News for hackers. Stuff that matters.

Sayrus

Refused a while ago, voted into the 2027 budget (which itself isn't set in stone yet) yesterday: https://www.assemblee-nationale.fr/dyn/17/amendements/3210A/...

This is what all the recent articles are about. It passed 11 against 10 out of 577 potential votes. The chances this makes it into the actual budget are quite slim and it would be insane if it happened.

Re:Somebody please stop the spam texts on Monday October 26, 2026 @04:50PM (#50250740)
GMail and many other web clients do the unsubscribe request for you if List-Unsubscribe is present. That doesn't leak your information but still shows that you care and is signal for spam.
Starlink has over 10000 satellites. The goal of Eutelsat is 1000 by 2030. Starlink launched 3000 satellites in 2025 alone. Whether one satellite from Eutelsat provide the same service as one from Starlink, I don't know but it would be relevant.

I wish Eutelsat success, but the scale of funding is completely different.

> According to 404 Media's review, the address on the account was one where neither Smith nor her husband had ever lived. The account had also been accessed through Verizon connections, while Smith says she uses AT&T and has never had a Verizon plan.

> There was also a discrepancy involving the phone used to create the account. Cash App's records showed an iPhone running iOS 16.1.1, an operating system dating back to 2022. Smith, however, provided evidence that her iPhone 13 mini was running the much newer iOS 26.5.2.

Not always true. I have IoT devices where a valid certificate is useful because the original host doesn't exist anymore and the certificate isn't pinned.

Flashing the devices require direct UART/USB access which may involve soldering, if it even exists. This leak is gold for those because these devices will never get an updated CRL.

China is around half that capacity. Asia represents 3/4 of new capacity.

With this being said, Australia, Netherlands and Germany are leading in solar capacity per capita according to https://en.wikipedia.org/wiki/Solar_power_by_country

If they are, then that wouldn't be YANDEX AS13238. So the linked graph wouldn't show these changes.
Good luck finding chips that don't use any Qualcomm IP.
Even more than that. Of the 35k tracked "Satellites and spacecraft", more than 12k are debris bringing Starlink to 1 in 2. If you look only at Active known satellites, around 2 in 3.

From Starlink's page on Wikipedia: "Starlink accounts for approximately 75% of all active maneuverable satellites in Earth orbit"

Re:Breaking Up with Google Play: Why Conversations Is Now Free on Saturday September 26, 2026 @08:06AM (#49855749)
You rarely leave with a positive sentiment when you felt trapped and abused in the relationship.

> For years I’ve felt like I was in a toxic relationship with Google, and the only reason I stayed was economic dependency.

Re:Fable 5 – Median thinking declined in August on Monday September 21, 2026 @07:34PM (#49794877)
Same here. Moved from Opus to GLM 5.2 to 5.3 and I've been pretty happy with the result. Mainly, it doesn't hallucinate and convince itself of mistake so it's good at retrieving information or asking the user for it. Opus and Fable always state something, then try to "prove" it but end up convincing themselves of the wrong thing. Having subagents for retrieval and validation helped but were not enough.
Re:Heretic removes restrictions from language models on Monday September 21, 2026 @07:06AM (#49785670)
The torrents you are talking about are outlawed. Whether enforcement is working or not is another issue.
Re:Why MCP Was Always a Bad Idea on Monday September 21, 2026 @06:43AM (#49785505)
Retrieving messages from Slack over MCP allows a shared read-only bot account accessible from the web browser and CLI. Setup is automated so users can just ask Claude to read them and do something.

Sharing Slack with Claude:

- Using the "normal" way, it shares too much, including privates messages.

- Using your own token, it doesn't work with Claude.AI or Cowork and requires you to go to slack.com to generate an application, tokens and more.

- Using a shared token, now you need context to tell Claude to retrieve it. It still doesn't work for non-Claude Code workflows. Rotation may break currently running workflows.

The bot owner is also providing "ad space" to Google. Author pays Google to show the ad. Bot owner gets paid by Google to "display" that ad and for conversion. The bot themselves aren't getting paid for installing the application.

In a normal scenario, the provider of ad space would be a website or an application. Google would pay the owner of that space. On Youtube, that would be an ad served by Google paid to the channel owner.

In a system where fees reach 50%, you are starting with a heavy tax no matter the starting price.
Whenever I see those statistics, I always find them very weird. Many of our products are made in China, but those are counted towards China's global emission, not Europe's. It also applies to the need of power generation for delocalized industry or importing food. A country handling a lot of industry will have a very high per-capita emission, but the people living there may actually have very low individual emissions.
Re:For the love of god stop using CPU limits in Kubernetes on Friday August 14, 2026 @07:34AM (#49297407)
Each pod has weight. These are written to your cgroup (cpu.weight in CGroups V2). CFS is scheduling based on these weights.

There's a part about it: https://github.com/inevolin/k8s-cpu-limits-analyzed#3-withou...

Re:France to ban unsolicited telemarketing calls on Tuesday August 11, 2026 @06:23AM (#49255886)
Not in the domain at all but wasn't this the purpose of STIR/SHAKEN but the biggest blocker was that large telcos hadn't deployed it? I think Android and iOS dialer app show you whether there was Caller ID Verification done or not so you may be able to drop anything unverified.
Worth a read about Signal's Sealed Sender and how it doesn't preserve its properties with receive and read receipts: https://news.ycombinator.com/item?id=46022279
Re:Oxide Computer raises $445M (SEC Form D) on Tuesday August 04, 2026 @07:08PM (#49176536)
The rack were not insanely expensive, expandable so you don't have to build fully stacked racks from the beginning. Purely based on a hardware, compares to other blade systems but pricier.

The interesting part was the software, management interface, Terraform provider and how everything just fit together. Having storage, network and compute all in a single managed rack package brings a lot of value and brings down TCO. Really appreciated the security group like approach to network policies.

Unfortunately I haven't worked with HPE or Dell recently so I'm not sure what they currently offer.

Re:Oxide Computer raises $445M (SEC Form D) on Tuesday August 04, 2026 @05:28PM (#49175431)
We had the opposite experience. We contacted them through their form this year and they were happy to discuss with us even when we communicated from the beginning we wouldn't be customer in the short to medium term and even for single rack systems.
Re:Europe EV Sales BEVs Jump 50% & Reach 26% Market Share on Sunday August 02, 2026 @04:31PM (#49148021)
I'm not entirely sure why you're getting downvoted. I wasn't able to find a source for the data but it is probably new vehicle registrations. Europe here seems to include Norway, Sweden, Finland, Iceland, Switzerland.
Re:Seedance 2.5 on Sunday August 02, 2026 @08:36AM (#49143969)
Anywhere from ¥20 ($3) to ¥100 ($15) in large cities. Depending on the city, type of ticket and whether it's China-exclusive or worldwide release. Looking at prices, ¥40 doesn't seem like a bad deal.
Re:ASRock BC-250: Building the Budget Steam Machine on Sunday August 02, 2026 @05:55AM (#49142839)
> The script is hardcoded to read the stress binary at /usr/bin/stress since it doesn’t exist, the program errors out. To fix this, edit stress_helper.py.

Script is good, but the directory is missing from PATH. The edited scripts hardcodes the path to the user's home. Earlier in the article, the binary was copied to ~/.local/bin/stress so the given code suggestion should not work either.

Re:Cheap self-hosted Kubernetes on Hetzner cloud (2025) on Tuesday July 21, 2026 @03:57PM (#48997398)
Not familiar enough about GCP internal, but AWS prices are way higher than what's quoted in the article. You'll get billed for bandwidth, should you want any logs of your control plane you'll pay them at a premium so high* it will dwarf the cluster price and machine price combined. And for ~$70/month, you get the cluster API, not the EC2 compute required for worker nodes.

* Because vended logs to s3 are not supported (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS..., https://github.com/aws/containers-roadmap/issues/1141)

It really depends on the market you are targeting and your threat model. If your threat model allows future decryption of the data by a passive listener, then you don't need to rush for PQC. If you are worried about your communications being archived for future decryption, then you need to deploy PQC now even if QCs aren't developed for decades (or ever).

The assumption that you care about this is baked into ANSSI certifications, otherwise you would usually not bother certifying your product. They warned in 2022 that they would do this (See Phase 2: https://messervices.cyber.gouv.fr/guides/en-anssi-views-post...) and will allow PQC-only algorithm no earlier than 2030.

Re:Stripe, Advent offer to buy PayPal for more than $53B on Thursday July 16, 2026 @05:37AM (#48932306)
I misunderstood your initial point about logging-in. On PayPal logging in requires my phone, even with hardware 2FA because sometimes it decides my new IP/Browser/luck isn't trusted enough so it needs to send me a SMS/WhatsApp message so it didn't even register with me that you would be talking about taking out your phone as an additional friction. I see that now, in which case: you're completely right. WeRo requires a phone and one that uses either Google Play Store or Apple App Store and worse, depending on your bank that requires strong Play Integrity.

In term of implementation, WeRo looks more like a response to mobile payments like WhatApp, WeChat, Alipay, ... than a response a provider like PayPal. However, I haven't seen anything that'd limit them from expending support if they wished to.

> and also giving numbers out as much as possible

In Person-to-Person, you don't have to share your number. You can use QRCode (Direct SEPA). I'm not entirely sure of the email implementation, but maybe these do not share the phone number either (Edit: seeing https://support.wero-wallet.eu/hc/en-us/articles/25599201237..., it seems you may be able to do an email-only account). In Person-to-Merchant, I'm not sure what information are shared.

> Moreover payment systems that prioritize the needs of merchants usually are horrible for consumers

Supporting merchants flow to pay is different from prioritizing their needs so I'm unsure where you're going from there. It's also completely separated from Person-to-Person payments. PayPal supports Person-To-Merchant and I wouldn't say they are great for merchant.

Re:Stripe, Advent offer to buy PayPal for more than $53B on Wednesday July 15, 2026 @03:02PM (#48925574)
Wero has a for merchant/commerce part that integrates with PSPs. For instance Adyen: https://www.adyen.com/knowledge-hub/wero

But we aren't there yet.

> Any botanical material of the plant Mitragyna speciosa, also known as kratom, and contains more than 0.050 percentage of 7-hydroxymitragynine on a dry weight basis

Indeed, thanks for catching that. No maximum for an actual kratom leaf but leafs cannot be too potent, right?

According to the ROI (https://www.federalregister.gov/documents/2026/07/06/2026-13...), the threshold isn't yet fixed but the suggested value would be 1 milligram. Doses sold are in grams so this would ban kratom.

Older »