News for hackers. Stuff that matters.

forgotaccount3

Re:American views of higher ed decline, once again on Friday October 30, 2026 @11:00AM (#50304876)
> but that doesn't mean the education is actually worth it.

I don't understand how we can have this conversation when the cost and quality of the product is so, so incredibly varied.

Some people loop in room and board with college costs, but you need to live somewhere even if you aren't in college. The two decisions aren't intrinsically intertwined. Being enrolled in a college might give you some options you wouldn't have otherwise, but if it's not a superior option to what you already have then you shouldn't take it. In other words college 'room and board' cost should either be ignored because it's the same price you'd pay elsewhere or it should be a net benefit if it's a subsidized, multi-tenant solution.

Meanwhile other's go to colleges that cost $10k a year for tuition and fee's, other's go to ones that run $40k+ per year. One college might focus on education and career prep/placement, another highlights their athletic teams and greek life parties.

One college might be worth it, another might not.

Re:American views of higher ed decline, once again on Friday October 30, 2026 @10:53AM (#50304804)
> Did your parents pay for your education?

No, my family wasn't wealthy.

> Do you wish they did if they didn't?

No, holding down a job is part of being an adult. I'm 38, I paid my way through college working full time. I graduated in 3.5 years with credits from HS and winter+summer classes. What made me stand out from other applicants when applying for new jobs in 2009, was that I had experience working and they had no 'real world' experience.

> You cannot simply calculate hard ROI on a life experience.

College is still and always an option for people. Stony Brook University is an excellent choice, runs around $10k a year which is easily afforded making $20+ an hour for entry level work on Long Island. Yes, you live at home with your parents, and I'm assuming your relationship is strong enough to let you be independent otherwise they wouldn't pay for your college anyway, while commuting to college because college isn't expensive, housing is.

But if you don't go to college then you get a life experience that those who did go to college didn't get. No one is missing out on a 'life experience', you are choosing to have a different one. Or maybe it's better said that you don't get to have all of the possible life experiences, and being in a dorm on a college isn't inherently superior to others.

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Friday October 30, 2026 @10:42AM (#50304660)
> Full zero trust internally

I try so hard for this, but don't even get approval to change an internal site to use https instead of http.

I get we gotta keep the new features and workflows coming, but a single resource dedicated to low hanging fruit of security could fix a lot in a very short time.

Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @04:30PM (#50214906)
If an entity has a product that has a trillion people choosing it, the marginal benefit to society to build an entirely new product for 1000 people or so isn't worth it. The people whose time would be required to produce that second product for a very, very small 1,000 person market would better serve society by working on other goals.

Nor should those 1,000 people get to try to use the government to tell the other trillion what product they should have to buy.

Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @04:27PM (#50214851)
> What am I to do?

Pick your priorities. There will never exist enough products to check all of the boxes that all of the people say is important to them. There is someone out there who would much rather have a product cost some amount less at the cost of accessibility features but they think a device that 'just works' is important so they buy the iPhone anyway.

> I have to imagine the vast majority of normal developers do not give a damn about security in being in security patch lifecycles on software.

I just don't think it's the developer's responsibility.

Depending on the size of the team of course, but the work that developer's do comes from someone else. Empower me to make decisions and I'll make them, but don't blame me for the choices other people make if you won't empower me.

Re:Google cloud outage takes down banks on Tuesday October 20, 2026 @09:05AM (#50165775)
We set up our applications and services to be multi-AZ natively. It's not particularly difficult with how many AWS services are regional or global (Admittedly, I still expect a potential DNS failure to cause issues if and when that occurs). However we are just part of a workflow, we integrate with other applications that are not multi-AZ and would be impacted. That's just out of our hands.

It's like our on-prem systems were ordered to plan out and exercise DR plans to account for a data center going offline, but we can't exercise a DR plan fully if part of the plan is 'Adapt to how application X, which is hosted in the same datacenter, also chose to fail over.' We do not own application X. There is no appetite in the business to co-ordinate the DR exercise across the entire company at the same time.

We can't even do it all in a lower environment because there are dependencies on systems that are shared across environments. Some massive, redundant filesystem that is sync'd across our data centers, but the sync is a boolean. One datacenter instance of it is the primary and the others are read-only until they get promoted. We have one of these and lower environments are just a different root folder on the system with different access patterns, but they can't make DataCenter A the primary in prod and DataCenter B the primary in UAT.

So, if there are publicly-available records incorrectly connecting you to a phone number, then you should be able to delete accounts under from the rightful owners?

If there are publicly-available records that link you to a phone number because you used to use it, then you should be able to delete the current account which is used by the current owner of it?

> What these kinds of platform agreements usually say is that you, the licensor, agree that you are fully representing that you can issue that license, and that any infringement is thus your fault and not the platform-licensee’s.

I know the comment is brief, but it's important to understand what it means when the infringement is 'your fault'.

If it's B's fault that it caused A to infringe on the copyright license of C, then that would be handled by B indemnifying A against a charge from C. C can still sue A, C can still win a suit against A, A would then utilize the contract with B to get reimbursed from B.

If B is small and can't afford to reimburse A, that's A's problem. If B goes out of business, that's A's problem.

In my field, we require this indemnification fairly frequently as we distribute content created by others where it's impossible to fully guarantee that content leaves us with no liability, in a reasonable timeframe of distribution.

We have many processes that give us a best effort to prevent us from distributing content that we would be financially liable for. We have processes where we let things go which are gray area, but the client has posted a bond with us and signed an indemnification agreement sufficient to cover the potential fine we may face if the content was an issue. Or we reject the same content from others who don't have that signed agreement and haven't posted that same bond. Sometimes we sign an agreement without a bond because we've had decades of experience with the client and the number of violations is small enough that we would eat the cost.

I don't see how AI coding agents are going to create 'more software' until the PO's and PM's of the world step back and let developer's communicate directly with the stakeholders. Or the PO's and PM's could cross-train on AI coding agents.

We are still being stressed to create all stories with such fidelity that 'any' developer can pick it up and implement it in the timeframe allowed for the size the story was given. When the story is written in that detail, we may as well copy it into an AI agent and have it implement it. But we can't do that, so we have people who have SME write up story's that sit in the backlog for 2 weeks until a developer can bring it in, so that they can spend a day implementing it (really 2 hours with 2 hours of meetings and 4 hours of video games) because the smallest pointing size we can give is 1 point and people aren't allowed to take on more than 8 points a sprint.

How can we expect things to get done faster when the team that reports work up to senior management put's such strict limitations on our throughput?

Re:Our $445M Series D on Friday October 09, 2026 @10:37AM (#50021157)
No, because you lose access to a ton of employee's who value their time more than spending 9 hours repeating the same stuff over and over.
Except it doesn't actually slow down the research. If anything it would likely drive investors to contribute more to the competitor that didn't destroy their own company and now you have the same amount of progress and a monopoly.
Re:Mistral X Mozilla: Private, Multilingual AI Browsing on Wednesday September 16, 2026 @08:51AM (#49726223)
> This is an excellent use case for completely local, small model inference,

How small is this 'small model' inference?

Browsers especially are expected to operate on a very wide number of devices. It makes perfect sense to me to start off with a cloud driven approach and later allow people to configure it to run locally if they have the hardware to do so. Anyone with the hardware to do so is already signaling that they'd have the technical interest to make that change while having the default 'works for everyone' mode be one that doesn't require a powerful local device.

I say this as someone using a 6 year old computer and only upgraded to 8GB of ram when the latest WoW expansion was released.

Re:It's OK to hardcode feature flags (2025) on Wednesday September 02, 2026 @08:43AM (#49535413)
Create story to add feature flag controlling access to the feature.

Immediately create story to remove said feature flag controlling access to the feature and review it during backlog refinements.

To a degree, sure, but is it really 'MITM' if the site you are trying to visit has chosen to add cloudflare into the middle?

You may as well say all load-balancers are MITM because you might connect to a different host on each attempt and there's a man in the middle influencing your connection.

What makes it any different if the website executed the same logic cloudflare is on their own box?

Re:Taylor Farms: How One Company's Reach Became a National Risk on Wednesday August 26, 2026 @01:04PM (#49452409)
> Except now it's our food supply that's wiped out by the consolidation. I haven't bought bagged lettuce in months in response to this outbreak.

These are two unrelated events though.

Other consolidated suppliers have had events in the past, and they did not 'wipe out' our food supply because they identified the root cause and the impacted supplies, initiated a recall, and the rest of their redundant, distributed systems remained intact.

The issue going on with Taylor Farms isn't their consolidation, it's their lack of taking responsibility.

If we had 20 'local' distributors who were all bought by Taylor farms and one of those locations had a significant health issue, there wouldn't be a large issue if Taylor identified which one had the failing and then distributed their other 19 location's product to the area facing the shortage due to it's location's product being recalled.

Re:France reaches 94.9% fiber coverage in 2026 on Wednesday August 26, 2026 @12:25PM (#49451773)
I don't have Fiber. I have never needed more bandwidth.

I work from home 1 or 2 days a week. My current bandwidth is more than sufficient for my personal usage. And I exclusively use Wifi, other than a TV and a Nintendo Switch that happen to be right next to the router so are plugged in. So even if I had fiber, I literally wouldn't know a difference because my wifi would be the bottleneck still.

Back when Google Fiber was rolling in, no one I knew was looking forward to it because they had need for the increased bandwidth. They looked forward to it because the expectation of a 'Google' branded product was better than the expectation of a 'Comcast' branded product. It was more about the expected uptime and consistency.

Re:Every Fucking Website (2020) on Friday August 14, 2026 @11:56AM (#49300525)
But are you a software developer or a lawyer? Do they 'not need it' because the government provided a way to ensure it's not needed or because your interpretation of the law indicates it's unnecessary? Are you willing to indemnify them for legal costs if your guidance was wrong?

Most small business owner's I've spoken to are keenly aware they are only one bad lawsuit away of closing down. Almost no one care's about the cookie banner. Most just mindlessly click to allow cookies and go on with their life. There's almost no cost to having it.

Re:New US homeownership measure puts people first on Tuesday July 21, 2026 @09:50AM (#48992354)
> Being told that 'you should be happy without owning' to a party that can't afford to own by another party who is actively scooping up the same resource can feel extremely invalidating.

It's not really coming from those though? At the same time that housing costs have ballooned, we've also had a significant migration back to cities. When a larger % of the population are living in high density locations you are going to naturally have a larger % not owning homes. Owning your own home does not align with the density required for a city to function.

At the least, narrowing down the topic to 'Why do people rent instead of own a condo?' is a much more meaningful topic over 'Why do people rent instead of own a SFH?' since a condo is a more viable option in locations where most of the renters are.

How do we know, or would Feynman know, that they can count while reading and not just that counting and reading are simple enough tasks broken down into discrete steps that our brains can context swap in an unnoticeably short unit of time?

Just trying to read your post while counting at a consistent pace I associate with roughly 1 second per number, it didn't feel like I was reading words but instead scanning them and understanding them after the fact from memory. Usually when i read I hear the words 'in my head' but not while counting at the same time.

Knowing the variety of lives lived on earth as we speak, I'm fairly certain the first space born generation would adapt to it.

Provided the Earthlings that were sent along don't let their incarceration induced insanity infect the youngin's.

It'd be even funnier if the 'message' was a text sent from their iphone.
> most of them fail to hit a hundred views per video.

I get your point, but many of them fail to hit some hundreds of views due in large part to all of the large, professional channels that are spending hundreds of man hours as week producing content.

If the production was less professional do you think total viewership hours would drop significantly, or would it be distributed across more channels?

> Should I capture the increased output

You do capture the increased output by benefiting from a society where the cost to build safe buildings has drastically reduced.

Just because you don't get an immediate financial benefit doesn't mean you haven't benefitted from the increased output.

Clearly those in floors 1->7 were less important and thus allowed to take the day off and/or work remotely, right?
Re:We moved our Bluesky data to Eurosky on Tuesday June 30, 2026 @12:53PM (#48735529)
I'm not fully aware of the tech here, are those posts flagged as 'Intolerant' by bsky or by the protocol itself?
Sometimes places close streets for traffic control.

The 'main' roads end up getting backed up and then people naturally start drifting over to a bunch of side-roads to get to the destination. This then causes further traffic issues as the locations where side-roads intersect the main roads get backed up as people on the side roads try to merge into the main ones.

A solution ends up being closing some side roads to funnel the temporary traffic into the main thoroughfare while still allowing some local traffic through the non-closed side roads at the cost of some side roads being inaccessible.

Re:AI sticker shock hits corporate America on Thursday May 28, 2026 @09:11AM (#48308504)
Interesting. We use Kiro here and looking at the public pricing subscriptions and it's benefit to my workflow, it is clearly a significant productivity increase per dollar spent. And we were told we have a signed a deal that is better than that public pricing. They recently just enabled overages on everyone's account so that people aren't throttled and they are shifting people up/down tiers as required behind the scenes to align with their actual usage.

However when the 'cost' to do something is relatively flat the cost/benefit analysis is going to depend on the value of the person being enabled. Someone making $60k a year using AI to gain a 20% output improvement may not be worth the cost but someone making $160k a year would.

Re:dotNET (OK, C#) gets union types on Saturday May 23, 2026 @05:22PM (#48251661)
Yes, lambda's and our dev's use mac's so it enables that. We deploy some apps to some unix based server as well but the company is mostly windows servers anyway.
Re:CISA Admin Leaked AWS GovCloud Keys on GitHub on Tuesday May 19, 2026 @01:46PM (#48196604)
Sure, some do.

But also... I use Kiro. I open a terminal into a folder where my repo is. I run kiro-cli. I don't know if it has access to the credentials file in my .aws directory. I know it prompts me for approval to use tools but that is a harness thing, does the mac itself prevent it from accessing the credential file?

I use AI because it's useful and I follow the practices dictated by our AI adoption team but I don't know the nuance of everything about it and that makes it difficult to know when some case which is not explicitly covered by training might leak important information.

Older »