News for hackers. Stuff that matters.

kidbomb

For the specialists: how much of temperature settings would help on the regression to the mean? Doe
Put "stealing a car" between quotes because part of it looks like an act. The relay attack seems mostly legit though.
Re:Ask HN: How to Be Alone? on Monday March 09, 2026 @11:20AM (#47310252)
Most of my friends have either joined religious groups or running teams. I never realized that, besides the philosophical and health components, there was also a social one to it.
Re:Ask HN: How to Be Alone? on Monday March 09, 2026 @11:18AM (#47310228)
Gym has made wonders for me. Most of my friends are either on crossfit or running groups. I have joined a kickboxing gym. This helps you on multiple levels: - It provides you a routine - It makes you meet other people - It makes you exercise regularly

All of the above stave off the loneliness.

Also, get a hobby where you mind focus on one thing only. Play a instrument. Draw. Solve puzzles. Jimmy Carr had a similar issue and he started to play with legos.

Re:Ask HN: How to Be Alone? on Monday March 09, 2026 @11:13AM (#47310172)
> Working remotely by yourself every day sucks

The best thing is to have the OPTION to either work at home or at the office.

Sometimes, you need the focus. But sometimes, you need to see people.

Re:Places to Telnet on Tuesday January 27, 2026 @02:02AM (#46776417)
Anyone knows what happened with it? Maybe the creator would like to pass the torch?
Re:Ask HN: How can I get better at using AI for programming? on Saturday December 13, 2025 @02:29PM (#46257167)
Does the same happens if I create an AGENTS.md instead?
Re:Vibe code is legacy code on Wednesday July 30, 2025 @06:38PM (#44740360)
// When I wrote this code, only Copilot and I understood what I did. Now only Copilot knows.
Re:Azure's Weakest Link? How API Connections Spill Secrets on Thursday March 13, 2025 @12:07AM (#43350285)
Identity management is a mess on Azure! I still cannot understand the difference between app registrations and enterprise applications, and how they tie into service principals.

They also have a lot of different resources, such as Graph API, Entra ID.

Manage identities are simpler, since they are Azure constructions, so they work more or less like a IAM role. But then you try to use them with Entra ID APIs and things fall apart.

It's not about crushing tickets. It's about crushing the right tickets.
IMHO the second problem goes deeper:

Sign In with Apple is allowing you to "create an account"(author's words) on @company.com, which should not be supported in the firat place. Instead, it should rely in a central directory controlled by company.com for authentication

"Create an Apple account with [email protected] email"

Wait - how is that workflow possible and supported?

In my head, authorization under @company.com would be delegated to a central directory, instead of relying on Apple ID. It is effectively an authentication bypass.

Ask HN: Should a risk assessment list all dependent tools?

With the whole Crowdstrike fiasco, I wonder how IT analysts can properly communicate the risks of having a 3rd party service malfunction to leadership.For example, most of us operate in the AWS space, and are aware of the risk of regional failures. While some choose to accept the risk, some instead have multi-regional deployments.Should all these (Saas) tools be listed in a risk assessment...

( Read More... | 4 comments | on HN )
Lessons learned from this:

- CS: Have a staging (production-like) environment for proper validation. It looks like CS has one of these bu they have just skipped it - IT Admins: Have controlled roll-outs, instead of doing everything in a single swoop. - CS: Fuzz test your configuration

Anything I have missed?

Older »