News for hackers. Stuff that matters.

numbsafari

Oh, ok then.

… this is fine …

Re:Official Claude Code extension compromise on Friday October 30, 2026 @12:27PM (#50306247)
> > I'm still surprised people use CrowdStrike

> I mean, LastPass is still in business...

I mean, Microsoft is still experiencing massive growth.

Re:AI Isn't Replacing SREs. It's Deskilling Them on Friday October 30, 2026 @12:24PM (#50306206)
I assigned myself to re-read "Flowers for Algernon" based on my current frustrations with the team / cultural impacts of AI usage.

It's mildly orthogonal, but I think the metaphor is really quite apropos.

Re:Official Claude Code extension compromise on Friday October 30, 2026 @11:06AM (#50304962)
I mean, who says it wasn't an inside job...

https://www.cnbc.com/2026/10/30/binance-hack-elon-musk-tesla...

Re:Official Claude Code extension compromise on Friday October 30, 2026 @08:25AM (#50302970)
This puts an entirely new spin on Elon trolling Binance on Twitter.
Re:Railway Security Disclosure on Wednesday October 21, 2026 @07:16PM (#50188974)
Environment variables are a terrible place to store secrets.

I'm just going to say it, since having said it non-stop for over 20 years, nobody seems to listen and we keep circling this drain.

The 12 Factor manifesto was 100% wrong on this point.

Use environment variables to point to where secrets are located, not to store their values.

Re:"I'm on a War Footing": Terry Tao and the Crisis in Math on Sunday October 18, 2026 @05:56PM (#50145892)
Examples?
Re:Zero-Click Spyware Delivered via Targeted Ads: AdFection on Thursday October 15, 2026 @03:39PM (#50109143)
And also injure and kill our sailors: https://en.wikipedia.org/wiki/USS_Liberty_incident

In that one incident, they killed and injured more than double the number killed and injured by Al Qaeda in the attack on the USS Cole.

Re:Amazon pushes up prices across the Internet on Wednesday October 14, 2026 @10:30AM (#50088319)
Capitalism's main principle is not competition, it is merely the private ownership of the "means of production".
Re:Amazon pushes up prices across the Internet on Wednesday October 14, 2026 @07:47AM (#50086162)
Try having a discussion with anyone here in the US about not using Amazon. The free market is a myth.
Re:Flowers for Algernon on Tuesday October 13, 2026 @02:32PM (#50076400)
Reflecting on the ways that LLMs seem to empower individuals and teams to access seemingly limitless intelligence, but the team seems to lose its skills and capabilities for judgement and planning rather quickly after adoption.
Hah! Not every day my neighborhood gets a shout out on HN. I’ve swam in that pit in the video. Neck deep you can see your toes. Found a couple pipe bombs… definitely gets a lot of attention from bored people.
No, it’s that if there’s nothing to hide, then they shouldn’t jump through so many hoops to avoid basic industrial reporting requirements.

It’s not any one thing, it is the litany of things they do in order to avoid any transparency or accountability. It is undemocratic and contradictory to the idea of good governance of public resources.

If anything, a little sunshine here would probably be the best medicine. Trying to be opaque is what allows conspiracy theories to exist in the first place.

Also the unforced error around NDAs and attempts at bypassing environmental and other reviews. People don’t like the idea of their local elected officials bypassing the rules in the dark.

I understand these companies want to move fast, but this seems to be one of those cases where going slow gets you there faster.

Call the police. That’s wire fraud and theft.
Does openAI not support spending caps on your billing account?
Re:I said no and Apple said yes on Tuesday September 22, 2026 @09:52AM (#49801322)
For the vast majority of people, without much technical capability, “moderately messed up” is functionally equivalent to “bricked” as a purely technical slang term.
Re:New Mac mini, featuring M6 and M5 Pro on Tuesday August 25, 2026 @12:33PM (#49436751)
… from the fine print:

“Results are compared to previous-generation Mac mini systems with Apple M4, 10-core CPU, 10-core GPU, 32GB of unified memory, and 2TB SSD.”

...and Han Dynasty only exists in Philadelphia.
Re:Malicious Rust crate Arrayref runs a build-time payload on Thursday August 20, 2026 @09:51PM (#49382715)
Maybe it wouldn't matter either way if people stopped putting untrusted executable code into basic build processes.

You could get rid of a huge portion of the go standard library and have a massive ecosystem of leftpads, but the fact that `go build` can easily be run in off-line mode and doesn't execute any code other than the go toolchain itself, means you have a fundamentally more trustworthy ecosystem overall.

Rust, on the other hand, might keep you from a subset of buffer overruns, but it will gladly run obfuscated, untrusted code in your name when you wouldn't otherwise expect it to.

As an industry, we need to somehow stop making this mistake.

A person bumps into at the train station. They just need $5 to get home. Could you just spare them $5? They had the money, but they lost their wallet and now they just need to get home.

Charity scams are nothing new.

Perhaps it elicited enough sympathy to get donations. Did it ever provide proof of actually running up an AWS bill?
Re:AI agent runs amok in Fedora and elsewhere on Wednesday June 10, 2026 @09:48PM (#48485305)
I too have see the fnords
Re:WWDC 2026: Apple is Folding on Tuesday June 09, 2026 @09:56PM (#48470345)
Exactly. Considering you could buy an iPhone and a MacBook Neo for roughly the same cost … will be very interesting to see this device in action. Can iOS replace MacOS for a user that doesn’t need a local Xcode? Can I spend $2k for the device I use in my pocket and on my desk… and put the rest of my money into cloud/server infrastructure if I have that need?
Re:macOS Container Machines on Tuesday June 09, 2026 @09:48PM (#48470286)
Wouldn’t it be nice if services like Codespaces or Coder or Gitlab would allow you to target running on their hosted/integrated platform, or let you launch that same container completely locally? Sometimes I wanna take my “remote” dev environment off-line but still benefit from the integrated UX.
Re:Dopamine Fracking on Monday June 08, 2026 @08:44AM (#48444643)
.. and here I am wanting better minivan options that can pull a travel trailer.
Re:Fidonet: Technology, Use, Tools, and History (1993) on Tuesday June 02, 2026 @10:33AM (#48370805)
This is how I grew up. Using fidonet via my local RPGA group.
Re:The Cost of Owning a Home on Tuesday May 26, 2026 @09:38PM (#48288384)
How many times are they gonna double count the insurance a property taxes?

Older »