News for hackers. Stuff that matters.

grommz

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @06:44PM (#50320982)
Who wrote the bug? Very likely someone at Redhat.
Re:Concerning behavior from a popular open-weight AI model on Monday October 26, 2026 @04:10PM (#50250189)
With Ameribros every accusation is a confession. Good thing they have a proprietary model I can pay for.
Re:OpenBSD 8.0 on Tuesday October 20, 2026 @06:12AM (#50163809)
>Switched ssh(1) from supercop ed25519 to libsodium

Lol. Casually switching crypto implementation somewhere in the footnotes.

Re:Flatpak – An Insecurity Nightmare on Monday October 19, 2026 @06:40AM (#50150726)
Now your app comes with embedded vulnerabilities and no sandbox.
Actually a great way to safely try old games that you've never played before.

https://ported2browser.com/

It's all about that sweet backdoor. With Google and Samsung the NSA can just waltz in and out of your phone no matter which OS is running. But if some Chinese OEM decides that Unisoc chip & baseband would be the best choice for your GrapheneOS device the NSA will be quite unhappy.
Very nice. You should consider rotating the label of a community periodically, not just triggered by rekey events. Makes it impossible or at least very hard for relay operators to delete the entire community by label.
> nothing good usually comes out of governments censoring internet

wrong. Blocking Facebook in China because they didn't follow domestic laws was the best thing that happened to the Chinese internet. It enabled the growth of domestic platforms like WeChat, Weibo and Tiktok.

Re:Pirate Face Rescues LLM Models from Deletion on Sunday September 20, 2026 @12:35PM (#49777418)
If I search for 'uncensored' there are no torrents available. Uncensored models should be top priority, especially now that Nvidia owns HuggingFace and will enshittify the platform in accordance with upcoming US laws.
The founder Joanna Rutkowska left QubesOS in 2018. All the code involved in this bug was committed by her successor Marek Marczykowski-Górecki.

Joanna seems to be a genuine good guy, she once wrote a paper titled "Intel x86 considered harmful". That's why Huawei and the Chinese government aren't even trying any more to make western CPU architectures secure, it's a hopeless cause.

Re:Pollen Robotics (Hugging Face) Microduck on Thursday August 27, 2026 @10:24AM (#49465408)
Made in China with a 500% markup. No thanks, I will wait for the Chinese version for less than $100.
Re:Malicious Rust crate Arrayref runs a build-time payload on Thursday August 20, 2026 @11:56AM (#49376405)
HarmonyOS is a capability based OS. I don't know why anyone in China is still using Rust. The biggest social engineering hack was for the Rust team to convince developers that it is a safe language.
Re:Ask HN: Alternatives to GitHub on Monday August 17, 2026 @01:23PM (#49334516)
Has anyone tried Tencent CNB? It offers generous free quotas.

https://cnb.build

Re:DeepSeek Harness on Thursday August 13, 2026 @11:06AM (#49287141)
The paper mentions agent harness self improvement as one of the use cases. I don't know what's the advantage vs. iterating over a monolithic harness.
Once you know about the NSA backdoors you become a walking security risk. Forget about that vacation in beautiful China, you will be held on a short leash for life.
The US Department of War IP adresses baked into the firmware is the bigger story here. Note to self: never buy a Korean security product.
Re:Qwen3.8 is launching and going open-weight soon on Sunday July 19, 2026 @11:13AM (#48968890)
It's your job to vote for a government that gives you cheap or free AI. Europe is building AI gigafactories so that small businesses can have access to cheap AI. At least that's the plan.
No, but cursing helps. I often call it a woke moron. The Chinese models then try to be extra precise and factual.
Re:Kimi K3 is now live on Thursday July 16, 2026 @02:05PM (#48938013)
Imagine you're a mid sized company and you can host this model locally. Suddenly there are zero reasons to pay a single red cent to the bloodsucking American AI cartel.
Re:Briar Is in Maintenance Mode on Wednesday July 15, 2026 @11:21AM (#48922239)
CIA funding dried up. Briar had already started development when Starlink wasn't even a concept. Nowadays every CIA goat herder has their own Starlink terminal.
Nobody says Jinping Xi or Zedong Mao.
Re:Punk, or why I don't stream anymore on Friday July 10, 2026 @12:06PM (#48861819)
"The normal strategies you have against this won’t work. They didn’t take away the thing, they built an awful cancerous version of it that outcompetes yours." "The machine takes your culture and sells a shitty version of it back to you."

There is one position that will never be absorbed anywhere in the West: the hatred of Boethians. If I were to create a niche counterculture I would make the hatred of Boethians the entry ticket as a vital ingredient to establish authentic counterculture. You can't get more anti-establishment, and it's the only anti-establishment move that still works.

*Israel Hatched Fresh Plot the Kill Trump.

Fixed it for you.

What is the difference between this and VeilidChat?