News for hackers. Stuff that matters.

greatgib

Re:French digital tax may kill VideoLan non-profit on Saturday October 31, 2026 @08:05AM (#50315336)
They desperately would like to but each time they tried, the population anger forced them to back off any proposal.

If you do it at the ISP level, it is very obvious that it is the consumer that will pay because the monthly bill will increase of the same amount.

This is why you have the current proposal, because in their twisted mind, the rich digital giants will foot the bill of any tax without the customer paying anything.

The parliamentary responsible for that even said "the customer will not pay anything because Facebook is free".

To be noted that there are also to additional factor pushing for that on the political side:

- Here we have "unlimited" plan on almost anything, and ISP have to compete so no one can go back to "per-giga" plan to be able to extract more income. So ISP are lobbying hard for such laws that could allow them to have a good excuse to stop unlimited plans all at the same time.

- The political group that are pushing that are quite retarded, and they have an ecological agenda that is totally unscientific. And so they are really like thinking that they act for the environment because when you watch a youtube video dolphins are dying and if you have thousands of emails in your mailbox, you pollute as much as doing a round trip flight between Paris and NewYork. So consuming "data" is bad because it is like consuming physical products...

Re:Ask HN: Opus 5.5 suddenly dumb as rocks? on Thursday October 29, 2026 @07:24PM (#50297686)
I also noticed that it started suddenly since end of last week maybe to make sentence that are non sense or very hard to read.

My best guess was also that in one or two days they will drop a new model that will be so much more better than the nerfed 5.5.

It is funny that the spy profile picture is totally photo-shopped compared to her in real life. Unrecognizable. But looks like to be common for older Chinese to alter that much profile pictures.
Re:Polymarket got hacked on Thursday October 29, 2026 @07:11PM (#50297570)
Re:TLP Is Not a Suggestion on Thursday October 29, 2026 @05:44AM (#50286559)
The joke is "keep undisclosed to give enough time for the maintainer to fix"

Here we are just like having waited for a few years for a fix already...

Re:XPS 16 Creator Edition Laptop on Sunday October 25, 2026 @03:21PM (#50235128)
Actually Tuxedo effectively looked good on paper but hard and too long to order them in Europe sadly. Especially when it is for work and you need it right now.

The big added value of Lenovo is that you can often be delivered the next day.

Re:XPS 16 Creator Edition Laptop on Sunday October 25, 2026 @08:53AM (#50231037)
They completely wasted their XPS brand. The XPS 13 dev was the peak of dell and now it is horse shit. I haven't had a Dell laptop be bought for work since then.

Lenovo are quite good at the moment.

Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @04:38AM (#50219316)
No they don't, the control and monitor system could be inside the air-gapped isolated environment but then it is not "convenient".
I had regularly the same issue with different brands of laptop and using Linux. Especially, one laptop that is more than half a decade old started to have the issue out of the blue a few years ago.

What I think I discovered after years of internet searching for it, is that it is related to the cpu sleep state that are available.

Before, when going to sleep, the cpu was really going to sleep. Kind of shutting the power off. In that state, the laptop would not wake up for random events at random times. But nowadays, the only cpu state that is offered by the cpu for sleep mode is one where the cpu is still running, but in very low power/activity mode. Like "simulating" the sleep. But so, from the motherboard point of view, the cpu is up and running.

And so, because of that, you could easily have random events that wake up the laptop when it is closed and then it will start to do nothing but heat up as closed and probably in a bag. Fan might spin, without an effect as in a confined space, but so the battery exhausting very fast. Until the laptop run out of battery.

For event I think that it might be something like a fake touch event on the touchpad because of movement of the laptop, screen touching when compressed or things like that; a little bit higher temperature sensor reading because of high outside temperature, or indeed a device driver that is not completely off like a wifi card that will trigger events.

Where it was the most confusing is that for the half a decade old laptop, it has both mode but recently linux distributions started to favor the cpu "fake sleep" as sleep mode by default instead of the "real sleep" that was used previously. Switching the config to "real sleep" appears to solve the problem but new laptops doesn't have this mode available anymore.

Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @12:18PM (#50197472)
Sadly no-one responsible from this situation will care.

French authorities and network operator will in fact prefer that you don't have alternative than using the dns servers that they are providing.

So it sucks that Quad9 is closing their resolver to french IPs. If they stand by their values, they should continue to accept the requests, just leave all office and business ties with France.

Similar to ofcom things against 4chan.

And a very important point is given in the article, yes, here in that case the abuse of power worked because she was doing drug traffic. But, as they said, often such abuse of power are only known for the positive cases that goes to court, and it allows to disclose what is maybe happening also with thousands of innocent people being illegally searched without any probable cause in the first place.
Not true, this is the appearance they give themselves but it is mostly the extreme left side, kind of Communists like, that are trying to create tensions in wake of next year elections in France.

Just so you have a clear image of what is going on, you have pseudo student demonstrating asking for better infrastructure that are burning down their schools. Even brand new support modern schools...

Because it is probably a vaporware...
Re:I never authorized an integration that scans my secrets on Friday October 16, 2026 @08:06PM (#50126436)
It is already enough to prove the existence of a password or that another password is not disclosed for example.
Re:Claude reveals ECDSA curve origins on Friday October 16, 2026 @08:01PM (#50126406)
What proof is it that it is really the origin of the curves? That looks credible like most hallucinated output of LLM but it might easily be a coincidence similar to a collision attack, no?

Especially finding the solution that is based on using a random number generator.

It's like people seeing proof that the future was written in Harry Potter books by reading the first letter of the top of the page of a weird set of pages.

Re:Danish Supreme Court Finds That AI CSAM Is CSAM on Friday October 16, 2026 @06:14AM (#50116514)
I agree because I think it is a slippery slop, is that the same reasoning can soon easily be applied to other more disputable cases.

Look at the recent news that Anthropic will ban users that insult their models. How can it make any logic sense?

But it could easily become "punishable by law" also:

- Abusing (non sexually) a fictitious person that is a LLM.

- Insulting a LLM in a chat box, based on a fact that it speaks and appear to behave like a human. The LLM can pretend and simulate that it is offended if you forget that it is just bytes behind.

And in the end, how to consider the following case:

- You have a government call center for a public service, you are aggressive and insult the agent -> it is potentially a legal crime

- Now the agent of this public service that you are talking to is in fact an AI, clearly stated as so, an you insult it very aggressively. -> No human being is hurt so should it be an legal offense?

Re:Mozilla Introduces Firefox Enterprise on Tuesday October 13, 2026 @08:27PM (#50080870)
I think that I had good instinct by posting the following a few days ago:

https://news.ycombinator.com/item?id=50063676

Honestly it is probably not bad for Mozilla to start such a business, but I have the feeling that it is not in the spirit of "open source"/"freedom for users" Mozilla that we used to have before an Uber exec became in charge.

Now it is like any other startup, and it is possible that in a few years you have features that you will only find in the "entreprise" edition, and that the entreprise edition is distributed in binary only because of "security reason" to protect "entreprise" features.

What is funny is that everyone forgot, but at some point in time, there was the CCK for Netscape and then Mozilla Firefox, allowing to create a standalone installation of the browser that was customized to your preferences as a company or organisation or anything. Your choice of default settings, search engine, background color, plugins, ...

https://wiki.mozilla.org/CCK

And people were worried the same as what we can expect today that it might give tools to companies to "restrict" their users: https://lwn.net/Articles/182904/

Re:AWS Lambda Web Functions on Tuesday October 13, 2026 @10:58AM (#50072763)
I often hear this argument that it is good for bursty load, but for real, there are a lot of inconvenient limitations. For exemple, you don't really control the number of concurrent instances or the scaling except if you pay for very expensive provisioning.

So you might have to wait for 10s or more to have a new lambda instance spawning up and replying to your requests. And you might have to have your function finish in 15 minutes, deals with the strange concurrency and scaling rules lambda is based on.

Re:The state of systemd: 2026 edition on Monday October 12, 2026 @06:54PM (#50064208)

   He explained that the rate of issues being opened was accelerating, and if it kept up the project would face a large number of unresolved open issues. ""We're currently at 3,000 [open issues]. This is already too much to have a handle on. So I don't know. This is not great"."
Here you can see the crux of the complaints against systemd. it is a giant ball of mud, and working ok in the highway cases but completely fucking up your computer in the other cases.

And you can easily guess that these 3k issues are just the tip of the iceberg.

Did anyone notice that Mozilla recently nominated a new CTO of Mozilla that is totally for from having any connection with the Freedom and Open Source world? That explains a lot of things...

https://en.wikipedia.org/wiki/Raffi_Krikorian

Raffi Krikorian (Armenian: Րաֆֆի Գրիգորեան; born July 1978) is an Armenian-American technology executive, and the CTO of Mozilla.[1] He was the CTO of Emerson Collective.[2], CTO of the Democratic National Committee,[3] Head of Uber's Advanced Technologies Center,[4][5][6][7] and the former VP of Platform Engineering at Twitter where he was in charge of infrastructure for all of Twitter[8] up to August 2014.[9] He is credited with leading the charge to improve the reliability of Twitter [10][11] as well as the move from Ruby to the JVM.[12] He currently also serves on the board of directors of the Tumo Center for Creative Technologies in Yerevan, Armenia and of Medic Mobile Inc. (Medic).

"Let's encrypt" was the excuse to impose "https" as mandatory and web browser and so. So let's say you have a home device, https is also mandatory to not have to go through countless warning hops.

But they said: it is ok now, because you can get a certificate for free with let's encrypt. So suppose, you have a local device not connected to internet or your own private network server/services, with 3 month validity, it was short but you were able to generate the certificate in some way, manually, and deploy it manually also.

You could also easily manual renew and deploy the certificates.

Now, with a very short period, especially the 7 days that is their end goal, your devices needs to be constantly connected to internet, constantly receiving "things" from LE that are automatically downloaded and "installed". And it becomes impossible, to manually manage the certificate renewal, so you are force to let automatic scripts/agent do that work. And most probably also let the script/agent auto-update itself because of "breaking changes" like it happened with certbot.

And all of that being, with a short lifetime, you are now constantly at will of Let's Encrypt, and in the end the US state and government where all of this is located. You depend of the https for a lot of things, now at the US gov will you can be cut off, eventually be monitored or be targeted, in a very short timeframe of "days" instead of months.

You can also more easily have your certificates impersonated in a hard to catch way as certificates will be constantly renewed.

And even in a non evil plot, if anything happens to let's encrypt, down time or anything, you could have your service broken with dead certificate in a so short time that you would not even have the time to look for a solution. Today you have at least months to figure out.

Funny to see all the comedy and useless energy spent having a board, when this board is a Rubber-stamp board with no real decision power as one person has the majority of the control votes.
Be ready because their plan is to reduce the lifetime to 7d as soon as possible for their evil masterplan to strip us off reasonable control about our websites.

Now that they have a dominant position they do Google style and Google influenced move.

You are at their will fit whatever retarded dictatorial decision they want.

Re:New gTLD Application for .lan on Thursday October 08, 2026 @06:19PM (#50013200)
But why is it that nowadays, it's enough for a vulture corporation to have enough money to be able to privatize a part of the "web" that is in common usage (in the sense of common good) since so long?

It should be logical even without thinking that the request have to be rejected.

Re:The Era of Software Quality, or the Era of Ostriches? on Monday October 05, 2026 @03:35PM (#49969467)
> GNOME is primarily written using unsafe programming languages where simple mistakes in our code lead to devastating consequences for our users, and we make these mistakes all the time. No matter how much we try, GNOME developers will fail write secure code when using unsafe languages like C, C++, or Vala: it’s just too hard for even experienced developers to do properly.

Once I saw that I knew that this article was a ridiculous stack of bullshit. Gnome might have some bugs and shortcomings but now millions desktops are using Gnome based window manager for decade and the world didn't collapse yet.

And let's not forget the ridiculous assumption that you can't handle a software quality without using AI...

Re:Our approach to EU text provenance rules on Monday October 05, 2026 @02:14PM (#49968384)
My personal opinion is that they cheated evaluations to be able to release this pretending that it has no meaningful impact.

Otherwise, I don't see any logical explanation that some of their benchmark results would be higher when watermarked. Except if benchmark results are so unstable that they are an useless metric.

Re:Treachery in the Rodin Museum 3D Scan Verdict on Sunday October 04, 2026 @12:12PM (#49955170)
That is problem I have personally experienced in France that the administrative justice is bat shit and often being biased and not respecting citizen laws.

I had cases where the official body lied, and the lies where exposed but still it is like they didn't care. Real example:

- opposite side: the memorandum of the accusation was complete enough as you can see they have 90 pages.

- me: what, no, lies, my memorandum is 15 pages as you can obviously see counting the pages.

- decision: rules against me because my 90 pages memorandum shows that the analysis was complete enough.

Another case:

- me: election should be cancelled because not respecting the at least 30% parity law

- opposing party: argument without ground because 1 woman over 6 mans, 1/5 = 40% so please reject the request.

- me: but no, 1/5 = 20% not 40%.

- decision: rejected because more than 30% proved by opposition.

And the worse of all in some decisions "ok, they didn't respect the law, didn't respect the due process, but if they did would have it changed that much the result? Not sure so let's reject the request as without ground..."

But if you over speed the limit, then you will get a ticket in all cases. So it is like not the same justice for everyone.

And something that can explain a little bit why administrative justice is so aweful in France is that judges in this instances are not professional judges but former gouvernement workers that are assigned there. So in the end it is like asking gouv workers to rule against other gouv workers decisions. Totally biased.

Re:Treachery in the Rodin Museum 3D Scan Verdict on Sunday October 04, 2026 @08:03AM (#49953153)
If you know french bureaucracy, it is very simple in the end. It is a public worker that is nominated as the head of the museum. The mindset is almost never to do their job well or benefit the common good. But to be important and showing your importance by abusing your power if necessary to show that you have some.

Somehow he thinks that the sculpture is his own as he is the custodian, and so that he has all rights. And pictures or 3d scans in the end belongs to him also, like if the virtual thing was a physical item locked in the museum.

If he is forced to release publicly the 3d scan, especially against his goodwill, it is like being striped of his power and authority so he couldn't allow that. It becomes a personal matter.

The only thing that could have worked is to befriend him or create a cultural organisation and have lobbied to him in the first place that he would learned a lot of reputation/marketing points by releasing it. Imagine a dedicated website and grand champagne event with the incompetent minister of culture where they push the button...

Older »