News for hackers. Stuff that matters.

lee_ars

> I'm based in Russia...

This would be an immediate disqualification for any tech job I can think of.

Re:PHP 8.2.35 on Wednesday October 21, 2026 @11:13AM (#50182405)
PHP 8.5.4-0ubuntu1.5 (the fixed version for Ubuntu 26.04) has been downloadable for me via apt from security.ubuntu.com for about 30 minutes. Perhaps check to see that you're not using a different mirror?
I've been using Divvy for many years and am gutted that it seems to have been orphaned and won't be updated for apple silicon. I ended up switching a few months ago to Lasso, which does most of what I want. But I miss Divvy.

https://www.thelasso.app/

Re:What is going on with ceiling fans on Tuesday October 06, 2026 @09:52AM (#49978506)
> Where are you getting ceiling fans that don't squeak and/or hum? (Or perhaps, what are you doing to maintain them)

When I moved into my current home 22 years ago, I bought five Hunter ceiling fans from Home Depot and installed them in the bedrooms and living room. Each one cost maybe $100 or so. They've been used more or less daily since then (the one in the master bedroom runs at medium speed all night, every night), and they're still silent and wobble-free. Other than wiping dust off of the blades from time to time, I've done precisely nothing to them.

They don't have mobile apps (there was no such thing as a "mobile app" when I bought them) and they don't have remote controls, but they're pretty great.

Re:What is going on with ceiling fans on Tuesday October 06, 2026 @09:45AM (#49978403)
> LLMs write better than vast majority of people at this point.

The vast majority of people are not good prose writers. Nor are LLMs.

Re:I've operated petabyte-scale ClickHouse clusters for 5 years on Friday September 11, 2026 @04:25PM (#49664845)
My dude, you only need to put the registered trademark symbol after the first occurrence of the mark. You® don't® need® to® put® it® after® every® mention® of® Click®House®™™®™®™®™®™.
Re:Tyranny of Optionality on Tuesday September 08, 2026 @04:42PM (#49616730)
What in the blue fuck is going on with that awful, awful fade-in blur effect on the text? That's one of the worst things I think I've ever seen.
Lawmakers—contemporary and otherwise—have in fact decided many many times that the state can deprive you of your life as punishment for certain crimes.
Re:Coding expertise is going to collapse from AI reliance on Monday August 24, 2026 @01:15PM (#49422946)
> Your right to push back on that...

Human test passed. AIs make giant flashy mistakes. They don't fuck up basic grammar.

Re:Stop Making TUIs on Saturday August 22, 2026 @07:54AM (#49398822)
> Then why isn't it done more often?

Because it tends to require a lot of thought and effort along totally separate engineering pathways than most of the actual functional coding. Good UI design is not easy, and the skills to do it don't directly overlap with good coding skills. It's hard.

> I suspect part of the reason is that most gui frameworks are not really designed for making dense economical interfaces.

Don't blame the tooling for a broad failing of many developers. It's because constructing a genuinely dense and economical interface for most apps requires considerable time and effort, and frankly, most developers are crap at understanding how users other than themselves use applications. Those that aren't crap at it tend to have worked in large teams with dedicated UX people to help drag them away from their preconceptions.

I don't like assisting reddit's monetization/AI training machine by tying my browsing activity directly to an account identity. I would prefer to browse anonymously and make them work at least a little bit harder to compile my anonymous activity into a coherent single-user profile.

If that doesn't bother you, then good for you, and we have different feelings about privacy.

> I think you might want to download new anti-Texas talking points.

No need—the current ones are uploaded directly into my mailbox regularly by Randy Weber, my district rep.

Aw. Sorry you're so upset. TX wind power generation has been reduced down to 2017 levels and continues to fall as more turbine farms are forced idle and the pols in power continue to trash it in order to toe the line set by the current administration. The actual prevailing lie is that wind was at fault for the 2021 rolling blackouts, and the lege, the gov's office, and the general public continues to regurgitate that lie at every opportunity. (I expect it'll show up in this thread soon, if it hasn't already.)

Perhaps you're simply not following things closely, or don't live here and aren't observing the situation directly? Sounds like you've got a case of wind derangement syndrome.

Here, this'll help:

https://en.wikipedia.org/wiki/Wind_power_in_Texas

Texas specifically has heavily politicized and demonized wind power, in spite of having massive successes with it prior to 2016 and being a leading producer of it. Solar isn't as bad, but is still seen as "leftist." The political landscape in TX is vastly more friendly to natural gas.

In other words, they are using gas turbines because the politicians are stupid.

Re:The web server deployment model breaks at hobby scale on Friday August 07, 2026 @11:41AM (#49212180)
Sounds like a poster child for LXC containerization with Proxmox — all the host-level management of a non-ephemeral VM (including snapshots!), without the every-machine-has-its-own-kernel overhead.
Re:The web server deployment model breaks at hobby scale on Friday August 07, 2026 @10:09AM (#49210695)
> You document what needs to be reverse proxied and give examples for caddy and nginx, repeatedly cursing at nginx for not having an if that’s useful.

Somebody hasn't read the docs and doesn't understand how nginx's "if" works, because it's fantastically useful.

Re:Web security is too hard on Tuesday August 04, 2026 @06:43PM (#49176283)
You'd think, but nope, it def doesn't — the site's TLS cert is issued by Google Trust Services, which issues domain-validated certs via ACME, so no, the only thing the site owner had to do to get that certificate is demonstrate ownership of the `cloudflare.pay` domain. GTS is also one of the default CAs that Cloudflare's universal SSL uses, so that's also exactly what would show up for any Cloudflare-proxied site with TLS enabled.

The cert itself only has CN=cloudflare.pay. It lacks an org, an address, or any other identifying info. It's not OV/EV, so no details there, either.

The domain's whois is also devoid of identifying details:

https://rdap.nominet.uk/pay/domain/cloudflare.pay

Registered through 101domain, with nothing except a registrar abuse contact.

I mean, great that this is legit, but CF could have done a better job with making it actually _look_ legit. This looks sketchy as fuck.

edit - gawd, nevermind. they don't even have anything useful for cloudflare.com. Same GTS cert, redacted whois info. lol. how did we even get here.

Definitely heard re: the python code, yeah—it seems fine to my limited ability to review, and the functionality is there, and at least organizationally the structure makes sense to me, but I can't speak to its sophistication or whether or not it's how a skilled human might approach the same set of tasks.

I imagine it's somewhat the same boiling rage I feel when I watch youtube videos with obviously AI-written scripts, or read obviously AI-created written content in any area. I can't code, but do write and edit professionally, and the lackadaisical approach many people take with the form and presentation of their written words can be pretty damn offensive. (The responses I hear when I raise these objections are more or less the same ones I raise re: coding, though — "Well, I can't write, and the LLM says what I want to say way better than I could ever say it!" and so on.)

So it goes, I guess, heh.

> I get that this is someone writing for money and I have no experience in that realm, and I'm sure conde nast prefers faster writing for something less in depth...

FWIW, Conde has no input on my work. Conde is the machine that provides HR and legal and payroll. Ars is a more or less self-contained world and since I got kicked into management a few years back, my output is my own. I wrote this up because this is how the project unfolded; no one assigned it to me or said I needed to write a July story to make a quota. It was fun. I did the write-up because it felt like an Ars-y thing to write up.

Definitely heard re: wanting to stumble through things and see the warts, but I have to disagree on the "learning enough python to make this work would still have been a weekend project." That's simply not true—if it were, I would have done it.

But it's not like the project didn't require effort. I put in considerable time on the parts that weren't python coding and CAD. Planning out and setting up the systemd service and timers, packaging up the service to ensure the thing was running under a properly isolated service account context, writing the installer, setting up the deployment pipeline—I didn't want to do the usual lazy thing I see so often and just take a barely functional mess of conflicting dependencies and shove them into a docker container and say "Here, this works on my computer, your problem now."

But like I said elsewhere in the thread, at 48 I'm old enough and ossified enough that I've come to accept that coding is simply not a skill I've got in me, and cranking out even something relatively simple like this project is going to be impossible for me without help. I've tried, too—I've bootstrapped myself through code academies, tried DIY courses, thrown myself into code-adjacent weekend projects, and otherwise tried to get to some level of mastery past "hello world," and I just kinda....suck. I bounced off of coding 30 years ago in college, I've bounced off it professionally for anything more than simple bash scripting, and I've bounced off of it in hobbies. I don't know if it's that my english major brain just doesn't do well in chopping problems down into small enough chunks or what—but I know after a lifetime that it's something I'm never going to be able to do.

That and bowling. Never scored over 100 in a game in my life, and likely at this point never will. Some things are just beyond my reach.

Nice!! Excellent job. I like the idea of using one of the side dots to show NTP sync status, too.
Asked and answered in the article comments, but briefly, I don't keep my phone in the bedroom at night, so no.
> Then I think this is a trap to get some kind of proprietary app onto your phone.

This was my thinking as well, and why I rejected the idea. I'm not installing some rando company's information-harvesting data-selling garbage app on my phone to do something that the clock should do itself.

Did you peek at the project's repo? The Ars piece is more of a narrative write-up; the repo has the step-by-step runbooks that I tried to ensure were beginner-friendly.
Look at it this way: LLMs are trained, among other things, on quality professional prose. I've been writing for Ars for almost 14 years at this point.

I don't sound like LLMs. LLMs sound like _me,_ lol.

nope. i was using em-dashes and semicolons before they were cool.
To be fair, I did the research, the BOM, the systemd service and timers, the packaging, most of the installer, and the deployment pipeline myself. It's just the python and the Fusion modeling I needed LLM help with. Coding beyond bash scripting is just not something I'm good at, and at 48, I've kind of accepted that it's not ever going to be no matter how hard I try.
Re:Making ASCII Art in Vim on Thursday July 23, 2026 @12:13PM (#49024012)
True terminal art connoisseurs are still using their registered copies of TheDraw from 1991:

https://en.wikipedia.org/wiki/TheDraw

Re:TLS certificates for internal services done right on Friday July 10, 2026 @11:52AM (#48861621)
OP, why mess with acme.sh's cron schedule with your own cron job that calls its cron job? You might instead consider running acme.sh again with the "--install-cert" flag, coupled with its "--reloadcmd" flag, in order to automatically have it do the cert+key copying and nginx reloading for you when it renews:

acme.sh --install-cert -d grafana.tuxnet.dev --key-file /etc/ssl/private/grafana.tuxnet.dev.key --fullchain-file /etc/ssl/certs/grafana.tuxnet.dev.crt --reloadcmd "systemctl reload nginx"

Then you can ditch your custom cron and let acme handle everything on its own, as intended.

Re:Qwen 3.6 27B is the sweet spot for local development on Monday June 29, 2026 @05:18PM (#48725391)
The tweet you link shows "Qwen 3.6 35b NVFP4 - 256k ctx, 110 tok/s", but I'm getting only half that, around 50 tok/sec, on a DGX Spark with Qwen3.6-35B-A3B-NVFP4 (via vLLM) plus speculative decode w/EAGLE3. I'd be ecstatic to see 110 tok/sec and I wish they had some more sourcing for the exact config, because it's double what I'm getting.

edit - after actually reading the tweets (had to use xcancel) and visiting the source git repo, switching to MTP for speculative decode makes things a hell of a lot faster, and the abliterated model plus dflash makes it even faster! I'm now seeing 70-90 tok/sec for most stuff. I like!

Older »