News for hackers. Stuff that matters.

alexriddle

Anything over 150 seats means you need to pay at token rates plus the $20/user. My day job is operational (no coding at all) and I'm spending ~$300 a month on a few chats with Claude/Cowork a day over the course of a month.
Hospital admissions are reliable indicators for violent crime and stabbings in particular - if you get injured you're going to need a doctor and they will record it - and these are going down [1]. There is little to suggest any kind of epidemic or increase in violent crime is going on and the stats on this seem to play out.

What is more of an issue is more antisocial crime such as street robbery or shoplifting. These crimes are much more likely to be snatch and grab, with no violence involved. They still have an impact on the victims but they're not making the city significantly more violent.

[1] https://www.london.gov.uk/london-records-fewest-homicides-ye...

Lumibricks is fantastic, built in lighting (or rather you build it in as part of the model) and as someone who has always turned their nose up at off brand Lego, the parts are definitely 99% of the way there. Instructions the same quality, if not better, than Lego as well - all for about the third of the price.

Minifigs are terrible but I have hundreds of those spare anyway!

Re:New Lego smart-play system on Tuesday January 06, 2026 @11:29AM (#46514455)
The gap is reducing significantly - I have collected and built Lego for a long time and had this opinion but have recently discovered Lumibricks (formerly Funwhole) - excellent designs, and around 1/2 the price of Lego (but they all include lighting elements) and having put them together I can say they feel exactly like Lego. I believe there are other brands of similar quality.
Usually it would be either the full day (ceremony, meal and ‘evening party’ which we commonly call the reception) or just the reception. No one is being asked to skip the middle part of the event.

Less than 20% of weddings are religious (and a smaller subset of this will be in churches), and I don’t really hear of anyone just turning up at the ceremony of someone they don’t know.

Re:“No tax on tips” is an industry plant on Friday August 01, 2025 @09:02AM (#44756172)
Weirdly on Reddit I keep getting the doordash and ubereats communities pushed at me - there is a very strong view amongst people using these apps that anyone who says they will "give a cash tip" will not actually do it, so it's probably not as beneficial as you might think.

The tips on the apps nominally do go entirely to the driver.

Re:“No tax on tips” is an industry plant on Friday August 01, 2025 @09:00AM (#44756140)
All that this does is ensure you don't get stacked with another order ahead of you (so the delivery is direct from the restaurant to the person who ordered) in theory.

It doesn't help with situations where drivers are multi-apping (accepting orders across multiple apps and juggling them). The drivers don't even know you have priority.

edit: and in the US where you can definitely see the tip up front, you will almost always find that the order will get picked up quicker if you increase the tip by the equivalent of the priority fee. But you may well get stuck with a delivery before yours.

Re:Visa and Mastercard: The global payment duopoly (2024) on Thursday July 24, 2025 @06:31PM (#44677091)
Other than Amex for airline points I don’t spend a penny on banking, all the standard services (eg transfers, bill payments, cash withdrawals, deposits) are free (in the U.K.) with no monthly fee.
Most of the time we knew because people are generally honest and tell the truth. A few times where we had concerns we'd apply for a police report - even if someone will lie to their insurer, they rarely lie to the police in the heat of the moment when reporting the crime.

All that said, I can't recall many instances where the theft wasn't either breaking and entering, or entry through an open access point. As easy as lock picking might be, it's not a common burglary technique.

In the UK where I am, most standard (not budget) property policies would cover theft from an unlocked entry point.

Two main exceptions:

1 - if you are letting the property to someone else, e.g a lodger or have paying guests staying with you then this is typically excluded.

2 - if you have had previous theft claims, live in a high crime area, or you have a particularly high risk (e.g lots of valuables), the Insurer will add an endorsement that you need a minimum standard of locks and have them engaged when the property is unoccupied.

Outside of those, if you accidentally leave a door unlocked, your claim will likely be paid. The situation obviously may be different in other countries. I worked for a property insurer and saw hundreds of these claims (entry via an unlocked entry point) paid during my time there - I also saw many declined because of the above.

I suspect that over time the number of policies in the 'budget' category will continue to increase as price continues to trump everything else for most people]

edit: it is the same for the other lines I mentioned as well -e.g a cyber policy I saw recently has no conditions relating to use of MFA. It will have been factored in when writing the risk (they will have said they use it) and if it turned out it was a lie then there would be an issue with cover but if it was just a case of an admin forgetting to include an OU in the MFA group policy the claim would almost certainly be covered. Policies aimed at the SME space are much more likely to have specific conditions though.

Lots of insurance covers these types of situation which are the result of careless acts...

Don't take the right safety precautions and burn down a customers house - liability insurance

Click on a link in a phishing email and open up your network to a ransomware attack - cyber insurance

Forget to lock your door and get burgled - property insurance

Write buggy software which leads to a hospital having to suspend operations - PI (or E&O) insurance

Fail to adequately adhere to regulatory obligations and get sued - D&O insurance

Obviously there will be various conditions etc which apply but I've been in Insurance a long time and cover for carelessness and stupidity is one of the things which keeps the industry going. I've dealt directly with (paid) claims for all of the above situations.

It doesn't absolve responsibility though, it just protects against the financial loss. I suspect if you leave a child alone with an AI and the house burns down that's going to be the least of your problems.

Re:Visualizing 13M Bluesky users on Tuesday November 12, 2024 @03:05PM (#42119125)
I don't think that's particularly true but even if it was, the site is overrun with crypto spam and porn bots that will drive people away. I know 3 people who have deactivated their account and switched to bluesky in the past week - and anecdotal evidence for many people on bluesky seems to suggest engagement levels are significantly higher. The network effects are really gaining traction as well.

I gave up on Twitter when I opened the app in public to find a porn video playing in the main feed, despite not following or interacting with any accounts of that nature previously. That was ~6 months ago and I haven't looked back.

Re:Psssst! Your date of birth can be a random number! on Thursday August 15, 2024 @07:05AM (#41254700)
I may have misunderstood the parent comment - with gmail, you can add dots anywhere in the mailbox and it all goes to the same place (standard gmail, not workspace)

e.g [email protected], [email protected] and [email protected] all are the same user and will go into their mailbox (which I have used to avoid the + stripping that some sites do)

[email protected] and [email protected] are two distinct users.

Obviously if you control the domain or use a provider who supports it you can add an alias with punctuation but then you might as well just use e.g [email protected] to track the email source.

Re:Psssst! Your date of birth can be a random number! on Thursday August 15, 2024 @04:28AM (#41254053)
This works for some providers (Google) but definitely isn't universal - MS/Outlook doesn't support it for example
Re:Show HN: Adblock for Podcasts on Wednesday May 22, 2024 @03:41AM (#40438332)
I'm fairly sure that most podcast platforms now include dynamic ad segments - I listen to a few and whilst some (usually where the hosts record ads themselves) seem to have static ads, others definitely have ads which are updated automatically
Some operators do have their own infrastructure and most large ISPs have equipment in local exchanges and operate their own backhaul.

Lots of it is just about marketing though.

I’m fairly sure it was confirmed they don’t have any standalone cyber cover so probably no insurance will be picking up the tab.

I work for a cyber insurer (who are trying to reduce the risk of compromise, alongside transferring some of the risk via insurance) - providing they’ve not been misleading in their application, we take the risk as we find it and can’t just not pay because of poor cyber controls.

Re:British Library cyber incident review [pdf] on Friday March 08, 2024 @07:51AM (#39640603)
I work in a related field (cyber insurance response) - typically takes a few months to identify exfiltrated data and then analyse it to understand what is in it. This might seem simple but there are usually in the region of hundreds of thousands to millions of files, and that may contain spreadsheets with tens of thousands of rows. This all has to be analysed, filtered and reduced to the point you have a list of PII which has been impacted, and can decide on what to do.

Credit monitoring is usually offered as standard when a breach occurs, the UK is much less litigation friendly than the US so in the absence of any actual harm, that would discharge most of their obligations to protect you following an incident.

Re:Why car insurance in America is too cheap on Saturday February 03, 2024 @12:13PM (#39242389)
The UK motor insurance market is one of the most competitive in the world. Aggregators have created a situation where every insurer is looking for the slightest competitive advantage to drive themselves up the comparison table.

I don't have the most up to date figures but in 2022, combined ratio was forecast to be 115% for motor insurance - this means for every £1 in premium, £1.15 was paid out in claims and expenses. There is some income from investments but it's minimal compared to the pre 2008 situation.

Consequentially several insurers have exited the personal lines market as they cannot make money from it - RSA for example. 2022 is forecast to be the worst year for insurers since 2010.

The market does suffer from a cycle of 'hard' and 'soft' markets and there will be an overcorrection in the short term - over a few years, we'll see insurers seeing an opportunity to undercut the market and gain market share and premiums increases will ease.

TLDR - whilst it is painful to see premiums rising so quickly, it is not an industry that is awash with profits.

Which isn't even legally permissible, there is no way to 'give it back' (although you could stop using the title) - it can only be taken from you, which has to be done by the king on recommendation of the prime minister.
Re: on Friday November 17, 2023 @07:18PM (#38312829)
Is this not just Bing searching the web under the built in web search integration?
Re:The best place to shop is other people's lost luggage on Sunday November 12, 2023 @04:16AM (#38238678)
Appreciate the focus is on the US but for contrast in the UK, 'theft by finding' is a specific offence - whilst you can generally keep unclaimed lost property you should make some effort to find the owner before doing so. People have been prosecuted for keeping money they have found on the floor [1]. That said, these days the police don't have the resources to track lost property so it's unlikely most items would ever be reclaimed and after a certain period it does become yours.

[1] https://www.bbc.co.uk/news/uk-england-stoke-staffordshire-39...

I suspect the unit would be funded directly by Sky - the advantage to doing it that way is that they have access to the CPS and police intelligence, as well as all the powers the police have which they wouldn't if it was done in house.

Insurance fraud is run along the same lines, all insurers contribute towards IFED which is a part of the City of London police tasked with tackling insurance fraud. If this relied on public funding I doubt anything but the most extreme cases of insurance fraud would be investigated.

Re:Microsoft is bringing Python to Excel on Tuesday August 22, 2023 @09:40AM (#37222557)
For someone working outside IT but who has coding skills, it's great. My previous work computers have been tightly controlled by IT and installing libreoffice on them wouldn't have been permitted.
Re:Go with PHP on Thursday May 11, 2023 @04:06AM (#35899234)
What stack can handle 500,000 orders per minute - 22.3 billion a month - on a $6/month server?
Re:FTX Discovers $7.3B in Assets on Thursday April 13, 2023 @01:36AM (#35551403)
Reading the latest update from the bankruptcy, regulation and enforcement definitely would have helped - I suspect any appropriate auditor conducting a thorough audit would have very quickly realised that the business lacked any controls at all on expenditure (amongst many other issues).

Instead, their auditors claim they stand by their work as they weren't asked to audit any internal controls. For a company with billions in customer deposits, that should never have happened.

Re:Web fingerprinting is worse than I thought on Tuesday March 21, 2023 @07:14AM (#35244721)
I've had to implement this - we have a web app used by engineers in the field where signal is often not great. We got lots of complaints about image uploads as for a typical job there would be potentially 100+ images that needed to be uploaded (multiple assets with 2 before and 2 after photos per asset).

iPhone defaults to uploading a large image which can take ages to upload. We implemented a canvas based solution which sends a base64 string representing a compressed image and reduced the upload file size by about 90%. We don't need high quality original images in the backend.

I may have missed a trick, this has been in place for a few years now but at the time I couldn't find a better solution.

Re:Discord, or the Death of Lore on Tuesday March 07, 2023 @05:01AM (#35053573)
I have joined 2 discords in the last week (as lots of 'community support' seems to be moving there these days). I set a username but I haven't had to supply any other info - I can't post anything and there's a banner saying I need to claim the account to avoid losing access but it's definitely not every discord which requires a verified account.

Doesn't help with the issues around searching for data from outside of discord.

In the UK (arising from GDPR so I would assume EU as well), sensitive personal data is an enhanced category of PII which requires more considered handling.

This would include things like race, health conditions, disabilities, sexual orientation, political views - basically things that you wouldn't expect T-Mobile to be storing.

Not just the diversity page - it looks like they removed a bunch of pages from the careers site - e.g the "early career" page that is in the header is also removed. Only the "search jobs" button remains.

See the header at https://careers.twitter.com

Older »