesting, I wonder how it compares to otto malloc wrt canaries, UAF and so on. One of the criticisms of Haiku from years ago is that insufficient attention is paid to security, but I know a lot of improvements have been made.

> Computers are fast and have been fast for a while now.

Absolutely. The only reason I want to upgrade to an iPhone 18 next year is because the 16 doesn't have MIE (Memory Integrity Enforcement) and it feels ridiculous to upgrade so quickly to the 17, which does have MIE. Same thing with a Neo 2. But mostly I buy surplus gear. I've saved a small fortune this way and 8% compounding returns (VT and chill) will help me retire early.

Re:Cool URIs Don't Change (1998) on Sunday August 09, 2026 @05:16PM (#49236001)
Mailing list archive software is a constant rug pull: today you link to a post about something relevant, and next month the link goes to a different message about a different subject.
> Ask anyone who has had a system installed.

This didn't happen to me or anyone else I know with rooftop solar in multiple states, and I've never heard of it. What citations do you have?

Re:Web security is too hard on Tuesday August 04, 2026 @03:41PM (#49173936)
I hadn't read that so I looked it up to verify, and it appears true:

https://www.eff.org/deeplinks/2016/04/ciscos-latest-attempt-...

Cisco looks to have made money from repression and torture.

Meanwhile a large fraction of neo-nazis, credit card thieves, and DDoS-for-hire sites are on Cloudflare. It takes serious talent (not morals) to attack humanity at scale.

Re:Europe EV Sales BEVs Jump 50% & Reach 26% Market Share on Sunday August 02, 2026 @06:11PM (#49148935)
Capitalism With American Characteristics
Re:NetBSD 11.0 on Saturday August 01, 2026 @04:51PM (#49138365)
From the linked release announcement:

> Improvements to the npf(7) firewall, including layer 2 and user/group filtering

That's a valuable, useful feature

> New MICROVM kernel for x86... it can boot in about 10 ms

That could open some doors, nice

There are some good hardware improvements too.

Re:REO Trucks I4 4WD Pickup Truck Starts at $21,500 on Saturday July 18, 2026 @07:57PM (#48963662)
Don't bother with cookies at all unless they serve the interests of the user. And in that rare case, only do a cookie banner if required by law, and here's how to do it: just pretend it's "fine print." Make it functionally invisible, but good enough to get away with it. Nobody will complain about your cookie banner not being annoying enough.
Re:OpenSSH 10.4/10.4p1 Released on Monday July 06, 2026 @06:50PM (#48811511)
Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

When pq key agreement was added in 2019, it took almost 3 years for it to become enabled by default. This isn't criticism, just an observation. I don't have a pressing need for pq sigs. Always happy for new OpenSSH releases though!

Older »