News for hackers. Stuff that matters.

mrweasel

Re:Why Don't We Live in an Art Nouveau World? on Tuesday November 03, 2026 @12:11PM (#50354753)
Part of the reason could also be that many homes are built by companies with the intent of selling them. Even if price and labour wasn't an issue, you'd have to built a number of different types of homes to appeal to all types of buyers. As it is now builder just make the same type of home in three sizes, more or less. The homes are unappealing to a number of people, but on average it's "good enough" and as long as they follow current trends, the design style will mostly be a problem for the buyer in 10 or 20 years time, the builder will be long gone by then.
The number of people who are reporting that they read every single day has only gone up in the past 30 year (~25% of people in Denmark read everyday).

It is a problem that 30% of those who do not read are reporting that it's because they can't focus on ready, but that number might have been the same through out the years.

In France I believe that the password on the monitoring software, or the controllers, was updated daily. The date was somehow used as the new password, or as an input to the password sequence. So rolling the passwords didn't do anything when the attackers are aware of the "algorithm".
No, and I get that, but working in the industry, he can't have been in the dark about the events in France. If he doesn't deal with the monitoring of the fridges himself, he should be equally upset that the chain has failed to act.
Re:Private Jet plane crashes in Florida on Monday November 02, 2026 @08:00AM (#50336241)
The sound is just crazy and the images of the crash site seems somehow worse than what we've seen from e.g. Ukraine when a missile miss and slams into the ground.
There was an interview with an angry store manager, he's mad at the attackers, but I didn't hear the media ask him why they didn't improve security after the French attacks. Only now do they appear to want to start a review of their monitoring system.

https://www.svt.se/nyheter/lokalt/skane/icas-kylar-och-frysa...

Re:Ask HN: Which TV do you recommend for privacy? on Monday November 02, 2026 @03:49AM (#50334471)
My in-laws have a Bravia of the same era. The image quality is amazing and it sounds great. The apps were never really any good, but now they are all outdated and doesn't work. They just hooked up a ChromeCast, and it's perfect for their use.
Re:Ask HN: Which TV do you recommend for privacy? on Monday November 02, 2026 @03:44AM (#50334443)
One of the supermarket chains here have their own line of TVs. They are dirt cheap, absolutely fine quality. Some of them do run Android, or GoogleTV, so you'll get whatever tracking that may yield, but they certainly don't have the resource or infrastructure to run their own separate tracking and spying on those units.
Re:Ask HN: Which TV do you recommend for privacy? on Monday November 02, 2026 @03:35AM (#50334385)
> sold units' is still a metric they'll use to positively enforce their strategies

Exactly, if we want change the sales numbers have to go down. That means don't by LG, Samsung and who have you, it also means telling friends and family to go buy something else... but what?

Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @02:18PM (#50308041)
Hang in there, in a few years we'll be mining gold cleaning up the mess.

I work in an AI sceptical organization, it's not that we don't use AI agent or consult chat bots, but they are kept a good distance from production. Talking to other SREs in AI heavy and AI first companies I don't see that ending well. SREs struggled with operating applications from developers who cannot or will not understand how computers and the internet work. Now many of the junior developers are even worse and some of them are given the title of "DevOps" and they are using AI to create some of the most broken ass Terraform code and bastard Helm charts to run their broken code. Some SREs are spending more time fighting agents and agent written infrastructure code than they would have, had they been allowed to write it themselves.

If tokens becomes to expensive, we're left with a ton of broken code and infrastructure that can only be managed at an inflated cost. There will be good money to be made consulting and cleaning up the mess of AI boom.

Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @09:14AM (#50303424)
Would that really help, if you install the extension it's running in the VSCodium instance on your machine... or is it running in the vscode-server?
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @08:14AM (#50302878)
Obviously Anthropic didn't develop a malicious extension, but did they publish it? Did it sneak in, in a 3rd party library, or does someone have access to their marketplace account?
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @08:07AM (#50302809)
That is a really good question, because you almost can't do it. You could download the extension, diff it against the previous version and read all the code. Expecting people to do that it just a bit much. At some point we have to trust someone and in this case it will be interesting to see if it's the marketplace or Anthropic we couldn't trust.
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @07:37AM (#50302584)
You mean on the Microsoft VSCode marketplace? The version has been yanked from there as well, but that could just be a precaution and to avoid confusion about having the same version be simultaneously infected and not infected.

This very much illustrates the danger of just carelessly installing untrusted software on your machine. In this case it happens to be code from Anthropic, but it could have been almost anyone. I'll be very interested in see the explanation from Anthropic, because of all the extension developers they should have the best tools for finding issues like this. LLMs have proven pretty good at finding security issues, so did they simply not let their own AI tools vet the code before shipping it? Or was the extension infected later, because in that case every single extension on Open VSX could be at risk.

Re:Official Claude Code extension compromise on Friday October 30, 2026 @06:04AM (#50301846)
How will they communicate and fix that. The affected version has been yanked from the marketplace: https://marketplace.visualstudio.com/items?itemName=anthropi... but that doesn't clean up infected machines.
Re:DoorDash to Acquire Instacart on Thursday October 29, 2026 @12:52PM (#50292153)
Sure, but the pizzeria charges less than $4 for delivery and don't want a tip.

I completely understand the grocery deliveries, it's a trade off, time vs. money. Personally I think the delivery costs are to high, but I also live four minutes away from the supermarket on foot. For others it's one less thing to deal with and they can do the shopping in the evening when the kids are put to bed or have the groceries ready when they come home after a long day. For them the delivery fee is well worth the value the service provides.

It's the $10+ for getting McDonalds multiple times a week I struggle with. People are free to make that choice obviously, but I feel like the delivery services are praying on people who are already struggling, especially when they team up the Buy Now Pay Later companies.

Re:Why are good developers so wary of agentic development? on Thursday October 29, 2026 @12:36PM (#50291841)
From the article:

> they are not hesitant to use a coding assistant, they are hesitant to go all in and let the agents do all the execution.

They are embracing the use of coding agents, but they still want to be in control. That also matches what I see from my most talented colleagues. They outsource certain tasks to the AI and verify the output.

My somewhat unpopular opinion is that only very good developers are able to use AI coding tools somewhat safely. They could have written the code themselves, but it's faster to have the agent do and then verify. The rest of us couldn't write the code, at least not when we start on a project. When we finish, we have some of the skills and could rely more on the AI tools if we were to do it again.

I knew about Spain doing it to align with Germany, but I had no idea that France used to be UTC.
> So from an utility and democracy point of view the wellbeing of the majority

Or you know, you could just put countries in different timezones. Apparently that's easier than convincing people that the workday doesn't need to start at 8:00 (or 10:00 in the case of many in Southern Europe).

> Spain is already in the wrong time zone for standard time

That's probably even more of an issue for Spain, made even stranger by the fact that Portugal is in the "correct" timezone.

It apparently mattered enough that Russia reverted it's decision to stay on DST.
But I do live in the North and in the EU... I care a create deal about not being stress and depressed.

It is actually an issue and in some sense I think there is a case to be made for a timezone split between northern Europe and southern Europe. So e.g. putting Scandinavia in UTC +1 and Spain and Italy in UTC +2. Where we draw the line is tricky, because I doubt that nether France or Germany would want two timezones.

I don't know it this will be the case for Cuba, as it's somewhat differently placed on the map, but Russia tried DST only and had to switch to standard time and then stayed there.

Some people absolutely loves DST for some reason, but it creates stress and mental problems for people, especially in the north. The long mornings are somehow worse than the short evenings. Technically it shouldn't matter what the clock shows, but when society insists on things happening at a certain time, whether or not the sun is out becomes important.

For the Russian case see: https://www.bbc.com/news/blogs-news-from-elsewhere-28423647

Re:New iMac with M6 on Wednesday October 28, 2026 @04:42AM (#50270729)
Most I've seen are just used to RDP into a Windows box anyway, so probably not. That does make it a little strange that no one seems to design a nice looking terminal PC.
Years ago I worked for a company that had an application, written in Delphi, running as a DLL in IIS (on Windows obviously). To more easily deliver certain features fast, open source PHP code was run in parallel, e.g. some customer wants a visitor counter, so that just got bolted on using PHP.

There are some absolutely insane systems out there.

Re:Anthropic S-1 on Monday October 26, 2026 @12:43PM (#50246808)
> How often are people paying at least $600 annually for something AI can help them do instead

I'm going to need an example on this one, and examples that can't be covered equally well by a YouTube video or an 20 year old forum post. It also has to be legal, as in not violating codes for electrics or plumping, I can violate those on my own for free.

Re:The new iPad mini on Monday October 26, 2026 @10:59AM (#50244916)
It's the same price as a MacBook Neo
Re:The new iPad mini on Monday October 26, 2026 @10:56AM (#50244851)
> RAM/Chip prices are way, way up

So that cloud providers can have servers and GPUs sitting unpowered in warehouses and datacenters.

Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @01:23PM (#50212435)
So what happens if AI becomes something that you need to actually pay real money for? Then only Apple, Google and Microsoft can affort to do network exposed software. Smaller companies and solo developers are just f-ed if the price of running LLMs goes up as investor money dries up.
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @01:20PM (#50212394)
If this continues I'll argue that you have to be absolutely insane to allow network connected electronics into your home in the future. This is Apple, known for locking down their device to the extreme, and yes some people would love to use this for jailbreaking their phones, other organisations want to root your phone for .... other purposes.

Insecure webpages, broken certificates and an insecure PDF library... You shouldn't have anything more connected than an FM radio at this point. Security is no longer something a private individual can deal with.

Older ยป