News for hackers. Stuff that matters.

lucb1e

> Don't share it with friends, they won't know about it. Don't ever log into it.

Doesn't Apple helpfully offer logging in with their email address constantly? At any rate, they were receiving emails on it and I don't think the user knew how to add an email address. They couldn't find their email client's account settings in iOS, but they struggled with several inboxes in the email client.

I assume that when you start using the device (since that requires Apple account tying) they create a new 'free' email address and provision it onto your devices. From what I later found online, indeed Apple has separate settings for their cloud offerings as compared to when you buy it from a competitor, which afaik is anticompetitive but until all countries get around to sending desist notices... apple does what apple does best

The backscatter can be annoying though. I had none for over 10 years either but it's picking up now to perhaps a few per month. Looking around how to prevent it, apparently "backscatter" is an established term for the phenomenon that you can't fix, where you receive rejected spam emails, and they're often sent from randomly generated prefixes @ your domain (no matter that you have SPF/DKIM/etc. set up). My partner also gets waves of autoreplies, like "your support ticket will be handled soon" and "I'm out of office until ...", where someone seems to have used their domain with a random prefix no apparent reason

The solution is probably to tell the senders that they're effectively sending out spam / doing a variant of open relaying by emailing the spoofed address, but even internet-savvy institutions like an IP address assigning organization (RIPE) sends me backscatter so I don't have a ton of hope

> It may seem a bit unusual

met someone a few weeks ago. They said their email address is @<german ISP>.de but half the time they're sending from @icloud.com, I guess because they have an phone from Apple and don't understand the settings

I volunteer at a library where people can come with tech questions. Just last week, someone asked to help sort out their email addresses because they have various, from Microsoft, from an ISP, and because they have an Apple phone of course Apple also pushed an icloud address onto them that they didn't want

Seems quite common to have a second sending address with how Apple is pushing its lock-in (email addresses are some of the hardest things to migrate). Though, also without that, I tend to think people typically migrate their primary email address at least once or twice in a lifetime, not counting business emails that are sometimes also allowed for reasonable amount of private use (not saying that's a good idea but people do it). Not that unusual

Re:Cartographers of North Korea on Tuesday October 13, 2026 @01:53PM (#50075830)
Just because it's possible doesn't mean you need to copy the data out for easy public access. I think that's nowadays actually illegal under anti-doxxing legislation (whatever the legislator called it), modulo your jurisdiction of course
Re:Cartographers of North Korea on Sunday October 11, 2026 @05:36PM (#50048063)
Contributor of ~10 years and I have yet to be the first person to notice vandalism, as in, that it's not already been/being tackled. I've been the first to notice various mistakes (big and small), or seen the impact when large parts of the map were messed up in some big attack, and there was one case where I wasn't sure if the person had intentionally broken something or if it was some weird misunderstanding, but they never came back so... not much action to take there. Now, I'm also just a regular contributor and not someone who looks for vandalism specifically; but from my point of view, the distribution of joke/troll contributions to real ones is close to zero (c.q. infinity). Dunno why, I guess most people simply mean well?
How could that be when previous models have it? In terms of timeline, it seems quicker not to remove a feature than to remove and test the new changes
The quote is from another thread, not sure why GP didn't link their source to avoid this confusion: https://news.ycombinator.com/item?id=49946698
The people who I knew that upgraded every 2 years stopped doing that nearly ten years ago now. Smartphones barely get better, why get a 49€/month contract when you can get one for 15€ instead and not have to migrate phones every two years upon contract renewal when the new phones aren't significantly better anyway?
Plus externalities. Producing things is never "free", even if the manufacturer were a charity and, you're right, they're not
Replacing the misnomer class .black-text{color:25% grey} with just {color:black} instantly makes that article so much more readable

The image is blurred beyond readability, but via tineye.com I found what seems to be the original: https://cdn.ncbi.nlm.nih.gov/pmc/blobs/4f68/2515569/99b99587... It splits out what environmental factors cause cancer. Unsurprisingly, your chance is already 25% lower if you don't smoke, but the rest of the pie chart is also interesting

Re:All I wanted was a custom domain email on Sunday October 04, 2026 @07:09PM (#49958893)
Everyone has the same problem. For example, Apple recently blocked a service that notifies you of parliamentary documents (source in Dutch: https://chaos.social/@[email protected]/117370967171338864)

Email receivers (be it Gmail or your local council) don't differentiate if you're self hosting or a business. So long as small businesses can manage (who have like one part-time sysadmin that also manages a ton of other IT stuff; email doesn't take much of their time), so can you. If you set up the usual suspects like SPF and DMARC, the domain is not a known spammer, and the IP not in a blocked address range, it's mostly hands-off (source: I self host my email)

If you need it to really be super reliable, yeah, you need to send through one of the big companies who have not just a dedicated sending IP address but entire ranges dedicated to email sending, as well as staff that will respond to delivery issues 24/7. Microsoft rejecting email from Google and vice versa isn't unheard of, so there aren't guarantees anywhere, but that would be your best bet. For my personal use, that extra nine of reliability isn't needed

But it's also self-evident that if we always need more young people than old, so that the old are taken care of, then we need an infinite amount of people. So long as we don't have a second earth (or asteroid mining or whatever), that seems like a much bigger problem than that old people have to wipe their own butts. Yes, I'm well aware that includes myself and that I might legit not be able to take care of myself properly. Getting old sucks either way. A stable population (or a slight shrinkage until we're at a sustainable level, insofar as we should want to manually steer that anyway) seems like a much better solution than to have old and young people suffer because there's not enough resources for anyone

The population crisis is that the current population isn't sustainable: https://en.wikipedia.org/wiki/Earth_Overshoot_Day (and most of those haven't a rich lifestyle yet; most people on HN are in the top 10% worldwide income). We need either to become more sustainable per capita, have fewer capita, or get more earths. Any solution is fine. Otherwise, we'll run out, and the remaining 90% of people get a lot of undeserved worldsuck

Note that we are already doing what you want: world population is projected to increase by 25% (!) in the next 75 years. At the same time, we're lifting people out of poverty (https://ourworldindata.org/grapher/share-of-population-in-ex...) which causes them to be able to buy more stuff, live richer lives, and be less sustainable (e.g. visible on a CO2 chart for the same countries: https://ourworldindata.org/grapher/co-emissions-per-capita?c...). Which is fair right? Why shouldn't they get to live like us. But we can't go on like this; something has to give.

More people isn't helpful for at least another century. Let's evaluate the baby-making situation in 2100 and work on the real problems we face today

One of the best things you can do on this planet is not asking it to support another person, at least not with a comfortable lifestyle which I'm sure we'd all want. Why'd you try to soft-force people to have more children?!

As a secondary problem, people (traditionally women, but with a two-income household it could be either party) often already can't leave a relationship because they can't support themselves and their child(ren) without the other half and so they're stuck in relationships that might either not work for them or that are downright abusive. With a big tax on leaving your partner... oof, why in the world would you want more lock-in?! Is this a manosphere control thing that I'm not aware of?

Re:Ask HN: What're You Reading? on Tuesday September 29, 2026 @04:47PM (#49900256)
> I'm looking for something a little meaty to keep the brain working...

- The Immortal Life of Henrietta Lacks comes to mind. I had no idea how rampant purposeful discrimination was so recently for example, but the point of the book is the HeLa cells - and biology is also not my forté so loads of new information there as well. It was very interesting in expected and unexpected areas for me

- Daniel Suarez' Kill Decision has only gotten more relevant since its release in 2012. Not sure I'd call this meaty though, but his thrillers are always good (near-ish future tech) and the author iirc also said this particular one is meant as food for thought and not only entertainment

Re:postmarketOS Rebrand: Nura on Sunday September 27, 2026 @06:30PM (#49871461)
I'm sorry, what? How exactly does this relate to PostmarketOS?
Re:postmarketOS Rebrand: Nura on Sunday September 27, 2026 @01:53PM (#49869041)
Yeah, I was trying to think of a mnemonic to remember this new name but I'm coming up short. The old one was indeed... somehow 'post-market' isn't the best vibe so I do get the point of a rebrand in general
Re:Factorio that you can touch on Saturday September 26, 2026 @06:16PM (#49861065)
Please point out where you took that quote from, or what statement I made that could even be remotely paraphrased to that, or stop accusing people of saying things that you've misunderstood
> Like they have a personally vested interest in ensuring their opinions on failure are correct?

I haven't commented on this topic before (here or elsewhere) but I don't understand your surprise at people being critical. Everyone has a vested interest in keeping the planet usable. We could try lots of things in space, like agriculture or power production. It takes a lot of fuel to push a usable kilogram of stuff into a low orbit (laser propulsion and spin launches aren't quite there yet), so moving operations into orbit has various major downsides. So long as nobody states an upside, yeah, my mind is quite blown about wasting investor money on this. Even when not considering the opportunity cost of that used money (alternative positive uses), it seems like burning the equivalent amount of cash in a bonfire or otherwise disappearing the money would be a lesser evil

Especially considering their just-stated opinion, who says they don't...
Re:Factorio that you can touch on Friday September 25, 2026 @04:12PM (#49849301)
Not sure if this seems too random but I think that's what I like about OpenStreetMap editing: it's only a few clicks to improve the map and thousands or more people will come across it. You're changing the world in one of the literal senses of the phrase, and can do it from an armchair (doing quality assurance or using aerial imagery) or use it as motivation to seek out places near you that you've not visited yet. Maybe that's something you'd enjoy as well
Re:Factorio that you can touch on Friday September 25, 2026 @04:05PM (#49849234)
Sure I play video games, but not usually the ones from the current year. Besides the price of the game itself, it won't run well on laptop hardware anyway and there's such an enormous collection of great games from past years. Factorio is an exception for me, I've played it since not long after the initial release in 2016 and actually got entertainment for so many hours that I thought it fair to buy it a second time ^^'
Re:Factorio that you can touch on Friday September 25, 2026 @03:30PM (#49848880)
> That's the amount of VRAM that has shipped in budget to midtier gpu's since at least 2016

In desktops maybe, which will be somewhat popular still among people who play a lot of games but not a majority (IDC has laptop sales at a 3 to 1 ratio to desktops in 2022, but that's not specific to people who play games, much less (2d) Factorio players specifically). The system I bought before my current one was in 2018 and mid-tier then was 2GB. There was no craze for (V)RAM at the time, more a question of which setting you want to play games at (and with which render distance) than whether a given laptop works for games at all

As of last month, Steam reports that >15% of their customers still have 4GB VRAM or less: https://store.steampowered.com/hwsurvey/Steam-Hardware-Softw...

I'm not familiar with Subnautica beyond the name, is that known for being particularly efficient?

edit: meant to say 4GB rather than 2GB in the Steam stats reference, fixed

Re:Factorio that you can touch on Friday September 25, 2026 @02:53PM (#49848450)
not you? Is that an expression I should know, meaning the opposite presumably?
Re:Factorio that you can touch on Friday September 25, 2026 @02:50PM (#49848420)
I also struggled with performance in space age and mentioned it to a developer, but the solution was setting a setting which I had tested previously (no fog) and did nothing... on Nauvis. Turns out it's the difference between stuttering and smooth when in space platform view. They do still care but I guess there's only so much you can do if you also have other tasks to get to
Re:Factorio that you can touch on Friday September 25, 2026 @02:47PM (#49848395)
> The game doesn't consume that much VRAM. It plays on 4 GB GPUs just fine.

Not everyone bought a GPU to run LLMs on. That is quite a bit of VRAM, especially for non-desktops

Re:Suspected sabotage causes major Netherlands rail disruption on Friday September 18, 2026 @04:48PM (#49760069)
Check out what the party actually plans. It's the exact opposite of what those people that vote for it need. The demographic is based on uninformedness, correlating with lower incomes, marketed towards the group that feels disadvantaged because they feel that others around them have it better. This party is not going to advantage anyone, high or low income, but a step down in welfare hurts the most if you're already low income so best not choose them in that case.

If you want "enough money to get an apartment/house, buy the basics they need", egalitarian Linke is the obvious choice, and the "and live in a safe environment" part is something literally everyone wants, hard to make a wrong choice there (though with their support for Russia, maybe AfD is questionable even on that front)

> when one of your bigger companies announces letting go of 100k people in the next few years

...then you need social welfare the most? Linke is the biggest proponent of that. What is the logic here?

> a result of people wanting something and the government doing the opposite

This is perhaps the most mind-blowing part. For decades, the right wing government with Merkle at the head did very little for long-term good, so what's the opposite of that? Move further right!! This time it'll work for sure! Blame all the foreigners, inside and outside. Kick them out, reduce international collaboration and trade, and for a cherry on top, fuck the global climate even more than the compromise position previous governments were already pursuing. That'll fix all future problems

No, obviously the opposite of leaving it all to the market and having strict immigration is to nationalize the things people actually need (as you say, things like housing) and have no concept of asylum (anyone can walk in and work here). Will that solve it? Maybe we need some middle ground? I'm not sure anyone has definitive answers to make a perfect world, but this nazi party is so far out there, saying it is "just an alternative" is like saying hitler was "just an option" that we could try and see how it works out. Yeah, people want something 'different' but what level of stupidity do you need to expect that voting for nazis is going to make things 'different and better' instead of 'different and worse'?

Re:Suspected sabotage causes major Netherlands rail disruption on Tuesday September 15, 2026 @12:06PM (#49714652)
Dutch person here. I never heard of these but Prinjesdag is big national news each year. Considering that this is happening in the Netherlands, it's about as likely related to the, eh, ten days of repetitice as it is to the moon landing
Re:Suspected sabotage causes major Netherlands rail disruption on Tuesday September 15, 2026 @12:02PM (#49714600)
What would you have a troll army promote besides AfD narrative if your objective is to fuck with short-term well-being?
Re:Suspected sabotage causes major Netherlands rail disruption on Tuesday September 15, 2026 @11:58AM (#49714545)
Also nobody is talking about aliens as an option?? /s

I really have no clue what this is supposed to refer to. LLMs with arms and legs, armed with pipes?

Re:Understanding the Recent DDoS Attack Against Read the Docs on Sunday September 13, 2026 @05:29PM (#49688918)
> If your hosting provider is on the list you are collateral damage.

Yes, and this sucks. I moved ISPs because the original one had burned IP addresses that you can't send email from. Every ISP that gets the ranges burned like that will eventually either goes out of business or gets their act together. Not by tomorrow, but eventually

Like, the only other alternative outcome I see is that everyone has to pass through a central surveillance point that decides who's benign and who's naughty, and since nobody wants that... what else are we to do but report abuse?

> What do you expect the ISPs to do in this story? We are talking about TLS connections.

What they've done to me when I abused a service as a teenager, the ISP got an abuse notification: cut off the connection, ask the subscriber wtf this traffic is and how they're going to make sure it doesn't happen again (at which point my dad, the subscriber, came to me and asked if I knew something about this.... yeah ^^')

TLS doesn't matter because the ones receiving the abusive traffic can say what it was. Their access logs will contain the decrypted information and that should be put in an abuse report. If the customer denies everything, turn on netflow logging for a month and see if a future abuse report comes in that can be correlated against the netflow logs. Or have netflow logs stored for 1h by default and retain the entries for which an abuse notification came in (grep for IP addresses in incoming notifications). Lots of reasonable options there; this isn't the difficulty. It's getting people to send that abuse notification so the ISP can identify the problematic subscribers

Older »