News for hackers. Stuff that matters.

dlgeek

I periodically (ha!) see these sorts of lots appear on Craigslist/Facebook marketplace. Is this the type of thing I can drop you a note pointing to the listing and you could reach out to the seller?
Re:A joke domain purchase turned in geopolitical warfare on Wednesday August 19, 2026 @11:01AM (#49362559)
Or maybe the sonde continued transmitting and they have data on where the guy took it which would help ID him.
FedRAMP actually has a bunch of workarounds for the problems of FIPS.

In the "FedRAMP Policy for Cryptographic Module Selection and Use" (https://www.fedramp.gov/resources/documents/FedRAMP_Policy_f...), there are a ton of gems that make it clear that the FedRAMP folks are fed up with the CMVP process backlog. The most explicit is:

"FRR9: CSPs shall determine if updating to a newer version of the software, whether or not its cryptographic modules are FIPS validated, would eliminate the vulnerabilities; if it would, CSPs shall promptly update if that is feasible."

You're right about Quantum. I just went and checked my router config. (I switched from CL to Q about 6 months ago).

CenturyLink did use a full PPPoE stack though.

Some of AT&T's fiber acquisitions still use PPPoE including CenturyLink and Quantum's fiber offerings (acquired from Lumen).
Re:Show HN: ssh ssh.place on Sunday August 02, 2026 @11:52PM (#49151032)
Not OP, but agent forwarding is a significant concern.
You nerd-snipped me into digging through court records.

The case was 655669/2021 in the New York County Supreme Court (the Supreme Court is the name for the first-tier courts in NY state).

Docket: https://iapps.courts.state.ny.us/nyscef/DocumentList?docketI...

The parties were in settlement talks and postponed the hearing on an injunction and then settled and dismissed.

No, Penny Lane is in my ears and in my eyes....
Re:Goes-19 weather satellite enters Safe Hold mode on Thursday July 16, 2026 @03:20PM (#48939014)
From the latest update (https://www.ospo.noaa.gov/operations/goes/status.html#datafi...), it looks like they're already restoring systems.

``` Update #3: DCS and SAR have returned to service as of 1630Z. Engineers will now work to restore ABI and expect imaging to resume by 1900Z. Image navigation may be slightly degraded for the first hour after imaging starts. The GOES-19 instruments will be restored in the following order:

    ABI
    GLM
    SUVI
    CCOR-1/EXIS/MAG/SEISS

The recovery process to return all GOES-19 instruments to normal operations is projected to take approximately 8 hours.

Update #2: The GOES-19 Safehold has been resolved and engineers are working to prepare for restart of the onboard instruments. More information on the recovery timeline will be provided when known. ```

I heard incoming audio after I keyed once.
He's not just the CEO, he's a co-owner... Meaning that the profits from the business acrue to him... and therefore enable this party.

So, it's a question of "am I ok paying for this service, knowing that a portion of that money will flow to this political party and how do I feel about the results of that funding?"

Made by Chrysler. They had plenty of failures with the Juno I and Juno II launchers.
Yes.

Some modern CPUs have moved the TPM inside the CPU itself. But traditionally, TPMs were attached via the LPC (low pin-count) bus, and you could absolutely sniff them or de-solder them and arbitrarily MiTM.

Meh? First, demand isn't necessarily zero despite the author's assertion based on the exhaustive data survey of asking "a couple of other people". For instance, SpaceXAI was convincing all the banks who wanted to work on the SpaceX IP to purchase Grok.

Second, AWS's goal is clearly to make Bedrock be the place to go for all the models - they're pushing for completeness, and that includes Grok.

Would I use it? No. Am I at all surprised that AWS is adding it to Bedrock? Also no.

Nope. I previously worked at a very big tech company (not Google) and they definitely had guidance like that in the social media policy.
Re:Tindie store under "scheduled maintenance" for days on Tuesday April 21, 2026 @09:58AM (#47848921)
It's like Etsy for small-scale electronics - if you build a cool, niche electronic device as an individual, Tindie is a marketplace to sell in low volume (possibly as a kit).
Wouldn't it be 75 cents then? (The cut would come out of higher pricing, since the payout is always a dollar).
(Not the poster you're replying to)

Pretty sure they were pointing out the absurdity of Gonzales v. Raich (545 U.S. 1)... But that really is the holding of the US Supreme Court in that case.

Re:Anthropic acquires Bun on Tuesday December 02, 2025 @03:42PM (#46126560)
You want those people specifically. To get them, you need to hire them for a lot more money than you pay your current folks. That causes a lot of resentment with folks and messes up things like salary bands, etc.

But since they own equity in the current company, you can give them a ton of money by buying out that equity/paying acquisition bonuses that are conditional on staying for specific amounts of time, etc. And your current staff doesn't feel left out because "it's an acquisition" the way they would if you just paid some engineers 10x or 100x what you pay them.

Re:Go Cryptography State of the Union on Sunday November 30, 2025 @01:07PM (#46098925)
Correctness to spec ensures interop works when everyone is on the same spec.
Re:Go Cryptography State of the Union on Thursday November 20, 2025 @05:25PM (#45998686)
Yeah, there's a ton of correctness testing involved. That's mostly at the algorithm, rather than the module level, so it'll fall under CAVP/ACVP rather than CMVP.
I mean... documenting the details of the investigation to support the first decision and relying on the documented details the second time would easily explain that.
Whatever happened with the Polish trains that had all the backdoors that were discovered?
Re:PoE basics and beyond: What every engineer should know on Wednesday October 22, 2025 @01:50AM (#45665314)
Nerdsniped: You're describing a IEC 60320 C13 cable - they're technically only spec'd for 10A, which means you're looking at ~1200W, not 1800.

(However, UL will list them for the full 15A -> 1800W, and I'm sure plenty carry that. And for that matter, I suppose you can get twice that in Europe on 240v...)

Older »