News for hackers. Stuff that matters.

apexalpha

Good point, good chance very few individual minds actually changed their stance.

It's hard to convince people to change a stance they made a part of their political and personal identity.

Yep, it did. And (brown)coal kills much more people and the dependence on Russian gas made the geopolitics much worse than any nuclear reactor ever would.

The chances of a Soviet leadership-induced meltdown like at a German nuclear reactor that is properly designed and maintained is laughable.

It is, however, extremely hard to film the slow killing of people by browncoal. It's easy to film a nuclear reactor incident.

Oh great because the practical alternative, fossil fuels, definitely doesn't burden anyone after us.
It was part emotional response to Chernobyl, part is was full on Russian propaganda infiltrating parliaments in Europe.

The leader of Germany that phased out nuclear and made Germany fully reliant on Russia then took a job... at Gazprom. The VP from the Greens responsible took a very high paying job lobbying for foreign Gas firms, too.

It has to be one of the most successful foreign influencing campaigns in history.

https://en.wikipedia.org/wiki/Gerhard_Schr%C3%B6der#Business... https://en.wikipedia.org/wiki/Joschka_Fischer#Business_activ...

It's admirable they changed their stance but good Lord they are slow learners...
For paid streaming?? Or even YouTube?

Won't YouTube just restrict everyone to 480p unless paying?

This is such a dumb idea I feel shame in their place, or whatever the English expression for that is.

They aren't rogue, they're what you call "kings guard". They're there to protect the President, not serve the country.

They're doing exactly what you expect of such a 'secret police' based on the history of basically all other secret polices.

Re:Anthropic S-1 on Monday October 26, 2026 @03:29PM (#50249618)
I really struggle to see this company make this amount of money when Deekseek runs on a Apple Mac Studio I can just buy.

Or any hardware, really.

This is very welcome news. Well done Serbia!
Re:Dutch government had hacked into Jared Kushner's phone on Friday October 23, 2026 @08:55AM (#50208250)
Re:Docker Is Weird on Friday October 23, 2026 @03:27AM (#50205553)
Interesting read! Thanks.

Though it would be better if it compared Dockers ways to say Podman, which does things a little different I think.

For others, like me:

Footgun:

A footgun is a programming or system design term for a feature, tool, or API that makes it very easy for a user or developer to shoot themselves in the foot—meaning it causes self-inflicted damage or severe errors while working exactly as intended.

Re:eMudhra to Exit Global SSL/TLS Certificate Business; on Thursday October 22, 2026 @03:50PM (#50200133)
Offtopic: collapsing comments with a flair like ‘off topic’ or ‘me too’ is a great idea and really adds to keep the discussion on track.

This was a good read on the situation, thanks for the link.

Is the Mozilla bugtracker usually a / the Go to party for these issues? Or just a coincidence in this case?

This is not the first that RHEL is comically slow with updates...

We pay good money for their highest support tier and they are almost always the latest to bring a needed update.

Can't exactly remember what it was but it has happened before. It's a shame.

Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @01:30PM (#50198473)
This is the exact opposite I hoped to read from them.

I will never trust any brand that even remotely sounds like this company.

Re:There isn't an easy exploit for this PHP vulnerability on Thursday October 22, 2026 @05:23AM (#50193117)
This was absolutely exploitable. The fact 1000 not-working PoCs exist does not invalidate the one that does.

Sure maybe not on a vanilla install but most people don't install Php, they use a pre-made container or a platform using Php under the hood.

Yesterday I simply wasn't confident in the security anymore and the data in my database is important enough to go offline for a few hours.

A WAF can block known _exploits_ it doesn't prevent the vulnerability from being abused by a new / other / slightly changed exploit.
Exactly!

Unfortunately my static HTML is pre-rendered by a PHP engine before being served.

Would it be a good thing or bad thing if this was scaled up so email servers and instance messages services was all public if the message involved a member of a political party, without allowing any back channel or ways to avoid the public record?

They did this in the Netherlands and the result is that politicians started sending voice notes...

You also sometimes need to be able to just discuss stuff, privately. Not all phrases uttered in the context of government do well when interpreted by the general public.

Re:I Became a Citizen of Japan on Sunday October 18, 2026 @03:03AM (#50138615)
Why is allowing creation of a new culture, a mixture of multiple cultures, such a bad that thing?

Because all evidence points to mixing cultures resulting in (extremely) low trust societies.

I mean no offense but both the US and Europe's demographic 'issues' probably don't look very attractive from a Japanese perspective.

Re:I Became a Citizen of Japan on Sunday October 18, 2026 @03:01AM (#50138606)
>I sincerely wonder what kind of country Japan will be in 50 years.

You could wonder the same if they would accept a massive influx foreigners, like Europe did.

Re:Someone on Torrent Sites Kept Fucking with My Sonarr on Saturday October 17, 2026 @04:02AM (#50128955)
TIL the *arr stack has windows ports!

No idea. But any software that autodownloads from untrusted sources should NOT be run in an environment with information available.

My *arr runs in a Linux container on a VM, suggest you do the same.

“There’s not anything like this in the world,” said Corey Casey, Caltrans’ project manager for the shed.

Is there a word for the phenomenon that Americans will just always claim something they do is the worlds best / biggest / most unique until essentially proven otherwise.

How would anyone come to the conclusion that this is a new thing unique to California?

Re:What I Self-Host on Friday October 16, 2026 @04:10AM (#50115563)
My *arr stack is so rock solid and hands-off that the only downside is that I get 'inactivity' warnings from certain websites that the *arr stack uses to get 'stuff' done because they don't count API access as activity.
Re:What I Self-Host on Friday October 16, 2026 @04:07AM (#50115543)
Just looked up Clan since I'm a big fan of Nix but currently run my cluster with k3s, which indeed has some overhead.

It seems however that Clan is one of those classic projects where the website and the docs assume that everyone already knows what it is and how it works and goes straight to the benefits of doing it this (whatever 'this' is) way.

After reading both the site, docs and guides I am now scouring Reddit and YouTube for an actual explanation of whatever the hell it is and how it works.

Re:Passkeys Are Not a Trap on Thursday October 15, 2026 @01:59AM (#50099785)
I think my use case covers >99% of all organisations.
Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @12:11PM (#50089981)
What's the unique id leaking issue?

I mean you're logging in to some software, surely they need some info from you?

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @12:02PM (#50089791)
I introduced Passkeys in my company.

Every single IT person thought it would be an extreme mess, too complicated for regular users. In my company we work on the (gas) grid so lot's of blue collar types.

We went there, gave the pilot group a Yubikey and said: This is like the company pass you already have. Without the company pass you cannot enter any buildings. Without the Passkey you cannot enter a computer or app.

If you lose it report to the same people (service desk).

The response has been EXTREMELY POSITIVE. People fucking LOVE getting rid of passwords, password requirements and taking off their gloves to enter it every time.

We are now rolling it out to everyone and next year when we stop our silly "phishing game" contract we will actually save money while reducing a massive cyber security risk for our company: (voice) phishing.

Give France $30 billion and launch a few orbits full of LEO.

We don't need to cover the globe like SpaceX, just Ukraine and from there North-Westward into Russia.

Imagine Britain in the fucking Blitz where Roosevelt starts to buy oil from Nazi Germany and JP Morgan cuts off the Telegraph somehow.

Crazy times.

I would've said no, confidently but I googled it just now and think many people do consider it middle east.

So now I don't know anymore.

Yes we hold Western democracies to a higher standard than random Islamic dictatorships.

Islamic countries being dictatorships doesn't excuse you.

Older »