News for hackers. Stuff that matters.

babuskov

How did you check? Is there are PoC or some kind of command to run?
> China handily beats the USA in the trust rankings in most of the world.

Is anyone storing their gold reserves in China except Cambodia?

Re:Actively exploited sandbox RCE in all Chromium versions on Saturday September 05, 2026 @04:18AM (#49574341)
With such low payment, it makes one wonder how many exploits exist which were sold to 3rd parties and are currently used in the wild without Google even knowing about it.
Yeah, I have firewall set up to disallow everything except whitelisted ports, so my system was never in jeopardy. Maybe I should have mentioned that in my original post.

Latest Debian 12 update opens MariaDB server to the internet

I have a couple servers with Debian 12, running MariaDB. The servers were configured with bind-address 127.0.0.1:3306 so that any database connections are local.I upgraded to Debian 12.15 today, rebooted and checked open ports just to see if all services are running.To my surprise, MariaDB is no longer listening on 127.0.0.1:3306, but we have "init" listening on :::3306.It looks like default...

( Read More... | 6 comments | 4 points | on HN )
That's the problem with the definition of "healthy". No single food is "healthy" on it's own. It's a wrong way to look at it and why most people fail at finding a good diet. There's no super food you can just eat unlimited amounts of.

A diet can be healthy if it's the nutrient combination of different foods that result in certain number of calories, protein, fat, carbs, minerals and vitamins per unit of time.

Re:If You Can't Hold It, You Don't Own It on Sunday June 28, 2026 @05:34AM (#48705812)
I presume users lost access to everything.
Re:Can China build its own ASML? on Sunday June 28, 2026 @05:30AM (#48705787)
The question is "can anyone". Makes you wonder why the USA hasn't built one? Maybe the latest technology required some rare discovery. Just like nobody can replicate the taste of Coca Cola, maybe there some tiny detail that they discovered by experimenting.
Re:Hetzner increased dedicated server prices 3-4x on Monday June 15, 2026 @02:58PM (#48545547)
If they are spies, they are taking their time to use the data for sure. I run servers with them since 2009 or so. That's 17 years.

I feel like the whole password thing was meant as a protection against SPAM or using servers for nefarious purposes as they know who's really behind every server.

Although, I can also see how real criminals would work around that easily by supplying fake identities. Sounds like one of those "why we can't have nice things". Well, at least the password I gave them 17 years ago has expired since.

Re:Ask HN: What Are You Working On? on Monday June 15, 2026 @02:53PM (#48545492)
I think I could if I had one. My engine uses SDL2 and I developed it using macOS initially. In fact, I had a working build until about 6 months ago, when I replaced my old High Sierra install with Debian. It's an old Intel MacBook Pro, but the game compiles on Android and Nintendo Switch as well, so I think it should work on newer Apple Silicon as well.
Re:Ask HN: What Are You Working On? on Saturday June 13, 2026 @06:26AM (#48515679)
It's possible if you have wide or deep domain knowledge. Back in 2007 I made a Q&A website related to the open source FirebirdSQL database with around 350 articles in about one month. Although, those were very short and I had a huge archive from a mailing list with multiple years of questions and answers to source from.

10 months is a long time. You can write one article per day and do it easily.

Re:Ask HN: What Are You Working On? on Saturday June 13, 2026 @06:21AM (#48515637)
Angel Investor Simulator:

https://store.steampowered.com/app/4771830/Angel_Investor_Si...

You bid against other investors in a show similar to the Shark Tank and then you assign advisors to help the startup grow and finally cash out after IPO.

The ideas that startups have are wacky for the fun factor, but the economic simulation underneath is realistic.

There will be a free playable demo soon.

Re:Valve P2P networking broken for more than 2 months on Saturday June 06, 2026 @11:21PM (#48431462)
The rabbit hole started as a major P2P issue in Israel and possibly other middle east countries and further investigations revealed it seems to be a worldwide problem.
Re:New Nginx Exploit on Thursday May 14, 2026 @04:06PM (#48140540)
The default NGINX PHP integration uses this:

    # regex to split $uri to $fastcgi_script_name and $fastcgi_path
    fastcgi_split_path_info ^(.+?\.php)(/.*)$;
    set $path_info $fastcgi_path_info;
Surprised nobody mentioned Fish Fillets 2, which is a top 3 puzzle game imho.

My list:

    1. Antichamber
    2. Fish Fillets 2
    3. Baba is You
    4. Ittle Dew (esp. the Master Dungeon)
    5. An Architect's Adventure
    6. Cosmic Express
    7. Talos Principle
    8. Stephen's Sausage Roll
    9. Portal
    10. Cocoon
Fish Fillets 2 looks simple, but it's one of the toughest puzzle games out there. Especially getting the stars on each level. I love it because the rules are simple, everything's there on one screen, but figuring it out requires a lot of out of the box thinking.
If the extension does something that isn't changing, like JSON Formatting, I guess it's best to disable updates right after you install it.

I just did this for all extensions I have in Firefox. Not sure about extensions like uBlock though? Doesn't it fetch new lists of sites to block or something like that? Or is that done separately from updates?

+1 from me.

Motorola has such great quality/price ratio and the user experience is decent. There's still some nagging and such but overall it's much better than the competition.

But I still can't get over my old iPhone 6. That phone size was just perfect. Easy to hold and do everything with one hand, easy to fit into any pocket.

I really want an Android like that. I don't need 3 cameras and bunch of other nonsense.

HN has no Markdown, but you can start each line with 2 spaces to format code:

https://news.ycombinator.com/formatdoc

Re:PHP 8.5 gets released today, here's what's new on Thursday November 20, 2025 @04:51AM (#45990926)
Funny that you picked == as an example when == is very counter intuitive in Java and is one of the common pitfalls for beginners:

    String a = new String();
    String b = new String();
    a = "test";
    b = a + "";
    
    if (a == "test")
    {
        // true
    }

    if (b == "test")
    {
        // false
    }

    if (a == b)
    {
        // false
    }
        
Just like PHP, you have to read the docs to use it properly.
Re:Steam Machine on Thursday November 13, 2025 @07:22AM (#45914052)
Does Roblox run on Linux?
Re:Steam Machine on Thursday November 13, 2025 @07:12AM (#45913976)
Only if you do it on the same computer. The restriction is still there if you try to, for example, run one game on your PC and another on Steam Deck.
Re:Steam Machine on Thursday November 13, 2025 @07:11AM (#45913973)
> does Steam still disallow accounts from playing more than one independently owned game at a time without special procedures?

Yes. I just tried launching one game on Steam Deck and another one on my desktop and it showed a message:

> Error - Steam: You are logged in on another computer already playing Railbound. Launching Clutchtime™: Basketball Deckbuilder here will disconnect the other session from Steam.

Older »