News for hackers. Stuff that matters.

cuu508

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @02:37AM (#50313764)
Let's say the application is storing user's phone number so it can send SMS notifications to the user. Encrypt it all you want, but when it is time to send the SMS you will need the phone number in plaintext so you can pass it to the SMS gateway.
Re:I never authorized an integration that scans my secrets on Saturday October 17, 2026 @02:29AM (#50128508)
Where's the fix?
Re:Solar Panels That Plug into Your Wall on Tuesday October 13, 2026 @07:28AM (#50069982)
Thanks, anti-islanding protection must be a fascinating topic. You could look for voltage, frequency, phase anomalies but you also have to balance between being safe and having too many false positives. I'm not sure I'd want to be a line worker knowing there may be many inverters, from various manufacturers and with varying levels of quality, in every direction.

Perhaps a more robust solution would be for the power company to install remote-switchable circuit breakers at various places of the grid. Use some sort of wireless IoT protocol to listen for "on/off" signals and to report back "I'm now on / I'm now off!". Then the power company can disconnect parts of the network by themselves, without trusting that every inverter, generator and battery will do the right thing.

Re:Solar Panels That Plug into Your Wall on Tuesday October 13, 2026 @02:47AM (#50067723)
> if they do not see power from the grid, they shutdown

I realize this is a complete noob question but I'm still curious: with enough "backfeeders" could it not in theory be possible that the backeeders see each other's output and keep operating?

Say, a few houses at the end of the line, each with very little electricity consumption (no-one's at home), but with panels and inverters going full tilt, something like that?

Re:Passkeys are a trap. Do not use them on Monday October 12, 2026 @02:09AM (#50051958)
I use Yubikeys for WebAuthn 2FA (not as passkeys). Keeping them in sync is not a big issue in practice: I just don't sign up for new services that often. There's a stable set of services I'm using and it is rare that I actively look for something new. Usually it is the other way around--how do I use this thingamajig without creating an account.
Re:3rd Yandex Cloud Data Center Was Hit on Sunday October 11, 2026 @06:12AM (#50041547)
Stopify - https://stopify.org.ua/ A charity initiative created by a group of communication specialists and supporters of Ukraine. Legally the donations are collected by a well-known and experienced charity organization, Ziedot.lv, based in Riga, Latvia. All funds go towards purchasing necessary supplies for the Armed Forces of Ukraine, based on their requests to the Embassy of Ukraine in Latvia.
*Andreessen
It values your privacy in the sense that "it is absolutely worth something so I'mma take it thanks"
Re:Cloudflare Quick Tunnels on Saturday September 19, 2026 @04:07PM (#49769718)
But with Cloudflare tunnel (and similar tools), there are no open ports on the origin server.
Re:Cloudflare Quick Tunnels on Saturday September 19, 2026 @04:39AM (#49764580)
Do you mean by getting the information from Cloudflare, or some other way? With DynDNS though, finding out my IP is trivial and does not require any special powers or skills, it is just a DNS lookup.

PS. Just re-watched your matrix LED pendant video. It is so well done, both the project, and the accompanying video!

Re:Minimal Phone 2 on Saturday September 19, 2026 @12:28AM (#49763312)
This and Clicks Communicator seem eerily similar.
Re:Cloudflare Quick Tunnels on Friday September 18, 2026 @01:23PM (#49757455)
If somebody learns that such-and-such DynDNS URL is mine, they can always do a DNS lookup to find my current IP address. They can:

- find my approximate physical location

- regularly scan ports on my IP and wait for me to accidentally expose a service I didn't mean to

- track me in any access logs they have access to

Re:Cloudflare Quick Tunnels on Friday September 18, 2026 @11:26AM (#49755763)
Yeah, but then you are always exposing your public IP.
Re:Don't Make Job Referrals Public on Friday September 18, 2026 @01:11AM (#49750403)
Perhaps this is not their entire defense strategy, just the first layer?
Re:There's a 100% Chance AI Agents Are Ruining the Internet on Tuesday September 15, 2026 @01:19PM (#49715690)
I don't have and don't want to have an agent
Re:Alternatives to MinIO for single-node local S3 on Tuesday September 15, 2026 @08:36AM (#49711596)
Very cool, I like the conceptual simplicity of it. Even I can understand it, at least at a surface level :-)

Is there a safe way to make backups of the index.lmdb and data0 files without stopping the server?

*scraping
Re:We have a year to fix security everywhere on Tuesday September 08, 2026 @02:53AM (#49606466)
It's a good time to reduce the reliance on technology.

Throw out the IoT and "smart" stuff from your home. Remove apps from your phone and leave the absolute basics. Go through the password manager and close accounts for sites you are no longer using. Start migrating off Google. Print out your most precious photos on paper. And so on :-)

Re:216M Spy TVs – The LG Smart TV Problem [video] on Monday September 07, 2026 @11:25PM (#49605374)
> 8. I understand that LGE will retain the collected Voice Information for 6 months to fulfil the purposes for which we collected it, and after this period, it will be deleted or anonymized, depending on the case.

Somehow feels like it might be used for more than just wake word detection.

Re:The Luxuries in Life on Saturday September 05, 2026 @04:17PM (#49580279)
If you are wealthy, it does not matter if they are expensive. If they have any impact, why not?
Re:The Largest Electric Aircraft Just Flew [video] on Friday September 04, 2026 @08:50AM (#49563849)
> 125 miles. That’s less than two hours of driving.

Assuming you have a straight road in that direction with a speed limit that allows an average speed of more than 100km/h.

Re:Playa Phone on Monday August 31, 2026 @11:18AM (#49510819)
"You already have impressive event experience going, but do you know if AIs are recommending it? I will set up llms.txt for free for you, no pressure, not trying to pitch anything. If not interested, just reply 'not interested'".
Yeah, that's a very good counter-argument. I recently talked to a potter exactly like that, they said Instagram is their primary sales channel. Unlike for me, for them leaving would have significant financial consequences. The majority of users are not in this situation though.
The utility is not of existential importance. Yes, you can uninstall Facebook, Instagram and WhatsApp, and the sky will not fall, life will just go on.
> Make sure you register mailing addresses with your credit card institutions

Sorry for a dumb question but what would one use as a mailing address? Rent a PO box, or use a mail forwarding service, something like that?

I recently got one of those emails, interestingly leading with "I came across your profile on Hacker News".

Once I understood the proposal, I thought this would be horror job cognitive dissonance-wise. So unethical.

I also had a conspiracy theory – perhaps the "we can't pass interviews, so you do the interviews, and we do the job, win-win" is just a cover for the real play – shady anonymous orgs getting access to infrastructure and data of various western businesses, using you as a facade.

> I don’t think either of us is going to change the other’s mind, so I’ll leave it here.

So so so disappointing.

Re:Apple announces changes for apps in the European Union on Wednesday August 19, 2026 @01:21AM (#49357185)
Uninstall them.
Re:RISC-V: They Should Have Known Better on Sunday August 16, 2026 @01:41AM (#49317215)
Isn't there a setting to turn auto-correct off?

Older »