News for hackers. Stuff that matters.

magnat

It was this comment what made me realize #:~:text= in the URL isn't some custom, per-site JS hack or a weird way to name your anchors, but actual standard[0] way to link to a text on any page.

[0] https://developer.mozilla.org/en-US/docs/Web/URI/Reference/F...

Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @01:02PM (#50184209)
> On August 11th researcher Ryan A at Calif reported an unconditional remote code execution with the same root cause as the OOM problem we had found in 2024. OpenAI independently reported the same root cause on the same day

What a coincidence.

Re:Triple-A Minesweeper on Friday October 09, 2026 @04:02PM (#50025920)
Felix Varga and Johanna Kowalski (Online Services Engineers) must have done a really good job - with all the traffic from the HN front page login servers didn't go down and queue was almost instant.
Re:F-Droid 2.0: A New Chapter for Android Freedom on Thursday September 24, 2026 @12:01PM (#49832605)
And still no popularity rating, download count or any user review system whatsoever.
Those are multiple-choice questions. If some of them are "trick questions", where obvious answer (e.g. the value taken directly from question's text) is wrong, bad model might perform worse than a dice.

On the other hand, not sure where from 25% baseline for random answers come from. Since this is multiple-choice-out-of-4 test, random guessing should be correct in 1 in 15 cases, not 1 in 4.

Re:QBittorrent breaks out of sandbox to commit crimes on Sunday September 06, 2026 @11:58AM (#49587779)
Especially when the page source actually contains all the content (so no need to fetch it in JS), part of which is even presented in title.
Re:Show HN: QR code renderer in a TrueType font on Wednesday July 01, 2026 @03:16PM (#48751807)
Selecting parts of the code (in F7 mode or with SHIFT-LEFT/RIGHT) highlights which individual pixels corresponds to the actual letters.
Re:Bytecode VMs in surprising places (2024) on Monday May 25, 2026 @07:13AM (#48265553)
Some other examples:

- ACPI configuration for power management and platform stuff [1]

- Bitcoin transactions [2]

- TrueType fonts [3]

[1] https://wiki.osdev.org/AML

[2] https://en.bitcoin.it/wiki/Script

[3] https://learn.microsoft.com/en-us/typography/opentype/spec/t...

No, I mean Visual Studio (the IDE), not Visual Studio Code (the editor).
Is there a way to use this (or similar) model in Visual Studio? Extensions on Visual Studio Marketplace are clunky and sluggish at best, if they even work at all.
Re:Why German Strings Are Everywhere? on Tuesday January 06, 2026 @10:42AM (#46513693)
Also:

* Reverse polish notation

* Chinese remainder theorem

* Byzantine generals problem

Re:Interstellar Mission to a Black Hole on Friday October 24, 2025 @09:37AM (#45694490)
Did you, by any chance, play Outer Wilds recently?
Re:Walkie-Textie Wireless Communicator on Tuesday August 19, 2025 @12:30AM (#44948267)
If one node kept transmitting non-stop, it could push data out at 3.5kbps and no one else in that range can transmit at the same time.

However, in EU there is a legal limit of 1% duty cycle on 868MHz band and collision avoidance mechanism, meaning on average you can send a packet (up to 255 bytes) once a minute.

Re:Walkie-Textie Wireless Communicator on Monday August 18, 2025 @02:08PM (#44943569)
Hard limit is 3.5kbps with 148dB link budget (Medium Fast preset in Meshtastic [1]). In practice - a packet worth of hundred bytes every half a second or so.

[1] https://meshtastic.org/docs/overview/radio-settings/

Re:Walkie-Textie Wireless Communicator on Monday August 18, 2025 @11:52AM (#44941987)
> LoRa can reach a range of up to 3 miles (4.8 km) in urban areas, and up to 10 miles (16 km) in rural areas

In mountainous area LoRa on 868MHz band reaches over 100km. Last month we had a stratospheric balloon with a Meshtastic node attached. It established direct (albeit intermittent) connection between Warsaw and Berlin.

Re:PuTTY has a new website on Saturday August 16, 2025 @03:39AM (#44921138)
> I'm a c# dev with near 20 years experience

Which IDE do you use? JetBrains Rider?

Re:Qwen3-4B-Thinking-2507 on Wednesday August 06, 2025 @03:35PM (#44816627)
> if you run it at the full 262144 tokens of context youll need ~65gb of ram

What is the relationship between context size and RAM required? Isn't the size of RAM related only to number of parameters and quantization?

If RTL-SDR is a good reference - when demodulating FM it produces pretty much the same noise you'd expect from a mistuned oldschool radio.
The separate noise source is a bit of surprise here. Why is it necessary? Wouldn't RF noise produce same results?
Re:Show HN: Draw A Fish and watch it swim with the others on Friday August 01, 2025 @12:54PM (#44759355)
Try SolidGoldMagikarp
Mostly for I/O, e.g. mmap requires file offset to be multiple of the page size.
Re:AI video you can watch and interact with, in real-time on Saturday May 31, 2025 @03:58PM (#44146629)
It feels like an interpolated Street View imagery. There is one scene with two people between cars in a parking lot. It is the only one I have found that has objects you would expect to change over time. When exploring the scene, those people sometimes disappear altogether and sometimes teleport around, as they would when exploring Street View panoramas. You can clearly tell when you are switching between photos taken a few seconds apart.
> The team also used a CMOS camera to capture visible-light emissions from the microplasmas (...) The CMOS imagers, however, had to be placed close to the measured radiation source, reducing their applicability to remote sensing

How can it be called long-range detector, if literally the detector has to be placed at measured object?

Re:Building an open-source Wi-Fi Mac layer for the ESP32 on Sunday March 09, 2025 @01:34AM (#43306795)
1. They might have used IP cores with license that forbids disclosing any technical details, including firmware implementation.

2. Manipulating RF registers could cause the device to operate outside of regulatory parameters, perhaps invalidating FCC certification for the whole device. By not disclosing how to use MAC directly, they can claim they did their best to prevent device from misbehaving.

Re:Optimistic Locking in B-Trees on Friday March 07, 2025 @04:17PM (#43294792)
If your data/leaf/heap pages hold indexed cells PostgreSQL-style [1], 16-bit in-page offset limits your page size to 64KB. On the other hand, physical memory frame size usually is 4KB or larger, so going below that is not really productive.

Having said that, both PostgreSQL and Microsoft SQL has 8KB page size, while original SQLite had 1KB pages, before switching to 4KB, while still supporting 64KB pages. On top of that, Microsoft SQL operates internally on extents of 8 pages (64 KB) instead of a single page, but still pretends to use 4 KB pages [2].

In other words - no idea.

[1] https://www.postgresql.org/docs/current/storage-page-layout....

[2] https://learn.microsoft.com/en-us/sql/relational-databases/p...

Re: on Thursday February 27, 2025 @06:16AM (#43193325)
C-like equality (==), inequality (!=) and assignment (=) is such a missed opportunity here. One could go with "=", "=/=" and "<-" here while both preserving some sanity and shock factor.
Re:LinuxPDF on Saturday February 01, 2025 @01:07AM (#42896104)
We have tax forms available as interactive PDFs, which:

   * auto-computes formulas
   * enables and disables whole sections of the document depending of filled values
   * performs complex validation, beyond checking for required fields and regexp patterns
   * offers inline help
   * can be filled, saved and printed completely offline
   * when printed, looks exactly the same as traditional, paper form
   * don't require external software beyond a PDF reader
Similar vibes to https://userinyerface.com/

Also, for some reason, hogs 100% CPU recursing like hell between two methods:

    o0 [https://games.productartistry.com/_next/static/chunks/4bd1b696-98e9308c101e0794.js:1:90345]
    o2 [https://games.productartistry.com/_next/static/chunks/4bd1b696-98e9308c101e0794.js:1:90778]
Re:I Reversed a Drone and Landed It with My PC on Wednesday January 01, 2025 @09:47AM (#42566288)
BetaFlight doesn't deal with over-the-air bits, it just receives PWM/PPM/S-Bus/whatever signals your receiver provides. There is no point to have encryption in firmware, because connection between RX and FC is hardwired and can be trusted.

Lack of OTA frames encryption, as far as I can tell, is mostly due to legacy reasons. In DYI FPV there are only couple of transmission standards, most of them using 2.4GHz FHSS or some CC2500 clone so you can mix-and-match transmitters and receivers as you wish. If you use custom TX/RX devices, you are pretty much locked in to that specific vendor. Also, designing a nice transmitter UX-wise requires quite a different skillset than designing nice transmitter RF-wise, so manufacturers tend to choose off-the-shelf RF modules.

Older »