News for hackers. Stuff that matters.

Sephr

Re:New Mac Studio with M5 Max and M5 Ultra on Tuesday August 25, 2026 @09:59PM (#49443259)
Apple has a fab for CPU R&D. It's not for final production though.
Apple has degraded privacy online through Safari's cookie-preferential storage partitioning (i.e. site capabilities are penalized for using private localStorage instead of cookies), requiring sites to occasionally leak data over the network for multi-subdomain same-site web applications. These applications can privately share local state offline in Firefox and Chrome but usually serve the lowest common denominator, so many webapps use cookies to support Safari.

They're pro-privacy when it serves them financially.

I hope that AI labs aren't going to wait for widespread distribution of malware encoding novel CBRN & AI info in its fundamental execution architecture (wholly preventing analysis by these safetymaxxed 'frontier' models) to care about dealing with this problem at an architectural level
I make privacy tooling and Fable 5 rejects the vast majority of my prompts to analyze and improve the software that I've written. It's bleak.
Re:Avoid Using "< [Cdata[ ]]>" in RSS on Friday May 29, 2026 @03:20AM (#48320080)
Manual string replacement with a hardcoded list of cases for escaping as suggested by the article isn't good advice for the use case of 'support inserting arbitrary text'.

Do use CDATA nodes, but only work on XML with an actual XML DOM library instead of string manipulation. Browsers have these built-in (DOMParser).

Re:Framework Laptop 13 Pro on Tuesday April 21, 2026 @04:55PM (#47854400)
Judging by the graphics used in the launch event, it may actually be miniLED. Perhaps they aren't mentioning this so people don't compare their max 700 nits full screen brightness to other vendors' >1000 nits full screen brightness.
Re:Framework Laptop 13 Pro on Tuesday April 21, 2026 @03:10PM (#47853122)
Where are you getting that this doesn't have a unified memory model? This laptop uses an iGPU with shared memory.
Re:Framework Laptop 13 Pro on Tuesday April 21, 2026 @03:09PM (#47853114)
My main gripes:

- There's zero mention of the display technology, just "2.8K Touchscreen Display". It's probably not miniLED+LCD or OLED

- The optional HDMI ("3rd Gen") adapter is only 4K 60hz, when the host chip has integrated Thunderbolt 4 which can output 4K 240Hz

Going to be interesting to see how this affects Uber prices in Colorado. afaict Uber heavily engages in surveillance pricing but claims otherwise, deferring to 'discount' terminology.
You're off by a factor of a trillion. It's 6.6 TFLOPS/W.
Re:Discord Alternatives, Ranked on Thursday February 12, 2026 @06:55AM (#46987631)
Discord would have never gotten to where it is today if not for the Mumble community never shipping a decent fully-featured web UI. There were multiple efforts throughout the years but iirc they were not coordinated and didn't gather much momentum.

It's not too late to make another tool that can fit this niche. There's currently nothing that checks every box for me, especially when it comes to UX and security/privacy. I started designing an open source comms framework with a friend to fit this niche a decade ago and feel somewhat motivated to try again in the future.

Re:Peerweb: Decentralized website hosting via WebTorrent on Saturday January 31, 2026 @11:10PM (#46843529)
I'll post about the repo and more on my blog once I'm ready.
Re:Peerweb: Decentralized website hosting via WebTorrent on Friday January 30, 2026 @10:13PM (#46833000)
I'm planning to eventually launch an open source platform with the same name (peerweb.com) that I hope will be vastly more usable, with a distributed anti-abuse protocol, automatic asset distribution prioritization for highly-requested files, streaming UGC APIs (e.g. start uploading a video and immediately get a working sharable link before upload completion), proper integration with site URLs (no ugly uuids etc. visible or required in your site URLs), and adjustable latency thresholds to failover to normal CDNs whenever peers take too long to respond.

I put the project on hiatus years ago but I'm starting it back up soon! My project is not vibe coded and has thus far been manually architected with a deep consideration for both user and site owner expectations in the web ecosystem.

Re:Ask HN: Could you share your personal website here? on Saturday January 17, 2026 @10:44PM (#46664622)
My other canonical link is https://hacker-news.addon.download/account-takeover-xss-poc

Unfortunately I can't guarantee fully automatic processing

Re:Lessons from 14 Years at Google on Tuesday January 06, 2026 @01:14AM (#46509265)
Addy told me that he didn't use AI to write his apology. I can see why people might suspect otherwise though.
Re:Lessons from 14 Years at Google on Tuesday January 06, 2026 @12:38AM (#46509093)
> with no attribution in the code or request of attribution from others, no license, and seemingly intended to share it freely with the world

The bottom of every page on my blog has a copyright link that you can follow. I dedicated the code to the public domain. I never made a copyright claim. I simply asked Addy to not claim to authorship of the code.

Re:Lessons from 14 Years at Google on Tuesday January 06, 2026 @12:08AM (#46508959)
You are libeling me. That is not what I posted. My original post, accessible via the GitHub comment version history is

"@addyosmani No problem; just remember that modifying someone else's code does not grant you any copyright to that code. I don't agree with your opinion that inserting existing code into a template (the API) for a framework (Modernizr) warrants a notice of credit, even with a few changes to the code being inserted."

Re:Lessons from 14 Years at Google on Tuesday January 06, 2026 @12:06AM (#46508953)
The notable part is the PNG file was copied exactly. He could have generated one himself.
Re:Lessons from 14 Years at Google on Tuesday January 06, 2026 @12:05AM (#46508947)
Correct. He did not commit copyright infringement. Just plagiarism.
Re:Lessons from 14 Years at Google on Sunday January 04, 2026 @03:51PM (#46492053)
This feels somewhat hypocritical coming from Addy.

Addy Osmani plagiarized my code and 'apologized' years later by publishing an article on his website[1] that he has never linked to from his social media accounts.

I cannot accept his apology until he actually syndicates it with his followers.

Seems relevant to note this behavior in light of points "6. Your code doesn’t advocate for you. People do.", "7. The best code is the code you never had to write.", and "14. If you win every debate, you’re probably accumulating silent resistance."

1. https://addyosmani.com/an-apology-to-eli/

Re:Replacing JavaScript with Just HTML on Saturday December 27, 2025 @10:54PM (#46408255)
I don't see any mention of HTTP 204 or multipart/x-mixed-replace. Those are both very helpful for implementing rich JavaScript-free HTML applications with advanced interactivity.
Re:Anthropic acquires Bun on Tuesday December 02, 2025 @08:08PM (#46129076)
They don't need revenue, they need a community. I don't know how this acquisition will affect that.
Re:Some people can't see mental images on Thursday October 30, 2025 @04:21PM (#45764869)
Throwing in my anecdote: I acquired aphantasia after a viral infection as a child. This also slightly impacted my speech. There can definitely be a fundamental difference.

In my case, I can distinctly remember my experiences from before the infection, and recall a clear difference in visualization capabilities before and after.

Re:ChatGPT Atlas on Tuesday October 21, 2025 @10:12PM (#45664192)
Third-party cookies, and presumably Privacy Sandbox are both enabled by default. I can't find any controls to disable Privacy Sandbox, and I see the presence of Privacy Sandbox attribution APIs in JS.
Re:Zedless: Zed fork focused on privacy and being local-first on Wednesday August 20, 2025 @04:49PM (#44966299)
For me, upon its inception. We desperately needed unity in API design and node.js hasn't been adequate for many of us.

WinterTC has only recently been chartered in order to make strides towards specifying a unified standard library for the JS ecosystem.

HBM would most likely have to be integrated directly on the GPU module given performance demands and signal constraints.
Re:Using an 8K TV as a Monitor on Tuesday August 12, 2025 @05:07PM (#44881818)
I reached out to JVC's simulation projector sales department directly and confirmed that this projector is not discontinued. It appears that Projector Central has incorrect information.

Note that it took a few weeks for JVC to get back to me.

"Content forwarding or sharing functionality" seems like it would cover any website with a URL.
Re:Google paid a $250K reward for a bug on Monday August 11, 2025 @01:48PM (#44867174)
Selling exploits doesn't inherently violate the CFAA.

Older »