News for hackers. Stuff that matters.

kstrauser

Re:Safari introduces Adaptive Dark Mode in 27.3 on Tuesday November 03, 2026 @11:52PM (#50361615)
I'm a little shocked and disappointed to find that's considered "going political". Sigh.
Re:Safari introduces Adaptive Dark Mode in 27.3 on Tuesday November 03, 2026 @08:55PM (#50360677)
What do you mean?
Re:macOS 27 does not support CoreStorage volumes on Tuesday November 03, 2026 @05:19PM (#50359061)
I've gotta agree. I'm not sure what expensive storage hardware would be both relevant today and unable to migrate off CoreStorage. For example, my most expensive storage is a NAS with an iSCSI target, and it couldn't care less what blocks I write to it. If I had a CoreStorage setup on it, I could migrate the data to a new target and then reuse that space for something else. The hardware wouldn't mind, or even know, that I'd changed what's on it.

You mentioned old, obsolete Fusion drives. I'm having a hard time thinking of anything else where that'd matter, so you're probably right about that. AFAIK you can reformat those to use something other than CoreStorage if you're actually stuck using those boat anchors.

Re:Bear turns 10, and it still feels like day one on Tuesday November 03, 2026 @01:38PM (#50356204)
Bear has an MCP server. I’ve used it to push transcriptions into the app and search it later.
Re:Bear turns 10, and it still feels like day one on Tuesday November 03, 2026 @12:21PM (#50354946)
Obsidian is a closed source Obsidian.

I pay for Bear because it’s a native app and not in the weird uncanny valley of Electron apps that almost feel native until you hit the rough edges. It syncs with iCloud. It supports Shortcuts. It’s as responsive to keystrokes and keyboard shortcuts as any other Mac app. Basically, it just feels good to me and I enjoy using it.

Obsidian’s awesome. It’s also an ADHD tarpit for me. I can way too easily get distracted into optimizing my workflow instead of, you know, just typing notes into it. That’s a me problem, not a them problem. I don’t mean it as a criticism against Obsidian. It’s just not the right tool for me.

Re:WTF Ubuntu? on Monday November 02, 2026 @04:46PM (#50344293)
> Also, `dnf` is simpler and more stable than the mess of `apt-get` and `unattended-upgrades`.

I'm not saying you're wrong. I am saying that this is a new sentiment I've never heard expressed before. Perhaps Ubuntu's done something to make it flaky, but the upstream Debian apt tooling is famously stable and boring. I'm saying this very seriously: I don't recall a single time, ever, in about 30 years of using Debian-and-friends, that I've ever been bitten by a bug in apt-get or apt. I have also never been hit with a dependency bug when I wasn't using dodgy third-party package sources. In the many situations where I've deployed pure Debian (or pure Ubuntu) servers, `apt update && apt upgrade` has worked 100% of the time.

I do not claim that no one's had problems with this. The world's large. I'm certain there are people out there who have nothing but trouble with apt and friends. I do claim that I've never personally seen that our been in a conversation with people who have.

Re:Casio Watches of the 1980s on Sunday November 01, 2026 @10:29AM (#50326570)
I replaced my Apple Watch with a reasonably priced mechanical watch and an Oura ring. I only have to recharge the ring weekly.
Re:Casio Watches of the 1980s on Sunday November 01, 2026 @10:27AM (#50326542)
I bumped up a bit to a 5 GMT (SSK003) and absolutely love it. I think it’s beautiful, it works great, looks good with lots of different clothes, is waterproof, and it just a completely practically daily driver. It’s also less than half the price of the Apple Watch I replaced with it.
Re:Show HN: Vela, a New Linux Desktop Environment on Sunday November 01, 2026 @02:46AM (#50323471)
Cool! By any chance, is it written in either Vela[0] or Vela[1]?

0: https://vela-lang.org/

1: https://realm-labs.github.io/vela/overview/

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:27PM (#50319808)
One example is that you might be able to read what was written there. Here that may mean you could read another process’s packet(s). Imagine they were sending unencrypted passwords, perhaps because it’s in a trusted LAN connection.
Maybe that’s it.
Eh. I’m American. I love grumpy British humor roasting us. This article was more “old man screams at cloud”.

Basically, we’ve been called worse by better. This roast was hardly worth an amused tsking.

That’s exactly right. Every time I heard hand-wringing about some right-wing person getting suspended, it’d inevitably trace back to that person saying something incredibly outlandish, racist, or otherwise rule breaking. I did not see one example of anyone being suspended for being a Republican. Not one. Zero.
Re:French digital tax may kill VideoLan non-profit on Friday October 30, 2026 @04:43PM (#50309884)
And for households with kids, it's easy to imagine that turning into 30 hours a month, or $12 by your reasonable estimate. That's not a huge number, but I'm sure that'd push almost any streaming service into negative territory. I don't know what the average service's profit margins are, but highly doubt any of them could absorb that kind of hit.
Re:The Federated Code Forge on Friday October 30, 2026 @01:27PM (#50307226)
Love it. Thanks!
Re:The Federated Code Forge on Friday October 30, 2026 @12:49PM (#50306594)
How soon will that be, do you suppose? It's not a blocker for most of my projects, but I can think of a few that I'd like to keep more closed (while still making them publicly cloneable). That doesn't keep me from using Tangled today for the open repos. It just means I'd need to have at least a couple of sharing setups - Tangled plus Forgejo - going at the same time for a while.

Also, will Tangled support private repos that are only visible or fetchable to specific people? Would that even make sense in its model?

Re:The Federated Code Forge on Friday October 30, 2026 @12:46PM (#50306541)
Got it. I'm still trying slightly unsuccessfully to wrap my head around this, but I've run a Mastodon instance for about 10 years and it took me a little while to wrap my head around that, too.

This is great. I'm delighted at the idea of having my own knot hosting my projects, talking to my friend's knot, and coordinating on a global project's knot, all without having to lock everyone into one centralized point of failure (even mine). Amazing. I love it!

Re:The Federated Code Forge on Friday October 30, 2026 @12:30PM (#50306295)
I’m excited about this direction. I’ve moved most of my own projects onto my own Forgejo, but miss it being easy for remote strangers to open PRs and such without registering in my system, which I have zero desire to allow.

So what’s the state of Tangled today? Say I have a Tangled server (instance? host?) up and running with my repos. Some stranger wants to contribute. What do they have to do before they can open issues or send PRs or whatever?

Re:Commodore 1600 VICmodem on Friday October 30, 2026 @10:45AM (#50304700)
I learned very quickly that computers are simultaneously really smart and really dumb. That's served me well over the years.
Re:Commodore 1600 VICmodem on Friday October 30, 2026 @10:19AM (#50304300)
I think I typed in the terminal program from the book to start. That’s the day I learned that not every computer agreed what number “a” is.

An older peer quickly set me up with a better terminal on a floppy.

Re:Commodore 1600 VICmodem on Friday October 30, 2026 @10:17AM (#50304269)
This got me online, dialing first to my buddy, whose dad almost bought him a modem. We chatted a few times and that was fun. I found BBSes. He wasn’t into it. The rest is history.
Re:If IPv4 Were Land on Friday October 30, 2026 @01:11AM (#50300069)
Very weird take, and not supported by facts or evidence, but OK.
Re:If IPv4 Were Land on Thursday October 29, 2026 @08:22PM (#50298235)
> The 50% stat is really mostly mobile phones on cellular networks, which remain the _only_ major success story for IPv6.

The largest ISPs in the US are Comcast, AT&T, Charter, Verizon, T-Mobile, Starlink, and Google Fiber. They all support IPv6. The only top-10 US provide that didn't support it is Frontier Communications, who is rolling it out.

In other words, the biggest companies who actually do this for a living all demonstrate that you're wrong.

As to your questions, read up on IPv6 ULA which solves all of them. None of the hosts on my LAN depend on having an outbound connection.

Re:If IPv4 Were Land on Thursday October 29, 2026 @08:11PM (#50298131)
> Most security conscious operators would only allow IPv4 instead of IPv6.

I strongly disagree. That's obsolete knowledge, thrown around by people who want to be considered security conscious but haven't actually updated their knowledge in many years. A statement with similar implications might be "security conscious operators require their users to rotate their passwords monthly", which is what a lot of people use to think a decade ago, and now what it really communicates is that you're talking to a dinosaur.

Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @05:49PM (#50296595)
I’ll be frank: I no longer care enough about SO to bother with researching it. The results of all the rules lawyering and purity tests ruined the fun of it for me — and according to the graphs, everyone else, too. It just wasn’t enjoyable anymore. I like answering questions and teaching and explaining. I don’t like spending more than 0% of my time dicking around with gatekeepers.

No amount of “you’re holding it wrong” could convince me that the millions of people who wanted to use it the way it was broadly described were truly doing it wrong. The payoff for slavishly doing things the “right” moderator-approved way just wasn’t worth the effort.

Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @02:29PM (#50293753)
Me personally? Reddit. For the languages and technologies I worked with, their subreddits were far friendlier to reasonable questions, even FAQs, even if they weren't pristinely composed. There was also a recency bias that I appreciated. If you brought up a subject that was asked last year, people would link back to the earlier conversation while continuing the current chat given new developments. An example might be:

> Q: What HTTP library should I use?

> A: Last year everyone liked Requests [link to chat], and that's still good, but if you're using async you might look at aiohttp which is newer and not quite as polished yet but has much better async support.

Those were the answers that would've kept SO relevant: here's what we all thought last time this came up, but here's how the situation has evolved since then.

Reddit came with its own problems, of course. The programming subreddits hadn't (yet?) been as weighed down with those issues when I weaned myself off going there.

Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @01:19PM (#50292631)
That's not quite right. Deletionists campaigned to be elected as moderators based on the number of questions they closed. For example: https://stackoverflow.com/election/14

They did not directly increase the integer counter of their reputation score. They did use it to explain why they should be granted increased human reputation as a moderator.

Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @01:00PM (#50292299)
No. That's ridiculous. Whatever the rules say, there's never a situation where it's morally OK to change someone else's words and leave them attributed to them. Imagine I had edit rights here on HN, and I could change your message to:

> I think goats are sexy.

> - jodrellblank

Even if the site allowed it, or even encouraged it in certain small circles, you would not be OK with this. Or if you would, surely you could appreciate that other people absolutely would not be.

Sometimes people edited my SO answers in ways that were factually incorrect. A colleague or would-be employer might see that wrong answer attributed to me and suspect that I'm incompetent. That is not acceptable. Again, it doesn't matter if the license permits it. Morals and ethics do not.

This is different from, say, forking my software project and releasing an altered version. People would prominently see that you're publishing the changed version under your own name. That's fine. You having the ability to go in and change my own published code, without my permission, so that people see my name on your work, is morally and ethically wrong (and a major security risk). No rule or guideline on SO can override that principle.

Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @10:30AM (#50289707)
I think a lot moved to subreddits. You could ask a decent question there and actually get answers, even if it didn’t meet SO’s purity requirements.
Re:StackOverflow now gets fewer than 1000 questions a month on Thursday October 29, 2026 @10:12AM (#50289395)
That approach was untenable because then it still attributed the answer to the original author, even when the content was updated. That could cause real-world issues. “Hey, why did you say that Python is untyped on SO? I thought you knew something about it.” “I never said any such thing.” “Here’s your answer where you say it!” “WTF.” And sure enough, there’s some dumb answer with crappy grammar and mistakes, still attributed to you.

That was a terrible, awful plan, and I always reverted edits to my answers that went beyond fixing typos or updating old links.

Older »