News for hackers. Stuff that matters.

leni536

Re:DiscImageStudio on Tuesday November 03, 2026 @04:56AM (#50350025)
Me too, but I don't think the resolution is good enough, even on blu-ray.
Re:WTF Ubuntu? on Monday November 02, 2026 @04:53PM (#50344363)
What about an untrusted local network, like public wifi?
Re:If you love a website, back it up on Monday November 02, 2026 @12:06PM (#50339929)
Same goes for youtube vids
> hyperbolic marketing

More like fraudulent marketing.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @06:27AM (#50302026)
I would be nervous moving borders with ~1 million dollars worth of gold.
Re:We're releasing the weights of Mistral Large 4 on Thursday October 29, 2026 @03:32PM (#50294560)
Shareware/freeware?
Re:We're releasing the weights of Mistral Large 4 on Thursday October 29, 2026 @03:31PM (#50294549)
Understandable. Still not open source.
Re:The case of the 9 bit AES key on Thursday October 29, 2026 @03:58AM (#50285764)
Pdfium powers Chrome's/Chromium's PDF viewer, but maybe Chrome doesn't expose encrypting PDF documents as a feature to be affected?
Re:Show HN: Making a smart TV dumb and then smart on Friday October 23, 2026 @10:43AM (#50209909)
Just call them telescreens.
Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @04:23PM (#50200507)
I opened the blocklist expecting some juicy Linux ISO sites and... it's all betting sites. I'm not even mad.
Re:Ukraine claims first drone evacuation of wounded soldier on Monday October 19, 2026 @03:24PM (#50156821)
Bullets are probably more economical.
Ah, the British Museum.
Re:MS Paint Adds Freeform Rotation (2026) on Friday October 16, 2026 @09:40AM (#50118292)
Because it's a shape rotation, not a selection rotation. I was confused for a minute too.
Re:your C is not standard C on Friday October 16, 2026 @07:57AM (#50117296)
Actually, no, your copy of C++23 doesn't match mine:

https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2023/n49...

This is indeed from the C++20 paper P1236R1:

https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2018/p12...

Re:your C is not standard C on Thursday October 15, 2026 @07:23PM (#50111744)
Huh, I stand corrected. It is defined in the current draft though:

https://eel.is/c++draft/expr.shift

I thought this was part of the guaranteed two's complement change in C++20.

That is not a primary goal. There was a discussion about "assume" semantics, but that is not one of the standardized contract evaluation semantics.
Re:Creating a Garmin "MCP" on Thursday October 15, 2026 @11:23AM (#50105026)
To be fair, direct debit also terrifies me. But I use that one.
Re:your C is not standard C on Thursday October 15, 2026 @05:26AM (#50101239)
> Can I please have a language that actually has bitwise operators with defined semantics?

C++? It has defined semantics since C++20.

Re:your C is not standard C on Thursday October 15, 2026 @05:24AM (#50101218)
There is already a precedent for a signed integer operation to produce an implementation-defined value or to trap. It's for integer conversion:

https://open-std.org/JTC1/SC22/WG14/www/docs/n3220.pdf#subsu...

> Otherwise, the new type is signed and the value cannot be represented in it; either the result is implementation-defined or an implementation-defined signal is raised.

There is no reason that this wording strategy could not be reused for bit shifts.

In general there is no constraint that unspecified or implementation-defined behavior can't be a trap. Without further qualification "unspecified behavior" or "implementation-defined behavior" is still open-ended, and it's up to the surrounding standard text to restrict the behavior further.

https://open-std.org/JTC1/SC22/WG14/www/docs/n3220.pdf#subse...

> behavior, that results from the use of an unspecified value, or other behavior upon which this document provides two or more possibilities and imposes no further requirements on which is chosen in any instance

"Possibilities" include trap

Re:Creating a Garmin "MCP" on Thursday October 15, 2026 @04:57AM (#50101052)
The idea of letting an LLM anywhere near my finances (and actually initiate transactions) terrifies me. And I like using LLMs.
Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @02:38PM (#50092757)
API tokens are usually explicitly scoped by the user when they create them. I don't recall Google (or anyone else) ever exposing that when creating an app password, but maybe it was scoped down on first use?
Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @11:42AM (#50089446)
App passwords are not scoped, are they? When I set up an app password for my whole google account it is never asked whether it is for email, docs, youtube, etc... . The oauth token is properly scoped.
A 2-hour granularity delay start would drive me insane. Better than nothing though. And maybe the dial one works with a timer on the outlet too, as the program is mechanically selected.
> and if there was a way for my washing machine to have a 3h window overnight to run in to be done for 7:30 I'd do it in a heartbeat.

I think most of these appliances sold today have at least some sort of "delay start" function. We use that to do exactly what you describe. Not even for nght tariff, it's just convenient to time it like that.

Re:Triple-A Minesweeper on Saturday October 10, 2026 @07:39PM (#50038234)
The only winning move is not to play.
Re:US Suspends Visa Program for Tech Firms Including Microsoft on Thursday October 08, 2026 @04:52PM (#50012095)
Is that really the intent of the law? From here it looks like the intent is to favor citizens to people who would require sponsorship, but a hiring process that selects the best candidate from a single set of citizen and foreign candidates doesn't do that.
Plus requiring attribution in papers.
I would probably file an issue with upstream, so that foo() calls self._foo_impl(), and it's _foo_impl() that recurses. Otherwise it feels like a fragile base.

In the meantime the TLS solution doesn't sound too bad.

It's the promises that don't make sense, although that might be obvious in hindsight.
And mostly irrelevant for online payments.

Older »