News for hackers. Stuff that matters.

cyberclimb

Re:Malware uses LLMs to rank victims by how much they're worth on Saturday October 31, 2026 @12:54PM (#50317819)
Try QubesOS if you want this, you can have a separate VM for each isolated use-case. The OS itself is a lightweight hypervisor around the VMs (called "Qubes").
Re:Apple introduces the new 14‑inch MacBook Pro with M6 on Tuesday October 27, 2026 @06:13PM (#50266597)
100% stable for me at the level of any other linux machine. True the USB-C display doesn't (officially) work yet but I have 0 issues with the HDMI.

I've been daily driving it for months with no blockers. You can tell Linux uses the battery less efficiently than MacOS though so that's good to know.

Re:How Japanese Dried Bonito Is Made on Sunday October 25, 2026 @08:19PM (#50237409)
Felt human to me
Last I checked (6 month ago or so) rclone was only able to download Google photos that had been uploaded via API/rclone. Other google photos weren't accessible.

Whereas Google drive does not have this problem.

Has the situation changed?

They split it up into distinct zip or tgz files at configurable max size. e.g. giving 18 distinct 50GB tgz files.

If you have enough disk space it should be a problem, you also get about a week to download the archives

Re:The Signal Chats That Cost OpenAI Researchers Their Jobs on Friday October 23, 2026 @01:38PM (#50212637)
can someone share a readable link?
Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:06AM (#50181231)
It can mean either, it's a consequence of how github optimized their backend storage so a 100 forks of a repo initially take up the same space as 0 forks
Re:Android apps running native on macOS on Tuesday October 20, 2026 @10:35AM (#50167089)
checkout Ente Auth! It's a native desktop app, syncs with the mobile app, and is fully open source. Great company as well, also free (as in beer).

https://ente.com/auth/

> Social media bans suppress kids’ access to information, including information that’s essential to their development, identity formation, and socialization, especially during adolescence.

Indeed children were deprived of their potential for development for all of humanity up until the early 2000s, thank god we finally closed the gap with social media algorithms...

Is this sponsored by Meta?

Re:NYC's "Click to Cancel" rule is now in effect on Sunday October 11, 2026 @02:56PM (#50046574)
You can only submit my snail mail or Fax.

So close yet so far

I would like to see the original video
Legend! Thanks for digging it up
the recording of the presentation has got to be on this YT channel but I only scrubbed through 2 videos (8h each) and it's not easy to find

https://www.youtube.com/@LinuxPlumbersConference

not sure where it falls in the schedule here either https://lpc.events/event/20/timetable/#all

hot take :/ Would you really have trouble trusting the OP?

Maybe you just don't want to donate resources in general, because otherwise surely there exists some channel you could witness with your own eyes and donate to with confidence.

Re:Spotifast: A native Rust Spotify client with Winamp skins on Wednesday October 07, 2026 @03:11PM (#49997426)
that's right, and it went viral on HN in the last few weeks as well.

I've been using it for a few weeks now though without issue! One thing I ran into up front though is that you have to make your own Spotify App (in the developer dashboard) and set the client ID in the Spotifast's settings otherwise it's rate-limited to the point of being unusable.

https://spotifast.rocks/make-it-even-faster/#make-a-spotify-...

It's a soft fork not a rewrite, they regularly rebase off immich
Re:Building a Linux GPU Driver for the M4 Mac Mini in One Month on Wednesday September 16, 2026 @05:51AM (#49724126)
What would it take to run pytorch on the M4 GPU efficiently? Is there still a gap between what MPS offers and this driver (if properly hooked into Pytorch)?
is it supported to have it propose a command for approval rather than running autmatically? in the YT video it looks likw it ran the cpu temp command on its own

love the idea/simplicity of this tool!

Re:The Emergent Symbolic Structure of Artificial Neural Networks on Wednesday September 02, 2026 @07:39AM (#49534806)
to his credit he did say he skimmed the paper, and it's honestly standard practice to do a first pass of skimming a paper before you'd go deeper into reading it anyways
Re:Fastpotify on Tuesday September 01, 2026 @05:34AM (#49519837)
nice that it supports ARM Linux! This is a major gap with the official Spotify desktop app
Probably cerca 2014 as that's when AlexNet was released, demonstrating that neural networks could beat traditional ML models at image recognition tasks. I recall the researchers used Cuda to optimize their training setup.

AlexNet kicked off a new wave of research around neural networks by demonstrating they could be scaled well and trained on GPUs.

Re:Bootstrappable Builds: How and Why on Friday August 28, 2026 @06:22AM (#49476673)
I thought the attack itself was version controlled via a tracked blob file used in a unit test. I believe the attack was performed by running the test suite (which modified the source code) and then compiling?

If that's the case, then anyone that ran the tests prior to building from source would be vulnerable if my understanding is right

I don't think they are necessarily asserting otherwise
Re:Pushes to arch AUR are suspendended right now. on Sunday August 02, 2026 @03:32PM (#49147533)
> No, I'm sorry but who on earth installs random software from random strangers, without a single step of validating before giving it access...

Realistically most users?

It's already quite a technical barrier to run Arch Linux, and the knowledge to further know about/understand PKGBUILD can only comes with time and is yet another layer filtering people's ability to know how to even try to catch something malicious.

Now consider the layer of even experienced user that's in a bit of rush and doesn't have time to review the full diffs they're upgrading to.

Ralistically it's nearly statistically impossible that 100% of users would be able to all catch and block a given exploit themselves. A shared responsibility model of security [1] comes to mind, and while it's great for users to be active participants in their security, their action/awareness should be a last resort. I wouldn't blame the user.

[1] https://docs.cloud.google.com/architecture/framework/securit...

This looks cool but why do I meed an email to start an "anonymous" discussion?

Also no mention on whether this is end to end encrypted, can you comment on that?

Nice! Heads up that unfortunately the demos don't appear to scroll on mobile
Re:Local-First and Portable CI on Thursday May 28, 2026 @05:21PM (#48315674)
Is there any way to cache the dependency installation step on github actions for example?

I supposed you could cache whatever directory it installs to? Would be great to see an example

Re:Prompt Politeness Affects LLM Accuracy on Wednesday May 27, 2026 @08:05AM (#48292991)
Note that these results are specific to gpt-4o so it's unclear how much they generalize.

They note at the end they're also testing "GPT o3, and Claude" but no empircal results are included.

How about the FairPhone running /e/os (which is de-googled)? You can buy it preinstalled directly from Murena.

Although this is not at your target price point. But /e/os can be used on hundreds of android phones (as opposed to GrapheneOS). So you can probably install it on your current phone

https://doc.e.foundation/devices

Older »