News for hackers. Stuff that matters.

joshuaissac

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @01:42PM (#50091747)
> this mistake would have been impossible with a passkey.

But GP is saying that when the passkey is not auto-entered, the user will just use password-based login.

So the mistake will still happen even if passkeys are enabled and used, as long as password-based login remains as an option.

Re:How Delhi cut electricity loss from 50 to 5 percent on Wednesday September 30, 2026 @11:16AM (#49910091)
Labour costs are a lot lower, so it is a lot less expensive than in wealthier places.
> they removed JavaFX from the core of Java

You can still use OpenJFX with OpenJDK, can't you?

Re:A brief history of Windows scroll bar shortcuts on Wednesday September 23, 2026 @04:21PM (#49821950)
They'll just assume your site/app is broken, because their reference for what's correct is their platform. If they're annoyed enough, they go to a competitor unless it's a site/app mandated by their employer.
Re:I advertise malicious software on Google Ads on Wednesday September 09, 2026 @11:29AM (#49628175)
The limit applies to what you can claim, rather than what you can impound in enforcing the court order.
> Who did CyanogenMod partner with and what happened?

They partnered with OnePlus globally, then signed an exclusive deal with Micromax in India, catching OnePlus by surprise as they had to now stop selling their CyanogenMod-loaded phones in India.

Re:Paint.net 5.2 alpha now runs on Linux on Thursday September 03, 2026 @12:06PM (#49552298)
> The previous owner of the Paint.net domain erred in hosting information regarding Paint.NET

The ones who had displayed link to getpaint.net was a legitimate paint company.

Some time after 2012, the domain name was later acquired by another entity (owned by a "domain investor"), which turned the website into an imitation of getpaint.net in 2025, allowing the developer to file a successful lawsuit.

https://alldomains.app/paint-net-after-22-years-software-dev...

Re:Paint.net 5.2 alpha now runs on Linux on Wednesday September 02, 2026 @01:45PM (#49539777)
I see they finally got the domain name paint.net. They used to be at getpaint.net, and the paint company that owned paint.net had a link saying something like 'if you are looking for the graphics software, go to getpaint.net'.
Re:Bomb Fishing Is Wreaking Havoc on Indonesia's Coral Reefs on Tuesday August 25, 2026 @11:08AM (#49435479)
> it's likely poverty and subsistence living that's driving adoption of this 'technique'

From the article:

> While understudied, the incentives for the use of dangerous dynamite fishing are often falsely attributed solely to poverty and desperation.

> The cost barrier to buying boats, bombs, and detonators means it’s more likely a practice for middle-income fishers, according to experts.

Re:I ran Photoshop on a £0.60 computer chip on Friday August 21, 2026 @03:15PM (#49392642)
Caveat: 60p RP2350 microcontroller on a board that sells for $40 and has 8MB of RAM (as opposed to the 520K that the RP2350 comes with). But that is only needed for Photoshop. The 520K is more than enough to emulate the Mac 128K.
> how dolphins treat tortoises

Do you mean porpoises?

Dolphins are not known for mistreating tortoises but porpoises.

It could be the "self-extradition command", as they call it, that exposed it, rather than echo $SHELL.
> land at Heathrow you don't go pass passport control if you change onto another international flight. You go through security and then into the departure lounge.

This requires a Direct Airside Transit visa, unless you are a citizen of one of the exempt countries or have a visa/residence permit from certain countries (US, Canada, Australia, New Zealand, Ireland, Schengen). Applying for this visa involves going to the local visa processing centre, so it is not an online or on-arrival process, and takes around 3 weeks.

https://www.gov.uk/transit-visa/direct-airside-transit-visa

There are services like Movies Anywhere and UltraViolet (now defunct) that store a licence when the user purchases one from an in-network licensor. Then the user can access the content via any supported platform.

The problem is that these are not legally mandated, so they can shut down (as UltraViolet did). If the ability to move the licence to another platform is mandated by law as a condition of continued copyright protection, this problem would largely disappear.

Re:My burner email blocklist blocked me on Friday July 10, 2026 @01:45PM (#48862974)
The normalised version is what gets redirected to trash, according to GP's proposal. Legitimate senders who do not normalise have their mail delivered to the inbox.
I would hope that it is harder to get into the TPM than into the RAM.
Re:The Doorman's Fallacy in Action on Friday June 26, 2026 @02:33PM (#48690246)
The article does not clarity whether the OP ordered via the app. Only that the menus were accessible via a QR code.

OP either ordered in person after looking at the online menu (no app) or ordered via the app/website but the system bundled together the bill for the whole table despite receiving separate orders (bad implementation).

Re:The Doorman's Fallacy in Action on Friday June 26, 2026 @01:53PM (#48689701)
> QR ordering

In the story, even though people used the QR code separately to see the menu, the bill was combined. Either the order itself was done via a human, or the bill was charged against the table rather than the unique user.

When the whole ordering and paying happens as a single event, none of the problems presented in the story occur, other than the initial problem of scanning the QR code.

Re:Open source AI must win on Saturday June 13, 2026 @06:27AM (#48515694)
If closed-source AGI wins, it is not going to be much different from a safety perspective anyway, because AI capability research is advancing faster than safety research.
> Let's Encrypt certificates continue to be available in both Iran and Russia, just not for the Iranian and Russian governments.

According to https://news.ycombinator.com/item?id=48457280 it affects all people ordinarily resident in those territories, not just their governments:

> You are not a person or entity that is:

> (a) located in, organized under the laws of, or ordinarily resident in any country or territory that is the target of comprehensive U.S. sanctions;

> [other 'or' conditions]

> then you sell lots of those copies as your business

Common Crawl is not a business and is not selling anything.

It looks like it is the number of consecutive days with no incident. If you look at 31 Dec 2025, that corresponds to an 8-day period with no incidents.
What can people do? Systems like these are mandated by companies that provide services that people need, and they are hard to avoid. In-person verification is sometimes an option but not always.
Re:AI is killing the cheap smartphone on Friday May 22, 2026 @06:08PM (#48242302)
> IDK if RAM chips are also on that list.

Apple cancelled their deal with YMTC (Chinese RAM company) after the US sanctioned the latter. I don't know whether that is directly because of the sanctions, or indirectly (e.g. if Apple thought sanctions would hamper YMTC's ability to supply the goods), but they have had the same effect.

https://www.lightreading.com/business-management/chinese-chi...

https://www.business-standard.com/article/international/appl...

Re:Vivaldi 8.0 on Thursday May 21, 2026 @04:05AM (#48219356)
But they support extensions on desktop.

The problem you linked to also happened on desktop because there is no VSCode for phones.

I am glad someone is putting in this effort. Many years ago, there was another project called GIMPshop to make GIMP's interface more accessible to Photoshop users.

https://en.wikipedia.org/wiki/GIMPshop

They taught Photoshop at school, so I found it easier to use GIMPshop than regular GIMP.

Re:Legacy Update for Windows 8.1 for x64-based Systems on Sunday May 17, 2026 @01:02PM (#48170736)
> Friends don't let friends use sites like this.

Why not? The download link on the site points to to Microsoft's official website.

> They also cannot prevent a developer from rehosting AGPL code, but they are trying to do that. And it's kind of the actual issue.

I agree. I think the argument they are going for is similar to that from Google against yt-dl, but unlike in that case, Bambu is obligated to allow this codebase.

Interesting question. In the first case, where you install your own build from unmodified source code, although AGPLv3.0 still allows discontinuing support, I see no explicit carve-out in the licence to restrict network access.

However, the AGPL comes with no right to such network access to begin with. Permission to access the network would usually come separately from the AGPL; I suppose you could potentially bundle it as an additional permission under section 7, but I don't think Bambu is doing that.

To take it a step further, even if you use the latest official software, installed by the vendor (and not by you), they can still refuse you access to their network. That might violate some other agreements or laws (e.g. contract to provide a service), but it does not violate the AGPL itself.

What they cannot do is prevent you from running your modifications on your hardware.

Older »