News for hackers. Stuff that matters.

icedchai

I'd say it's a "don't ask, don't tell" situation. Perhaps they monitor the sessions though and might wonder why someone is working reverse engineering a retro video game.
Re:WTF Ubuntu? on Monday November 02, 2026 @07:13PM (#50346196)
Building your own kernel is always an option, just like it was 30+ years ago.
Do we think they're not using them for personal projects? It's called "testing." ;)
I get a LOT of mileage out of my $20 plan. It's at least $500+ a week at API rates. I sometimes wonder if there's something wrong with their billing system.
Re:WTF Ubuntu? on Monday November 02, 2026 @10:25AM (#50338098)
Also, almost every other time I upgrade Ubuntu, it's a shit show. I've seen the renaming of network interfaces, loss of default routes, systemd jobs that take several minutes to timeout... It's like rolling the dice. All the problems were fixable, but still an annoyance.
Re:WTF Ubuntu? on Monday November 02, 2026 @10:14AM (#50337915)
For #2, they are clearly not "supported" in a timely manner if we're waiting 2+ weeks for a patch.
Re:WTF Ubuntu? on Monday November 02, 2026 @10:13AM (#50337904)
Inertia, I'm guessing. I have a couple of older on-prem servers still on Ubuntu LTS. Newer ones are on Debian stable.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Monday November 02, 2026 @09:26AM (#50337257)
I thought it stood for "false positives"?
For $20/month I get the equivalent of $1000’s in API usage. It’s a good value for sure. My local AI setup doesn’t get me anywhere near the productivity.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @06:20PM (#50320836)
Over the past few months I've started to install newer ubuntu kernels using the mainline PPA. However, it goes long periods of time without getting updates, so it's not really a satisfactory solution. In one case I just built the kernel myself.

LTS doesn't work if you want immediate fixes like the current environment requires.

Re:AI Isn't Replacing SREs. It's Deskilling Them on Saturday October 31, 2026 @01:17AM (#50313418)
Your site does not give me “serious” vibes. Swamp club? More like slop club.
Yep! I remember one of the ISPs I worked for paying like $15K for a Cisco 4500 router with 8 synchronous serial ports and a couple of 10 megabit ethernets. We'd laugh at the sorta bandwidth today. We had a bunch of T1s and a couple of Ascend boxes off of the ethernet.
Re:Northflank Breached on Friday October 30, 2026 @06:51PM (#50311137)
They work, but the documentation is overwhelming. With my last GCP project, I ran into security theater folks that didn't like predefined roles and demanded custom roles with dozens and dozens of granular permissions. Do you think they audited all those permissions? Nope. The simpler predefined roles were just not permitted by their checklists.
Re:Northflank Breached on Friday October 30, 2026 @06:29PM (#50310963)
Security may be solved, but IAM is still a nightmare on both GCP and AWS. Nobody understands what all those privileges / actions / conditions / etc. do. Maybe LLMs pretend to.
Re:Northflank Breached on Friday October 30, 2026 @06:15PM (#50310850)
Unless you're paying millions a month, they don't care. It can take weeks to get AWS SES (Simple Email Service) "approved for production" on a small account, and that's after dozens of emails to prove you're not a spammer. For an enterprise I was working with, I asked and 5 minutes later it was approved. No questions.
Re:If IPv4 Were Land on Friday October 30, 2026 @04:23PM (#50309649)
Not for me. I'm a holder of a legacy IPv4 block.
Re:If IPv4 Were Land on Friday October 30, 2026 @03:50PM (#50309254)
The fact that the private IPv4 block is not globally reachable counts for something. If I accidentally give you my private IP (192.168.17.102, by the way!) you can't do anything, absent other details, no matter how much misconfiguration occurs. If I give you my IPv6 GUA, there's a lot more variability.
Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @03:21PM (#50308933)
Opus 5.5 is quite effective at generating Terraform for a "typical" app that needs a load balancer, compute, and a database or two. That's the exact sort of cookie-cutter, rote work that AI is perfect for and no one is really going to miss.
True. There were few (no other?) options for routers back then. I have fond memories of locking myself out of an ISP's core router then having to power cycle it.
It's sad to hear how Cisco has fallen. I remember working on some early ISP networks in the 90's. Cisco was everywhere!
Re:If IPv4 Were Land on Thursday October 29, 2026 @06:55PM (#50297399)
Yep. I run into "enterprise" cloud environments where IPv6 is disabled, all the time. The sad thing is IPv6 is easier to understand than v4, just based on subnetting practices alone. The real problem is the average "IT" person doesn't understand hexadecimal.
Re:If IPv4 Were Land on Thursday October 29, 2026 @06:48PM (#50297328)
Blocking /128 is unlikely to block anyone for very long around here. Both the major ISPs give out /56 blocks with prefix delegation. In almost 4 years, mine hasn't changed.
Re:If IPv4 Were Land on Thursday October 29, 2026 @06:44PM (#50297287)
Most IPv4 "security" is a side-effect of NAT. NAT was not intended as a security feature, but it does provide a level of security in the common consumer implementation (PAT, single external IP, unroutable internal network.)

Otherwise, what are the practical differences?

Re:If IPv4 Were Land on Thursday October 29, 2026 @09:50AM (#50289034)
A lot of the original /8 holders have sold off chunks to AWS and other cloud providers.
Re:If IPv4 Were Land on Thursday October 29, 2026 @08:57AM (#50288221)
This seems achievable if you can figure out how to fit 64-bits into 32. ;)
Re:About the compromised eMudhra intermediate CAs on Thursday October 29, 2026 @08:10AM (#50287709)
Given how infrequently it’s used, probably?
Re:About the compromised eMudhra intermediate CAs on Wednesday October 28, 2026 @09:21AM (#50273118)
Probably they didn't want to hold up the 27.2 release by throwing this in??
Re:Apple introduces the new 14‑inch MacBook Pro with M6 on Tuesday October 27, 2026 @07:43PM (#50267464)
The only reason I upgraded from an M1 Pro to an M4 Pro is because I wanted more RAM. The processor itself was still plenty fast.
Re:Tailscale SSH: Investigation and remediation update on Tuesday October 27, 2026 @05:57PM (#50266416)
I mostly do it to quiet down the noise from the non-stop bots and scanners.
Re:Tailscale SSH: Investigation and remediation update on Tuesday October 27, 2026 @05:31PM (#50266132)
Just moving SSH off a default port gets you 98% there.

Older »