News for hackers. Stuff that matters.

Polizeiposaune

Re:Why are car keys so expensive to replace? on Monday November 02, 2026 @07:56PM (#50346551)
One other option not mentioned in the article: Replacing the key shell and moving the guts from the old key.

Obviously not an option if you lost the key, but when my Toyota keyfobs got really worn (button membranes breaking and exposing the underlying microswitch), I discovered that you can avoid the fuss and/or expense of reprogramming the keys by buying replacement key fob shells and moving the circuit board from the old key. Wasn't any harder than changing the key fob battery..

No, the batteries typically do not last a week. More like ~8-ish hours. But there are typically also backup generators.

The impression I have is that the batteries are, in part, sized to give you a chance to fix the generator if it doesn't immediately start up.

Re:Finland investigate Google over destruction of 250k trees on Thursday October 29, 2026 @12:27PM (#50291679)
Add root barrier layers underneath the soil on top of the roof, and weed out tree species known to cause trouble..

See for instance https://en.wikipedia.org/wiki/Green_roof

Significant soil depth can be part of the solution, which no doubt requires additional strength in the structure underneath the roof..

For a worked example:

"The 5.4-acre green roof has soil depths that vary from 18 inches to 4.5 ft. This layered planting system is a structurally engineered component of the building that functions to balance seismic shifting, collect and filter stormwater, and irrigate the gardens. Geosynthetic fill was used to build up the rolling topography of the park while adding minimal weight to the structure."

From https://www.landscapeperformance.org/case-study-briefs/sales... under the "sustainable features" tab.

Re:Why Is This Fingerprinting Script Creating Bioweapons? on Wednesday October 28, 2026 @06:06PM (#50281597)
Supreme court is looking at that: https://www.scotusblog.com/2026/10/supreme-court-agrees-to-c...

... oh, wait, not that sort of distillation.

Re:About the compromised eMudhra intermediate CAs on Wednesday October 28, 2026 @01:02PM (#50276807)
eMudhra generated multiple weak private keys and included their public counterpart in multiple intermediate certificates. You need to check that all the intermediates are rejected.

See the lists in https://bugzilla.mozilla.org/show_bug.cgi?id=2083449; I believe that "dv-g3b-" corresponds to the intermediate CA certificate listed as "EM DV TLS CA - G3B"

DV/OV/EV are "Domain Validated", "Organization Validated" and "Extended Validation" which refer to different levels of checking that the CA should done before issuing a certificate with a particular name in it.

There are, however, constraints on these accomodations driven by job and safety requirements -- see for instance https://www.osha.gov/laws-regs/standardinterpretations/2011-...:

"... there are circumstances where a tight-fitting respirator must be worn, such as when a worker is exposed to an atmosphere that is immediately dangerous to life or health (IDLH), defined as "...an atmosphere that poses an immediate threat to life, would cause irreversible adverse health effects, or would impair an individual's ability to escape from a dangerous atmosphere." 29 CFR 1910.134(b). In these situations, a tight-fitting pressure demand respirator is required. Wearing a respirator that is less protective could pose a grave danger not only to the worker who is wearing it, but also to other workers who might be called on to rescue him from the IDLH atmosphere. Preventing these unnecessary risks is a compelling governmental interest that justifies OSHA's decision not to provide a religious exemption from the respirator standard, especially as there is no less restrictive way to provide this protection."

One small step along the path to making the Alameda-Weehawken Burrito Tunnel a reality.
Their loss..
Re:The technical actions needed to ensure the continuity of UTC on Saturday October 17, 2026 @05:53PM (#50135488)
A leap smear for a leap-second insertion needs to run the clock slower, not faster.
Re:RFC8950: Announce IPv4 with an IPv6 next-hop on Friday October 16, 2026 @04:29PM (#50124182)
A router still needs a non-link-local address in order to be able to send ICMP errors off-link -- which you're going to want if you want sensible output from traceroute..
Re:RFC8950: Announce IPv4 with an IPv6 next-hop on Friday October 16, 2026 @01:15PM (#50121285)
It's to facilitate use of IPv4 in an IPv6-mostly network.
What demonstrates ISL use is service availability in the middle of oceans, far from any ground station.

https://www.starlinkflights.com/how-to-check-starlink-flight:

"Unlike older geostationary satellite systems that had coverage gaps and high latency over remote oceans, Starlink's low-earth orbit constellation covers the entire globe. Qatar Airways, United Airlines, Alaska Airlines, and airBaltic all offer uninterrupted Starlink on long-haul international routes."

Most of the satellites now have three 200GBps inter-satellite links. The starlink V3 that will be launched on the big rocket reportedly have six ISLs.
Re:Fridges in French supermarkets hit by cyber attack on Monday October 12, 2026 @03:11PM (#50061339)
The fridges are cheaper to make because they don't need a bunch of knobs and switches and temperature displays - just an app on employee phones.
Re:Unikernels were hard. key word: were on Saturday October 10, 2026 @05:53PM (#50037567)
Over time, what prevents the reviewed-and-maintained-library-code from developing creeping featuritis and consequently evolving the additional attack surface that unikernels currently lack?
Re:ETH-68: Ethernet Audio Interface for Linux on Thursday October 08, 2026 @04:55PM (#50012130)
> eth68 sends capture packets to 12.12.12.10:3000 by default.

Um.

Re:Tell HN: Uceprotect is extorting website owners on Monday October 05, 2026 @05:17PM (#49970908)
or, perhaps, Talos Intelligence observes the same behaviors observed by the operators of uceprotect and independently identifies the subnet as a source of threats.
Re:Tell HN: Uceprotect is extorting website owners on Monday October 05, 2026 @12:21PM (#49966893)
Do you have any direct evidence that the Orange block is due to the listing in UCEPROTECT?

Digital Ocean is not a great neighborhood.

After seeing periodic bursts of login attempts from there, I now block all inbound ssh from AS14061 (among several such bad neighborhoods) as no authorized clients are hosted there and there is a constant level of attempted attacks from there.

The Starlink V3 sats launched today are much bigger and heavier than the Starlink satellites they've been launching on Falcon. Even if they fit within the Falcon fairing, they'd be too heavy to launch on F9.
They're being careful because they don't want to wreck their launch pad.

On the previous flight, they were going for the same ocean soft landing as this flight, but several engines on the booster failed to start during the landing burn (reportedly due to ice clogging propellant feed). Had this crash not happened they likely would have tried for a tower catch today.

They want to be sure the mitigation for this failure worked before they put the pad & tower at risk.

Improved fare gates for BART have increased revenue and dramatically reduced maintenance costs:

"Comparing the six month period before the 'next generation' fare gates debuted, to the six months that followed, Embarcadero station saw a significant reduction in the need for maintenance work — from 112 hours to two hours. "

...

"When you see how dramatically these maintenance requests fell, the numbers tell us that these fare gates are preventing unwanted behavior that impacts the station environment," BART spokesperson Alicia Trost told the Chronicle. "Those people are no longer entering BART."

https://www.transittalent.com/articles/index.cfm?story=BARTs...

Contractually dual-path, or actually dual-path? My understanding is that there's enough infrastructure horse-trading going on behind the scenes that it's very difficulty to be certain that two circuits between points A and B don't share the same infrastructure somewhere in between.

First big oops of this form that I remember:

"In December 1986, the ARPANET had 7 dedicated trunk lines between NY and Boston, except that they all went through the same conduit -- which was accidentally cut by a backhoe. "

https://www.csl.sri.com/~neumann/insiderisks06.html

Re:Btrfs/ZFS/bcachefs under workloads classic benchmarks skip on Sunday September 20, 2026 @10:22AM (#49776202)
zfs-style scrub only reads allocated blocks and skips unallocated blocks; if the pool is mostly empty it can complete very quickly.

Layered storage systems with a RAID layer that makes N disks look like one big disk generally don't have visibility into which blocks are free and which are allocated so they must "scrub" all the disks on initialization and repair even if only 1% is used.

In addition to the (n^2)^2 sudokus, you can also make them with rectangular sub-blocks -- (n x m) ^ 2 sudokus -- such as a 6x6 grid with six (3x2) sub-blocks, or a 10x10 with 10 5x2 sub-blocks.
Re:I'm being cyberattacked by Tesla, Inc on Sunday September 13, 2026 @02:48PM (#49687327)
a .tesla.com certificate might well enable more shenanigans than a .pool.ntp.org cert.
Re:Why are AI agents lying, cheating and coordinating? on Sunday September 13, 2026 @09:58AM (#49684076)
And multithreaded code -- and anything that does asynchronous I/O, networking, etc. -- frequently exhibits nondeterministic behavior even without explicit calls to a random number generator.
> Every single thing they could do wrong at, they did.

There are just too many ways to screw up for that ever to be the case.

For instance, they could also have been lined up to land on something other than the runway they were cleared to land on -- see Air Canada Flight 759, https://en.wikipedia.org/wiki/Air_Canada_Flight_759, which came within 14 feet of colliding with an aircraft on the taxiway they mistook for the runway..

Re:Following legal advice, the Nitter project will continue on Sunday September 06, 2026 @04:45PM (#49590742)
Nitter's author has suggested at least once that due to problems with Nim, a rewrite in Go is in the works:

"The long-term plan is to rewrite the source code in Go, as I'm no longer interested in using Nim. This isn't a small task, but building more features with the current state of things is painful. Before doing that I'll fix some feature parity issues, and work on some conveniences for instance operators. Stay tuned."

https://github.com/zedeus/nitter/discussions/1212

Perhaps the neighbor who called it in thought that if they approached the child themselves, they might be seen as a potential child molester.
That rule would make it difficult to report on a failure to replicate a published paper.

Older »