News for hackers. Stuff that matters.

hecturchi

Re:I'm a Proton employee and I'm breaking my silence on Saturday October 31, 2026 @03:57PM (#50319517)
ProtonMail mangles emails in a way that they are impossible to download as they were delivered to their servers, meaning MIME signatures cannot be verified, because the emails are altered.

Old issue, affects also web UI not only bridge:

https://web.archive.org/web/20240221213617/https://github.co...

Would you use a secure email service that breaks signature verification on received emails? There were a lot of smaller and bigger things along the years, but realizing I could not verify authenticity of signed emails for apparently no reason pushed me over threshold to leave them.

The newer system (ERTMS) is installed already and tested, currently being certified for operation. So yes, work was done on that front.

It is not more secure per se, replacement is done as part of LZB being phased out Europe-wide.

Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @03:02PM (#50279138)
Spain is not in riot mode and the two violent riots are not related to political protests nor have political goals.
Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @03:00PM (#50279111)
The operation is fully automated until the point when the system breaks and the human controller orders manual overrides.

They could have waited for recovery etc. The issue is they switched to manual and then botched it. We don't know root cause yet (bad management, timetable pressure, lax work culture...?).

Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @02:54PM (#50279046)
They told the train to drive "as normal". This was a controller mistake as the procedure says they could only drive in visual/slow mode.

Same mistake was made with other train and the driver replied that that was not allowed, and the operator corrected accordingly. But the driver of the train that crashed didn't raise the issue.

As it looks now the controller made a mistake when taking over manual control of the segment after systems failure ("continue as normal" vs "continue slow"). The train driver probably should have also known they should not drive at normal speed without safeties in the segment, but I guess they trusted control had cleared previous trains.

Between 10-20 minutes control room did not realize a train was approaching an occupied section where the other train was holding on a red track signal.

Human error but signals serious deficiencies at protocol, oversight etc. In control room.

Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @02:35PM (#50278756)
There was a human override after all trains stopped.
Re:Spain train crash: 'At least 10 dead' in high-speed collision on Wednesday October 28, 2026 @02:34PM (#50278737)
All trains stopped. Then a train was cleared to continue full speed while next one was waiting on a red light.
Re:Fridges in French supermarkets hit by cyber attack on Monday October 12, 2026 @02:47PM (#50060966)
To be clear, they didn't monitor it 24/7, otherwise they would have noticed the fridges were grilling the pizzas.
Re:Car is a smartphone on wheels. Here's who's listening on Sunday October 04, 2026 @03:29PM (#49957014)
Reasonable explanation. Why would they store them though once the traffic info is provided? I was hoping it has a "purpose", i.e. making the voice assistant more intelligent/helpful. But I need to ask about it.
Re:Car is a smartphone on wheels. Here's who's listening on Sunday October 04, 2026 @03:24PM (#49956977)
You write to the email address in the privacy policy and ask for your data. Your LLM can assist in making it sound formal.
I mixed FA and MTP wrong in my original post, thanks for pointing it out.

My experience is that draft-mtp=2 gives 25% improvement in tokens/s but the model is unable to call tools with the right arguments reliably. I have since then gone for smaller quants at draft-mtp=1 and that problem is at least gone so far.

An agent needs to repeat tool calls in the right way, so cannot penalize repetition. This however leads to the agent retrying the wrong calls constantly.

I bet! Just 2x24GB is not super basic hardware imho.
Sorry, edited
- Tiny context size or hours to load it

- Hard to benefit from thinking and preserve thinking given token cost.

- Low quants reduce accuracy heavMTP draft can make it make the same mistakes all the time when calling tools, formatting output or following basic guidelines. Otherwise 2x-4x slower.

- K/V quants probably quantized too make things less accurate.

Useful would be combinations with:

- Full context size so it can code and think a bit.

- Draft MTP <= 2 so it doesn't trip

- Q4 quants or better so its accurate

- q8 cache or better so it stays accurate.

- 20 token/s so it finishes while reviewing previous step.

- 1000 tokens/s context load so compactions don't waste 10+ minutes.

- And enough left RAM for 50+ context checkpoints so that it can progress quuckly.

Closest you have is Qwen3.6-35B-A3B-MTP.

Latest gens (Qwen3.8 and co.) are just too big for low specs. 27B dense models seem to be ok for integrated >=92 GiB RAM.

Source: I have low specs and tried them all for agentic use + coding.

Re:Car is a smartphone on wheels. Here's who's listening on Sunday October 04, 2026 @12:32PM (#49955366)
I obtained my data via GDPR request from Audi. Despite having disabled telemetry and location services, remote access and so on on certain date, the car kept sending every destination address I wrote on the navigator to the motherbase. Other location tracking services did stop (i.e. no live positioning).

I'm still clarifying the purpose of this before making a complaint to the data authority.

Because if something is free, you are the product.
It is obvious. You could simply do it. One can easily arrive to that conclusion. We can without effort follow the logic here. Implementation is therefore left as an exercise for the reader. /s

Now seriously, managing sovereign borders, enclaves and the people in them is not like playing monopoly. Except for Trump, that is.

Re:Middle schooler finds coin from Troy in Berlin on Friday April 17, 2026 @12:34PM (#47807760)
As a child I was walking down the street and kicked something by chance that sounded metallic. 150 year old coin, irrc. Just there on the asphalt next to the sidewalk.

Unfortunately bronze, with trimmed edges, common mint and worth very little. But if you tell me someone just stumbles onto and old coin in the street just lime that, I pretty much believe it.

It must be great to live in a country where you can change your company address without any paper trail whatsoever: no rental contract, no utilities, no entry in the business registry, no acknowledgement from the tax office and nothing you can provide as proof or anything.

I guess the downside is, well, this, specially having thought it is a good idea to rely on Wise as first and only option for business banking, with their reputation...

Re:If You Must Use Signal, Use Molly on Saturday November 29, 2025 @03:09PM (#46090347)
Use Molly but be concious about relying on an unofficial fork controlled by one guy that can update itself anytime and has access to everything Signal does.

Also, don't talk about Molly. It's the best you can do for Molly.

I used Sailfish.

Then I discovered that "encryption" for them was using Luks with the numeric unlock pin as encryption key (which most people sets to 4 digits). They marketed themselves as a secure OS.

No passphrase option. I brought up that it was trivially brute-forceable in the forums and they vehemently fought the idea. My post eventually disappeared.

They were doing government contracts in Russia etc. Iirc. I put some dots together and phone rests in a drawer ever since. I have no idea how things are now though.

See other comments. The amount of drama and behavior of some people means is just best to stay away.

Also, upgrades can bring issues and asking for help is super tricky as you may get banned for asking the wrong way. So better to not upgrade if it works.

I have Valetudo on a Dreame X40 Ultra and very happy.

My recommendation is to flash and GTFO forever. Never upgrade, never ask anything, never read anything other than the install docs. Disregard pointers to join Telegram. Do not read release notes. And donate some money for the trouble if things work. That's your path to maximum happiness with Valetudo, blissful ignorance.

One day perhaps there will be a fork and things can be normal.

Re:Lego Theft Ring on Friday October 24, 2025 @03:11PM (#45698092)
I doubt we see many knee jerk mistakes on this one...
Re:Environmental Regulations Are Baking Europeans to Death on Monday September 08, 2025 @02:56PM (#45172303)
> The American-European disparity along this latter dimension could hardly be greater: nearly 90 percent of U.S. households have air conditioning, whereas less than 10 percent of European homes do. The productivity gap between the U.S. and Europe helps explain this disparity.

Yeah, it must be that since US and EU are identical otherwise.

Re:Google Pixel 10 series review: Don't call it an Android on Wednesday September 03, 2025 @03:34AM (#45113204)
The main use of Pixel phones is that you can put GrapheneOS on them and regain full ownership of your hardware in a completely painless way. Plus adding a huge device security bonus on top.

You can have a profile completely de-googled and another one with Google Services for apps that need compatibility but remains off most of the time. You can uninstall Google too.

Owning your devices is a superpower that 99.9% of people don't have, but you can have it. The irony is that it's thanks to Google devices. Let's see how long it lasts.

Re:Do I not like Ruby anymore? (2024) on Tuesday August 26, 2025 @06:46AM (#45024779)
For internet points!
Welcome to responsive design!

It's pretty slow yes. It's one of the worst RAM eaters and has been feeling very sluggish for a long time.

No, they don't. You need to read the article. It says such devices cost $20k.

Older ยป