News for hackers. Stuff that matters.

bedstefar

> Why would there be accidental port mappings on their router though?

That's the point of NAT-PMP / UPnP, it just works (for game servers, torrent clients, industrial control systems etc.)

I'm extrapolating a bit here based on Reddit hearsay, but I think this may have to do with rural stores having essentially consumer-grade internet routers connected to the mobile broadband network.

Much of the coverage in Swedish media drives the point that only 4G-uplinked stores have been hit so far. I think that's unfortunate, because really it wouldn't have differed if these stores were connected by 5G.

I'm guessing here, but my money would be on freezer ICS systems being made available to the world by accident by way of NAT-PMP on a consumer router. In Scandinavia you can bypass CG-NAT on mobile connections by setting a particular APN, so my guess is that these control systems were simply findable on Shodan.

This also explains why this wasn't discovered after the recent French breach. Supposedly all the stores with "proper" uplinks were in compliance, and no one had thought of a way in for those non-compliant stores, because they "weren't even connected, so how would an attacker get in?"

Re:AI-generated posters don’t have to be horrible on Saturday September 19, 2026 @03:13PM (#49769347)
Sure, you can get any style you like, but /you will pull those little icons lining the list of activities at your county fair from my cold robotic hands/
Re:Everyone should slow down AI development except for me on Sunday September 13, 2026 @01:27AM (#49680320)
And even if we did manage to limit/cull hardware development, what would keep people from continuing to find ever more efficient models runnable on contemporary hardware?
Re:Ask HN: Who is hiring? (September 2026) on Tuesday September 01, 2026 @01:56PM (#49525403)
That sounds really, really fun! Cool niche! I'll keep you in mind for future reverse engineering endeavors. Any chance it might work on Android?
I didn't imply people in the past were idiots, but how on earth would anyone know what an _agent harness_ is, say?
If this dropped just five years ago no one would understand what on earth this software does . In many ways I still don't. Incredible the development we've seen lately, wonder what will stick and what won't?
Re:Ask HN: What are you working on? (August 2026) on Sunday August 09, 2026 @02:50PM (#49234378)
Wow! Gotta try that out! I'm from outside the USA, hopefully it'll work too with SI units
I do. I used it in the late noughts for my cryptology BSc because I was too lazy/busy to learn TikZ proper
Were these ever sold outside the USA? This is the first time I hear about the product.
Re:strace-ui, Bonsai_term, and the TUI renaissance on Tuesday June 02, 2026 @05:22AM (#48367832)
> Modern (as in, since the 1980s) terminals are very capable of multiple fonts and font-sizes. I usually use a non-proportional font for coding myself.

Is that really true? Can I, in one terminal window, have prose with a serif font and code with a monospaced font at the same time? If I hover over something with my mouse, can I have a TUI tooltip at a smaller font size?

Re:strace-ui, Bonsai_term, and the TUI renaissance on Tuesday June 02, 2026 @05:20AM (#48367817)
Yeah, but as far as I'm aware you get to pick one font and one size as long as the UI is laid out with literal ASCII spaces and newlines. You can't have tooltips with a smaller font, or code and prose together with monospaced/serif fonts accordingly.
Re:strace-ui, Bonsai_term, and the TUI renaissance on Tuesday June 02, 2026 @03:51AM (#48367265)
I don't really get the TUI craze. Would love it if someone has some perspective that I'm lacking.

Display technology has seen so much progress in the past decades. Apple marketing has taught us about "Retina" displays with pixels so small that you can't tell them apart without a microscope. We get these very rich and colorful desktop environments but we actively decide to not use any of that.

Now, I get that a TUI can look incredibly crisp with proper text rendering, kerning, ligatures, nerd fonts and so on, but still with all that, at the end of the day we still have a thingamajig that implements a VT100. It is a strict subset of what could potentially be drawn with a proper GUI framework.

I understand that TUIs can run over SSH channels, can be juggled with Zellij/tmux/mprocs -- as such they are composable in the sense that they can be used in a way the author(s) didn't think of. It's been a while since I've done any of that personally, and I for one think it's a bit of a cop-out that the Claude Code integration in PyCharm is just the TUI [1] inside a terminal emulator inside my IDE when it could be so much more, just to provide one example.

The article shows off an strace TUI, and it's not like I can't see the benefits of making strace output more browsable. What I don't understand is why that must happen inside a terminal window where (for instance) all text must have the same font and size.

So what is the appeal? I'm asking in good faith. Is it because the perceived alternative is another run-off-the-mill Electron RAM guzzler, because there aren't any _good_ GUI widget frameworks? Is it the multi-platform aspect?

If all we work in are these super-lean TUIs maybe we don't even need so powerful computers or such high-DPI displays anymore?

I'm genuinely puzzled, but interested to know how TUIs appeal to other people.

1) which, I understand, is itself a React app with a console renderer!

Re:I am building a cloud on Thursday April 23, 2026 @05:56AM (#47873884)
That's a good tip, thanks. What I meant to say was that there's probably at least a handful of self-hosted services you could run to offset that $20/mo.

Another one could be Bitwarden, although I don't host my own password manager personally. Or netbird. You get the point

Re:I am building a cloud on Thursday April 23, 2026 @03:56AM (#47873224)
This looks like an excellent platform for running a "homelab" in the cloud (no, the irony is not lost on me) for lighter stuff like Readeck, Calibre-web, Immich. Maybe even Home Assistant too if we can find a way (Tailscale?) to get the mDNS/multicast traffic tunnelled.
Re:Codex Hacked a Samsung TV on Thursday April 16, 2026 @06:28PM (#47800338)
... in exactly one of this planet's countries
Not trying to account for the parent's claim, but generally check diskprices.com for the latest deals on Amazon (.com, .co.uk, .de, .es, .it etc)
I worked in the Arctic for the better part of a decade. There's Starlink now, but I've been TRULY OFFLINE for weeks (with plenty diesel generated power) as recently as 2018. Technically we could use Iridium at like $10 per MB, but my full Wikipedia mirror (+ Debian/Ubuntu packages, PyPI etc) did come in handy more than once.

I know some Antarctic research stations (like McMurdo for example) still have connectivity restrictions depending on time-of-day, and I wouldn't be surprised if they also had mirrors of these sort of things, and/or dual-3090 rigs for llama.cpp in the off hours.