News for hackers. Stuff that matters.

esquire_900

Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:16AM (#50181421)
I feel like all "non-inner-circle people" here are taken for a laugh. OpenAI and these security companies sat on this for 2 months, decided for themselves who gets access to an early fix, and then leave the rest out to dry while they failed to properly contain it.

The official interim fix for php8.5 [1] could have been published 24h ago, or even 2 weeks ago, without revealing any security details. Specifically once the POC came online. Would have been significantly more useful than these polished blogs.

Perhaps I'm missing something here, but the costs (dev/sre time, missed sales, potential data leaks and hacks) of the way that this was handled is significant.

[1] https://github.com/php/php-src/security/advisories/GHSA-6wmf...

Re:Replacing the old battery on rechargeable bike lights on Sunday September 27, 2026 @10:29AM (#49866940)
In the Netherlands many people use these kinds of detachable bike lights. I've never came across soldered batteries in the dozen or so I've replaced batteries for. Not always cheaper, but just tossing the whole thing seems like such a waste.

Well done!

Re:Alibaba releases Qwen 3.8 Omni Flash on Friday September 18, 2026 @05:18AM (#49751910)
The blog post itself is technically unimpressive, and feels like the slop future. Amongst many things - Scrolling in firefox is a nightmare (only uBlock origin) and the console is full or warnings and debug data. - Videos are all flashy but just fail to communicate anything beyond what can be said in a small paragraph (and with horrible stock music). - Figure 1, the headpiece; too small to read, can't zoom in
So the author recycled 10 pounds of plastic, but used 8.5 pounds of glue to do so (184 sticks at 0.74 oz which seems to be average for glue sticks).

Cool project, but that ratio seems very ineffective. Especially since there is a realistic chance this ends up in landfill within some decades anyway.

Re:An Introduction to YOLO26 on Tuesday June 23, 2026 @12:44AM (#48640415)
We've been running YOLO for a number of years (since v5) on soccer videos. None of the recent iterations have been significantly better, with v26 scoring worse then v9 and v11 on our tasks. Makes me wonder why this version is being pushed by roboflow and ultralytics.
We happened to be in Borsh beach around a week or so ago, and that will be a tourist wreck in 2 years. Multiple working sites, 70% of the beach already claimed by beds.

Quite laid-back in May / start of June, but I do not want to be there in the high season.

Very interesting idea, I hope you can progress this into a well working, proven application.

I tried to do something very similar a year or 2 ago, more directed towards meditation. (Ie as a helper that uses breath to detect a wandering mind). A microphone in itself wasn't sufficient in my case, and detection was quite hard. I ended up using wired earbuds with microphones.

Nice focus as well, less scoring and more signal. All the best in your project!

Re:Dobase – Your workspace, your server on Friday March 27, 2026 @04:14AM (#47540135)
This seems exactly not what you want. If fully invested in this, you never have the freedom to switch tools, ie go to a different team chat solution. The benefits of having these apps in one UI / ecosystem are relatively small: files - teamchat makes sense, but todo-email, kanban-recpies doesn't add any value.

Like samdixon mentions with ClickUp, the downside is quite large UX wise: you'd be constantly switching context witin dobase. Having 10 pinned tabs for all your tools is very convenient, checking a todo while working on an email in dobase feels messy.

Re:Mamba-3 on Saturday March 21, 2026 @02:24AM (#47464477)
This is sort of what their first sentence states? Except your line implies that they are fast in training and inference, they imply they are focusing on inference and are dropping training speed for it.

It's a nice opening as it is imo

Re:I put my whole life into a single database on Tuesday March 10, 2026 @01:24PM (#47326237)
And here I am, feeling slightly ashamed at taking 1 or 2 flights a year. These "commute" statistics are staggering.
Cost wise it does not seem very effective. .5 token / sec (the optimized one) is 3600 tokens an hour, which costs about 200-300 watts for an active 3090+system. Running 3600 tokens on open router @.4$ for llama 3.1 (3.3 costs less), is about $0,00144. That money buys you about 2-3 watts (in the Netherlands).

Great achievement for privacy inference nonetheless.

Re:Why applicant tracking systems are broken by design on Thursday February 19, 2026 @02:03PM (#47077678)
Which seems weird, it's very technical. Monolith design, relationship types, I've never met an HR person who wondered about those kinds of things
Surprising how badly Jetbrains implemented AI. Apparently to such an extent that even after multiple years of LLM's someone felt confident enough to build a company that can do better.

This looks really neat, interesting technical writeup as well!

Re:Open Chaos: A self-evolving open-source project on Sunday January 11, 2026 @12:50AM (#46573026)
Cool social experiment. It's interesting how narrow the scope of all top voted PRs are: change this or that detail in the voting (daily, count down votes etc), or make it more efficient (rust).

I wonder if this has the potential to build a "community" that will take this into a completely different direction, or if it will neatly stay within the initial boundaries.

Re:Head in the Zed Cloud on Tuesday November 11, 2025 @01:22AM (#45884612)
Is the dependancy on Cloudflare worth the saved time in infrastructure? Getting a big bare metal and deploying a docker should go a long way.

This implementation sounds fully dependant on a service that Zed has little to say about.

Re:Ask HN: Who is hiring? (October 2025) on Wednesday October 01, 2025 @12:29PM (#45439712)
Smart 11 | React Native Software Engineer | Netherlands (Breda) / Remote | Part or Full time | smart11.ai

Smart11 helps soccer players to become more intelligent on the field. We're a small team of 3 engineers and are looking for a react native developer to continue development on our mobile app.

Our soccer learning methods rely heavily on video (and a touch of vision AI) to help players learn from their own actions on the field. The app is crucial in that process, and used hundreds of hours a week by clubs and pro players alike. Your work might directly contribute to the improvement of soccer players around the world!

We're a productive, balanced team, and are looking for someone with a builder mentality. Apply at connect [at] smart11.ai, or send me a PM (I'm the CTO). If you're interested but are only experienced in related techniques, please do get in touch, we like to invest in the right people!

Re:Signal Technology Salaries on Thursday May 22, 2025 @02:28AM (#44059315)
Thanks for the suggestion, I missed that!
Super easy? Getting that setup for the first time from zero knowledge will probably take a few days. And that's before understanding all the intricacies like your AWS bill, the hidden costs of cloud, properly securing IAM and setting up your VPC etc etc
Re:The race to replace Redis on Friday March 29, 2024 @01:57AM (#39861105)
Which is peanuts compared to the 350 million that the VCs invested. You're totally right, but I think the internal financial pressure is higher.
I'm using it for a 10.000+ multisite installation (quite simple personal blogs), and even though it has it quirks it works quite well. Almost nothing is best in class and a slight pain to get it working, but the sheer size of the ecosystem is still it's biggest plus. In general every problem or feature you can imagine already exists or is easy to bolt on.
Re:My PHP Problems on Monday February 19, 2024 @06:59AM (#39428837)
This is a bit too much of an apples vs oranges. Use cases for PHP (easy to develop, maintain websites) are different from those for Go and Rust.

Obviously, PHP came from a place of great inconsistency, and the remains are still there, including the popularity to rant on it. PHP is getting significantly better though, and while a long one, I hugely prefer this route over something more abrupt like python 2-3. The first 3 or so points are valid, but annoyances at best. For the points about closures, statements, inline classes etc., they are just features from other languages that aren't in PHP.

Re:AI for AWS Documentation on Friday July 07, 2023 @12:19AM (#36627058)
I think they do. Given the damage that leaked keys can do (especially in the Bitcoin mining area) it must be an expensive problem for them.
Re:Bullshit Jobs by David Graeber (2018) on Saturday June 17, 2023 @03:24PM (#36373635)
Exactly. Like so many popular non-fiction books these days, there's about 15 pages of content fluffed up with 200 pages of anecdotes to be able to sell it as a book.
Re:Falcon 40B LLM (which beats Llama) now Apache 2.0 on Thursday June 15, 2023 @05:37AM (#36338207)
http://nonint.com/ has some interesting posts about how he build a custom server to house 8 GPU's (3090's in this case). You're right that that will set you back more than $1000, though I was only referring to the GPU's themselves.
You might be interested in http://nonint.com/. He made a number of quite detailed blogposts on his 2 gpu machines (both 8x 3090's), including racks, power delivery etc
Re:CS:GO: From Zero to 0-Day on Sunday June 11, 2023 @05:32AM (#36279689)
Reading the timeline at the bottom makes this seem like a very frustrating process, it took multiple nudges and over a year for Valve to even start fixing. I can't imagine putting in this much work and getting such a lackluster response.
Re:Falcon 40B LLM (which beats Llama) now Apache 2.0 on Friday June 02, 2023 @02:05AM (#36161633)
Some people use second hand P40 GPUs, which go for around 200-300$. Combine 3 of them with SLI and you've got 72GB of VRAM for less then $1000
At some point it becomes a serious tradeoff. It will definitely excel in finding niche solutions, in bringing up that one mechanism that's rarely used but very relevant in some case. It cannot say "I don't know" and will start babbeling instead, but if you know the downsides the upsides can be significant
Re:A brief history of LLaMA models on Sunday April 30, 2023 @01:45AM (#35759959)
Cloudflare bot protection adds a slight delay (as in seconds) at best, and completely blocks users like the parent comment at worst. It costs no money, but isn't free either.

Older »