News for hackers. Stuff that matters.

blablabla123

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @07:03AM (#50302306)
I wonder though how a sensible architecture would look like. Sure it would involve HSMs but ultimately they need to support transactions and APIs.

Probably this draws the line to more traditional banks which are notorious for having so many layers of checks and firewalls.

Re:Formlabs Studio 1 $699 Resin Printer on Thursday October 29, 2026 @06:54AM (#50287077)
I recently did some research for a project related materials to be used in a wet environment. The problem with resin is that it's hormone active. Tangentially, the same is true for standard epoxy from the hardware store. There are scary skin damages some people got that work daily with epoxy
Yeah, probably it doesn't make things better that the vendor is Lenovo. I think for some models fwupdmgr might work but not for everything.
The value of UEFI is surely dubious. I recently had to update my BIOS using Windows PE since there was no way of doing this on Linux. Of course my default boot was reset. The funny thing was though that I could repair my Linux boot using Win PE.

Before the only way was either fdisk /mbr to reset for Windows or boot a Linux system on stick/CD and rebuild grub/lilo. The latter has gotten unreasonably complex though so I rather wouldn't do this manually.

My verdict is that UEFI does something right, but created for the enterprise sector carries way too much complexity. Obviously so complex that everybody ends up using the original same code base.

Yes I also had this in Uni at some point. Just going through the homework can be a huge effort. If the course is small enough, you probably don't want to hand in obvious junk/slop, especially if you're asked to present "your" solution.
Re:Google cleared 300 hectares of Finnish forest on Thursday October 22, 2026 @02:09PM (#50199000)
2009 Ecosia was founded and advertises with planting trees, according to their website 257,444,718 as of now. (> 1 M per month) At the same time Google fell 250,000 trees in a few months. (~0.1 M per month)

https://www.ecosia.org/ https://www.theguardian.com/environment/ng-interactive/2026/...

The question is also if this is an isolated case...

https://www.theguardian.com/world/2026/sep/26/ai-datacentre-...

Re:Wine Ported to OpenBSD on Monday October 19, 2026 @04:28PM (#50157628)
It's Microsoft 365 Copilot ;)
Re:Wine Ported to OpenBSD on Monday October 19, 2026 @04:23PM (#50157578)
I'm having a blast with AoE I on Linux, in this case the Definitive Edition. I don't think it looks like Office though ;) But what is true, it's tricky to get running on WINE. With Proton which I use the configuration works by default though IIRC.
Re:Flatpak – An Insecurity Nightmare on Monday October 19, 2026 @04:17PM (#50157514)
Programs installed in my home directory end up being run as my user. There is usually no clean way to do it differently.

But if programs are installed in the filesystem hierarchy and optionally split into multiple parts, they can be run as different or even multiple users.

I wouldn't consider selinux easy to use. apparmor is in a way even optional.

Re:Flatpak – An Insecurity Nightmare on Monday October 19, 2026 @06:39AM (#50150714)
Most system installed software can normally not access everything because of the filesystem permissions. It works surprisingly well.

I think the problem is the trend of installing everything in the home directory. Ruby with rvm, Node with nvm/asdf/..., Rust with rustup, ... the list is long and of course related to rapidly changing ecosystems. If the underlying technologies were to strive for more stable designs, you could as well install them in /usr through the distribution's semi-outdated packaging system. In the past this was considered a hallmark of stability, now it's considered a limiting factor.

Of course all these innovations were mostly developed with servers in mind but not so much with Desktop usage.

The other problem with containers on Linux is that they are only sandboxes when configured correctly. Otherwise they can be even worse than no container.

Re:"I'm on a War Footing": Terry Tao and the Crisis in Math on Monday October 19, 2026 @06:06AM (#50150483)
Yeah that's an interesting point of view. In my studies I got comfortable with the fact that there's always someone smarter than me.

At the same time it should be considered that with physical labor workforces lost their income source numerous times. Ironically they are currently being considered a safe haven.

Re:Ubuntu 26.10 (Stonking Stingray) released on Thursday October 15, 2026 @09:03AM (#50103081)
Ubuntu is surely controversial but no, security updates aren't paid. ;) Well, unless you need an LTS that cannot be updated for whatever reasons for 10 years. Or for people that need an extra FIPS approval.
Re:OpenAI Withdraws 3 Math Papers on Thursday October 08, 2026 @10:12AM (#50006040)
I think this is now an interesting part about LLM based automation. The scientific community is quite strict on references. Even with its most advanced model ChatGPT isn't reliably able to tell me if an online shop has an item in stock. Then the other part is peer review which isn't optional either.
Re:Ideas on modernizing the open-source desktop on Thursday September 24, 2026 @08:52AM (#49829902)
I think this is why FVWM is around for so long, OpenBSD even still ships it as the default. The configuration is painful but every tiny thing can be adapted. I stopped using it though because other DEs were more actively maintained and so much quicker to configure.
I've been asked to do take homes for different companies recently. Each time I was very confused whether using AI is acceptable, desirable, required or unacceptable. One time I asked just in time, the other time I wasn't sure if even using Google was okay.

I mean in University there were tests where you were allowed to bring a cheat sheet, or even a bag full of books. So called bag tests. And people were still able to fail. Although I never had the latter in my curriculum.

I think it's necessary that teams for which people are hired for brainstorm up-to-date tests. Just recycling the same challenge from 3 years ago isn't good enough.

Re:SAML: A Fractal of Bad Design on Wednesday September 23, 2026 @08:28AM (#49815096)
> Both will pale compared to the amount of time you spend dealing with SCIM inconsistencies between IdPs anyway.

I think that's the real problem. Just tying up things with custom, system dependent configurations would probably be more predictable. Most people are probably happy to get the happy path running.

It's strange working on Opensource these days. I've mostly worked on my own stuff alone which usually doesn't get much attention/additional contribution. Then I see on Reddit, HN or LinkedIn someone creating a major App or Plugin in a weekend. Sometimes I take a closer look the artisanal quality is effectively unmaintainable, at least for humans. But in the end it's hard to get a good overview, and the sheer quantity seems to dwarf any other efforts.

Not to mention how the code can then be sourced by an AI model in an instant without any credit.

Re:Linux from Scratch on Tuesday September 15, 2026 @12:21PM (#49714881)
Well as mentioned it was in the 2000s. Compiling KDE alone took several days. Also there was no automation/script, so you really had to go to ftp.gnu.org and look in which folder the coreutils package is ;) I realize there's now a list of packages with checksums
Re:Linux from Scratch on Tuesday September 15, 2026 @04:16AM (#49709347)
> I did it once manually over a couple of days.

Sounds like a speedrun of the tutorial. How did you approach packaging then and what system did you use to compile everything?

I did the tutorial in the late 2000s I think and it took me 4-6 months if I remember correctly. At the time I wasn't completely new to Linux but setting up things like the boot loader was quite tricky for me.

For me the main motivation was getting a deeper understanding, being able to fine tune and customize my system. Of course I didn't go blindly through the tutorial but only did steps that I understood. (In case something goes wrong) Also I started to use (x)stow for everything.

Interestingly AOL, Compuserve and similar ones originally ran without Internet. In fact it took a while until the Internet catched up with the level of interactivity, mostly through Flash. It's absurd that nowadays many websites require a central CDN to stay available.
Re:Stop making swap partitions–use swap files instead on Friday September 11, 2026 @08:38AM (#49657404)
On the Desktop fine-grained partitioning is a bit questionable but on a server it's still quite practical. E.g. preventing the database or excessive logs from filling the disk space. The latter is also an attack vector actually.

Also generally swap is recommended on all systems. During normal use it should rarely be needed but if it's needed it prevents spurious crashes. E.g. make -j16 shouldn't result in a hard to comprehend crash because I miss 1 GB of RAM.

Re:I resigned from Anthropic today (Jacob Coxon) on Wednesday September 09, 2026 @07:38AM (#49624794)
> I wonder how many of these are false flag operations.

If I may ask, could you elaborate on what you mean?

The first thing that came into my mind was the fragile ecosystem up there. All considered this doesn't sound like a very thoughtful process.

And of course as pointed out elsewhere, Norway isn't even EU. I wonder how happy people were if rocket launches were done in rural Western Europe.

Re:Play Store blocks AuroraStore, hurting GrapheneOS users on Tuesday September 01, 2026 @02:26PM (#49525922)
> GrapheneOS actually recommends against using Aurora and instead just using the Play Store, so this shouldn't really hurt users.

Interesting, I never tried Aurora on Graphene. For me the combination of Play Store and F-Droid worked really well so far.

Actually Microsoft is doing this since the 90s with Word documents. Did they ever pause this practice?
Re:What AI did to stackoverflow in a graph on Saturday July 18, 2026 @08:33AM (#48957579)
The graph actually peaked in 2014. That's a decade before AI became a thing while the Software engineering workforce grew a lot since then.

I think Stackoverflow was the last incarnation of romanticized old-school Q&A forums where you first had to earn your badges before being treated with respect. Luckily today's new projects have much better documentation, issue tracker's etc. And apparently AI is able to work with that by now...

Re:Grok 4.5 on Thursday July 09, 2026 @09:40AM (#48845681)
> So depressing to read the non-stop political comments here.

Grok is specifically trained on political input/output. Therefore I have trouble parsing your comment.

> Where have the hardcore nerds gone? How is the model, is it good at coding? What does this mean for competition and pricing?

When was the last time you've seen tank database systems discussed here? Probably never because there seems to be some sort of unwritten moral boundary of what fits in here and what not. I hope it finds its natural alignment back.

Personally I think it's fine to point out the peculiarities of certain tech ecosystem. But at some point I rather don't read more details and move on to other aggregators.

> a photo is pretty much required which would be considered illegal in other countries like the UK

I work since over 15 years as SWE and have been job hopping most of the time. Only during one job hunt I put a (professional) photo on my CV. While a photo on the CV is obviously not illegal, employers aren't allowed to demand it since 2 decades. But I agree there is a bias.

While I'm fully German so to say, I have a foreign last name literally from centuries ago. For most of the time this was never an issue, at best a conversation starter. But companies where the daily language is German (hint: these companies usually suck) I definitely had weird situations before. Also with some recruiters, especially from the UK.

Re:I Build a 10 Inch Mini Rack from Aluminium Extrusions on Wednesday July 01, 2026 @01:03PM (#48749972)
I'm no expert but to my knowledge metal cases always need to be grounded. Which is what I did with my 10" rack. I just bought a socket with a ground connector from an online store, although I'd be curious which exact cable is best practice. I don't have many things connected there anyway and the power supplies are outside of the rack.

FWIW the topic is quite a rabbit hole and for non-mobile metal cases (e.g. screwed on the wall) technically even an electrician seems to be needed.

Re:I Build a 10 Inch Mini Rack from Aluminium Extrusions on Wednesday July 01, 2026 @12:30AM (#48742254)
Have you taken grounding into consideration?

Older »