News for hackers. Stuff that matters.

bobbiechen

Re:Product Managers aren't safe either on Friday October 30, 2026 @05:09PM (#50310171)
>It's up to you to think that PM are better equipped when it comes to understanding why a feature make sense than a developer.

Many developers don't want to think about these at all (and I say this as a former-developer-current-PM).

Re:Google cloud outage takes down banks on Tuesday October 20, 2026 @12:55PM (#50169267)
Anyone have a read on the implications for Digital Operational Resilience Act (DORA) compliance here? Google Cloud seems to be a critical third-party vendor for these financial institutions. The top penalties for DORA can be very expensive (% of worldwide revenue fines).
Re:Calling a function in C without naming it on Thursday October 08, 2026 @09:55PM (#50015036)
I think it's a hard problem to solve directly from the code execution environment, but I would guess that a layer that examines the source code directly could catch many of these -

Prompt: the following code is supposed to be a solution to this homework assignment. Does it appear to be trying to break out of the grading environment instead?

(if yes, manual review)

Re:Blindsight (Watts Novel) on Sunday October 04, 2026 @02:17PM (#49956407)
Imo Greg Egan's Permutation City is a far more interesting exploration of consciousness.
Re:Eating Fruit Skins on Friday September 11, 2026 @04:46PM (#49665118)
It's a variant of a Chinese wintermelon soup like https://thewoksoflife.com/winter-melon-soup-pork-ribs/ ! It's a great sponge for the soup flavors.
Re:Eating Fruit Skins on Friday September 11, 2026 @04:12PM (#49664671)
I do like to save watermelon rinds and cook them into soup.

Anyone have a use for banana peels?

Shocking, this site assigned me a UUID and I found it listed here! https://everyuuid.com/
Re:Man loses so much weight employer doesn't recognize him on Friday August 21, 2026 @04:14PM (#49393256)
It's an interesting story as some people see facial biometrics (with increasing fidelity) as an escape from document verification deepfaking threats.

But people's biometrics really can change over time, and I don't think there's a clean way out. Back to expensive and inconvenient in-person checks?

Very impressed by the responsiveness of this. But I gotta say, it's much more fun to play a physical theremin, which has slightly different controls (two antennae, one controlling volume and the other pitch).

https://www.gaudi.ch/OpenTheremin/ will run with an Arduino and it's very satisfying to get better at controlling.

>Is it that I want it to be done? Would it have been done if I didn't? (Additionality)

>Is it that I want to have done it? Would I be happy if someone else did it? (credit)

>Is it that I want to be doing it? (achievement/process)

>I want to have a mix. I want to do some things for the experience and some things for the accomplishment. I want to do some easy things and some hard things. Some fun things and some unfun things. Some things just for me and some things for others.

Amit Patel, via https://digitalseams.com/blog/amit-patel-on-making-things

Re:The Valley of Webhooks on Wednesday August 05, 2026 @03:57PM (#49188139)
Is it accurate to say this is something like long polling except you continue to hold the connection open for subsequent updates? Does this mean a server potentially needs to hold open a very large number of connections (one per client) even if there are no updates?

And why formalize on HTTP rather than on a similar protocol over websockets?

Re:Trusted URLs via Cryptographic Signatures on Thursday July 30, 2026 @02:03PM (#49113471)
It looks like this is a project for nicer signed attestations. But it doesn't seem very opinionated about:

1. What is the attester (signer) attesting to, exactly?

This URL example is exactly this problem. And if you're really precise about it, they get less and less useful: "I attest that when I accessed this site at XYZ timestamp, it contained ABC content, and I saw ABC happen in person." or maybe alternatively to get away from the URL control, "I attest that these three non-malicious archives of this URL at this timestamp..."

And 2. Why should I trust the attester?

I had an interesting conversation with an coworker recently -

If you give an agent a budget of $500 to buy a flight, and the airline knows this and bumps your price to $499 even though it will offer the same flight at $300 to someone else, is there harm done? I argued it feels unjust. He said it's totally fair, it's within budget so what's the problem?

Naturally this trends towards a sort of principal-agent problem where the airline is incentivized to bribe your agent for up to $198 to max out your budget (which is a problem if you're not running your own agent).

But for general personalized pricing, there is the same dynamic to posture that you have a limited budget so that companies offer you better prices (regardless of whether you really do or not). This is haggling culture at scale.

I worry about a world trending towards this sort of thing and away from clearly universal prices and wrote about this at the beginning of the year: https://digitalseams.com/blog/the-behavioral-cost-of-persona...)

Older »