News for hackers. Stuff that matters.

avtar

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @07:00PM (#50321081)
The openwall oss-security list usually covers a decent number of issues and this CVE was mentioned there yesterday:

https://www.openwall.com/lists/oss-security/

I've used pretty much this type of setup:

https://michael.stapelberg.ch/posts/2026-02-01-coding-agent-...

If you want something not NixOS-related, smolmachines.com (I haven't tried this yet) gets mentioned here a lot.

Re:The Xteink X4 E-Ink Reader on Wednesday June 24, 2026 @11:00PM (#48668301)
Less distractions, yes, but mainly it's the size and e-ink display.
Re:Ubiquiti: Enterprise NAS, Built on ZFS on Thursday June 18, 2026 @04:04PM (#48590768)
Not sure if you've looked into this but you can ditch Bell's router with one of these:

https://store.10gtek.com/1-25g-media-converter-sfp-slot-with...

Or a non-copper equivalent in your case. You just need to use the VLAN IDs that Bell expects, see https://www.reddit.com/r/bell/s/uUltTdyqFC

Re:The Emacsification of Software on Wednesday May 13, 2026 @06:30PM (#48128449)
> Oddly enough, Google’s LLM is the only one that has been answering my questions well on a research project these last weeks.

Google Search declined in quality when results started containing more noise (more ads, SEO spam) that required sifting through. Gemini isn't displaying all that garbage.. yet.

Given the context, they're probably referring to epubs. Files could contain just generic malicious javascript or malware that attempts to exploit vulnerabilities in specific ereaders.
Re:Show HN: CSS Studio. Design by hand, code by agent on Thursday April 09, 2026 @04:37PM (#47709611)
TBH that part of your landing page exhibits some confusing UX. Perhaps it's just me but when I see a UI image with a play button I assume that clicking it is going to play a video, not redirect me to a login page.
Re:Xilem – An experimental Rust native UI framework on Wednesday April 08, 2026 @11:23AM (#47691503)
Got a link or more info regarding the theme?
Re:Bitwarden Integrates with OneCLI Agent Vault on Monday March 30, 2026 @02:54PM (#47578250)
> and price seems to have gone down

They sent an email a couple months ago stating prices were increasing as of Mar 27. The family plan went from $59.88 USD per year to $71.88 But it's still worth it IMO.

Maybe Lemmy without federation?
Thanks for the quick fix :) Nice to see more Discord alternatives these days.

A few other landing page issues if you feel like addressing them:

- Attempting to navigate with the Tab key results in tab order following nav elements once, where focus indicators aren't visible, and then the same elements get iterated over again but this time focus indicators are visible.

- Tab order doesn't include screenshots and jumps to the FAQ

- Clicking a thumbnail shows the larger image but without any elements for closing the overlay

- Pressing Esc doesn't close the overlay

- No skip links on any of the pages

Please consider adding screenshots of the UI that provide an idea of what the experience will be like without having to log in using Bluesky or other credentials.
Re:My Homelab Setup on Monday March 09, 2026 @11:19AM (#47310234)
Thanks for clarifying :) I'll try it out this weekend.
Re:My Homelab Setup on Sunday March 08, 2026 @04:17PM (#47300960)
This would be perfect with TLS. The docs don't make this clear...

> tailscale serve --service=svc:web-server --https=443 127.0.0.1:8080

> http://web-server.<tailnet-name>.ts.net:443/ > |-- proxy http://127.0.0.1:8080

> When you use the tailscale serve command with the HTTPS protocol, Tailscale automatically provisions a TLS certificate for your unique tailnet DNS name.

So is the certificate not valid? The 'Limitations' section doesn't mention anything about TLS either:

https://tailscale.com/docs/features/tailscale-services#limit...

Unfortunately communities tend to be endangered species these days. Perhaps this issue and other seismic societal shifts will change that.
I guess let’s say we also add Colorado to the growing list

https://leg.colorado.gov/bills/SB26-051

Young people are more into TikTok than CNN, and the Ellisons already control that in the U.S.
Re:Every book recommended on the Odd Lots discord on Sunday February 08, 2026 @11:37PM (#46941636)
Looks like books.google.com
> Pair it with Debian

A KDE dev mentioned on a podcast that issues related to Debian Stable get closed automatically on their bug tracker because fixes don't get backported :/

https://old.reddit.com/r/linux/comments/1pneqp4/kde_dev_do_n...

My wife was complaining about Windows issues so I ended up installing Fedora with KDE on her laptop. I would have preferred Debian but using Testing (as suggested by the dev) doesn't some ideal.

Re:Msgvault: fast private email archive and search system on Tuesday February 03, 2026 @05:47PM (#46878494)
There’s also notmuch with various frontends which will let you index and search colossal mail accounts

https://notmuchmail.org/frontends/

While not a one-to-one situation, probably Blender and specifically Grease Pencil?
Re:Tree-sitter vs. Language Servers on Thursday January 22, 2026 @12:48PM (#46722694)
I thought that the blog's domain looked familiar. The author maintains an awesome and well maintained Emacs starter kit https://codeberg.org/ashton314/emacs-bedrock
Rancher Desktop comes to mind. Maybe Podman Desktop https://podman-desktop.io/docs/migrating-from-docker
> though from a quick search it doesn't seem to have a "Vagrantfile" equivalent (is that correct?)

It's just YAML config for the VM's resources:

https://linuxcontainers.org/incus/docs/main/howto/instances_...

https://linuxcontainers.org/incus/docs/main/explanation/inst...

And cloud-init for provisioning:

https://gitlab.oit.duke.edu/jnt6/incus-config/-/blob/main/co...

It's been ages since I used VirtualBox and reading the following didn't make me miss the experience at all:

> Eventually I found this GitHub issue. VirtualBox 7.2.4 shipped with a regression that causes high CPU usage on idle guests.

The list of viable hypervisors for running VMs with 3D acceleration is probably short but I'd hope there are more options these days for running headless VMs. Incus (on Linux hosts) and Lima come to mind and both are alternatives to Vagrant as well.

Re:Swift on Android: Full Native App Development Now Possible on Saturday January 03, 2026 @08:15PM (#46483732)
React Native doesn’t depend on Electron for desktop apps either. It renders using native UI components and don’t use a browser engine.
Learning effort aside, there’s also the ZFS hardware requirements issue. I bought a four bay NAS couple years ago and looked into TrueNAS. I (somewhat) remember coming across details such as ZFS benefitting from larger amounts of ECC RAM and higher number of drives than what I had. This post covers details about different types of caches and resource requirements:

https://www.45drives.com/community/articles/zfs-caching/

Re:Show HN: Yapi – FOSS Terminal API Client for Power Users on Tuesday December 23, 2025 @12:33PM (#46367215)
Hurl's another great option for this https://hurl.dev/
Re:Iced 0.14 has been released (Rust GUI library) on Sunday December 07, 2025 @05:40PM (#46186046)
For anyone curious about accessibility support, looks like it's a WIP with contributions from System76 staff <3 https://github.com/iced-rs/iced/issues/552

And TIL about AccessKit https://github.com/AccessKit/accesskit

Re:Leaving Intel on Friday December 05, 2025 @07:06PM (#46169074)
> cassette deck on his desk

Greybeard reporting for duty: https://en.wikipedia.org/wiki/Commodore_Datasette

Older »