News for hackers. Stuff that matters.

dmantis

Re:Serbia just elected the world's brainiest parliament on Saturday October 31, 2026 @07:46AM (#50315163)
Average professional politician is a psychopath fighting for power no matter what.

At least these guys might be honest about their hubris and arrogance and won't smile to you while slaughtering your future or robbing your family.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @05:53AM (#50301751)
Well, nobody said that the true anarchy would be easy. No government actually wants to approve the original spirit of crypto, everything they allow is either a toy or a scam they can take advantage of.

Then people get into shitty casino tokens that are widely available because the state doesn't care about a little gambling and got surprised that they are in the casino in the first place.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @05:21AM (#50301499)
> As an investor there is no way to protect yourself

Why? BTC is pretty stable longterm and nobody is going to touch your cold wallet. Anything that has an owner or legal entity is not decentralized, subject to either rug pull or censorship and shouldn't be touched, sounds very easy.

Everything that promises you any return is a scam in crypto, simple as that.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @05:17AM (#50301477)
> great amazing decentralized censorship-free drop in replacement

It's not and never supposed to be and everybody who uses it in any significant amount knows that. Don't mistake a cryptotoken with a cryptocurrency.

I'm sure these gentlemen will figure it out.
Antrophic works with with ex-deputy of the CIA (David S. Cohen). OpenAI has ex-director of the NSA (Paul Nakasone) in the board. Literally.
Re:We should be more ambitious with the software we build on Sunday October 25, 2026 @08:25AM (#50230820)
People regularly write here that nobody really knows how LLM weights are working really, we only know how to achieve that and run inference. Isn't that true?

I see it this way in layman sense:

- you feed the model with data;

- you run the query;

- you activate a network and it gives you most probable token, refeeds it back and generates next and so on;

- nobody knows exactly why and how this next token comes and can tell strictly which input data gives which output data without running the exact query with 0 temperature.

So yes, it's not an exact copy, but you also can't say that a particular repo is not reflected anyhow. And I mean that the weights are reflected by the particular logic, not a syntax.

Otherwise why all the hassle if we can just feed the language reference doc to 100mb model and it should be able to produce everything just fine if only the syntax connections are needed and everything else is freshly derivated and not based on the actual implementations.

Re:We should be more ambitious with the software we build on Sunday October 25, 2026 @02:13AM (#50228803)
You can also consider that open source version of RustPython existed 6 years ago and probably in all LLMs dataset
Re:Shitter – A Nitter Fork on Saturday October 24, 2026 @10:40AM (#50221695)
The diff seems to remove proxying of videos and other media and leaking client IP to twitter. Why?
If you are not a citizen, but an immigrant, it could be very true in some parts of the world.

I have a living permit and legal status in the country I live in, but only few banks open accounts to people like me, most just deny anyone but citizens of the country.

The ones that open all work in GrapheneOS though, so not big deal for me in my particular case.

Re:Is this the new cyber normal? on Saturday October 24, 2026 @04:11AM (#50219198)
> Companies accepted that risk because the pace from CVE -> exploitation was big enough, but now with AI, exploitation at scale is easier than ever.

So that's what I'm saying, the business incentives are changed, there is no more room for the ignorance of the security. You either maintain it or you are out of business. Brutal period, but now everybody is forced to update, fix and improve the isolation because every script-kiddy can deploy a 0day every week. That helps to fix things from actually dangerous actors who had resources for 0days before the AI boom and used this negligence to harm people worldwide.

Re:Is this the new cyber normal? on Saturday October 24, 2026 @02:04AM (#50218696)
The security debt is temporal and going to decline because old software is going to be patched or thrown away and new one is going to be security-scanned and tested.

I'm very positive about the change. If we don't look at it purely technical, vermin from ransomware gangs and Russian/Israeli/USA spy agencies already knew a subset of these things. That shows how vulnerable we were, actually. What's a stupid bug for one, might be life and death question for another. Before, from business side of things, there was no urgency to maintain proper security and fix things, now we have a more equalized grounds and everyone has to invest both in security assessment, sandboxing/better isolation on system level and formal verification.

That will literally improve small countries and individual sovereignty against the spies and improve the humanity in the long term.

While it's a pity for many maintainers during the transition, after some time we will have much better world where you can trust your computer regardless of who you are.

Re:Quad9 (DNS Resolver) to Exit France on Friday October 23, 2026 @08:37AM (#50208038)
https://quad9.net/service/service-addresses-and-features/

You can use 9.9.9.10 - it has no filtering.

But even malware filter is supposed to cut malware, not pirated content. Cutting piracy while saying that you cut malware is def lying because pirated resources might not provide anything malicious for the end user.

Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @12:16PM (#50197449)
I guess the issue is that they are ordered to block it for all users, not only those particular users who picked some particular lists.

And nobody would pick a piracy list, why'd you do it as a user.

How genuine indie devs from 3rd world are supposed to release their products then? It places many people in disadvantage to wealthier countries.
Re:How I got over 300 Tor exit nodes removed on Tuesday October 20, 2026 @01:29PM (#50169773)
You don't route anything by default, you have to explicitly enable it if you wish to help the network.

And relay operators (not exit nodes) don't face any issues. Don't let the unreasonable fear blind you.

Re:Orkut.com on Friday October 09, 2026 @08:09AM (#50019360)
That works if you live in a developed country with preferably 1m+ populated city. In many places in the world you won't have many (or even any) people who are really good in your hobby after 5-6 years of practice. Internet really expanded the possibilities to ask like-minded people who are better than you in something you value from the whole world.
Re:Norway Eyes Partial Ban of Smart Glasses on Tuesday October 06, 2026 @02:23AM (#49974926)
You can record all you want, like with the private yard camera, but there should be fines for uploading materials to the public or spyware companies like Meta without explicit consent of the person recorded. And recording without consent inside someone's else private property must be a felony.

Laws prohibiting explicit recording of a person and espionage exist in many countries and they work fine.

Would be nice to have a single website with model list without spyware.

I'm pretty sure some high-risk customers around the world with money would be happy to have no-brain "choose a proper car without a snitch inside" button.

Maybe a quick public way to drop snitch options from customer choices would slightly improve the situation. Right now it requires a full-time research it seems.

> somehow young people have worse communication skills and less friends

I have a feeling that many young people sit behind the screen all the time.

My point doesn't work if you don't even try to socialize. Still have to make an effort and go through the uncomfortable awkward stage when you are shy or lost for words in most interactions.

I know enough no-drinkers who are just fine even with drinking people, that's the matter of empathy and being able to relax and being open without stimulators which is something not a given to people without a practice.

> That's a very silly argument

I disagree.

Communication is a skill like everything else. Having a constant workaround just reduces your ability to be good at it. Why would a healthy young adult make his own skills worse?

You can either get short-term gains with long-term worsening of your daily life by being incapable of new connections and genuine communications or cut the short-term low-level improvements, suffer for a year or two, learn a bit and have a better life for years to come.

It's like going to gym or do other sports. It's often hard and unpleasant at the start, but the more you're doing it, the fitter you are and the more benefits you bring to yourself in the long-term.

Re:Windows 11½ on Tuesday September 29, 2026 @04:35AM (#49890009)
Comparing system in a VM with a bare metal installation is a very unfair statement. Especially without the details of the VM configuration.

A few years ago I installed MacOS in a VM on linux host in virtualbox and it was slow as hell. I don't claim that MacOS is not ready to be used though.

I dunno. I don't drink, but I do put time and effort to socialize.

It's just not related to drug consuming acts and more about sports, poker, board games, etc.

I believe that drug-related communications are flawed and closer to animal level than to actually joyful ones. It's better to have a maturity and social skills to communicate, joke and maintain a conversation with interesting people without stimulators.

I'm not from the US though so it's not about the US social scene which is mainly discussed here.

Re:I am done with this shit on Wednesday September 23, 2026 @09:23AM (#49815731)
My bad, I'm not a native English speaker.

I've always though that about tinkering as in "being in love to work with inner working of things and understanding the internals, mastering stuff". Nothing pejorative.

Re:I am done with this shit on Wednesday September 23, 2026 @08:39AM (#49815208)
I can't find a very good comment from HN from a few months ago with this churn of AI posts, but the idea was quite right: there were tinkerers, who loved a problem solving process, and entrepreneurs, who don't care about the problem itself and beauty of a neat solution, but only the end products to sell.

Entrepreneurs currently are in heaven, and tinkerers are in hell.

Re:ZuckOff Know when a camera is in the room on Monday September 21, 2026 @08:39AM (#49786526)
You can expect exactly HN people to read a comment saying "why would you use smth instead of" on HN.
Re:ZuckOff Know when a camera is in the room on Monday September 21, 2026 @08:22AM (#49786373)
It's a better marketing indeed, but that doesn't answers the op's question.

Between something opensource and trusted, and a proprietary potential backdoor that can send the data back to the Zuck himself you'd probably want to choose the former (cause you never know with closed sources).

I'm glad that he has shared the link as for me it's definitely useful. It's not a competition and I don't care what media talk, that's not about money.

Re:AI Safety Is Mostly a Sex Cult on Thursday September 17, 2026 @02:37PM (#49744758)
Oh boy, Yudkowsky is a geek rock star.
> State actors can just hurt your famiily.

That actor has to know that you have something to be touched for in the first place. Which is not the case if you buy crypto without KYC unlike with the classical brokerage, for example.

> State actors can setup a shadow bitcoin infrastructure and give you the feeling that your wallet is a save bitcoin wallet. They can Hijack the website you download the initial bitcoin wallet, the nodes you talk to.

Is paranoid and not serious. Yes, they can do a lot in theory, but on practice even basic level opsec avoids it.

In reality if somebody from the state is already after you explicitly for real, you are going to die or be in prison. I can't really argue with that. Most people are not under active confrontation with the governments, but under passive snooping and pity everyday legal risks that make their lifes miserable.

In most cases they don't send hitmen neither for "foreign agents" labeled people from Russia, nor for sanctioned Russians outside from the US, for example. My point is about people who are not active fugitives, but, you know, want to keep their stuff with them without risking neither their country bank freeze, nor western-based financial infra freeze because they hold the wrong passport.

> could use one that's linked to Swiss Franks or the Singapore dollar.

Well, if only we had something like that with a proper liquidity!

USDT/USDC are useful for the exchange to fiat, but have freeze function in their contract, thus posing a risk for big longterm savings, and they rot under the inflation (which btc generally beats).

There are indeed a couple of unfreezable stablecoins, but they don't have mainstream adoption and proper liquidity. USDT kind of captured the market by being first, and USDC is heavily pushed by the major institutional players, so here we are.

But that's true, it's more about crypto in general.

Older »