News for hackers. Stuff that matters.

lambdaone

Re:No Vehicles in the Park on Tuesday November 03, 2026 @05:59AM (#50350431)
The general interpretation of laws in countries with British-derived legal systems is that firstly, words have the meaning given by a standard legal definition or one explicitly referenced in the legislation, and otherwise words have their literal meaning unless they are ambiguous. If they are ambiguous, then the meaning is usually taken to be that of the notional "reasonable man".

In this case, "vehicle" is defined by Wikipedia (and most other reference works) as "a machine designed for self-propulsion, usually to transport people, cargo, or both", but even that is ambiguous. Whether skateboards, toy cars, horse, surfboards etc. meet these definitions is the kind of ambiguity the quiz is looking for.

Re:No Vehicles in the Park on Tuesday November 03, 2026 @05:52AM (#50350378)
I wonder if there is a correlation between "soft-hearted" and "hard-hearted" voters and their answers to the questions. I regard myself as soft-hearted, but answered the questions as literally as I could as that was given explicitly as part of the rules of the game.
Re:No Vehicles in the Park on Tuesday November 03, 2026 @05:49AM (#50350359)
It would be interesting if the puzzle chose to use stereotypically male, female, black or white names at random and the puzzle-setter logged and analyzed the effect this had on the responses. Perhaps they are working on it already?
Re:No Vehicles in the Park on Tuesday November 03, 2026 @05:46AM (#50350333)
The game does not say "motorized" or "emergencies". But then it does not say "functional" or "full-size", or several other things, either.
You have not knowingly seen an exploit in the wild. Competent attackers can be right inside your OS, and many other devices containg within the same network as a result, without you knowing it; persistenly so if they want to.
My home router is managed by my ISP. They can, and do, remotely upgrade routers in the middle of the night.
This is a total failure by the vendors of these freezers.

If you charge money for something that is critical national infrastructure - and the food delivery pipeline is absolutely CNI - and you connect it to the Internet, you should also be responsible for keeping it secure - or at the very minimum at least trying to.

The same goes for other CNI such as telecoms, broadcasting, banking and payment processing infrastructure, cloud computing, electricity, gas and water supply, traffic signalling... all modern economies are now almost totally dependent on so many different interlocking internet-connected systems.

Failure to understand this is not an excuse. Sadly, the only way to deal with this is legislation.

Or simply don't care.
It's one of the major selling points of Linux that Linux admins can do this even if their OS vendor won't, but the whole point of having a distro is to stop you from needing to roll your own solutions, or to have to maintain constant vigiliance to be even remotely secure.
At this point, just the failure to patch this single vulnerability is enough to make me write Ubuntu off as a viable distribution. Volunteer-run distros can fix this, why not a well-resourced company? It's not as if they haven't had the time to fix it, or that porting the fix to their current kernels would be particularly difficult.
Centralized monitoring, so you can check if the local staff are doing their job properly, and in an ideal world, detecting performance degradation so you can schedule maintenance before they break.
There are a couple of quirky services that have been introduced as part of this. One is SOGEA (Single Order Generic Ethernet Access), effectively FTTC internet access without the baseband POTS (Plain Old Telephone Service) facility, so that you still connect via copper but now need a router at home to connect your POTS phone.[0] There is also SOTAP, which is the same but for ADSL.

The other is the even weirder SOTAP for Analogue[1], where they put what is effectively a router at the exchange for you; so it delivers old-fashioned POTS without the capability to have any digital service on the line. Like a mini-DSLAM without data.

[0] https://www.openreach.com/content/dam/openreach/openreach-da... [1] https://www.ispreview.co.uk/index.php/2025/09/openreach-laun...

Re:The Tragedy of Losing Your Wikipedia Page on Friday October 30, 2026 @07:42AM (#50302621)
The reason why this very very silly article can continue to exist is that Reliable Sources have deemed this to be notable by repeatedly writing about its subject. If you want to complain about it, you should complain to them.

Wikipedia is a mirror of the world, not an authority that defines it.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @07:21AM (#50302459)
This is one of these circular relationships. You and your friends can experience true, free, cooperation exactly because you don't have to be on guard 24/7 against enemies, because you live in a civil society that has rules, and people to enforce those rules - ultimately by coercion through violence.

Peaceful anarchy evaporates when bad actors arrive. I wish it wasn't so. A structured civil society is the nearest we've managed to get to being able to live in relative freedom almost all of the time. It's the least violent, least coerced option we've been able to find.

The other way would be to go live in a group by yourselves off the grid, and as long as every one of you is good and decent that will be fine, but the moment one of you goes bad, you either have to choose violence or they will do whatever they want to you.

Re:If IPv4 Were Land on Friday October 30, 2026 @06:40AM (#50302139)
Your greedy ISP won't provide you with IPv6 for financial reasons - it's cheaper not to change or upgrade systems. This won't change until they start to provide you with IPv6 for financial reasons, as they reach the point where going to IPv6 starts to be a cost saving for them rather than having to run two different networks at once, with a whole bunch of CGNAT to keep the IPv4 part of it going.
Re:If IPv4 Were Land on Friday October 30, 2026 @06:38AM (#50302123)
The US is already 55% IPv6, and this figure is only going to go up in future as ISPs decide to migrate their network cores to IPv6 for financial reasons, making IPv4 a lower-performance edge protocol riding on CGNAT on top of IPv6. Similar selfishness elsewhere will start to drive other parts of the ecosystem to IPv6, and the problem will solve itself.
Re:If IPv4 Were Land on Friday October 30, 2026 @06:34AM (#50302081)
The Chinese are having a big push for IPv6 adoption, and, being China, this is likely to actually happen as ISPs follow government orders. But also being China, they are also pushing for 'enhancements' for IPv6 for the usual reasons, which the rest of the world is unlikely to be willing to adopt.[1]

[1] https://www.theregister.com/networks/2026/07/22/china-advanc...

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @06:25AM (#50302004)
At which point they might as well use a database to keep track of the money, like banks do, and drop the cryptocurrency aspect, which was only ever a fig-leaf to keep regulators away.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @06:16AM (#50301938)
This is absolutely what true anarchy looks like. Before you can blink, someone else has taken over, and now you have a new boss, only worse.
That is an excellent way of looking at things - if a distillation attack against a model is bad, so should be a distillation attack against mankind. I'd argue that this suggests the former should be legal, rather than the latter becoming illegal.
Copyright maximalists would argue that even making a copy in RAM would be copyright infringement.
Re:PHP2Shell: Exploitation Attempts and Remediation Trends on Tuesday October 27, 2026 @12:57PM (#50262094)
Perhaps if those logs were streamed to a non-compromised machine and stored there
I'd be interested to hear its opinions about the Tiananmen Square massacre.
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @12:51PM (#50211936)
I'm glad to confirm your suspicion. I like to have both a walled-garden phone and several open-platform computers. They do two completely different things for me.

To be honest, I'd like my open computers to be even more open and hackable, with a secure boot path that doesn't involve any mysterious unpatchable embedded firmware or auxiliary CPUs, but we are slowly getting there with RISC V.

Re:Drupal is now light-years ahead of its reputation on Wednesday October 21, 2026 @03:56PM (#50186705)
The very most you can say for Drupal is that it is better than Wordpress at its worst. All the goodwill for Drupal was burnt years ago.
Re:RFC8950: Announce IPv4 with an IPv6 next-hop on Monday October 19, 2026 @10:09AM (#50152731)
> Close to 3 decades and we are barely scraping 50%

That's what I'd regard as a success.

With majority IPv6 in most leading economies, and getting close to or just over 50% worldwide, the tipping point has been reached and IPv6 is now the dominant IP protocol. The future is a long slow slide of the public use of IPv4 into oblivion, just as envisaged in the original IPv6 planning, and IPv4 support will eventually become a compatibility layer tunnelled over all-IPv6 networks, just as IPv6 was originally tunnelled via IPv4. In the longer-term future, once public IPv4 traffic has reduced to only a couple of percent, ISPs will start to turn it off as an irrelevance, leaving v4 as a legacy protocol for LANs and private networks. Expect this sometime in the late 21st century or early 22nd. Some very old IoT devices may stop working, but everyone who cares about any important use will have replaced them long before.

Meanwhile, the Internet will continue to operate seamlessly for everyone else.

Re:Neural Networks Are Already Clean on Friday October 16, 2026 @08:52AM (#50117751)
Trivially, all finite neural networks can be represented to arbitrary precision by implementing them with digital logic. All digital logic can be represented by computer programs, so at this point we can pull in the entire apparatus of abstract interpretation, program proving and so on.
Re:Neural Networks Are Already Clean on Friday October 16, 2026 @08:49AM (#50117718)
Not just that, but we can solve quintics in the almost[1] general case to arbitrary precision, providing we are willing to accept approximate solutions.

[1] I exclude things that are truly perverse such as quintics with coefficients that won't fit on any physically realizable computer.

Just because a problem is NP-complete doesn't mean it's infeasible to produce "good enough" approximate solutions. The traveling salesman problem is a great example of this.
Perhaps a better question would be "can frontier models write a program to effectively stack a dishwasher?"

Older »