News for hackers. Stuff that matters.

mkj

That was edited in later
59 seconds will still have second alignment. Maybe it needs to be prime milliseconds or microseconds.
Re:EMudhra Intermediate CA Compromise on Wednesday October 21, 2026 @01:19AM (#50176366)
Does this mean that their WebTrust Seal auditor (BDO Malaysia) didn't do a very good job? https://www.cpacanada.ca/api/getPDFWebTrust?attachmentId=3d8...
Re:Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD on Friday October 16, 2026 @08:38PM (#50126626)
Fuzzing doesn't tend to catch overflow cases since operations aren't repeated enough times. I wonder if fuzz engines could add a "counter detection" pass that reruns inputs that are seen to increment values. Maybe that's already been tried by someone.
Re:Ask HN: Whats the first command you run on a new server? on Saturday October 10, 2026 @01:43AM (#50029958)
dmesg
Re:Pop!_OS bans AI-generated code from much of its codebase on Sunday October 04, 2026 @08:49AM (#49953481)
Maybe you could report it as a normal bug report, by hand?
Re:Don't couple your Go code to GitHub on Monday September 28, 2026 @12:05AM (#49873504)
Unless the field of software development somehow totally stagnates, I'm confident that at some point I will move to a different hosting service, as github goes the way of sourceforge, travis-ci, and myspace. So my personal domain will continue to be relevant (it's lasted fine 23 years).

Maybe at that point it won't be using git either, or maybe it will - who knows.

Re:RAM: the forgotten history (2024) on Thursday September 24, 2026 @07:49PM (#49838344)
Could you read it with a flatbed scanner or other photography? That should be unobtrusive.
Re:Nokia Design Archive (2025) on Thursday September 24, 2026 @07:53AM (#49829379)
I guess it was just part of the current website generation's training set!
Re:AMD's random number generator can't generate a 0? on Wednesday September 23, 2026 @08:10PM (#49824474)
With ecdsa the number of signatures needed to attack biased nonces seems low, hundreds or thousands? https://blog.trailofbits.com/2020/06/11/ecdsa-handle-with-ca...
Re:Ubuntu 26.10 completes transition to Rust-based coreutils on Wednesday September 16, 2026 @12:31AM (#49722107)
The 26.04.01 upgrade LTS is delayed from it too, not just interim releases.

https://lists.ubuntu.com/archives/ubuntu-announce/2026-Augus...

> Users of Ubuntu 24.04 LTS will be offered an automatic upgrade to 26.04.1 LTS via Update Manager a couple of weeks following this release after some planned backports to address regressions in a recent version of rust-coreutils.

Re:Physically Immutable Optical Archive Libraries on Wednesday September 02, 2026 @07:06AM (#49534579)
These don't seem really physically immutable, just protected by the firmware of the drives/robot against being written twice. With enough effort couldn't the same laser write _something_ over them again? Maybe optical discs need a hole that gets punched out or something, like the old floppy disk write protect. (And then make that control a physical laser power switch)
Re:Google Pics is generally available starting today on Wednesday September 02, 2026 @07:01AM (#49534539)
So Google Pics is for work, and Google Photos is for personal photos? Got it.
Australia banned telemarketing a while ago, it worked pretty well. The only spam phone calls left are 100% illegal scammers.

https://www.acma.gov.au/telemarketing-and-e-marketing they give out million+ dollar fines which sort things out. Just being a customer doesn't allow them to send marketing, you have to opt in.

Re:Some combinatorial applications of spacefilling curves on Tuesday July 28, 2026 @10:51AM (#49084842)
Aha, thanks. The adsb.exposed maps are excellent, thank you! Really intrigued by the building maps.
Re:Some combinatorial applications of spacefilling curves on Tuesday July 28, 2026 @08:22AM (#49082735)
A few times I've had an irregular 2D dataset to process and thought "aha, maybe I can be lazy and iterate ordered by a space filling curve coordinates and it'll be more cache effective". But it's never given any improvement. Anyone tried something similar?
Re:How to Block Some of the Bots on Monday July 27, 2026 @12:18AM (#49065155)
There are a lot of urls for the bots to follow. Yesterday's logs had 2.2M unique URLs out of 2.7M requests (more unique than I was expecting!)

Typical traffic:

  https://hg.ucc.asn.au/dropbear-fuzzcorpus/annotate/default/fuzzer-preauth/23f6b74342011f35e657f06e9398ad339360d7e9 
  https://hg.ucc.asn.au/dropbear-fuzzcorpus/comparison/e67e5df225e5/fuzzer-verify/b5f57a2bb85ab7ef957e4979fd202b091de27bd8?revcount=8 
  https://hg.ucc.asn.au/dropbear-fuzzcorpus/log/72337e3dcccf/fuzzer-preauth_nomaths/6b1f390d26b08759983937727e10ab90aa7b03f2?revcount=15 
  https://hg.ucc.asn.au/dropbear-fuzzcorpus/log/4cdb539e4b20/fuzzer-preauth_nomaths/713e5cd4f73276f00a5d6685cc16d4565ad3815a?revcount=96 
  https://hg.ucc.asn.au/dropbear-fuzzcorpus/diff/tip/fuzzer-client_nomaths/540778ea81a915af6e898fd9658c5d9d6594c40a?revcount=128 
  https://hg.ucc.asn.au/dropbear-fuzzcorpus/diff/0ef1e51e583f/fuzzer-client/65ac44bdf4868866def70f40542dd1b5ca447310?revcount=30
(I've moved and kept the fuzz corpus now, but other viewvc repos were suffering similarly)
Re:How to Block Some of the Bots on Sunday July 26, 2026 @11:25PM (#49064873)
It's mainly that dealing with them is hassle, time that could be better spent doing other more useful things.

Over the weekend I got round to turning off some old viewvc (CVS and subversion) and hgweb (Mercurial) web interfaces. They'd been running fine for a decade or two with basic security updates etc, mostly only occasionally visited for real purposes, but that's fine!

But getting 2.7 million requests/day from residential proxy IPs was a bit taxing for the old uwsgi/cgi programs (that's average 30/s), making other sites on the server suffer. It was also getting close to 1TB/month which is the VPS quota.

So I ended up turning them off, one more cut towards the centralised internet. Sure I could put a cache in front, but there are probably millions of combinations of dynamic urls in the VCS tree so caching mightn't help much anyway, not worth the effort. I'm sure the web server could be tuned better too, but again it's a waste of time.

Re:AMD Strix Halo RDMA Cluster Setup Guide on Sunday June 28, 2026 @12:58AM (#48704508)
openai etc are going to have a higher utilisation of the hardware so can afford it more than small companies/people. Efficient resource use matters more when they're expensive.
Interesting idea, but wouldn't an embedded language normally be interpreted/runtime editable? I guess you could do it shipping a rust compiler, but it'd be big. A bit like Numba?
Re:Google Hits 50% IPv6 on Sunday June 21, 2026 @10:29AM (#48619283)
getaddrinfo was added after ipv6. Software had to be rewritten to use getaddrinfo.

Prior to that programs used gethostbyname() etc, which only works with ipv4.

Re:Google Hits 50% IPv6 on Sunday June 21, 2026 @05:32AM (#48617215)
Old Nanostations as a client need to do proxy arp or something, which doesn't handle ipv6. That said it's probably 15 year old hardware. I ended up using a wireguard tunnel across it instead.
Re:The 100k Whys of AI on Sunday June 21, 2026 @02:39AM (#48616255)
Maybe the LLMs need some kind of "coverage" metric so they prioritise new paths? The author would know a thing or two about that.
Re:Map Clustering Is Not My Favorite on Wednesday June 17, 2026 @09:11AM (#48570038)
I think that's incorrect. Brains/eyes are good at looking for patterns.
Re:Map Clustering Is Not My Favorite on Wednesday June 17, 2026 @06:34AM (#48568353)
If you have less than hundreds of thousands of points, you can probably get away with drawing individual dots on the map. Computer screens are high res.
Re:Map Clustering Is Not My Favorite on Wednesday June 17, 2026 @06:33AM (#48568335)
There are excellent examples of the problem in Edward Tufte's "Envisioning Information". Have a look at http://blah.ksteinfe.com/181106/tufte_envisioning_informatio... for a few snippets of it, then buy the book.
I'm wondering who's going to buy pi!
It looks like github is just buggy in this case.

Older »