News for hackers. Stuff that matters.

PokestarFan

Re:Atlassian Rovo Exfiltrates Data, Bypassing Controls on Wednesday August 05, 2026 @04:23PM (#49188472)
If you want AI to be useful it will eventually encounter untrusted content, such as via web search. I think things like web search should probably be run on a different sandboxed AI whose task is to write a summary that is then ingested by the main agent, similar to how existing sandboxing already works, but this would diminish the usefulness quite a bit.
Re:Ubiquiti: Enterprise NAS, Built on ZFS on Thursday June 18, 2026 @12:12PM (#48587623)
You don't have to buy from them, you can get third party hard drives. Although those are expensive too
Most modern equipment bans inbound traffic that doesn't match an existing outbound traffic flow
Re:Dav2d on Sunday May 03, 2026 @07:58PM (#48002936)
You can get around this by grabbing a wildcard certificate and then using a hard-to-guess subdomain.
Re:Veracrypt Project Update on Wednesday April 08, 2026 @10:05AM (#47690413)
MacOS has a good CLI if you need to use it. There are CLI equivalents for a lot of the system setting/administration stuff.
I think the dumb part is that it's not like decoding or encoding video becomes harder when there's more users. The effort to write code for encoding for a small service of 1000 users and a large service of 10 million users is the exact same. We really don't need middlemen extracting everything they can, which will drive up costs.
Re:Hold on to Your Hardware on Friday March 27, 2026 @02:26PM (#47546420)
I'm shocked there isn't more government regulation about this. You can't ban Bitcoin, but if you make it a massive pain to invest in it and make it difficult to convert between physical currency that would drive down a lot of demand.
GitHub already has a program to scan for keys, since publishing Discord tokens by mistake used to get the token immediately revoked and a DM from the system account saying why
Re:/dev/null is an ACID compliant database on Thursday October 23, 2025 @07:52PM (#45689009)
I've been able to trigger a segfault in zsh with certain plugins, a directory with a lot of files/folders, and globs with a bunch of * characters.
Re:Apple takes down ICE tracking apps after pressure from DOJ on Thursday October 02, 2025 @09:12PM (#45457612)
It was obvious Apple was going to bend the knee with that gold plaque.
Re:Libghostty Is Coming on Tuesday September 23, 2025 @02:39PM (#45351086)
They mention it's compiled to WASM.
If I had to describe it, Notion is if somehow managed to combine OneNote and Excel. Of interest is the fact that the "database" system stores each row as a page with the column values other than title stored in a special way. Of course, this also means that it doesn't scale at all, but I have seen some crazy use cases (an example is replacing Jira).
Re:NPM debug and chalk packages compromised on Monday September 08, 2025 @05:34PM (#45174311)
You probably want to check before you clear cache
Re:NPM debug and chalk packages compromised on Monday September 08, 2025 @05:12PM (#45174064)
GitHub was folded into Microsoft's "CoreAI" team. Not very confidence-inspiring.
Re:NPM debug and chalk packages compromised on Monday September 08, 2025 @01:18PM (#45170982)
NPM is owned by GitHub and therefore Microsoft, who is too busy putting in Copilot into apps that have 0 reason to have any form of generative AI in them
Re:The Therac-25 Incident on Wednesday August 27, 2025 @11:56AM (#45041393)
I believe that for X-ray mode, the radiation was indirect, so it needed a lot more power. Furthermore, older revisions had hardware locks, and the intent of the Therac-25 was to make it cheaper.
Re:Mark Zuckerberg freezes AI hiring amid bubble fears on Friday August 22, 2025 @03:19PM (#44988707)
Does Broadcom do anything but get hate for their shitty decisions? They are becoming, if they aren't already, the new Oracle.
Re:FFmpeg 8.0 on Friday August 22, 2025 @02:42PM (#44988199)
This is because blurays ship their subtitles as a bunch of text images. So pirates have 3 options:

1. Just copy them over from the Bluray. This lacks support in most client players, so you'll either need to download a player that does, or use something like Plex/Jellyfin, which will run FFMpeg to transcode and burn the picture subtitles in before sending it to the client.

2. Run OCR on the Bluray subtitles. Not perfect.

3. Steal subtitles from a streaming service release (or multiple) if it exists.

Re:FFmpeg 8.0 on Friday August 22, 2025 @02:38PM (#44988137)
FFMpeg is probably not as up high since video processing only needs to be done on the servers that receive media. I doubt most phones are running FFMpeg on video.
Re:Crimes with Python's Pattern Matching (2022) on Friday August 22, 2025 @12:52AM (#44981105)
I just use match case as a traditional switch statement.
Re:Crimes with Python's Pattern Matching (2022) on Friday August 22, 2025 @12:45AM (#44981065)
You need to make that exclude match = ... since match can also be a variable name. This is because people used to write code like match = re.search(...)
Re:Ubiquiti Launches UniFi OS Server for Self-Hosting on Thursday July 31, 2025 @10:15PM (#44752390)
Wait the UXG doesn't do DHCP/DNS? The UCGs all do those which is a weird design choice.
The unfortunate reality is that even if fees disappeared tomorrow, most merchants would just keep the current price and pocket all the extra money as profit.
The email said that removing the image was "not enough".
Re:The Steam Deck Is Software-Freedom Friendly on Thursday April 03, 2025 @09:40AM (#43569470)
Also so far Riot's games don't require upfront purchases so that changes the equation a bit.
Who's going to arrest them?
Re:Apple restricts Pebble from being awesome with iPhones on Tuesday March 18, 2025 @02:01PM (#43402578)
There should be a "+" button you can click and select any app. The Music app is located in the /Applications folder.
Why not just use the GitHub generated email address you get when you hide your email?
Re:Revolt: Open-Source Alternative to Discord on Friday March 07, 2025 @02:33PM (#43293549)
Slack's UI sucks for multiple different "server"s. Good for work, but no gamer wants to juggle around the Slack UI for 2/3 different game servers, not to mention DMs being isolated. Imagine DMing the same person with 2 or 3 completely separate chat histories, depending on the source server. Many people have multiple servers that share a subset of people, and talking to them would be absolutely insane, not to mention the amount of people that primarily use Discord for DMs that don't care about any server at all.
Re:Introducing command And commandfor In HTML on Friday March 07, 2025 @02:17PM (#43293341)
I don't see how it should be too hard to implement, you could abstractly have a system where the command string is translated as such:

1. Split the string by dashes into an array

2. Make the first character of the first array item lowercase, make the first character of the rest uppercase

3. Concatenate the pieces together

4. Do `document.getElementById(element.commandfor)[concatenated]()`

Obviously this doesn't have the myriad number of checks to make sure that the element exists, the method exists, the method takes no parameters, etc.

This would also allow custom commands easily, since you could do `document.getElementById(element.commandfor).myCustomMethod = function() { /* ... */ }`

Older »