News for hackers. Stuff that matters.

leshenka

Re:iCloud+ Hide My Email addresses will remain on icloud.com on Tuesday August 25, 2026 @06:07AM (#49431349)
3x256? Weird, perculiar number.
Re:iCloud+ Hide My Email addresses will remain on icloud.com on Tuesday August 25, 2026 @06:00AM (#49431315)
The post says that "Sign in with Apple" will issue emails on @private.icloud.com but "Hide my email" will continue issuing addresses on @icloud.com

These are two separate services. The problem was with the latter not the former. If the service decides to block @private.icloud.com they might as well remove Apple's sign in button.

Re:iCloud+ Hide My Email addresses will remain on icloud.com on Tuesday August 25, 2026 @05:53AM (#49431269)
Technically proficient users can figure out their own solutions for throwaway emails e.g. aforementioned Fastmail.
Re:iCloud+ Hide My Email addresses will remain on icloud.com on Tuesday August 25, 2026 @05:37AM (#49431147)
> You assume that the domain is used by one person or what?

Yes. It's not a guarantee but you can identify several strong signals that suggest that.

> point is to prevent spam

also yes

Re:hdiutil is deprecated in macOS 27 Golden Gate on Sunday August 23, 2026 @07:08PM (#49413495)
Does it need to though? After so many years I can assume the program is complete as in there aren't any bugs left that need fixing and there aren't any new features needed in the scope of the program
Re:Every .ru Domain Now Needs Government ID on Wednesday July 22, 2026 @04:39PM (#49013098)
Moreover, many websites now only allow login via state-affiliated identity providers and if you're one of those people that prefer email you're forced to use .ru email that is, in turn, requires validation via mobile phone, and it is now illegal to have an anonymous SIM card.

Basically, any online forum user can be _trivially_ tracked down to a real person. What a great day to be a hacker really.

Re:Grok uploaded my user directory to xAI's servers on Monday July 13, 2026 @11:42AM (#48894422)
Sometimes you can't even rely on harness not allowing ai to access certain files. "Oh, user doesn't want me to use `read_file` on .env? Well how about I run `cat .env` then?"

That's scary. Really should run it under different user with carefully assigned permissions.

jokes on you my Albania hacking project is called "a1bania"
Re:macOS Container Machines on Wednesday June 10, 2026 @12:49PM (#48479086)
Isn't it wasteful? I know it's a "tiny" vm but still is a vm
iOS has the thing they call “time-sensitive notifications” which is a flag you put when submitting notification that is supposed to be Really Important Right Now. Unfortunately it’s not easy to mute everything that is not time-sensitive
Re:XLIDE: VBA without excel on Wednesday May 27, 2026 @10:00AM (#48294515)
Wonder how extensively VBA is used in today's Excel. I know that macros are considered dangerous but would love to know if there are exceptions for that rule.

On the other hand I wonder why aren't they run in such a sandbox where the most destructive action they can do is to wipe the sheets.

Re:Dogme 25 – Vow of Chastity on Monday May 18, 2026 @08:46AM (#48178989)
I believe red and black theme is an artistic choice. Sadly, readability suffers from this choice. Just making the text bold makes it a lot better while preserving its spirit.
Easy:

- know ip ranges of popular cloud providers and deny service. Not bulletproof but enough to make it a pain in the ass so people don’t bother

- make it illegal to offer this kind of service for the purpose of evading location detection. Put pressure on Apple and Google, force them to remove vpn apps

You guys need to start reading on Russia's war on internet and treat it as a cautionary tale

Re:Zed is 1.0 on Wednesday April 29, 2026 @02:54PM (#47952721)
I can’t relate to that, I’ve also struggled with this decision for quite some time, but I’ve gotten used to it. What I hate is that it doesn’t open several search tabs if I need to look for several things at once.
I really don't understand what the issue is? Gatekeeper is merely a warning that introduces a minimal friction if what are you trying to run is created by an entity that chose not to present itself. It only happens once per application, not per launch. I've spent more time reading this thread than I have removing quarantine flags in the last five years.

Apple has a lot to be criticized for but gatekeeper (and SIP) isn't that.

I wouldn't be able to say this with a straight face after reading this article.
Re:“This is not the computer for you” on Friday March 13, 2026 @11:51AM (#47366105)
> compromises the average user buying a $599 laptop isn't going to notice everyday

Oh my god yes. I've read way too much discussions that completely overlook this aspect.

So many people get so fixated on meaningless labels such as "smartphone CPU" (meaning it's bad) and things to pick on like "ew no HDMI or Ethernet" as if it was a life-saving thought terminator that preserves the world view in which absolutely nothing under the Apple brand can be in any way good.

power bricks tend to live longer than devices they accompany so it's only really an issue when you're buying your first one
Re:Microslop Manifesto on Monday March 02, 2026 @08:44AM (#47217881)
At least they're being honest about the counter in their source:

    // Starting value (high number to suggest ongoing problem)
    let currentCount = 8_472_000;
Re:Dead Internet Theory on Tuesday January 27, 2026 @08:37AM (#46779742)
Okay sorry I don't want to sound rude but am I getting it right?

You don't know if there's a benefit in knowing the photo you look at is real?

Re:Dead Internet Theory on Monday January 19, 2026 @09:21AM (#46679258)
I just hope someday we will have actual cameras adding provenance data to the image file, digitally signing it and its miniature version. Image editing software will then collect that data from all images used to create an artifact and append their miniatures and signatures to it. So as long this data is not removed you can verify that the image came from an actual camera and evaluate the degree to which it was edited.

But really I'm not a professional in this field. I'm sure there are pitfalls in my imagined solution. I just want some traceability from the images used in news articles.

Re:Nabokov's guide to foreigners learning Russian on Wednesday December 24, 2025 @06:38AM (#46374705)
I envy those who doesn't need a second keyboard layout on their computers haha
Re:Show HN: Web app that lets you send email time capsules on Monday December 08, 2025 @07:15AM (#46191372)
I hear about time capsule apps from time to time and my main concern about them is longevity.

Will this application exist in say 10 years from now? 20? And even then will I be using the same email by then?

> Go, which is harder to look up without mangling its name

don't get me started on typescript. Until recently I had to use its full name when googling something

That's true, it opens a splash screen. But if I remember correctly even if you dismiss it it opens a corresponding AppStore section. Which was kinda annoying but that's it.

In more recent developments of this story, looks like Russian authorities saw a success of EU's push for alternative stores and now want Apple to allow that in Russia too [1,2]. Sadly, the motivation is twofold: a. let authorities publish their spyware (Max messenger) and b. let sanctioned companies publish their apps (sberbank). I haven't heard a single word about caring for user freedom.

P.S. just for laughs: Since it's currently (almost)impossible to install alternative appstores, stores and online marketplaces selling iphones now label them as "defective" [3]: below title "Имеется недостаток товара: невозможно установить и использовать RuStore" = "Defect: impossible to install and use RuStore"

[1] (ru) https://www.ixbt.com/news/2025/07/07/apple-rustore-iphone-ip...

[2] (en) https://meduza.io/en/feature/2025/06/27/an-app-store-ultimat...

[3] https://re-store.ru/catalog/10117MAX512ORGN/

Re:Native Secure Enclave backed SSH keys on macOS on Monday November 24, 2025 @05:23AM (#46032418)
Wonder if it's possible to use keys created by Secretive in native authentication?
Why, I think you'd be able to send files between two androids via airdrop implementation.
opendrop works without asking Apple
What would it take to make it work when reception is set to "contacts"?
Re:Cloudflare outage on November 18, 2025 post mortem on Tuesday November 18, 2025 @08:04PM (#45974569)
All languages with few exceptions have these kinds of escape hatches like unwrap

Older »