News for hackers. Stuff that matters.

TheJoeMan

This article from last wednesday seems to say the opposite, that the China-domestic sales are declining: https://www.cnbc.com/2026/10/28/china-car-exports.html
Yelp has made a resurgence in my opinion. So far I have found a good garage door guy and painter guy. Everything negotiated via texting (phone call first). Make sure when they show up they don’t have an iPad.
Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @11:17AM (#50196591)
I just explained what it actually is. I said "you know how you go to a website HTTPS and it's secure? Well Apple chose a couple of trusted parties that your phone inherently trusts, and those people approve a few thousand intermediate companies who do the day-to-day certificate work for end websites. One of those intermediates, rather than choosing a 200-digit random number, chose 4, no not four-digits, the number 4". And then we could laugh at some of the memes.
As long as programmers trust 3rd-party-provided content-length input, it will be insecure. At this point, I'm not sure why we even use content-length anymore since you're going to need to size your buffers based on the actual content.
I must say, if I was writing a password cracker, I probably would not think to actually start at "1".
Re:How California Closed the Montana License Plate Loophole on Wednesday October 07, 2026 @08:24AM (#49991786)
I once saw an SUV at the country club with “Manufacturer” plates. There’s always a higher peak…
These new proposals, which have been suspiciously hidden under NDA’s, misdirection, etc. are ENORMOUS. And the local permitting in my area has data centers categorized as “light industrial”, and thus passed a 1-year moratorium to revisit the code. I am fully aware of smaller data centers along the highway I drive every day with no issue, and as such I do not consider myself crazy.
The Red Delicious has been optimized for the growers, packers, and grocery stores, and not the consumer. The priorities are thick skin so they can be roughly handled, and bright red because they believed that's what would make people purchase them. "Cosmic Crisp" is their answer to the Honeycrisp, by trying to tweak the Red Delicious instead of abandoning it. I see it as the equivalent of "a faster horse" dilemma.
From a layman perspective, American fruit growers refused to change with the times. How long are they still trying to make the “Red Delicious” apple work? Another ex-major packer I know of made the peach fruit cups, which people have been catching on are just filled with corn syrup. But these have been long term purchasing trends, yet the growers seemed blindsided by the packers ceasing operations.
Wow that’s fascinating thanks for sharing.
In the great POSIX, Windows vs. Apple filesystems debate, and iPad "what is a file", the great AI Overlords propose: "what if the filesystem was soup?". Manufacturer instructions, public data, and user's instructions and data, all sort of swimming together.

Could also phrase it "What if the filesystem was SOUP?"

Re:Apple releases iPhone Duo simulator and Xcode 27.1 beta on Friday September 18, 2026 @08:43PM (#49762189)
Apple’s Developer Documentation is historically pretty terrible. So I’d be curious to see if they stepped it up for the agent instructions for the new API’s.
Re:Fed hikes rates as inflation worries push up bond yields on Wednesday September 16, 2026 @04:16PM (#49732350)
Unfortunately, during that time is when they screwed around with the gold confiscations. So the best option would have been to illegally hoard gold until they struck the statute down?
Re:Will There Be a 7G? on Saturday September 12, 2026 @08:43PM (#49678752)
My pessimistic take is it’s being optimized for the “numbers” users benchmark with. The 5G repeater towers that display on your phone as full-bars but the tower itself is constrained, to juicing the speedtests. Apple even changed how the RSSI translates to the bars. There are engineers doing great work, and the marketing teams muddle the waters (like ATT’s “5Ge”).
Re:Fuck Off as a Service (Foaas) on Thursday September 03, 2026 @10:10AM (#49550155)
Is there a term for the design style of the plastic panels? I've been seeing it more often, for instance the robot wheeled base looks like an Amazon Delivery Van. Hidden screws, 45degree angles but with soft corner bends.
Re:New Mac mini, featuring M6 and M5 Pro on Tuesday August 25, 2026 @11:23AM (#49435720)
I took a peek into APFS a bit ago [1] because I (stupidly) yanked a usb SSD before it was unmounted and corrupted it. Reading the documentation, it seems to have many "cool" features which just aren't fully exposed/utilized in the OS, and there is a lack of API tooling.

For example: it is copy-on-write, and my corruption happened in the superblock checkpoint. There is no built-in command in Disk Utility to "mount" an older checkpoint (and accepting a small amount of dataloss). Also the "First Aid" command allegedly runs volume repair top-down when it is recommended to do it inside-out.

[1] https://www.ntfs.com/apfs-structure.htm

Re:Yes/No/Cancel causes Aspirin sales to soar (2007) on Friday August 21, 2026 @11:04AM (#49389221)
In the world of 2TB SSD’s, it does seem silly to risk inadvertently deleting an important ~2kb word document.
Ironically, these are a distillation of the collective intelligence and efforts of a business that has ultimately failed. Would you hire the previous COO of Spirit? Or the CTO? Instead you’ll have an agent that is influenced by the way this company did things, architecture and business decisions. Not trying to be negative, just makes for an interesting thought.
Re:The continuing "Q collar" scandal on Monday August 17, 2026 @08:25AM (#49329744)
“You can think of Q collar as a baby version of health scams promoted by wealthy and powerful medical-adjacent celebrities such as Dr. Oz, Andrew Huberman, and RFK Jr.”

This sentence seems unnecessary and perhaps inflammatory, I think it detracts from the article.

The author was involved and knowledgeable in the FOIA processes that existed, and had an understanding of navigating a quagmire of redundant government employees. A cost-reducing restructuring has been going on that seems to funnel all requests to a single place, the "Federal FOIA Portal". Once they submitted to the portal, their request was confirmed as entered. They also had an issue with the new portal, submitted the error, and it was escalated and fixed.

This article could just as well been written as "New FOIA Portal: Streamlined, but Still a Few Bumps".

"The purpose of a cancer hospital is to cure as many patients as possible" seems also like an extreme? They are businesses, after all, and there will be cases that would be unreasonable to pursue?
Did they build 5,000 airport scanners at once? MOQ is brutal!
Re:About the security content of macOS Tahoe 26.6 on Tuesday July 28, 2026 @11:29AM (#49085412)
What I mean is that for “honest” software, built-in to the OS or otherwise, the programmer finds a situation where they take some user-supplied input and concatenate that into a path, and call something like OS.read(). If they want to prevent the user from causing havoc, they now find themselves dealing with path validation in their software instead of calling OS.safeOpen(), which would be a reduced subset of allowed chars?
Re:About the security content of macOS Tahoe 26.6 on Tuesday July 28, 2026 @10:11AM (#49084177)
This may be a naive take, so if anyone has insight please feel free to share, but across Windows, Mac, and Linux OS's I see many cases of path parsing vulnerabilities resulting in sandbox escapes, code execution, or data access issues. When presenting the user with a file picker or command-line input, is it really needed that the software can handle the full POSIX spec?

I do not see a "typical" user needing to access a path with say a network storage but multiple ../.. and hard and soft symlinks simultaneously. I think "be liberal in what you accept" might need to be revisited for path parsing with some sort of OS-wide single-implementation as an optional feature.

Re:Is this the end of the once-mighty GoPro? on Saturday July 18, 2026 @06:51PM (#48963268)
If you look at these US high-tech consumer products, many companies started out much “simpler”. GoPro was a disposable film camera and a wrist-strap, and iteratively got to where it is today. The iPod came out much before the iPhone. As you say, the R&D is a hard sell when you have to go from 0 product to a fully featured state-of-the-art. Somehow, these Chinese companies can spend years copying and then once locked in go on a new-features blitz.
Re:Is this the end of the once-mighty GoPro? on Saturday July 18, 2026 @06:46PM (#48963219)
I never understood if I was supposed to turn it completely off on the ski lifts or leave it in “sleep” for best battery life, and like you say the battery in the cold was just disappointing. Some irony though with another HN commenter having an overheating issue.
As a counterpoint, why should a “metal finishing technique” be proprietary? Lying to the vendor that Apple said it’s ok is obviously wrong, but an employee taking that knowledge in their head doesn’t seem wrong to me. We have moved past the age of indentured apprentices and the freemasons.
Re:Rocketlab acquires Iridium on Monday June 29, 2026 @02:56PM (#48723554)
I'm not quite understanding, sorry if what I said was misconstrued. You don't think the engineering team considered reflectivity from a moral perspective? I am saying there needs to be some standards set out so that future engineers at unscrupulous companies have something to point at as a requirement.
If I run into someone at the grocery store, I can remember "oh I saw them yesterday" if the Police interview me. If I start writing down/logging every time I saw that person at the grocery store and plotting it out, I would consider that "crossing the line".

A Flock camera that receives BOLO's for known-criminals and immediately flags captures in real-time is different than tracking every person going everywhere with a history.

Older »