News for hackers. Stuff that matters.

josh2600

Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @05:04PM (#50215306)
Yeah what I want is a configurable version of lockdown mode where I can have my agent sync my allowlist with my hardware.

Like give me the list of what I can turn on and off, and then let me choose my lockdown sphere.

That’s the future, and it’s coming.

Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @04:38PM (#50215004)
Is this day0 or did apple and signal get notified?
Re:Neuromancer in 3 Axioms on Wednesday September 23, 2026 @05:57PM (#49823134)
I wrote a little bit about neuromancer and made some art in the visual style of Ed Hopper.
Re:Fable 5.1 Solves the Cyphral Distich, a 370-year-old cipher on Sunday September 13, 2026 @09:49PM (#49690874)
For what it's worth, people also felt this way about the printing press and the Internet (also books).

Information propagation mechanisms are often seen as malicious before they're commonplace. To be fair sometimes they are, but by and large humanity has benefitted from increasing the number of bits of information we can consume on a per second basis.

Re:OpenRouter is joining Stripe on Wednesday August 19, 2026 @07:11PM (#49368376)
If you're looking for a privacy protecting version of OpenRouter, my friend Joseph Perla made trustedrouter.com.

It's a pretty slick system and if you're building on openrouter today and are worried about stripe integration messing up the product, this is a good option to consider.

Separately, congrats to the OpenRouter team. They are selling at the right time in what is undoubtably going to become a contentious market.

Re:Stripe Clinches over $7B Deal to Buy AI Firm OpenRouter on Monday August 17, 2026 @03:59PM (#49336719)
Trustedrouter.com is a privacy protecting version of openrouter built by some pretty serious engineers.

Might be worth a look for anyone who needs this sort of thing.

Re:The next chapter of our AI momentum on Wednesday August 05, 2026 @04:50PM (#49188824)
Bets on Jeff and Sanjay joining anthropic?

My guess is 18-24 months.

This is sick, in the 90's Tony Hawk sense of the word.

I love that people can just bang stuff into existence now.

There were times in my life where I would wait for an engineering team to change the color of a button for a day to a week.

We are not in the slow times anymore.

Only if you pretend the Sami's don't exist, right?

https://en.wikipedia.org/wiki/S%C3%A1mi_people

The thing is... under the laws as they're written today, if US Gov wants to take a peek at your stuff on FB and friends servers, FB can be barred from informing you that such a request has come in under the National Security Letter (NSL) guidelines.

It's a very complicated thing :/.

Re:Frontier AI has broken the open CTF format on Saturday May 16, 2026 @08:22AM (#48159547)
Why is it important that a dev can’t do fizzbuzz without ai?

If they can ship code that matches a spec, why does it matter if they’re using ai or not?

Genuinely curious.

Howdy,

I made a repo to automate building software with Garry Tan's gstack repo.

Basically you install conductor.build, authenticate to claude, install gstack, and then you can use the web interface to write a strong product requirements prompt and it will build 3 versions of the product fully autonomously, check them for bugs, rate them for functionality, and present them to you.

It does all of the steps of Garry's gstack including QA and uses the retro to score it.

I tried to design it to ship good software. I would not use this for production without reviewing the code it produces extensively.

Re:gstack – Garry Tan's Claude Code Setup on Thursday March 12, 2026 @03:48PM (#47356114)
This thing is absolutely wild.

You essentially get an agent in conductor.build who drafts multiple choice replies to your product and engineering questions from claude.

Dramatically improved code quality and speed of development for me.

I served on the eboard of CWA local 9410 when all of that was going down.

Words cannot describe how crazy things were at that time.

I feel like someone will make a movie about it someday.

Re:What Functional Programmers Get Wrong About Systems on Tuesday February 10, 2026 @01:25AM (#46956052)
There’s so much in this article where I look at it and I’m like, is this ai slop?

I’m beginning to really appreciate short articles with a few bullet point takeaways.

With respect to version control across systems, when you get into serious stuff where mistakes are measured in lives and/or three commas, there’s just a lot more simplicity in the design of those systems than most people think.

Really big systems often have very simple design principles at their core which are echoed through out the topology.

In secure code like the stuff signal uses, having a hash of the code that is attested by a network of servers and chained back to self-signed identities on the client is the only way to go.

Here’s the hash of the code that’s supposed to be running on my server, here’s the proof that I verified it with all of the hardware and software tools at my disposal from the server, and here’s that hash and attestation embedded into the app on your phone or laptop that’s connecting to my box.

If there’s an easier way to get some semblance of “my device is talking to the right code on the right box,” please enlighten me.

Re:Ideas are cheap, execution is cheaper on Thursday January 15, 2026 @09:37AM (#46633113)
LLMs are amazing.

Nothing replaces making simple UX instead of complicated kitchen sink products.

It’s easy to make stuff. It’s harder to make stuff people want.

I am thankful for the increase in product velocity and I also recognize that a lot of stuff people make isn’t what people want.

Product sense and intuition still matter.

Signal requires a phone number for signup but you only have to share a username.

We know from subpoenas that signal only holds the user phone number, creation timestamp, and last login timestamp. That’s it.

This is why signal’s encrypted phone number lookup system is so cool. The server uses a bitwise xor when querying for numbers using hardware encrypted ram. The result is that even if you’re examining the machine at the most basic levels you can’t tell the difference between a negative or positive hit for the phone number unless you’re the phone requesting the api.

Obviously ratelimiting is a separate and important issue in api management.

The thing about building secure systems is that there are a lot of edges to cover.

Re:30 Year Anniversary of WarCraft II: Tides of Darkness on Tuesday December 09, 2025 @10:53PM (#46213894)
I was 7 when Warcraft II: Tides of Darkness dropped.

You cannot imagine the lengths we had to go to play this game in our home. We were lucky enough to have two apple computers and so my brother and I would play each other using the battle net technology over appletalk. The thing was, the only appletalk cable in our house was barely long enough to make it between the two bedrooms, so when we wanted to play the cable would hang in the air stretched across the hallway where the slightest tug would rip it out of the port killing the match.

The number of times that cable got unplugged mid-game and the inter-household rancor that would ensue is the stuff of legends. I honestly remember the fits we had about whose fault it was that the cord got unplugged more than I remember any specific aspect of those Warcraft games.

It just goes to show, networking topography matters.

WCII ToD is absolutely one of the most insane games to ever be birthed unto the world. It was so brain breaking compared to everything else we were playing at the. time. Just a real quantum leap in terms of dopeness.

Blizzard really hit it out of the park with Warcraft and Diablo.

I think this was definitely true of CEOs in the past but Google and Meta have managed spectacular infrastructure buildouts over many decades with proper capacity planning.

There were a lot of lessons learned in the dotcom boom (mainly related to the great telecom heist if you ask me). If you look back on why there was dotcom bubble it's broadly, imho, related to the terrible network quality in the US compared to other first world countries.

Our cellular services for example lag behind basically every asian market by at least 1 maybe 2 generations now.

Just gotta say that this thread really delivered in so many ways.

Thank you for constantly removing some of the veils from the mystery of our computational universe.

The notion that you’re a very obvious leftist seems asinine to anyone who has seen your comment history in these digital catacombs for the last decades.

Every single time in my life that I’ve failed, there was a silver lining.

The only way to lose at the game of life is to give up.

There’s an old Soviet saying “even when you’re eaten by a bear , there’s still at least two ways out.”

You’re never out of options, there’s always new angles of imagination.

Re:My startup banking story (2023) on Thursday August 28, 2025 @08:44PM (#45058686)
Once upon a time my wife went to close a bank account in Italy.

She went to the post office which is also a bank in Rome. She asked to closed her account. She was told that she needed to go to the branch where she opened her account in Florence.

We rented a car and drove to Florence.

When we arrived at the bank in Florence, the teller informed us that we would have to come back “domani” which is Italian for tomorrow because the only person who could help us was the banker who had originally opened the account for my wife when she was a student many moons ago.

We came back the next day and met the banker who immediately recognized my wife including recanting that she was an artist. He informed her that he could not close her account, she would have to speak to the Director of the bank.

We waited in line for the director of the bank but we were told it was too close to the end of the day and the bank was out of money so we’d have to come back… Domani.

Domani arrived and my wife again waited. The Director willfully ignored her for 2 hours and it wasn’t until my wife began to cry that the Director finally called her over and allowed her to close her account.

This for €2500. That was a balance that meant a lot to us at the time.

I will never forget banking in Italy.

Re:Fight Chat Control on Sunday August 10, 2025 @05:40PM (#44858549)
This is actually one of the major fights of our generation.

If signal/whatsapp/e2ee are desecrated, only criminals will have encryption for a short period of time until we all come to our senses and realize that some semblance of personal privacy is a human right.

IMHO, we should fight for the maximum amount of privacy possible within the context of a civil society.

In every generation there is a battle, sometimes quiet, other times a dull roar, and occasionally a bombastic. This battle is who can oversee who.

Surveillance should be the last resort of a free society.

Thank you for contextualizing this. We are truly living in a wild part of the space time continuum.
Re:Why MIT switched from Scheme to Python (2009) on Friday July 25, 2025 @07:31PM (#44689749)
Not OP but in general sourcing software and hardware radios in that time was very difficult. There weren’t good open-source implementations and everything had to be sorta reverse engineered which meant that anyone with the skill to do that was selling it for a lot of dollars.

Source: did 10 years in telecom land.

Re:Why you should delete WhatsApp and install Signal on Wednesday July 09, 2025 @06:40PM (#44515438)
Encryption absent open source is dubious at best.

Older »