News for hackers. Stuff that matters.

akdev1l

You can add the intermediate CA to your block list, presumably the distros will do this
Re:Show HN: NSL – WSL for Linux on Tuesday September 29, 2026 @07:48PM (#49902437)
libkrun exists so we can just run containers inside a virtualized environment without special tooling
Re:Ubuntu 26.10 completes transition to Rust-based coreutils on Tuesday September 15, 2026 @10:54AM (#49713503)
How exactly is cp not portable?

Whatever behaviour you’re describing is not how POSIX mandates cp to work. In fact you can do this with busybox too.

cp will open("/dev/sda", O_WRONLY | O_TRUNC) and simply start writing to that file descriptor.

Re:Ubuntu 26.10 completes transition to Rust-based coreutils on Tuesday September 15, 2026 @09:13AM (#49712032)

    cp file.iso /dev/sda
len(pics) either already knows about the length or it needs to count so it’s O(n)
Re:Using jq to format JSON on the clipboard on Wednesday September 02, 2026 @01:54PM (#49539917)
you can use xmllint for xml via xmllint —-xpath

It’s great as it is included by default in RHEL/Fedora

The document is clear that the expectation from the developer is that you need to be ready for your app to be snapshotted and frozen/killed at any moment when it is not on the foreground.
This is literally always how iOS has worked. You can refer to the application lifecycle documentation: https://developer.apple.com/documentation/uikit/managing-you...
Re:"It works better in the app " on Friday August 28, 2026 @12:21PM (#49480773)
How does typing a url stop that?

type out: https://thisislegitparkingpaymentwebsite.com

Is this goatse or is it the real payment website for your parking? You won’t know unless you go there

Re:Linux 7.3 improves performance when running out of vRAM on Tuesday August 18, 2026 @12:46PM (#49348482)
Linux can be configured to disable memory overcommit

sysctl -w vm.overcommit_memory=2 sysctl -w vm.overcommit_ratio=50

It is probably a bad idea to do that though as it will limit the amount of virtual address space an application can use

Docker uses VMs in non-Linux OS to provide a Linux where containers can actually exist
bubble wrap is just doing the same cgroups work
podman run --annotation=run.oci.handler=krun -dp 8080:8080 -t --rm server-without-wasm
Do you mean like Podman has supported for years…?

eg: https://josecastillolema.github.io/podman-wasm-libkrun/#libk...

subprocess.run() uses Popen and defaults shell=False. There is no shell process involved. As the other user already pointed out.

    from subprocess import run
    from sys import argv

    source = argv[1]
    destination = argv[2]

    run([
      "rsync",
      "-zavp",
      source,
      destination
    ])
vs

    #!/usr/bin/env bash

    source="$1"
    destination="$2"

    rsync \
      -zavp \
      "$source" \
      "$destination"
the overhead is not really that bad imo
Re:Arch Linux disables AUR package adoption on Friday July 31, 2026 @07:56PM (#49129825)
This is a lose-lose proposition.

1. Lose money burning tokens in all of this stuff. 2. Lose reputation when some malware eventually makes it through

> hence why passkeys were ideally device specific, non-exportable

Not true. The original concept was always for them to be cloud synced.

This has nothing to do with their anti-phishing capabilities. The anti-phishing capabilities come from the fact that the password manager authenticates the application before handing out the passkey. It doesn’t matter if they are synced across devices or not.

You are correct that other login methods might be weaker than passkeys. I’m not sure how that’s related to passkeys though. In real security sensitive applications the recovery process is “go to the bank’s branch and show them your driver’s license”.

> Your master password to your cloud PW manager's vault is also phishable

No, it’s not. You would need to steal my yubikey to get access.

Some functionality is not supported via USB-C. Namely HMAC Challenge does not work via usb-c but will work via lighting port.
By still having the password the user can still be attacked via phishing
Yes they have biometric collection stations now.
Rube Goldberg machine attached with used bubble gum and somehow the bubblegum was chewed in all the wrong ways
Not even tests but just some basic anomaly detection lol.

Like maybe if the bill amounts increase by like 10M% there should be someone that looks into it

Umm my toaster doesn’t have this problem and it’s not AI …

why does this happen to you?

If you put AI on a project the average consumer will think it’s using ChatGPT or something like that

I mean I agree with you just that the popular perception of that word has changed

Flathub only reviews the manifest.

If your manifest is covertly injecting malware into the build it could be easily missed. Consider some of the manifests are simply downloading deb packages and unzipping them.

The canonical answer to any concerns with the AUR is always “just read the PKGBUILDs bro”
LMAO brother you should stop projecting and get little more self assurance that isn’t tied to your wealth
I get my hair cut at a place where it costs $45 and I get a haircut every 1-2 months at best.

I wear my shoes until they break. I wear Vans Sk8 old skool high tops most of the time.

I am also on track to retire by 40 if all goes well. (Which is to say I don’t have THAT much money)

> Why would you want people to think you're poor or cheap, except maybe when you're shopping for a car.

Personally, I don’t generally think about how other people perceive if I have money or not.

Older »