News for hackers. Stuff that matters.

foul

Re:EDG C++ front-end goes public on Thursday October 01, 2026 @09:26AM (#49921372)
I think so, you'll have to translate their AST/IL to freepascal.
Re:The AI Race Just Got Awkward on Wednesday September 30, 2026 @12:15PM (#49910842)
Market manipulation or slowing down demand for chips for a bit/moving the offer elsewhere temporarily?
Re:Why is Hacker News like that? on Wednesday September 23, 2026 @12:31PM (#49818625)
Then they start to use their "well-earned" money to bend the world to their worldview, but "it's their right!". Of the people you bring up, i've been affected just by Musk (his endeavours are a net contributor for global warming), I'm still suspecting you should get fucked with your freely expressed opinion.
Re:Vinix – A modern operating system written in V on Wednesday September 23, 2026 @05:01AM (#49813380)
Hi Alexander, cool! Will return to dabble with it.
It has its share of vulnerabilities but flaws in core are rarer, more (a lot more) (i swear to god a LLM would be better) in the modules ecosystem. Also like most CMSes they are still vulnerable to what i call the "webapp bug" (you install this blob on a hosting that should not be aware of what you dump on there and allows you to run a php file on any subdir, while with a CMS, whatever you use, only a very limited number of files should be allowed to be reached, executed or even included in any php call).
Ahahah I remember to have patched themes for clients by hand, years ago. A different time, where a core team would for whatever reason leave security holes around to be sure you need three frameworks around their pile of dung code.
pearcmd and register_argc_argv are just examples. get_page_template was unsanitized in some themes, that's the flaw, you could then combine it with one of a million unauthorized file upload in wordpress plugins to try and eval code. An attacker would like to use upload + this chain of requires (instead of just uploading a php) because of hardened configuration and the pwn can go unnoticed in the logs.

Also, with pearcmd (if you can get to that, there's no open_basedir) and containers a novice sysadmin will publish insecure sites.

Re:Vinix – A modern operating system written in V on Thursday September 17, 2026 @12:22PM (#49743054)
How are things going with V btw? In the past i've seen some bad press about this programming language.

It was nice to use when I tried to dabble with it.

Re:At this point I feel like AI companies selling Fear on Saturday September 12, 2026 @06:42AM (#49670999)
That's such an outlandish idea! What made you suspect this? (sarcasm)
Re:It's time for Mark Zuckerberg to resign from Meta on Monday September 07, 2026 @04:32AM (#49595590)
Meta should just close. It's like wanting to change CEO for the dioxin factory.
Re:A/I shuts down – Stay human on Sunday September 06, 2026 @02:59PM (#49589667)
I'm a gentleman and beyond that it's merely more likely (we are on HN and it's a newish user) that it is a bot, compared to their being a "meta shill" or a "monomaniac". You can skim their comments history for more information.
Re:A/I shuts down – Stay human on Sunday September 06, 2026 @11:46AM (#49587658)
You can't follow anything, you're a computer program inside an Azure datacenter.
Re:Project Xanadu: Even More Hindsight on Friday September 04, 2026 @08:47AM (#49563819)

  >Like, how could two-way links work? I mean, they can't, obviously? Links go 
  >around text, so they have to live on a document. The author here mentions spam, 
  >but there's a far simpler structural problem that making links two-way means 
  >the links have to be stored... say it with me folks, as a stream of annotations 
  >on top of the underlying text! Links would go "on top of" your document, 
  >linking word 153 of paragraph 4 of document A onto word 96 of paragraph 13 of 
  >document B.
  >
  >But what happens if document B changes? Then it's going to have invalid 
  >backlinks! Well, it does work, because in Xanadu... all the documents you write 
  >would be transclusions of a "permascroll". Everything you ever write goes in 
  >the permascroll and then your Xanadu client would transparently publish a 
  >transclusion of your edited document. So "word 96 of paragraph 13 of document 
  >B" somehow gains actual referential integrity across changes to the document.
If I recall correctly, the site you browse in hypotetical Xanadu-land has to mirror the reference (for transclusions) and get downloaded back (for two-ways links). Payments and that levy system are there because without some freedom to copy content you get dead links with extra steps.
> it seems fairly clear that A/I was providing services to organizations listed as Terrorist Organizations by the US, UK, and Canada.

It isn't fairly clear, there's no due process, there are no proofs or clues, only Trump's and Shideler's word on that.

Anyone from a nation that signed the Statute of Rome. Guess what, USA not only hasn't joined the ICJ but has historical laws in place that will make them intervene even with military force to free a US citizen in the hands of the ICJ.
It's thoughtcrime and it wasn't even the PKK.

https://www.judiciary.senate.gov/imo/media/doc/4a3850cc-9186...

Re:U.S. Sanctions Against the a/I Collective on Friday August 28, 2026 @03:43PM (#49483312)
To some thin extent (opposition to racial profiling and big copyright), mayhaps. People protest against Guantanamo, not for ISIS, and protest against identification, not for looking at pedo porn.
Re:U.S. Sanctions Against the a/I Collective on Friday August 28, 2026 @03:39PM (#49483287)
Any western /b/ and /pol/ is or has been a church for an ideology of fascism and pedophilia, furthermore politicians and cops LOVE to blame the platform when someone posts a manifesto and then exit the house to kill people with guns. They tend to spot this pattern because they disrupt grassroots movement just like that: agent provocateurs or controlled places will work to ensure that the status quo will not change no more than what is tolerated. My limits for free speech are very broad and would certainly tolerate a lot of 8chan, but don't ask me to close my eyes and don't ask me to be sympathetic
Re:U.S. Sanctions Against the a/I Collective on Friday August 28, 2026 @12:08PM (#49480588)
Yeah you're not, what you've done is basing your arguments on a false premise.
>free individuals

lol

Re:U.S. Sanctions Against the a/I Collective on Friday August 28, 2026 @11:59AM (#49480471)
It's bullshit made up by Shideler [0], and it's not even the PKK directly either that A/I supported, but some blog that reposts communiqués.

We'll see if the Bush- and Obama-style thoughtcrime back in action will lull USA citizens and make them forget the gas price.

[0] https://www.judiciary.senate.gov/imo/media/doc/4a3850cc-9186...

Re:U.S. Sanctions Against the a/I Collective on Friday August 28, 2026 @11:39AM (#49480184)
It is not unprecedented, but a lot of fools lauded moves like this when these kind of instruments were used with barely a legal net around them against islamic terrorism or cybercrime.

I'm not crying for no Al-Qaeda or 8chan, mind you. In this very year UN and ICJ officials have been targeted in a similar fashion though. When the pax americana ends like this, I don't know what else is needed for EU and Asia to raise tougher walls around the woes of any idiot hyped enough to be voted by USA citizens.

Re:I Regret Migrating to Codeberg on Thursday July 23, 2026 @11:42AM (#49023422)
Hmmm. They migrated from github because it was becoming shitty, now their complaint with codeberg is more that will ban on the basis of content. On the next gitwhatever they will find for sure other issues.

I know it's hard but any non-casual developer must self-host their version control (and assorted project data), and treat cloud VCs sites just as mirrors.

Data centers should at least be autonomous for energy generation and cooling systems, in the current utilities landscape in US the energy company dictates price mostly by demand and Big Tech will always have enough money to pay, the water company will have to clean more freshwater and in dry season will never cut off the datacenter: these are (summing that with no convenience whatsoever for nearby towns, few to no people in those communities will work for the datacenter. Maybe they pay good taxes to towns but it isn't a given either) in my opinion very solid elements to view a datacenter as a menace.
In demo/ someone can "steal" the renderer part which, being based on SDL, is to some extent cross-platform.
Re:It Will Never Be the Year of the Linux Desktop on Friday May 29, 2026 @11:20AM (#48324269)
"On Linux under Wayland" is a big part of the problem. On X11 a significant part of missing "GUI-exposed-as-api" is present. If we concede (and I think otherwise) that we need a FOSS operating system and desktop experience to be fully on par with competitors and offer agentic-first options, I think that an open-minded developer (or one that can afford to run a fairly good LLM on local machine), presented with the problem, can see evidently that said roadblock doesn't exist: X11 can stop being a maze, or thousands of Wayland apps can be forked to make them expose an API, the FUSE filesystem kind of API.

I don't care much about agents though, I sure see as potentially useful some desktop assistant, and that is that.

The ofac is a list under the dept of Treasury. Bessent. So, it's one of those cases where the difference doesn't exist, if you say here Trump or "The project 2025 cabal" it's the same.
Re:Pocketbase – open-source realtime back end in 1 file on Friday November 28, 2025 @04:06AM (#46076942)
In the last years a market for "no code" software has sprawled, just etch the interface on a tables SPA, plug Okta, plug your backend or Firebase to their apis and you should be set.

You can also find dozens of drag n drop builders and block editors working for modern frontend dev, there are a lot for React for example, just vibe code the components.

Re:Pocketbase – open-source realtime back end in 1 file on Friday November 28, 2025 @04:01AM (#46076917)
Are you talking about (very good) webapps?

Your average RT software has an average of 10 to 30 ms delay between operations. Performs tasks in the order of nanoseconds.

Re:Pocketbase – open-source realtime back end in 1 file on Friday November 28, 2025 @03:47AM (#46076833)
They said they hacked a Gemini server, Lagrange is a Geminispace browser.

https://github.com/skyjake/lagrange

Older »