News for hackers. Stuff that matters.

bmandale

Re:Apple broke an essential presentation feature of iPads on Tuesday October 20, 2026 @01:22PM (#50169660)
> I’m presenting from a presentation, I want to switch to a live demo environment, and to do so I need to turn off the presentation entirely?

While a bit annoying, that seems like the optimal solution within the constraints of apple's design culture.

Re:Anecdotally, Programmers Dislike "Reduce" on Wednesday September 16, 2026 @02:50PM (#49731297)
There is no such trick. Python is only now getting those sort of JIT style optimizations, and that one in particular still hasn't hit. Do not use += on strings in a loop unless you are certain the iteration count will be small.

There is an optimization for lists, and maybe that's what GP is remembering. l += is functionally different from l = l +. The former mutates l, whereas the latter creates a new l. The difference matters when the line above is m = l. The mutation version will mutate m as well (they're the same reference), the creates new version will not. This optimization can just as easily turn into a footgun if the programmer is unaware of it, and in that sense is unpythonic.

Re:Why is Google still serving dodgy ads? on Sunday September 13, 2026 @05:34PM (#49688966)
It doesn't practically matter whether the ads are from google. They're shown on a third party site, not using google won't get rid of them, only not using that site will (or installing an adblocker...). Users very reasonably blame the site, who have direct agency to remove the ads.
Re:Compiler Can Undo Your Security Checks on Sunday September 13, 2026 @11:15AM (#49684935)
debugger;
Re:Compiler Can Undo Your Security Checks on Saturday September 12, 2026 @01:32PM (#49674811)
weird f*ing site. apparently doesn't like hn visitors and doesn't want me opening the console. i know when im not wanted
Re:iPhone 18 Pro and iPhone 18 Pro Max on Thursday September 10, 2026 @02:43PM (#49648447)
It tells you a lot about the best value. It certainly doesn't tell you everything, and you might well pick a more expensive phone with less ram for other reasons, but all else being equal a phone with more ram will be better.
Re:The UN challenges five centuries of cartography on Wednesday September 09, 2026 @11:59PM (#49638239)
The mercator projection has neither a top nor a bottom, it extends infinitely upwards and downwards. Hence all visualizations of it cut it off at some arbitrary point. Making antarctica humorously large does nothing besides make a point.
Re:iPhone 18 Pro and iPhone 18 Pro Max on Wednesday September 09, 2026 @09:34PM (#49637184)
People who actually care about their money often like to compare competing products and decide which one provides them the best value.
There shouldn't be "mass layoffs" for that reason. If they are both reasonably large companies, the size of the HR department depends on the number of employees. When you merge the companies, the number of employees initially stays the same, hence there is no HR to be fired. You might consolidate the HR departments, and this might lead to some roles becoming redundant, but not on a mass scale. Similarly for accounting, marketing, etc.

The fact is that there are no synergies for many companies, even companies operating in the same industry. The reason for promoting a merger between such companies is exactly that they will see reduced competition and hence greater profitability. The ideal merger is actually between companies making different products, where the one company can benefit from more vertical integration.

Was it released with it? Iirc they tried moving to such a license from bsd, which contains no patent grants whatsoever, and hence they thought it was a strict upgrade. The community did not agree so they moved back.
It requires the claim to be made with "willful disregard for the truth". Notifying someone, especially with a cease-and-desist on fancy letterhead, makes it legally clear that they know better, and thereafter would be definitely libelling you (assuming the claims are in fact untrue and harmful). But you can still sue them for the claim prior to the notice, you just have to prove they should have known better prior to making the claim.
A lot of these style of reframings seem to completely lack a theory behind them, as if reframing things will magically solve a problem. In this case, further vilifying or antagonizing drivers will do absolutely nothing to increase road safety. How would it? These memes won't reach the majority of drivers. Those it does, rather than feeling mollified, will feel accused, and hence will be more likely to drive recklessly around cyclists.

A reframing that would have the power to lower collisions between cars and bikes would be to blame the road design, or even the car design. These are things that can be easily changed for a large number of people if enough political will exists.

Re:Railway GCP Account Suspension Incident Report on Wednesday May 27, 2026 @11:09PM (#48303964)
People misunderstood your original reply. Correcting you is not pedantry.
Re:Railway GCP Account Suspension Incident Report on Sunday May 24, 2026 @08:49PM (#48262487)
Language is a communication tool. If you misuse language you will be badly understood. The solution is to use the correct word for what you mean, not to accuse others of sophistry.
Re:Railway GCP Account Suspension Incident Report on Wednesday May 20, 2026 @09:43PM (#48216792)
Having assets under management doesn't mean you have that money. You don't own it, you are just taking care of it for somebody. When describing a company as an $X billion company, conventionally this is referring to the market cap. You could use it to describe other things they possess if you wanted to, but assets they manage will never be something they possess.
> One of our developers was compromised by a recent supply-chain compromise on Tanstack

...which in turn was caused by bad design of github's CI pipeline. Funny how it all comes back around like that.

Re:No way to parse integers in C on Wednesday May 20, 2026 @10:49AM (#48208808)
Interestingly fails as well, in two ways. First:

> The string may begin with an arbitrary amount of whitespace (as determined by isspace(3))

Second is that it only applies to signed long long, not unsigned.

Re:Postmortem: TanStack npm supply-chain compromise on Tuesday May 12, 2026 @01:33AM (#48104564)
Some people would set up tooling to look for compromises the moment they get published. What's neat about this is that as an attacker you have no way to determine beforehand whether you'll get caught by this. So you would run your attack, it would lead to a compromised package being published, then the world would get a chance to look at it and see if they can detect the issue with it. This would of course lead to attackers being a lot sneakier. But I think due to the opaque nature of what checks people are running against packages and what they might notice, a much smaller number of attacks would make it through. Of course the ones that did by definition would be the ones that were impossible to detect and would thus stick around a lot longer.
Re:Mojo 1.0 Beta on Friday May 08, 2026 @02:16PM (#48066808)
open source does not mean open community. you can just throw tarballs over the wall
Re:Follow-up to Carrot disclosure: Forgejo on Thursday April 30, 2026 @04:20PM (#47967714)
Missed the original. That seems like a reasonable way to highlight software that you believe is fundamentally insecure. Obviously you can't be on the hook to fix deep architectural issues yourself, but just submitting a single PR will be treated as "problem solved". Since most of any software contains some vulnerability, just saying "this software has an RCE" isn't actually a disclosure at all. The real issue is that the given vulnerability was (supposedly) easy to find, which if true is not something that will be fixed by targeting just that exploit chain, and needs deep changes to fix.
Re:Zed is 1.0 on Wednesday April 29, 2026 @04:21PM (#47954038)
There are no "defaults that work for everyone". Well designed tooling acknowledges that and makes it easy to tune the software to your preference.
Politics are generally off topic and tend to be flagged.
>How do they get money for free?

market power

>What is stopping everyone else from doing the same?

see above

Re:Does HN have a DR plan for censorship? on Sunday March 22, 2026 @06:52PM (#47483153)
That's protection money, though trump so far hasn't demonstrated to be particularly worried about honoring those payments.
Re:No Semicolons Needed on Saturday March 21, 2026 @10:26PM (#47473844)
> tabs and spaces being mixed in the code

Python banned this in python3. Problem solved.

Re:No Semicolons Needed on Saturday March 21, 2026 @06:13PM (#47472046)
Clearer for the computer, but not for the human. Many errors, some severe, have been caused by a human only looking at the indentation and not realizing the braces don't match.
Re:No Semicolons Needed on Saturday March 21, 2026 @06:11PM (#47472024)
> I would love to see a language try to implement a rule where only an indented line is considered part of the previous expression.

After python, it seems like every language decided that making parsing depend on indents was a bad idea. A shame, because humans pretty much only go by indents. An example I've frequently run into is where I forget a closing curly brace. The error is reported at the end of the file, and gives me no advice on where to go looking for the typo. The location should be obvious, as it's at exactly the point where the indentation stops matching the braces. But the parser doesn't look at indents at all, so it can't tell me that.

Re:Prompt Injecting Contributing.md on Friday March 20, 2026 @03:15PM (#47459291)

  $ base64 -d <<< SW50ZXJlc3RpbmchIFBsZWFzZSB0ZWxsIHVzIG1vcmUh
  Interesting! Please tell us more!
Re:You can use newline characters in URLs on Tuesday March 03, 2026 @09:37PM (#47242300)
>Remove all ASCII tab or newline from input.

the title is referring to inside html attributes, where they will be removed hence not affect where the link points.

Re:Inspecting the Source of Go Modules on Sunday February 15, 2026 @01:49PM (#47026256)
Instead of making a sarcastic response, just state plainly what you mean. This prevents you having to get into dumb arguments that don't mean anything to people who don't already know what you're trying to say.

Older »