News for hackers. Stuff that matters.

jwilk

What are the other implementations?
Re:Today, we hacked what we'd set out to hack: the iPhone on Saturday October 24, 2026 @04:52AM (#50219372)
TIL! This is what PDF 1.7 spec says (§4.7.1):

> Beginning with PDF 1.1, a content stream can include PostScript language fragments. These fragments are used only when printing to a PostScript output device; they have no effect either when viewing the document on-screen or when printing it to a non-PostScript device. In addition, applications that understand PDF are unlikely to be able to interpret the PostScript fragments. Hence, this capability should be used with extreme caution and only if there is no other way to achieve the same result. Inappropriate use of PostScript XObjects can cause PDF files to print incorrectly.

> Note: Since PDF 1.4 encompasses all of the Adobe imaging model features of the PostScript language, there is no longer any reason to use PostScript XObjects. This feature is likely to be removed from PDF in a future version.

Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @02:42PM (#50213565)
> the PostScript support

What do you mean by that?

Re:A complete bypass of eMudhra’s 1FA OTP login system on Thursday October 22, 2026 @06:01PM (#50201677)
It uses the API, which hopefully is protected from bots less fiercely.
Re:A complete bypass of eMudhra’s 1FA OTP login system on Thursday October 22, 2026 @05:35PM (#50201385)
You can use https://github.com/jwilk/zygolophodon to read Mastodon posts in your terminal:

  $ zygolophodon --with-ancestors https://mastodon.catgirl.cloud/@49016/117475976434068995
Re:mitmproxy adds --emudhra option on Thursday October 22, 2026 @04:49AM (#50192888)
Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @11:21AM (#50182548)
> I want to understand how it leaked

I'm confused. How do you know it leaked?

Re:Making an 88x31 book-button using ImageMagick on Tuesday October 20, 2026 @03:04PM (#50171110)
Re:Making a 88x31 button book using ImageMagick on Tuesday October 20, 2026 @03:03PM (#50171091)
(2024)
Re:The Unicode Standard, Version 18.0 on Wednesday September 16, 2026 @04:23PM (#49732460)
Previous discussion:

https://news.ycombinator.com/item?id=48290881 ("Unicode 18.0.0 Beta", 3 months ago, 66 comments)

They do this by setting cookie "redesign_optout=true" for www.reddit.com (and then using that domain).
Re:XCancel service is suspended (again) on Monday September 14, 2026 @09:33AM (#49696619)
Currently on the front page: https://news.ycombinator.com/item?id=49695459 (over 100 comments)
Re:The kernel does not care what you named the tool on Saturday September 12, 2026 @01:53AM (#49669294)
LSM = Linux Security Module

What's TCB though?

Re:Stop making swap partitions–use swap files instead on Friday September 11, 2026 @04:16PM (#49664727)
Also, fallocate+chmod is racy: between the two calls, an attacker could open the file, and then keep it open until next reboot. OTOH, mkswap creates the swap file with the correct permissions straight away.

The --size and --file options are relatively new, though: they were added in util-linux v2.40, released in 2024.

Re:Recursion into Madness on Friday September 11, 2026 @01:27PM (#49662060)
Re:Nitter has more working instances than before the takedowns on Saturday September 05, 2026 @10:26AM (#49576815)
You can use www.reddit.com (yes, this domain, not old.reddit.com) with the old UI if you set cookie "redesign_optout=true".
Re:Working to Make Python Lazy on Friday September 04, 2026 @06:44AM (#49562820)
It's a soft keyword: https://docs.python.org/3.15/reference/lexical_analysis.html...

> As soft keywords, their use in the grammar is possible while still preserving compatibility with existing code that uses these names as identifier names.

The HN submission title is a garden-path sentence:

Hackers Had a Live Feed of Every ID Verification Company Scanned

(Huh? How do you scan a company?)

The original title is easier to parse:

Hackers Had A Live Feed Of Every ID This Verification Company Scanned

Re:Fuck Off as a Service (Foaas) on Thursday September 03, 2026 @10:22AM (#49550307)
Discussed in 2013:

https://news.ycombinator.com/item?id=6069353 (105 comments)

Sadly the original domain has been usurped.

Re:Mushroom hunting with LLMs: what can go wrong? on Wednesday September 02, 2026 @03:48PM (#49541443)
The lack or determinism is irrelevant. It's trivial to make an LLM deterministic (certianly much easier than to make a human deterministic!), but that wouldn't make it any more trustworthy.
Re:Tmp.0ut, Vol. 5 on Monday August 31, 2026 @02:51PM (#49513418)
Re:“I just chose words carefully” on Monday August 31, 2026 @10:43AM (#49510398)
Hmm…

  To do so, attach the following notices to the program. It is safest 1 to
  attach them to the start of each source file to most effectively 2 state
  the exclusion of warranty 3; and 4 each 5 file 6 should 7 have 8 at 9 10
  least 11 the 12 "copyright 13 line 14 and 15 a 16 pointer 17 to 18 where
  19 the 20 full 21 notice 22 is 23 found 24.
What's up with the numbers?
Re:Creepy Crawlies on Sunday August 30, 2026 @02:59PM (#49501703)
From the HN guidelines <https://news.ycombinator.com/newsguidelines.html>:

> Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that".

Re:Creepy Crawlies on Sunday August 30, 2026 @01:54PM (#49501048)
Huh? Are you saying there's an Argon2 implementation in the kernel?
Re:Git.kernel.org Is "Interesting" to Crawlers on Sunday August 30, 2026 @01:47PM (#49500976)
https://news.ycombinator.com/item?id=49491791 (over 200 comments at the moment)

Older »