News for hackers. Stuff that matters.

marisen

Re:Make your first edit to OpenStreetMap on Sunday September 13, 2026 @09:53AM (#49684039)
iOS has Go Map! Which from my understanding is a very powerful mobile editor.

https://wiki.openstreetmap.org/wiki/Go_Map!!

There's another path that the author hasn't considered, which is making users contribute directly to OSM.

To contribute a bookcase, ask them to create an OSM account, log in with OAuth, and send the edit straight to OSM.

Book corners becomes just a custom view and editor over OSM data, instead of being its own database.

Users are now responsible for the data they submit (OSM already has tools to deal with vandalism etc...).

Re:Rust at Scale: An Added Layer of Security for WhatsApp on Wednesday January 28, 2026 @05:35AM (#46793579)
WhatsApp doesn't use libsignal, and Android is already pretty Rusty and deployed more than WhatsApp around the world (not just smartphone. Tons of "embedded" use cases also run on custom Android)
Re:Scaling long-running autonomous coding on Tuesday January 20, 2026 @07:43AM (#46691230)
It is well known that a programmer that stops programming stops requiring food
Re:What Happened to WebAssembly on Friday January 09, 2026 @03:45AM (#46551467)
> React, the defacto UI framework for Javascript has a lot of web assembly components.

I'm pretty sure this is just plain false. Do you have an exemple?

Given this (including the linked writeup on the mintlify RCE), after the React RCE, if think it should be pretty obvious that

1. content security policies should always be used to prevent such scripts (here they would prevent execution of scripts from the SVG)

2. The JavaScript ecosystem should be making ` --disallow-code-generation-from-strings` a default recommendation when running NodeJS on the server.

Vercel (and other nodejs as a service providers) should warn customers that don't use CSP and `--disallow-code-generation-from-strings` that their settings should be improved.

There are a bunch of other NodeJS flags that maybe you should look into too: https://sgued.fr/blog/react-rce/#node-js-mitigations

Re:Several core problems with Rust on Monday November 24, 2025 @02:08AM (#46031190)
If you use a lot of Arc<Mutex<Box<T>>> you you probably just learn to use Rust properly and just use Arc<Mutex<T>> instead because it pretty much never makes sense to have a Box inside an Arc...

I say that as someone that thinks Rust's learning curve is the main reason it rarely makes economic sense to use it.

Re:Openly Licensed Streetview with Panoramax on Thursday September 12, 2024 @04:14AM (#41518646)
It's a french project funded in part by the french government and the only current instances are for french contributors. They actually make it pretty easy to contribute... for the people that will contribute in France.
Re:Openly Licensed Streetview with Panoramax on Wednesday September 11, 2024 @11:25AM (#41512268)
There are currently only 2 panoramax instances. One from IGN (french "National Geographic Institute) and one from the french OSM charter.

This is obvious by looking at the coverage the world. France it where the majority of the coverage is. The coverage of most cities is actually pretty impressive for a young project.

While the UI and coverage is not necessarily on par with street view, it's still pretty usable in France.

Secondly Panoramax is first built for OSM contributors/mappers, not for end users. The blog reflects this in the tldr: "If you are interested in contributing"