News for hackers. Stuff that matters.

happosai

A lot of people in fediverse would enjoy these. Consider creating an account on techub.social or any of the other tech/foss oriented mastodon instances.
An outside advertisement display in Finland was defaced recently with a certain well known image from early internet: (warning article includes blurred version of the image)

https://yle.fi/a/74-20134714

We've had enough people around here _accidentally_ jam the 868 MHz and each time it took months to figure out what was going on before meshtastic worked again..
These bands are trivial to jam should any adversary want.
Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @03:11PM (#50199727)
Mainstream browsers were a juicy but also a very short term attack target.

The more interesting targets will be various REST etc apis being called over https. Lots of people doing API clients have been ignoring the "what if someone tricks me to connect to an evil server" vector, because they assume TLS verification will protect them.

If the client uses "certificate_authorities" extension to list support CA's, a TLD server that holds multiple x509 certificates can present to the client the certificate signed by the clients trusted CA.

Of course, the browsers don't use the "certificate_authorities" because the list would be hilariously large for a TLS CLient Hello packet.

Re:Desire to Move Permanently to U.S. at New Low on Friday October 16, 2026 @12:58PM (#50121027)
The only proven method of stopping immigration to your country: make your country such a shit hole nobody wants to move to it.
> you sometimes need the model to have (restricted) access to the internet.

Poor excuse. Internet is prod env, for testing do a proper test env.

Just give the models in training access to a snapshot from archive.org - which frontier labs surely have a crawled copy of already.

Re:Bitwarden Dual License Model on Saturday October 10, 2026 @03:11PM (#50036108)
Yes they can. But then you see which account as took part of the DDOS scraping, and delete all accounts that match the pattern and site gets back under control.

Fundamentally it's all a game of whack-a-mole for admins unless some kind of microtransaction system is invented. Then a DDOS scraping event is just extra revenue.

Re:Bitwarden Dual License Model on Saturday October 10, 2026 @12:39PM (#50034583)
With the AI(?) bots doing a DDOS on on public websites via residential proxies the future is all website will require login.
According to partisan online newsletter "public.news" that claims to have interviewed anonymous US government sources.

Unfortunately online search has gone useless and it's not possible to find out if anyone ever confirmed anything about that report. Just gazillion of other newslets repeating the original claim.

Re:Show HN: Germany's new sovereign AI model Kolibri on Sunday October 04, 2026 @05:49AM (#49952273)
Well yes. drug cartels have a revenue source.

Miscreants with even half a braincell will find themselves in illegal drugs business over terrorism.

Political and religious fanatics with even a half a braincell figure out terrorism will only damage their cause.

People who end up as terrorists have already failed the two above tests.

Re:Docker has always used microVMs (well since 2016) on Sunday October 04, 2026 @02:47AM (#49951323)
So what is currently the best way to run docker images in microvm these days? The article is pushing for docker sandboxes, but the "you need a docker login" makes is pretty much no-go for my use case.
Re:Show HN: Germany's new sovereign AI model Kolibri on Saturday October 03, 2026 @04:21PM (#49947427)
For terrorists it is tho. Four lions is basically a documentary. The only clever and creative terror attack happened 25 years ago.
Re:Updates to Full Disk Access in macOS on Saturday October 03, 2026 @04:38AM (#49942423)
Basically, the security model has changed:

https://xkcd.com/1200/

Also, if you are really old, you may remember how unhappy people were when wheel group appeared, and not everyone could "su" to root anymore. Giving everyone root was supposed to be normal!

Re:Nissan's third generation e-POWER powertrain on Monday September 28, 2026 @01:04AM (#49873876)
Range extender EVs made a lot more sense a decade a go when batteries were much more expensive, and fast chargers were not yet ubiquitous. Then range extenders were more affordable than EVs and could go to places EVs couldn't.

Now these EREVs are mostly luxury niche of big cars (where extra space taken by two power trains doesn't matter) for people who don't want to spend 20 minutes at rapid chargers on that yearly long trip they do. Or for people who live in some global warming ignoring backwater[1] that hasn't built out rapid charger yet.

[1] even China has ubiquitous fast charging network now

Re:Replacing the old battery on rechargeable bike lights on Sunday September 27, 2026 @02:58PM (#49869720)
A bike radar alerts you about vehicles behind you. It does not replace a taillight, rather they always (I think?) have taillight integrated. For more details:

https://www.cyclingweekly.com/group-tests/best-radar-bike-li...

Re:Breaking Up with Google Play: Why Conversations Is Now Free on Saturday September 26, 2026 @08:05AM (#49855744)
Yeah that "there is no way to talk to a human at Google" is one of the reasons I never recommend a Google solution at current workplace... Or to family.
Re:Suspected sabotage causes major Netherlands rail disruption on Tuesday September 15, 2026 @08:36AM (#49711602)
Of course, the only reason wild berries got hit is because Putin started the war. The only reason why why Russians (and Russian speaking Ukrainians) are dying in large numbers is Putin.

The pro-russian historic fanfiction asserts that "Putin was forced to war or NATO would have expanded to ukraine or something"

There is no conceivable scenario where Russians would have worse safety than what Putin's decision caused. Heck, the long range drones attacking Russia today would simple not exist.

People say trump is Putin's stooge, but honestly Putin looks like a western plant. Nobody else since Stalin has killed as many Russians than Putin.

Have I been pwned reports 99% of email addresses from chess.com leak were already in their database. Rather strong indicator that the Hacker scraped an API with a list of email addresses.

https://infosec.exchange/@haveibeenpwned/117263977537458510

Gas heating is a pre-existing issue in Germany. While there is handful on anecdotes of someone switching back to gas, the big trend is opposite. Majority of heating refurbishments are gas/oil -> heat pumps, and almost every new build is heat pumps.

carbon leakage is mostly industrial and data centers (why do so many europeans run code at us-east-1 ?)

That's the CAP part. The annual co2 emissions of electricity production and industries is capped to X gigatons per year. If a datacenter buys all clean electric production of the country, electric companies will have to either have to make up the gap by building more new clean energy or tell other customers "sorry all sold out".

Of course, would the latter happen, political actions would be done before people freeze. It will be unpredictable what the would be - allow fossil fuels "temporarily" or order datacenters to shut down during dunkelflaute? Interesting times (I would prefer less interesting times).

Generally speaking cap and trade is the most sure way to reduce emissions (emissions drop exactly at the pace the CAP drop annually) and the most cost-effective way also - the TRADE part ensures emissions are cut first by those who it easiest, while hard-to-decarbonize sectors have most time to sort their plan.

The only problem is "carbon leakage" where co2 emissions simply move to asshole countries like USA and China that do not utilize cap-and-trade. That should be dealt with hefty carbon tariffs. Oh wait, even china is building their own cap-and-trade system. Well, anyways, tariffs against the climate assholes.

> But if what’s happening is they’re displacing previous nuclear power users onto dirtier, that’s not really reducing carbon

That's not the case, because in EU (and thus Finland) electric production is under cap-and-trade. There is just no way to increase dirty electricity production in EU. Apart from political pressure to change rules, which for example Italy is doing because Italy built their grid on gas...

Republican south states have also decided to reject science and embrace fossil fuels - global warming shall be the problem of our grandchildren, feel free to build as many gas turbines as you wish!
Re:iPhone Duo on Thursday September 10, 2026 @06:11AM (#49641193)
So much for the long tail I guess. Tough luck if you want anything quirky or unique, society will only manufacture for the mainstream taste.
Re:U.S. Sanctions Against the a/I Collective on Friday August 28, 2026 @03:52PM (#49483397)
The point is not what kind of policies the "radical left" tech guys had. The point is they had quarter century run in which law enforcement in Italy could not find anything illegal in their actions.

And The current US administration was like "we don't care that running a webserver for activists is legal in Italy, we will just declare them terrorists".

Which is precisely why it's important that criminals and even terrorists have rights and due process. Else they can just declare YOU a terrorist and suddenly you have no rights.

Intel is also looking into returning to making RAM, but it's probably the Chinese that will enter the market faster
Re:How to disable or avoid intrusive AI on Monday August 17, 2026 @12:27PM (#49333657)
Unfortunately doesn't tell me how make Rovo go away.
Re:Asus Bike Booster on Monday August 17, 2026 @02:07AM (#49327042)
If you look at cycling as a purely sport/exercise thing, you are right. But if you look at cycling as a transport method to get from A to B with incidental exercise benefits, it looks different:

Sure if you assume that someone switches from conventional bike to e-bikes and continues to only travel A to B like before, yes it's a net loss in exercise.

In the study however, they found lots of people substituted driving or public transport with e-bikes, which is a net gain from the reference point.

Even for people who had conventional bikes, getting a e-bikes meant travelling with e-bike more often and longer distances than with a conventional bike.

Older »