News for hackers. Stuff that matters.

heartbreak

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Sunday November 01, 2026 @12:57PM (#50327936)
Yeah, I don’t know about that. We use VDI and dedicated agent accounts. Sort of like I’ve got my super user account for production server access via a different VDI, now I’ve got my -agent account for the agent VDI.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @09:20PM (#50312297)
What does your sandboxing look like that you’re willing to give agents credentials real enough to store in 1Pass?
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @09:58AM (#50303982)
Hopefully a well-sandboxed claude -p.
Re:It's still OK to enjoy programming on Monday October 19, 2026 @09:46PM (#50160373)
You’re forgetting the “economics” part of the argument. Let’s assume that you are actually producing better code than say Opus 5.5. You’re probably slower, you very likely have less “stamina,” and you probably cost more than 200x more per month than a $20 subscription.

You’d have to be pretty unbelievably stellar to produce code 200x better than Opus. I can get a lot of business value out of not-great $20/mo coding. The people writing our checks do not care about the same things we care about.

And I say this as someone who is very upset about what this stuff is doing to my career and hobby.

Claude doesn’t do image generation?
Re:Rails World 2026 Opening Keynote [video] on Thursday September 24, 2026 @09:44PM (#49839266)
At the risk of promoting his views by sharing them here, this is not something he is at all quiet about.

https://world.hey.com/dhh/as-i-remember-london-e7d38e64

Re:Intellectual Fly Is Open on Sunday September 06, 2026 @07:49PM (#49592135)
…you don’t think in words? Or do you not consider an inner monologue to be thinking?
Re:No, everyone is not using AI for everything on Sunday June 14, 2026 @02:01PM (#48530483)
You've worked as a hiring manager at several organizations in the past year?
Don’t worry, some medical professionals are also delegating their thinking to LLMs. No need for the software middleman to cause harm.
This seems like an especially bad faith interpretation of the comment you were responding to.
Re:LittleSnitch for Linux on Thursday April 09, 2026 @07:12AM (#47702117)
> I'm not even going to respond to this ridiculousness.

Why is it ridiculous? If you have electronic access to something of value and broadcast that fact on the internet, you’re at risk of a physical attack. That’s not controversial? Companies make employees do training about this for a reason.

Re:LittleSnitch for Linux on Wednesday April 08, 2026 @09:47PM (#47698417)
Options range from carefully targeted phishing or social engineering attacks to poor opsec and a five dollar wrench.
Re:What AI coding costs you on Saturday February 28, 2026 @10:20AM (#47196319)
Do they also stop providing value to Google as a result?

I don’t get paid to write code, and you probably don’t either.

Re:What AI coding costs you on Saturday February 28, 2026 @10:18AM (#47196291)
> Each time you "compile" your prompt into a program, LLMs spit up something a little bit different. How is it a good thing?

Because that’s not how it works. How can we have a discussion about this topic if we don’t have a mutual understanding of how the tools even work?

The code is not replaced by English prompts. The code still exists.

Re:What AI coding costs you on Saturday February 28, 2026 @09:39AM (#47195888)
It remains unclear to me why my ability to read and review code (the majority of my job for years now) will atrophy if I continue doing it while writing even less code than I was before.

If my ability to write code somehow atrophies because I stop doing it, does that matter if I continue with the architecture and strategy around coding?

The act of writing code by hand seems to be on a trajectory of irrelevance, so as long as I maintain my ability to reason about code (both by continuing to read it and instruct tools to write it), what’s the issue?

Edit to add: the vast majority of the code I’ve worked on in my career was not written by me. A significant portion of it was not written by someone still employed by my employer. I think that’s true for a lot of us, and we all made it work. And we made it work without modern coding assistants helping out. I think we’ll be fine.

Re:Another GitHub outage in the same day on Monday February 09, 2026 @09:09PM (#46954456)
Surprisingly they un-deprecated CodeCommit recently.

https://aws.amazon.com/blogs/devops/aws-codecommit-returns-t...

Re:Running Claude Code dangerously (safely) on Tuesday January 20, 2026 @09:30AM (#46692173)
Everywhere I’ve ever worked, there was always some way to access a production system even if it required multiple approvals and short-lived credentials for something like AWS SSM. If the user has access, the agent has access, no matter how briefly.
Re:I Love You, Redis, but I'm Leaving You for SolidQueue on Wednesday January 14, 2026 @07:56AM (#46615493)
Exactly, if you’re already doing it for Postgres and Postgres can do the job well enough to meet your requirements, you’re only adding more cost and complexity by deploying Redis too.
Re:ChatGPT Health on Thursday January 08, 2026 @08:59PM (#46549232)
I have a family member with an uncommon (1/1000) genetic condition. The only doctor they have ever been to that didn’t google it in the exam room with us was the PI of a study on the condition.

The best part is they always immediately start badly explaining it to us like we’ve never heard of it either.

Between that and having concerns repeatedly dismissed before we secured a diagnosis has sincerely changed my view of Dr. Google.

Re:Expired certificate breaks macOS Logitech apps on Thursday January 08, 2026 @08:38PM (#46549095)
The code signing certificate for macOS apps.
Lowering prices would also disincentivize anyone to sell their house, sort of like the recent, relatively high interest rates. Those undesirable rates have not applied significant downward pressure on prices because they’re simultaneously exerting downward pressure on the volume of houses available for sale. No one wants to sell their low rate house for a higher one.
Or a Rails app.
Re:I switched from VSCode to Zed on Monday January 05, 2026 @08:54PM (#46507817)
> My default settings are stored in a 11922 line json file. Am I expected to read that entire file to find the setting I'm after?

That’s what AI is for. Have it turn itself off.

Re:Ruby Is Not a Serious Programming Language on Monday December 01, 2025 @08:34AM (#46107209)
Sincere thanks for reminding me of my Wired subscription. I’d been needing to cancel that.
Re:The Cloudflare outage was a good thing on Monday November 24, 2025 @08:25AM (#46033849)
The hyperscalers definitely vote with their wallets.
Re:Chess grandmaster Daniel Naroditsky has passed away on Monday October 20, 2025 @04:36PM (#45648981)
> Condolences to the Russian chick and their kid.

The statement from CCC doesn’t mention him having a kid. Pretty sure he did not have one.

Welcome to Houston, TX, a monument to urban sprawl.
Re:Rubygems.org AWS Root Access Event – September 2025 on Thursday October 09, 2025 @11:40PM (#45535184)
This is not legal advice, but if you get fired and then break into the office later, the police won’t care that you used your spare key.

Seems someone took it a step further and changed the locks too.

Re:Rubygems.org AWS Root Access Event – September 2025 on Thursday October 09, 2025 @07:34PM (#45534112)
Anyone who remembers how Ruby Together was managed knows who is worse.
Re:Rubygems.org AWS Root Access Event – September 2025 on Thursday October 09, 2025 @02:54PM (#45531621)
Legal recourse is an interesting omission from their update, especially considering this was surely approved by their attorney(s).

Older »