News for hackers. Stuff that matters.

littlecranky67

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @04:46AM (#50301288)
Stablecoins are centralized and of course rely on trust - you need someone to exchange whatever asset they promise to guard for your tokens. I find them fascinating (in conjunction with the lighnint/taproot assets over bitcoin) and not necessarily unsafe.

In the freebanking era that the US had (before the FED was founded) every bank emmitet their own dollar. And, of course, there were banks over-issuing and bank runs left people without their assets. But that was before we had free flow of information and the internet. In todays world you can monitor and trade stablecoins, market cap, exchange rates in a freebanking system in sub-seconds. Any erosion in trust will immediately result in price fluctuations. We need a digital freebanking era, and it is a shame the genius act fell through. Exporting the dollar to people without access to banking would benefit the US (but I get that it currently mostly benefits trumps family).

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @04:00AM (#50300976)
It is a tradeoff. When using secure enclave, you need a second backup keypair in cold storage that needs to be secured.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @03:57AM (#50300966)
I am always amazed how little knowledge and cargo culting of 2017-era bitcoin knowledge is prevalent on HN. Whatever you monetary feelings towards crypto is, the technical aspects are fascinating. But most of the time HN gets it wrong.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @03:43AM (#50300867)
we will see if they do.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @03:43AM (#50300861)
bitcoins are always on someone elses computer (literally everyones in the bitcoin network). You hold the private key on your computer. Ideally you don't hold it there, but in secure enclave like chip or an airgapped device.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @03:38AM (#50300839)
as for ssh keys, you can generate your keypair in secure enclave and reuiqre touchId for every new ssh session. The private key never leaves the secure enclave.
Re:MacBook Pro with PROLED XDR Display and Touch on Wednesday October 28, 2026 @05:39PM (#50281292)
I had the same experience but to be fair, you only notice this in complete dark rooms. Which is a fringe scenario.
https://en.wikipedia.org/wiki/Payment_for_order_flow

Sorry, I thought you just had some idea about basic financial services.

You public key is registered with a kyc progress. Transactions (transfer of shares) is only settled when all parties have a kyc-verified key. Again, centralized chain (proof of authority). Any and all transactions can be reversed and changed by the regulator if needed. The main difference over today is, you have a open, access-to-all (after kyc) and no intermediaries.

Examples for cashing in: payment for order flow (was recently banned in the EU). They litterally sold their trading data of retail clients for money.

Not sure how you think brokers make money, but they get kickbacks from market makers and fund providers, or simply higher spreads. No one works for free.

Re:New iMac with M6 on Tuesday October 27, 2026 @06:10PM (#50266567)
Mea culpa. Needless to say english is not my first language.
I didn't say anything about decentralized blockchain or anonymous tokens. We could have a kyc process and a single centralized blockchain run by the stock exchange, which only settles transactions to kyc customers - fraud prevention and tax evasion applies.

The real-time trading independent of brokerages, the free information flow of trading volume/direction etc. all benefits and a true, real free market. Right now we have mountain of unneeded intermediaries, that sit and cash in on the data and access.

Shares should simply just be tokens. Why do we have that complex systems where shares can only be traded by regulated entities (brokers) and only be traded during certain times? If a share is a token, the holder of the token will be entitled to the same rights such as dividends collection and voting in the shareholder meeting. No need for brokerage accounts, I can trade my shares 24/7 and transfer it to whomever I want. Paying 2-5$ fees on trades seem backwards this day and age.
Incorrect.
Re:New iMac with M6 on Tuesday October 27, 2026 @01:31PM (#50262667)
This. I worked as a network/computer guy for the architecture department at our university. They all had iMacs, which for me was quite a win because replacing/carrying them was super easy: disconnect power chord, carry to my desk - done. Fix or install whatever needs fixing, and simple carry back.
German Urheberrecht explicitly states, that downloading something is legal, if not downloaded from an obviously illegal source ("offensichtlich illegale quelle"). Thats why it is perfectly legal to download copyrighted music from youtube (because Youtube is obviously NOT illegal). Youtube ToS are irrelevant in that case. You are however still not allowed to copy the data (music) to a third party (that is when copyright starts).

Whether or not the file you downloaded was even allowed to be uploaded to that website, is irrelevant in that case. Then the uploader and provider are liable, not you the downloader.

Re:New iMac with M6 on Tuesday October 27, 2026 @01:07PM (#50262282)
It is a design piece. No wires besides the single power chord. Yet webcam and speakers working.
COPYright becomes relevant once you COPY something. As in, give it to a third party. I don't see any third party involved here. The download itself is not subject to copyright - licensing terms may or may not apply - and just because the license text says something doesn't mean it holds up in court.
Supposedly they are, that is enforceable how? Download is not anything. Training AI on them is not anything. Using the trained model is not a violation of the terms just because you think it should be.
And how were those license conditions violated by downloading? Their are permissive in the first place, and violating without passing on to a third party is almost impossible.
I know it is an unpopular opinion, but if you do not want your content to be scraped, you have to put it behind payment walls and copyright it. In Germany we have decisions from the highest courts that deemed websracping perfectly legal (it was in the context of a competitor scraping airline ticket fares).
It is a hypothetical that you chose to not want to understand. Replace phone or flatscreen TV with something more available, such as a modern midrange car - gasoline/diesel and streets were widely available in 1920.

Or the option to cross the atlantic in a day instead of 3 weeks. Etc.

The whole point is, basically everything that is widely available to the broad population today wasn't even available to the ultra wealthy back then, let alone the broad population. People just take this stuff for granted nowadays.

Great and all such, but it doesn't do the actual work of resizing your one highres image to all those breakpoints - which is part of the build process in NextJS.
Of course they would, it would be the most valueable item on the planet (asuming there is an internet surrounding it). You could charge millions for todays 65" OLED TVs in 1980. The price for polio vaccine in 1920? Well, no billionaire would risk any of their offspring to suffer from polio.

We literally have billionaires flying to space and longing for other planets today - way more useless than a smartphone.

Care to elaborate and backup you wild claim with some facts?
Wouldn't say unnecesarry. Nextjs static export has features such as dynamic chunking, eager-loading of chunks when you hover over a link, routing etc. With a plugin you get image optimization (different image quality levels and dimensions based on viewport size) etc.

But yes, another static site blog generator would also work.

Didn't downvote, but my thought on your comment is: "More freedom" -> "More decision paralysis & anxiety", "New better framework X" -> "Latest hypecycle that will be require me to rewrite and relearn a framework that is deprecated in 18 months" etc.
Next.js supports fully static export, so they should have went with that.

I run a dynamic website on nextjs static export - landingpages and docs are fully static, login and user dashboard use REST calls to a non-nextjs backend. Blazing fast, no nodejs or SSR in production.

It is just an example, but you come to the base of my argument: CPI basket is an average - and you cannot use it to make statements about individuals. If Netflix is nothing to you, then look at houses: My granparents (born even after 1920s) had an outhouse. That means, every time you need to use the bathroom, you left your house through the garden - come wind and weather. That meant in the winter, you were walking through the snow and do your business in a small, smelly outhouse without no access to running water whatsover at sub-zero degrees. Yet there are people running around saying that our grandparents could afford houses, while we can't anymore.

The quality of the house your grandparents (for 1920 probably your grand-gran parents) is vastly different. Those houses cannot be compared at all, when I take my dump in the heated warmth in a nicely smelling place listening to some music over my airpods.

It is not necessarily politically influence. You simply cannot measure inflation properly. See my siblin comment about technology - it is just impossible to compare the life of a 1920s person to a 2020s person based on tomatos, butter and rent. Because the access to products that didn't exist at the given quality level in 2020 is impossible to price in.

You can think of it with a thought experiment: A smartphone (with hypothetical internet) in 1920 would be worth almost all the money in the world. If you simply had one smartphone in 1920, the richest billionares would offer most of their wealth to have one. Hence in 1920, a smartphone would be worth at least $10M in todays money. Yet you can buy one for $500 today - so you are twenty-thousand times richer than 1920. The same applies for flatscreen TVs, antibiotics (really valueable when you need it), polio vacination etc.

You can't measure this with CPI, yet people complain about the CPI is fake. It is just a statistical average, no more no less. It always was irrelevant. It is the arguments people do with that number, that are bullshit. Basic statistics teach you never use an average to come to conclusions about the individual.

The basket is dogshit, but not for the reason you probably think. Our lives improved tremendously by technology: internet, smartphone, videogames, netflix & co, medical progress, online shopping of any goods you can possible imagine, ability to travel the world for cheap.

The problem with the CPI basket is, it needs to be constant of products to be comparable, so NO technological advancement is considered in that basket. Instead, they use the price of butter and tomatoes. Well, a fictious 1950s person wouldn't care that is can buy more butter or tomatoes than we can, but would want smartphone and a plane ticket to thailand.

Older »