News for hackers. Stuff that matters.

m3nu

Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @08:39AM (#50179904)
It was suggested to only allow GET/HEAD requests. Works if you don't have login forms.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @07:12AM (#50178962)
Good resource!
Re:Namecheap just seized and disabled all my domains on Monday October 19, 2026 @03:19AM (#50149354)
No, they also disabled a domain with 20k user subdomains without notice based on an abuse report that was weeks old and the site long disabled. Wouldn't trust them with a proper abuse process.
Re:Qwen3.8-Max: A New Bar for Coding and Cowork on Monday August 03, 2026 @01:30PM (#49158891)
Just arrived on open router. Was waiting for this.

https://openrouter.ai/qwen/qwen3.8-max

Re:Bring Back Crappy Forums on Thursday July 02, 2026 @02:24AM (#48757304)
Speaking of a crappy forum: I packaged phpbb for Docker because there was no good image after Bitnami went under. But not sure what to do with it. Didn't even put it on our hosting site yet. Is this useful for something beyond nostalgia and fun?

https://github.com/pikapods/docker-phpbb/pkgs/container/dock...

100% this. For my own company I mostly build deterministic workflows that may have a simple AI step in the middle using an appropriate Chinese model in a very limited way. I wouldn't want to burn tokens to satisfy some metric.

With this AI is a fallback and not the default. Sounds like large companies have it backwards.

Re:Dirtyfrag: Universal Linux LPE on Friday May 08, 2026 @09:46AM (#48063077)
Re:Copy Fail – CVE-2026-31431 on Thursday April 30, 2026 @07:21AM (#47960862)
What other kernel modules would you suggest disabling that aren't used usually?
Re:Copy Fail – CVE-2026-31431 on Thursday April 30, 2026 @03:14AM (#47959254)
Good idea. Added to the playbook for RHEL only.

On Debian normal unloading of the module works.

Re:Copy Fail – CVE-2026-31431 on Wednesday April 29, 2026 @06:55PM (#47955781)
I wasn't able to unload algif_aead on RHEL 9/10 because it's built in, rather than a module.

So here the next-best thing I found: Disable AF_ALG via systemd. Needs drop-ins for all exposed services. Here an Ansible playbook that covers ssdh and user@, which are the main ones usually.

https://gist.github.com/m3nu/c19269ef4fd6fa53b03eb388f77464d...

Re:GitHub is having issues now on Monday April 27, 2026 @02:31PM (#47925391)
Releases aren't being published for me.
Re:Codex for almost everything on Thursday April 16, 2026 @06:50PM (#47800512)
I have a feeling that Codex is also getting lower limits. Got this email just now. Basically they copy Claude's $100 tier.

> To help you go further with Codex, we’re introducing a new €114 Pro tier designed for longer, high-intensity sessions.

> At launch, this new tier includes a limited-time Codex usage boost, with up to 10x more Codex usage than Plus (typically 5x).

> As the Codex promotion on Plus winds down today, we’re rebalancing Plus usage to support more sessions across the week, rather than longer high-intensity sessions on a single day.

Re:Cal.com is going closed source on Thursday April 16, 2026 @04:43AM (#47790348)
A Docker image would be good too.
Also a user of their CDN, storage and container service for about 4 years.

My experience was more positive. One time I had a minor issue with their storage where I couldn't replace a file or something. This was fairly early after the product launched. They fixed it and gave me free credit for reporting it.

Re:Hold on to Your Hardware on Friday March 27, 2026 @08:27AM (#47541882)
My bet is that phone hardware will be used more and more in mini PCs and laptops keeping the cost down and volume up. We see it with Apple and many Chinese mini PC makers I looked at.
Interesting but link is dead? Would love to see this.

Found it: https://www.hankgreen.com/crc

Re:The Future Is Not Self-Hosted on Saturday July 26, 2025 @04:52AM (#44692552)
I set up a service to make hosting those apps as seamless as possible while giving the user control of their data and also sharing revenue with authors to keep projects sustainable. Check it out here:

https://www.pikapods.com/

In strength training 'programming' means the details of your workout plan. Like how many sets, reps and exercises.
Re:Backblaze Drive Stats for 2024 on Tuesday February 11, 2025 @01:02PM (#43015943)
4,414,142 TB = 4.4 Exabyte
Also got into making children's books with AI. Midjourney mostly. Has been fun, but my son is running out of ideas. Good thing chatgpt is fairly creative, once you give it the right persona.
Re:Show HN: Create legit-looking children's books with AI on Wednesday December 11, 2024 @02:15PM (#42391573)
Came here to say this is great and already did 2 books. My son loved it.
German speaker in Portugal. :-)

That's awesome. Just did one.

Re:Zed: SSH Remoting Is Here on Thursday October 31, 2024 @03:28AM (#42004258)
Also works well in vscode. Just wish the remote instance would keep running forever. Currently it's only a few hours it seems. Then one needs to reopen the workspace window.
Re:Ask HN: How To: Internal Documentation? on Sunday September 01, 2024 @07:38AM (#41416064)
In Bookstack organized by department. Simple to update and put access controls on it.

As others have mentioned, this needs to be a living document and the person doing the task needs to update the docs where needed. No tool can replace this, but Bookstack at least makes it easy.

Re:Ask HN: What do you monitor on your servers? on Sunday August 18, 2024 @03:42AM (#41280814)
Those are some great ideas for Prometheus alert rules. If they aren't already added here: https://samber.github.io/awesome-prometheus-alerts/
Been doing the same with Anki and Obsidian. E.g. via https://github.com/ObsidianToAnki/Obsidian_to_Anki

Using it for languages and IT certs mainly. I wouldn't want to manage flash cards separately, so getting them from notes is great. Nice to see something more polished and mainstream for this workflow.

Excellent! Already emailed you some more details.
Actually yes! It could even be paid in the context of this year's Google Summer of Code:

https://github.com/borgbase/vorta

Or if you join as mentor, you will be supporting the Python Foundation.

If interested, just email the address in my HN profile.

Re:How Ultrasound Became Ultra Small on Tuesday March 19, 2024 @02:31AM (#39753419)
Found one. How useful is this at home? Is the main issue with interpretation?

https://www.aliexpress.com/item/1005005664149090.html

Older »