News for hackers. Stuff that matters.

evdubs

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @04:30PM (#50309733)
Just like that EY [1], that Deloitte [2], and that PwC [3]. Yes, all of these major auditors with hundreds of thousands of employees each and probably-similar-in-magnitude clients have been sanctioned by the FRC. It's great that there is a competent regulator that can enforce regulations against all of the top accounting networks. For Tether, there are two independent auditors: BDO and KPMG. If two large auditors who take their reputation seriously both come to the conclusion that Tether has the money (and has had the money), you are just burying your head in the sand thinking everyone is committing fraud.

[1] https://www.frc.org.uk/news-and-events/news/2025/04/sanction...

[2] https://www.frc.org.uk/news-and-events/news/2026/10/sanction...

[3] https://www.frc.org.uk/news-and-events/news/2026/07/sanction...

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @03:22PM (#50308934)
> I have no doubt they have some reserves now, but do they have $182 billiom USD, really?

This is literally what the attestations and audits are for. BDO and KPMG both have issued opinions saying yes, they do have all the money they claim to have.

Re:Scattered thoughts on how doing math feels these days on Thursday October 29, 2026 @09:12PM (#50298668)
If you believe pangram is a good AI text detector, it scores the first 2000 words of the article as 100% human written.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @08:24PM (#50298259)
It's really hard to be an obvious fraud when you've been publishing attestations for years and now you have a "full independent audit" from KPMG for FY 2025, just like Circle/USDC.

https://tether.io/news/tether-completes-the-largest-inaugura...

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @05:49PM (#50296596)
https://x.com/cz_binance/status/2115915423174853077

> It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m).

Re:Google AI gets cagey when asked who won the 2020 elections on Wednesday October 28, 2026 @05:34PM (#50281215)
I get the same results as hightrix from the US.
Re:Show HN: Share your AI Setup, Learn from others on Thursday September 17, 2026 @09:09PM (#49748993)
You're not going to lose your job because you shared your AI setup / tools with your colleagues. You're going to lose your job because management over-hired and is being pressured by shareholders to reduce employee salary expenses. It won't matter what hard problem solving moat you think you have if management is forced to have layoffs and you're in an unlucky situation. If you're worried about job security, you should consider joining a union and not be fixated on knowledge sharing.
Re:There Is No AI (It's Just People) with Jaron Lanier on Sunday September 13, 2026 @07:25PM (#49689831)
> There is no 'off' button when you don't know where the AI is.

You mean the AI that is hundreds if not thousands of gigabytes in size and requires incredibly expensive chips to run at reasonable rates? We know where that is. Frontier models are not going to leap to an unsecure raspberry pi, no matter how much you have convinced yourself about the inevitability.

Re:There Is No AI (It's Just People) with Jaron Lanier on Sunday September 13, 2026 @07:02PM (#49689645)
> Going back to my original point, the intent you give AI is no different than the intent imprinted on a child by their parents, schools, and society.

Of course it is different. I wish I could turn off children as easily as I can turn off an agent. I could have slept better and had a better mood.

> You're blinking cursor is new born baby, but be careful because it grows up really fast

It's not a baby, just a piece of software. It generates a bunch of slop that is most useful when constrained with an output fact checker like a compiler.

> It can even turn against you.

Oh no! The next tokens from its output told me it didn't want to satisfy my request! Who cares?

Re:There Is No AI (It's Just People) with Jaron Lanier on Sunday September 13, 2026 @06:33PM (#49689421)
Keep the AI going with what intent? You open up Claude Code and it starts developing zero day exploits and hacks into systems by just looking at a blinking cursor?
Re:There Is No AI (It's Just People) with Jaron Lanier on Sunday September 13, 2026 @06:09PM (#49689221)
Sit down with a person and do nothing. What does the person do? Do they get up and leave?

Sit down at an AI prompt and do nothing. What does the AI do? Does it get up and leave?

Re:Everyone should slow down AI development except for me on Sunday September 13, 2026 @01:08PM (#49686132)
> A billion people are going to die because you don't understand what is bad.

Lol. Lmfao, even.

Re:Everyone should slow down AI development except for me on Sunday September 13, 2026 @04:13AM (#49681331)
I care about LLM service provider threat intelligence reports as much as I care about Google Search threat intelligence reports; which is to say, I don't care at all about it. Of course criminals use computers. They have been since personal computers became a thing. Of course using automation helps them amplify their criminal activities. Criminals using LLMs does not make the LLM situation bad. OpenAI and Anthropic using agents to do bad things just to be more dramatic about the situation and scare people is bad.
Re:Everyone should slow down AI development except for me on Sunday September 13, 2026 @01:58AM (#49680480)
> Do you think the current state of affairs is GOOD?

Chinese labs releasing open weights models is good.

All of these independent harnesses and model router services are good.

The pricing of memory and accelerators sucks at the moment but hopefully we will see cool local inference computing if memory and accelerator prices normalize.

OpenAI scooping the Navier Stokes problem from researchers already using OpenAI is bad. People conflating OpenAI's team of researchers and extraordinary computing resources as being equivalent to "ChatGPT, solve the Navier Stokes problem" is silly.

OpenAI and Anthropic coming up with non sense tests and letting their agents hack services is ridiculous and they should be charged with computer fraud and abuse crimes.

I think a lot of it is interesting and the bad stuff seems squarely in the domain of OpenAI and Anthropic.

Re:Navier-Stokes – Tristan Buckmaster [pdf] on Tuesday September 08, 2026 @04:11PM (#49616313)
This is literally the business model of LLM companies.
You don't need to be closer to GOOGL to look at their 10-K.

https://www.sec.gov/Archives/edgar/data/1652044/000165204426...

On page numbered 60, you can see the Disaggregated Revenues.

The $30B quote seems to be referencing "Google Network" revenues declining from $31B in 2023 to $30B in 2025. "Google Network" is grouped with "YouTube ads" and "Google Search & other" to comprise the "Google advertising" category of revenues which increased from $238B in 2023 to $295B in 2025.

So yea, "ad tech" does not represent the whole of Google's advertising revenue.

Re:The turbulent AI era is here on Wednesday August 26, 2026 @03:16PM (#49454323)
> while 2 decades after invention of crypto there are still basically zero legitimate use cases.

The first card on the homepage of the DTCC (https://www.dtcc.com/) is "Tokenization". This is a legitimate use case and is being adopted at the largest institutional level. Stablecoins are yet another legitimate use case.

Edit: for what it's worth, I do agree that the crypto craze was insane. I also think the AI craze is insane, even though I agree that its current proliferation is larger than crypto.

Re:Google Search Is Dying. What Comes Next Is Worse on Tuesday August 11, 2026 @04:05PM (#49263701)
Duckduckgo has been incredibly worse with results for me for the past year. I had used Duckduckgo for about a decade, and now it is just littered with AI generated content for search results. I recently switched to a search engine that uses Google results.
Re:Jellyfin founder Andrew leaves team on Tuesday July 21, 2026 @12:56AM (#48988199)
It has worked flawlessly for me on Linux.
Laborer rebels against capitalist system by directly enjoying the fruits of his own labor.
You don't need to use an online service to do this; you get to avoid spending money on tokens doing it offline.

Gemma 4 works perfectly well offline on limited hardware (I have an 8GB video card) and can handle extracting text from image-based PDFs just fine.

Take a PDF -> run it through MarkItDown [1], using the OCR plugin if you need (point it to Gemma 4) -> now you can ask Gemma 4 questions about the (markdown) document.

I am sure Gemma 4 could even create a GUI to make this process very simple for a non technical user.

[1] https://github.com/microsoft/markitdown

Re:Rhombus v1.0 on Wednesday June 24, 2026 @08:15PM (#48667166)
> It's not better than `[1, 2, 3]` is it?

If you want to change your vector to a linked list, in Lisp, you can change from `(vector 1 2 3)` to `(list 1 2 3)`. If you have some array `[1, 2, 3]` and you want to change to a linked list for whatever performance concern, you'd have to replace `[1, 2, 3]` with..

    var list = new List();
    l.insert(1);
    l.insert(2);
    l.insert(3);
Maybe this example is contrived, but I feel like it is much more of a realistic example to want to change from an unsorted map to a sorted map. You can't just simply switch from `{k1: v1, k2: v2}` to `sorted{k1: v1, k2: v2}` as you could do in Lisp from `(unsorted-map k1 v1 k2 v2)` to `(sorted-map k1 v1 k2 v2)`. You'd need to write out all of your operations as with the list example. And, all of a sudden you are stuck with using the unsorted data structure for your JSON serialization rather than having the ability to reach for a sorted data structure.

`(date 2026 6 1)` is better than "2026-06-01" because the latter isn't a date, it's a date string. `(date 2026 6 1)` is better than `new Date(2026, 6 1);` because the former is how it is serialized and can be deserialized.

> there's also the crazy bracket matching

At least with reading code, there is almost no reason to try to match brackets at all. It's like complaining about having to read semi-colons in languages that use them to signify the end of a statement. When writing code, Lisp is just another language like all the rest that benefit from an IDE that is syntax-aware. Having highlights for the starting paren and ending paren for an expression and being able to just select a particular expression make bracket matching fairly effortless.

Re:Rhombus v1.0 on Wednesday June 24, 2026 @03:00PM (#48664283)
> `(== a b)` is clearly worse than `a == b`

It's clearly worse just because it moved from infix to prefix and is wrapped by parens? Is `(* (+ a b) (+ c d))` clearly worse than `(a + b) * (c + d);`? Both have a bunch of parens, and one even has a semi colon.

This works both ways. `(list 1 2 3)` is clearly better than:

        var l = new List();
        l.add(1);
        l.add(2);
        l.add(3);
It's also better than `var l = [1, 2, 3];`

How often are you trying to make sense of a bunch of infix arithmetic operations when you're programming? Separately, how often are you creating data structures, navigating data structures, handling data in the form of JSON or XML, parsing that data into your language's native data structures, etc.?

Reading arithmetic in prefix instead of infix is easy, even if it is counter to how you were taught in elementary school. Working with s-expressions for code and data is clearly better than whatever syntax your language uses for code and either directly instantiating data or reaching for JSON or XML.

> justify its lack of static typing

Racket has both Typed/Racket as well as contracts.

Too AI; didn't read.

Dear AI prompters,

You don't need to have a phrase in bold in most paragraphs. You don't need to have a phrase in italics in most paragraphs. You don't need to substitute the em-dash with a colon. You can make much simpler diagrams showing pointers and packed arrays without the other AI slop in your images. I know it's expecting too much from someone who can't be bothered to write their own pieces to put in more effort, but please find some motivation to acquire some taste in the output that isn't the same as the slop that exists everywhere else.

Re:AI demands more engineering discipline. Not less on Wednesday June 17, 2026 @02:13PM (#48574354)
I hope 99% of that was documentation and testing.
Re:Lisp's Influence on Ruby on Sunday June 14, 2026 @04:37PM (#48532385)
I am pretty sure Racket's `stream` will handle this use case.

https://docs.racket-lang.org/reference/streams.html

Re:Lisp's Influence on Ruby on Sunday June 14, 2026 @01:42PM (#48530234)
Threading macros are nice, though, right?

https://docs.racket-lang.org/threading/introduction.html

Re:Looking Forward to Postgres 19: It's About Time on Friday June 12, 2026 @02:13PM (#48507481)
The cool thing about Dolt is that you [eventually] get the features of the databases (MySQL, PostgreSQL, SQLite, MongoDB) they emulate, so you can have your PG 19 temporality features as well as branching and merging.
Re:Looking Forward to Postgres 19: It's About Time on Friday June 12, 2026 @02:04PM (#48507383)
> Recently, a new type of question has entered the database arena: what did this data look like last Tuesday?

This question has been answerable in Dolt for years now.

Re:What was your "Oh Shit" moment with GenAI? on Friday June 05, 2026 @04:01PM (#48417445)
I tried to see if an LLM service provider could rewrite some legal docs where nothing was hallucinated in order to follow a consistent format to see what may be missing in the document. It could do that.

Next, I wanted to see if this could be done with a local LLM. Gemma-4 handles this fine with an 8GB video card and a large context (128k).

Next, I wanted to see if the model could also OCR these docs and translate them. The same model can handle that quite well.

This was when I realized LLMs should be great for handling work where:

- I already know what I want to do

- I already know how to do it

- I don't think this task will help develop skills I find to be valuable

- If I have to do it manually myself, I will probably cut corners

So now I view LLMs through the lens of, "what work can I send to an LLM that I otherwise would not really care about doing."

Older »