News for hackers. Stuff that matters.

halfcat

Re:Bitwarden Dual License Model on Saturday October 10, 2026 @05:08PM (#50037195)
There are many alternatives.
> Maybe even enough to cause debris problems

Too late

https://en.wikipedia.org/wiki/Kessler_syndrome

> They would be insane to risk the integrity of their IPs

https://en.wikipedia.org/wiki/Batman_vs._Teenage_Mutant_Ninj...

Re:Norway Eyes Partial Ban of Smart Glasses on Monday October 05, 2026 @07:42PM (#49972276)
We can hope
Let’s replace a few categories of your argument and see how your logic holds up.

”This is not the claim. The claim is that, empirically, many (or enough) of the men who end up in construction jobs are underage, trafficked, or psychologically coerced (due to poverty, drug addiction, abuse, etc) such that the choice is not really the free choice of willing participant.

I am all for individual freedoms, but I've read enough about this issue, and seen enough documentaries, that I think the claim is very well-founded. Of course, some construction workers are just willing adults doing something they want to do, but there are many who are not.

You could replace construction with mining or fishing or factory work. It’s pretty clear to me that outlawing fishing jobs isn’t going to solve the problem of forced labor.

Re:One Month Without AI on Saturday September 26, 2026 @09:12AM (#49856222)
> Haven't typed a line of code or read any code for over 6 months now

> I ask questions to confirm things

Oh my.

As someone who reads the code, I can tell you, asking questions to confirm things is inadequate. The models lie to me, daily.

Every day I have two experiences:

1. I’m blown away by what it can do

2. I say, ”wait, you said this, but the code shows that, so you were just going to leave that endpoint without requiring any authentication??” and I get the “you’re absolutely right, that was my mistake, and you’re right to call it out” song and dance. Daily.

It also adds all kinds of bloat to code, tests, and “documentation”. I’d say I spend ~30% of my dev time picking lines of code or documentation and asking, “why does this exist?” and “what would break if we deleted this line?” and then arguing with it and removing things.

Re:Virtio-nvgpu: Near-native Nvidia GPU access inside a KVM guest on Thursday September 24, 2026 @10:29AM (#49831143)
I got it working on my laptop. It has an Intel integrated iGPU and an NVIDIA discrete dGPU. I was able to pass through the NVIDIA GPU and use it for CUDA/etc.

But the NVIDIA dGPU is muxless, so apparently all of the display outputs (laptop screen, HDMI outputs) are effectively hard wired to the iGPU. dGPU can render in a VM, it just has no where it can send it without trying to use Looking Glass or similar approach.

Re:VSCode's SSH Agent Is Bananas (2025) on Wednesday September 23, 2026 @06:22PM (#49823401)
I’m currently experimenting with running:

- neovim

- in VS Code [1]

- in the browser

Cloud VM runs the built-in `code serve-web` command, over Tailscale using `tailscale serve`. No SSH. Extensions work. No extensions run locally (with SSH some extensions have to run locally on your machine).

I’m trying to see how little I can run on my local machine. VS Code over SSH is a good step in that direction, but there’s more attack surface if SSH is misconfigured, plus risk of an extension getting compromised.

I expected the added layers (neovim, through an extension, inside VS Code, over the web) to be slow, but so far it works surprisingly well.

[1] https://github.com/vscode-neovim/vscode-neovim

Re:The JavaScript Midlife Crisis on Tuesday September 22, 2026 @08:49PM (#49810256)
> just bare-naked node/html/css/js

Why include node here?

> haven’t memorized every possible TLA

TLA or TLA+?

Re:Pion, an agent designed to run any company autonomously on Monday September 14, 2026 @10:13PM (#49706878)
> unique to me

Ah, so it’s ”No Silver Bullet” (1986) [1] all over again.

Thinking out loud here...

AI mainly helps reduce accidental complexity. It can help one understand essential complexity, but essential complexity must still be paid.

You describe doing the essential, irreducible part. And that’s specific to your needs, depends on the problem you’ve chosen, understanding reality of your domain, evaluating tradeoffs, and being accountable for the outcome.

Right?

[1] https://cekrem.github.io/posts/there-is-still-no-silver-bull...

Re:Boot a Virtual iPhone via Apple's Virtualization.framework on Saturday August 29, 2026 @01:16AM (#49487094)
No, only virtual GarageBand
Re:GUIs should be fully keyboard-driven on Friday August 28, 2026 @01:19PM (#49481696)
> extra effort to build it

Also extra effort to use it. This is why we have the “how do I exit vim?” meme.

A good user interface needs escape hatches so users can keep their head above water while they learn to swim.

Most of what people want when they say keyboard-driven is closer to a cockpit (requires expert knowledge) than a general purpose UI.

> We’ll model it in Ballet on your real systems in a 30-minute working session

You drastically underestimate how bad most systems are. All of the vendors in your examples have good APIs. Those vendors already did the hard part.

All of the systems we need solutions for are moving targets that are breaking constantly. You can’t model those in 30 minutes because the ways in which they break don’t show up until months later.

> I'm very intrigued by AI note takers, but I'm absolutely unwilling to expose me or my clients to this exact problem

Unfortunately it’s mostly not up to you. It’s a weakest-link problem. It doesn’t matter if you don’t use a note taker AI, if even one person on the call uses one. Their tool doesn’t notify you and usually the person doesn’t either.

It also has the reverse impact to the person using the note taker, where people say less around them. Same as if I'm talking to someone with Meta glasses.

I wonder if the people who use these tools know the people they meet with speak less during their meetings, and then all of the participants have a post-meeting call without them to say what they really thought.

Re:Let's Make the Worst Htmx on Saturday August 01, 2026 @09:06AM (#49134104)
How do you debug SSE messages since they don’t show up in chrome dev tools with Datastar?
Re:2x, not 10x: coding with LLMs in 2026 on Friday July 31, 2026 @09:32AM (#49122929)
> having a high signal-to-noise ratio for (open source) projects is a desirable goal?

It’s not obviously true. A higher number of attempts, a larger talent pool, typically doesn’t change the average much (or it might even make the average go down), but tends to produce higher peak outcomes.

We see this everywhere (science, startups, sports, chess, etc).

If you want the best spreadsheet, game, or whatever app you want, you’re only interested in the few highest peaks.

So you do actually get better signal to noise with a larger wasteland of discarded attempts. The higher peaks make it easier to filter out the noise.

The goal you’re intrinsically motivated by seems different than this. That seems to be the whole disagreement.

> It would absolutely end 95% of crime

It might solve much of existing crime, but that’s not the same as a net reduction in crime.

Bribery, blackmail, and coercion would just fill the crime vacuum.

Re:Codex starts encrypting sub-agent prompts on Tuesday July 14, 2026 @10:24PM (#48915521)
> You already have an agent freely doing stuff on your machine

No. Agents run in VMs. Assume anywhere you’re running an agent will be compromised, because eventually, it will be.

The only reason most people haven’t is luck, they didn’t happen to install Axios or Tanstack at a certain time.

Re:Rewriting Bun in Rust on Wednesday July 08, 2026 @09:54PM (#48839971)
Is anyone working on rewriting Rust in Bun?
Have you done iron infusions? My wife has to get these once in a while. She had gastric surgery years back and has issues with absorption of oral supplements.
The job will run the next time a worker runs (in both cases).

And doesn’t that mean the job potentially runs twice? Yes.

In DBOS there are two kinds of “things that run”: workflows, and steps (workflows are made of steps).

Workflows must be deterministic (so it’s fine if it runs twice). Steps don’t have to be deterministic but have at-least-once execution (so it’s best if these are idempotent).

Re:Reflections on software engineering in the age of AI on Sunday June 28, 2026 @07:12PM (#48712767)
> Programming is ultimately the work of constructing a mental model, and that mental model is inherently personal

So that’s why we now have as many different tech stacks as we have developers at work. Conway’s law taken to its logical conclusion?

The most surreal part of this from the Wired article [1]:

> The records sit in Airtable

A secret cabal running the world. On AirTable.

[1] https://www.wired.com/story/leak-exposes-members-of-peter-th...

> What can be asserted without evidence can be dismissed without evidence

What’s your evidence for this claim?

This is ironic. They didn’t say they believe. You offered your belief that you know something that happened long ago (extraordinary claim), and they are naturally curious how you could know that. If you’re a time traveler or whatever we’d be quite interested to hear more.
Hudson Rock has a free domain lookup tool for affected domains:

https://www.hudsonrock.com/fortinet

Re:Peopleless economy? Not technically impossible on Monday June 15, 2026 @10:12PM (#48549719)
Oh no a coronal mass ejection has taken out the power grid
Except for the bitlocker vulnerability that lets someone with the physical computer bypass it. Other than that, it works flawlessly.
You don’t have to login with the online account. Before you install:

- Disable the network cards in the BIOS

- Install

- When prompted to setup the network press Shift+F10

- Type: start ms-cxh:localonly

- Setup the local account

- After install completes re-enable the network cards in the BIOS

Nothing could be easier. Truly the most user-friendly OS.

Older »