News for hackers. Stuff that matters.

kalaksi

Password isn't used directly as key. The key is derived with PBKDF.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Saturday October 31, 2026 @03:32AM (#50313974)
I'm not sure you have understood me correctly.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @01:58AM (#50300341)
And they still do. That's partially my point.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:44PM (#50297298)
It's a poor dunk anyway. The crypto space is vast and has many kinds of coins and communities/people. Some people seem to think it's still 2012.
Meanwhile, as said, well-meaning people get essentially harassed and silenced for allegedly being trolls if they are not aware of all the intricacies and differences in how people may view some words. Or they just make a mistake. That may push them away, but there will likely be room for different kinds of spaces and different kinds of cultures, just like today.
Re:Software may be getting worse, but it used to be horrible on Tuesday October 27, 2026 @05:41PM (#50266252)
I'm assuming new is the default, so that.
Re:Software may be getting worse, but it used to be horrible on Tuesday October 27, 2026 @01:51PM (#50263054)
As it happens, today I stopped in awe about the slowness of right-clicking Windows 11 desktop on my work laptop. It consistently took over ~500ms to open the menu. I think one can get used to the slow response times after a while, but I probably won't since I only use Windows for work.
Re:France needs to read my paper on Friday October 23, 2026 @07:06AM (#50207127)
It's an interesting topic. So let's say many people get laid off as automation takes over. If we have UBI that covers mostly bare necessities (as an example), shouldn't supply and demand stay basically the same? Or demand even lowers if people can't afford what they previously did.

If people have more money (or population grows) so that demand grows while supply stays the same, prices will rise and find a new equilibrium where people can again afford less and therefore buy less.

I'm not sure if it's an option to just leave most of the population to starve either so what's the alternative to some kind of social security or UBI? Long ago, a factory called "nature" used to provide relatively more of our needs, but that's not feasible today. But this quickly gets philosophical and political, of course.

In any case, finite resources are finite regardless if we have UBI or not.

Re:Google cleared 300 hectares of Finnish forest on Thursday October 22, 2026 @02:42PM (#50199379)
> The amount of deforestation discussed in this article is miniscule compared to the global amount.

By that logic, why not cut half of Finland's forests? I'm sure they won't mind since it's such a small area globally after all. And I think there are also other nuances than just net loss of forest.

Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @08:54AM (#50180101)
systemctl mask/unmask
Re:The OLED Burn-In Test: 30-Month Update on Thursday October 08, 2026 @05:10PM (#50012339)
Right, almost forgot IPS glow. I have probably gotten a bit accustomed to it and if I'd use OLED monitor for extended period, I'd probably start noticing issues with IPS more. That said, I think this current IPS panel is also better than some other Dell IPS monitors I've used at work previously and has less noticeable glow.
Re:The OLED Burn-In Test: 30-Month Update on Thursday October 08, 2026 @04:38PM (#50011870)
Touted by who, though? Proper reviews and tests will catch such things quickly.
Re:The OLED Burn-In Test: 30-Month Update on Thursday October 08, 2026 @04:33PM (#50011797)
Have you had IPS panels? I have a similar Alienware ultrawide monitor but with IPS panel. IPS still remains my favorite. Didn't dare to get OLED for computer monitor since I expected burn-in over the years. OLED could maybe have a little bit better colors, but I got LG's OLED TV a few years back and was a bit disappointed to see that the image isn't perfectly even (more clearly visible with grey image) and sometimes with dark areas there's some kind of barely noticeable weird edge effect. Kind of like the OLEDs just lighting up after reaching some threshold. And some other very minor effects like little uneven flickering of a fire in a dark scene.
Re:LLMs may have immensely helped my RSI on Wednesday October 07, 2026 @02:42AM (#49989163)
Caffeine is an interesting one, maybe it caused unnecessary muscle tension?

I've tweaked my keyboard layout so that caps lock is left ctrl (with KDE this is just one click away in the settings). I never need caps lock anyway. That helps a lot with different keyboard shortcuts. The default ctrl position is awful.

Re:Don't be the out of touch Kung Fu master – John Carmack on Sunday September 13, 2026 @04:31AM (#49681463)
Is that actually a high review rate? Especially if you know the language and domain. Sure, initially there's a learning curve for a new codebase structure, but lots of lines will also be trivial and many changes might also be similar to each other.
Re:Play GTA III in the Browser on Sunday September 06, 2026 @05:51AM (#49584873)
In technical contexts it's often still important to use words accurately so in that sense it might not lose it's original meaning completely. I've come to accept that everyday language can be messy and inaccurate and one can't always get it right especially if they're not familiar enough with the topic. You can still get the meaning across well-enough.
Re:Sovereign Tech Agency invests €500k in Flatpak on Friday August 28, 2026 @05:26AM (#49476299)
It's explicit in the sense that you choose to grant those permissions, but I get what you mean. Android apps also used to be more like that but nowadays you can have more control when to grant access to what. Flatpak apps can also explicitly request access through portals, but many apps probably haven't put the effort to properly use the sandboxing features and instead try to request excessive permissions beforehand.
Re:Sovereign Tech Agency invests €500k in Flatpak on Friday August 28, 2026 @03:44AM (#49475592)
Don't know how you installed it, but required permissions are usually shown and warned about. The CLI could be clearer, though, but shows that host filesystem access is granted to calibre when it prompts to install
Re:Sovereign Tech Agency invests €500k in Flatpak on Friday August 28, 2026 @03:31AM (#49475499)
Isn't that exactly how it's supposed to work, though? When I install a flatpak app for my user, it gets put into a standard location as a directory and by default has no access to filesystem other than the apps own config and data dirs (can't remember the paths). The fact that many apps choose to require excess permissions and can then bypass standard locations is a different matter
Re:Linux 7.3 improves performance when running out of vRAM on Tuesday August 18, 2026 @07:09AM (#49343952)
Me too, but you can improve the behavior yourself too. It's been an issue with desktop linux and the default settings for a long time. You could maybe tune OOM killer settings, but another option is to use a package like earlyoom: https://man.archlinux.org/man/earlyoom.1.en
Re:Incident with Github.com on Monday August 17, 2026 @10:40AM (#49331829)
You are still supposed to be prepared for outages.
I'm not holding my breath for masses to become informed, rational, responsible and balanced overall.

And why would the responsibility lie solely on consumers to act perfectly

Recently they also seem to have made big changes that makes Cursor worse for editing code by hand. I'm not sure what they are trying to do, but it doesn't feel like vscode fork anymore. I'm starting to consider alternatives.

To answer your question though, to me your workflow seems cumbersome. Cursor is more integrated and more frictionless.

For many people it's still compelling and not "a concept". If you're looking for the cheapest phone with most performant CPU, RAM etc. (relative to price), then you're probably not target audience.
Uh, Fairphone does have compelling products?
Re:Chatto is now Open Source on Thursday July 09, 2026 @09:13AM (#48845302)
> I don't need e2ee for group messages and it brings too much complexity with it.

E2EE is not mandatory and public rooms don't usually use it.

Don't bigger companies also often benefit from scale in multiple ways so it gets harder and harder for newcomers to compete? And if a newcomer does manage to get a foothold, it might get bought.
Re:Memory safety CVEs differ between Rust and C/C++ on Monday June 15, 2026 @01:49PM (#48544747)
And at least in Chromium project, half of those memory safety issues are use-after-free: https://www.chromium.org/Home/chromium-security/memory-safet...
Re:1k Data Breaches Later, the Disclosure Lag Is Worse on Monday June 08, 2026 @10:56AM (#48446232)
Personally, I haven't had any serious leaks that I know of so I've mostly suffered from increased spam and scam attempts (I know they were a result of a leak).

One time there was a leak from a university database and as a result there were a few news articles over the years about people that had their identity stolen likely due to that leak. It's not just credit card charges. They have had loans taken in their names, stuff bought on store credit or something (nowadays that's not so easy), stuff stolen from library in their name...

They had to deal with the fallout for years, always fearing that there's a new letter waiting at home regarding some unpaid expense or from debt enforcement agency that they have to contact and try to make it go away. It shouldn't be too hard if you have an open case with the police but it's not always that easy.

Also, if the leaked data is sensitive (e.g. private conversations, records about mental health etc.), you can face extortion or the data may get published.

One other thing that I know of personally is that victims of harassment very much don't like to have their contact info leaked to the harasser.

Re:Do agents.md files help coding agents? on Monday June 08, 2026 @04:06AM (#48442542)
The paper actually says: "We find that all context files consistently increase the number of steps required to complete tasks. LLM-generated context files have a marginal negative effect on task success rates, while developer-written ones provide a marginal performance gain."

"Overall, our results suggest that context files have only marginal effect on agent behavior, and are likely only desirable when manually written."

Older »