News for hackers. Stuff that matters.

kawsper

My family rescued a jackdaw when I was growing up and it lived with us, we named him Klaus.

He could say “goddag” (hello) and “gå væk” (go away), and he would use them in context. Say hello to people entering, and go away if he wanted to be left alone.

When he was young he would steal my granddads cigar, fly up somewhere high in a tree or a lightpole, but where he could be seen, and dismantle it.

He grew very old and had a lot of white feathers in the end. I’ve always liked jackdaws after that, I love seeing them around and their little personalities.

Re:Cartographers of North Korea on Sunday October 11, 2026 @06:13PM (#50048443)
I'm also not a big contributor, but I haven't noticed any vandalism in the places where I map (Copenhagen, Denmark and around the west midlands of UK), but I have stumbled upon the occasional edit war where someone will be removing features like their private pond and someone will be reverting their removal.
Re:Cartographers of North Korea on Sunday October 11, 2026 @06:08PM (#50048377)
Lovely presentation of the data.

I really liked reading the responses from the contributors, it was surprisingly interesting to read their personal motivations and stories.

Re:IRCv3 on Sunday October 11, 2026 @10:50AM (#50043902)
In Denmark it was MSN Messenger, the nerds were on IRC and also had ICQ.
Re:Hacking OpenAI on Friday September 18, 2026 @05:07AM (#49751852)
I use ruby-landlock as well for image processing. I can recommend setting VIPS_BLOCK_UNTRUSTED=1 when you switch to vips, it blocks untrusted image decoders.

Not setting that value caught the rails team off guard just recently, maybe it should be the default.

Re:Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7% on Wednesday September 16, 2026 @02:57PM (#49731378)
They can just add an http header that browsers and browser plugins can listen for, they already add `cf-cache-status: HIT`, so they could add this too:

    cf-http-endpoint: 1
or if you want it to match their own terminology[0], it could be:

    cf-encryption-mode: off/flexible/full/full-strict/strict
[0]: https://developers.cloudflare.com/ssl/origin-configuration/s...
Re:The Beauty of Roundabouts on Wednesday September 16, 2026 @04:26AM (#49723529)
As a bicyclist and pedestrian (in Denmark) what is it that’s worse about roundabouts for me? I think they work really well.
Re:Government Rails Site Hit Hours After CVE Patch on Friday September 04, 2026 @03:56PM (#49569448)
libvips also have a block_untrusted mode where it will block unsafe loaders, .mat seems to be marked as untrusted:

    vips -l
    VipsForeignLoadMat (matload), load mat from file (.mat), priority=0, untrusted, is_a, get_flags, get_flags_filename, header, load
Re:Is this the end of the once-mighty GoPro? on Saturday July 18, 2026 @01:33PM (#48960236)
> and hackable with official firmware from the company.

GoPro Labs works really well, https://gopro.com/en/us/info/gopro-labs

But it's a bit sad how long their expirements lives there before making it into the default firmware.

Re:Is this the end of the once-mighty GoPro? on Saturday July 18, 2026 @01:31PM (#48960203)
All GoPros since HERO 8 (released 2019) works as a webcam without any hacks, just plug it in.
Re:In praise of memcached on Tuesday June 23, 2026 @04:28AM (#48642001)
We had Rails writing to memcached, and nginx pulling from memcached for full page caching.

At some point someone decided to gzip all writes into memcached, and our site looked really fun for a while.

Re:In praise of memcached on Tuesday June 23, 2026 @03:54AM (#48641734)
I think the clearest example of that is that people think Redis can only function as a cache that loses data on crash or shutdown.

I think that’s because people replaced Memcached with Redis, and expect the same from it.

I just don’t want to be reminded how I look like while using these devices, it’s really distracting to me.

If I wanted to know what I look like, I use a mirror.

Re:Dropping Cloudflare for Bunny.net on Tuesday April 07, 2026 @11:47AM (#47677149)
That's interesting, we moved to Cloudflare R2 for our CDN solution, and we got reports from some european government institutions that our assets weren't loading, likely for similar reasons as you mention, so we rolled back whilst looking for options.

The solution was to move to Bunny, and that worked for everyone.

Re:Every GPU That Mattered on Tuesday April 07, 2026 @06:27AM (#47673026)
I was running a 970ti for the longest time, it was only when I wanted to get into some VR gaming that it was time for an upgrade.
Re:Every GPU That Mattered on Tuesday April 07, 2026 @06:25AM (#47673009)
We had the Riva TNT2 in our family computer, so that was fun to see that again, I think it was paired with an AMD K6-2 chip.

One day one of my friends from school wanted to optimize airflow in our computer, and re-did the cabling, but he managed to block the CPU-fan from spinning. I am not sure how, but we didn't realise it for a couple of months.

When I got my own PC, it had an AMD Barton chip, and it allowed me to play Half-Life 2.

Even earlier than that:

Win98: bad

Win98 SE: good

Re:Lazycut: A simple terminal video trimmer using FFmpeg on Monday March 16, 2026 @03:03PM (#47403280)
I asked about this tool 3 days ago, HN is a magical place! https://news.ycombinator.com/item?id=47363432
Re:Digg is gone again on Saturday March 14, 2026 @08:07AM (#47375824)
If someone wants to read the AMA, it is here: https://www.reddit.com/r/IAmA/comments/1qhf27j/alexis_ohania...
Speaking of ffmpeg tools, someone on HN showed a TUI for ffmpeg that let you trim a video, with a preview in your terminal so you could trim precisely.

I've tried searching for the comment but without any luck, if anyone have a suggestion for the name, I would be grateful.

If you can get your hands on it, I recommend the 4 episode BAFTA-winning mini-series about it: https://en.wikipedia.org/wiki/Mr_Bates_vs_The_Post_Office
Re:Put the zip code first on Saturday March 07, 2026 @06:56PM (#47292749)
A lot of the times both "zipcode" and "state" are mandatory fields.

Zipcode is easy, the platform likely wants my postal code.

You have to be a little bit more creative with state, sometimes "We don't have any states" is fun to see printed on your address label on a parcel, other times "Denmark" could be considered a state in the EU and that can be an answer, but most times "N/A" is enough.

Re:Put the zip code first on Saturday March 07, 2026 @06:52PM (#47292720)
My postal code is 2200 (København N), and that form didn't do anything for me.

All zip codes are postal codes, but not all postal codes are zip codes.

At my last gig, this sentence was said a lot, and people kept confusing the two, both in code and in daily speech, so maybe colloquially they are the same :)

Re:Stathat Is Shutting Down on Wednesday March 04, 2026 @09:53PM (#47256905)
This makes me a bit sad, the $99/month always made other options more preferable for me, but I always loved the graphs from stathat and the forecasts seemed useful.
Re:Bunny Database on Wednesday February 04, 2026 @01:19PM (#46889470)
Hi Joe,

Thank you for your update, it's really appreaciated, it will be good to get this sorted :) It sounds like quite a challenge you're working on with the ingest and backlog!

Re:Bunny Database on Tuesday February 03, 2026 @06:06PM (#46878703)
At 14:00 UTC, I was still seeing requests from 2026-02-01, and none from today, the order also seems random.

Hopefully it will be fixed soon.

Re:Bunny Database on Tuesday February 03, 2026 @11:57AM (#46873590)
I've been struggling with Bunny the last couple of days.

Their log delivery api is delayed by over 3 days, despite them promising only "up to 5 minutes delay" in their docs: https://docs.bunny.net/cdn/logging

Why isn't it on the status page you might ask? Oh, that's because a delay is not "critical", but I fear I am losing loglines now, their retention is 3 days.

It's an interesting strategy for them, because it doesn't inspire confidence in me about their other offerings. When they can't reliably operate a log delivery API or be transparent about issues, it's hard to trust them with something as critical as a database.

Re:Disrupting the Largest Residential Proxy Network on Friday January 30, 2026 @08:46PM (#46832498)
Oxylabs sells proxies for scrapers, I suppose you can use the socks-proxy as a VPN, and they claim to use Honeygain.

Honeygain is a platform where people sell their residential internet connection and bandwidth to these companies for money.

For comparison Honeygain pays someone 10 cents per GB, and Oxylabs sells it for $8/GB.

Re:IPv6 is not insecure because it lacks a NAT on Wednesday January 21, 2026 @04:58AM (#46703370)
When I was about 12 I was working on a PHP3 application, I had some issues with a MySQL query, and I pasted my code to pastebin (or whatever we used back then) and shared the link on IRC, the code included my database credentials.

Back then our ISP gave every computer a public IP.

The next thing that happened was that someone changed my MySQL password, and me being 12, I didn’t know how to change it back.

They made me beg for the password, to much amusement to the whole channel, and then they helped me secure it and taught me how to reset the password.

NAT would have saved me, but I wouldn’t have received a free, though a bit embarrassing, security lesson.

Older »