News for hackers. Stuff that matters.

er0k

Re:I Could've Accessed 17T Microsoft Records on Wednesday September 30, 2026 @11:53AM (#49910587)
wow I am so surprised to hear once again how JWTs are terrible

https://www.howmanydayssinceajwtalgnonevuln.com/

(YC 2013)
Re:XCancel Taken Down Again on Monday September 14, 2026 @03:57PM (#49703024)
https://einaregilsson.com/redirector/

Include pattern:

  ^https?://x.com/(.*)
Redirect to:

  https://xxcancel.com/$1
> There’s no quid pro quo here.

This actually sounds like the literal definition of quid pro quo.

Re:Why doesn't Apple make a standalone Touch ID? on Wednesday December 03, 2025 @10:58PM (#46143666)
or just use a yubikey... it costs ~$50
Re:WiFi signals can measure heart rate–no wearables needed on Thursday September 04, 2025 @02:24PM (#45130518)
This is nothing new. Wifi signals have been used to detect objects, people and animals, gait analysis[1], read keystrokes[2], monitor breathing and heart rates[3], "hear" conversations[4], etc for at least a decade now.

https://news.ycombinator.com/item?id=12353605

https://www.theatlantic.com/technology/archive/2016/08/wi-fi...

https://archive.is/XnHUV

1: https://ieeexplore.ieee.org/document/7457075

2: https://dl.acm.org/doi/10.1145/2789168.2790109

3: https://archive.is/mFSDq

4: https://archive.is/sNVcM

congrats guys, this new feature looks really cool :)
I just use rsync, works great
remember when RMS said "cloud computing is a trap" and we all laughed and laughed...
Re:Cory Doctorow on how we lost the internet on Thursday May 29, 2025 @03:47PM (#44129599)
If you read the article, he talks about this in this fourth constraint, labor:

> The final constraint, which did hold back platform decay for quite some time, is labor. Tech workers have historically been respected and well-paid, without unions. The power of tech workers did not come from solidarity, but from scarcity, Doctorow said. The minute bosses ordered tech workers to enshittify the product they were loyally working on, perhaps missing various important social and family events to ship it on time, those workers could say no—perhaps in a much more coarse way. Tech workers could simply walk across the street ""and have a new job by the end of the day"" if the boss persisted.

> So labor held off enshittification after competition, regulation, and interoperability were all systematically undermined and did so for quite some time—until the mass tech layoffs. There have been half a million tech workers laid off since 2023, more are announced regularly, sometimes in conjunction with raises for executive salaries and bonuses. Now, workers cannot turn their bosses down because there are ten others out there just waiting to take their job.

My own experience matches yours almost exactly. Thanks for sharing.
Re:National Airspace System Status on Thursday April 24, 2025 @06:54PM (#43788410)
FlightAware's MiseryMap is pretty cool too https://www.flightaware.com/miserymap/
Re:Porkbun partners with Proton on Sunday March 16, 2025 @09:15PM (#43384240)
fastmail is awesome
Re:Rearchitecting: Redis to SQLite on Wednesday September 25, 2024 @04:20PM (#41651441)
litestream is great. Dead simple and rock solid IME.
Re:Surveillance Pricing on Thursday June 06, 2024 @06:58PM (#40603394)
> Plexure boasts that it can predict what day a given customer is getting paid on and use that information to raise prices on all the goods the customer shops for on that day, on the assumption that you're willing to pay more when you've got a healthy bank balance.

wow that is so gross

Re:De-googling, so far on Friday May 31, 2024 @04:42PM (#40540012)
Is there any good alternative to google voice? It's the only google service I haven't been able to replace yet.
Re:Half-Ass It on Friday May 31, 2024 @01:18PM (#40537788)
as Homer Simpson said in the 90s: "if you don't like your job, you don't strike! You just go in every day and do it really half-assed. That's the American way."

https://www.youtube.com/watch?v=vmtxUiGYrB0

Re:2024 Verizon Data Breach Investigation Report [pdf] on Wednesday May 01, 2024 @02:00PM (#40226860)
Kelly Shortridge's post about the DBIR is great https://kellyshortridge.com/blog/posts/shortridge-makes-sens...
Re:"Lost faith in Kagi" blogger gets in argument with CEO on Friday April 12, 2024 @02:43PM (#40016287)
This is not an argument... the blogger said he didn't want to engage and the CEO continued to try and engage anyway.
Re:Timeline to remove DSA support in OpenSSH on Thursday January 11, 2024 @12:06PM (#38955065)
I thought this was a joke, but they really don't: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual...

what the fuck? What is Microsoft doing? ed25519 was added to openssh, what, 7 years ago? This boggles my mind.

snap sucks. nobody wants this.
Re:Chrultrabook Docs on Tuesday January 02, 2024 @07:43PM (#38849248)
yeah, here are the instructions: https://support.google.com/chromebook/answer/9145439?hl=en (I was wrong about it being Ubuntu, it's Debian bullseye)

MFA is not currently enforced when logging into a chromebook.

Re:Chrultrabook Docs on Tuesday January 02, 2024 @04:22PM (#38847324)
I have a Pixelbook that I picked up on ebay for cheap. I was planning on loading MrChromebox's custom firmware and installing a "real" Linux and all that, but honestly the thing does everything I need (a browser and a shell) so easily I didn't even bother. You can install an Ubuntu VM in a couple clicks, it supports Wireguard natively and it has a touchscreen. I don't even run it in developer mode any more. I'm really happy with the stock ChromeOS these days shrug

Older »