News for hackers. Stuff that matters.

div72

Re:DDoS Botnet Aisuru Blankets US ISPs in Record DDoS on Tuesday October 14, 2025 @09:55AM (#45580092)
It'd be far more acceptable to block the CG-NAT IPv4 addresses if you knew that the other non-compromised hosts could utilize their own IPv6 addresses to connect to your service.
Have you seen headscale? It's a bit of work if you don't have a selfhosting setup but it enables you to use the service without being at the whim of Tailscale.
Re:Xiaomi MiMo Reasoning Model on Wednesday April 30, 2025 @02:19PM (#43848954)
> The largest portion of all languages in Common Crawl

https://commoncrawl.github.io/cc-crawl-statistics/plots/lang...

Re:I think we need a bigger boot partition on Wednesday March 19, 2025 @08:44AM (#43411108)
What? Why is your NVIDIA modules even in the boot partition? My largest /boot is on Fedora and that's 454MiB, 87MiB on Arch and 30MiB on NixOS.

EDIT: "With grub, the situation varies; if the device has a graphics card, it usually means that driver modules need to be placed in the boot as well.", "usually" carries a lot of weight here, none of the systems I had had this kind of a requirement.

Re:Reviewing the Cryptography Used by Signal on Tuesday February 18, 2025 @11:40AM (#43091804)
Except TLS-SNI sends the hostnames in plaintext during the handshake and you can't disable it in at least Firefox AFAIK.
Are you sure you were informed by Thunderbird and not by your SMTP server?
Re:CERN Root on Saturday June 01, 2024 @06:47AM (#40544543)
Only for the optional "read time travel and world domination plans" module.
Re:Copyleft licenses are not "restrictive" on Friday April 19, 2024 @11:44AM (#40088249)
Copyleft licenses are restrictive as obligations are restrictions. "You must provide a source code to your users" is equivalent to "You cannot use this software if your source code is not available to your users".

Freedom is a finite resource in which copyleft licenses take from the developer to give to users. (which ends up at the same point as the article but I prefer wording it this way.)

Isn't ARM's TrustZone equivalent to ME/PSP on Intel/AMD?
Re:Open-Source AI Is Uniquely Dangerous on Saturday January 13, 2024 @05:14AM (#38978604)
> This is a guest post. The views expressed here are solely those of the author and do not represent positions of IEEE Spectrum or the IEEE.
Re:Web Browser Telemetry on Monday December 11, 2023 @04:13PM (#38605563)
The post is about unsolicited requests at startup, Tor Browser does not connect to Tor unless you click Connect or enable the auto-connect option.
Re:It's never been a better time to switch to Firefox on Wednesday November 22, 2023 @03:27PM (#38384649)
Weird thought, but have you tried using Selenium?

Seems like launching a browser tab with:

    from selenium import webdriver
    driver = webdriver.Firefox()
and navigating to duckduckgo.com:

    print(driver.current_url) # https://duckduckgo.com/
works.
Re:Servo announces grant from the NLnet Foundation on Thursday November 09, 2023 @09:16AM (#38205246)
> When are we going to talk about how openly corrupt Mozilla has become?

It's routinely discussed on HN, whenever a topic about Mozilla/browsers comes up. The real question in my opinion is what can we do about it? Start an awareness campaign? Stop using Firefox? Stop donating to Mozilla?

Re:City officials attempt to doxx Wikipedians on Tuesday August 01, 2023 @09:29PM (#36965791)
Probably because of attribution. I assume that most Wikipedia articles are licensed under a version of CC with attribution requirements.
Re:How to store a permutation compactly (2022) on Saturday July 15, 2023 @08:33AM (#36736025)
For something to be used in PoW, it needs to be both hard to solve and easy to verify. Protein folding checks the first box but not the second. As an example, prime number calculations check the both boxes and there's Primecoin which bases its proof algorithm on prime chains.

This only applies if you prefer to be trustless though. If you are willing shed a bit, you can trust Folding@Home's scoreboard data (and whoever supplies the data to you) to use it as a pseudo-"PoW" and run a proper proof algorithm beneath. (which is also done by a number of coins like Banano, Curecoin, Gridcoin. You can see their people on the leaderboard with weird names like x_ALL_x, x_GRC_x or just bunch of non-sensical alphanumeric characters.)

Re:ChatGPT's Chess Elo is 1400 on Friday March 17, 2023 @02:50PM (#35201253)
I agree with your conclusion but the example you gave of Magnus Carlsen doing an illegal move is a pretty bad one imo. That was clearly a trap from his opponent as he did an illegal move first by checking Magnus while he was under check and then immediately calling the arbiter when Magnus moved his king in response. Magnus also probably did not have had much time left as it was a Blitz game.
Re:Stride – Open-source C# Game Engine on Sunday February 05, 2023 @04:52AM (#34663453)
Seems like a typo, dropping the s at the end works.
Re:Show HN: Python framework is faster than Golang Fiber on Tuesday January 10, 2023 @06:36AM (#34323277)
Probably should add that it's faster with PyPy as it might not be obvious on how an interpreted language like Python can beat an AOT compiled language like Go.

Interesting results nevertheless.

Re:The End of /R/GPUMining on Thursday September 15, 2022 @11:07AM (#32853170)
That's a pleasant mention of Gridcoin but I'd like to clarify that you do not actually mine Gridcoin. Gridcoin rewards scientific work for the BOINC(Berkeley Open Infrastructure for Network Computing).

(Not that your comment is wrong but one could miss the mention of scientific computing while skimming.)

(Also BOINC and Gridcoin both are open source and needs some love from contributors. I'd like to drop their links for anyone who has free time.

https://github.com/BOINC/boinc https://github.com/gridcoin-community/Gridcoin-Research )

Re:Erg: a statically typed language that is Python compatible on Saturday August 13, 2022 @04:09PM (#32453330)
It'd not fully solve your issue, but have you ever seen https://github.com/py2many/py2many ?
Yes, that is on my mind. I was actually planning on letting the user do some queries as the form data is actually stored in a sqlite database anyways.

Can you link to your format if it's public? I'm interested.

I suppose something like WebTorrent could be used in that instance? The peers could eliminate the need for the server.

Still that's too much JS for my minimal/no-JS goals.

I've semi-thought about that and edited the post but wish I actually edited the title instead(the option is gone now). I was thinking of pure as in no React etc., did not think that this could be interpreted in that way initially.

Older »