News for hackers. Stuff that matters.

janalsncm

The first step to improving something is to show there’s a problem in the first place. For those who believe sidewalks are for people, she has demonstrated that there is a problem.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @07:00PM (#50297458)
Security through decentralization, if there is such a term.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:56PM (#50297407)
People got out of crypto after the Mt Gox thing. The ones who stayed accepted the risk.

There is selection bias in play now. The remaining people are naturally more risk tolerant. So I agree this second time around, no lessons will be learned.

I agree with everything you said, but all we know is that she had business meetings with him.

The picture in the article has a bunch of other people around them, in a bar/club. Pretty sure he wasn’t laying out the blueprints for the next chip right then and there.

A couple of questions after reading this article. The Post is not exactly top notch journalism.

First, does her activity actually fit the definition of “espionage”?

Espionage is the act of secretly gathering confidential, classified, or proprietary information without the owner's permission

The most important question is what she actually sent and how secret it was. Most companies have levels of secrecy ranging from non public to highly sensitive. For example, schematics of their chip would be concerning.

Also, this seems pretty different from setting up a mic behind a TV.

Second, although the article tries very hard to imply there was some kind of infidelity, adding irrelevant details about Jensen’s family, I don’t know that any of that happened.

Maybe I should’ve been more clear. Your argument above relies on “I’d be shocked if…” which is not evidence in and of itself.

Most American employees are at-will, and the contract in the MSFT lawsuit above was an at-will contract which is why they could be terminated, as you said.

Unless you can provide some other evidence that MSFT employees at not at will, it seems reasonable to believe they are, in which case providing the generous severance they did was not legally required.

Why did LLM writing get so weird and bad in mid-2026?
Only a MSFT employee can say for sure what their employment contract is these days, but I found an old court case where they used pretty standard “at will” language.

https://ogletree.com/insights-resources/blog-posts/no-breach...

Re:Attention Is Not What You Need on Sunday October 25, 2026 @10:32PM (#50238408)
In Qwen 3.5, 75% of the layers are linear attention. I think the theory is that linear attention is usually enough, but some regular attention layers help to handle more sophisticated long-range relationships.
Re:Show HN: Steal My Bitcoin on Sunday October 25, 2026 @01:29AM (#50228607)
The average PHP server that is unpatched now will remain unpatched after OP publishes the exploits because that server’s admin is clearly not scouring the web for security vulnerabilities.

Also, an increasing number of admins of PHP servers probably are no longer alive, so they will not be applying security patches.

Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @06:24PM (#50226025)
Every reason you just gave for not hacking this server is also true for servers which don’t have a $500 prize, which is almost all of them out there.
> The DMCA in the US and similar anti-circumvention laws around the world (primarily EU) make doing that a serious crime

Yes, this is the main reason why I mentioned the cartoon episode was unrealistic fiction.

I’d imagine a paid service that did this could be illegal. But prosecuting people who did this to their own hardware would be essentially impossible.

Maybe not the same exploit but I found another guy who was also able to debloat his TV: https://github.com/jss8649/quiet-tizen
There is a Rick and Morty episode where Rick opens up a store that removes the curses from free items the Devil is handing out.

(Surprisingly, the Devil does not consider lawyering up, which is odd because I would expect the Devil to be pretty familiar with lots of lawyers. It’s fiction of course.)

It would be great to use AI to do something analogous with these spy TVs. I would be very interested in stripping the “smart” crap out of my TV to turn it into a kiosk.

For what it’s worth, they are doing that in limited areas. For example the Figma/Claude design controversy.

But you are right, building a business is a lot more than building a product. It’s also a lot more than just name recognition because they have no shortage of that either.

The standard analogy is selling shovels, not hamburgers.

OpenAI is selling people access to a tool to build things. OP is asking why they don’t just build the things themselves, which I believe is a fair question.

The workers don’t seem to be pacifists. They seem to be opposed to some combination of genocide, autonomous weapons, privacy, or the military industrial complex.

Checks and balances on the ability to wage war are not a bad thing, and given the popularity of the US’ most recent entanglement I’d imagine most Americans would prefer more checks, not fewer.

> I guess I don't see how this is news worthy?

At the risk of being overly reductive, a story is newsworthy if the editor decides it is. So one question you could ask is, why did the BBC editor think this was newsworthy?

Ah, interesting. Maybe it should be called “slippery matter” then.
I don’t really understand. Dark matter is in most galaxies interacting gravitationally, but not these three. Their idea is that somehow there was a collision event which stripped the galaxies of their dark matter, because the regular matter got tangled up but dark matter somehow didn’t.

But if dark matter is also interacting gravitationally, why wouldn’t it also be tangled up? And is that something we have seen in other collisions ever?

Re:It's still OK to enjoy programming on Monday October 19, 2026 @05:55PM (#50158628)
Well there’s at least two reasons people might not buy your cake: they don’t want cake, or the cake is bad.

For the first group, it doesn’t matter how good your cake is. If you spend a year perfecting it, you won’t sell them any more cakes. And for many products, this group is basically 100% of customers.

Re:Namecheap just seized and disabled all my domains on Sunday October 18, 2026 @02:55PM (#50144116)
Have you dealt with their customer service? Namecheap also seems fine to me, but I have also never been in a situation like OP’s.
Re:Namecheap just seized and disabled all my domains on Sunday October 18, 2026 @02:52PM (#50144104)
No, I don’t see how one follows from the other. Most of us are not Russian and don’t have websites NC would consider relevant to the war.

On the other hand, most of us probably can imagine not checking our email for three days, getting caught up in some automated purgatory, and experiencing customer neglect. We can imagine this because it is the default customer experience these days.

The point is that the contrapositive to GP’s statement does not hold. In other words, if the AI is cheap they’re training on your data might be true, but if the AI is expensive it does not imply they are not training on your data.

Anthropic has the most expensive models and train on your data by default. The fact that OpenAI also does shows that the cost of the AI doesn’t seem to be a deciding factor.

Just an unrelated PSA that Anthropic trains on your Claude code sessions unless you disable it:

https://www.anthropic.com/news/updates-to-our-consumer-terms

Re:Hello Toronto – Waymo Is En Route on Friday October 16, 2026 @12:48PM (#50120850)
> Two years ago, the family of four was on their way to the San Francisco Zoo with their two young children when they were killed by Lau, driving 70 miles an hour in the residential area of West Portal in San Francisco.

Horrifying. Life is short, enjoy what you have.

It would be useful to know whether the same trends have happened in other places. If iPhones are causing people to be less social, we should see similar trends in France and Japan.

If we didn’t see the same trends, it points to reasons more specific to the US.

You probably don’t hear about the smart ones.
Ok, on the one hand to have one bot hitting your website to populate some kind of slop newsletter is pretty annoying.

On the other hand, “multiple times per minute” doesn’t seem that high? Even if it was 60x per min that’s fully within the limits of what a 2015 laptop in the closet can handle.

Older »