News for hackers. Stuff that matters.

cube00

It took 27 years to get the full Windows 95 event uploaded. Hopefully the Windows Server 2000 event will be showing in 2027.
Re:Scaling Git at OpenAI on Tuesday November 03, 2026 @06:14AM (#50350544)
This is what always scared me about monorepos. While I'll never reach the scale of big tech it was always a nagging feeling that I'd hit some limit. I know that is less likely to be a problem with smaller component based repos and if something goes wrong only that component is impacted.
Re:Anthropic hacked to deliver remote access trojan on Friday October 30, 2026 @08:06AM (#50302800)
Even if you don't have cryptocurrency they can still go after your GitHub credentials and run some very expensive agent and runner workloads.

I've started developing with a separate user account to limit the blast radius but you still need to login to access repos and use AI features.

> Those had to switch over to endpoint agents

No they didn't. https://news.ycombinator.com/item?id=32337698

Some companies don't split because they want all internet traffic to go through their internal MITM proxies to enforce acceptable internet use and data loss policies.
I initially thought this was a good idea too until another comment pointed out you'll lose most business or personal customers in offices because they connect through VPN gateways running on those cloud services (especially Azure)
Re:Behind the scenes at the NeXT Computer office on Monday October 26, 2026 @03:59AM (#50240536)
> I believe our current work environments will be romanticized one day

While I'd like to think so I can't see myself romanticising the open plan cattle pen we're in now.

I do romanticise when I had my own cube and desk, still loud but nothing compared to the cattle pen we're in now with long floor wide benches, having your opposite neighbour's face in your field of view all day and everyone yelling on zoom calls from all directions.

Re:Using Claude to reduce the attack surface of code on Wednesday October 21, 2026 @07:38AM (#50179221)
Considering they have access to infinite free tokens they should be the best.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @07:35AM (#50179185)
I'd check this carefully and make sure you have the WAF enabled. I seemed to always have plenty of weird looking PHP and WP requests happily forwarded by CloudFlare to my servers.

Users on the Free plan have access to the Cloudflare Free Managed Ruleset, a subset of the Cloudflare Managed Ruleset.

https://developers.cloudflare.com/waf/get-started/

Re:DeepSeek just open-sourced its inference engine on Tuesday October 20, 2026 @06:08AM (#50163771)
Given how much the models like React and JavaScript I guess we should be thankful its Python.
Re:An ad-free Android TV on Tuesday October 20, 2026 @02:33AM (#50162148)
Remember? I'm still using it! As great as streaming is it's always an arms race with blocking the ads, sometimes it works, sometimes it doesn't. They're now streaming the actual content off pubads.g.doubleclick.net to make sure if you block ads you don't get to see anything.

MythTV lets me record free to air and skip through the ads.

Re:An ad-free Android TV on Tuesday October 20, 2026 @12:40AM (#50161434)
It was very underhanded of Google to add advertising after the fact. When I have to factory reset the TV I'm reminded of how it used to be before it upgrades. Years later they still haven't [1] updated the screenshots in their Play store page to show the giant 1/3 full screen ads you get now.

Replacing the Google launcher (I used ATV Launcher Pro) was one of the best quality of life upgrades I've ever done, if you haven't already I highly recommend it.

Not only does Google show auto playing video ads for streaming services you don't subscribe to, it also shows pure auto playing video ads for things like fast food. It really lags while it tries to start up to show the ads.

I'm sure it's only a matter of time before Google closes the ADB backdoor when they realise all the sweet ad dollars they're losing.

[1]: https://play.google.com/store/apps/details?id=com.google.and...

Re:TV4 postpones show after AI agent erases edited material on Wednesday October 14, 2026 @10:54AM (#50088620)
As a new starter to the team I was flooded with alert emails every few minutes. When I asked what the deal was, was promptly given a bunch of mail rules every other team member used to dump them all into another folder they never looked at.
Re:I let an AI run my startup for a week on Wednesday October 14, 2026 @07:47AM (#50086159)
They're at https://m.youtube.com/@PromptBaseYT/shorts

You can match the thumbnails and titles from the article screenshot

Re:I let an AI run my startup for a week on Wednesday October 14, 2026 @07:35AM (#50086039)
> A few nights ago I instructed my project manager bot to ship one secret feature to PromptBase at 4am and deploy it whilst I was asleep - it just had to benefit the site in some way.

> I wanted to see what this felt like - which sounds weird - I know.

This is such a needlessly reckless thing to do on a 500k user production site that takes customer money.

Re:I let an AI run my startup for a week on Wednesday October 14, 2026 @07:27AM (#50085957)
> Amazing to see people going on a beautiful hike, while chatting with agents all the time to "do some work".

I disagree, enjoy the beautiful hike and give your brain a rest.

Re:Redesigning Source Control at Anthropic on Wednesday October 14, 2026 @12:36AM (#50082437)
Until the server goes down. Subversion going down at work stopped everything. At least with git you can still find work to continue on with even if you can't push.
Re:Redesigning Source Control at Anthropic on Tuesday October 13, 2026 @03:18PM (#50077116)
> attempting to build a public version that tries to please everyone wouldn’t actually be very useful.

What a weak response, just release the version you use and others will decide if it's useful.

Re:Redesigning Source Control at Anthropic on Tuesday October 13, 2026 @03:11PM (#50077008)
That my thought when I saw online only, we're back to Subversion.

You think you have it bad now when GitHub goes down, wait until you're stuck with an online only client.

Most big services will just take the junk traffic. They're never going to block whole cloud providers.

Blocking cloud providers is strictly for us dirty self hosters who are sick of our logs becoming unreadable and our visitor metrics useless from all this malicious traffic.

Re:Mozilla Introduces Firefox Enterprise on Tuesday October 13, 2026 @02:48PM (#50076663)
One less app to manage, audit and provide end user support.
> These clouds must get the abuse happening under their own roof under control.

Similar to ad click fraud and scam ads, the cloud provider gets paid, why would they turn down the money?

Re:Apple HomeView on Tuesday October 13, 2026 @12:35PM (#50074516)
> Music in the kitchen, sure, but I run Plexamp.

As much as I like Apple hardware I know unless I'm willing to go full Apple on hardware and services (eg. Apple Music in this example) I'm always going to have a mid experience trying to be on the fence of their walled garden.

Re:Apple HomeView on Tuesday October 13, 2026 @12:28PM (#50074367)
> An issue with old iPads is getting OS updates.

I'd have the same concern with this device given Apple haven't committed to longer then usual support.

At least I already got my money's worth from the old iPad and being able to give it a new role on the kitchen bench was a bonus.

> believe me, there's a reason the industry moves slowly.

No profit in security/dependency upgrades. Propriety SCADA protocols to enforce full stack manufacturer lock in.

Re:A Modern Web App in C on Tuesday October 13, 2026 @03:05AM (#50067856)
> Process forking isn't nearly as expensive as it was; modern kernels optimize it heavily.

When I start to dig into how complex async is to debug I'm really starting to come back around to regular forking.

Re:AI is a tool and using it well takes skill on Tuesday October 13, 2026 @02:50AM (#50067745)
> wave a re-hiring people

While they'll be some for the companies that cut too hard, I don't see a wave coming.

It seems the "kinda sorta" works level that AI vibing creates is seen as good enough by most companies.

While it's true they've always accepted mediocre software I feel AI vibed code is a step below that in terms of quality.

Of course if you're willing to put in the hard graft to carefully write detailed tests and then send your agents away until everything passes then you'll get a better result.

The automated tests I've seen the vibe tools pump out aren't there yet so you still need to put the effort in there.

Re:Shipping JPEG XL in Chrome on Wednesday October 07, 2026 @10:46AM (#49993598)
I doubt anyone that wants to keep their job in big tech would ever publish something like that.
Re:Device detection and occupancy monitoring for Airbnb hosts on Wednesday October 07, 2026 @10:43AM (#49993564)
Interesting that it can only count iOS devices considering Apple is more privacy focused. What's the secret sauce that prevents Android phones being counted in the same way?

I would have thought Android's constant Wi-Fi scanning that Google uses for improving their indoor location services would be an easy give away.

Re:State of Devs 2026 survey results: developers are exhausted on Wednesday October 07, 2026 @08:38AM (#49991924)
> A lot of companies exists as of today cause a lot of people were able to just focus on building without constantly worrying about the fear of lay off.

Depends on the company, plenty have been run on a culture of fear for decades.

Older »