News for hackers. Stuff that matters.

hangrybear666

Re:Malware uses LLMs to rank victims by how much they're worth on Saturday October 31, 2026 @01:34PM (#50318170)
Do package managers for Linux distros have this, like dnf/yum/apt/pacman? I use min-release-age =14 for npm now as a default but should start using it everywhere it's possible
My favorite description of JAVA is that it's a language where you are deploying instant legacy code.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @10:18AM (#50304279)
Nah I was a student struggling with responsibilities and decided to play World of warcraft instead before getting my shit together a few years later and becoming an engineer.

Only paid 800€ for the 3 bitcoin, which was significant but not necessarily essential.

I'm glad the people were made whole to some degree!

Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @09:10AM (#50303379)
Hell yeah that's the most sane and efficient personal dev sandboxing work flow I've heard and shows you know your stuff. Just basics but executed very well.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @07:06PM (#50297507)
Luckily for me, I lost all my coins very early on Mt Gox so the lessons were learnt and mistakes not repeated (which means exiting crypto, watching the show in amusement)
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @07:03PM (#50297480)
Yeah apparently it's news in 2026 that banks can actually keep their assets secure in comparison to the web3 clown fiesta. Of course banks do get compromised but not anywhere close to this degree.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:59PM (#50297444)
Well I've learnt my lesson after having lost 3 bitcoins as a student on Mt gox I finished writing my thesis on blockchain technology and then never touched crypto again.
Re:Duet is the future of chatbot interaction on Thursday October 29, 2026 @05:09PM (#50296041)
Yeah sure. Let's talk again in 3 months once a new paradigm has been invented to further abstract and alienate us from the work we are doing.
Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @09:36AM (#50288806)
Much respect indeed and I admire that effort! All I do now is have the LLM generate SVG images of its implementation planfiles for me to review a pretty image because it's become too advanced for me to parse the markdown in appropriate time.
Re:Gemini 4 Carbon on Wednesday October 28, 2026 @04:06PM (#50280127)
Same. So after their now third announcement of a new model while locking their own customers out of it, I've just unsubscribed
Re:Gemini 4 Carbon on Wednesday October 28, 2026 @04:02PM (#50280070)
I've just renamed my files from CLAUDE.md to AGENTS.md I certainly won't do that again regressing back in the vendor specific direction lol
Re:Gemini 4 Carbon on Wednesday October 28, 2026 @03:59PM (#50280021)
All I see is 3.1 pro and 3.6 flash, I just canceled the sub lol - those seem like half a year old and I'm too lazy to check - my workplace gives me access to all models in a harness anyways
Re:Gemini 4 Carbon on Wednesday October 28, 2026 @03:48PM (#50279840)
I've bought my girlfriend a Google ai plus sub because she's not a developer and just wants some search and image generation but the fact that she's still stuck on flash 3.6 is a joke, why would I keep paying for that at this point
Re:Getting ready to operate GNU Taler in Germany on Friday October 23, 2026 @07:54AM (#50207529)
Licensed banks aren't getting pillaged by cyber criminals though, I'm tech literate and mindful of my security and yet my 3 bitcoins were stolen from Mt Gox. People buy hardware ledgers to create a higher sense of security then those get hacked. The money in my bank so far has never been touched without me having to think about it at all.
Re:Getting ready to operate GNU Taler in Germany on Thursday October 22, 2026 @02:15PM (#50199075)
Never having heard of it before, the moment I read "cash like tokens in your account" I was immediately out. Also claiming buyer privacy when the money ultimately has to come from a bank transaction or another digital transaction leaving some sort of trail is a false illusion.
Re:Suicide rates highest ever among middle-aged men on Wednesday October 14, 2026 @06:05PM (#50096075)
Yo I'm also strictly apolitical and never had an issue with relationships or social circles, I just tell everyone I meet that "I do not talk politics, because maintaining my mental health is a full time job without putting the weight of the entire country/world onto my shoulders in addition" and so far they've all understood. The radicals who wouldn't understand I just say goodbye to, but this hasn't happened yet.
Re:Neckbeard – a DevOps/platform/SRE plugin for your agent on Wednesday October 14, 2026 @04:59PM (#50095152)
Hetzner is awesome, I prefer it to aws for personal projects, feel free to analyze my modularized instance setup with an LLM and rip out what you need, it's all hand built, most of the engineering went into cloud-init and network security - before machines could generate the same in hours lul

https://github.com/fiscalismia/fiscalismia-infrastructure/tr...

Re:Neckbeard – a DevOps/platform/SRE plugin for your agent on Wednesday October 14, 2026 @04:47PM (#50094984)
Humor is what keeps me going too lol
Re:Neckbeard – a DevOps/platform/SRE plugin for your agent on Wednesday October 14, 2026 @04:30PM (#50094685)
Oh that's neat. Yeah I got started on heroku too. Fly.io also comes to mind.

We run our own gitlab instance in a central AWS account that has some infra buckets containing modularized Terraform packaged into tarballs that are then fanned out to a couple hundred aws accounts across the teams and environments (prod, qual, dev).

Its all deployed via gitlab ci cd pipelines (which are just ec2 instances spawned at pipeline invocation) in multiple layers. The first layer is a foundation laying the networking rules and the IAM roles, permissions, policies and boundaries, some logging and monitoring. The second layer then assigns team specifics such as budget and maps people's accounts to roles depending on their access level (maintainer, developer, reporter). This layer can also be used to customize firewall rules like opening ports to the company internal IP ranges. The third and final layer is then all of the application infrastructure of the teams, so all their persistence, compute, load balancing, dns routing and serverless stuff. My prior teammates did a lot by hand in the aws console but I told them to stop and retain everything as IaC code. Besides Terraform, in my team we use Packer to build reusable "golden" machine images but also Ansible to configure live machines.

I'm still surprised nobody bothered us to change to Opentofu, it's not even been mentioned yet lol.

Re:Neckbeard – a DevOps/platform/SRE plugin for your agent on Wednesday October 14, 2026 @03:49PM (#50093998)
Oh so more an orchestration interface with sane defaults for an LLM to use as a reference when implementing deployment changes, especially new rollouts? It seems to be aimed at small to medium sized cloud deployments and more as a starting point to get customers up and running?

Because I'm already administratrating a large AWS environment and the networking, especially as regards route tables, transit gateways, DMZs and extensive security group rules managed in multiple distinct layers across teams (and don't even get me started on IAM and Active Directory Forest) don't seem to fit into the abstraction layer I'm seeing.

Re:Neckbeard – a DevOps/platform/SRE plugin for your agent on Wednesday October 14, 2026 @03:12PM (#50093318)
It does sound cool and as an infra nerd myself it reads sensible, I just don't see why I would want another abstraction layer between my cloud deployments being rolled out and the tf/hcl files that I maintain. Why would I want to install another interface between me, the planfile and the running environment? Genuine question
Re:The last time my family was replaced by technology on Thursday October 01, 2026 @05:57AM (#49919750)
Because I literally can just burn tokens instead of using any of my brain cells and the outcome is way better than what I would have achieved thinking deeply and intricately about the implementation because Opus 5.5 at xhigh implements way better than I ever could and I'm paid well and have studied for years and it's not a low-level environment at all.

Since opus 4.8 the tools have started surpassing me and now they are far gone, so implementing by hand would mean sacrificing quality and my main goal as an engineer has always been quality so even though I hate it, I must use the best tool for the job.

Re:A Brief History of the Bloomberg Terminal on Wednesday September 30, 2026 @12:16PM (#49910861)
Zitron must get on this ASAP it will make his day
Re:The last time my family was replaced by technology on Wednesday September 30, 2026 @09:41AM (#49908839)
> Many of us, deep down, are driven more by the joy of making things, solving problems, and seeing people use what we built than by the act of coding itself.

I've definitely always enjoyed the end-result but only for the fact that it proved I have overcome challenges and slowly but steadily inched one step closer towards mastery. Both are now gone, since mastery is not required and challenges are absent except the soul draining exhaustion of reading markdown all day. Now I'm just producing outcomes for my boss, rather than my own fulfillment. The journey has become a farce, I will ride this out and make my money but I don't care about it much anymore.

That being said in my free time, as in Hobby I am doing pentesting manually for fun. Because productivity is irrelevant for my hobbies, so I can still keep inching towards mastery and overcome challenges, at least on days where my job leaves any trace of surplus energy at the end of the day.

Re:Solving Factorio Quality on Wednesday September 30, 2026 @03:33AM (#49905638)
The systematic and scientific approach is absolutely warranted if you want to produce legendary quality at scale. I brute forced my way to legendary mech armor with manually steered recycler loops and wasting millions of iron and copper in the process. Since playing on a Linux developer laptop with 0GB VRam and an onboard GPU (at 60FPS!) I couldn't have scaled it much larger anyways but the entire game, it's a fever dream of optimization and I love it.
Vadim Sokolov, the co-author of the paper mentioned in the post defends this insane practice and says they reviewed at least one of the 258 generated papers with their own eyes, they are thus not fake papers.

Source: https://statmodeling.stat.columbia.edu/2026/08/27/258/#comme...

Re:Dots: Always-on agents on Tuesday September 29, 2026 @02:32PM (#49898197)
It's actually hilarious to only read on this page intermittently, after not engaging for like 3 weeks I'm presented with 3 new product names that all read like a comedian wrote their marketing. The blatant disregard for security and privacy to push out something most developers have utter disrespect for, I really wonder what the target audience is, cause I cannot relate one bit.
Re:Dots: Always-on agents on Tuesday September 29, 2026 @02:23PM (#49898070)
These recent product announcements sound like entirely plausible satire, but unfortunately most of these pages are not actually intended to be a joke, it's not even amusing, but mostly tiring.
Re:Pion, an agent designed to run any company autonomously on Saturday September 19, 2026 @11:27AM (#49767329)
You're not wrong and it really comes down to how the tool is used. People wanting a quick solution, thus skipping the learning process entirely out of either complacency or because they feel like they don't have the time or energy are more at risk of atrophy I'd assume.

Personally the tools have simply gotten too good to ignore so I have been thinking about how to write skills and prompts in a way that enable me to keep learning, overcoming friction and challenges and not simply using the tool for hand holding and jumping straight to the end result.

For me personally, what matters is the process of learning and mastery, my self esteem depends on it, and enriching that with AI instead of AI eradicating that process for the sake of efficiency is my current challenge.

Re:Pion, an agent designed to run any company autonomously on Wednesday September 16, 2026 @05:26AM (#49723961)
You forgot to read the last line of my message, in my profession I utilize LLMs to a high degree, my point was, that in my free time I code by hand 1) because self esteem benefits from the process of problem solving 2) I want to understand the fundamentals to not feel like a fraud 3) there is no time pressure to perform.

People neglecting this side will inevitably become less proficient at their job and become rather helpless without AI, that's all I'm saying.

Older »