News for hackers. Stuff that matters.

happyopossum

Re:Northflank Breached on Friday October 30, 2026 @02:30PM (#50308215)
There is an entire practice of cyber risk analysis, and most of the companies I work with do this type of due diligence as part of their vendor management process.

Yes:

* you do ask about things like budget allocation, audits, and internal compliance processes.

* you do ask about the tech stack, how it is maintained, and what the patch and disclosure policies and SLOs are

No:

*you do not rely on what figureheads say publicly; none of that is binding in the way legal agreements are

And if you're a vendor, your deals desk probably has all of these answers packaged up and ready to go; or even published on a website like this https://spyglass.trustshare.com/home (no idea who that is, it's a random company's compliance portal I found while googling my employers compliance portal provider).

[edited for formatting]

Re:Northflank Breached on Friday October 30, 2026 @02:20PM (#50308070)
None of my customers / clients / coworkers have ever used Azure and "nicer to use" in the same sentence.
Re:Northflank Breached on Friday October 30, 2026 @02:18PM (#50308030)
> For consumers <snip> self-host things.

That's not how consumers work. That's a nerd/geek/hobbyist mentality.

If Ikea and Wayfair went out of business you wouldn't expect consumers too take up woodworking and build their own furniture en masse.

Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @12:57PM (#50292243)
> basically any product where a consumer or enterprise pays money to google for anything other than advertising

Not exactly - the consumer stuff (subscriptions and devices) falls under services, while cloud covers GCP, Workspace, and enterprise-specific cloud services (like maps etc).

Basically if you pay for it with a monthly sub on a personal google account (including Gemini stuff like Ai pro) it's services.

[0]https://abc.xyz/investor/faqs-and-general-information/

The entire article points the finger at "roblox" as an entity, but the behavior seems to indicate it's just an individual doing the scraping - possibly not for corp use.

Look at the timelines - this scraper was running on someone's laptop: it turns off when they shut down for the weekend and lunch.

Re:Concerning behavior from a popular open-weight AI model on Monday October 26, 2026 @07:08PM (#50252455)
> I can't make a statement about the security of the resulting code

That's the entire point of the cited research though. This would be like someone asking you which ice cream has a better vanilla flavor, and you responding with "they are all cold"...

11-12% annually, so yeah a year long hiring freeze might get you to the right number. The problem is that it gives you no flexibility or control over who attrits, and removes your ability to keep critical roles filled.
2014 was the year they acquired minecraft/mojang and nokia, which may have accounted for a lot of that growth. Also 2022 was the Activision/Blizzard acquisition which would have been well over 10k new employees...
> He cannot be properly or deeply Catholic

He’s never claimed to be - GP is confused, or just plain wrong.

Re:IKEA – 3D Guide on Tuesday October 20, 2026 @02:24PM (#50170513)
Folks were doing this in the late 90s on AVSForum..
It’s a weight and a date/time stamp. There’s zero need for cloud processing.
Re:Muse Spark Open on Thursday October 15, 2026 @02:13PM (#50107805)
1024GB of ram is bigger than 96GB of ram.

Also you are comparing apples to or— dang it, I don’t mean to do that in this thread. Well, it’s a very poor comparison, as they are completely different computing devices with completely different use cases, capabilities, and customer bases. Not to mention power requirements!

They are doing orbital mesh, still need downlinks though, and having them close to the earthbound endpoint is key for low latency.

[0]https://www.trackstarlink.com/guides/starlink-laser-links-ex... [1]https://starlink.com/technology

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @03:02PM (#50093157)
Almost every complaint I see about passkeys seems to be based on behavior and configurations I just do not see in the real world.

“Once I set up a passkey I can’t log in from another device” - have never seen this to be the case. Existing password / OTP codes have always worked as a fallback if syncing somehow breaks.

“I don’t want to trust Apple/MS/Google with my logins” - so don’t. Use bitwarden or 1Password or lastpass or whatever you want to store your passkeys.

“If I lose my phone I’m screwed” - see #1 and enable sync maybe?

Boils down to I believe a lot of folks looked at passkey implementation at a high level, saw some potential pitfalls, and never actually used them to discover those pitfalls have all been accounted for.

Go ahead and skip passkeys if you want, but stop preaching about evils that don’t exist.

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @02:57PM (#50093069)
> figuring out how to get the flow to set up a LastPass key by default seems unusually difficult

Disable iOS passwords and set lastpass as your only password autofill source. It’s far from difficult. In settings under autofill passwords

Re:Grace Hopper Celebration (GHC) 2026 Cancelled on Tuesday October 13, 2026 @11:29PM (#50082028)
There are 300+M people already in the US, including a huge portion of the global computer science community…
> Anytime something goes wrong with the TV, those are probably the first places one would look

In my entire life, I have never once plugged anything into the USB port of a tv, not have I ever had a USB port on a TV cause a problem that needed me to inspect it.

What exactly do you do to USB ports?

> I actually am curious if they were able to volunteer the information to the government of their own volition, without a government subpoena first

Do you think Target has any legal restrictions on sharing surveillance video of a shoplifter with the police when they report a crime? This is the same thing - logs are evidence, and when you report a crime you can volunteer said evidence without restriction if you choose to do so.

This is why a lot of companies that use Ai negotiate ZDR terms with their model providers of choice… Using local LLMs is a choice, but not one a lot of companies can support nimbly at scale.
Re:Character.ai files for Chapter 11 bankruptcy on Tuesday October 13, 2026 @06:29PM (#50079815)
> Along with the rest of the top 5 states where almost everyone lives in the USA?

The other 5 states don’t even come close economically. If California were a country it would be the 4th largest economy in the world. Fourth. Largest. Economy.

The next closest state is Texas and it’s down around 9 or 10 at half the GDP…

Re:3rd Yandex Cloud Data Center Was Hit on Sunday October 11, 2026 @04:56PM (#50047728)
If the other end of the cooling loop is a giant reservoir, as is the case with plenty of other 100+ mile water transport systems, it doesn’t matter if you drone it. Fly all the drones you want into Lake Anthropic, there’s many more cubic meters of water than there are drones.
Re:NYC's "Click to Cancel" rule is now in effect on Sunday October 11, 2026 @03:53PM (#50047144)
> This is what courts are for. There is no exact line because many situations are different.

So now you’ve opened a bunch of businesses up to liability from an upset customer who files a complaint, even if they are making a good faith effort to follow this law.

That is why clear and specific details should be in the law, not vague hand wavy things that require lawyers and judges to interpret.

Re:Our $445M Series D on Friday October 09, 2026 @09:16PM (#50028522)
Wow, that’s a pretty rude thing to say to a person who was commenting about a stranger being publicly shamed by one of your employees. He didn’t pick a fight - your employee did.

Regardless of where you stand on the term “you guys”, your inability to even listen without lashing out is a bad look.

Re:Our $445M Series D on Friday October 09, 2026 @09:04PM (#50028451)
Literally is nothing like that - it’s got the CPU horsepower of a mac mini from 2020, at 5x the price of a 2026 Mac mini….
That’s a completely logical and true statement… I can own a gun but I can’t threaten your life with it.
New Hampshire is a staunchly Libertarian state, so it has some good ideas

FIFY

That’s a great story, with very little attachment to reality.
> Most people don't have lidar phones

the most popular phones in the US (iPhone pro max and pro) have had lidar cameras for the past 6 models...

Re:What's Earth's dominant species by mass? on Tuesday October 06, 2026 @06:36PM (#49985127)
Bristlemouths are a family, made up of 32 distinct species. The question is dominant species...
Re:We want you to build the next Git platform on Cloudflare on Sunday October 04, 2026 @10:31AM (#49954265)
> hundreds of thousands

Not to take anything away from your point, but TFA said hundreds or thousands - not hundred of thousands. Couple orders of magnitude of difference there…

You’re still spot on - even thousands of agents working on a single codebase would mean hundreds of humans directing them…

Older »