News for hackers. Stuff that matters.

its-summertime

Re:Forging a Microsoft Edge Full Chain with Logic Bugs Only on Friday October 30, 2026 @07:09PM (#50311317)
I agree with you, I probably should have said that I feel negative towards it instead of just saying "bad"
Re:Forging a Microsoft Edge Full Chain with Logic Bugs Only on Thursday October 29, 2026 @04:45AM (#50286124)
I always felt bad about the whole site/browser cross integration that chrome and edge and others do. Now I feel really really really bad about it. Can almost see the marketing team's emails about what features to add, and the developers unwantingly writing the code not expecting such things to open so many holes
I suspect that the video originally posted on Weibo, the video in which all the text is in Chinese, might not be aimed at Americans. I think they are targeting a different market with this. Perhaps China.
Re:Wikipedia's Cleanup of AI-Generated Content on Tuesday October 27, 2026 @04:21PM (#50265235)
There was an article, can't remember which, which had an edit that was almost all AI contributions, and added very very little value to the article itself. Looked into the editor, they were participating in one of Wikipedia's school-related programs. I think it makes sense that going out of their way to get contributors who do not care about a topic to contribute, would have this result in part.
Re:Using Env(1) in the Shebang on Tuesday October 27, 2026 @12:04AM (#50254595)
While not in POSIX, some env implementations have a `-S` flag, to split the first argument into separate arguments before evaluating
Re:IKEA – 3D Guide on Tuesday October 20, 2026 @05:23PM (#50172885)
I've personally been calling it "bad"
Re:Gnome OS Preview on Saturday October 17, 2026 @06:02AM (#50129596)
From what I can tell, GNOME OS doesn't just ship latest stable GNOME, but also goes out of its way to try to ship the latest stable Linux-ecosystem concepts too.

Its a lot harder for Fedora since they need to support 43 upgrading to 44, but also 42 to 43 to 44, 41 to 42 to 43 to 44, etc. And in some cases there is enough of a difference in those upgrade paths to cause issues, even with the immutable Silverblue (I know since I got bit by an issue that began ~2+ versions before the issue ended up being triggered!).

"You may have to re-install in the future" gives GNOME OS a massive amount of flexibility right now, when GNOME OS has fully stabilized, plus 10 or 15 years, Fedora Silverblue and GNOME OS will probably be in the same place, but until then, GNOME OS just benefits from starting later.

(Not saying either is better than the other)

Re:LittleJS is 2D and 3D now on Friday October 16, 2026 @12:35PM (#50120617)
> do YOU feel deeply about EVERYTHING EVERY OTHER PERSON cares deeply about?

No. I was expressing that I wasn't feeling great about how development journeys are going to unfold in the future.

> Should other people be saddened because its-summertime doesn't care about their favorite TV series or how to crochet some particular object?

I hope my friends care about how I feel! And I hope to care about how they feel about things too.

> Doesn't this appear patently insane to you?

No.

Re:Has AI Tells on Wednesday October 14, 2026 @03:10PM (#50093291)
For those wanting something to play with, https://adamdunkels.github.io/is-it-slop/ from May 2026, comes to mind.
Re:LittleJS is 2D and 3D now on Wednesday October 14, 2026 @02:56PM (#50093061)
It depends on how you define "Gamer".

Would Duangle's tale for NOWHERE have made a diversion into making the programming language NONE if AI was involved?

Would Voxel Quest have been nearly as interesting if all the dev blogs were just "I asked claude to do X, Y, and Z"?

I don't doubt that most don't care, same with how most people fairly don't care about most things, but I do think those that like to immerse themselves in the whole journey as well as the result are probably not feeling great. At the very least, this one doesn't feel great.

Re:Lobbying is corruption on Saturday October 10, 2026 @10:39AM (#50033459)
https://lobbyingdisclosure.house.gov/lookup.asp?reg_id=37776 MADD has registered themselves as a lobbying organization.
Re:Lobbying is corruption on Saturday October 10, 2026 @10:30AM (#50033388)
> The CPI ranks 182 countries and territories worldwide by their perceived levels of public sector corruption.
Re:Typesafe AI raises $870M at $7.5B on Saturday October 10, 2026 @09:01AM (#50032522)
Isn't that just normal for Hacker News?
Re:Deno Is Joining Cloudflare on Friday October 09, 2026 @12:52PM (#50023301)
If I remember correctly, Deno was always priority number 1 due to having a permissions system. Bun's removal due to the rewrite had people complaining using Deno as the focus as Deno's development shifted towards being LLM heavy. Node now supporting permissions would likely be the priority now.
Re:Deno Is Joining Cloudflare on Friday October 09, 2026 @11:33AM (#50022023)
The majority of the last year's development has been via LLM. I don't think anyone is going to want to fork that when they can just tell an LLM to do whatever and get the same result
Re:Deno Is Joining Cloudflare on Friday October 09, 2026 @09:36AM (#50020362)
Disappointing. Everything I want to express about this is impolite.

I guess I can say that this means Deno won't ever have a much needed Python 3 moment.

Re:MXC - a sandboxed code execution system on Friday October 09, 2026 @07:11AM (#50018869)
I feel a better metric is `lines changed / time` as that affects what will be audited as time goes on

That being said, a month of MXC has more line changes than 2-3 years of runc

Re:Example.com Just Launched the Biggest Redesign in Decades on Tuesday October 06, 2026 @03:19AM (#49975278)
The problem is pinging 1.1.1.1 can end up hitting a really really close-by server. You could be having ISP issues and 1.1.1.1 could end up being closer to you than the issue is, so you get okay ping results but still unable to access resources on the other side of the issue
Re: on Wednesday September 30, 2026 @07:34PM (#49915845)
I think speed would be irrelevant, or perhaps would discourage deep engagement with the problems.

I think presenting it as AI can be wrong is not as valuable as presenting it as developing the ability to question what one is told. (e.g. Verizon Math)

Re:Nvidia wants to put a watchdog chip next to every AI agent on Monday September 28, 2026 @06:54PM (#49885602)
Every major AI company already has a mirror of the wider web, and they have already started using that. Its already a solved problem except for the seemingly extreme desire they all have to not use firewalls
Re:We have a year to fix security everywhere on Tuesday September 08, 2026 @03:21AM (#49606700)
I guess the year mark is when things go from bad to worse? Instead of the financially motivated groups currently doing their work, it ends up being random people being able to say "Hack my ex's website" to a box they just bought and ran a program they downloaded onto it.
Re:Intellectual Fly Is Open on Sunday September 06, 2026 @09:03AM (#49586177)
Personally I wouldn't be writing an open letter to what is effectively a bunch of spam bots. I don't think they'll read it, or care.
Re:1Password Replied to My Disappointment on Friday September 04, 2026 @03:18AM (#49561524)
Was Guido designing Python for only his own sake, during his time as BDFL? As far as I know, he was not doing that.

Additionally, Guido never had exclusive control over the Python Software Foundation, from what I can see.

If Guido was the only person responsible for the Python Software Foundation, its only board member, its only share holder that the board is responsible to, and was designing Python for the use-case of a single person, himself, and he was soliciting donations, then yes I would consider those donations to effectively be a contribution to an individual. Of course I would.

Re:1Password Replied to My Disappointment on Thursday September 03, 2026 @10:31PM (#49559839)
> Our contribution is made to the Omacom Foundation, not to an individual

However, from DHH:

> Before this can be an amazing system for everyone, it first has to be an amazing system for me, personally.

By DHH's own words, all money currently is 100% spent on DHH's desires. That is a contribution to an individual.

Oh that is very exciting to hear!
As far as I know, only Motorola is given access to the driver source code for all the chips, which then as part of using it, they are obligated to release it, which then GrapheneOS can then access and use it.

As a result, Motorola's software support is just as important as Motorola's hardware

For those with difficulty accessing:

- - -

From: Anthony Hurtado <[redacted since hn has no scrape protection]>

vpk_read_packet() divides vpk->last_block_size and (par->block_align - vpk->last_block_size) by par->ch_layout.nb_channels without checking for zero.

While vpk_read_header() validates nb_channels > 0, the codec parameters may become zero through format probing misidentification (VPK probe score is 2/3 of AVPROBE_SCORE_MAX) or codec parameter reset, causing SIGFPE.

Fix by:

- Checking nb_channels != 0 before division in vpk_read_packet

- Returning EOF for empty last blocks (last_block_size == 0)

- Validating block_count > 0 in vpk_read_header

- Validating last_block_size <= block_align in vpk_read_header

Found by fuzzing with libFuzzer + AddressSanitizer. Reproduces with 10 distinct inputs.

[patch redacted for brevity]

Re:Mechanical Turk shutting down September 30 on Wednesday August 26, 2026 @10:36PM (#49458869)
There is training systems and validation of skills in mturk iirc: for tshirt folding, you'd be given fake setups to be able to get used to controlling the robot, if you can't do it, you won't ever get assignments to do it. For traffic overrides, you'd be tested on having correct knowledge, and once again given supervised tasks to show you can actually be trusted (and there would be safety systems, elevating tasks that can't be performed at your level to people who can, etc)

The worker needs to do a bunch to opt into any given work group, which makes the (lack of) payments extremely unreasonable on top of everything else

Re:VMs won't contain cyber-capable agents on Wednesday August 26, 2026 @04:54PM (#49455764)
> but rather that we need to focus on finding and fixing vulnerabilities and misconfigurations in these environments.

And how long will that take? It's already well past due.

Older »