News for hackers. Stuff that matters.

foobarkey

Like what data, my DNS queries and TCP connects? Ok I guess
I kind of remember and Jolla like 5 years ago, but I think this is supposed to be a hype generating post OK. Try buying one though it is not so easy
Re:CSRF Protection Without Tokens or Hidden Form Fields on Thursday December 25, 2025 @10:51PM (#46389060)
I put the session cookie as http_only, same_site=strict and turned off csrf. Then pentesters came and quoted owasp in the report, while not being able to demonstrate an attack. Some drone added csrf back, everyone congratulated themselves in making things more secure :)
Not necessarily, CS is just following some AML script here and will not deviate :)
Just talk to a lawyer, have the lawyer send a letter, there is no need to bang head against CS for escalation
Re:Google De-Indexed My Bear Blog and I Don't Know Why on Friday December 12, 2025 @12:26PM (#46246310)
Probably an intern (oh its 2025, maybe LLM?) messed up some spaghetti part and the async job for reindexing your site is failing since then and the on-call is busy taking mojito/the alert is silenced :)
Re:Golang optimizations for high‑volume services on Friday December 12, 2025 @12:12PM (#46246135)
Interesting tips, looking into Go perf recently also. However making sure postgres wal log does not grow seems like putting an unnecessary constraint on things and then defeating it
Re:Cloudflare outage on December 5, 2025 on Saturday December 06, 2025 @11:46AM (#46174681)
Sorry for the downvotes but this is true many times with some basic HA you get better uptime than the big cloud boys, yes their stack and tech is fancier but we also need to factor in how much CF messes with it vs self hosted, anyway the self hosted wisdom is RIP these days and I mostly just run cf pages / kv :)
Re:Git 3.0 Defaults to "main" Branch Instead of "master on Friday November 21, 2025 @02:01PM (#46007678)
Making you fee like less of a person for using the word is also censorship but in a more clever mean gaslighting way than a full order :)
Re:Git 3.0 Defaults to "main" Branch Instead of "master on Friday November 21, 2025 @01:49PM (#46007546)
Saying a word is bad is pretty much the definition of censorship yes. Not the context it is used, not the implications when it is used but uncategorically BAD - it just breaks my somewhat autistic brain on the principle.

PS: I have an african wife and let me tell you she has no beef with the word, she will have more beef with me talking to the cashier in a way that is too friendly

Re:Git 3.0 Defaults to "main" Branch Instead of "master on Friday November 21, 2025 @01:26PM (#46007241)
I thought this nonsense was about to go away noticed even github starting to default to master or maybe it was the terminal git. Sensoring tech words about things that happened 300 years ago is not OK
Re:PoE basics and beyond: What every engineer should know on Tuesday October 21, 2025 @11:48PM (#45664727)
The cheapest (~15 USD bullet, 20 USD dome) PoE cameras on AliExpress (focal length is pretty much the most important parameter to look at, depending on the fov you want) hooked up to a Unifi NVR. Skip all the vendor manuals, setup steps, and apps - adopt them directly to Unifi Protect.

I put them on separate vlan where they get no outbound network connectivity.

For cases where you want things like facial detection or license plate detection (automatic doors/gates) get a Unifi AI though and those things cost, but for normal perimeter/room monitoring the cheap ones are very good

Re:You did no fact checking, and I must scream on Saturday October 18, 2025 @03:08AM (#45625508)
While fact checking seems like a good thing, but the example is bit weird, off by few years errors could easily be explained by errors in memory
Re:Swarm reveals growing weak spot in Earth's magnetic field on Tuesday October 14, 2025 @12:25PM (#45581950)
Since the core is spinning as it always has, then dont think we humans caused this one? :)

Our energy needs are always insatiable so thats why I am not a big fan of geothermal, better not mess with the balance down there

Re:Protecting your (my) passport from liquid damage on Monday October 06, 2025 @06:35AM (#45489848)
With this many steps might be just easier to not put the passport in water then weekly maintenance jobs :)
Re:Ask HN: What's a good 3D Printer for sub $1000? on Wednesday September 17, 2025 @02:10PM (#45279289)
After having owned many 3D printers I can recommend Bambu Lab X1C with AMS. It will be a bit over budget but does not matter, you will spend time just printing and not messing with settings or bed leveling, it’s a workhorse and just prints what you tell it to reliably, no tuning or tweaking required. When using official filaments it will automatically recognize them, switch them during print etc.

After maybe 10 years of printing this is what I initially imagined it would be, now its finally there for consumer - I want this part in plastic let’s go

Oh and it’s also fast.

Hmm, I wonder if bambu gives me a cut for the sales pitch, but if not it is also ok - i just have to give credit to good engineering when I see it

PS: no prusa or clones, no creality, dont mess with that nonsense

Re:KDE launches its own distribution on Thursday September 11, 2025 @03:17AM (#45208749)
Does it support Gnome?
I don’t get coding interview stress, if anything the adrenaline helps me think clearer (faster)
If the carbon has been stored 1 million years ago and you burn it the total net amount of CO2 in the atmosphere increases

If the carbon was stored last year and you burn it the net amount of carbon stays about the same YoY

Moving the transport sector over to the latter carbon or electrical would be a good direction in general

Disregarding spidy senses and mental gymnastics about people starving if they dont eat all that corn, I dont understand how we fail to see this as a net benefit and crap articles like that get produced

Ok so what do we eat to get more of them?
Re:Bank transactions cleared by FTP-ing files on Tuesday May 27, 2025 @03:32AM (#44104727)
Worked in banking some years ago, many things are powered by (s)ftp integrations (mainly all swift things to partner banks)
My pet theory: all atoms decay back to hydrogen given enough time, gravity pulls them together, stars form, the universe is one big loop that self resets :)
Crqpping on google is meta
Compounded: 200 USD month; Lilly/Novo Discounted: 350 USD month

Seems alright?

Remove merge and add rebase and we agree :)

Oh and maybe cherry-pick

Re:Show HN: Rad Type - Can we make gamepad typing fast? on Tuesday April 29, 2025 @12:33AM (#43828715)
Can confirm the . thing happens to me also half.of.my.google.searches.are.like.this so I have even learned to be cautious that the last word does not look like a tld :)
Re:Careless People on Thursday April 24, 2025 @06:43AM (#43781114)
Yes correct in some absolute ethical context, but would have been easier to fight with a few hundred million budget to pay for legal fees
Re:Careless People on Thursday April 24, 2025 @06:13AM (#43780970)
Its a good book I read it, the only thing that she messed up though is not letting her exec level shares vest and be quiet until then imo :)
Re:Google Is Winning on Every AI Front on Thursday April 10, 2025 @12:54PM (#43645826)
Been trying it out a bit, feels a bit dry like a college professor, gpt after a while even starts making jokes
Re:Hell Is Overconfident Developers Writing Encryption Code on Saturday February 01, 2025 @12:35AM (#42895960)
I know people want to get paid but 90% of crypto is just about making sure the thing takes constant time, please stop acting like it is some elite knowledge

Older »