News for hackers. Stuff that matters.

madog

Re:I don't like passkeys on Friday September 18, 2026 @01:43PM (#49757727)
Ignoring any supposed security benefits, personally I use it because it's much more convenient/ faster than logging in with a password since.

You're still slightly less likely to get phished if you only ever login with passkey and only use the password in case of lost passkey. Of course you could get phished that one time but entering your password once (maybe never) has got to be better than entering it daily.

I don't have any passkey accounts where I didn't start off with a password and after adding a passkey the password login method was always retained. What services are people using where you don't need to set a password?

Re:I don't like passkeys on Friday September 18, 2026 @10:34AM (#49754995)
> Yes, there's the minimal risk of lockout if you lose access to the passkey (though almost every site I've used that implements pk's lays it on top of their traditional user/pass auth flow)

Exactly, if you lose your passkey you just sign in with your password like you did previously. I'm yet to find an app/website that has passkeys only and no passwords.

Seems like a total non-issue to me.

Re:It's Linux, on a Sega Genesis on Tuesday June 30, 2026 @03:44PM (#48738224)
I was wondering what instruction set architecture the megadrive was using and came across this great article on the Motorolla 68000 and megadrive: https://www.copetti.org/writings/consoles/mega-drive-genesis...
If you have wired I just found out you can get a $30 wireless dongle for this these days. Available for both CarPlay and Android Auto. Meant to work pretty flawlessly although mine is the mail so I haven't tested it out yet.
Re:Pricing Changes for GitHub Actions on Wednesday December 17, 2025 @07:02AM (#46301015)
It's not entirely, because Github simply does not support inter-version diffs when you have multiple commits. If you force push onto multiple commits there is no way to show a diff between version 2 and version 3 of those commits. How Github lacks such basic (and imo necessary) functionality in 2025 is amazing to me.

Something like linked and dependent PRs in a chain would go someway to replicating Gerrit but again this basic functionality is not available out of the box for whatever reason.

Re:Pricing Changes for GitHub Actions on Wednesday December 17, 2025 @03:54AM (#46299676)
Something like Gerrit. Instead of carefully crafting a logical series of patches that are all well documented with commit messages, PRs are just garbage filled diff soup of "fix typo" commits. I hate it. It's hard to review and seems to be based on putting the least amount of effort into proposing changes to the code. See https://gist.github.com/thoughtpolice/9c45287550a56b2047c631...
Re:AOL to be sold to Bending Spoons for $1.5B on Thursday October 30, 2025 @12:43AM (#45756513)
Migrating to Obsidian looks to be very easy now: https://help.obsidian.md/import/evernote

When I converted many years ago it required 3rd party tools and was slightly more involved (but still totally worth it).

Re:Minecraft removing obfuscation in Java Edition on Thursday October 30, 2025 @12:17AM (#45756391)
Presumably they were using a decompiler e.g. IDA Pro to know what characters to change in the hex editor? I've done that before to find offsets in the binary to NOP out some function calls.
5% at 70 mph is 3.5 mph

10% at 30 mph is 3 mph

I saw this with various European cars.

My experience is that it seems to be a fixed percentage rather than a fixed amount i.e. the absolute difference increases with speed.

Re:Over 80% of Sunscreen Performed Below Their Labelled Efficacy on Saturday September 06, 2025 @09:44PM (#45154616)
It's not a rumour. They usually read somewhere between 5-10% over actual speed. Use a more accurate GPS speedometer on your phone to check that.
Re:Buy a Faster CPU on Sunday August 24, 2025 @03:32PM (#45006981)
For sure. $1000 Herman Miller Aeron has been worth every penny considering the time spent sat on it.
Just use gettimeofday/clock_gettime via vDSO.

  struct timespec ts;
  clock_gettime(CLOCK_MONOTONIC, &ts);
On arm64 it directly uses the cntvct_el0 register under the hood but with a standard/easy to use API instead of messing about with inline assembly. Also avoids a context switch because it's vDSO.
Re:Recovering from AI Addiction on Friday July 11, 2025 @12:36PM (#44534204)
I agree.

Seems like the first step should be understanding that you CAN have control over it, even if you don't currently; and that you have the agency and strength to do that without appeal to some higher power.

The admitting you have no control sounds fatalistic to me and robs you of agency/responsibility. Then you're reliant on some externality or higher power instead of finding it within yourself.

Even those who go for the higher power are ultimately doing it themselves, they've just kidded themselves something else is involved, and if that helps you find that you can have some control over it, then great, I guess?

Re:Meta announces Oakley smart glasses on Friday June 20, 2025 @12:58PM (#44329688)
Not to mention Meta is ad tech so these will be full to the brim of tracking and adverts to recoup R+D costs.

I'm yet to be convinced these are useful and not just another way to inject ads directly into eyeballs.

Last time I tried to report a fake product to Amazon it's literally impossible. It simply isn't one of the pre-determined options available through customer service, either the self service chat or to the advisers. The closest thing and what the advisers select would be "item not as described" which might be somewhat correct, but hides the problem to whatever reports get generated for management. Hard to believe that isn't intentional.
Actually with vaping it becomes pretty easy to quit. You just taper down the nicotine slowly until you're on nothing and eventually you just kind of stop because you don't feel the need to do it anymore.
Re:GIMP 2.99.18: The last development preview before 3.0 on Thursday February 22, 2024 @05:18PM (#39474101)
There is PhotoGIMP[1] that copies the hotkeys and tool layout. It doesn't replicate behaviour exactly obviously but it does make it actually usable for me as someone who used Photoshop a lot in the past, and was eternally confused by GIMP.

1: https://github.com/Diolinux/PhotoGIMP

What country is that? That's a lot. At least in the UK if you don't watch regular TV you don't have to pay the licence fee (£159/year).
Re:Unix as IDE (2012) on Thursday December 28, 2023 @03:27AM (#38791270)
There are modern alternatives to many of the classic utils e.g. `fd` for find, with better CLI args and other improvements

ripgrep for grep also comes to mind

Where's the list that show all car brands? Doesn't seem to be easily found on that page or any of the linked ones.
Re:The Fall of Stack Overflow on Tuesday July 25, 2023 @09:00AM (#36861559)
This is what I want from a new search engine:

1. Respect exact match searches - this used to work enclosing the search terms in "" quotes, but no longer works. If there are no exact match results, return nothing.

2. Allow blacklisting or removing results from certain websites entirely e.g. I want to be able to configure geeks4geeks to never show up in any results ever

If someone could make this new search engine they would have a good shot at replacing Google :)

Re:Shopify Quietly Replacing Laid Off Workers with AI on Sunday July 23, 2023 @03:45AM (#36833369)
They also do not have an option to report an item they sent as counterfeit/fake which is amusing given how prevalent it is with their mixed bins between 3rd party items and legitimate goods.

The closest related option is "not as described" or something like that.

Even if you contact support chat that is the only option available to the advisers too.

So it's actually impossible to report something as counterfeit.

I always imagine some C-level exec looking at the stats and congratulating themselves on having no counterfeit items reported. Well done Bob! We did it again.

Re:Argos Catalogue Kettle Pages, 1976/1985 on Tuesday June 27, 2023 @02:25AM (#36489524)
Haha yes. I would spend months looking through that catalogue in the lead up to Christmas, comparing and cross checking items and descriptions and cost. I remember some items always felt out of reach like the Casio TV remote watch[1].

Someone has also scanned almost all Argos magazines from 70s to mid 90s - https://retromash.com/argos/

1: p100 item 14 https://issuu.com/retromash/docs/argossuperstore-1995-autumn...

Re:eBPF Verification Is Untenable on Friday June 23, 2023 @09:35AM (#36446650)
Nope. Tracepoint eBPF programs require root to load always. For eBPF you select a program type, and that limits what you can do (aka what helper functions are available to you) and what privileges are required.
Re:The Beginner's Guide to eBPF on Monday May 08, 2023 @04:31AM (#35859343)
What you can do is quite limited. You're restricted to some preset eBPF program types, and each program type has a restricted set of operations it can perform (eBPF helper methods). So arbitrary modifications, absolutely not without adding a helper method and/or program type for this purpose. More program types and helper methods are being added all the time but overall it's pretty limited in use cases and operations.

If you want full control then kernel module is the way to go, but this doesn't have the same security and stability guarantees.

Older »