News for hackers. Stuff that matters.

justincormack

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @05:54AM (#50324439)
No, they are providing a service, LTS, that customers still want and pay for. Only once the customers realise its not a workable product and they want a rolling update product, with all the changes that implies, will this change.
Re:Digital Minimalism on Saturday October 31, 2026 @06:29AM (#50314693)
Richard Sutton is on this great social network https://arxiv.org/search/cs?searchtype=author&query=Sutton,+...
Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Saturday October 31, 2026 @06:10AM (#50314595)
That doesnt mean the key leaked - its likely in an HSM for example, but there is an API to get it to sign stuff. Access to use keys is less bad in many ways than leaking keys, but still pretty useful.
Re:Building an AI-native engineering org on Saturday October 31, 2026 @05:28AM (#50314418)
You have to get the agent to refactor it doesnt spontaneously do it.
Re:Northflank Breached on Friday October 30, 2026 @06:23PM (#50310910)
AWS Q3 year on year growth was 39%, which is the highest it has been for a long time, so are you sure its significant?
Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @03:28PM (#50309008)
You can also reduce blast radius from breaches, and make systems more robust, rather than just trying to make zero mistakes. How bad breaches are and how well you can recover is also part of the outcome, just framing it as zero breaches or nothing is not that helpful, even though reducing breaches is important.
Re:Northflank Breached on Friday October 30, 2026 @03:22PM (#50308944)
If you look at the numbers for revenue at the hyperscalers right now this move doesnt seem significant.
Re:Moxnox 1.0: NT-Like, POSIX-Compatible OS Running Atop Btrfs on Wednesday October 28, 2026 @08:56AM (#50272807)
Windows Nano Server nearly was that although wasnt cheaper.
Re:An examination of lost firefly species of the US and Canada on Wednesday October 28, 2026 @07:39AM (#50271974)
Where in the UK? I am in the UK and I grow wildflowers all over my front lawn and no one stops me, and there are no powers to stop me.
Re:An examination of lost firefly species of the US and Canada on Wednesday October 28, 2026 @05:53AM (#50271152)
Could it? Where else in the world has this sort of control? Most countries have more lawn freedom I think, you might get people disapprove but there are no controls.
Re:An examination of lost firefly species of the US and Canada on Wednesday October 28, 2026 @05:51AM (#50271140)
More likely a native plant.
I think a daguerrotype might be reversed, as its a direct positive image, so thats probably intentional to match the layout.
Coal is a dead end anyway.
Re:Amazon's "Digital Pacifier" for Toddlers on Monday October 26, 2026 @08:33AM (#50242568)
Dial up! We had to type in listings printed in magazines. And we liked it!
Re:Docker Is Weird on Friday October 23, 2026 @03:35AM (#50205610)
I interviewed Solomon about the Go history (plus some others) for this talk https://www.infoq.com/presentations/languages-cloud-native/

Actually there are some longer unedited versions I might release.

Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @12:12PM (#50197373)
My iPhone 12 is fine, so its not that Apple has done nothing, but there must still be issues with getting this to all devices?
Re:Railway Security Disclosure on Thursday October 22, 2026 @07:55AM (#50194119)
Plugging a keyboard into your Railway instance every time you start on app is not going to give you a great SaaS experience.
Re:Railway Security Disclosure on Thursday October 22, 2026 @07:52AM (#50194100)
Well, OIDC Federation exists, but its still not widely available, and also requires a trustworthy party.
Some of them seem to do some cert pinning
Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @04:19PM (#50172072)
There are 30k websites using certs chained to that root
Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @12:01PM (#50168390)
The Go and Rustls upgrades specifically block the intermediate certs because neither of these use the system revocation lists, I believe. Once you upgrade to a trust store without the root cert for the CA this will also solve the issue. Not sure about other ecosystems.
The Apache foundation does not fund projects, nor do other foundations.
No they don't, legal citation needed if you are going to claim this.
Hares were also introduced.
Re:Timestral: Mistral release time-series foundation models on Monday October 19, 2026 @09:21AM (#50152134)
For some kinds of forecasting it doesn't need to be exactly accurate - eg say you are forecasting traffic for how to scale a load balancer, it can be a bit off it will just cost you a little and you can adjust after - a lot of feedback systems dont need full accuracy. You wouldnt use this to forecast whether to buy shares. It basically replaces various traditional curve fitting tools. If you need a really good forecast yes you are going to build a domain model. At least this is my understanding...
Re:Redesigning Source Control at Anthropic on Tuesday October 13, 2026 @02:55PM (#50076773)
AI models is much of what they build. A lot of software around that to support it.
Re:Intel D270 GPU AI Accelerator–Up to 480 GB LPDDR5X on Tuesday October 13, 2026 @03:44AM (#50068147)
Thats not an AI GPU its a consumer product.
Re:Intel D270 GPU AI Accelerator–Up to 480 GB LPDDR5X on Tuesday October 13, 2026 @03:42AM (#50068139)
I dont think it has a video out
The original book that article is based on is great.

Older »