News for hackers. Stuff that matters.

dgoldstein0

Why should we doubt it's an auto ban?

To be clear I totally think we should demand better off their automated systems. Just because they made a robot do things and the robot did it wrong doesn't absolve them of any responsibility. They just are too cheap to pay enough actual people to be in the loop of automated decisions or quickly reviewing them.

Not targeted by Meta at least. I've heard plenty of stories of people getting banned due to other users flagging - and that's definitely an abusable vector.
My bet is that some sort of auto ban logic kicked in, maybe due to abuse of reporting features. It'd if course be worse if a human moderator took it down or affirmed such a decision but not impossible.

Meta and other big tech usually over-relies on automated enforcement because it's easier on their wallets than hiring enough moderators to keep up in near-real time. And it's hella easy for a group of motivated people to coordinate flagging of content, which the automation often takes at face value.

Clearly having public spaces in private hands like this is tricky, as if we try to require better moderation that ends up to expensive, private interests will probably find a way to just kick anything controversial / political off their platforms.

Re:We Learned to Stop Worrying and Love Campus Surveillance on Saturday September 26, 2026 @03:04AM (#49853997)
I realized it was satire but I thought the bedazzling was going to actually cover the camera lens until their picture of it
Re:Spymarks, Not Watermarks on Monday September 21, 2026 @10:05PM (#49795958)
Eh bank notes have watermarks just to make them harder to forge. They also have serial numbers, but as almost no businesses pay attention to them they aren't really used to track transactions. The provenance of a particular bank note isn't that interesting beyond knowing whether it's a forgery.

The problem with these spymarks is that they can be used to include data that's completely invisible to users - even potentially to sophisticated users and the programs that consume the marked files. So while I can make an informed decision whether to share a picture, I may not be informed about any spymarks. Vs a normal watermark that aren't designed to be invisible.

Re:Dystopian Surveillance Is Becoming a Reality on Tuesday September 15, 2026 @01:51PM (#49716171)
Re smart speakers / Google Assistant etc I think there have even been some lawsuits about inadvertent recording. I think they get it right most of the time, so my impression has been the lawsuits are about the mistakes.

That all said, as a technologist in the past I could say "of course they aren't recording you and data mining your conversations" because that's obviously an expensive and complicated proposition when much cheaper forms of data mining exist. But with AI advancements I think that calculus could change - the systems that could do this are already being built for other reasons; the main reason to not do it is cost but that's being eroded.

Re:The death of San Francisco's Market Street on Thursday September 03, 2026 @09:39PM (#49559485)
Buses are also more massive so more likely to cause serious injury in an accident. They can't stop as fast as a car/bike /etc. But that's also why they seem to move more slowly, takes them longer to accelerate, which one would think might give others an advantage to avoiding them.
Re:The death of San Francisco's Market Street on Thursday September 03, 2026 @09:35PM (#49559466)
Mmm accordion buses definitely sound like extra danger
Re:The death of San Francisco's Market Street on Thursday September 03, 2026 @09:34PM (#49559457)
I'll give you that buses tend to be more predictable - they run fixed routes, you can guess where the stops are - but my biggest problem is whether they can see me or not. They are large so if they don't see me and start moving while I'm trying to pass it could end badly. Usually I try to only pass if they just stopped and I clearly have plenty of room and time.

Cars tend to scare me more as there are way too many impatient drivers who are all to happy to speed around me without much clearance and then cut me off. And they could easily misinterpret me weaving a little to avoid a bump as me scooting over it pulling over for them or starting a turn. And don't get me started on how many cars have tried to right turn on red arrows across bike lanes which have a green signal.

Other bicyclists and pedestrians often suck too, but worst case if I run into them is pain, not death.

Re:.name Termination on Thursday September 03, 2026 @05:21PM (#49557223)
Totally agree that a DNS based replacement to the suffix list would make sense. Especially with more secure forms of DNS like DoH or Dnssec.

That said I don't know about making cookies shareable across TLDs. That seems like allowing more privacy nightmares; at least today if you want to share you need complicated redirect dances that make you question if the user perf hit is worth it. I think there was some proposal for a mechanism for allowing non partitioned 3rd party cookies which seemed more sane to me, forget what the details were and if it ever made it beyond just a proposal.

Re:.name Termination on Thursday September 03, 2026 @05:18PM (#49557173)
There are use cases for cookies to affect multiple domains, like shared logins. Keep in mind multiple domains let's you run completely independent servers for different parts of your web presence but that doesn't mean that you want them to act independently.

That said the dumbest thing with cookies is not sending their attributes in the cookie header which makes it impossible to distinguish expected cookies from tampered cookies set by insecure subdomains. __Host prefix is basically a workaround for this but took more than a decade to get into browsers. Samesite similarly was bolted on after the fact.

Cookies aren't the only web security feature that follow sites instead of origins but they are the only one that was clearly designed without thinking through the consequences.

Re:.name Termination on Thursday September 03, 2026 @05:04PM (#49556975)
This isn't so bad as .com.mx and .mx should be on the public suffix list then.

But letting arbitrary customers take arbitrary 3 level domains, and others take 2 level domains, seems like a mistake as it's not very reasonable for every 3LD customer to put the 2LD on the public suffix list, but mixing 3LD and 2LD registrations means you can't public suffix *.name.

Seems the whole idea of having both was always misguided.

Re:Where Did All the Public Bathrooms Go? on Sunday August 30, 2026 @05:05AM (#49496979)
Rent control won't really solve the problem as it can only help people who already live in the city but makes rents even higher for new residents - there have been studies that essentially find that rent control essentially just transfers money from newer residents to ones who have lived here a long time. And worse, it a removes incentives for improving existing buildings and for current tenants to move, thereby reducing liquidity in the market - eg if you would like to upsize or downsize for whatever reason, being locked into a good rent controlled price is a strong disincentive.

The better solution is definitely "build an incredible amount of homes" though $1200 probably is not be obtainable even at extreme ends of possibility. We also should consider it a region wide problem and not just an SF problem - the whole bay area needs to build more, as rents in Oakland, Daly City, San Mateo, etc are related to SF prices as well. If the region is going to add jobs we better add housing at the same rate, and we've massively failed at that.

But anyway if the market actually starts functioning as new supply appears any tent decrease would incrementally attract some new tenants from elsewhere. Rents only shoot back up if the supply increase isn't sustained addition, or we somehow artificially lower rents for a short period. In a functioning market we should find an equilibrium price and when demand spikes faster than units can be built, be development would spring up that in a few years would push prices back towards normal (as jobs / the economy clearly moves faster than new housing can be constructed). But even in the booms when construction should be seeing the influx of people with high salaries and trying to develop new housing to keep up... Well, the volume of new housing just didn't keep up.

Or more likely companies and people will just comply. It might give a little more fuel to open source from people who are ardently pro privacy that balk at an age signal bring implemented, but I don't think that's such a huge segment of users.
It sounds like since Android is a commercial repackaging of Linux it's in scope and Google gets to figure it out.
Re:Where Did All the Public Bathrooms Go? on Tuesday August 25, 2026 @01:35AM (#49429493)
SF - and probably much of the US homeless problem elsewhere - is largely cost of housing; rent and home prices are ridiculous enough that if you don't make big bucks, you are likely barely scraping by. Rents here are rising way faster than inflation, and it makes everything more expensive and means a lot more people are living that much closer to not being able to pay their rent. Way easier to end up homeless after losing your job when paying 3k/month in rent than 1k/month, as at the cheaper rent saving money is actually possible.

We've consistently built a tiny fraction of the new residential units needed for projected population growth for decades now. Supply has been barely growing while demand surged; what else should we expect?

Other parts of the country have not been as extreme, but this has played out in other cities too. We've had terrible housing policy, and increased homelessness is a direct consequence.

Re:Where Did All the Public Bathrooms Go? on Tuesday August 25, 2026 @01:28AM (#49429442)
Prison isn't the right idea. But getting them into some sort of treatment would make sense. And that could be court mandated for repeat offenders for some crimes.
Re:Dropbox is an obvious PE Target? on Sunday August 16, 2026 @10:21PM (#49325894)
Paper still exists, though has definitely spent quite a while stagnant due to underinvestment.
Re:Dropbox is an obvious PE Target? on Sunday August 16, 2026 @10:20PM (#49325891)
Paper still exists - Drew refused to kill it. Been heavily underfunded for years and saddled with a codebase that assumed it would be >50 people forever, so still digging out of that hole - hence the apparent freeze on feature development for multiple years and separate mobile/desktop apps disappearing.

Yes, the photos one was Carousel. I'm still sad about that, in some ways it was better than even what Google Photos offers now. The big problem there was Dropbox chicken'ed out about picking a fight with Google Photos - since Google were giving away for free(ish) a comparable product to the whole Android install base, doing the same freemium model as always would've been a challenge with heavy competition for the free users.

Mailbox... was a botched acquisition. Ideologically they aligned, but no real plan for how to keep momentum and turn it into making money, and no real story about how Mailbox was better as part of Dropbox than separate. Even under the hood the infrastructure was all separate (except eventually for login).

A big missing piece of the story: Dropbox tried to be a multi-product company long before building the infrastructure for that. Which I think self-sabotaged many of these new products.

Pbs is offering to pay for the recovery, but the company who supposedly has the data basically went non responsive. Honestly this sounds like a mishandled going out of business where the company left with the assets was not prepared to deal with the customers at all.
Re:Dropbox is an obvious PE Target? on Wednesday August 12, 2026 @04:03AM (#49269177)
Out of curiosity which apps do you miss the most?
yeah I assume they've done the cost-benefit and figured that if Russia gets the supplies they'll be hurt more than however much Iran can possibly retaliate - Iran does have missiles that can hit Israel so I do have to question whether they can hit Ukraine - it's not that much further - but may very well be worth it to the Ukrainians to take whatever Iran can dish than what Russia could do with the shipments. And with Iran already at war, I doubt Iran wants to spend the effort to retaliate more than whatever they consider the necessary token amount.
There's a difference between polite pushback and being straight up disrespectful. It shouldn't matter as the cops shouldn't abuse their power and shouldn't attack people, but we live in the real world. The judge probably didn't want to have to deal with the potential future mess if op didn't learn their lesson and got beat up by a cop.
That would also require fatter wheels. Which together have higher moment of inertia which makes for slower bikes (as more energy is required to get the wheels to the same speed).

Not exactly what people want in a race.

Re:Michigan spent $1.8B and only created 602 jobs on Sunday July 12, 2026 @02:37AM (#48878897)
I mean I'd be a fan of a roadmap of simple improvements that contribute to a big vision. Shipping incrementally just seems to work better when possible.
From reading the article, it does sound like that's a top hypothesis. Pulled fast enough, a bubble from cavitation can form and serve as the nucleation site of the crack
Re:Michigan spent $1.8B and only created 602 jobs on Saturday June 27, 2026 @10:30PM (#48703789)
California high speed rail has been a mess. Which is likely in part because politics dictating routes has raised the costs and timelines substantially. On a smaller scale SF was building a new subway in 2013 that had been on the drawing board for years. I remember thinking maybe I'd ride it to work one day. Opened in 2023 or 2024, after I had moved offices twice and then went to work from home. It's not a terrible line but because it had to go to the center of our Chinatown instead of 2 blocks over, it took quite a bit longer and became the deepest subway line in the city. Several other bits of stupidity too in that project but a big piece of the delayed timeline was that tunneling in SF is hard.

Plenty of other transit projects exist that have made real differences. Personally I'm a fan of the simple improvements: revised bus routes with dedicated bus lanes and improved stop & shelters, added bike lanes, etc. those sorts of projects are relatively cheap investments and while no single one is a silver bullet they add up. On a bigger scale - Caltrain's electrification was a big win. Both kinds of projects are easier than building whole new tracks or digging new tunnels. Extend and improve the existing systems. Most cities have something to start from.

The climate requirements to run at this hotter temperature still probably means it'll require more active cooling in the desert during daytime /summers. Assuming we're talking about hotter desert environments like US southwest. That might make your proposal not as economical.

Imo we should just solve the problems with data centers being near cities. Manage/regulate the noise and any waste (heat included, it shouldn't drastically impact the neighbors) and make them pay for any utility capacity/reliability upgrades needed. If this article is right and water usage can be nearly eliminated then it seems like the rest should be solvable? Especially if we can take the extra heat and use it for local power or heating needs.

Re:Rent collections are down in New York on Monday June 22, 2026 @03:47AM (#48627057)
Globalization wasn't a loss for all of America - the benefit of shipping manufacturing overseas was that the resulting imports were cheaper than producing domestically. After all if they weren't, people would've preferred to buy domestic. So it was a net win for the consumer via cheaper goods, but came at the expense of Detroit, Pittsburgh and other "rust belt" cities & communities.

We're still grappling with the consequences. We should've invested in transitioning those workers to comparable or better jobs but the ball got completely dropped on that.

Re:[x86] AI Compute Extensions (ACE) Specification on Wednesday June 17, 2026 @11:31PM (#48580435)
So how does this differ from available sse / avx instructions already in most x64 machines?

Older »