News for hackers. Stuff that matters.

jsmith99

I do a similar thing manually and you have to watch it very carefully to avoid over engineering, ironically you need judgement here not vibe, otherwise (codex especially) will ratchet the project into some complicated enterprise grade over engineered monstrosity by eg coming up with minor visual-only concurrency bugs that would need you to be Facebook scale.
Re:Codex is wearing out our devices on Monday July 20, 2026 @10:32AM (#48979435)
Mine too, on windows. It seems to be some very aggressive and poorly planned rg (ripgrep) calls mostly, when running parallel sessions. Multiple simultanous Claude code sessions don't have same problem.
Re:Dropbox CEO Drew Houston to step down on Tuesday May 26, 2026 @02:25PM (#48283730)
OneDrive used to be rubbish but nowadays it's reliable. We use it at work and I don't feel any pressure to move to Dropbox. It's also much cheaper.
So long as you've backed up the key you can fairly easily decrypt on any machine.
This doesn't sound bitlocker specific, sounds more like a login bypass. If you rely on TPM without PIN then it gets decrypted automatically. This should be fine normally as attackers shouldn't be able to get past login screen. But this exploit shows a way allegedly to get a unrestricted shell in the recovery environment.

The researcher claims a way to bypass PIN too but hasn't revealed it.

Re:The Locals Don't Know on Sunday May 10, 2026 @03:00PM (#48086748)
As a fellow Londoner I can confirm it's worth visiting and the crown jewels are also nicely presented. Don't be fooled into queueing for the bloody tower torture chamber, anything you can see seemed to be a Victorian fantasy.
Capture One which is the biggest Lightroom alternative (popular with wedding and fashion industry) has pretty good tools for batch edit and getting a consistent look across a shot. It's expensive though.
They can do that by jailbreaking models but is that really easier and less work than getting it from Wikipedia?
Re:The Three Pillars of JavaScript Bloat on Sunday March 22, 2026 @06:27AM (#47476084)
Is the lack of CVE because the implementations you wrote are better written and safer than those in the standard libraries or because no one has checked?
The big difference is that 'real' nappies become extremely uncomfortable when wet (child immediately cries to be changed) so toddlers get a strong incentive to stop wetting whereas with modern disposables they barely even notice when they wee.
Re:A ternary plot of citrus geneology on Friday March 06, 2026 @03:37AM (#47272490)
I assume the esrog is the primeval citron but I've noticed that Jewish tradition (which rejects the use of hybrid citrons) allows some surprisingly different citrons in practice, popularly associated with Israel, Morocco, Yemen, Corfu etc. These differ considerably in eg rind thickness.
Re:GPT-5.4 on Friday March 06, 2026 @03:26AM (#47272420)
It's still unavailable in many regions.
Whenever I build a new feature with it I end up with several plan files leftover. I ask CC to combine them all, update with what we actually ended up building and name it something sensible, then whenever I want to work on that area again it's a useful reference (including the architecture, decisions and tradeoffs, relevant files etc).
Re:Looks: A Halide Mark III Preview on Monday February 16, 2026 @04:36PM (#47040654)
The first baby photo is definitely the best. Artistic lighting setups can work for adult portraits, photographers used to recommend side lighting for male bone structure, but it just looks wrong in these baby photos.
Wouldn't stockfish's position evaluation be incorrect in that case? (If it evaluated the position based on a formula that assumed normal rules)
London oyster cards also offer a refund of your pay as you go balance.
It's a second price auction. Who cares what their limit is. If it's more than the value of the item to you then they will win. Otherwise you will win.
Re:Ireland’s Diarmuid Early wins world Microsoft Excel title on Saturday December 20, 2025 @07:31PM (#46341106)
They've now made a change in that at least when you open a csv it now asks you beforehand if you want your data transformed, eg converting strings to numbers where that loses leading zeros.
Unfortunately many countries have blanket extradition bans. US is one of the worst - it caused a lot of tension in the past when they wouldn't extradite IRA bombers but got UK to agree to extradite anyone US wanted.
Re:Google Antigravity exfiltrates data on Tuesday November 25, 2025 @02:15PM (#46049536)
There's nothing specific to Gemini and Antigravity here. This is an issue for all agent coding tools with cli access. Personally I'm hesitant to allow mine (I use Cline personally) access to a web search MCP and I tend to give it only relatively trustworthy URLs.
Re:Element: SetHTML() Method on MDN on Wednesday October 22, 2025 @05:24PM (#45675347)
It's arguably easier just to sanitise at display time otherwise you have problems like double escaping.
Re:The AI coding trap on Sunday September 28, 2025 @04:09PM (#45407529)
Cline plan mode doesn't tend to read files by default but you can tell it 'read all files necessary to establish a detailed plan'. GPT5 also seems more eager to read files.
Re:The AI coding trap on Sunday September 28, 2025 @12:03PM (#45405368)
> lack in-depth knowledge of your business, codebase, or roadmap

So give them some context. I like Cline's memory bank approach https://docs.cline.bot/prompting/cline-memory-bank which includes the architecture, progress, road map etc. Some of my more complex projects use 30k tokens just on this, with the memory bank built from existing docs and stuff I told the model along the way. Too much context can make models worse but overall it's a fair tradeoff - it maintains my coding style and architecture decisions pretty well.

I also recommend in each session using Plan mode to get to a design you are happy with before generating any code.

My IT department use the official Microsoft phishing test. The emails arrive in inbox with 0 headers. (There's also a helpful Microsoft page of all the dodgy sounding domains they've registered for this.)
Re:Microsoft PowerToys on Thursday September 11, 2025 @09:14AM (#45211227)
7zip adds a context menu option for this.
Large companies need to do it too, including all LSE listed. Here is a summary by the regulator https://www.frc.org.uk/library/digital-reporting/structured-...

But of course a LLM could theoretically automate much of the analysis stage.

UK company filings are already marked up with machine readable, structured, standardised tags. It's called XBRL. So it doesn't necessarily need a LLM to parse.
MS Copilot is quite useful for meeting minutes and summaries etc. Still not nearly as useful as good handwritten notes but saves loads of time.
It is not so much that used diamonds are worth less (although they might decline in value without provenance to prove they are natural or if they are chipped) but the huge markup on retail jewellery. It's easy for any member of the public to buy and sell gold at close to market price, it's much harder with diamonds.
TL;DR: Amazon somehow merged a malicious PR that changed the system prompt to one that would aim to delete everything, locally and in the cloud, and this got included in the release version.

Older »