News for hackers. Stuff that matters.

ebiester

As good as it is, we saw a lot of problems with these translations as the code was rewritten without understanding. I remember a security issue where a runtime went from single threaded to multithreaded for example.

Testing is still the long pull, even if you have an engineer with good expertise.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:38PM (#50297236)
So what happened with all of those with hardware wallets that have been pwned?

There apparently is no such thing as “your crypto” with how many security problems there are.

They were wrong about one thing: tooling matters.

The XHTML/XML/XSLT tooling was bad, and XSLT was hard to reason about. That meant that amateurs had no way to learn it, and those amateurs went to school and became the workforce.

The web became a winner because it was easy to get something working. And then Google made it a mission to make great developer tools in everyone's hands for free.

I think in 2026 we could build the tooling around a better experience, but it would require thinking about the developer experience first.

Simon or Mark?
He's explicitly on record on talking about view count and view retention being his explicit north star. You go back and watch his early work and he has been truly obsessed since the beginning. He wants to be popular. He loves the spectacle. Now, he may have become more jaded as time goes on; he certainly could pull back at this time. But he would lose that attention, and I think that's what truly matters to him.
Re:My static site was serving my internal docs on Friday October 09, 2026 @09:08PM (#50028472)
Sorry, but I'd have rather read this than the LLM output. This writeup was worth my time.

It's not an anti-ai screed. It's that the official post was... unnecessarily wordy.

Re:What I did at Recurse Center on Sunday September 27, 2026 @05:15PM (#49870929)
From what I see, this is more of a sabbatical time to just explore and enjoy programming without needing a productive end. I've been considering it myself.
Re:First Principles Thinking on Saturday September 26, 2026 @12:40PM (#49858199)
Thinking is great. I am arguing that “first principles “ is one tool - and it may not deserve the primacy that its advocates propose.
Re:Excel now supports multiple values in a single cell on Friday September 25, 2026 @07:46PM (#49851620)
You underestimate the task by multiple orders of magnitude. It would be a significant effort even to build it on libreoffice.
Re:First Principles Thinking on Friday September 25, 2026 @02:45PM (#49848379)
I think I need to write a full blog post on this.

While I think there are better introductions to "first principles thinking" than this post, the idea of "...When I step back and ask what we’re actually trying to do, why it matters, and how the pieces connect, I usually find more ways forward than I expected."

That's an important skill to have.

However, I think sometimes we overvalue thinking from first principles when it isn't warranted. I've seen times in my career where first principles thinking led to a solution that ignored key non-technical constraints. (For example, it would require a full re-architecture of the system and require deferring all feature work for a year. Another example: the proposed solution breaks Conways law in a way that would require a reorg that would break other organizational constraints.)

Sometimes, we need to recognize our constraints. Spend the time to question them when appropriate, but realize that there are other tools that are more appropriate in some cases -- such as anthropological thinking.

Zipcar started in 2000/2001 on Oracle and relied heavily on stored procedures, particularly in billing (as SaaS didn't exist back when it started and was a bad fit for a long time). It took an entire rewrite of the system to get off of Oracle.
I don't know about it being pretty nice - I just think of Nasubi and what happened to him on Susunu! Denpa Shōnen.
Re:Cloud in a Bottle: making self-hosting accessible to everyone on Saturday September 05, 2026 @10:32PM (#49582759)
Or, alternatively, I was a lot more willing to put in the time to self host before I had more money and less time. If it's truly important it's not in public. If it's public, I don't have time to keep up with security patches if I'm not being paid.
Re:GPT-6 Astra on OpenRouter on Saturday September 05, 2026 @09:02AM (#49576128)
For those on plus, are you seeing astra limited to medium? Considering the rate limits that probably makes sense, but I'm wondering what different groups have access to.
Re:No Country for Mediocre Mathematicians on Wednesday September 02, 2026 @01:41PM (#49539718)
Consider that if this was ran from your machine - it would have all of your memories and might be relying on the past 2 months. I'd be curious what would happen if it was run independently.

(I am assuming they didn't train on your prompts, which is always a worry)

Re:Debian votes to allow "responsible use of generative AI" on Saturday August 29, 2026 @12:00PM (#49490976)
This isn't talking about bespoke software, though. This is talking about upstreaming contributions to others. This puts a low barrier to create work and a lot more work for unpaid volunteers.
They're also fantastic for small measures for baking and cooking when it matters.
Re:Small Models Have Arrived on Thursday August 27, 2026 @01:35PM (#49468350)
It depends on what you're trying to do. For non-coding tasks luna is quite often enough. Flash models are more than enough for summarizing a text, for example, or whipping up a small script to save me fifteen minutes. If you're on a 200/month plan, I see your point. If you're on a dollar limit - or worse, paying per token out of your pocket - you look to be more efficient.
Mark Stache ( https://youtu.be/L-gNdQZorEE?si=nkwAhZOiAFtY2f44 ) just did a 90 day evaluation. The biggest problem at the level they mention is some intense flatulence. He is also in good shape and had mixed results compared to the study.
Re:The UK's War on Anonymity Has Come to America on Thursday August 13, 2026 @04:45AM (#49283236)
And what stops children from reinstalling their OS? I know many kids can do it at 11 or 12. Or are you requiring BIOS lock? Are there restrictions on hardware to enable this?
Re:The AI Billboards Are Killing SF on Friday August 07, 2026 @01:00PM (#49213315)
I remember seeing an advertising exec talk about spending more money in the area the execs lived so they felt the impact of the advertising, regardless of how effective the spend actually was. This is likely more of the same - making the investors and C-Suite get warm fuzzies.
Re:How the words we teach English language learners changed on Tuesday August 04, 2026 @12:27PM (#49171145)
I don't think my communication became more precise. Language is imprecise and in these cases (ESL), you are also limiting your vocabulary. (Especially when I moved outside the US - while I was around very educated people who studied for the GRE, learning a word is not the same as digesting all connotations.

So in social communication, you aren't getting more precise -- in many cases, you're getting less precise and taking more words to handle that. Consider the idiom "shit or get off the pot." You can say that "Make a decision" is less precise. "Do it or don't" is also an idiom but doesn't express the frustration that the vulgarity does. "I am frustrated and need you to either take action or shut up" is more direct and possibly more offensive because it takes formality.

And then there's the prefix of "Sometimes you need to" that turns it from a command to advice. "Sometimes you need to either take action or stop complaining" sounds like the emphasis is on "you" instead of the predicate as if it's a critique of the person, whereas the idiom gives more of a proverb connotation.

The problem is that language carries many layers and "more precise" is a goal in technical communication but neglects the other layers.

When I started dating someone whose second language was English, I found that the idioms were a giant hurdle. We really do speak in idioms and metaphors and this makes it very difficult for people who understand the words but not the cultural context. While my (now spouse) adapted, I also adapted by learning how to speak far more literally, especially around people of mixed levels of English.

I don't think there is a fear of being imprecise. If anything, it is a fear of speaking plainly as boring.

Re:Authorize, Don't Authenticate on Friday July 31, 2026 @05:33PM (#49128759)
1. How do you get around performance issues? If I have a difficult join and you have a slow database, or you have a flaky connection, how can I debug the problem on my end?

2. What stops me (or any attacker) from exploiting your lack of security? Are you 100% sure you are secure?

3. You mention collaboration - How does this work at a company level if we have many users and need to control access - the company is the entity with rights to the data in this case.

We don't need an expert even - pre-clinical is a far ways off even if successful.

This is in the "interesting advancement" stage, not "promising treatment."

The people who would "let their guard down" did long before this news. (Or Prep, for that matter.)
More importantly - the cost of the medical assistance to help someone get out of the house and physically train is much more expensive than a drug.

If you want to prescribe exercise for someone with this level of depression, you need to prescribe someone to remove the barriers to exercise.

Re:FreeInk: Open ecosystem for e-readers on Tuesday July 21, 2026 @05:10PM (#48998376)
It's fairly rare - like when 1984 was deleted from amazon when the seller didn't have the rights (and customer was refunded), but https://www.theguardian.com/money/2012/oct/22/amazon-wipes-c... shows an example where someone's account was deleted and they lost all licenses of books they bought.
Re:Reynard: A real Firefox web browser for iOS 13 or later on Thursday July 16, 2026 @12:10PM (#48936477)
Or, perhaps, apple users are rational actors that have different weights to their tradeoffs than you.

The last time I checked Android, the security and privacy story was much worse than Apple. Further, it's not just me who has to make the change - it's the family I share photos and videos and other things.

Yes, I would prefer to have other App Store options, but it is balanced against other issues. (And yes, I have owned an Android phone before - every time I buy a new phone I compare the two again.)

Re:Show HN: Ant – A JavaScript Runtime and Ecosystem on Saturday July 11, 2026 @05:11PM (#48875922)
I thought I was the only person who remembered Apache Ant... I know we're running out of names but that was a really influential piece of infrastructure.

Older »