News for hackers. Stuff that matters.

SkyPuncher

Re:Claude Opus 5.5 Can Draw Permit-Level Architectural Drawings on Tuesday November 03, 2026 @09:31AM (#50352455)
That was actually the intent of my point. Though, I clearly made it poorly.
“Permit level” is doing a lot of lifting. Standard vary greatly by locality and project. Plus, permitting is a much lower threshold than actual inspection and sign off (which is where the issues will be caught).

A build permit simply says that they reasonably believe you can build the thing such that it will pass inspections. It doesn’t mean that every single detail will be finalized or correct.

Based on my understanding of the technology, this also means you can effectively dictate in loud environments. Correct?

I find that I need this most often when I'm doing yard work, running equipment, or cleaning out the garage. Audio based microphones pick up so much noise.

I talk faster, but beyond the speed, I find it allows me to explain things to the LLM much more naturally.
Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Friday October 30, 2026 @02:22PM (#50308095)
I fully believe it and it reads as extremely plausible. I'm less trying to cast down on the claim and more trying to hedge my authority on this subject.
Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Friday October 30, 2026 @02:18PM (#50308024)
It's probably less that he had "access" and more like it maintained some underlying systems.
Re:Northflank Breached on Friday October 30, 2026 @02:08PM (#50307891)
In a prior role, we realized something similar with outages. For our particular product, we AWS went down - we went down. We freaked out the first time, but after it was done we realized not a single customer had inquired. This felt unusual since we were getting emails quickly if we have a self-inflicted outage.

Turns out, when a major provider went down all of our users were too busy fighting their own fires. When they do notice, it's on a day when ALL of their vendors are struggling so we don't get singled out as a bad apple.

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Friday October 30, 2026 @11:10AM (#50305017)
I have read of Venezuelans using it as a safe harbor against their currency instability.

That seems valuable, but I’m not sure how much truth there is to a story I read on the internet.

For most of these bugs, they occur in a 3rd party software thats easily upgraded.

I’m saying patching is easy because the pill is delivered to you.

I strongly doubt that. The fixes for most of these are trivial to the point it’s almost automated.
Same where I live. I love finding high-mileage cars that are way cheaper than everything else. People seem allergic to these vehicles, but I’ve yet to have any major issues with them.

But, like clockwork, that 10 year marks and everything just starts rusting out. While I could be religious about washing, that’s a huge pain.

Re:JetBrains Thinkrail on Sunday October 25, 2026 @08:01PM (#50237280)
They're too hung up on their next product being more of the same.

They'd honestly do well just to pick one of the open harnesses, aquihire their team and start from their

Re:Railway Security Disclosure on Wednesday October 21, 2026 @08:07PM (#50189353)
Why not?
> but society is getting increasingly SAFE

It’s such a shame that media (social and traditional) really plays up loss aversion. My local news is basically fear mongering. My local social media page is filled with people who have nothing better to do with their time than complain about all of the negative stuff happening in this town. They take every isolated incident and project it as some major pattern. It’s really sad.

Yes, but there is generally not a requirement to inspect trees. Even a tree being dead is not sufficient to prove negligence. Dead trees don’t fall over immediately.
Re:Show HN: Unfenced – Land for sale that borders public land on Thursday October 15, 2026 @02:09PM (#50107743)
It depends. I had fences on several sides of my yard growing up. Nobody doubled up. For the most part, it worked. It seems liked all of the fences had a primary owner who’s attitude was “I have a fence, it doesn’t matter if you have a fence, but I do - so I will pay to maintain my fence”

It worked.

Re:Show HN: Unfenced – Land for sale that borders public land on Thursday October 15, 2026 @02:07PM (#50107697)
Nope (though it does depend). I’ve been through several trees falling from storms.

Unless negligence is involve (like an arborist being hired to condemn a tree), they’re generally considered and act of god. They’re the responsibility of the property they fall onto.

So, in the case of OP, the situation is unfortunate, but it’s on him to maintain his properties and his fence lines within his properties. It’s convenient the state has a fence along part of his property, but it’s not their responsibility to fix it for adjacent lots.

Re:New Apple TV 4K on Tuesday October 13, 2026 @10:59AM (#50072796)
I’m not actually complaining but I’m seeing an increasing number of family oriented gaming consoles. They seem like something eared towards gamer parents who don’t wan their kids going all in on a console yet.

This positions them to compete directly against those

And, yet, I can't get Opus 5.5 to run analysis on a public data set without it complaining about all sorts of PII adjacent stuff.
VSCode for the rare time I need to view a file.

GitHub or Tuicr for code review. Still waiting for an agentic first review environment- which Jetbrains has missed the ball on.

I have paid out of pocket for Jetbrains for 15 years. I don’t think I’ve opened it in the past year and should probably cancel my subscription.

For me, the things that made Jebteains great just don’t matter anymore.

I do security review for my company. I suspect this is a means of containing OAuth redirect vulnerabilities. We basically needed to do the same thing with our MCP server.

The security problem is two fold: (1) companies want control over where their data goes. Figma allowing any MCP creates problems (2) open redirects can create phishing issues. If your using Pi, you’re probably thinking of this. Most users aren’t.

For us, we decided to do an allowlist pattern because it was a reasonable tradeoff. The solution is allowing per-tenant client configuration, but that comes with its own set of issues (dev time, support, maintenance, etc). When nearly all of the money is flowing through a handful of well-known MCPs there’s little reason to out effort into supporting every MCP.

I have never heard of this. Do you mind sharing some examples?
Re:Plan Mode Is Dead on Friday September 25, 2026 @09:00PM (#49852074)
Plan mode was great, but I realized I progressed well beyond it. I found that I was getting these categories repeated errors and oversights from Claude (and frankly it hasn't gotten much better about this). Skills were too generic and got lost to context.

I ended up building out tool an MCP server that I use as a bit of a psuedo harness for Claude. I have a variety of multi-step workflows that are basically micro-skills stacked on top of each other. This helps me make sure that I can get Claude to think in a repeatable and reliable manner.

For coding, I've found that I have a few specific steps that Claude needs to do before I'm comfortable letting it loose:

* It must extensively explore the code base (including certain areas that it misses)

* It must think about what it doesn't know or is making assumptions about

* It MUST scaffold out it's intentions. Essentially, it can write comments, classes, and method stubs - but no actual content. Very much like a spec, but since it's in and alongside other code, it's much easier to identify problems.

* It must spike and validate key assumptions. This, plus the prior step, are the only way I've figured out how to avoid it ending up in a confusion loop. Too often it looks at poor-quality code it's written and thinks it's a long-term solution. By avoiding writing code as much as possible, it knows that it's draft content.

* Only, then can I review it and send it it.

Said MCP server (missing the actual ops): https://github.com/clops-mcp/clops-mcp

Re:Meta VR Glasses on Wednesday September 23, 2026 @09:24PM (#49825030)
It’s terrible.

I’ve always wanted it to be better, but it’s just terrible. It’s like working on a projector screen where the pixels never line up.

Re:Meta VR Glasses on Wednesday September 23, 2026 @09:23PM (#49825014)
Anyone know the resolution?

I have Xreal airs. And, while, I like them, they’re rather useless because 1080p just isn’t enough.

Re:Cloudflare/Security-Audit-Skill on Thursday September 17, 2026 @11:13AM (#49742020)
These work best on a targeted section of the code, like a PR.
Re:Global Shortage Has Led to Motor Oil Rationing at Costco on Sunday September 13, 2026 @07:16PM (#49689745)
“I haven’t brushed my teeth, but I don’t have a cavity - so I’m good”.

Don’t get me wrong, my “fun” car (an old, beat up Jeep) is going on 2 years with the same oil (I barely drive it), but I known I need to change it soon.

Oil degrade with oxygen. Every time you drive that car, the oil are being re-oxygenated and continuing to degrade (along with being exposed to combustion byproducts).

Also, the type of wear you get often isn’t noticeable until it becomes catastrophic. In my case, a 30 year old car that’s already on its last legs “catastrophic” is more like “time to finally drag it to the scrap yard”.

Re:Global Shortage Has Led to Motor Oil Rationing at Costco on Sunday September 13, 2026 @04:50PM (#49688539)
Engine oil is pretty much the only critical one because of the tolerances between the piston and the cylinder. Loose tolerances allow bypass (inefficiency), but tight tolerances require good lubrication (friction). Engine oil is also unique because it’s exposed to oxygen and combustion byproducts.

The other components just aren't as sensitive or exposed to as much abuse. Often, really only needing replacement if they’ve leaked out.

You don't need any real legal basis. We're talking about kids sporting events. Social pressure is often enough.

You don't want to be the reason your kids team lost. You don't want your kid getting kicked of their team for your behavior.

Older »