News for hackers. Stuff that matters.

dadrian

Re:A farewell to Arc browser on Thursday October 22, 2026 @11:29PM (#50204171)
At this point, everything I used in Arc is in Dia.
Re:Claude reveals ECDSA curve origins on Friday October 16, 2026 @05:19PM (#50124905)
As much as I dislike the guardrails, they are absolutely irrelevant to this task, and you will not get blocked.
Re:Margaret Hamilton has died on Thursday October 08, 2026 @12:10AM (#50001751)
Hamilton invented the idea of error handling in software, and that error handling in the Apollo computer is why Buzz Aldrin was able to handle the error 1201/1202 in the minutes before the Eagle landed on the moon, instead of having to abort the mission.
Re:Bill to Ban Private Equity from Owning Medical Practices on Sunday September 20, 2026 @11:53PM (#49782871)
That’s absolutely not true. Private equity regularly buys small businesses, D2C businesses, retail businesses, failing businesses, software businesses…
Re:Playing whack-a-mole is losing on Sunday September 13, 2026 @01:31PM (#49686373)
I was actually referencing repeated exploitation by leaking TheHole, which actually has no particular reason it needs to be sensitive.
Re:GPS and the Lost Art of Getting Lost on Monday August 17, 2026 @01:16PM (#49334428)
Have you attempted to kidnap the DA during a prisoner transfer on Lower Wacker, only to be thwarted by a vigilante? If not, I question your Chicago bona fides.
Re:NSA and IETF, Part 9 on Saturday August 15, 2026 @01:35PM (#49312512)
In fact, the default behavior in every web browser right now is to use a hybrid.
Re:NSA and IETF, Part 9 on Saturday August 15, 2026 @01:32PM (#49312492)
The cryptographers in charge of major web browsers, TLS libraries, and programming language standard libraries do not stand by DJB’s points.
Re:LLMs won't break symmetric crypto on Wednesday August 05, 2026 @10:23PM (#49191679)
RSA is asymmetric crypto. This article is about symmetric cryptography. I expect LLMs will advance state of the art in factoring algorithms, considerably.
Re:Memory Safety Absolutists on Saturday July 25, 2026 @10:22PM (#49054006)
There are only three programs where memory safety matters: HTTP server, browsers, and operating systems. In practice, really just browsers and operating systems. Memory safety schemes that don't work for those systems are primarily cosplaying if their goal is safety.
The pricelist was a marketing stunt.
While the result is impressive, this blog post is extremely disappointing.

- It does not show an example of the new best solution, nor explain why they couldn't show an example (e.g. if the proof was not constructive)

- It does not even explain the previous best solution. The diagram of the rescaled unit grid doesn't indicate what the "points" are beyond the normal non-scaled unit grid. I have no idea what to take away from it.

- It's description of the new proof just cites some terms of art with no effort made to actually explain the result.

If this post were not on the OpenAI blog, I would assume it was slop. I understand advanced pure mathematics is complicated, but it is entirely possible to explain complicated topics to non-experts.

Re:YC's Biggest Scandals on Sunday May 10, 2026 @04:42PM (#48087777)
There's something ironic about vibe-coding an anti-YC site. They're why OpenAI exists!
Re:Using the internet like it's 1999 on Friday April 24, 2026 @10:57AM (#47891174)
The Internet in 1999 was not good at all. Browsers barely worked, computers crashed constantly, the ability to actually search for useful things was limited, and many things we take for granted as being online (news, people, documentation) were not.

The mid-to-late 2000s are perhaps closer to what the author is looking for.

Re:OpenSSL 4.0.0 on Tuesday April 14, 2026 @06:20PM (#47772217)
I dunno, they'll let anybody get on the Internet and start a podcast.
Re:Cloudflare targets 2029 for full post-quantum security on Tuesday April 07, 2026 @02:07PM (#47679090)
I will bring this up at the next meeting of the secret cryptographer cabal where we decide what information to reveal to non-cryptographers.
Re:The cult of vibe coding is insane on Monday April 06, 2026 @04:51PM (#47666894)
Except for the part where it's constantly having quality and reliability issues, even independent of the server-side infrastructure (OOMs on long running tasks, etc).
Re:Astral to Join OpenAI on Thursday March 19, 2026 @01:14PM (#47442664)
As opposed to Pip, which is obviously free and sustainable forever.
The person with the most HN karma of anyone on this site, currently thinks djb's actions are wrong.
Re:Be Wary of Bluesky on Saturday February 21, 2026 @05:25PM (#47105482)
For someone to come in and buy Bluesky and then hold everyone’s data hostage, then Bluesky would actually have to have enough value that someone would want to buy it.
RMS has, at minimum, showed that he swayed by parrots, spider plants, and free plane tickets and guest lodgings.
Re:What Is OAuth? on Saturday February 21, 2026 @12:40PM (#47102883)
> SAML is arguably the worst cryptographic standard ever created

The PGP packet has entered the chat.

GOT ‘EM
Re:The Startup Graveyard on Tuesday January 20, 2026 @01:45PM (#46696051)
Some of them also aren't really dead.
The 90-day disclosure window is an arbitrary courtesy, not a binding contract about the behavior of either party. They probably had other things to do.
Taken both in name and role, more or less.
PE didn’t kill housing. Private equity owns 2-3% of homes.
Re:Why is Hacker News red? Christmas? on Wednesday December 24, 2025 @10:12PM (#46381744)
It's not red! You're just colorblind.
Re:Stop Breaking TLS on Thursday December 11, 2025 @01:28PM (#46235064)
Network DLP is also not bulletproof so I'm not sure what the argument is there. These things are all best effort.

> if you have DLP at work, open the integrated browser in VS Code and notice how you can send protected test strings without anything chirping you.

I recognize it's not instrumented, but how are protected strings getting there in the first place?

Re:Stop Breaking TLS on Thursday December 11, 2025 @12:55PM (#46234666)
That is not true, you can run DLP on an endpoint directly and inside a browser directly (e.g. via an extension or direct integration hooks).

You can also try to stop the situation where the CC numbers are in the clear anywhere in the first place, so that you can't copy/paste them around. What happens if someone writes the CC number down on a piece of paper?

Older »