News for hackers. Stuff that matters.

dijital

Re:There isn't an easy exploit for this PHP vulnerability on Thursday October 22, 2026 @02:49AM (#50192046)
And a newly registered domain only 3 days old:

  whois eliastaylor.com
    Domain Name: ELIASTAYLOR.COM
    Registry Domain ID: 3148982369_DOMAIN_COM-VRSN
    Registrar WHOIS Server: whois.porkbun.com
    Registrar URL: http://porkbun.com
    Updated Date: 2026-10-02T19:39:03Z
    Creation Date: 2026-10-02T19:14:35Z
    Registry Expiry Date: 2027-10-02T19:14:35Z
    Registrar: Porkbun LLC
    Registrar IANA ID: 1861
Re:Microsoft forced me to switch to Linux on Thursday January 29, 2026 @02:36AM (#46806984)
Worthy mention of RapidRAW for photo editing on Linux: https://github.com/CyberTimon/RapidRAW
Re:The struggle of resizing windows on macOS Tahoe on Monday January 12, 2026 @03:22PM (#46593727)
I've been troubleshooting this on and off since early December.

There's a handy Python script here to show log which application is stealing focus: https://superuser.com/a/874314

If you find it's SecurityAgent then you might be hitting this bug: https://developer.apple.com/forums/thread/807112

I suspect it's related to a JIT privilege management app my company uses.

Re:The least amount of CSS for a decent looking site (2023) on Tuesday October 07, 2025 @05:04AM (#45500931)
Quarto (https://quarto.org/) is well regarded in academic publishing and supports website projects: https://quarto.org/docs/websites/.
Re:Ask HN: What are you working on? (September 2025) on Tuesday September 30, 2025 @03:26AM (#45422840)
Nice project! The National Library of Scotland has a nifty tool focused mainly on the UK and Ireland that does something similar (with a paid print service attached): https://maps.nls.uk/geo/find/marker/
Re:This blog is running on a recycled Google Pixel 5 on Wednesday September 03, 2025 @02:16AM (#45112738)
It's further down in the article but he's using `hugo serve` which renders the static site and serves it in one command.

Not entirely sure how he's doing TLS from a quick skim of what he's shared though.

Re:When We Get Komooted on Sunday July 27, 2025 @04:44AM (#44699845)
The article mentions one example: https://wanderer.to/. Haven't used it personally but seems promising (albeit less "social" than something like Strava).
Re:CoMaps: New OSM based navigation app on Thursday July 03, 2025 @08:58AM (#44454556)
Previously discussed on HN here: https://news.ycombinator.com/item?id=43961908

Original letter regarding the dispute with Organic Map is here: https://openletter.earth/open-letter-to-organic-maps-shareho...

Re:FLAC 1.5 Delivers Multi-Threaded Encoding on Tuesday February 11, 2025 @12:15PM (#43015350)
For folks working in bioacoustics I think it might be pretty relevant. I'm working on a project with large batches of high fidelity, ultrasonic bioacoustic recordings that need to be in WAV format for species analysis but, at the data sizes involved, FLAC is a good archive format (~60% smaller).

This release will probably be worth a look to speed the archiving/restoring jobs up.

It seems like the serverside resource requirements to help with the privacy preserving aspect (and also to avoid DDoSing the data providers) would be non-trivial for a FOSS project like this.

I was wondering if a torrent-based architecture, where clients share updates with each other would help reduce the load. Any idea if it's been considered or would it just overcomplicate it for the number of clients involved and/or the latency for updates be too much to be of use?

Re:Kagi and Wolfram on Tuesday March 05, 2024 @08:43PM (#39611306)
If you're using Firefox and have Kagi as your default search engine, then just adding the Firefox search widget seems to do the trick.
The title doesn't really highlight it but this is using OpenAI's Whisper behind the scenes and can simultaneosly do transcription and diarisation (speaker identification), which is one of the most highly voted discussion topics on the Whisper project: https://github.com/openai/whisper/discussions/264

Very promising for online meetings to have a transcript of what was discussed.

Re:Re-using the heat in bathwater in Britain on Sunday October 30, 2022 @08:24PM (#33400557)
I think you're right and actually the extra moisture in the air would also mean that raising the temperature of the house requires more energy input since the specific heat capacity of water is higher than air.
> Once the ink is there, it won't go way by itself.

It occurs to me that an interesting low-power extension could be to have the device turn itself off after refreshing the display and then plug it in via a timer switch.

If the dashboard only needed hourly or daily updates and the previously rendered dashboard stays visible, there's no need to leave the Raspberry Pi running all the time.

Re:Linux and Powershell on Tuesday January 19, 2021 @12:50PM (#25836298)
If you're working on a shared project where people might care, I usually have the [PSScriptAnalyzer][1] just auto-correct any aliases dynamically for me in my IDE.

If you're just doing a quick one-off or interactively, then who cares! Crack on with your incomprehensible one-liners!

[1]: https://github.com/PowerShell/PSScriptAnalyzer

Re:AWS CloudShell on Tuesday December 15, 2020 @02:03PM (#25433710)
Definitely do-able, Google wrote a blog about how to do exactly that on the GCP Cloud Shell a while back so not unreasonable to do the same on AWS:

https://medium.com/google-cloud/how-to-run-visual-studio-cod...

And Hashicorp have one on using Terraform from GCP Cloud Shell:

https://www.hashicorp.com/blog/kickstart-terraform-on-gcp-wi...

Re:Why is the Google Cloud UI so slow? on Wednesday December 09, 2020 @11:57AM (#25360706)
Yeah they've got a nifty tool called Magic Modules that partially auto-generates the Terraform Provider (along with Ansible and InSpec) from the GCP API:

https://www.hashicorp.com/resources/google-provider-new-terr...

Re:Please stop using CDNs for external JavaScript libraries on Monday October 12, 2020 @05:34AM (#24752775)
By the same logic, TLS 1.2 isn't a solution to insecurities in 1.1 because only 98% of users currently support it.

It's perhaps worth accepting there's no silver bullet here but a combination of initiatives like SRI is still worthwhile to help reduce the attack surface for the majority of users?

Re:Show HN: Top, but for Nginx on Tuesday June 09, 2020 @01:37PM (#23468810)
If you're in a Kubernetes environment, the NGINX Ingress Controller has a pretty decent set of realtime metrics: https://kubernetes.github.io/ingress-nginx/user-guide/monito...

Which presumably means those metrics are available in the OSS edition somehow...

Re:OAuth 2.0 Security Best Current Practice on Tuesday May 05, 2020 @12:37PM (#23081889)
Worth bearing in mind:

> This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

> ...

> It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

Re:Paris to Create 650 Kilometers of Post-Lockdown Cycleways on Thursday April 23, 2020 @03:59AM (#22953751)
I'm not sure where you are that gets a meter of snow and ice. Bike lanes are perfectly usable up here around the UK, Belgium, Holland and France all of the year, just a few puddles to dodge in winter.

The majority of risky cycling here comes riding during rush hour in heavy traffic. Cycle lanes are a great investment IMHO.

Re:Cloudflare Dashboard and API Service Issues on Wednesday April 15, 2020 @04:19PM (#22882537)
You could hook something up to their Status Page's RSS feed. We have a #provider-updates Slack channel for things like this.

https://www.cloudflarestatus.com/history.atom

Would the Language Server Protocol make sense for your approach here?

https://microsoft.github.io/language-server-protocol/overvie...

Really interesting concept for exploring a new API, but I don't see myself dropping my IDE of choice for it.

Re:Monzo urges 480k customers to change their pin numbers on Tuesday August 06, 2019 @01:09PM (#20627202)
Out of interest, where did you hear this from?
Just enable guest mode. Pretty sure they're not employing top notch cyber investigators for security searches. They aren't smart enough to know the difference and it'll meet their "requirements". Fucking assholes
Re:Kubernetes 1.14 released on Tuesday March 26, 2019 @09:00AM (#19491340)
Re: ksonnet deprecation: I heard from some of the CoreOS team at a Prometheus Meetup recently that ksonnet is not exactly being deprecated.

Heptio (the owners of ksonnet) were bought by VMWare and will no longer maintain it. But it's possible the CoreOS guys will take ownership since they use it heavily in some of their tools.

Older »