News for hackers. Stuff that matters.

lynndotpy

Re:WTF Ubuntu? on Monday November 02, 2026 @11:54AM (#50339714)
For me, it's not so much "what does Ubuntu have that Debian doesn't" and more that "just use Ubuntu" has only bitten me twice.

It's 2009 or so and I want to try Linux. "Just try Ubuntu" they say, and I have a good time. I see that many "How to use X on Linux" guides, or FOSS software, often build for only Debian, and sometimes only Ubuntu. This is fine until snaps give me huge problems in 2018, and so I completely stop using Ubuntu desktop.

Now in 2026, I manage three servers (two on Ubuntu), one Raspberry Pi (on Ubuntu), and two Linux desktop installations. I stopped using Ubuntu desktop in 2018 but snaps are less problematic for my server workflows, so now I have three Ubuntu server installs. On my desktops and my one non-Ubuntu server, I find myself sometimes missing Ubuntuland. (These aren't Debian though, so I might just be missing Debianland.)

"Just use Ubuntu" is now something that has bitten me in using servers. Two bites in 17 years is a fantastic track record. But this slow response to a CVE fix has me looking at Debian, and this has shaken my faith in canonical. "Do they pull in upstream security fixes quickly" is one of my first questions for any FOSS I use.

But my servers aren't Nix or IaC or whatever, and so... Taking them down and putting them up would take a lot of time and risk, which are two things I'm not so willing to spend. Maybe it's 10 minutes, or maybe there's a bandaid fix I have from 2023 that I forgot about and would need an hour to re-derive. So, I find myself taking the security gamble instead.

Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @09:38AM (#50303722)
I'm not asking this in rhetoric; do you happen to have a link to this comment? I ask because a comment like that would be something of an insane thing for someone to say.
Re:Apple introduces the new 14-inch MacBook Pro with M6 on Tuesday October 27, 2026 @01:19PM (#50262483)
For those who can't see the video, I think the above two commenters are being facetious for humor.

It is funny because the video is 50 minutes long which requires a difficult soldering job and chip reprogramming. This does not include the process of opening the Macbook Pro, disassembling it, removing the logic board, nor the reverse process.

Re:New iMac with M6 on Tuesday October 27, 2026 @12:51PM (#50262006)
Did you know Moore had two not-as-famous cousins with their own laws? Sam and Leslie.

Sam predicted price-per-transistor-per-square-inch density would asymptote, while Leslie predicted it would level off and then regress.

Leslie's Law is in full effect, it seems.

Re:The Exponential Time Hypothesis Is False [pdf] on Tuesday October 27, 2026 @06:13AM (#50256859)
Yeah, I was wrong. Page two too, I commented too soon.

NP is not yet proven to be subexponential but still, ETH disproven is huge

Re:The Exponential Time Hypothesis Is False [pdf] on Monday October 26, 2026 @07:11PM (#50252483)
If I am understanding this correctly (and I am still reading this!) and if this is true, this means NP is sub-exponential. Sub-exponential does not mean P=NP. But yes, this is huge if true.

This means hard problems aren't as hard as we thought, and it's still possible P=NP. If it turns out to be true P=NP, we're a little closer to that. (I hope P!=NP!)

Every paper which assumes ETH is true might now have their conclusions be disproven.

Re:OLED iPad Mini on Monday October 26, 2026 @11:10AM (#50245110)
For anyone curious, a diagram with the camera can be found here: https://www.apple.com/v/ipad-mini/a/images/specs/buttons_con...

from this page: https://www.apple.com/ipad-mini/specs/

Re:The new iPad mini on Monday October 26, 2026 @11:01AM (#50244956)
I would be surprised if >10% of people didn't notice a difference between 60Hz and 120Hz.

Whether the hardware can keep up with Liquid Glass and push 120 frames a second is a different story, of course.

This isn't surprising but it's good to have reporting to point to. The only way a general purpose LLM like these will match the performance of a bespoke classifier is if it has access to such a model.
I parsed it as "A record that is ((160 bytes and an allocation) in C++) is ((29 bytes and none) in Goose)."

So, I read it as, "C++ uses 160 bytes and an allocation, when Goose requires 29 bytes and no allocation".

Re:OBS Studio 33 on Saturday October 24, 2026 @09:10AM (#50220926)
I'm not the person you are replying to, and I am with you. I disagree with the suggestion it's trivial to reproduce, diagnose, and fix a bug.

But at https://obsproject.com/help we see OBS has a Discord (regular gamer), a Forum, a Feedback page, and a Mastodon.

Re:Using LLM for confidence scoring is a bad idea on Thursday October 22, 2026 @09:16AM (#50194898)
I would also like a source for this, I do not believe it is true and founded that "an LLM has a latent concept of its own confidence that is internally consistent".

LLMs generally cannot report the outputs of their own activation functions. Taking the output of softmax as if it were a probability score is considered a first-year PhD student misconception.

Re:Using LLM for confidence scoring is a bad idea on Thursday October 22, 2026 @09:12AM (#50194845)
You are only talking about what you're feeling. Care to actually make a statement about what you think is true, besides implicitly denigrating someone else?
[delayed]
Re:Upcoming Critical PHP Security Release on Tuesday October 20, 2026 @11:03PM (#50175577)
I am not affiliated with PHP in any way or sense, I am saying this as someone who is able to see PHP's announcements, and there was no patch or mitigation announced by PHP.

I don't think pulling mitigations from random users online during a developing situation is a good idea. I think shutting down ones PHP services for the time being is a very good idea if that's an option.

Re:Upcoming Critical PHP Security Release on Tuesday October 20, 2026 @10:31PM (#50175345)
I do not have details about any mitigation. There are rumors that people have independently come across php2shell exploits.

I shut down my servers five hours ago. This might have seemed premature at the time.

I think the best course of advice for most people is to shut down their servers as soon as they possibly can.

Re:Upcoming Critical PHP Security Release on Tuesday October 20, 2026 @10:07PM (#50175206)
Just a heads up, as of my comment, this is not endorsed by PHP as a migration for the patch.
Well, this is something I'm imagining in my head, so I can just imagine something I'd prefer. So, I'd prefer this to be an opt in thing that you do for yourself or your friends.
[delayed]
Right? I feel like I'm taking crazy pills in this thread. Almost every Zelda game has a clear sequential relationship to another Zelda game. They aren't complicated stories and one doesn't need to be a deeply-read Zelda nerd to see it.

The only questions which the official timeline answers is how exactly to connect some otherwise-disparate sequences of games into a unified directed graph.

2002 was the first point in time where having a timeline document was useful, because it was the first game to make it clear there was at least a "child timeline" and an "adult timeline". Before then, there was a simple sequential chronology in the series.

In Ocarina of Time, Link has the ability to travel back and forth to the future, taking on an adult form. As an adult, he defeats Ganon and seals him away, with Ganon swearing to return one day.

But then Link returns to his childhood time. As a child, Link warns Zelda about Ganon, and preempts the future (where Ganon takes power and adult Link defeats him) from happening. So, there are at least two timelines.

Majora's Mask follows this child Link in one of the few explicit sequels in the series.

But then Wind Waker faces off against the Ganon defeated by adult Link. This is explicitly referenced in the text but it's not so clear-cut a sequel.

Meanwhile, Ocarina of Time was explicitly a prequel to A Link to the Past (depicting the events described in ALttP's backstory). But (1) some events don't quite line up and (2) the continuity of games established in the other timelines can't really neatly fit the ALttP-LA-OoS/OoA-LoZ-LA chronology. So a third timeline is just the neatest way to do it.

None of this really matters for playing or understanding the games, though. With the exception of Majora's Mask (and Phantom Hourglass / Spirit Tracks to a lesser extent), each Zelda game can be enjoyed as someones first Zelda.

Eh, even before 2011 with the official timeline and the Skyward Sword prequel-to-all-games, there was plenty of textual content to support a timeline.

AoL was a sequel to LoZ. ALttP was a prequel to LoZ. LA was a sequel to ALttP.

OoT is explicitly a prequel to ALttP.

OoT splits into at least two timelines. MM explicitly follows the child Link who preempted Ganon's ascension. WW explicitly has you fight the Ganon defeated by adult Link. TP explicitly places itself as a sequel to the "child timeline" and so also a sequel to MM.

The only games which lacked an explicit placement to the rest were the Four Swords series and the Oracle games. Not small exceptions, but exceptions none the less, and that's only if you ignore interviews. (And interviews would give you Minish Cap preceding Four Swords preceding Ocarina of Time.)

I prefer this interpretation, but there is just so much textual content in the games which support a unified branching timeline for most of the games. You can start with the explicit chronologies you have and mostly put them together like a puzzle. Zelda games which don't explicitly position themselves in chronological relationship to another Zelda game are the exception (like OoS/OoA or the Four Swords timelines).

This is not a deep-Zelda-nerd take, this is mostly working with simple connections like "Zelda 2 is a sequel to Zelda 1".

I think most Nintendo IPs are about playing around with the same motifs, ideas, narratives, and gameplay elements. Metroid is another series where this is very evident, with half of the games being spiritually a remake of a game which game before. A timeline doesn't preclude the Zelda series as a story about the cyclical nature of conflict, about archetypes reappearing throughout history, or as a legend passed over generations.

Re:macOS 15.8.2 Breaks OpenGL on Sunday October 18, 2026 @02:10PM (#50143703)
The only data most of us can refer to are Google Trends. The unprecedented peaks for "How to switch to Android", "iPhone revert update", "iPhone fix battery", "iPhone slow", "new iOS sucks", "iPhone bad now", "How to block iPhone updates" all reached new peaks with the release of Liquid Glass in late 2025.

Similar story for Macs. It's hard not to see the graph for "macos broken" ( https://trends.google.com/trends/explore?date=all&q=macos%20... ) or "macos slow" ( https://trends.google.com/trends/explore?date=all&q=macos%20... ) or "how to fix macos" ( https://trends.google.com/trends/explore?date=all&q=how%20to... ) and find any reason for this other than people having a surge in bad experiences with Liquid Glass.

Of course, this is only Google Trends, and even if we interpret this as a 4x to 100x increase in bad experiences with Apple products with the forced introduction of Liquid Glass, it still might be the case that >50% of people aren't consciously experiencing problems from it.

Re:macOS 15.8.2 Breaks OpenGL on Sunday October 18, 2026 @01:59PM (#50143564)
The problem is that this is a well established pattern with this operating system:

- A bug or regression is identified in a beta or release candidate. People quickly come to defend Apple saying it will surely get fixed.

- The bug or regression is released. People quickly come to defend Apple saying it's not a big deal, there are workarounds, and it will probably get fixed.

- The bug or regression is now the status quo. Why are you rehashing old news? Nobody cares, this impacts only 1% of people, you're imagining things, thread locked, user banned, et cetera.

The time to complain loudly and broadly is _before_ the bug or regression becomes the new status quo for the platform.

Re:macOS 15.8.2 Breaks OpenGL on Sunday October 18, 2026 @01:36PM (#50143315)
I really appreciate that I'm not the only one. Using Apple software is increasingly an experience in navigating a minefield of bizarre UX mistakes.

The big concern for me is if I ever find myself in an emergency situation and I need to use my phone to contact someone. Apple's iPhone is so inconsistent and unreliable even in the best of conditions.

Re:An Apology on Friday October 16, 2026 @07:42AM (#50117197)
I am sure you have heard the infamous Dropbox comment :)

AirTags are expensive at $30, which is about five hours of the legal take-home minimum wage of about $6/hour in the United States, after tax. The cheapest cordless drill you can find is about $20 and you run the risk of damaging the AirTag.

This device was $10 and meant to be foolproof. Instead of spending $20 + $30 for each "practice AirTag", you can spend $10 with certainty.

For those on the side of our economy with more access to resources, they might value their time enough that $10 is a trivial price to pay to silence multiple airtags more easily.

No no, I am saying "native" is not consistent even within an OS.

I do agree keyboard shortcut consistency is important and useful. GIMP is awful on macOS just for this reason

Do people really want this? IME the worst, slowest apps on a given OS are native.

I remember a time when you could feel that apps were built on a consistent set of standards on a platform, and that meant they were fast, and it was weird when an app had its own wacky GUI. But today, native apps are neither consistent across eachother, nor are they performant.

WebView2 is native on Windows and the practical default, but who wants more apps like Microsoft Teams? Music.app is native on macOS and slower than music.apple.com, but who wants more apps like Apple Music? These are abysmally slow apps.

Things are better on Linux before, but "native" is DE-specific anyways. Between electron, GTK, and KDE, I tend to prefer electron. Only second to apps like Blender or Godot, which have great UX advantages from having their own bespoke GUI frameworks which are consistent across OSes.

Re:Ledger Nano X: the spy implant on Tuesday October 13, 2026 @05:57PM (#50079465)
I am not talking about those. These cameras were targeted and pointing directly into peoples windows, set up by the local police department, under the guise of being electric utility boxes.

Here are two sources on the matter:

https://www.reddit.com/r/conspiracy_commons/comments/gin79z/...

https://www.fox13memphis.com/news/activists-find-camera-insi...

In August 2020, this was unbelievable, and it would have been considered reasonable (if wrong) to dismiss OP as paranoid, especially for the subreddit they posted in.

Older »