News for hackers. Stuff that matters.

gregoriol

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @05:40AM (#50301630)
If your system is compromised, it doesn't matter what you are using: the attacker will get the password for whatever secure thing you store your secrets in.
It seems that one of the train conductors did know that it was not the procedure and tried to warn of the problem.
Why would it be more secure to post 4 manual commandline instructions than a single file?
Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @06:17AM (#50271306)
The criteria shouldn't be paid or not, it should be quality or slop.
Re:AI promised less work. I've never worked more on Tuesday October 27, 2026 @08:51AM (#50258374)
Same impression here: things "done" are going faster, bigger, more complex, and the head has to keep up
That's why I put these into a separate list in the post
I still don't get why companies like Uber have 34000 employees, Canva 12000, LinkedIn 10000, Dropbox 2000, and so on, not even talking about Oracle with their 140000 or Salesforce with 80000
Re:Apple Security Research Device on Saturday October 24, 2026 @07:46AM (#50220372)
Yeah, that's why most common credit card skimming happens at public ATMs or gas stations...
Re:PHP 8.2.35 on Wednesday October 21, 2026 @12:30PM (#50183658)
Sury's own website and launchpad description are really misleading as to what to use, thanks for pointing to it
Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:19AM (#50181465)
Definitely not available yet, launchpad says last builds are from 2026-10-12
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @08:44AM (#50179968)
The conversation should be about having more variety in structural components, not less: if you kill php and everyone starts using Go for example, the next CVE found in Go will impact as much. The real way is to have more widespread ecosystems.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @08:40AM (#50179915)
Yes, that's not very well done: when you are handling big IT services, you need more than "a person wrote a scary thing on twitter" to justify such an impacting action
Re:Fridges in French supermarkets hit by cyber attack on Monday October 12, 2026 @02:21PM (#50060572)
There are most likely IT governance problems: builders bought fridges, IT didn't provision sufficient access, installers put 3G keys instead of spending time getting the correct VPN/networking, and a few months later no one knows how this thing works, and IT is not mandated to find out that shops ever did that.
Re:Doory – Open-Source Canva on Monday October 12, 2026 @05:30AM (#50053698)
Ask claude
Re:Attack of the Vibe Coded Photoshop Clones on Monday October 12, 2026 @03:25AM (#50052595)
This, and also as an amateur once-in-a-while user of 2 apps, I don't get why I have to pay the same price as professionals using 5 or more apps every day.
Re:A 100x faster* alternative to homebrew on Thursday October 08, 2026 @03:16AM (#50002744)
Why would one care for 100x faster homebrew? it's a tool you use every now and then, you rarely install or upgrade 1000 things, and when you do it doesn't really matter if it takes 10s or 0.1s
Re:Remove and Disable Apple Macos27 AI Models Tool on Tuesday October 06, 2026 @04:25AM (#49975716)
iPad Air 5 had 64GB, probably the last one, but prices for storage have skyrocketed since
Re:Remove and Disable Apple Macos27 AI Models Tool on Monday October 05, 2026 @04:09AM (#49962013)
Would be nice for iOS too: less than 64GB devices are unusable due to Apple storing a huge ton of useless stuff as "system"
Re:Updates to Full Disk Access in macOS on Saturday October 03, 2026 @07:47AM (#49943403)
So if your terminal has access, your claude in the terminal has access too? that doesn't fix anything
They are probably too big to fail already (and too friendly with the current US gov). And even if they fail, open-weight models will take over as the usefulness of the tech behind has been proven.
Re:macOS Golden Gate Is a Buggy Mess on Tuesday September 29, 2026 @11:52AM (#49895461)
iOS 27 is in the same situation: a little bit less annoying than 26 overall but new bugs all over the place. If that is the Tim Cook farewell, it leaves a very bad impression.
Of all the ideas ever tried, this one seems to be the worst
Re:Looking forward to Git 2.56 – and 3.0 on Tuesday September 22, 2026 @05:01AM (#49798320)
What could be simpler than "$ git stash" and "$ git stash pop" ?
Was going to post about this: the last image models with Apache 2.0 license seem to be from 2025, recent Qwen models are "non-commercial use".
> All that happens is the perp loses any audience

You haven't heard about rickrolling, have you?

Re:Larger Pacific Striped Octopus on Thursday September 10, 2026 @05:16AM (#49640766)
Pro Max is still available
Re:Hacking IKEA Furniture on Monday August 31, 2026 @05:55AM (#49507799)
That's because you do have the most common stuff: that's a choice. You could have a less common smartphone (iPhone SE? Fairephone?), audiophile headphones (Denon? Kef?), ... that would be more personal and better choice.
It would be nice if it was easy to "place the HTML where it belongs", but in a complex app it's never just-replace: you have to preserve a lot of state, wether it is filters, forms, user selection, scroll position, ... so updating live becomes quite a huge work.

I've seen good attempts with libraries like idiomorph, but still quite some plumbing to do depending on the app.

Unique IPs is not something AI can generate easily, and blocking IPs in general is not efficient.

The big problem with AIs is that they can try new paths/payloads very easily, adapt quickly, I'd be more worried about that.

So basically Facebook ads won and we are doomed

Older »