News for hackers. Stuff that matters.

asdf88990

Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @05:34AM (#50335121)
Auth0 and friends are useful for social logins but that should be about it, not replacing your user table wholesale like people do.
Re:If IPv4 Were Land on Saturday October 31, 2026 @03:24PM (#50319221)
It absolutely is not.
Re:If IPv4 Were Land on Friday October 30, 2026 @09:39PM (#50312410)
You don’t understand it then. In V8 every IPv4 address is a valid address, that means you can have IPv4 and IPv8 on same IPv8-lan and first class support for translation into the protocol instead of an array of hacks is a miles better solution than the pile of rubbish that v6 is. In fact, IPv6 isn’t even a new version of IPv4, it is a different protocol entirely and a rubbish one.
And even the charitable reading is not a good indicator. There is reason things are getting pulled out of kernel and more and more userland services are used, it is because we have finally come to terms that secure software is hard and better hack as little of it trusted with the whole system as possible.
Re:If IPv4 Were Land on Friday October 30, 2026 @07:34PM (#50311546)
“inherently globally accessible” means basically addressable.
Re:If IPv4 Were Land on Friday October 30, 2026 @07:33PM (#50311533)
I “inherently” reachable. You can play semantics but the point stands.

> From a security standpoint, it doesn't matter if the IP get translated inbetween. Only the ingress firewall counts

This is complete nonsense. Security is about layers and risk mitigation. You know what is better than firewall rules that can be misconfigured or overridden due to conflict or interface name changes and so on? An IP that can be addressed from global space. Wild!

Re:If IPv4 Were Land on Friday October 30, 2026 @07:29PM (#50311498)
The answer is something like:

https://www.ietf.org/archive/id/draft-thain-ipv8-00.html#sec...

They key things is that pretending interoperability with IPv4 can be an after thought or dual stack is a good idea was just stupid and proven to be so. Flag day or IPv4 fading into oblivion never going to happen.

I know 50% is slow because that is LESS than new deployments over the past 3 days, so if someone thing “better” can be deployed to new projects until all old projects migrate is broken.

From their website about their product:

> Hardware does the heavy lifting.

> Your operating system and network card take over the repetitive jobs whenever they can. Your CPU gets room to breathe, and your battery stays full longer.

Where does this operating system run? Where does the power come from to run it if not battery?

Pure rubbish ai slop.

While the software might actually be ok upon inspection but this kind of ai slop nonsense copy doesn’t inspire confidence in using their software considering how security critical the vpn is.

Re:If IPv4 Were Land on Friday October 30, 2026 @07:05AM (#50302336)
Addressable means routable. Otherwise the distinction between a Public and Private address becomes one of firewall rules rather than a meaningful property of the IP Address.

And as you say, hole punching is still “PUBLIC IP” + port. Not an IP and any port you fancy unless the firewall was configured correctly.

Maybe I am wrong, maybe you’re confused, maybe IPv6 is just rubbish. Maybe all 3.

Re:If IPv4 Were Land on Friday October 30, 2026 @04:01AM (#50300986)
Do you ever wonder if most people don’t “see the facts” and after almost 3 decades and so much the adoption at 50% might mean to consider if the technology is just rubbish?
Re:If IPv4 Were Land on Friday October 30, 2026 @04:00AM (#50300983)
A random ip address that is globally reachable?
Re:If IPv4 Were Land on Thursday October 29, 2026 @10:48PM (#50299305)
But IPv6 is complex and inherently globally accessible. Yes, NAT IS not supposed to be a firewall but it works like one nonetheless in many cases.

IPv6 will never replace IPv4 because it is a different protocol rather than merely a new version. The name is a lie.

Re:DoorDash to Acquire Instacart on Thursday October 29, 2026 @06:32PM (#50297158)
Delivery is a luxury service until:

- you have school kids and a full time

- a medical condition

- work 2 jobs because economy is fucked.

- can’t drive of old age.

And a million other reasons. In old times with a working community, delivery was a luxury, in “modern” days, it is often a necessity for lack of alternatives.

When was the last time you offered the old people down the road if they need help?

Re:Ghostty 1.4.0 on Tuesday October 27, 2026 @06:03PM (#50266482)
Why put up with quirks when you have something that works for you? How much faster ghostty is in practical terms?
Re:Native Prometheus Integration with Nginx on Tuesday October 27, 2026 @06:00PM (#50266452)
ACME is in the core.

And modern features means long term rot if not modularised.

If you think the idea of buying Fable like model is hard, you should really try some of the latest open models like Qwen 3.8. They’re getting there very fast.
Re:Where the Romans Fought (interactive map) on Sunday October 25, 2026 @10:41PM (#50238447)
This is AI slop. Can’t expect more.
It is not unconditionally within legal bounds to deny service. There is a lot of prohibitions on protected characteristics, contractual obligations and customary expectations which can open you for civil liability.

You’re just pretending a business transaction is a person one. It is not.

Re:Where the Romans Fought (interactive map) on Sunday October 25, 2026 @10:37PM (#50238428)
Slop.
Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @07:05PM (#50202328)
Only if purchasing doesn’t mean ownership. ;)
Re:Achieving AI-style reasoning without an LLM on Thursday October 22, 2026 @08:54AM (#50194675)
All that happens in reinforcement learning and everything from pre-training to generation, including the last token, at the end is about adjusting the probability of the next token given the sequence.

Anyone who thinks reinforcement learning changes how the generation works hasn’t worked on inference engines and you can dismiss them as inexperienced and misguided.

You’re basically asking for legal council. The law is precise to a large extent but just as hairy and vague. You’re not getting meaningful answers from a defensive position.

But the short answer is that where is the line depends on jurisdiction, it is often along the lines of what they consider a hobby, a small business, large business, and so on.

Re:DeepSeek just open-sourced its inference engine on Tuesday October 20, 2026 @06:40AM (#50164146)
I think you’re correct, although suggesting that open AI is a trickle drown of AI companies is a bit naive.

But the key point is that something good enough always attracts more interest and contributions because a productive outcome is very realistic and tangible.

Open Weight models and competing open source inferences engines massively undermine monopolies; in theory at least.

See how cloud is easy to divest and “nationalise”.

Re:The reverts will continue until morale improves on Monday October 19, 2026 @05:21PM (#50158247)
Yes, not only is there always improvements to existing functionality possible due to changes in improvements in general software engineering and mathematical methods beyond it or supporting new hardware features.

Generally, software engineering like other industries is evolving and there is need for different facilities. Consider graph and vector databases featuring, as well as json columns as examples of things you that are relatively recently in common use.

In this context the purpose of VSL is generally to consider how much can we spend to thwart attacks that will likely kill at least one person.

Although thinking about how many humans a kill machine is worth is one hell of an idea to ponder

A city block demolished or abandoned is pretty close next to each other on the Operational and Out of Service scale when it comes to economic input.

Also, consider VSL (value of a statistical life) which is around 5-10 million in most of developed world.

If you find your source of meaning in slowing down understanding and knowledge, you were never it in for the mathematics and some questionable motives. Find the solution within.
Re:Bleached corals thrive within days on Saturday October 17, 2026 @10:31PM (#50137306)
You can see all the bad things about modern cultivation but lack of resistance to climate change isn’t one.

Yes, for many swaths and types of traditional agriculture and fishing it will be doom, but this conversation isn’t about local ecosystem but global food production vs population growth.

Food production was never a problem, supply and management is.

Re:RPKI now protects 70% of internet routes on Thursday October 15, 2026 @11:58PM (#50113901)
You do understand that the hypothetical threat actor here is one who openly disregards international law?

https://www.hrw.org/news/2002/08/03/us-hague-invasion-act-be...

https://www.reuters.com/world/us-imposes-sanctions-internati...

Older »