News for hackers. Stuff that matters.

dogecoinbase

The me-south-1 (Bahrain) Region was three AZs: https://docs.aws.amazon.com/global-infrastructure/latest/reg...
I think we can all understand the ways in which embedded advertisement in LLMs will be fundamentally different than view-based advertisement.
Re:Debian 13, Postgres, and the US/* time zones on Friday September 12, 2025 @02:50PM (#45225303)
If you'd be willing to scan/post those I'd love to see them!
Re:Gandi is holding my domain hostage. What can I do? on Wednesday September 03, 2025 @05:03PM (#45120402)
Many registrars allow renewal of domain names without authentication (you're unable to change any of the domain settings, however) -- some just let you do it, others it's a process, e.g. https://www.namecheap.com/support/knowledgebase/article.aspx...
41 meters is the height of a 13-story building.
Re:Managing time when time doesn't exist on Tuesday June 24, 2025 @11:56PM (#44373509)
My favorite read on the subject: https://scottaaronson.blog/?p=2756
Re:Marines mobilized in response to LA protests on Monday June 09, 2025 @11:01PM (#44232031)
lmao you posted moments before me! Leaving mine for posterity but everyone upvote this one instead.
Re:My AI skeptic friends are all nuts on Monday June 02, 2025 @11:17PM (#44165924)
it's irksome to see tptacek having his patio11 moment for sure.
> They claim full open source but for several years they did not release the server.

Specifically, they didn't publish the source for their server-side from 20 April 2020 to 6 April 2021 [0] while they secretly added a cryptocurrency payment system to which Moxie was a paid technical advisor [1], which Moxie denied they were doing in January 2021 [2].

0: https://www.androidpolice.com/2021/04/06/it-looks-like-signa... (source was published shortly after the publication of that article)

1: https://news.ycombinator.com/item?id=26715013 (comment from founder of MobileCoin)

2: https://www.theverge.com/22249391/signal-app-abuse-messaging...

Unfortunately no. The entire point of DoH is to bypass the ability of the users to prevent browsers from providing browsing habits to their owners.
Re:FindMy Flipper – AirTag and SmartTag Emulator on Monday August 19, 2024 @02:26PM (#41293440)
I simply park my car on top of papers that I want to keep in place -- one less paperweight to buy.
But great news, we're on HN, so maybe jgrahamc or eastdakota can show up and explain why it's totally normal and fine that their product prevents random people from reading about the causes of natural disasters.
They are, but it's self-inflicted: https://sfba.social/@sysop408/110639474671754723

> Lest anyone doubt that Twitter was idiotic enough to release code that would cause a race condition and result in its own users executing a DDOS attack on it, here's the network console readout from Firefox showing all the network requests blasting away.

Re:Board Changes at Signal on Thursday June 15, 2023 @07:01PM (#36348002)
Glad to hear Moxie's out. As a reminder, Signal didn't publish the source for their server-side from 20 April 2020 to 6 April 2021 [0] while they secretly added a cryptocurrency payment system to which Moxie was a paid technical advisor [1], which Moxie denied they were doing in January 2021 [2].

0: https://www.androidpolice.com/2021/04/06/it-looks-like-signa... (source was published shortly after the publication of that article)

1: https://news.ycombinator.com/item?id=26715013 (comment from founder of MobileCoin)

2: https://www.theverge.com/22249391/signal-app-abuse-messaging...

If a computational process could not complete before the heat death of the universe, does it have an output?
Re:Let's build a Chrome extension that steals everything on Tuesday February 21, 2023 @09:41PM (#34890913)
The lesson, then, appears to be that size of privacy organization does not have a correlated effect on effectiveness.
Re:You don't have to engage with people on the Internet on Friday January 20, 2023 @10:52PM (#34463697)
As the old joke goes, there are 10 types of people in the world, those that understand binary... and nine others.
It's to prevent DNS-based ad blocking (e.g. Pi-hole).
This is exactly correct. You have to call them.
What are the uses?
Re:Slack’s brand-new feature has an unexpectedly rich backstory on Saturday September 24, 2022 @03:50AM (#32960550)
Right, the issue is that it's not possible to set file retention for individual channels/conversations, so if you want to have long-term file retention in some places and brief in others, it can't be done (additionally (in my experience, at least), people tend to believe that setting message retention will also apply to files -- it's not called out in the interface/etc).
Re:Slack’s brand-new feature has an unexpectedly rich backstory on Thursday September 22, 2022 @06:58PM (#32945716)
Bear in mind that at this time, and for many years, data retention policies simply do not apply to uploaded files in a given channel (IIRC it does apply to global retention, but I'm not totally sure of the current behavior). There's a sensitive channel with a short retention period in a Slack for a company I do some consulting for and every few months I remind the admins that images/PDFs/etc that are uploaded to the channel are not purged and they should manually do it... but there's still stuff in there from 2016 if I do a search in:#channel for Files.
Re:Apple’s iPhone 14 Redesign for Repair on Monday September 19, 2022 @04:02PM (#32903166)
> after all, you can never protect against someone making an entirely new device that just happens to look like an iPhone.

The specific threat being protected against (leaving aside the increased safety of iPhone users by making the stolen parts market untenable) is your phone, that you recognize and use as your phone and which contains your confidential material and credentials, having internal components swapped out while unattended.

Re:Uber investigating breach of its computer systems on Thursday September 15, 2022 @11:52PM (#32861846)
I don't have a specific alternative, but I think that if it's not possible to be effective in a role, one should decline it. It's possible to be an effective SWE while still writing (and hopefully also sometimes fixing) bugs.
Re:Uber investigating breach of its computer systems on Thursday September 15, 2022 @11:33PM (#32861753)
> Security is not easy, and the entire field is not negligent - the problem is massively asymmetrically stacked against security practitioners, enhanced by poisonous attitudes like the ones expressed here.

Is remaining in a role in which it's not possible to be effective negligent?

Normal service providers normally remove violent/hate sites as a matter of course, which makes it not news. Cloudflare has set themselves up as a sort of refuge of last resort, for [redacted] reasons. Fill in the blank yourself.
We dismantle the service providers that provide cover for the forums in which DDoS attacks are advertised and purchased, like Cloudflare themselves.
Re:Blocking Kiwifarms on Saturday September 03, 2022 @08:02PM (#32707923)
CF no longer deserves the benefit of the doubt. See e.g. https://news.ycombinator.com/reply?id=32705613

Older »