News for hackers. Stuff that matters.

garbagepatch

Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @02:04AM (#50176657)
Writers/editors really, really like Wordpress for some reason, which is like 40% of the Internet, add to that all the other Php stuff. At $DAY_JOB we have a Wordpress instance behind our VPN and use the json API to send the articles to a front-end server written in something else. Forces us to duplicate some of the front-end plugin code (and we try to not use many) but we get peace of mind in exchange.
Re:F-Droid 2.0: A New Chapter for Android Freedom on Thursday September 24, 2026 @11:32PM (#49839906)
Google getting sued again and losing again and drag their feet to unlock it again while devising a new way to go against the court order again.
Re:Matt Mullenweg put on 'leave of absence' on Thursday September 10, 2026 @12:39AM (#49638471)
Matt, you shouldn't have picked a FLOSS license if you didn't intend for the software to be FLOSS in the first place.
Re:Matt Mullenweg put on 'leave of absence' on Wednesday September 09, 2026 @05:56PM (#49635005)
Re:Executable Is a SQLite Database on Monday August 24, 2026 @01:47PM (#49423404)
Current ooxml/odt formats use a zip file with xml files inside (plus other files like images). I'd guess one way would be to store the xml itself as a blob and another to use a json field, which Sqlite stores in a more efficient format called jsonb: https://sqlite.org/json1.html#jsonb
Re:How Bluesky draws its logo on screenshots on Tuesday August 18, 2026 @11:59AM (#49347716)
Same here. Luckily you can show two apps at the same time in Android so I just put the password manager above the bank's app.
I was expecting to see some cool spy stuff in government's PS1 env vars not slop induced schizophrenia.
Re:Show HN: YouTube Guitar Tab Parser on Tuesday July 14, 2026 @12:29AM (#48902309)
The people making the video are already making the information public, you are just making it more convenient. This strikes me as similar to downloading public court documents from a government site to make them available outside of their for-profit service.
Re:Interview with Mitchell Hashimoto about Ghostty and Zig on Thursday July 09, 2026 @08:59PM (#48854490)
When was this? I've only seen this "anti-rust" vibe in the past few weeks, guess triggered by the Bun rewrite. Zig people usually will tell you to use the right tool for the job over shilling the language or that you don't need to use it yet (if you want a stable language/documentation) the language will be there if you want to check it in a few years.
Re:When do you guys think Zig will release 1.0? on Wednesday June 10, 2026 @01:21AM (#48471776)
5 years.

The language itself will probably stabilize in maybe 3 years. The last things they'll do is work on the std lib, documentation, spec. That will take time but the language will be ready before then.

Re:Upcoming breaking changes for NPM v12 on Tuesday June 09, 2026 @11:15PM (#48470969)
Most users don't need it. Having it on by default is a feature for malware writers not users.

But to your point, Node has had permission flags for a while[0] but allows everything by default. Npm could use them to increase security even more. I just hope it doesn't take them another 10 years to change the default.

[0] https://nodejs.org/api/permissions.html

I like the terminal aesthetics but please, for accessibility's sake, make input boxes look more like input boxes and buttons look like buttons.
Removes a barrier of entry if you can look at it from a browser instead of installing a CLI/TUI.

Don't try to make me install a random program if I can view it in my sandboxed browser safely.

Also, browsers have greasemonkey to help me personalize websites easily. TUIs don't.

Re:Deno 2.8 on Friday May 22, 2026 @03:34PM (#48240455)
I guess Bun had the better marketing then. I liked how every new feature came with a benchmark against the previous version and node. See this for example: https://xcancel.com/bunjavascript/status/2048228152397459590

I'd love to see a site comparing the 3 of them in a similar way.

Re:Bun support is now limited and deprecated on Friday May 22, 2026 @03:23PM (#48240292)
To me it feels more like the old "this site only supports IE6". Instead of checking which JS engine the user has, check for specific api support and fail gracefully.
Re:Bun support is now limited and deprecated on Friday May 22, 2026 @03:08PM (#48240086)
According to the bun team, it was already vibecoded for months before the Anthropic acquisition.
Re:Claude Code Opus 4.7 keeps checking on malware on Saturday April 18, 2026 @09:59PM (#47821204)
Does it use your tokens when it does this check for malware? or is that part covered by anthropic?
I misread that as "current times" and thought it would sing the news.

It does need more streams for other timezones.

Drop the AI written story, take me straight to the "Explore Your Record" view. That's more interesting.
If they managed to make 3 full movies out of The Hobbit, they'll surely be able to make a movie or 2 out of 6 chapters of LotR.
I'm sure plenty Americans are also laughing at this. No hypocrisy here.
There's a bunch of steps before prison that do not work.
Re:The Xkcd thing, now interactive on Tuesday March 03, 2026 @02:31PM (#47237630)
And it's all a meta commentary on 915.
Re:Unredact the Epstein Files on Saturday December 20, 2025 @12:11AM (#46333777)
All they left was the stopwords.
Re:Why is Zig so Cool? on Friday November 07, 2025 @09:14PM (#45853464)
Regarding runtime overhead, I'd assume you would still need an io implementation, it is just showing it to you explicitly instead of it being hidden behind the std lib.

For simple projects where you don't want to pass it around in function parameters, you can create a global object with one implementation and use it from everywhere.

Re:React-Native-Godot on Sunday November 02, 2025 @11:12PM (#45795799)
React Native is Javascript on top of the native toolkit of the platform. No HTML or CSS here.
Re:Show HN: Zedis – A Redis clone I'm writing in Zig on Saturday September 20, 2025 @01:14AM (#45310592)
What's the problem with the mascot? PostgreSQL has an elephant and MySQL a dolphin. Is the bug too detailed for database software?
Re:What's New in C# 14: Null-Conditional Assignments on Wednesday September 17, 2025 @11:42PM (#45285081)
I wonder, does the important_value function get called and the value discarded or never called at all? Looks like a footgun if it has side-effects.
Re:The "Most Hated" CSS Feature: Cos() and Sin() on Wednesday September 17, 2025 @01:27AM (#45272060)
That's already the present. The result is just cached.

Older »