News for hackers. Stuff that matters.

geerlingguy

Re:Charles Tandy, the mastermind behind Radio Shack on Tuesday November 03, 2026 @08:41AM (#50351864)
Many fond memories of Radio Shack. I bought some electronics kits, a mini DJ setup, and many, many components there as a kid. At one time, they had quite a catalog of Radio Shack branded items that were "good but not great"... but more importantly available a few miles away within practically any city. Almost every mall in St. Louis had one (usually near a hobby train store or an arcade).
Quick, rename it to "HackerDiscussed"!
I know my older APC UPSes do weekly self tests, but I guess newer equipment does more frequent self testing? And of course they're all internet-connected meaning clocks are within a few hundred ms of each other.

It also made me think about how many GitHub Actions I have that kick off on Sunday morning at a specific time. I try to vary the time/day for those jobs but I'm guessing there are enough things that kick off at specific time intervals to make an impact at the top of an hour, or at :15, :30, :45...

Re:Noctua Fan Swap on a Calnex Rb/GPS Frequency Reference on Saturday October 31, 2026 @05:20PM (#50320362)
This particular fan is a high quality / high CFM fan meant for servers and industrial gear.

Usually these boxes are at remote sites or in already-loud test racks, so the noise isn't a concern.

The Noctua is rated for lower CFM, so if you are already at a slim margin for thermals, switching to a quieter fan is not necessarily a good idea.

I do wish more manufacturers would go to 60 or 80mm fans instead of the 40mm ones common in this gear. Power supplies especially!

Re:Noctua Fan Swap on a Calnex Rb/GPS Frequency Reference on Saturday October 31, 2026 @05:17PM (#50320336)
Used, AFAICT. New is a bit more.
Re:Noctua Fan Swap on a Calnex Rb/GPS Frequency Reference on Saturday October 31, 2026 @05:15PM (#50320316)
The best way is to measure temps before (ideally over at least 1-2 hours), then to measure temps the same amount of time after and compare.

In the case of this Rb oscillator, it is temperature sensitive, but also built for pretty extreme environments.

I'm not too worried about this particular application, because the clock will be in an air conditioned environment, and I'm monitoring the clock accuracy to +/- 2ns from another GPSDO / rubidium clock. The performance before and after the fan swap is within my measurement noise for 24H, though I haven't done 30+ day measurements and ADEV comparison. Still working on a consistent test setup.

Re:Formlabs Studio 1 $699 Resin Printer on Thursday October 29, 2026 @01:01AM (#50284756)
I don't even think they're driving hype, they just have a problem common in the hardware world, they are far too optimistic in their shipping timeline.

Versus a company like Bambu who seems to ramp up production now, in advance of selling the product.

Re:Formlabs Studio 1 $699 Resin Printer on Thursday October 29, 2026 @12:59AM (#50284745)
> Formlabs will happily upsell the "Form Wash" for this for another 699

(A separate aside, since the main ones were addressed: Formlabs also launched a new "Wash+Cure" station that does wash and cure for $199, instead of their standalone (but better, of course) units that cost something like $1000 together.)

Re:Formlabs Studio 1 $699 Resin Printer on Wednesday October 28, 2026 @06:33PM (#50281890)
I have a blog post up for those who don't like extracting the relevant info from a video :)

https://www.jeffgeerling.com/blog/2026/formlabs-form-studio-...

Re:Formlabs Studio 1 $699 Resin Printer on Wednesday October 28, 2026 @06:32PM (#50281881)
You need to buy a tank anyway, which is $50 or so — that works with their new Alpha resins. The slightly more expensive tank is necessary only for their engineering-grade resins (only a couple are certified for the Studio 1 so far) and 'OMM' (Open Material Mode), which as mentioned above, comes out of the box on the Studio 1.

(Not replying to you directly, but generally to this thread)

Re:Anthropic S-1 on Monday October 26, 2026 @09:56AM (#50243810)
Scrappy builds aren't "affordable" but are more so than running Nvidia + optimized builds. You could put together a machine for $5000 or less that competes with frontier models from less than a year ago, albeit a little slower.

And cards like the $1600 (sheesh) R9700 have actually gotten more capable through community efforts at optimization, since their launch.

I think if the bubble can ever deflate/pop, and GPUs and RAM back off a bit, we'll see the dam burst for local AI.

Right now it's only accessible to people who can justify the costs.

Re:Time Nuts (2005) on Friday October 23, 2026 @03:59PM (#50214505)
Once you do get measurement down to nanoseconds, you quickly realize how 'bad' so many clocks you thought were good actually are. Lots of GPS modules with massive sawtooth behavior. Over a day they may be within tens of ns. But over a minute, a lot worse!
Re:PHP 8.2.35 on Wednesday October 21, 2026 @11:38AM (#50182817)
Similarly Remi for the RedHat-derivative side of things: https://blog.remirepo.net (he's on vacation, but apparently is pushing updates now).
Re:PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out on Wednesday October 21, 2026 @11:25AM (#50182610)
Ah, indeed... I thought the GA push was the final step but there's another manual process between that and updating the Docker Hub image tags: https://github.com/docker-library/official-images/pull/22541

It should definitely have a 'high impact' workflow that bypasses some of those manual steps.

Re:PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out on Wednesday October 21, 2026 @10:41AM (#50181853)
A PR was posted within a minute or two of PHP's source code update. Then within a minute of the PR's CI job completing, it was merged, and the build took a while but is now complete: https://github.com/docker-library/php/actions/runs/396158697...

It would not be easy (or reasonable) to take a public build like that private to build a 'secret' image version, and I'm not sure GitHub even has the capability to do that. I would not trust a build pushed to Docker Hub separate from the established / public / auditable process they have in place.

Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @10:38AM (#50181813)
Even some smaller vulnerabilities are spread through hosting companies pretty quickly within a day or two prior to public release, to give teams time to make sure staff will be ready to patch immediately.

The wider the pre-release news spreads, the more chance you get someone who will spill the beans (intentionally or not).

Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @10:36AM (#50181766)
One pattern of AI-assisted writing I hate is that technical articles now read as Atlantic journalistic tech-noir stories, which require scrolling through 20+ pages of content to get to the meat of a post.
I'm using Remark42; some downsides but somehow, spam has not been a big issue for me. https://remark42.com
I thought they were down earlier, but apparently they were just pre-announcing being down in about 30 minutes, until they finish patching their servers.

I've seen a number of notifications on X and Bluesky of people taking their sites offline, though. Supposedly Cloudflare is providing all customers a WAF rule that will mitigate the exploits they've been able to see so far (though they mention, this is not full protection—patching is still required).

Only 'parts' of their website are down currently (e.g. download pages, linked from the home page: https://obsproject.com/welcome-redirect returns a 502).
Tons of sites are currently offline to hopefully prevent an attack until they can update PHP; just the things I've run into this morning: OBS, TicketTailor, tons of wikis...
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @07:35AM (#50179175)
That was how a cluster of Java servers at a former employer avoided the Log4j vulnerability. Though I think they'd be on at least PHP 5 by now (maybe even PHP 7!), so they can't dodge two bullets.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @12:08AM (#50175974)
There are some vulns that warrant a pre-release announcement (in the Drupal community, this happened for a few of the more serious fixes). And prior to the public pre-announcement, there is often informal coordination between some of the larger hosting providers or giant companies who can help roll out the patch more quickly.
Re:I never authorized an integration that scans my secrets on Friday October 16, 2026 @11:13PM (#50127557)
This should definitely be opt-in.
Re:AlphaNIST on Wednesday October 14, 2026 @12:34AM (#50082419)
I thought of the National Institute of Standards and Technology... acronym/naming overload, like using "STL"!
Re:A 1980s filter chip that uses switched capacitors on Saturday October 10, 2026 @04:20PM (#50036737)
As a noob to chip design, I've always wondered; why can't chip packages integrate filter caps at the outputs directly? Instead of having boards put a ton of them on the PCB as close to the chip connections as possible?

Is it a matter of current handling? Or repairability (easier to replace one external smoked cap than a whole IC...)?

(I know the filtering here is a little different in purpose, but it just made me wonder).

Re:Adobe Creative Suite Cleanroom Port to Rust on Wednesday October 07, 2026 @12:38AM (#49988233)
This is a more interesting one, though; some people might dislike Adobe's practices enough to be okay with an AI reimplementation of their suite.

I just wish I could still buy a 'Creative Suite' one off and keep using it instead of having to subscribe to these apps.

Re:Apple and a Hacker's Future on Monday October 05, 2026 @08:35AM (#49964039)
I assume any computer connected to my LAN is also a dedicated attack vector for everything on my LAN in case of compromise.

Exposing any port directly to the Internet is a huge risk these days—at minimum I'd put a very strong firewall in front, and unless it's serving the general public, switch to a non standard port. It's not much but would prevent the dumb automated scripts that operate on standard ports.

A fun little easter egg - I had read it earlier on my iPad, so didn't notice the mouse interaction. I love it, reminds me of acko.net and how each page would have a unique little animated feature to play with.

Older »