News for hackers. Stuff that matters.

mjmas

Re:Infinite Mac: BeOS on Friday October 30, 2026 @08:19PM (#50311917)
Re:Upcoming Critical PHP Security Release on Thursday October 22, 2026 @02:02AM (#50191714)
out of per-request-limited memory. That was part of the vulnerability that the state wasn't completely reset properly.
Re:PHP 8.2.35 on Wednesday October 21, 2026 @05:39PM (#50188050)
> I don't recall seeing any high-quality C codebase using it

Lua does. (though it does have the option to use C++ exceptions or MSVC stack unwinding instead)

Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @09:59AM (#50181095)
How would that work for the OOM cases?
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @09:50AM (#50180949)
Caching. Try adding a query parameter: https://www.php.net/archive/2026.php?a
We are already going through the "digital duty of care" act now.

https://www.aph.gov.au/Parliamentary_Business/Bills_Legislat...

It applies a 'duty of care' to 'online services', which include 'internet carriage services', 'social media', 'relevant electronic services', 'hosting services', 'search engine services', generative AI services, among others. And for encrypted messaging (which would probably come under 'social media' or 'relevant electronic services'), it only excludes 'lawful communications occurring in private solely between consenting adults'.

And the other big thing is it gives approved researchers authority to use sock puppet identities in contravention of any 'agreement, contract or deed', and gives them immunity from civil consequences.

Reliable sources inform me that the government is never going to abuse this act.

Re:Teal – A statically-typed dialect of Lua on Sunday October 18, 2026 @05:49AM (#50139540)
Teal isn't particularly new. First commit is Jan 2019
Re:Don't Put Tilde In Your Path on Sunday October 11, 2026 @05:18PM (#50047909)
Bash does it only inside variable assignments:

  a=123:~
  echo $a
  echo 123:~
results in:

  123:/home/me
  123:~
Not a guy that lives in a dictionary
Re:cp: -r or -R? on Saturday October 03, 2026 @08:45AM (#49943787)
rsync, or at least the version I had would behave differently for 'rsync a b' vs 'rsync a/ b/', even though I added the slash for both sides.
Re:Building a certificate authority for the whole Internet on Wednesday September 30, 2026 @04:58AM (#49906211)
That only relies on the (mostly reasonable) assumption that all CAs that don't use ACME charge for the service.
I'm not sure how it works with USPS, but with AusPost here, there is generally an entry at the very start saying 'Label created'.
TIL that American pawpaw is different from Australian pawpaws (papaya) (which are tropical).

> A previous version of this article referred to the pawpaw as a tropical fruit. It is in fact a temperate fruit, that belongs to a tropical family.

Re:OpenAI agent hacked Australian government website, PM says on Thursday September 24, 2026 @05:28PM (#49836968)
Here in Australia (Qld) that is the law. Once you move somthing to get in (open a door, etc) it then is classified as breaking.
Re:OpenAI agent hacked Australian government website, PM says on Thursday September 24, 2026 @08:37AM (#49829767)
Yes, but if you leave your door open then it is only tresspassing, not breaking and entering.
Re:Italian parliament votes for return to nuclear energy on Wednesday September 23, 2026 @05:28PM (#49822839)
Because having a solution would put the climate change organisations out of a job.
Here in Australia unless that particular user that received the emails gave consent to receive marketing emails (and the emails have identification + unsubscribe) it would be violating our Spam act.

https://www.acma.gov.au/publications/2024-07/guide/consumer-...

Re:Looking forward to Git 2.56 – and 3.0 on Tuesday September 22, 2026 @09:21AM (#49800864)
Also would be nice:

receive.denyCurrentBranch should be updateInstead by default (or at the very least mentioned in the help message, rather than it recommending ignore or warn or refuse, none of which do what is wanted)

Re:Why MCP Was Always a Bad Idea on Sunday September 20, 2026 @10:12PM (#49782287)
And call it not-closed API or something like that.
Re:US Revokes Limits on Power Plants' Climate Pollution on Sunday September 20, 2026 @06:57PM (#49780986)
Here in Queensland the state owns the regional electricity company, Ergon. ∴ most of what they do that doesn't generate money (such as doing free electricity rather than charging for it) is taxpayer-funded.
Re:US Revokes Limits on Power Plants' Climate Pollution on Sunday September 20, 2026 @06:43PM (#49780881)
Becaude, as we all know, taxpayer-funded == free.

And we banned nuclear, since it's scary.

Re:So I have a weatherman, which also tells me the news on Sunday September 20, 2026 @05:41PM (#49780373)
Also calculating the dew point should be a more stable measure of the air's water content over different temperatures. The first picture works out to a dew point of 23 degrees, assuming 82% humidity is accurate.

https://media.bom.gov.au/social/blog/1324/feeling-hot-and-bo...

Re:Hacking OpenAI on Friday September 18, 2026 @01:28AM (#49750474)
Interesting to note their monorepo is already up to issue / PR 1,186,742. And so assuming 10 years old it would average out to around 450 PRs/issues each workday.
Re:A warning about 'model welfare' on Wednesday September 16, 2026 @06:35PM (#49733984)
What about the being inside of the womb?
Re:Vintage Scientific Papers with LaTeX on Sunday September 13, 2026 @07:35AM (#49682845)
The illustrations use https://github.com/jemmybutton/fiziko to get pretty line rendering.
Re:Show HN: What if the speed of light was 5 km/h? on Thursday September 10, 2026 @04:54AM (#49640548)
We can't necessarily survive that well when under acceleration greater than 9.81 metres per second per second for extended periods of time.
Re:“I just chose words carefully” on Tuesday September 01, 2026 @09:55AM (#49522075)

  Including the making of the posts
  into nice rectangular portions of
  each thirty three characters wide ?

  Not including the double space at
  the beginning of each line or any
  of the punctuation character ends .
Re:Omarchy: Any User Process Can Escalate to Root on Sunday August 30, 2026 @06:26PM (#49503451)
The attacker could use `chattr -i .bashrc` with the same privileges before editing your bashrc. A better way would probably be to use `sudo chown 0:0 .bashrc`.

Also you will want to do the same to .profile (because of LD_PRELOAD etc). And also do the same to any directories in your $PATH (~/.local/bin etc)

Older »