News for hackers. Stuff that matters.

int0x29

Possibly Russia looking to destabilize Europe.
Not sure why the New York Post is being used here considering its complete lack of credibility and the fact this story appeared in the New York Times first
Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @01:07PM (#50292418)
Because keeping the phones down longer than 5 minutes requires the carriers to still be up and retransmitting un-acked SMS messages
Re:An ad-free Android TV on Monday October 19, 2026 @11:57PM (#50161178)
Ignoring the obvious security nightmare the last thing I want in an install process is nondeterministic behavior
Except this isn't the security services they are serving it's a mercenary spyware vendor.
Re:Example.com Just Launched the Biggest Redesign in Decades on Monday October 05, 2026 @07:28PM (#49972157)
Just check the Accept-Language header
Re:Page Table Memory Consumption on Sunday October 04, 2026 @09:44PM (#49959820)
Which predates specter by three years
These three quotes make me wonder if the police are effectively searching the phone before getting a warrant

> given that oftentimes they can’t immediately try to break into iPhones that have been seized. That could be because police are still waiting for a court authorization to do so

> GrayKey Preserve and Evidence Preservation Mode are also designed to combat another iPhone feature that automatically deletes certain data — such as cached locations, and recently deleted photos and iMessages — after a certain number of days. “We're gonna be able to preserve that data for an infinite amount of time.”

> “That AFU state is captured,” by GrayKey Preserve and Evidence Preservation Mode, the employee says. “Even if that device does reboot for any number of reasons, memory maintenance or the power is lost or whatever, the AFU state is not lost. This is the true magic behind the GrayKey Preserve and the Evidence Preservation Mode function.”

The power loss tolerance in particular looks iffy. The photo and iMessage bits are a bit more problematic in that light. I get that they claim the police aren't seeing the data but if they are extracting before a warrant that is effectivly the same as pre searching everyone and promising not to read it.

AI enables more mistakes to be made faster and more convincingly. You have more stuff being generated which means more of it (by absolute quantity) is probably wrong. You have less time to review it because there is more material. Of course everything the wrong stuff included can have analysis making an argument for it attached (courtesy of an LLM). And finally people writ large tend to treat computer output as infalliable.

This increases not just the risk of war crimes and general moral bankruptcy but also of escalation (see the recent Chinese ship close call or the older, and not AI related, bombing of the Chinese embassy in Belgrade due to faulty intelligence) Also dropping multi million dollar missiles on non legitimate targets is a giant waste of money and more human analysis is likely cheaper.

This is how VTA light rail works in San José.
Re:Software Sandboxing: The Basics on Monday September 21, 2026 @02:17AM (#49783618)
By default when creating a new thread or process under Fuchsia you don't have access to the kernel. You have to create the thread or process with explicit kernel access. Pity Fuchsia kinda got killed off (Ok its not completely dead yet but its slowed a lot. There still doesn't seem to be a 2026 roadmap either)
Re:How to Write with an LLM on Friday September 18, 2026 @06:31PM (#49761132)
I would stay away from it for manuals and documentation as well. AI tends to like inserting meaningless and confusing clarification that is at best a waste of time.

Also if you don't understand what you are documenting enough to write the docs that is a problem.

Re:Growing proof that autonomous cars save lives on Wednesday September 09, 2026 @11:56PM (#49638214)
This is great until your city was built by a 50s urban planner. Past a certain amount of sprawl building functioning public transit becomes nearly impossible. LA and Santa Clara County come to mind here. LA can sort of work if you are on the metro and don't need transfers.

I kinda wish some day some dark wizard curses those two areas to lose 75% of their roads and parking lots and make everything a lot closer.

Asking for an OIG investigation would be more reassuring if Trump were not regularly firing inspector generals, replacing them with loyalists, and then using them to investigate his perceived enemies.
> It is a short sequence of raw bytes that only makes sense when read in a specific order.

This kind of useless sentence is what makes reading AI text so miserable

If you are an American company US backdoors are annoying but hard to avoid given the government will find ways to compell access anyway. Adding potential avoidable foreign back doors does not improve your security.

I wouldn't tell a Chinese company to buy from Cisco. I wouldn't tell an American one to buy from Huawei.

These self defense groups sound great until you think about all the problems with vigilante groups. Also they have a history of turning into cartels.

That and all things being equal I suspect most of the people in these groups would rather not be fighting.

This is not really a question. Accidental patent infringement is still patent infringement. Just because you used new trendy technology to do it does not mean that it isn't infringement.
The advertiser might but Time might not. Time probably wants a content licensing deal before being used for training.
Wonder how long it will take before they can render PDFjs? That is a hard target admittedly.
Re:LLM Honeypot on Wednesday July 29, 2026 @10:29PM (#49105498)
Why is it trying to load widevine?
But it is regenerated by reinstalling. So I suspect that its less fingerprint based and more of an in disk IDs thing. Which goes back to if you clear the right things while the system is not running you might be able to change it
I have a sneaking suspicion that that ID can be deleted either with a specific service not running or with Windows powered off.
Repeatedly lying about working with ACLU is an interesting choice. I'm kind of tired of the culture of words don't mean anything.
Re:HomeLab #1: MikroTik as a Home Router on Monday July 20, 2026 @12:37AM (#48974388)
Not sure how I missed the Linux binary. I can stop booting into Windows for it
Re:Minecraft: Java Edition now uses SDL3 on Sunday July 19, 2026 @02:12PM (#48970399)
This was more a hasty response with modding in mind to the parent comment of "set it as high as you are comfortable with." There are limits to how high you should go. If you are running vanilla you may not need to set the heap to 50%. Anything past 50% or 32 gb isn't a great idea generally.
Re:Minecraft: Java Edition now uses SDL3 on Sunday July 19, 2026 @02:08PM (#48970354)
I would generally not call modpack that runs well on 8gb heavy
Re:Minecraft: Java Edition now uses SDL3 on Sunday July 19, 2026 @12:34PM (#48969550)
Set JVM heap to half available memory. Mincraft is very much the kind of appication that benifits from filesystem cache to help with loading chunks.

Also if for some reason you are setting the heap size high avoid going past 32 gb unless you tune object alignment. Allocating between 32 and 47 gb will result in an effectively smaller heap. Allocating more than 32 gb can result in performance penalties.

I opened a bug in an unrelated repo yesterday and nearly immediately got hit with one of those. Kinda wish I'd downloaded the zip before it got deleted. I'm curious what the attack was.

I ignored it because it wasn't a pull request or patch file, it came too fast, and the explanation misidentified the source of the problem.

Older »