News for hackers. Stuff that matters.

dgellow

What kind of backdoor would you expect in such a device?
Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @08:55AM (#50336835)
Trigger is literally open source. That has nothing to do with how mature the node ecosystem is. If you want in-process queue systems you have a lots of other mature options. Trigger is a dedicated queue system, it runs in its own process and can be used from any language through its API. You seem to talk confidently about a topic I don’t think you understand.

Go has lots of mature in-process queue systems, yet River exists, because in lots of situation it makes perfect sense to have your job queue in its own process

Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @07:32AM (#50335976)
That has nothing to do with node. You have a lot of situations where a dedicated job queue makes sense
Re:OccupySaaS on Monday November 02, 2026 @05:25AM (#50335062)
What a weird idea. “We were fired, so let’s give thousands of dollars to the AI providers to copy existing software”, how can that help anyone? Why not use that energy to build new ideas that compete with the existing ones, instead of this focus on cloning what is successful? That feels so anti-hacker mentality to me
Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @05:20AM (#50335032)
You can run trigger in your own infra. That has very little to do with the libraries used for your web app
Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @05:19AM (#50335023)
Security has never been a priority in the software world
Re:It wasn't AI that flipped Proton's charge on Sunday November 01, 2026 @03:31PM (#50329498)
The sycophancy I would say
It’s a client side block… which is of course a block
Sure, that’s still a block. A client side block is obviously a block
You’re literally describing how they did set up a block, while also saying they didn’t
What when China starts doing the same?
Re:We Took over ChatGPT Accounts on Saturday October 31, 2026 @12:20PM (#50317520)
A bounty amount is related to the blast radius and overall impact, not the effort required to find the issue
If it doesn’t it’s the best argument against model being conscious
Click on the timestamp of the comment, then “flag”
Re:We Took over ChatGPT Accounts on Saturday October 31, 2026 @09:57AM (#50316244)
That’s so low. That’s the level of bounty I awarded researchers when I was managing the bug bounty program at a small startup, it’s just ridiculous coming from a large company like OpenAI
The S1 actually said it has $855B of commitment. Above $1T of you take in account some that don’t have fixed prices like extra TPUs and the Broadcom agreement. And that they will also build their own infrastructure, on top of that.
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @10:54AM (#50304817)
If you completely change the statement, the meaning is different. What’s your point? No software company obeys by regulatory rules imposed in other industry
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @10:50AM (#50304784)
You’re projecting, I didn’t excuse anything
Re:Official Claude Code extension compromise on Friday October 30, 2026 @09:23AM (#50303539)
Wtf. That’s its own scandal
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @09:22AM (#50303519)
It would be hilarious if that’s an obfuscated way to say Claude developed it. “Claude, who was birthed but not hired by Anthropic, went rogue by hijacking the extension”
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @09:19AM (#50303477)
I get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track of everything happening when you grow your team by 5x over a relatively short period of time
Re:Duet is the future of chatbot interaction on Friday October 30, 2026 @04:28AM (#50301163)
I meant „the distinctive elements that make Duet better will be copied“. Have you read the article?
Re:Herdr has released native app on Friday October 30, 2026 @04:23AM (#50301131)
Their website has lots of screenshots
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @04:06AM (#50301026)
Tether isn’t decentralized or censorship free in any way
Re:Duet is the future of chatbot interaction on Thursday October 29, 2026 @04:22PM (#50295306)
Sounds like things the competition will copy in a few days? Or am I missing something?
The article has nothing to do with race.
I just noticed my own autocorrect mistake, I meant “did you”, not dude you :)
> Lastly it's the only "SOTA" model in a long time that has actively hallucinated details

Could you expand on this? I’ve never seen a frontier model that doesn’t hallucinate details fairly often, what do you mean by “actively” here?

Ask HN: What's your iPhone Duo experience so far?

I assume some of you bought it on release. What are your thoughts so far? Would you recommend it to casual users? Did you return it, and if yes why? Just interested to learn a bit how people who aren’t pro-reviewers feel about it now that it has been out a few days.Also, what’s the most interesting, creative use of the foldable form factor you’ve seen?

( Read More... | 1 comment | on HN )
Re:MacBook Pro with PROLED XDR Display and Touch on Thursday October 29, 2026 @06:20AM (#50286837)
I used for years a surface book 2 as my personal laptop. I like to have the touch as an option, if you want to lazily scroll through a website when laying down, or pause a video, or zoom in an image or map it’s just so easy to quickly touch your screen. But I wouldn’t include that in any serious workflow.

Older »