News for hackers. Stuff that matters.

c0balt

Re:Fridges in French supermarkets hit by cyber attack on Monday October 12, 2026 @01:29PM (#50059782)
I would maybe tone that down that sentiment a bit and limit the adjustement.

You actually do want to be able to monitor them remotely, like most industrial/commercial refrigeration, to detect failures faster and more reliably. They should still be at least secured with normal auth/autz in addition to perimeter security, though.

If I can know when a fridge failed within the hour (even at night) then I can also dispatch a technician same/next day more easily.

> we can't assume present returns will match future returns.

Funnily enough, after spending some time in public service albeit in another country, genereally budgeting for public agencies works almost inverse to this.

If you get allocated X budget but only spend 0.8 * X, then next time you will almost always get <X. This is in itself reasonable, you don't get more allocation than you need. In practice though this means you are incentivised to not save money from your allocation iff you expect to need more in the next period or do not want to lose your allocation (maybe a renovation or smth similiar has been pushed back due to external factors).

Re:Docker has always used microVMs (well since 2016) on Sunday October 04, 2026 @08:21PM (#49959389)
Sure but almost no OSS projects build containers for Windows (to my knowledge). The same goes for XNU/darwin afaik. They may get binaries but container images often assume Linux by default.

Developers, ime, also don't really want to start building their own container images for auxiliary services like, e.g., PostgreSQL, MongoDB or MySQL.

Having virtualized Linux support means you can take the existing ecosystem and make it accessible to the other two. It also means docker itself doesn't have to fully embrace & support either which is part of why it's "cheaper".

Re:Docker has always used microVMs (well since 2016) on Saturday October 03, 2026 @10:41PM (#49950091)
In those two cases they also use VMs because they don't really have another cheap option.

Neither XNU/Darwin nor Windows have had an oob option for running Linux images. WSL is rather new in comparison.

Re:Deutsche Bahn "joke" is no longer funny on Monday September 28, 2026 @09:21PM (#49886843)
They do take it mostly into account for IC(E) journeys and some regional trains.

You will usually have an announcement like "Alle Anschlusszüge werden weiter erreicht werden" oder "Zug nach $ort wartet auf uns" here.

It just doesn't propagate to traffic within a federal regional (Bundesland) a lot which sucks but is somewhat understandable (the frequency there is supposedly high enough although connected journeys kinda break this).

Re:Minimal Phone 2 on Friday September 18, 2026 @09:08PM (#49762351)
> Be easier to use for someone with long fingernails (hello Nosferatu)

Long nails are somewhat common as an aesthetic/cosmetic choice usually for women (ime). No need to make a joke around accessible design.

Re:Ubuntu 26.10 completes transition to Rust-based coreutils on Tuesday September 15, 2026 @09:12AM (#49712021)
it writes to the file with elevated priviledges and doesn't write it back to the terminal, effectively a 'sudo sh -c '{cmd} > {file}''.

sudo tee is a common way to work around priviledge restrictions in shell pipes (you can't easily 'sudo' a pipe), if /secure was 0600 and owned by root:

"sudo echo "test" > /secure" or "sudo printf '' > /secure", would not work because your user's shell process can't write to /secure. However, "echo 'test' | sudo tee /secure" works because the elevated 'sudo tee' can write to the file.

Re:Alternatives to MinIO for single-node local S3 on Tuesday September 15, 2026 @06:22AM (#49710254)
A notable mention should also be Versity GW, https://github.com/versity/versitygw/
Re:Nvidia is the central bank of AI on Saturday September 12, 2026 @12:05PM (#49673792)
That seems a bit overzealous, most consoles[0] run on AMD chips today.

Both PS 5 and Xbox are based on AMD APUs and both serve the AAA market quite well. GTA 6, Assassin's Creed and CoD are probably good enough indicators that the performance is enough, even if there is always room for more (as PC ports show). The PC market will also probably be fine even if stagnation in perfomance gains has been creeping in for a few years now.

[0]: except Nintendo which relies on NVIDIA although their APU there focuses more on efficiency than top performance.

Re:Chrome again exempts Google from user site data settings on Saturday September 05, 2026 @11:36PM (#49583090)
She got nominated by Biden in Biden's last term in March of 2021 and left in 2025 two weeks after Trump assumed office.

She did not get appointed under Trump nor did substantial work done under his administration.

Edit: I do not necessarily disagree with your comment on the partisan aspects of this issue. This is only meant to respond to the first paragraph.

Re:How bicycle coaster brakes work (2018) on Wednesday September 02, 2026 @04:42AM (#49533548)
Coaster brakes are ime one of the best brakes for beginners/intermediates because they can be a reliable backup in addition to rim/disc brakes.

Had my rim brakes at least once lose a lot of efficacy during a large downpour and coaster brakes make a great backup for extra breaking power. They sure do like to lockup your rear wheel but that is still better than the alternative of only having very weak rear/front breaks.

This might have to be put into the context that they do in fact move the conflict over resources to economic wars. They also actively engage in wars over ressources when they think they can win outside of MAD, see U. S. vs Iran.

Economic warfare also does in fact kill people. Denying a population, e. g., Cuba, the ability to access medicine/food kills humans just as well as a bullet in the long term.

There are various other ways this causes suffering. Different forms of warfare are still warfare, even if you don't to hold a gun for all of them.

Being "rich" also requires someone else to be "poor".

Re:Internet centralization and the original sin of NAT on Monday August 31, 2026 @03:37AM (#49506748)
For android, the answer is yes (without rooting being required).
Re:Get your Windows license refund on Friday August 28, 2026 @11:36AM (#49480122)
Lenovo also takes orders without Windows. Only for "configurable" skews through the website though.
Re:Sydney Marathon medal mistakenly depicts Munich stadium on Sunday August 23, 2026 @08:47AM (#49408429)
E-Sports teams are still the funniest here. From Shopify Black/Rebellion Gold to T1.
Re:Stop Making TUIs on Saturday August 22, 2026 @08:29AM (#49399075)
But they generally don't because it us often expected to be able to have multiple open at the same time, e. G., with lazygit.
Re:I finally did it, I forked WordPress on Thursday July 30, 2026 @02:53PM (#49114111)
So a one-man show + Claude that forked the repository and removed a lot of code in one week[0]. With all respect for the presumably good intentions, why should someone who relies on WordPress use this if there's no solid maintenance story behind it yet and no obvious path to sustainability.

[0]: https://github.com/gerharddt/dmpress/commits/main/

Re:Canceling "Hey" on Monday July 27, 2026 @02:16PM (#49073528)
I'm not a native speaker but

> I definitely don't believe in trying to change people's minds by shouting at them or shaming them

seems to me like they want to make a (polite) argument instead of explicitly calling them “heretic” to quote the article.

They also quite obviously seem to refer to cancellling the subscription here and not trying to invoke "cancel culture". The first few paragraphs make this quite clear.

Re:Frame – the first Linux Assembly X server on Friday July 17, 2026 @01:32PM (#48949983)
You might want to take a look at TLP[0]. It, among other things, backs the power mode/profile panels in Gnome/KDE.

Many distros already try to push good defaults, but you can do a whole lot when optimizing for a mobile experience. You can also do some fun stuff with it, like running a script[1] when going from ac->bat power to, e.g., turn of a service, lower refresh rate or reduce brightness.

[0]: https://linrunner.de/tlp/index.html [1]: https://linrunner.de/tlp/usage/run-on.html#run-on-ac-run-on-...

Re:We found a bug in the hyper HTTP library on Monday June 29, 2026 @08:06AM (#48718177)
This does not appear to be a concurrency bug though?
Re:Cooling in Space on Sunday June 14, 2026 @08:08AM (#48526437)
You don't even have to weatherproof the rack, putting racks into shipping containers is already done to some extent (and multiple deployments are to my knowledge working fine). It is often also marketed as "module data centers".

The main problem here is that it reduces efficiency (cooling a large datacenter is more efficient per Watt of dissipated heat than a shipping container) and increases initial cost (building in a shipping container is not actually as easy as doing it in a normal-ish building).

Portability (when offline, you can put a shipping container like this on a truck and cart it around) and availability (no need for a new/refit building, only power is required and could be included in the container with a generator (gas/diesel)) are the main reasons for accepting a higher TCO here.

NextCloud generally appears to use their own design system everywhere, Android apps are also not in Material or on iOS (iirc) in Cupertino. It makes for a subpar experience in general but is consistent.
NextCloud needs tuning (mostly of php-fpm and caching ) oob to be fast/usable in my experience. Just throwing resources at it won't make it faster as the defaults are generally quite conservative.

They even have a specific guide for this topic, https://docs.nextcloud.com/server/stable/admin_manual/instal...

As a side note, it's PHP so your single core clocks will generally be more relevant for latency than multi-core performance, feeding many cores requires a lot of divisble work.

For self-hosted GitLab or BitBucket, no. GitHub enterprise (self-hosted) also no (though that is rather rare).
Re:1k Data Breaches Later, the Disclosure Lag Is Worse on Monday June 08, 2026 @12:57AM (#48441464)
A minor problem with GDPR is enforcement.

At least in germany it feels like you need a very dedicated and persistent person to make the case against a company/service (bonus points if they get media attention). Other countries are a bit better but it generally is not very consistent.

The enforcement for most small to mid-sized companies is often just not present and resources for relevant agencies are often only reluctantly allocated. Ime, in government institutions it is generally not very respected as it "impedes progress".

Re:Roku LT Operating System open source distribution on Tuesday June 02, 2026 @10:39PM (#48379263)
That looks neat, the code appears be mostly in C, seems reasonable documented and is hosted on GitHub: https://github.com/rokudev/lt-sdk
Re:Blorp Language on Monday June 01, 2026 @09:10AM (#48356376)
To be fair this likely should be handled by the interpreter/compiler for the compiled JS. V8 probably can merge this into one loop or another similar based on runtime types
You can iif you live in on of the supported cities that is not currently suspended. Waymo is a promising participant here, but it very much isn't at the "just be driven to work stage" for almost everyone.

Older »