News for hackers. Stuff that matters.

c2h5oh

It is a similar mechanism, but there were major differences:

1. It was usable for small-medium companies, because the amount you avoided taxes on was 400k euro times number of people you involved in the scheme as board members.

2. It avoided taxation entirely and not just shifted tax burden to the country with lower rates.

3. It allowed the money to immediately return to the country where the profit originated in without any tax consequences. There is a reason why tech giants are sitting on a lot of cash.

It definitely is no longer possible, which is why I used past tense.

This scheme was unique, because it was available to small fish allowing nullify taxes on the first 400k euro of income (or multiple if you got more people to help you).

Similar ones, available to large corporations, are very much still possible, but they are getting more and more pushback.

A while back there was a simple scheme available that allowed you to avoid taxes on the first few hundred thousand / million of taxes.

- You created an LLC in Cyprus and transferred some IP (usually a trademark) to it

- You licensed that IP to your LLC in an EU country for the amount that basically erased any profit that LLC made

- Cypriot LLCs were not taxed on non-Cyprus income

- Each of non-resident director (or board member, I don't remember) of a Cypriot LLC was not taxed on first 400k euro of income from those LLCs. Double taxation deals Cyprus had protected you from being taxed on that income back home.

I know this is no longer possible with Cyprus, but a variation of that is now happening with e.g. many EU clothing brands having their brand ownership transferred to Egyptian LLCs.

Courts have also ruled that sharing in P2P network is enough to get hit with 150k in statutory damages per shared work.

AI companies did quite a bit of uploading while e.g. getting Anna's archive over BitTorrent.

> What does the security officer at your company say?

I'm the one making those decisions for the company and I don't believe us immigration officials to be competent and trustworthy enough to have access to what is on my work laptop, so I come through immigration with devices with data I have no problem granting access to - a fresh OS install.

> Either you shouldn't be leaving with devices with the data from your job on them, or you don't trust them, but your job is fine with it.

When visiting US (and I only visit US for work-related reasons) I leave personal devices home and only carry either wiped work-issued laptop (for on-sites) or an old Lenovo laptop with a fresh OS install (for conferences) + a wiped phone.

I always enter US with all of my devices wiped and restore them from backup once I'm past immigration, simply because I don't trust government to maintain the security level my job requires.

Now I'm worried that this will be held against me..

I did witness ai output advantage dwindle as codebase grew in a team of experienced devs who switched to 99% ai generated changes.

The last time I've checked ai still had an edge adding new features, but the team collectively lost the project knowledge and any problem discovered that llm could not fix took significantly longer to correct - they were effectively working on a new to them codebase.

I think that question hinges on the second part of your comment and should be answered as:

Does anyone know any company that went back to hand-written code because it decided drawbacks of ai generated code or some other concerns outweight the output benefits?

Re:How to Block Some of the Bots on Monday July 27, 2026 @03:31AM (#49066190)
My dedicated server comes with 2TB/month data included. Humans use up about 2% of that. If I didn't block bots I'd run out mid-month.
Re:Is surveillance risk chilling your online speech? on Tuesday July 21, 2026 @01:16AM (#48988307)
No.

The risk of being denied entry to US and my lack of interest in visiting US share a reason. That's the only change vs 5 years ago as far as governments are concerned.

As for corporate I've always assumed no internal communication was private.

I've got a fairly new Toyota and I when I found myself needing a 2nd car for my family I ended up buying a 20 year old Honda and I have to say I enjoy driving it much more.

I might also be safer in it - oversensitive security systems nagging me with false positives almost constantly don't pair well with my ADD

People are selling those older cars at a significant discount compared to previous years, because they got banned from low emission zones - you need euro 5 for diesel and euro 4 for petrol to be allowed in centers of many of large EU cities.
Re:I built a mmWave material classification radar on Wednesday July 01, 2026 @07:05AM (#48744899)
Property managers handling municipal property in mid+ cities will want one.

Any company dealing with construction waste disposal will want one.

Both will have no problem shelling out 1000 euro per unit.

Cynic in me thinks it's some or all of the following:

- extract monetary contributions for their side of political spectrum from ai companies

- extract money for personal gain

- grokify ai answers on political / worldview topics, because polls are showing people trust ai answers more than wikipedia

This is already the case in most (all?) EU countries. Government-issued photo ID is required to activate a SIM card.

If you really need a burner you can still get one - there are people who activate SIM cards in bulk using their ID and resell them without collecting IDs. The practice itself is either gray area legally or straight up illegal depending on the country

Re:Three of our worst VC stories on Tuesday June 09, 2026 @02:34AM (#48457347)
One that got pushed out by investors, which is good enough for me. No need to name and shame beyond that.
Re:Three of our worst VC stories on Saturday June 06, 2026 @04:29AM (#48422713)
A CEO got entire 20 man dev team into boardroom and asked everyone to voice any concerns about technical debt, bad development practices, anti patterns as well as project management issues.

The 4 people who spoke up were all fired on the same day 3 or 4 weeks later. 7 more quit shortly after - as soon as they got any decent offer. 6 months later about a quarter of the 20 were still with the company.

More often than not security minded people are encouraged to focus on things that get the product to market faster instead.
I suspect you mean register/renew:

Depends. If it's something really high priority (like main domain for a large corporation) I'd likely be paying CSC 4 digit sums per domain per year.

For stuff a tier below that I'd be looking at companies that are serious about security and happen to do domains as well e.g. Cloudflare, Amazon

They are not, but npm is uniquely bad in that regard. Refusal to implement security features that would have made attacks like this harder really doesn't help https://github.com/node-forward/discussions/issues/29
Re:Pink noise reduces REM sleep and may harm sleep quality on Sunday February 15, 2026 @08:52PM (#47029978)
7 nights is not nearly enough to get used to new environmental factor introduced in the study, possibly exacerbating disruption from sleeping in a new place (sleep clinic).

n=25? Seriously?

This is barely passable as an early hypothesis test before you perform an actual study.

Re:Capital One to acquire Brex for $5.15B on Thursday January 22, 2026 @08:22PM (#46727241)
Majority of EU population. Even in US debit is more popular than credit in 18-25 age bracket.
Re:Tuxedo Computers Cancels Snapdragon X1 Linux Laptop on Saturday November 22, 2025 @12:14PM (#46016320)
Qualcomm doesn't bother to upstream most of their SoCs. They maintain a fork of a specific Linux kernel version for a while and when they stop updating it or new version of Android requires newer kernel then updates for all devices based on that SoC end.

They have little experience producing code that is high enough quality it would be accepted into Linux kernel. They have even less experience maintaining it for an extended period of time.

I'd agree if you could stick them in the containers discharged, but you can't. This means that even safer chemistry like sodium battery is still hazardous cargo.
The small handful of sodium batteries that are currently available retail all seem to have rather bad roundtrip efficiency compared to LFP and voltage drop starting at a high state of charge.

Also LFP prices dropped enough that shipping cost from China became a significant part of the price. This will be even more of a factor should the less energy dense sodium batteries ever reach the promised $30/kWh.

Re:Novo Nordisk's Canadian Mistake on Sunday October 19, 2025 @06:29PM (#45638619)
With de minimis for US-bound packages suspended I suspect way more packages are inspected than used to be.
Similar three stages are also at every job you have:

- you underperform while onboarding and rapidly learning to cover whatever skill gaps you discover

- you slowly go from doing OK to being overqualified, but it doesn't get reflected in compensation or title enough and your employer has little incentive to help you reach the next stage, because you are currently overperforming compared to your pay

- you are so much past your paygrade you quit and go to a company that will pay you what you will be worth after onboarding and learning to cover skill gaps

With everything that companies provided to earn long term employee loyalty being sacrificed to stock price employee growth through multiple roles in the same company has become more of an exception.

Re:Time Spent on Hardening on Friday September 19, 2025 @07:11PM (#45307890)
Unless you equate web development and SaaS then no. It's the same in education, finance and SaaS targeting Fortune 500 companies.

Source: most of the companies I worked or consulted for in the past 20 years.

Re:Time Spent on Hardening on Friday September 19, 2025 @05:30PM (#45306879)
This is not a "companies don't spend enough time with static and dynamic analysis of their software" problem, it's "less than a third of companies I worked or consulted for in the past 20 years mandated having input validation of any kind" problem.

Older »