News for hackers. Stuff that matters.

jen20

Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @11:46AM (#50339600)
It also was not related to the mentioned CA, and was not "hacked".
Re:Trigger.dev customer environment variables exposed on Monday November 02, 2026 @11:45AM (#50339571)
Not necessarily _always_ (Azure anyone?) but for the others - absolutely.
Re:Ask HN: Which TV do you recommend for privacy? on Monday November 02, 2026 @06:02AM (#50335308)
- Almost nothing supports Ethernet over HDMI (this was already discussed in this thread).

- I can imagine several reasons for upgrading the CPU. Supply chain related, mostly.

That said, I am perfectly happy with previous generation Apple TVs and won’t be replacing them any time soon.

Re:Jepsen: ParticleDB 1.1.4 on Saturday October 31, 2026 @02:48PM (#50318851)
> before that it was formally verified

Jepsen is a fantastic tool - and one every database engineering team should have in their arsenal - but it proves the presence of bugs, not the absence of them. It is not formal verification, just a more rigorous form of existential testing.

Re:Northflank Breached on Saturday October 31, 2026 @09:34AM (#50316060)
The phrase was first recorded as used in the London press in the late 1700s. It’s well understood across the English-speaking world. The fact that you might not have heard it before (or are being deliberately obtuse about the pretty obvious meaning) doesn’t change that.
Re:Northflank Breached on Friday October 30, 2026 @04:25PM (#50309668)
> ...the operational and economic condition in which a nation, military force, or organization mobilizes its resources, industries, and policies as if an actual state of war exists...

Yes?

That’s exactly what guardrails must be if they are to be useful or trustworthy. Deterministic, enforceable and impenetrable.
Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @06:59AM (#50271615)
I think you're likely attributing too much competence to the kind of place that restricts outbound traffic to 80 and 443 in the first place.
Re:Ghostty 1.4.0 on Tuesday October 27, 2026 @11:46PM (#50269141)
Aha, this explains why I've never seen this kind of thing: I don't use quick window!
Re:Ghostty 1.4.0 on Tuesday October 27, 2026 @03:41PM (#50264674)
I used iTerm and iTerm 2 for almost 20 years before switching to Ghostty full time in 2024 with minimal fuss besides the muscle memory of "cmd+space ite" switching to "cmd+space gho" to launch it!

Do you have specific examples of usability issues?

Re:Ghostty 1.4.0 on Tuesday October 27, 2026 @03:39PM (#50264633)
Aha, I wondered why the JetBrains terminals had become so much better recently. Didn't realize they'd made the switch.
Re:Software may be getting worse, but it used to be horrible on Tuesday October 27, 2026 @03:04PM (#50264126)
I haven't experienced that, but bought all of their products I use via the Mac App Store. I imagine they need some kind of activation if you download them from elsewhere.
Re:Software may be getting worse, but it used to be horrible on Tuesday October 27, 2026 @10:42AM (#50260144)
XP was particularly hideous in the default fisher-price configuration, but Windows 2000 was the peak of Windows UI.

As for inconsistent - what!? Every app looked approximately the same, and behaved in a predictable manner.

Re:Software may be getting worse, but it used to be horrible on Tuesday October 27, 2026 @10:37AM (#50260079)
IA Writer, IA Presenter, everything from Omni Group, Acorn, Procreate, Capo, Sketch.
Re:The new iPad mini on Monday October 26, 2026 @10:08PM (#50253886)
Yes? That was true even of the first iPad.
Re:Oldest GUI application that still runs on Windows 11 on Monday October 26, 2026 @09:52PM (#50253769)
No - almost all of the software I work on is at least one of:

- proprietary,

- command line tooling,

- single-platform.

A good example of what I consider to be a great approach (not mine) is Ghostty, which has fully native UI per platform and a shared core between platforms. JetBrains tools also go out of their way to integrate with platform conventions everywhere.

An example that cross-platform toolkits usually get wrong: cursor navigation in text fields. Home and End do different things on different platforms, and on macOS, basic emacs/readline bindings are supposed to work in all text entry fields.

It’s worth noting that this extends beyond GUIs - command line tools written in Go tend to use “package flag” which is native nowhere. The standards between Windows (which has two, in cmd and powershell), GNU-style and “legacy” Unix style are just not reconcilable without implementing platform-specific behaviour.

Re:Anthropic S-1 on Monday October 26, 2026 @03:59PM (#50250048)
> It's pretty sad that Google, Microsoft, Nvidia, Sequoia etc.....

Three of those four are public companies, so the public can absolutely participate.

Re:Oldest GUI application that still runs on Windows 11 on Monday October 26, 2026 @03:47PM (#50249880)
I also don't care how if things _look_ native, I care if the work like a native app. For example, on the rare occasions I touch Windows, I expect standard keyboard shortcuts to work. On macOS, I expect full integration with the accessibility frameworks and OS affordances like services.

A lowest common denominator idea of "everywhere" is just not that useful.

Re:Apple Security Research Device on Sunday October 25, 2026 @10:19PM (#50238330)
Where will give you a line of credit without knowing where you live? I'd be interested in _specific_ examples - I did not find any when attempting to actually build US credit when I moved here.
I'm sorely tempted to go down that road, I have a few frames. They've never been connected to the Internet, but the software on them is trash - literally the only thing I ever want it to do is display art (in standby) or display the Apple TV connected to HDMI.
They need to you blindly accept the terms and conditions and think "oh that seems fine" instead of returning it and costing them money.
Re:Tailworm – Tailscale Vulnerabilities on Sunday October 25, 2026 @12:41PM (#50233442)
Which is... irresponsible!
Re:Apple Security Research Device on Sunday October 25, 2026 @01:14AM (#50228538)
> Exiting surveillance capitalism is possible without major lifestyle changes.

It really isn't - credit rating agencies are the most egregious examples by far, and next to impossible to opt out of.

Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @10:43AM (#50196105)
BEGIN EC PRIVATE KEY, surely?
Re:Ukraine claims first drone evacuation of wounded soldier on Tuesday October 20, 2026 @09:40AM (#50166273)
> Putin had to openly declare repeatedly there will be no mass mobilisation

Putin also declared he didn't want a war with Ukraine mere days before he started one [1]. You cannot believe a word that comes out of the mouth of any Russian official.

[1]: https://www.bbc.com/news/world-europe-60392259

It probably was Russia - just on the balance of probability - and defense spending is unrelated to this.

The solution is for supermarkets to stop being moronic by putting refrigerators on the internet.

Re:Namecheap just seized and disabled all my domains on Monday October 19, 2026 @12:37AM (#50148426)
I've been using DNSimple for 15 years without issue.
Re:Lombok Is Still Relevant in the Age of Java Records on Monday October 19, 2026 @12:35AM (#50148414)
This article does less to convince me that Lombok is worthwhile and more that Java (the language, not the JVM) is not.
Re:A skeptic's first contact with Kubernetes (2024) on Saturday October 17, 2026 @10:54PM (#50137457)
HCL solves the problem of unknown values. It's certainly not a "horrible design" unless you're trying to compare it to something that does a different job.

For a single source of truth for YAML/JSON such as for Kubernetes manifests, any of the ones you list are fine though and a vast improvement on using Go templates for it.

(Yes I've used all of them - and indeed did the first public talk about Pkl two days after it was open-sourced, after several years of using it internally at Apple).

Re:Hello Toronto – Waymo Is En Route on Friday October 16, 2026 @11:48AM (#50119887)
London too, I believe.

Older »