News for hackers. Stuff that matters.

harry8

We’re talking about consumer router/wireless APs here.
BYOD = bring your own device? And yet your isp pushes updates to it?

Defintely seems potentially better than no updates at all.

How do you know if you have a wide open CVE they're ignoring, like it's claimed ubuntu are doing?

Good to know and to be introduced to Turris.

10G looks a little less consumer-y. I'd imagine cisco, arista, etc do security updates if you want to go down that path.

This is a good point, thanks. We know one does which beats none.
Don't a lot of consumer routers allow for remote connection for tech help trouble-shooting?

How about forwarding a port for wireguard or ssh?

Never seen an ISP patch a router. Ever.

MIPS and Arm have no security issues ever so never need patching which is an x86 only thing? Or maybe this comment is no more relevant than pointing out not all Arm patches apply to x86?

LLMs are giving script kids nation state level tools and expertise.

Google tells me almost none of them run BSD and nothing I've ever heard of, much less seen.

But what do I know about it beyond that?

BSD never ever has security issues so kernel updates are never necessary?

That would be a bold claim and one I've never heard before. Hard not to be suspicious of it.

This secuirty floor is unlikely to be the only secuirty floor that ever happens to a kernel used by routers.

The point: Consumer routers do not seem to get updates. Ever.

Is that a worry or what?

Question:

Every consumer router-wirelessAP I've seen runs linux.

I never see security upgrades for the kernels they use. Not one. Not ever.

Is this something that should be a cause for concern? Even if you don't run a consumer-grade tplink, netgear, asus, whatever router yourself.

Re:Mathematics has changed. Let's act like it on Sunday November 01, 2026 @04:07PM (#50329894)
"This is a guest post by Frank Calegari."
Re:Attention Is Not What You Need on Monday October 26, 2026 @11:06PM (#50254282)
Oh dude. You gotta link it after that. I'm asking.
Re:Attention Is Not What You Need on Monday October 26, 2026 @11:03PM (#50254259)
You can write the above and I can respond. The quality of each response is visible to everyone. Your ideas and mine are actually getting reviewed here, now, at least to some degree. Or it can be seen that they are not getting reviewed or indeed there's a non-zero chance that it can be seen that one or both of us is a muppet. Anyone else can chime in and be ignored, or celebrated or anything else.

This is nothing like academic journal peer review, where you can't see the failed submissions for the paper and why. You have no clue if the reviewers were interested in the topic, diligent, drunk or playing politics "support papers from these institutions because they're the good guys, undermine those because they are or aren't from Europe." You have no idea if the paper has since failed to replicate on multiple occasions. You have no idea if you are the first person to actually read the paper and when you have you thoughts, no matter how insightful, well articulated and supported by evidence, those thoughts do not matter to the publication process of that paper, which has been peer reviewed.

Public review by the knowledgeable who care is a very different thing to so called "peer review."

Re:Just imagining a workout can make you stronger (2016) on Monday October 26, 2026 @08:19PM (#50253106)
Anyone else catching a whiff of power pose here? [1]

Time will tell and should it turn out to be be a con, the con will have moved on.

[1] https://statmodeling.stat.columbia.edu/2017/10/18/beyond-pow...

Re:Attention Is Not What You Need on Sunday October 25, 2026 @10:25PM (#50238375)
Here, many if not most qualify as peers.

It should be unsurprising if comments here, made in public, capable of being challenged are far higher quality than official "peer review" which has really become a bit of a joke. Has been for quite a long time, to be fair. (And unsurprising if not, it's a web forum).

Peer reviewed and published means precisely excrement in a world where papers are not retracted and failures to replicate are refused publication by the "prestigious" "peer-reviewed" journals that published the original.

Intelligent, reasoned, knowledgeable review going back and forth with the author in public makes "peer review" seem just as silly as it usually is. Review by peer professor's indentured servants aka PhD students is often actually higher quality, if wildly dishonest and quite frankly disgraceful.

We now live in a world where LLMs can produce papers. Actual research is a little more interesting, with or without LLM. The journal peer review system doesn't seem to be helping.

Re:No Signs of AI Payoff Outside the Tech Sector on Saturday October 24, 2026 @05:14PM (#50225381)
The best training comes from LLM users. Loads in software to train on.

Not so much in accounting, which is a much easier problem.

Software devs eagerly trained their replacement.

Re:William Gibson and the Trademarking of Cyberspace on Monday October 19, 2026 @12:35AM (#50148419)
At least as many as the number of times I've tried to claim someone else's words and phrases as my exclusive intellectual property in order to profit, because I believe the latter is zero.
I'm used to libraries being release builds so NDEBUG is defined and assert() is compiled out - in debug builds of client code. I'm not understanding what you mean by "standard interface."

What is an assert handler? Is it a debugger for the dump so you can get a backtrace and examine things that way? $ gdb ./prog core Your macro finishes by calling abort() so you have that.

The value of being able to print an arbitrary string, with whatever current variable values you like is not nothing. Printing out a backtrace (if you can with your codebase) is also really useful. Obviously your own macro will print file, line and function. assert(a == b); triggering tells you almost nothing about the failure, why the check was there, what failed etc. It really should.

How does language design evolve where LLMs write the actual code?
doesn't everyone write their own assert macros?

    ASSERT(cond, "msg %s", str_contents); //#ifndef NDEBUG logic
    ASSERT_ALWAYS( ...); 
check the condition, write out the msg, maybe dump a backtrace if that works in your codebase, call abort();.

assert() is just kind of nasty, why use it?

precondition in the function sig is just "We know you don't document and nobody reads it if you do." Which is great, but not worth the control you get writing your own ASSERT_ALWAYS() and being able to s/_ALWAYS//if the performance in release matters.

https://shop.trmnl.com/collections/devices/products/trmnl-x

search:

    TRMNL e-ink 
got me there pretty fast. Out of stock.

edit: yeah a long way short of 31"

Re:What I Self-Host on Thursday October 15, 2026 @09:41PM (#50112715)
Alternative for music:

owntone + shairport-sync

Owntone holds your collection on the sever and can stream to airport, airport2, dlna.

Shairport-sync turns a raspberry pi zero 2w, or orange pi zero 2w into an airport {1,2} speaker. Or use a (super cheap) esp32 airport 2 from aliexpress.

Can sync every room in the house with owntone OR "I want my phone or laptop's sound to come out of the speakers in this room"

Owntone has access to your paid spotify account if you want that. Can stream to your phone with http (remotely with wireguard vpn). Also has mpd controls if you want those and can use apple remote app on your phone if you like that.

Owntone, pihole and wireguard is reason enough alone to put an old laptop into service as a home server.

Re:What I Self-Host on Thursday October 15, 2026 @09:28PM (#50112615)
8 years to now may not be indicative of what's to come.

People with script-kiddie level skills now have access to nation-state level attack expertise via LLM.

Re:Do Frameworks Matter Anymore? on Wednesday October 14, 2026 @02:37AM (#50083311)
point an ai at it.
This comment could be a lot more interesting, useful and worth typing than it is. :(
printing press tried it first.

All failed and all useful. This time ...

Re:Meta VR Glasses on Thursday September 24, 2026 @02:36AM (#49827018)
>Couch co-op as a genre is one of the best console experiences

This! And it isn't close either.

Re:Meta VR Glasses on Thursday September 24, 2026 @02:29AM (#49826956)
Could you get a refund for the device? Obviously that wasn't what you paid for.

Older »