News for hackers. Stuff that matters.

alias_neo

Re:DiscImageStudio on Tuesday November 03, 2026 @09:36AM (#50352514)
> I played HL1 on the PS2 recently with a memory card that was really limited in space so I was only managing a single save for most of the playthrough until I soft locked myself in a room I couldn't leave using my ONLY save and had to start at least carrying a second backup save to prevent that happening again.

I get very little time to game these days, which has the benefit that I have saves usually spaced no more than about an hour apart. Sometimes a couple of hours on the weekends. There were a couple of points in HL1 where I had to go back to a previous save because I was in a bad situation, I'm playing on PC so there was no real limit on the number of saves I can keep.

I've not started HL2 yet (this time around, and it's been 20 something years since I last played it) so I can't remember what that was like.

I'm going to finish Blueshift, then go on to HL2, but I'd really like some texture and quality updates; HL2 is a real downgrade from Black Mesa. I tried it in VR but was feeling nauseous within a few minutes.

All of this is to lead up to Alyx on my Steam Frame which is just sitting there waiting until I replay these so I can remember what happened.

> Half Life 2 felt like it almost made fun of me at times for building that hoarding mentality, always dumping health and ammo on me when I had already been preserving it as much as possible right before. Meanwhile the few things I would run out of it would never give any more of for entire sections

I'll bear this in mind. I think HL1 was a little too obvious; you suddenly get a cache of rocket ammo, you know what's coming.

Re:DiscImageStudio on Tuesday November 03, 2026 @04:38AM (#50349895)
I think they're suggesting that the "data holding" layer, is actually the label, not the plastic.

The plastic is purely for protection and rigidity, the "label" is the actual functional part of the disc.

Re:DiscImageStudio on Tuesday November 03, 2026 @04:34AM (#50349868)
I've noticed this a few times where I've hoarded items to use later only to find I've finished the game before that challenging "later" arrives.

For some odd reason, the specific game that comes to mind for this was Horizon:Zero Dawn PS4/5.

Conversely, I'm playing Half-Life:Blueshift right now, and I didn't try to save anything, now I've hit a couple of points where I'm out of ammo or health and can't progress without loading an older save.

I had one fun experience in Black Mesa (HL fan-remake) where I was knocked off of the edge of a "cliff" by a large enemy (no spoilers) and it auto-saved mid-air, so it reloaded me falling forever >_<.

Re:Ask HN: Which TV do you recommend for privacy? on Monday November 02, 2026 @08:31AM (#50336594)
Had to come and say thanks! Hadn't heard of Glasshouse, and it's exactly what I wanted. Just installed it on 2 LG TVs on my lunch break and it's perfect.

I was blocking the telemetry in DNS previously, and my TVs were already rooted but weren't doing much with it. Now I've got a nice clean home replacement and all of the telemetry gone.

Re:A Printer Printing onto Paper on Tuesday October 27, 2026 @05:43AM (#50256637)
I've long had an idea that I should get my home automation to just print _something_ every couple of weeks to stop it clogging up.

It was recently fully clogged (Epson EcoTank) and I managed to get it back to fully printing after about 10 rounds of head cleaning, so it's not a huge deal, but how many home printers are really printing regularly these days.

Ours gets used maybe once per quarter, and I actively encourage the kids to just photocopy, in colour, random stuff whenever they want to be sure it doesn't just clog up.

Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @11:55AM (#50197154)
Maybe; if you were asleep for 13.5 of them.
Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @11:54AM (#50197135)
Maybe it was just a mistake and they intended to generate a `--bitsize 4` thinking it was in kilobyte units.

shrug

I think they're just absolutely inept and should never be trusted with anything security related as an organisation if this is a mistake they could make.

Re:Railway Security Disclosure on Thursday October 22, 2026 @04:27AM (#50192734)
Because you have no choice. Often times you run your backend on someone else's computer (the cloud) and they need the key(s) they need in order to access the other services your application needs to do its job.
Re:Railway Security Disclosure on Thursday October 22, 2026 @04:20AM (#50192677)
Late stage capitalism at its finest; protect the profits at all costs.

Thankfully, they clarified they're in Europe, so GDPR prevents them from ignoring known leaked credentials, lest they have that to deal with, on top of the revenue loss they'll make when all of their customers eventually find out: "they ran leaked credentials knowing our data was at risk, but decided to suck it and see".

Re:An ad-free Android TV on Wednesday October 21, 2026 @03:57AM (#50177423)
It's not recoverable unfortunately, seems either the firmware is broken or a hardware issue. The last time it worked I factory reset it to see if that would stabilise it, but it never booted again. I contacted Amazon about replacing it, but they won't do anything because it's not registered to my account (because it was removed when I reset it).

I was also running Projectivy [sic] Launcher, but it launched a minute after the stick started which wasn't a great UX so I ended up disabling it because it annoyed the family.

Either way, I'm not worried about recovering it now; it would have been nice to use it for a few thing, but when it stopped working I just went out and bought a new TV.

Re:An ad-free Android TV on Tuesday October 20, 2026 @04:24AM (#50162909)
They (Android TV devices, mine was a FireStick 4K Max) also don't give a fuck about displaying things that are inappropriate; ours showed banners for horror films on several occasions, during the day when my children are about and scaring them.

It's much harder to switch out the launcher on a FireStick, but I did manage it briefly before it started boot looping right around 1yr of ownership, so it's e-waste now.

Sorry, I somehow skipped over that.

I've been looking at upgrading to 10Gb myself, currently my top contenders are Mikrotik and Ubiquiti.

Mikrotik is much more reasonably priced, but I already have mostly Ubiquiti equipment so I'd probably spend the extra to keep the single-pane-of-glass for maintenance, something simple like the Flex XG / Flex 10 GbE so long as it can run my VLANs.

> What kind of trouble did you have with ASUS and D-Link? Security or the lack of configuration options? Haven't bought them in a while, but I remember them being somewhat decent.

I should caveat all of my opinion with the fact that I stopped buying this stuff the best part of a decade ago when I decided to go open source, so things may very well have changed in that time.

My experience with a particular manufacturer I won't name, which provides solar panel monitoring and optimisation equipment that I have installed at home suggests otherwise though, it's bad to the point of being unsure if I should laugh or cry.

Anyway, my experience back then was that Netgear and ASUS stuff was generally overpriced, performed reasonably though not amazingly well but had support dropped within 2-3 years and were left with severe vulnerabilities.

D-Link I found lacked features, performed generally weaker than the others, and were lucky to get any updates.

I can't recommend anything these days because I haven't used any in a long while, so my old-timer advice is moot. If I had to pick a branch of off-the-shelf to buy today because I was forced to it'd probably be Ubiquiti.

That said, I'm a dev in the communications-security space, my requirements are a little different to my family and friends, I have static IPs, lots of hosted stuff, and a low risk-appetite for vulns on my network, while a typical household will have a dynamic IP, unlikely to be hosting much if anything and so their attack surface is lower.

What's likely to be my next move personally? I currently run a Protectli box with about 90% more power than I need for my 1Gb network and 1Gb/1Gb WAN, but the NICs (5 Intel NICs) are the limiting factor, I'll likely buy something similar with 10Gb when the time comes and carry on running OPNSense and hopefully Coreboot.

Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @10:26AM (#50104167)
I did that once or twice, but I got fed up of finding the correct hardware revision of a particular router that supports OpenWRT, and I much prefer OPNSense anyway, and it runs on commodity hardware that you have full control over.
Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @10:21AM (#50104089)
It really depends on what you need from it; a cheap L2 switch will do the job, but frankly, you can get a Ubiquti Flex Mini with 5x1Gb ports for £35, I have a bunch of them around the house, and they're semi-managed so I can do VLANs on them and power them over PoE; since I'm already running Unifi, don't see the point cheaping out on switches.

I also have a bunch of EdgeMAX because I use the L3 features, they were more expensive, and that range is sadly now discontinued, but the Unifi equipment have all been workhorses, and the only think I've ever had fail in the past decade was an EdgeRouter Lite, the power circuitry failed after some dodgy mains voltage issues in my previous home.

Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @10:14AM (#50103996)
Your experience seems to indicate that even their APs are a mess; while I applaud your effort to solve this, "I'm too old for this shit" is where I'm at now when it come to my home network, I (and my wife and kids) just want it to work so I've spent a fair chunk of change on it.

Uniquiti APs are fine, they've been reliable for me; I have one AP that's nearly a decade old and still going strong, and I just swap them out or extend coverage when a new generation comes along, and move the older ones to where stronger/newer wifi isn't needed. If I wasn't in the Unifi ecosystem which keeps my life simple, I'd probably look at Ruckus or maybe see whether Mikrotik have anything compelling yet.

As it stands; the Unifi Server I'm self-hosting keeps them up-to-date and optimised, so I just plug in an AP, adopt it and forget about it, it gets configured automatically and away we go; that's about the amount of involvement I want these days.

Coincidentally, I need an extra AP for my Steam Frame to use it away from the dongle in an area where I currently don't have good WiFi coverage, so I'm going to pick one (probably a 7-Pro or 7-Pro-XG) up and just plug it in to an ethernet port in the room in question, wait a couple of minutes and be ready to roll.

Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @10:08AM (#50103915)
As in the others that I _won't_ buy (which is what I meant)?

I wouldn't buy Netgear, Asus, D-Link again. My ISP gave me Eero and I've never connected it, far too much Amazon crap going on there (but I have to keep it if I want the ISP to provide support).

Gl.iNet has been OK for the price but re-flash it with vanilla OpenWRT because their OS has some dubious phone home stuff (or did last time I looked at it).

Honestly, in terms of routers, I'm never likely to use something off-the-shelf again a decent box with Intel NICs that can run OPNSense and preferably run Coreboot (or similar). If I did go with something COTS (Commercial Off The Shelf), I'd look at Mikrotik.

I'm not a massive fan of Ubiquiti but I have their APs and I've had a bunch of their EdgeMAX switches (sadly discontinued when some of their best devs left), and their APs have been solid for me for the best part of a decade.

The advantage of using dedicated components is that each can be chosen according to your requirements.

Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @06:34AM (#50101726)
Step one is not to buy TP-Link routers.

I know people have limited budgets, but having seen the code that sits on these devices and how poor quality and easily exploited it is, time and time again, I'll never buy TP-Link (amongst others) again.

For a while I collected a graveyard of routers that had been abandoned by the manufacturers (and contained serious vulnerabilities), with the intention of writing them all up one day; next thing you know I have two children rapidly reaching double-digit ages, and much better things to do with my life than write about how shitty the code is on actual products we buy every day.

I switched, about 7-8 years ago to a Protectli box running Coreboot and OPNSense and haven't looked back; I use Ubiquiti APs and switches. I'm not saying they're the best, but anything used in corporate/enterprise is going to have better support (if not better code quality).

The great thing about Ubiquiti APs for me is that each new WiFi generation (or two) I can just buy a few more, snap the existing APs off of the various ceilings they're attached to, snap on the new ones, adopt them, and away we go.

Re:Solar Panels That Plug into Your Wall on Tuesday October 13, 2026 @08:04AM (#50070336)
There seems to be several levels of compatibility, at least here in the UK, based on age.

My home is 1930s, it's fuse, in the black Bakelite housing typical of the era was insufficient and we were missing a incoming breaker to/from grid, those were updated. Our meter is much more recent, though still dated; allegedly it would have worked but it wasn't a smart meter, which we wanted so we had that updated.

I've also heard through my many hours of watching Solar videos on YT before our install that some breakers, RCDs(?), RCBOs(?), whichever it is, aren't always suitable for bidirectional current flow, so that's a possible issue too.

All of that is aside the "suicide cord" danger of the old generator method, but that's gone now with modern tech, the output is cut before you can get your hands on the contacts on the end of a plug.

It's just been legalised here in the UK, and I think it will help people with their bills, but the key is to keep installation costs down; if it's DIY you can look at a decent ROI time, but with the cost of trades-people these days, if you have to call out a sparky to inspect before you plug it in, you've added potentially years to your payback period.

At ~800W, I think on the whole we'll be fine; the equipment in our homes has got much more efficient over the years, and our homes were mostly built for times where we were using higher powered devices. If you can draw over a kW to power an electric heater or kettle, I don't see why feeding a mere 800W back in would be a huge risk.

Disclaimer: I'm not an Electrician, but I do have a degree in Electronic Engineering.

Re:Solar Panels That Plug into Your Wall on Tuesday October 13, 2026 @04:50AM (#50068631)
Maybe the issue is in the terminology? In the UK, we don't call it an "outlet", we call it a "plug socket", or just "socket"; it's a socket that takes a plug, no direction is implied.

In terms of electricity and physics, this is unremarkable, the bit that probably scares people is the fact that you have a plug connected to something that's _outputting_ AC, particularly for those of us with 240V supplies.

If it were any old AC source on the other end they'd be correct, but current technology allows the output to be cut in milliseconds, faster than the period of a single AC wave, once the plug is removed.

Tangentially; if you have solar (mine's roof-mounted) don't assume that flipping the breaker means there's no power; I live in a 1930s UK home with all sorts of interesting wiring and flipped the breaker to change a plug socket, only to be shocked; literally and figuratively when it was hot.

On a tangential note, I tested Pyrowave last night streaming from my CachyOS gaming PC to my ROG Ally (running CachyOS) connected to the TV; there's 2 network switches and about 50m of ethernet between them.

Lowering the stream resolution to 1440p (from 4k) I was able to get 1440p@120Hz flawlessly playing DOOM TDA, <1ms input latency according to the overlay and display latency in the ~17ms range.

It took 900Mb/s of network bandwidth to stream that, so very close to the limit of my 1Gb LAN and still not at the quality and frame rate I'd normally play.

Add WiFi or internet streaming into the mix, and we're going to have to take a significant hit in visual fidelity and frame rates on top of all of the other issues you mention with cloud gaming.

Re:Anthropic wants your thoughts on AI on Monday October 05, 2026 @10:48AM (#49965618)
I got the pop-up and had a little read and it's framed as an "Interview", presumably by some AI interviewer they've set up, and I immediately realised they're probably aiming for a two-fer, test out their AI interview thing, and slurp up ideas from users.

I draw the line at paying them for the "service" they're "providing".

Re:Upgrade your desktop: Ubuntu 26.04.1 LTS is now available on Wednesday September 30, 2026 @10:36AM (#49909613)
This is for the .1 release which allows you to upgrade from the previous LTS.

I had the prompt on my work machine this morning which was previously running 24.04.x and is now on 26.04.1.

Re:New PlayStation 5 Console Jailbreak Released on Wednesday September 30, 2026 @04:17AM (#49905937)
Like GP, I too have been on PlayStation since 1, had all of them on day one, and still have most of them, but PS5 is likely to be my last. I haven't played anything on it since Ragnarok, only my daughter (7yo) uses it occasionally to play Astro.

With Sony's recent moves combined with a lack of games I actually want to play (Laufey might be my last on PS5), I can't see my buying a PS6, particularly with no disc drive.

I have a gaming desktop that runs CachyOS and I game on Steam as well as an ROG Ally running CachyOS and a gaming laptop for my daughter to play Minecraft running CachyOS, as well a reservation for Steam Frame, awaiting my order email.

I'm going to go back to PC gaming, buying on Steam or GOG (DRM free) where possible, and encourage my kids (at least my daughter who's into gaming) in the same direction.

Sony's PlayStation division in particular is no longer about gamers, it's been coming for a while, so I think done with them.

Re:New PlayStation 5 Console Jailbreak Released on Tuesday September 29, 2026 @05:52PM (#49901212)
That's exactly how I understand it, and from further reading, it seems Sony has now patched it already so it's game over.
Re:New PlayStation 5 Console Jailbreak Released on Tuesday September 29, 2026 @05:34PM (#49900972)
Unfortunately the goal here wasn't to get the bounty, it was to keep it out of the hands of Sony who'll patch it.

The issue, as I understood it in this case was that he wanted it kept quiet until GTA6 launches, because announcing it to the public also announces it to Sony, and they'll patch it; normally that's fine, everyone just doesn't update, but given GTA6 is apparently quite popular, my understanding is that he wanted to let everyone get that one last update that allows GTA6 to run before they're stuck on that version.

Re:My Weird New Hobby: Wandering Around Tokyo on Google Maps on Friday September 25, 2026 @03:45AM (#49841413)
This absoluteness bothered me; the car clearly wasn't in the same exact place, yet it was mentioned at least twice. I think that's what tipped me off to the AI writing.

The car was further in/out of the drive in the two shots, the wheel orientation was different, the window shade was different; all of which made the commentary on it not being abandoned ridiculous; of course someone parks their car back on their own drive, and it'll be in almost the same place, give or take a meter or two.

Re:Don't Let Anyone Take Away Your Big Box of Cables on Friday September 11, 2026 @03:46PM (#49664321)
Generally no, you're far more likely to get something that DOESN'T do what's asvertised in my experience.

You can almost always tell the second it's in your hand; in order to do the high throughput stuff, 20Gb, 40Gb etc, the wire is much thicker and stiffer, it needs conductors for all of those contacts. Ive never counted but it's something like 20 of them vs 4 in a standard cable.

Of course always C to C; the A connectors with the extra contacts in between the normal USB 2 ones still aren't enough.

Re:Don't Let Anyone Take Away Your Big Box of Cables on Friday September 11, 2026 @06:25AM (#49656064)
I thought about that as I was writing, I think I might do just that!
Re:Don't Let Anyone Take Away Your Big Box of Cables on Friday September 11, 2026 @06:19AM (#49656027)
For USB, if it can carry 65W+ of power to my laptop as well as the Keyboard/Mouse inputs, 4K/60Hz display and audio back to the monitor as well as KB/Mouse and perhaps some external storage or network adapter, that's a pretty amazing cable.

I also have preferences between my cables by the quality and aesthetic, I prefer some over others because they look or feel nicer even if in testing they contain the same conductors, but that's just ... me.

I currently have 3 such cables connected to my work laptop each sending 4K/60Hz video to each of my 3 x 4k monitors, audio to my soundbar and one of them is powering the laptop at 90W and sending my keyboard, mouse and webcam inputs back.

Older »