News for hackers. Stuff that matters.

mmsc

Re:Domain hacks with unusual Unicode characters (2018) on Sunday November 01, 2026 @07:19AM (#50324931)
On Firefox, hover-over of the link doesn't show the URL in the bottom left of the browser.
Re:5-MeO-DMT sometimes cancels the Ebbinghaus illusion on Friday October 30, 2026 @11:58AM (#50305801)
The "I measured my own susceptibility using an app I vibe-coded with GPT-5.6 Sol: I dragged a slider until the two circles appeared equal in size." is available on IA:

https://web.archive.org/web/20261008201251/https://heart.qri...

Candy corn. Farm corn to create HFCS in order to build candy that looks like corn.

I do wonder how the USA, historically speaking, came to be the creators of this stuff

Re:macOS Golden Gate Is a Buggy Mess on Tuesday September 29, 2026 @11:46AM (#49895334)
It still isn't apparent to me why Apple decided to take their otherwise logical and fine UI, and create Liquid Glass. I guess somebody got a nice new title and bonus, though?

Did they fix the bug where the toolbar of applications would either get stuck open or disappear while in full screen mode, requiring them to be moved to the desktop before returned to fullscreen?

Re:The Murky History of Soviet-Born Tetris on Saturday September 26, 2026 @04:06PM (#49860058)
+1 for David Sheff's book. It's by far the best written history about video game distribution in the late 80s and early 90s.
Slopped up site https://mvueh-enigma-solved.carterl.chatgpt.site/ seems to indicate it's due to:

  The SS-Totenkopf Division was advancing east during the opening weeks of Operation Barbarossa, the German invasion of the Soviet Union. 10 July 1941, the division had just fought its way through the Soviet border defenses around Sebezh. It had moved through Lithuania and Latvia, crossed the Dvina area, and advanced through Dagda toward a place German records called "Rosenow." The division moved out of the Rosenow area around 6 July, fought around Sebezh on 8-9 July, and then continued east/northeast toward Opochka and eventually Porkhov.
For anybody interested, the actual encrypted message:

  BTTE UM ANGABE DES MARSQWEGES X BEFINDE MIQ IN X ROSENOW ROSENOW X SOFORT FUNKANTWORT X WASCHBBSCH
which, given misspellings, translates approximately to:

  Please specify the route of march. I am in Rosenow, Rosenow. Immediate reply by radio. Waschbusch.
Re:Forgejo <=16.0.3 Critical RCE on Thursday September 10, 2026 @04:05PM (#49649495)
Wonder how long it took from report to patch. IME codeberg has one of the rudest security teams in oss (fair enough or not, irrelevant). https://news.ycombinator.com/item?id=47941590 Is quite relevant
What is the moral difference between training on porn vs other genres of media?
Re:Sort branches by last commit date on Monday August 31, 2026 @09:47AM (#49509773)
.gitconfig:

  ```
  [rebase]
      instructionFormat = %s%nexec GIT_COMMITTER_DATE=\"%cI\" GIT_COMMITTER_NAME=\"%cN\" GIT_COMMITTER_EMAIL=\"%cE\" git commit --amend --no-edit%n
      committerDateIsAuthorDate = true
  ```
Re:Sort branches by last commit date on Sunday August 30, 2026 @06:09PM (#49503338)
`git config --global branch.sort -committerdate`
This is the premise for the Taiwanese movie Cape Number 7: https://en.wikipedia.org/wiki/Cape_No._7
They still do this when you land in Australia
Re:Air Conditioning Is Not a Luxury, It Is a Necessity on Thursday August 27, 2026 @08:12AM (#49463473)
Thats what I tell to all the wildlife when they collapse, too.
There's a concern that the developer of FB-purity passed away: https://www.reddit.com/r/facebook/comments/1tw2sf9/real_conc...
Re:Tail-call optimization in C is relatively recent on Monday August 10, 2026 @08:17AM (#49242661)
and TCO was added then removed from js! https://stackoverflow.com/a/54721813

This leads to fun stack-overflow bugs too in a lot of js code (one solution is to flatten: https://joshua.hu/javascript-infinite-tail-call-recursion-st...)

Re:Ask HN: What are you working on? (August 2026) on Sunday August 09, 2026 @04:15PM (#49235343)
I recently got a Magic Keyboard and Magic Trackpad and have been using them on two different Macbooks (work and non-work).

I couldn't find a good way switch them between different Macs, so I made https://github.com/MegaManSec/magic-switch. It's a small application which allows you to basically share the peripherals between Macs, and send them back-and-forth either manually or automatically.

Feeling miserable for three days seems ... unlikely after 800mg/day of caffeine. I say that to mean, it should be much longer (been there, done that, took many months) Caffeine use especially at that level massively grows the amount adenosine receptors your brain has, and they don't just disappear overnight.

A 500ml Diet Coke (assuming you don't mean the caffeine free version) also contains about 65 mg of caffeine, which is the same as an espresso. I'm not sure if you really quit. Caffeine is also in a surprisingly large amount of soft drinks you wouldn't expect.

Re:Em dashes are fucking amazing on Friday July 24, 2026 @09:35AM (#49035353)
and here i thought "option -" was an em-dash, but no, it's an _en_-dash.
Re:Introduction to Formal Verification with Lean Part 1 on Wednesday July 22, 2026 @09:57AM (#49006931)
it's like proof by induction versus trying every number from 0 to infinity
Re:Vulnerability Reports are not Special Anymore on Wednesday June 24, 2026 @05:32AM (#48657334)
already exists: https://joshua.hu/comparing-redos-detection-tools. `recheck` and `redos-detector` are definitely the best. there's even an eslint plugin for the latter: https://github.com/tjenkinson/eslint-plugin-redos-detector
> Another month later, GitHub support sent me an email saying that they had removed these repositories.

I recently discovered a campaign where somebody was forking very small but useful codebases, and replacing the distributable with some malware, and making the repository have better SEO with changes to the README. My case was a simple macOS application that could be used to control some Phillips LED light strip.

I reported it to GitHub and it was removed within 24 hours.

I discovered another repository like this, and they still haven't replied since (one month).

No clue how their malware reports work. I'm surprised they don't partner with some antivirus company to at least scan "releases" for malware (not repositories themselves)

Re:I Hate (Most) Keyboard 'Fn' Keys on Wednesday June 10, 2026 @09:44AM (#48476185)
A missed opportunity to say you 'Fn' hate the Fn key :)
Re:Project Glasswing: An Initial Update on Friday May 22, 2026 @06:39PM (#48242519)
Aisle has hundreds of CVEs with publicly available models: https://aisle.com/wall-of-fame

Older »