News for hackers. Stuff that matters.

joshmn

Re:Rust off Rails: The opinionated web stack for the AI era on Wednesday October 21, 2026 @01:01PM (#50184183)
Rails has a ton of conventions but also implements a lot of patterns described in Patterns of Enterprise Application Architecture. People seem to forget the latter.
Re:New PlayStation 5 Console Jailbreak Released on Tuesday September 29, 2026 @07:40PM (#49902372)
It hasn’t been announced. GTA 5 was released for PC about 18 months after it hit consoles.
Great question: I would guess about 15% of the inmate population sends mail home on any given day. That number certainly jumps up if a facility is locked down, probably by at least double.
The USPIS (mentioned in the article) once came to the federal prison I was at to tell inmates that using stamps as currency was illegal.

There are flats and there are books. Flats are a sheet of 20 Forever stamps that you would get at a drug store. A book is 20 stamps, used or not used.

Generally there are different values associated with flats because you can get cash for them on the streets. You can get them to the streets via an officer if you're ballsy. Or you can just find discreet ways to mail them.

The value of a flat where I was at was about $13-$14 depending on your vendor. A book was generally worth $10. If you were buying bulk (and depending on who exactly you were buying from), that number could go down to $12 and $7 respectively.

If you were buying from someone that was running a ticket (sports gambling) they had more incentive to get rid of their stamps. Some people had tens of thousands of dollars of stamps in their property and they wanted to convert them.

If you were buying from someone running a store (think "buy and resell commissary"), their business model was dependent on flipping books of stamps in exchange for more commissary. They could sell a ramen for 3 stamps ($1.50) when it was worth just 50 cents.

Flats were easier to hide because they are, well, flat.

But how do you stop buying ice cream?
Re:Ask HN: How to recover Google auth after phone stolen? on Thursday September 17, 2026 @02:47PM (#49744889)
I had similar issues: https://news.ycombinator.com/item?id=45451567 (including my personal domain, Dropbox; my Apple account is still MIA...)

We've all been reduced to a passphrase.

When I've lobbed this scenario to the security managers/employees at these companies, they all give me a really great answer:

Q: What happens if a sitting senator gets mugged and they have their printed 2fa codes sitting in their wallet?

A: They have a special number they can call.

Re:Getting phpBB 1.4.4 working in Docker on Tuesday September 08, 2026 @11:06PM (#49620356)
I recently got a reminder that my vbulletin license had expired.
Re:Cloud in a Bottle: making self-hosting accessible to everyone on Saturday September 05, 2026 @08:34PM (#49582193)
An aside: Fantastico was such a wonderful piece of software for me to learn and toy and tinker with web stuff. I was so impressed by the simplicity of it. (I phased out of the shared scene a almost two decades ago; I guess everyone moved to Softaculous, https://softaculous.com/fantastico/)
Re:Gemini 3.7 Flash on Thursday August 13, 2026 @07:27PM (#49292996)
What’s the prompt you used for this?

Edit: oh wow, diffui looks nice!

Oh, this. Author here.

I'm waiting for legislation around this, but I'm not sure we'll ever get it. I was on the phone with a senior Apple support specialist person and I even proffered this idea of "what if a sitting senator just got mugged." And they said there was a special lane for them.

Re:Read this before you buy that TV streaming stick on Thursday July 30, 2026 @06:12PM (#49116545)
I had a streaming piracy site that I went to federal prison for. I can chime in on these people.

It's worth separating the two populations:

My users had money and had considered legal subscriptions. They paid me because the legal product was worse—in my case, sports blackouts, a bunch of different apps, etc. They knew what they were buying into and they had weighed the risk. I can tell you right now some of my former users have bought into this market.

Then there's the unwitting: a person buying one of these devices at a too-good-to-be-true price is treating it as a hardware purchase from Amazon, where the actual monetization isn't inferable from the listing. Calling it too good to be true assumes the buyer can see what shit they're standing in. They can't. There's no visible market here. It's just a product page with reviews.

To add to this: the proxy exit is exactly why these cost so little. Demand for residential IPs is booming (check some of the proxy subreddits to see what I mean).

The ironic part is that there's a chance the person who bought one of these boxes to watch pirated sports was the exit node I was using to acquire the feeds in the first place.

"Login to order"

That's a new one.

Sometimes I'll search LinkedIn for posts on internet piracy. It's usually companies or those affiliated with companies promoting their anti-piracy product—typically streaming. I'd wager about 90% of them are straight-up, uninspired LLM-generated slop.

And so I'll comment asking them why it's okay to use a tool that was built on the backs of content it wasn't properly licensed to use to generate a post promoting an anti-piracy product. I'm yet to get a good response, if any. (Sorry for the word salad.)

I've started collecting some of these: https://josh.mn/anti-piracy

(Note: I went to federal prison for internet piracy)

I'm hardly a sysadmin and I think Unraid is great. My usecase is some Docker containers and media backups. The UI gets the job done well, whereas Synology tries to dumb things down and make things pretty.

Android is to Unraid as iPhone is to Synology.

Re:Amazon Without the Knockoffs on Tuesday July 07, 2026 @03:08PM (#48822211)
Is there a best and not-so-best category for certain odds?
I ran the ATS myself and had a similarly quirky experience. I was in the 70s because it couldn't find my GitHub profile, and then it didn't like some of the popular Ruby libraries I'm the author of.

After a few runs it picked things up appropriately. I always got dinged on formal education though.

This stuff is gross.

Re:A website that lists websites to submit your website to on Thursday June 18, 2026 @01:38PM (#48588783)
Reminds me of HotScripts, which is still around for anyone looking for nostalgia: https://www.hotscripts.com/category/scripts/php/scripts-prog...
Re:An interview with an Apple emoji designer on Tuesday June 16, 2026 @05:44PM (#48562558)
Been waiting for seahorse myself.
Re:Dropbox CEO Drew Houston to step down on Tuesday May 26, 2026 @05:48PM (#48286459)
The shame has passed and I served my time. What I owe now is not doing it again—which I'm not.
Re:Dropbox CEO Drew Houston to step down on Tuesday May 26, 2026 @05:27PM (#48286216)
It's the digital equivalent of your house burning down, your devices are inside it, and you never bothered to bring the 2FA codes you definitely wrote down to the bank.
Re:Dropbox CEO Drew Houston to step down on Tuesday May 26, 2026 @05:26PM (#48286196)
Re:Dropbox CEO Drew Houston to step down on Tuesday May 26, 2026 @03:04PM (#48284358)
If there are any Dropboxers here (drew—I emailed you a few weeks ago, but I imagine you're busy):

I went to prison for 18 months, my digital and physical life was stolen from me: https://news.ycombinator.com/item?id=45451567 applies to my Dropbox account (and Apple but separate problem); I just received the "your account will be going bye-bye" email. I have very important dead-mom-club stuff in there, and support is useless. :(

Re:Pgbackrest is no longer being maintained on Monday April 27, 2026 @09:23AM (#47921254)
barman seems to cover "Natural disaster" in their docs. Seems good.

I'll take a look. Thanks!

Re:Pgbackrest is no longer being maintained on Monday April 27, 2026 @07:54AM (#47920400)
I have a moderately sized 2TB production database I have enjoyed using pgBackRest on, and was—this week—going to set it up on another 8TB database we have.

What's the next-closest thing? wal-g? barman? databasus? I only get to cosplay as a DBA.

is `current_user` really costing that much?
I ran a sports streaming service ("pirated sports streaming service" ?). The US Government said I was making $250k MRR as a solo indie dev (I wasn't, but that's great validation). I'm pretty qualified to talk about this.

The shitty part about what Spain is doing is that it punishes its own residents who have nothing to do with piracy.

Sports piracy is fundamentally different than music or movie piracy. The Spotify analogy that gets tossed around is wrong. Steam is less wrong but still wrong. Music piracy got "solved" because the labels decided that some revenue was better than no revenue, and the math works when you have a bunch of product in your back pocket that cost you nothing to distribute; gaben made piracy slightly less convenient to those in developed countries.

Sports rights are valuable because they're exclusive and because they're live. In the US, there are blackouts around sports: if you're physically located in New York (at least, according to whatever IP address data vendor a platform is using), you're unable to watch the New York Knicks using league-sanctioned products. That's the US version of this—restricting access to the content itself to protect the rights holder's revenue. It's internal logic and fundamentally sound (though infuriating) if you're one of them.

This is without a doubt categorically worse. A blackout says "you can't watch this game" and Spain is saying "you can't access the internet while this game is on, whether you're interested in the game or not." It's as if the NBA convinced the DOJ to shut down half the internet every time a game was on, just in case.

Before it was DMCA notices (useless) -> lawsuits (whack-a-mole, check TorrentFreak) -> ??? -> infrastructure-level blocking. (I'm an outlier for many reasons but we won't go into those.) Each step is more destructive and less effective than the one preceding it. Spain has reached the end of the playbook, thanks to political interests: ban the internet!

Fans are the product. La Liga's real customer is Movistar, who pays roughly a billion euros a year for exclusivity so they can bundle it into packages nobody would pay for otherwise. The IP blocking isn't an anti-piracy measure—I'd argue there is no such thing as anti-piracy but that's a different thread. The IP blocking is a signal to the next bidder: the government will protect your exclusivity at any cost, even if that cost is the country's internet.

Re:DIY Soft Drinks on Sunday April 12, 2026 @06:38PM (#47745276)
What are your, um, favorite gum providers?
I didn’t know about this case. When you said it I thought it must have been a US federal case. Nope.

https://news.ycombinator.com/item?id=45844197

I was in federal prison with Sebastien Raoult, one of the ShinyHunters guys. We were in the same unit and talked regularly.

I was about mid-way through my bid when another inmate told me "new guy in B3 is a another hacker." I got really excited—I'd have someone to talk shop with, at the very least.

My takeaway from him was that they're a bunch of contemporary "script kiddies" with a lot of time on their hands.

This tracks.

In my vast personal experience, https://www.law.cornell.edu/uscode/text/18/1030 is the most absurdly vague law in existence.

Older »