News for hackers. Stuff that matters.

eterm

Gas Town was never "the hype", it was always a bit of a joke, in fact the original post was hard to separate from satire. Linking to the HN comments here would show that.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:51PM (#50320086)
You should assume your IoT junk is already compromised, that's why your IoT junk runs on a dedicated VLAN.
It's a joke on the actual advert, which was, "You wouldn't steal a car".
Re:The Federated Code Forge on Friday October 30, 2026 @03:43PM (#50309189)
Thanks, you've correctly identified the issue, although I wouldn't call it a problem with "my" OS unless it's my configuration.

I just wanted to read the source locally. I know things are getting worse by the month for developers on Windows because other developers are increasingly not giving a shit to support it, but it's odd to have a repo that doesn't even clone on windows.

Not building is common, not passing tests even if it builds is extremely common, but not even cloning is a new one.

I guess eventually I'll give up and switch to linux, but I'm still paid to work on Windows. I guess maybe it's finally time to look into a real dev-container setup for this kind of thing and I can do this all a bit more securely too.

Re:The Federated Code Forge on Friday October 30, 2026 @03:18PM (#50308897)
I tried to run:

    git clone https://tangled.org/tangled.org/core 
And it failed?

    Cloning into 'core'...
    warning: redirecting to https://knot1.tangled.sh/did:plc:j5hmlfdrwkvtxm7cjmu7j2is/
    remote: Thanks for using knot1.tangled.sh!
    remote: Enumerating objects: 99191, done.
    remote: Total 99191, done.
    Receiving objects: 100% (99191/99191), 122.19 MiB | 39.12 MiB/s, done.
    Resolving deltas: 100% (49286/49286), done.
    error: invalid path 'localinfra/fixtures/blobs/did:plc:igzuueb63dytyy3tpaweofuu    bafkreieify5bix4cmrj4iuxiceb6srr2boltkbbf7yizwtgwurqv42sltm'
    fatal: unable to checkout working tree
    warning: Clone succeeded, but checkout failed.
    and retry with 'git restore --source=HEAD :/'
    You can inspect what was checked out with 'git status'
It's not a great look when the very first thing I'd want to try to do:

    1. Redirects from .org to .sh suspiciously
    2.  falls over.
I now have to try to work out whether that other domain is deliberate or compromised.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:30PM (#50297127)
Hot vs Cold wallets are a social construct. People talk about wallets being "online" or "offline" but if the keys are compromised there's no such thing.
Re:Why Is This Fingerprinting Script Creating Bioweapons? on Wednesday October 28, 2026 @07:07PM (#50282231)
"Ironic" bad behaviour is still just bad behaviour.
Re:The Mythical Man-Month in the Age of AI on Tuesday October 27, 2026 @04:54AM (#50256264)
What's even more surprising is that it can be given a grafana API key and reason about bugs from the hints of patterns in the logs even with pretty sketchy and inconsistent logging in places.

It can then raise, investigate and resolve those problems while also patching up and rationalising logging to improve future work.

The AI deniers have their heads in the sands at this point and are demonstrating they simply haven't tried a modern agent. ( Or perhaps are forced onto copilot? )

Yet the HN submission UI has a box, and if you write in it, it gets posted as comment.
It was being discussed on here hours prior to the Chainguard release.
Re:EA is shutting down BioWare on Wednesday October 21, 2026 @02:01PM (#50185054)
Yes, the mourning for the company that made KOTOR and NWN was done years ago, it's effectively a completely different company now that's shutting down.
Re:Tsrs: A Port of TypeScript to Rust on Tuesday October 20, 2026 @10:38AM (#50167126)
Faster feedback loops almost always deliver improvements elsewhere.
AI is ruthlessly effective at finding vulnerabilities.
Things will only meaningfully change when insurance companies stop paying out when reasonable steps weren't taken by companies to protect themselves.
Re:Personal software factories are a waste of time on Sunday October 18, 2026 @04:16PM (#50145042)
I know a few entrepreneurs and they all independently started building these kind of factories around the same time, so this is definitely not a straw-man.

I'd say give it another couple of months and you won't be able to move for announcements about this kind of thing.

The "sales pitch" is that factories are to agents what agents were to models; Personally I'm not convinced we need an extra automation layer, with all the downsides that come with even more disconnection from the product being built, but some people are starting to swear by them.

Re:Thinking will become a hobby on Monday October 12, 2026 @07:22PM (#50064447)
When I went to a bank recently, I discovered my local high street "bank" branch is now mostly just internet kiosks with an under-trained and probably underpaid assistant there between the handful of kiosks to help people log on to it.

It is nothing like the experience of growing up in the early 90's and what banks were then.

Consider that everyone did their banking in person and people dealt with a lot of cheques. Oh, and banks didn't tend to open at weekends, you had to find time during the week.

There was a need for a lot of tellers, and banks were incredibly busy places.

"99% closed" is obviously hyperbole, especially counting by branch, but if you were to count by tellers or by people visiting their bank, I could well believe it.

Re:Triple-A Minesweeper on Friday October 09, 2026 @08:12PM (#50028155)
I don't remember which game it was, but I'm pretty sure it was a ubisoft game, maybe AC3, where it felt so much like a tutorial that I spent the entire game wondering when I'd get out of the tutorial and onto the real game.

It ruined the game for me, because I never felt like I was let free to actually play the game.

The EU level doesn't have enforcement mechanisms, EU law is applied through member states changing their laws.
Someone will no doubt correct my hazy memory, but I wonder how much to blame was the fact that default QT apps were so ugly around the time that was the height of RAD, and QT was the only(?) well-supported cross-platform cross-DE gui framework at that time.

On windows you could RAD your way to a good looking windows application that looked and behaved like everything else. On linux, default behaviour was either ugly, or not very compatible, or heavily customised anyway, and that didn't change until much later with improvements to GTK.

Re:Chess Atlas on Sunday September 20, 2026 @04:03AM (#49773603)
It took a while to find one, but the "Hermès Chess Set" has the board the wrong way round, with the white square bottom left. I like to call this "hollywood configuration" because of how often this happens in film & tv.
Re:AI-generated posters don’t have to be horrible on Saturday September 19, 2026 @12:35PM (#49767942)
It's a village fete, what kind of signals do you want from the poster?

That's why the "Look here's a 100 identical village fete posters" memes are kind of missing the point, it's actually not a bad thing that I can tell from a glance what it is, I don't actually have to read any of the details to know it'll have a tombola, because it's a given.

My bigger issue is all the posters calling it Fayre, not Fete, which is the weird part, particularly the "Craft Fayre" which should definitely be "Craft Fair", but misspellings and greengrocers apostrophe's are part and parcel of a good hand-made poster too.

This appears to be a UK new site*, and it's definitely not how they usually happen there. In fact, it's not even how they legally happen.

> 100 or more redundancies - the consultation must start at least 45 days before any dismissals take effect

https://www.gov.uk/redundancy-your-rights/consultation

If you want to have similar laws, you need to lobby your representatives, and get them to follow California's example, which introduced the Cal-WARN act:

> “an employer may not order a mass layoff, relocation, or termination at a covered establishment unless, 60 days before the order takes effect, the employer gives written notice of the order”

From https://www.dir.ca.gov/dlse/Cal-WARNAct.html

But as others have said, it's not as strong as the UK laws, so it just becomes a de-facto notice period instead. It's still progress though.

* Although not one I've ever heard of, which is a little suspicious.

Re:Claude is no longer available for minors on Friday September 11, 2026 @03:18PM (#49663856)
That sound quality did something weird to my brain, I was convinced sound was accidentally coming out my laptop speakers not my headphones. I'm not even on my laptop, and I still took my headphones off to check.
Re:Rust Is Tier-1 Language at Microsoft on Thursday September 10, 2026 @01:20PM (#49647233)
You're right, I better do a 360 on my comment ;)
Re:Rust Is Tier-1 Language at Microsoft on Thursday September 10, 2026 @01:16PM (#49647183)
Given how long it took visual studio to get 64bit support, I wouldn't hold your breath!

( Edit: I should probably inform the layperson: It was Visual Studio 2022 )

Re:Rust Is Tier-1 Language at Microsoft on Thursday September 10, 2026 @01:10PM (#49647078)
There have also been repeated statements from NSA & CISA that they recommend all development should be done in memory safe languages.

It's abundantly clear that there is a strong headwind towards memory safety, whether that's Rust or GC'd languages.

Re:We built our house for LAN parties on Wednesday September 09, 2026 @08:01AM (#49625103)
> The biggest problem was that the first ~couple of hours were spent getting all of the PCs connected, updated, and working properly-enough.

Every lan party would have that one guy who turned up with nothing pre-installed or patched, and would finally, after a couple of hours, get their copy of Unreal Tournament working and join the game just as everyone had grown tired of it and were ready to hop into another game instead. This would rinse and repeat for almost every game.

I had some sympathy, but not too much, because we were generally fairly organised about sending out game lists in advance.

There was something delightfully chaotic about trying to get a good game of anything actually played, because even without technical problems, you'd get a situation where at most a third of the players were keen, another third were mildly amused and another third were basically just barely tolerating it because they wanted to play something next and didn't want to ruin the vibe, but clearly would much rather be playing almost anything else. Of course, as games rotated, so did these groups.

There was also that corner of people who had no intention of playing anything and were just there to utilise the ability to privately swap their terrabyte sized "anime" collections across fast ethernet ( or via physically handing over hard-drives ). I tended to leave them well alone.

I've found it does this in two situations:

Firstly when you've instructed it ( possibly through skills ) not to do something. It'll keep reminding you that it didn't do that. So I might say, "Check out and review this PR, do not make comments on it", and then it'll be keen to point out it hasn't posted comments to the PR.

But more often it happens when it tries one approach, gets itself messed up, and then has to back out that approach, clean up its mess and do something else.

It'll often then spend more time explaining the wrong approach than the right one, which can be frustrating, especially if all its working is buried in the detailed transcripts.

It's the classic rules as intended vs rules as written.
Re:.gitignore Everything by Default on Saturday September 05, 2026 @01:23PM (#49578627)
Oh, that's neat.

The -p presumably stands for pInteractive with a silent p :)

Older »