News for hackers. Stuff that matters.

mey

Re:WTF Ubuntu? on Monday November 02, 2026 @04:59PM (#50344454)
Something like this is rowhammer. Can it be exploited in a lab setting vs practically in the wild? Is fail2ban + WAF sufficient? How much network traffic is needed to remotely trigger the exploit in the field? How much inside knowledge of the system itself needs to be known?

These go from extreme edge cases to viable approaches over time, so it needs to be patched. I think the really messed up thing is the lack of communication from the Ubuntu team. If they have a rationale either way, that's fine. They may disagree on the severity, identified a problem in the fix, etc, but the lack of transparency is causing a loss of confidence in the team's abilities.

Re:Redesigning Source Control at Anthropic on Tuesday October 13, 2026 @02:08PM (#50076023)
Did they reinvent subversion?
Re:Mxc: Microsoft Execution Containers version 1.0.0 on Saturday October 10, 2026 @09:05PM (#50038761)
End users should be expected to care about security. They should not be the only guard rail, but they are part of the defense in depth plan.

You do know about all those security training courses HR makes your take every year that you skip over?

Does Ubuntu LTS really make sense as a non-workstation distro? Especially if you are using PPAs to enable functionality.
Do you have a friend/family out of state? Do they have a commodity router? Many have such a feature built in.

Less savvy individuals/business would also have no reason to obey these laws.

See https://en.wikipedia.org/wiki/Evil_bit

Re:S3 Is the Future, S3 Is the Past on Sunday September 27, 2026 @07:46PM (#49871970)
Not that deep archive isn't a valid option for the appropriate work load, but it has different effective costs.
To build on the economic/practical issues.

The useful life of cutting edge AI server hardware will require constant rotation of equipment to potentially remain competitive with more accessible solutions.

Heat management ( https://m.youtube.com/watch?v=-w6G7VEwNq0 )

Hardening of equipment for the environment. ECC isn't going to be enough. I would have to defer to experts about the best way to manage it, but it either means custom hardware, weight, or both.

Repairs are impossible. Hopefully a sat can degrade gracefully, but routine repairs on earth become significant outages/decreases in economic value of a sat over time.

Rocket launches have gotten much better, but are not perfect. Insurance is a thing. However, cost of equipment in a failed launch may be eye watering, rivaling a governmental military launch.

Re:Meta VR Glasses on Wednesday September 23, 2026 @08:59PM (#49824845)
Not sure how to date this list is, but here is one way to look at it. https://vrhealth.institute/vr-ratings/

I have found VR an easy way to get moving in a fun/low friction way at the end of the day, instead of heading somewhere else. Depending on what you are doing, it isn't going to cover everything, but moving something is better than nothing.

Personally, I found Synth Riders a good way to queue up 60min continous activity that I enjoy.

Re:Meta VR Glasses on Wednesday September 23, 2026 @08:51PM (#49824775)
Not sure what you mean. The marketing video shows pancake optical stacks and specs have mentioned OLED displays. While the marketing video attempts to play up an immersive fantastical reality, the experience will function like a Quest 3 or Apple Vision Pro, where there are external cameras that then get projected onto the internal screens.
Re:Meta VR Glasses on Wednesday September 23, 2026 @08:43PM (#49824697)
The form factor itself is also a killer. Couldn't imagine doing anything besides using it as large private display for 2D games. You aren't going to be moving your head around quickly with just pressure on your temples to hold it in place.

Not sure where this lands functionality wise. I feel like it's most direct competition would be as a cheaper Apple Vision. You would need to pair it off with a Windows system for heavier productivity work most likely. Even though their OS is "android", it doesn't have the Google ecosystem behind it, let alone matured on that front. Media consumption on the go seems to be the other use case.

So, compare them to either XREALs plugged into a laptop/phone, or Apple Vision Pro I guess.

Re:Unreal Agent on Tuesday September 22, 2026 @03:55PM (#49807200)
This seems to be reflected in their recent changes in how they track views on YouTube
Re:Steam Frame starts at $1059 on Monday September 14, 2026 @03:51PM (#49702920)
Ars Technica's article put it at 1.5hrs in performance mode and over 2 in a power saving mode, but noted that the lower saving mode wasn't enjoyable. Of course it's I am sure that is going to be highly subjective to what you are doing.

https://arstechnica.com/gaming/2026/09/steam-frame-the-ars-t...

Re:When LLM judges agree, should we believe them? on Monday September 14, 2026 @03:23PM (#49702514)
A shared blind spot as noted at the bottom needs to be considered more often. In my day job, most of my coordination with others and now LLMs, is clarifying context and requirements. Claude is very happy to make assertions without the full picture in my experience, even when I give it as much context as I can.
Re:Apple is no longer thinking different on Thursday September 10, 2026 @01:53PM (#49647759)
BlackBerry, Windows CE, and Symbian devices were all already around as smart phones at the time. When the iPhone initially launched, it's revolution was a streamlined form factor. Their was no app ecosystem at launch. I would say their biggest innovation was system integration and refinement. Other than blackberry, few companies were really owning the product vision from top to bottom.
Re:216M Spy TVs – The LG Smart TV Problem [video] on Monday September 07, 2026 @02:19PM (#49601285)
How do guests/children/people in public spaces consent to it? It's a gross violation.
They know many things I don't. I can easily assume they have a specific reason to make a public statement that is within their interests. Without any reports/prospectus/booked contracts, it's just marketing/spin.
No projections/information/analysis. The statement from someone with a vested interest in this demand lasting an extended period of time (including the statement that demand will continue past 2030).
I have no desire to get either so functionally nothing.
Re:The August 17 outage, and the work ahead on Thursday August 20, 2026 @07:47PM (#49381847)
What do you use now and what is your primary use case?
Re:A joke domain purchase turned in geopolitical warfare on Wednesday August 19, 2026 @11:58PM (#49370225)
Explosions&Fire has an interesting video on this. https://m.youtube.com/watch?v=XHDXk9THJZM

Well indirectly about how they work and to counter them.

Re:Every Fucking Website (2020) on Friday August 14, 2026 @09:14PM (#49306581)
People share links to Instagram with me. It isn't something I seek out myself.
Re:Every Fucking Website (2020) on Friday August 14, 2026 @11:41AM (#49300297)
I have Firefox setup to not launch apps on android with permission. I don't have Instagram/Facebook/etc installed. Attempting to view a Instagram link on mobile is the most hostile thing in existence. You essentially can't, but it so aggressively routes you to the website based Google play store it's horrifying.
Re:Build Wide, Ship Narrow on Thursday August 13, 2026 @01:18AM (#49282013)
I am most proud of the code I have deleted from projects and the code I have never written.
There is nothing wrong with wanting to be compensated for your work, but for people like myself which use a cloud managed DB solution (GCP CloudSQL PostgreSQL) it means something like this would never be available.

I consider AGPL a poison pill in my work. That is not true with a suitable commercial license, although I expect a lot more commercial product (support/features/etc). As you note, your objective is to prevent commercialization of your software, but radically speeding up analytics is primarily a concern of large organizations so it seems like a mismatch in purpose.

Some thoughts for framing. Are data centers a national security risk? How is that different than the national electrical grid who h is already critical to national security. It sounds like the national grid is failing its purpose due to unplanned for/unexpected demands. This is a gradient, reduce demand/increase capacity. Is our health a national security issue? I would like to think so.

We are making a choice, it is more important to the nation to acceleate power consumption support over health concerns and climate change.

Even if allowing this exception, how much head room does that even buy us? 10 years, 1 year, 6 months worth of growth? How does that measure against bringing new cleaner energy production online?

Either the bubble will pop, efficiency gains in models/tech/hardware reduce demand, or we hit the ceiling anyways. So is it worth paying this cost in the mid-term?

Re:I'd not buy a LG monitor on Tuesday July 28, 2026 @03:04PM (#49088426)
I have had good success with my dell montiors over the years. Only problem is they are not created equal, they sell to every level, entry/cheap office/gamers/high end docks/color calibrated/etc. I have stuck to the ultrasharps (and paid for it) but have been happy. Check out https://www.rtings.com/
Re:LG to ban residential proxies from smart TV apps on Wednesday July 22, 2026 @12:09AM (#49001765)
How important is "the best" OLED vs the second best or 100th best OLED? I am personally ok not buying the bleeding edge to not get malware onto my OS.
Two things can be true. The data centers can be driving up electricity costs, causing pollution, planning issues, and computer hardware shortages _and_ people can be finding the tools useful.

Older »