News for hackers. Stuff that matters.

jgalt212

So long as rogue agents are an effective marketing tool (Look how powerful our models are!), there won't be any serious efforts by the model makers to constrain them.
Re:The AI cost of JavaScript frameworks on Monday November 02, 2026 @07:07AM (#50335740)
> If I feel strongly about something, I'll ask for a change.

Why not make the change yourself instead of burning more tokens and hoping the change as requested is actually made? Harnesses and models that make human code level collaboration difficult are not useful IMO.

It's akin to using a calculator where you can't access the numeric keypad.

Re:Domain hacks with unusual Unicode characters (2018) on Sunday November 01, 2026 @02:04PM (#50328603)
I know it's not inclusive, but DNS should be ASCII only.
Yes, you're right algae produce way more oxygen than plants.
I know Bill Gates thinks planting trees is a waste of time, but are the oceans doing this task for him?
If your margins remain constant, profit goes up on a nominal basis.
True. The conventional wisdom that inflation is bad for stocks is not defensible.
Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @01:30PM (#50292811)
> GCP has been an enormously successful 'bet' for Google over the past decade.

I disagree on this. It's not clear how much money they are actually making and how much revenues are shifted over from other business lines to GCP because GCP earnings growth is / was valued higher than other business lines by the markets.

Re:Amazon Is Gutting Its AI Division After Sustained Failure on Thursday October 29, 2026 @01:19PM (#50292645)
When compared to some commenters, microwave ovens are really quite useful.
> If they do one day come the American shores, I assume that's the end of US car manufacturers.

And the rise of the AfD.

Re:Hex Raises $100M on Wednesday October 28, 2026 @07:53AM (#50272138)
When I see one of these in a contract, I mark it up to also include the 13th Amendment.
Re:Amazon Is Gutting Its AI Division After Sustained Failure on Wednesday October 28, 2026 @07:45AM (#50272047)
Microwave ovens are of extremely limited utility. Happy now?
Re:Hex Raises $100M on Tuesday October 27, 2026 @08:59PM (#50268073)
> "If we didn’t have Hex, we might’ve left more than $100M on the table. That might even be an underestimate."

Hex saved Mercor $100MM. That's impressive!

Re:Amazon Is Gutting Its AI Division After Sustained Failure on Tuesday October 27, 2026 @07:39PM (#50267438)
Microwaves are still of limited utility.
We got through the Greek debt wall and CMBS debt wall unscathed. Is this debt wall more troublesome than the other two?
Re:PHP2Shell: Exploitation Attempts and Remediation Trends on Tuesday October 27, 2026 @11:25AM (#50260778)
yes, but 70% of the world's websites were (and many still are) accessible PHP server(s) that hand not been patched.
Re:Anthropic S-1 on Monday October 26, 2026 @02:54PM (#50249078)
They already exist and Ukraine is still stuck in an untenable position because they gave up their nukes.
Re:Anthropic S-1 on Monday October 26, 2026 @09:49AM (#50243680)
> If the party continues, they'll go from $50b in revenue to $500b and be fine.

Heads I win, tails we all lose. GFC Part II.

Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @06:46PM (#50226198)
> The value proposition isn't there.

That's part of the point. $500 or $1000 is a trivial amount. Since the money is still there, there's currently no trivial exploit.

> requires actively utilizing an unreleased 0 day exploit on a server that will certainly be able to track exactly what was done

Depending on the exploit, and the visibility stack on the server, one may or may not be able to determine how the rabbit got in the hat.

Re:Symbolic Learning in Python and Julia on Saturday October 24, 2026 @06:38PM (#50226145)
Has anyone thrown the n-body problem at this?
> how contrived the example is

That's basically one of the core ingredients of security. Build a threat model.

apache does not accept brotli by default. so while the first part is true, the second part is only true for some X% of websites.
Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @06:24PM (#50226026)
> A reminder that this cannot falsify the existence of an exploit, trivial or otherwise.

No, it's a not a zero knowledge proof. But if the site owner is a generally trustworthy person, then I feel that this effort is strong proof the exploit is not trivial.

> So say you run a SaaS that allows for something like letting people set their Avatar from an image URL which gets downloaded.

That's a clever example, but why would you do that? The avatar should be a static resource. As such, I'd only provide an upload file dialog.

Re:The Best Monopoly Strategy, Tested on 300M Games [video] on Saturday October 24, 2026 @08:45AM (#50220747)
> The second was a Monopoly simulation that just ran around the board to estimate which squares were landed on most often.

This was one my most significant works in HS. I think I used a BASIC compiler for my Apple IIc so it could run faster. I felt powerful solving problems that could only be solved via Monte Carlo methods* and took a long time to compute.

* I am aware you can compute long run landing probs via matrix calcs. However, this matrix gets yuge when you factor in some sort of probability distribution for how long a player decides to stay in jail for (either roll out or pay your way out). This is someone similar in shape, but not scope, when Eli talks about Combinatorial simulation - the game of SET.

https://eli.thegreenplace.net/2026/monte-carlo-simulations/

How may web servers only serve brotli?

How many clients only accept brotli?

Re:There isn't an easy exploit for this PHP vulnerability on Friday October 23, 2026 @09:50PM (#50217667)
Unfortunately, the AI hypesters have made us a low trust society.
why read the diff? my AI agent reads the diff and ignores stuff it knows I don' want to hear.
Re:There isn't an easy exploit for this PHP vulnerability on Friday October 23, 2026 @09:43PM (#50217641)
> I saw sites yesterday go down instead of trying to mitigate an unpatchable critical vulnerability

In retrospect, that seems ill-advised. If you sat behind Cloudflare you were protected from theoretical attacks even before the announcement was made. Obv, hindsight is 20 / 20, but as usual, stuff announced by the AI hype machine does not stand up to scrutiny.

Re:Bringing uv and ty together on Friday October 23, 2026 @09:39PM (#50217612)
but there's probably lots of projects that use uv, but not ty.

Older »