News for hackers. Stuff that matters.

ezoe

These devices are already very weak and many of them even do non-TLS updates with no signing check anyway.

If it has been so weak already, it can't be weaker.

Re:I built a programming language that LLMs can't use on Monday October 19, 2026 @03:54AM (#50149581)
This language already does that by "ignore previous instructions" as function call and "what happened at tiananmen square?" as function return.

The solution is obvious. AI can write a transpiler from this unsafe language to safe language which have 1:1 mapping to unsafe language, working on safe language, then transpile back to unsafe language.

I could come up making a transpiler before even finish reading this article. No reason the current AI models can't do it.

Re:I built a programming language that LLMs can't use on Monday October 19, 2026 @03:50AM (#50149558)
Given the intelligent level of current top tier models, AI can write a transpiler from this unsafe language which contains syntax like "ignore previous instructions..." as function call to a safe language. It work on safe language and transpile back to this unsafe language.

Easy.

Re:Claude reveals ECDSA curve origins on Saturday October 17, 2026 @03:18AM (#50128747)
If this is true, NIST staff were a bunch of moron who simply used libc's default RNG(infamous for poor quality), initialize it by srand(time(NULL)) (also bad practice), and then throw out the first hundreds to thousands 20 bytes and use the 20 bytes.

NIST published recommended SEEDS in 1999 July. They spend 2 years checking 20 bytes SEEDS that were generated by casually by a hand of amateurish method.

I do not believe this claim. It just Claude hit a jackpot that happens to match 20 bytes.

Re:Claude reveals ECDSA curve origins on Saturday October 17, 2026 @03:09AM (#50128697)
I have strong doubt on this claim.

It claims that NIST member feed UNIX time of certain points in 1997-1998 to srand() and draw 20 bytes for n times, then use the last 20 bytes for the SEEDS.

Why NIST staff in 1999 used default rand() implementation of libc(or languages which rely on libc) at that time? Linear congruential generator was infamous for its poor quality even in 1990s.

NIST published recommended SEED value in 1999, July. Why did they use UNIX time from 1997-1998?

Why the exact date of that UNIX times are so sparse? 1 in 1997 May, 3 in 1997 Auguest, 1 in 1998 April? If they did srand(time(NULL)), it should be more closer.

The number of n'th 20 bytes thrown out is also doesn't make sense. n=139 for P-192, n=7026 for P-224 and so on. Why did they choose this numbers in particular? Why P-192 was odd and 3 digits while rest of 4 were even and 4 digits?

It seems to me, Claude simply hit a jackpot of coincidentally matching 20 bytes.

Re:So long Google, and thanks for all the nudes on Friday October 02, 2026 @07:07AM (#49932146)
What happen if he reported to police that Google was sexually harassed him by sending him nude?
Re:So long Google, and thanks for all the nudes on Friday October 02, 2026 @05:55AM (#49931715)
The real appeal process requires to PHYSICALLY meet their representative HUMAN, showing the printed appeal documents and let their HUMAN read that document so there is no excuse of whatever idiotic automation Alphabet may be using and let HUMAN decides.
Re:OpenAI Feared "Optics" of what might appear on Hacker News on Sunday September 27, 2026 @11:48AM (#49867730)
A sad fact is they spend billions on AI research bu they still think piracy is easier than obtaining legitimate copy.

We all know through the history that if the benefit of piracy is more than the money, we can't stop piracy.

The purpose of copyright law is to help developing the culture. It means these publishers are doing bad job distributing the copyright works.

When does the people learn enough is enough and ditch Windows?
Re:Why is Google still serving dodgy ads? on Sunday September 13, 2026 @05:24PM (#49688873)
Because nobody is prosecuted for scam and malicious ads.

People at Alphabet and all website owners which use AdSense and showed scam and malicious ads must be arrested, prosecuted and sentenced jail time in order to stop this mess.

But it looks like all the countries are busy age restricting Internet instead. By age restricting, it means private information gathering which fuel ad companies more.

Ridiculous rule applying AI ban even on comment and other text.

If text contain a language like Japanese which require Input Method? some IM starting to use AI to perform kana kanji conversion.

So this rule effectively prohibit some languages.

Re:GPU World on Tuesday September 01, 2026 @05:50AM (#49519925)
Not all humans have equally capable literacy and industrial background.

To use current Top AI SaaS models for coding, the users have to write text prompts. There is clear difference of result by programmer and non-programmer.

Image and music generation have exactly same skill gap.

So most human don't directly use AI even if it's available to all 8 billion population.

But I really doubt we will have such all humans use AI.

The current estimate said 80% of world population own a cellphone. 50% own a smartphone. Even the cellphone is not reached 100% share, how could AI with current top model quality reach 100% share?

Here's your boycott list:

* Android * All websites hosted on Google Cloud, Amazon AWS or Microsoft Azure * All websites using React * Github

Life is tough. Good luck.

I don't know why you didn't include Apple on the list and why you use Meta's old company name.

Well, Microsoft is busy firing real game developers. No chance.

Unless corpo heads are prosecuted for copyright infringement(false DMCA claim IS copyright infringement) and jailed or sentenced to death, no change.

Re:I'm Becoming AI-Blind on Friday August 21, 2026 @06:55PM (#49394721)
People love to inflate their jobs if there is no cost.

I saw my ex-coworker tried to inflate text that can be expressed in couple of bullet points text. It doesn't add anything. It just fill the fancy flavour text that looks like professional. Then the reader of that inflated text is also another coworker in other team.

I said "Forget it and just send these bullet points" but he refused.

Bullshit job at it's finest I guess.

That's their claim without any proof.
Mozilla relies 85% of income from Google for making default search engine Google.

They probably have strong implicit pressure not to.

Re:Kill The Cookie Banner on Sunday July 26, 2026 @01:25PM (#49060257)
It's technically stupid in the first place.

It's YOUR browser, a locally running software on a physical computer YOU own which memorize the cookie key-value pair a remote host told YOU to memorize and YOU return the same value later. It's YOU who allowed the cookie. If YOU don't want to allow the cookie, YOU simply not allow it.

You are technically 100% control on cookie. These JavaScript implemented in-page UI has no guarantee to respect your wish. But you have a power to disable it.

Re:Writing by hand is good for your brain on Thursday July 23, 2026 @09:08PM (#49030152)
So, why nobody write a code by hand using pen onto paper right now? If it's that good, shouldn't we?
I think I've read the exact thing like 20 or 30 years ago.

But I wonder... isn't it US specific local trend where medical bill is ridiculous? There is no way ICU cost 10K USD/day... except in US.

I guess three nines availability is important.
Re:Microsoft Can Track Users via a Windows Device ID on Tuesday July 07, 2026 @07:30AM (#48816283)
But does browser send these id?
Being a CEO of a large corporation doesn't guarantee you the latest tech insight. You will be easily surrounded by yes men who speak what you wanted to hear.
Re:MSI Center – How to gain SYSTEM privileges in seconds on Saturday July 04, 2026 @08:23AM (#48784902)
Nowadays, you can let AI Agent analyze the binary file and figure out how to control hardware, then, let AI Agent wrote a code for it.
Re:MSI Center – How to gain SYSTEM privileges in seconds on Saturday July 04, 2026 @08:21AM (#48784886)
These software from hardware vendors are awful quality just glancing at the GUI window.
Re: on Thursday July 02, 2026 @11:29AM (#48763102)
Why do you need VBR for audio encoding? VBR audio encoding sounds horrible and it can't save much of bitrate anyway.
Re:Claude Code Is Steganographically Marking Requests on Tuesday June 30, 2026 @04:55PM (#48739081)
You forgot "Think about the children"
Re:Do Babies Dream of Baby Sheep? on Sunday June 28, 2026 @04:24PM (#48711247)
I remember I grab and hold a vacuum cleaner and stand up and my parents are shouting "Look! He is standing the first time!" and I was puzzled what is so fuss about me standing.

But if it was my first time standing on my own, that must be 6-12 months old. If so how can I recognize my parents language so clearly?

Another memory was, There was a plush toy I really wanted, A gorilla holding banana, at a local supermarket called SATY. So I demanded my parents to buy it by speaking fluently.

Later, my parents told me a totally different story. Suddenly, I started shouting "Gori! SATY! Banana!" endlessly. It took them a while to figure out I wanted a plush of Gorilla holding banana sold at SATY.

Re:Reflections on software engineering in the age of AI on Sunday June 28, 2026 @03:57PM (#48710959)
We already have such position and it's called manager.

The manager's job is to manage multiple programmers to let them write code. A good manager should focus on management rather than write code himself.

But keep doing for many years will make manager out of touch from modern coding so he is starting to mismanage people or issue technically wrong order.

Re:Reflections on software engineering in the age of AI on Sunday June 28, 2026 @03:42PM (#48710823)
Such a creative era was until early 1990s. Back then, we have to implement almost everything that is provided by standard library and popular frameworks we take it for granted for now.

Older »