News for hackers. Stuff that matters.

hun3

Re:Interactive pattern discovery in binaries (FF-16-TUI) on Friday August 28, 2026 @05:16PM (#49484346)
I believe r2 can already highlight same 16-bit patterns, am I missing anything?
Browsers (WHATWG) uses UTS #46, not IDNA2008.

ada-url (https://github.com/ada-url/ada-python) closely tracks WHATWG spec and thus less likely to lead to parser differential vulnerabilities when interoperating with browsers.

Re:How the FSF sysadmins block botnets with reaction on Tuesday July 14, 2026 @10:54PM (#48915696)
> The only downside is that it won't stop UDP packets from getting to a UDP listener. There will not be a response but the application will still see it.

Try:

  ip route add src ${net} blackhole
Re:Codex logging bug may write TBs to local SSDs on Monday June 22, 2026 @10:40AM (#48630820)
> The OS is a thin layer providing an abstract and consistent interface regardless of the hardware configuration.

This is called a hardware abstraction layer, not OS.

https://en.wikipedia.org/wiki/Hardware_abstraction

Re:Deno Desktop on Monday June 22, 2026 @05:16AM (#48627755)
System WebView but Electron is now the system
Re:Codex logging bug may write TBs to local SSDs on Monday June 22, 2026 @05:14AM (#48627737)
The operating system has historically trusted the applications not to do dumb things too much.

Only now we're witnessing the consequences much more frequently thanks to accelerated slop.

Re:Zenzizenzizenzic on Saturday June 20, 2026 @01:46AM (#48606665)
(zenzi)³

I mean zenzi-cubic

China has proxies that sell cheaper access to frontier models in exchange for permission to train on your data.
Right.

As an example: Oracle and PostgreSQL don't have dirty reads: READ UNCOMMITTED does nothing. MySQL's concurrency model depends on the engine.

Re:Ask HN: Why is the HN crowd so anti-AI? on Saturday June 06, 2026 @12:58AM (#48421543)
What keeps users themselves from vibe-coding their own software?

If you don't own quality, why should I pay? You're just a middleman at that point.

If you squint hard enough, you'll notice your bank account serves as an IPC semaphore replenishing API credit balances.

Your wallet is now a real-time communication channel.

Re:Opaque Types in Python on Wednesday May 27, 2026 @12:49AM (#48289779)
_RealShipOpts has a constructor.
With consent, yes.
Re:CopyFail: From Pod to Host on Wednesday May 20, 2026 @08:26AM (#48206594)
No, "virtual machine" alone doesn't make things safer.

Shrink your attack surface.

Use a completely locked down seccomp. Use nsjail or gVisor for containers. Use microvm or libkrun for full OS.

Lesser attack surface is what matters. Virtualization is only half of the story.

Avoiding problems outside your business problem domain, and can therefore guide the AI more effectively towards building the right thing.
Re:Ask HN: We just had an actual UUID v4 collision... on Saturday May 09, 2026 @06:50AM (#48073868)
(Note that this still assumes that each biased-coin toss is i.i.d.)
Re:How OpenAI delivers low-latency voice AI at scale on Monday May 04, 2026 @07:53PM (#48016450)
They are orthogonal.

Suppose you have 100ms audio latency and no wait time. Then, natural pause will trigger response immediately but you won't notice it has started until after ~200ms (round-trip time). Twice as annoying.

But it's still a bit more difficult to sue them for leaking your company's data.

At least for now.

Re:A.I. is creating engineers who can't think without it on Sunday April 26, 2026 @04:35PM (#47914092)
You can write unambiguous (UB-free) code and the compiler's output will be deterministic. There will even be a spec that explains how your source maps to your program's behavior. LLM has neither.

Also, if you need to control performance, you still need to know how CPU cache and branch prediction works, both of which exists at the abstraction level of assembly.

Re:A.I. is creating engineers who can't think without it on Sunday April 26, 2026 @04:24PM (#47913938)
How can you read a language you didn't learn?
Re:OpenClaw isn't fooling me. I remember MS-DOS on Wednesday April 22, 2026 @02:46AM (#47859924)
PatchGuard would like to have a word with you.
Re:OpenClaw isn't fooling me. I remember MS-DOS on Wednesday April 22, 2026 @02:42AM (#47859894)
Ironic, since Unix is itself an embodiment of "worse is better."
Re:It's OK to compare floating-points for equality on Saturday April 18, 2026 @11:58AM (#47816913)
I used floating timestamps as some kind of an identity. If there is ever a conflict, I just increase it by 1 ulp until it doesn't collide with anything. Sorry.
Re:Safe ways to do things in bash (2023) on Wednesday April 01, 2026 @02:08AM (#47597408)
In Python, `shlex` has utilities for quoting and tokenizing strings for POSIX shells.

> Documentation: https://docs.python.org/3/library/shlex.html

(Windows users: CMD is hopeless. Sorry. Try powershell.)

Re:Doom entirely from DNS records on Thursday March 26, 2026 @02:56PM (#47534265)
Finally, a DOOM download that bypasses captive portals
Re:Autoresearch on an old research idea on Monday March 23, 2026 @03:40PM (#47494161)
> There are better techniques for hyper-parameter optimisation, right?

There always are. You need to think about what those would be, though. Autoresearch outsources the thinking to LLMs.

This is exactly what subinterpreters are for! Basically isolated copies of Python in the same process.

https://docs.python.org/3/library/concurrent.interpreters.ht...

If you want a higher-level interface, there is InterpreterPoolExecutor:

https://docs.python.org/3/library/concurrent.futures.html#co...

Re:Astral to Join OpenAI on Thursday March 19, 2026 @06:13PM (#47447056)
> why we keep trusting venture capital to be the community's stewards I have no idea.

They bought the trust.

Re:Shall I implement it? No on Friday March 13, 2026 @10:10AM (#47364713)
Well, tell that to OP, not me.
Re:Shall I implement it? No on Thursday March 12, 2026 @11:23PM (#47360325)
Does appending "/genq" work?

Or use the /btw command to ask only questions

Older »