kam
Re:Today, we hacked what we'd set out to hack: the iPhone
on Friday October 23, 2026 @01:04PM (#50212149)
Apple doesn't want security researchers to find bugs? Then why do they have a $2m bug bounty?
Re:eMudhra to Exit Global SSL/TLS Certificate Business
on Thursday October 22, 2026 @11:50AM (#50197074)
CAs check CAA records, clients don't.
Re:Saving another 100TB of RAM with math (and Rust)
on Saturday September 19, 2026 @04:14PM (#49769763)
Sam and Dario really maxed out their rigs.
Re:AnkiDroid: Google Play no longer allowing Open Collective donation ...
on Tuesday September 01, 2026 @11:25AM (#49523231)
Google is not the payment processor. This is about the app including a link to a donation page on opencollective.com.
Other 501(c)(6) organizations you might have heard of include the Linux Foundation and the Rust Foundation.
Re:Launch HN: machine0 (YC S26) – Persistent CPU and GPU VMs from the CLI
on Tuesday August 18, 2026 @06:39PM (#49353806)
NixOS 25.11 was EOL a month and a half ago. Where's NixOS 26.05?
Re:Codeberg Divides
on Friday July 24, 2026 @05:30PM (#49041812)
Ardour does not seem to require a CLA or copyright assignment, so the maintainers don't own the copyright over contributions either way. The contributor would not be able to sue someone over a GPL violation if their contribution is public domain, but what random small contributor is going to participate in a GPL infringement suit anyway? Doesn't change the maintainer's rights to do so with any of their own human-authored contributions.
Re:You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
on Friday May 08, 2026 @06:40PM (#48069632)
Also "The page pool is only created on a real ZCRX-capable NIC (mlx5 ConnectX-6+, Intel E800, NFP)"
Re:Maybe you shouldn't install new software for a bit
on Friday May 08, 2026 @09:11AM (#48062586)
Cargo will still pick the latest for transitive dependencies that aren't explicitly specified in your Cargo.toml. This is what Cargo.lock is for.
Re:AI assistance when contributing to the Linux kernel
on Saturday April 11, 2026 @12:32AM (#47727428)
> Being in the public domain is not a license; rather, it means the material is not copyrighted and no license is needed. Practically speaking, though, if a work is in the public domain, it might as well have an all-permissive non-copyleft free software license. Public domain material is compatible with the GNU GPL.
Re:USB for Software Developers: An introduction to writing userspace U...
on Wednesday April 08, 2026 @10:20PM (#47698618)
And for Rust, https://github.com/kevinmehall/nusb
Re:USB for Software Developers: An introduction to writing userspace U...
on Wednesday April 08, 2026 @10:16PM (#47698603)
USB devices cannot directly address host memory like PCIe or FireWire, but the XHCI controller does DMA to/from host memory, and most USB device controllers have some kind of DMA between USB and the device's RAM.
Re:USB for Software Developers: An introduction to writing userspace U...
on Wednesday April 08, 2026 @10:11PM (#47698573)
No need to pretend to be HID. Windows has WinUSB for userspace USB drivers that don't need special signing.
Re:We rewrote our Rust WASM Parser in TypeScript – and it got 3x Faster
on Friday March 20, 2026 @08:10PM (#47462588)
No, serde-wasm-bindgen implements the serde Serializer interface by calling into JS to directly construct the JS objects on the JS heap without an intermediate serialization/deserialization. You pay the cost of one or more FFI calls for every object though.
Re:CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalati...
on Thursday March 19, 2026 @12:57AM (#47435137)
Send a message to a socket-activated daemon running as a UID with write access to the password database.
Re:Solo ASIC tapeout on a budget: detailed write up
on Wednesday January 07, 2026 @09:25PM (#46536391)
See also Luke Wren's Mastodon thread on taping out a RISC-V chip in two weeks: https://types.pl/@wren6991/115572086565318699
Re:Android's sideloading limits are its most anti-consumer move yet
on Monday October 13, 2025 @05:41PM (#45573649)
https://android-developers.googleblog.com/2025/09/lets-talk-...
> Android Studio is unaffected because deployments performed with adb, which Android Studio uses behind the scenes to push builds to devices, is unaffected.
Re:Show HN: Traceroute Visualizer
on Thursday October 02, 2025 @04:45PM (#45455334)
The calls to the ipinfo.io API are blocked by Firefox Enhanced Tracking Protection. No results for Location or ISP without turning that off.
Re:Docker Hub Is Down
on Wednesday September 24, 2025 @07:54PM (#45367434)
> Is there a mirror registry with all the same basic images?
Re:Supabase OrioleDB Patent: now freely available to the Postgres comm...
on Wednesday September 10, 2025 @04:18PM (#45203033)
You could put it under a "PostgreSQL OR Apache-2.0 at your option" dual-license, so all contributors give you their code under both licenses, instead of needing to re-license later. The Rust project does this (MIT OR Apache-2.0) to get the patents clause from Apache while retaining compatibility with MIT and GPL.
Re:Google to require developer verification to install and sideload An...
on Monday August 25, 2025 @11:52PM (#45022079)
That's a bad analogy. No one is complaining about Google providing Android security updates.
This is like a car manufacturer preventing the installation of all unapproved aftermarket accessories by claiming they're protecting you from a stalker installing a tracker on your car.
Re:We replaced passwords with something worse
on Thursday August 07, 2025 @04:18PM (#44829831)
The browser that initiated the request is under the control of BAD in step 3.
Re:OSS Rebuild: open-source, Rebuilt to Last
on Tuesday July 22, 2025 @01:58PM (#44650784)
Nixpkgs pulls source code from places like pypi and crates.io, so verifying the integrity of those packages does help the Nix ecosystem along with everyone else.
Re:Shipping WebGPU on Windows in Firefox 141
on Wednesday July 16, 2025 @11:20AM (#44583256)
What improvements does WebGPU bring vs WebGL for things like Potree?
Re:Show HN: Icepi Zero – The FPGA Raspberry Pi Zero Equivalent
on Friday May 30, 2025 @11:12PM (#44141629)
The examples in the repo are using the open-source yosys + nextpnr tooling.
Re:I Use Zip Bombs to Protect My Server
on Tuesday April 29, 2025 @07:23PM (#43839252)
No, compression formats are not Turing-complete. You control the code interpreting the compressed stream and allocating the memory, writing the output, etc. based on what it sees there and can simply choose to return an error after writing N bytes.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
on Wednesday April 16, 2025 @03:34PM (#43709433)
At least that sounds like it would be a more interesting story than the one where the person who quit a year ago didn't document all the places they manually installed the 2-year certificate.
Re:New USPTO Memo Makes Fighting Patent Trolls Even Harder
on Friday March 21, 2025 @04:07PM (#43440273)
I think the idea is that if an LLM trained prior to the patent date can reproduce the invention, then either the idea is obvious or there was prior art in the training set; either way the patent is invalid.
Re:Google Pixel 4a old firmware is gone, trapping users on the buggy b...
on Wednesday January 29, 2025 @02:13PM (#42869688)
I also looked around AOSP and found the commit for the battery alert icon [1], but no kernel source.
[1] https://android.googlesource.com/platform/frameworks/base/+/...
Re:NonStop discussion around adding Rust to Git
on Thursday December 12, 2024 @09:50PM (#42405563)
This isn't "Rust Evangelists" pushing Rust on Git, it's Git developers wanting to use Rust.
Also, there's already a separate from-scratch re-implementation of git in Rust (gitoxide).
Re:Former President Trump is projected to win the presidency
on Wednesday November 06, 2024 @12:17PM (#42065610)
The license is for the use of the broadcast spectrum (a scarce, shared resource), not practicing journalism.