News for hackers. Stuff that matters.

jcranmer

Re:US boy names that became girl names and vice versa on Tuesday November 03, 2026 @09:08AM (#50352189)
Scotland and England were not united into a single Kingdom of Great Britain until 1707 (under Queen Anne), and it did not become the United Kingdom (of Great Britain and Ireland) until 1800 (under George III). So technically the "U" actually refers to union of Britain and Ireland, not England and Scotland.

Before the Acts of Union of 1707, England and Scotland were not united into one kingdom, but two kingdoms that shared the same king under a personal union.

Re:Frontier Airlines Likely Breached on Sunday November 01, 2026 @01:34PM (#50328305)
There's been some modifications to that image for the AI era. I don't know where the original source is to properly credit the creator, but one example is here: https://www.linkedin.com/posts/darshan-j-baligeri_all-modern...
Re:Switch Lowering in GCC on Saturday October 31, 2026 @12:17PM (#50317489)
Compiler optimizations are a trade-off between compile time, runtime, and code size, mediated by the availability of developer time.

Perfect hashing for switch tables is useful mostly for large, sparse switches, but hot large, sparse switches are rare, and the closest examples I can think of (e.g., parse tables) are themselves likely generated from other tools, which could itself be changed in lieu of the compiler. It really doesn't come across as a useful optimization to try implementing in a compiler.

Re:Proton's CEO Cancels AI 'Re-Interviews' on Friday October 30, 2026 @02:43PM (#50308378)
To hammer this point home:

The sender and the receiver both have a copy of the email. The receiver's MTA pretty much has to have a copy of the email for sane antispam to work. Email itself intrinsically leaks the sender, recipient, and time as part of the SMTP message, which means anyone with access to email server logs can recover this information no matter how much security and encryption you try to put on top of it, and that means that whatever three-letter agency you care about probably has access to all the information they want anyways.

The only meaningful difference in security is going to be whether or not the outgoing MTA is going to try to use (or even require) TLS on the MTA-MTA connection, and what level of encryption is applied to the at-rest email.

Personally, I'm not too fussed about a mail system administrator being able to read my email because of the BOFH principle... it's not worth the sysadmin's time to read my email, because it's just not interesting.

Re:Pico CSS is no longer maintained on Friday October 30, 2026 @02:04AM (#50300370)
Yes, people use it in practice. But it's not being used for the thing you're thinking of.

RGB is fine for specifying a color. I mean, there are issues with RGB colorspaces and whatnot, but if you need to pick the background of a page or the color of text, there's no real reason not to use RGB.

The problem with RGB is that it is really bad at color interpolation. You can't take the average of the red, green, and blue components of two colors and expect a usable color in the middle to come out. Instead, you need to move to a perceptual color space. CIELAB is the old perceptual color space of choice; Oklab is the new perceptual color space of choice.

Color interpolation is needed for things like gradients or information visualization, where you need to say things like "20% of the way between color A and color B".

Re:Git for US Legislation on Tuesday October 27, 2026 @11:39PM (#50269104)
I think it's useful to link to a lawyer's take on the utility of a similar tool that was built by somebody else here: https://bsky.app/profile/questauthority.bsky.social/post/3mj...

The tl;dr is that doing git-style change-tracking of the legislation isn't as helpful in practice as you'd think (especially because a lot of the very basic change-tracking is already available in the existing tools that lawyers use!).

Re:Git for US Legislation on Tuesday October 27, 2026 @11:29PM (#50269030)
Nah, it's pretty damn common in any legal system.

If you've got a statute like "no vehicles in the park," the fundamental issue is that you have to interpret "what is meant by 'vehicle'?" and no legal drafting is going to be good enough to actually cover all the possible cases well enough. The main difference between a common law and a civil law system here is that in a common law system, you have to cite the previous similar cases (because precedent is binding) whereas in a civil law system, you're merely using those previous similar cases as persuasive evidence. At the end of the day, it boils down to arguing for your interpretation.

And in my experience working on language standardization (which is closer to a civil law system than a common law system), it's fairly often that I have to resort to looking up not just when a change in the text occurred, but dive deep into the discussions of the paper proposing the change to understand what the committee thought it was doing with the change. The complexity of law is fairly similar--the changes to the law themselves often require understanding the legislative and interpretative history of the law to understand what the intent of the drafter was to be able to rule on how the law is extended to an unanticipated scenario.

Re:Amazon Is Gutting Its AI Division After Sustained Failure on Tuesday October 27, 2026 @10:00PM (#50268469)
There is definitely an unanswered question as to what the metric, but no, JavaScript is not 90+% by any useful metric. Most code is not a website, and JavaScript penetration outside of the client-side code on a website and some GUI applications on various operating systems is almost nonexistent.

Remember that all of the code in operation includes code like the microcontroller in your mouse, the hundreds of chips in your car doing things like keeping the engine running or "window goes up when I push the button," the DVD menu (which is actually Java code), not to mention all of the staid systems responsible for things like writing your paycheck every other week.

Re:Lula wins election after final votes tallied on Monday October 26, 2026 @08:21PM (#50253125)
The argument would be that you were elected to the office of Vice President rather than the office of President.
Re:US designates helium as a critical material on Monday October 26, 2026 @07:22PM (#50252587)
I'm not really sold on the idea that nuclear weapons are a salve against conflict. The only real examples are North Korea not getting invaded and maybe tamping down some of the India-Pakistan conflicts (note that India and Pakistan have had armed conflict with each other since both acquired nuclear weapons!). On the contrary, we can see times where nuclear weapons seem to have emboldened leaders--Putin has definitely played the "you can't retaliate against my aggression, I'll nuke you" card, and the Cuban missile crisis had both the American and Soviet militaries stridently arguing for a nuclear first strike because going second would be so calamitous (it was avoided largely because both Kennedy and Khrushchev were reticent to do so).

One of the striking features of the last decade or so of global politics is the willingness of middle powers to arm and fuel regional conflicts, so I think it entirely plausible that a world where middle powers like Saudi Arabia and Iran gain nuclear weapons is one where, say, the Sudanese Civil War involves nukes.

Re:US designates helium as a critical material on Monday October 26, 2026 @07:10PM (#50252477)
The general assessment on Iran has long been that they aim to become a nuclear threshold state (have the ability to make nuclear weapons quickly (~1y timeline or less) should they need to), but not actually acquire nuclear weapons for themselves.
Re:Lula wins election after final votes tallied on Monday October 26, 2026 @09:55AM (#50243781)
In the interests of pedantry, that's not what the writing says. The operative text is quoted here:

> No person shall be elected to the office of the President more than twice, and no person who has held the office of President, or acted as President, for more than two years of a term to which some other person was elected President shall be elected to the office of the President more than once.

The 'obvious loophole' is that the text doesn't constrain the number of terms anyone can serve, but instead constrains the number of times someone can be elected as president, so if you run as vice president for someone who agrees to immediately resign to let you be president, you technically don't run afoul of the rule.

(The more likely loophole, following from Trump v Colorado, is that nobody is actually allowed to declare somebody ineligible for president, so the constitution's strictures are meaningless in practice. It truly is a disgusting SCOTUS decision.)

Re:Lula wins election after final votes tallied on Monday October 26, 2026 @01:24AM (#50239487)
> You got Trump and Biden as a direct result of term limits.

The US only enacted term limits in 1951. Before that time, only two presidents had attempted to seek third terms (another two attempted but failed to secure even a nomination by a political party), and only one was successful.

And, quite frankly, the only president since the 22nd amendment who I could see wanting to run for a third term is Trump, who does seem to be campaigning for one anyways despite being constitutionally barred from it.

I think you misread the question I asked.

Nonetheless, even today, the vast majority of countries are not self-sufficient on defense infrastructure, and this has been true for most of the modern era. The most obvious deficiency is in naval terms: the number of countries who have enough of a navy that they can do something about "my shipping is being attacked by pirates" without help from other people is plausibly at most five (US, UK, France, Russia, China), and I have my doubts about half of those.

If we're being pedantic, the US is not a nation-state (because the US doesn't really have a coherent "nation"), and I suspect for similar reasons you could claim that Belgium is not a coherent nation either, given the Flemish/Walloon divisions in the state.

That said, a lot of people use nation state as a synonym for sovereign state, and Belgium is as much a sovereign state as the US is.

Most countries are roughly the size of a US state. How many US states could be entirely self-sufficient on defense infrastructure?
The "... in mice" qualifier is somewhat overdone, but for Alzheimer's in particular, it's actually extremely important: mice do not experience Alzheimer's. We test Alzheimer's drugs in mice by artificially inducing something that produces similar dementia symptoms, and then seeing how the drugs influence that progression. If that model is different from how Alzheimer's works--and there's pretty decent suggestions from the history of failed Alzheimer's drugs in humans that our models of Alzheimer's are in fact wrong--then anything that fixes that model has suspect utility.
Re:Reforming English Spelling on Friday October 23, 2026 @07:52PM (#50216959)
The most obvious difference is that queue uses unaspirated /k/ sound while quick and quack both use the aspirated /kʰ/ sound.
Re:C++ futures part 1: The mental model on Wednesday October 21, 2026 @10:59AM (#50182177)
That's the co_await/co_yield/co_routine stuff, which this isn't talking about--this is talking about the std::future-et-al logic, which predates C++ coroutines by almost a decade.
It depends on where you want to count the start of the deep sea in terms of depth, but the answer is somewhere between "most of it" and "almost all of it." Most of what we're used to is in the top 100 or so meters of the ocean, a very thin layer on top of the rest of the sea.
Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @05:56PM (#50173242)
> Web of trust has been working between humans for over a million years.

I'm not sure that's really true. Human social organization has, until around 10,000 years ago, been centered on small groups of people where everyone literally knew each other. The ethnographic studies on non-state complex societies generally tends to show a lot of kinship-based networks that developed, and even in state societies that are facilitating long-distance trade, trade patterns and introduction into new areas is heavily reliant on membership of these kinship groups. State societies generally deemphasize these kinship groups, eventually doing away with them like in modern society, but the mechanisms for developing social trust are based on a very centralized development of the legal system--the government essentially enforces that people have to be trustworthy, or they face the wrath of government otherwise.

Essentially, in short, the idea that humans have regularly been trusting people based on asking their close compatriots who they can vouch for doesn't seem to accurately model how trust develops in societies for most of human history--you either have vouching based on direct observation (in small societies), vouching based on identity (larger non-state societies), or centralized authority vouching for people (state societies, including today).

Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @12:22PM (#50168757)
Web-of-trust doesn't work. Even before the PGP web-of-trust broke down several years ago, analyses of how the web-of-trust actually ended up working out showed that it basically boils back down to CAs: people rely on a few highly central keys to do most of the signing rather than signing keys themselves, and these keys effectively function like CAs.

The broader issue is that users don't want to (and probably don't have the ability to) actually make any trust decisions; they much prefer to delegate all of the decisions on trustworthiness to somebody else. The PKI root CA system does have its flaws, but on the whole, I suspect that people like Mozilla are better stewards as to whether or not the person vouching for somebody else is trustworthy than the average or even the above-average user.

Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @12:11PM (#50168550)
> Had browser makers supported DANE instead, and had we embraced DNSSEC instead of casting aspersions on it, we wouldn't have needed Let's Encrypt because ownership of a domain name would have already, by that very fact, let you authenticate to anyone.

Had we been using DANE instead of WebPKI, the response to this sort of compromise would be "aw, shucks, someone proved to be untrustworthy and they're in such a critical role in the ecosystem that there's no way to route around this DNS provider being untrustworthy."

Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @12:07PM (#50168481)
The screening process has been more involved in that since around the late 2000's. I wouldn't call 20 years "very recently," especially in the context of the history of the web.
> No nation ever started building a battleship in the time of war that then saw service in that war. Battleships commissioned during war had been started during peacetime or they were scrapped during the war because they didn't fit into the time or they were started under high holds, but they couldn't be finished in time. aircraft carriers are likely to be the same place going forward - you have to make them beforehand.

The first Iowa-class battleships were laid down in 1940 (so after WW2 started but before the US entered the war), and did see active service in the war. The British had two classes of battlecruisers that were laid down in WW1 that saw service in WW1, although they commissioned after the Battle of Jutland, which was essentially the only major naval action of WW1. It's debatable if you want to lump battlecruisers in with battleships, but considering that the main long-lead item of battleships are their guns and battlecruisers are essentially battleship guns on a cruiser, I think it's fair to do that here.

Aircraft carriers are not battleships, but I do think it is worth noting that except for Essex herself, all of the Essex carriers were laid down after the US entry in WW2 and these were the ships that formed the US assault in the Pacific in WW2.

I mean, the 8087 was the primary influence on IEEE 754, and hence all of modern floating-point, so in that sense, the numerics people don't ignore it.

The main problem with the x87 floating-point unit is that it only properly works on a weird 80-bit floating-point type that doesn't have the properties you expect of regular IEEE 754 floating-point types, thanks to the explicit integer bit. The design makes it hard to properly emulate the more common 32-bit and 64-bit single and double-precision floating-point arithmetic bit-equivalently, and this is compounded by many compilers' decision to spill floating-point registers incorrectly (they're spilled as 32-bit or 64-bit, not 80-bit), which makes the numerical results of your program effectively random. Also, the size of the 80-bit types isn't really conducive to vectorization, so the floating-point unit gets left behind as SIMD programming starts to become more important.

So what happens is that the x87 is essentially the last of the pre-IEEE 754 floating-point systems that's still hanging around. A lot of the features that would make it interesting in an environment where every vendor has a different floating-point system are now just vestigial weirdness in a world where everybody is following the same floating-point system, and not worth supporting.

They could have exercised any sort of reasonable oversight. If you're getting any sort of stonewalling from your business partner, that is a massive red flag, and something that should get you talking to the rest of the board about kicking them out
Re:Why I Wrote PGP (1991, revised 1999) on Thursday October 15, 2026 @05:00PM (#50110160)
I once had a chat with a security professor who had decided to try to get his group to use encrypted email for all of their communications. And they just couldn't get mailing lists working right with encrypted email.
Re:The technical actions needed to ensure the continuity of UTC on Thursday October 15, 2026 @12:44PM (#50106356)
TL;DR: No more leap seconds. The replacement will not be leap minutes but leap hours.
Re:your C is not standard C on Thursday October 15, 2026 @12:13PM (#50105831)
The complaint that has been brought up there--repeatedly--is that the term 'discarded' creates confusion with the similar 'discarded-value expression' in C++, which is completely different semantically despite the similar name.

Older »