News for hackers. Stuff that matters.

iou

Re:Suppress vulnerabilities applying Kubernetes context to scans on Saturday September 19, 2026 @12:03PM (#49767646)
Before LLMs “just-patch-anyway” was a viable strategy because of the low volume. Now it’s amplified so much that taking that approach can introduce instability when the vulnerability was not even exploitable in your usage.

Take the recent example of Copy/Fail (CVE-2026-31431) if you were to evaluate it against your k8s seccomp and noticed that the argument to the syscall socket of AF_ALG is not allowed, then the vuln is not reachable in your pods.

I’ve not used this tool (I plan to check it out), but I think contextual evaluation of CVEs is important in modern times.

Re:We Must Return to the Office to Use AI in Person on Tuesday September 08, 2026 @11:15AM (#49611568)
I thought mcsweeneys did satire?
Re: on Wednesday June 24, 2026 @10:38PM (#48668177)
What is this? It frames it like facts then you realize it’s just some religious agenda
That’s all they got?!
Re:EFF is leaving X on Thursday April 09, 2026 @11:54PM (#47713419)
There’s people still using x?!
Re:DOGE improperly accessed and shared Social Security data on Friday January 23, 2026 @03:41PM (#46737612)
What’s the reason these always get flagged? Is there something inaccurate?
Re:The Average Founder Ages 6 Months Each Year on Friday December 12, 2025 @04:17PM (#46249072)
Aww was hoping this would be a Peter Thiel immortality quest story :/
I sure hope there’s an anti-debug framework called Durin’s Bane?
Re:Apple Renames 'Apple TV+' to 'Apple TV' on Monday October 13, 2025 @02:54PM (#45572001)
Oh noes, what do I call my Apple TV now?
“Welcome to the party, pal!”
Re:Building an open-source Wi-Fi Mac layer for the ESP32 on Saturday March 08, 2025 @10:56PM (#43306055)
Timely post with the vulnerability research this week? https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-...
> I'm gonna need you to go ahead and RTO.
This is the one worth watching, it’s a total scam and PayPal is fine with it apparently.
As other commenters have said, a better solution needs to be something that is prohibitively difficult for bots to mint.

I’m sure there are a few contenders in the space but one I’m aware of is [worldcoin](https://world.org/)

Re:Dear Safari, Things I Hate About You on Tuesday July 30, 2024 @06:38PM (#41114831)
I kinda like Safari…
Re:Test Failures Should Be Actionable on Thursday May 09, 2024 @11:54AM (#40309494)
If you like this blog post I think you’d like this book https://www.artofunittesting.com/

Test naming convention defined there of

[UnitOfWork_StateUnderTest_ExpectedBehavior]

Always resonated with me as from that you could also discern bugs in test code from developer’s intent.

Re:Amazon Workdocs End of Life on Thursday April 25, 2024 @10:42PM (#40165441)
It’s truly terrible, this is the right thing.
Re:Australian Digital ID Bill to be passed without debate on Wednesday March 27, 2024 @10:36AM (#39839744)
There was some writeup from a few years back https://e-estonia.com/estonian-e-state-has-experienced-sever...

It’s not going into granularity you may want though.

Re:Macaroons Escalated Quickly on Wednesday January 31, 2024 @10:46AM (#39205158)
lol, the picture in the post is of a macaron, not a macaroon

https://www.foodnetwork.com/recipes/packages/baking-guide/ma...

Re:Apple M1 Pro Beats M3 Pro with Ableton, Logic and Pro Tools on Wednesday November 29, 2023 @08:01PM (#38467799)
Why the word Pro so many times!
Needs retitling to “Chrome and derivative browsers know your battery charging level”
Re:The Guardian bans all gambling advertising on Thursday June 15, 2023 @10:44AM (#36341234)
Canada needs to do this, it’s out of control on every media avenue.
Re:Cedar Policy Language Is Now Open Source on Wednesday May 10, 2023 @02:26PM (#35891347)
Yes&

If you like that angle I think you’d really like the part of this talk https://www.youtube.com/watch?v=k6pPcnLuOXY from Emina Torlak, goes into how they were able to have duel implementations to get both performance and formal correctness.

Did this in 2009 and it was so fun, I want to do it again when my kids are old enough to go too.
It’s not OSS :(

I figured with this type of blog post the finale would be, and everyone can try it out at…

Hopefully they do release it OSS eventually.

Older »