News for hackers. Stuff that matters.

octagons

I’ve only seen vague suggestions of what is actually being gated through this verification. Is there a more definitive explanation of what will require the verification?

Either way, the moment I encounter this, I’ll be canceling. It’s a complete deal breaker.

Mehdi is such a wonderful educator! I wish I’d had him as a professor for whatever topic he’d be interested in teaching.
Re:Your hex editor should color-code bytes on Thursday April 23, 2026 @10:10AM (#47875963)
ImHex++. I also can’t help but shill for 010 Editor, a commercial alternative that one might describe as a little less opinionated.
Re:5x5 Pixel font for tiny screens on Wednesday April 22, 2026 @02:49PM (#47867654)
I developed a font with a similar resolution that was not nearly as legible for my Pi Zero with an e-ink screen many years ago. It allowed for similar tooling such as the flipper zero and esp32 marauder projects. I should fire that project up and implement this font…
Re:I'm Coding by Hand on Saturday April 18, 2026 @11:33AM (#47816692)
I’m not a software engineer. Most of my work these days focuses on microcontroller exploitation. I have 15 years of professional experience as a security consultant/contractor.
Re:I'm Coding by Hand on Saturday April 18, 2026 @08:52AM (#47815525)
I mean this genuinely and in good faith in case you didn’t already know it: the term for “non-blank, non-comment…” in programming is usually “Significant Lines Of Code” or SLOC.
Re:I'm Coding by Hand on Saturday April 18, 2026 @08:45AM (#47815487)
I think the author’s intent is well-placed, but it does feel a bit sad that this subject is blog-worthy.

I’ve spent a lifetime teaching myself programming, computers, and engineering. I have no formal education in these disciplines and find that I excel due to the self-taught nature of my background.

I take a very metered approach to AI and use it for autocomplete while still scrutinizing every token (not the AI kind) as well as an augment to my self-pedagogy. It’s great to be able to “query” or get a summary from a set of technical documents on demand.

However, I don’t understand the desire to remove oneself from the process with AI. I simply don’t do anything that won’t teach me something new or improve my existing skills.

There’s more to engineering than simply programming. Both the engineer and the intended user base must also understand the system. The value lost is greater than the sum of all the parts when an LLM produces most or all of the code.

Re:Your Backpack Got Worse on Purpose on Wednesday April 15, 2026 @01:21PM (#47782190)
Terry Pratchett wrote an excellent metaphor for this concept: https://terrypratchett.com/explore-discworld/sam-vimes-boots...
Re:Filing the Corners Off MacBooks on Friday April 10, 2026 @09:03PM (#47726070)
> Don't be scared. Fuck around a bit.

Damn good advice.

Re:Steam on Linux Use Skyrocketed Above 5% in March on Thursday April 02, 2026 @11:44AM (#47616010)
They’re still in step 2 of their general game plan: embrace, extend, extinguish.
Re:Steam on Linux Use Skyrocketed Above 5% in March on Thursday April 02, 2026 @11:40AM (#47615956)
I’ve had a good experience running Arch Linux on my “gaming” PC in the living room. It helps that I’m very comfortable with Linux internals, but I’d say I have no issues or issues that can be fixed with 2-3 clicks about 95% of the time.

My setup is basically Arch Linux, ProtonUp-Qt (to easily install specific versions of Proton, the compatibility layer), Steam, and the proprietary Nvidia drivers/Vulkan. I generally have no issues with Easy Anti-Cheat games like Arc Raiders, but obviously anything that requires secure boot attestation like Arena Breakout Infinite won’t play. I’ve not bothered to try setting up full secure boot as the games that require it aren’t typically in my wheelhouse.

I hope Linux adoption continues for my own, very self-serving, interests. I get the sense that those who primarily use their computer for gaming are the frogs slowly being boiled by Microsoft who continues to back their these customers into uncomfortable, unnecessary corners.

Re:OpenTitan Shipping in Production on Thursday March 05, 2026 @07:05PM (#47268976)
Are there any generally available microcontrollers with this block inside?

“Open source” has a very different meaning when it comes to silicon.

Re:OpenTitan Shipping in Production on Thursday March 05, 2026 @07:04PM (#47268955)
This is the general premise behind Ken Thompson’s “Reflections on Trusting Trust” and I highly recommend you read it if this is something that interests you.
Re:Number Research Inc on Wednesday March 04, 2026 @01:07AM (#47243726)
Oddly, “7070” seems to always return a Database Error for me. Other numbers work fine.
Is there evidence that shows a trend in increased violent crime committed using 3D-printed weapons?

I’ve certainly seen projects and models demonstrating the ability to create firearms with the help of a 3D printer, but I’m not aware of anyone using one to commit a crime…

The wording and tone of the emails sent to Adguard reads just like phishing emails with a hint of political SMS spam. Glad to see the people behind there thinking critically and acting rationally despite such language.
Re:Incus-OS: Immutable Linux OS to run Incus as a hypervisor on Friday November 14, 2025 @12:49PM (#45929437)
I’ve been running an Incus cluster of 3 fairly beefy servers for about a year now. It’s my go-to recommendation for anyone wanting to setup a new virtualized environment.

One of my favorite features is how you can tag different cluster members for different architectures. In the same cluster, I can have traditional dual-socket x86 servers with a dozen DIMM slots as well as Raspberry Pis. The architecture tagging lets me strategize execution of ARM-based container workloads to be only on the Pis, or opt to run them via QEMU on the x86 platforms if that makes more sense in a particular scenario. Since I deal with a lot of embedded firmware, this offers a nice, flexible platform.

Stephen Graeber is also a long time contributor to the LXC project and his reasoning behind this fork and other changes are quite sound. I hope the project sees continued success. Stephen’s business model of offering consulting services for Incus systems also seems quite sound.

Re:Incus-OS: Immutable Linux OS to run Incus as a hypervisor on Friday November 14, 2025 @12:39PM (#45929299)
Yes, it can do both. The image server will build for both options if possible, so you have to specify “—vm” on the command line creating the domain.
Re:How First Wap tracks phones around the world on Wednesday October 15, 2025 @07:23PM (#45599552)
SS7 strikes again!
Re:Acrobat is intrusive, slow and non-customizable on Wednesday October 15, 2025 @07:19PM (#45599526)
In my experience, anyone running Wayland is very much used to some number of applications that depend on Xwayland. Does Zathura + MuPDF not work with it?

Either way, if you want to show off a project, just do so…

Re:Why Toyota Runs a Car-Hacking Event (2024) on Saturday October 04, 2025 @01:33PM (#45475064)
FYI - the inclusion of UWB (specifically the FiRa consortium secure ranging standard) was not part of the CCC Digital Key specification until v4.0.0, which only left its draft state very recently, at least in terms of automotive security standards.
Re:Why Toyota Runs a Car-Hacking Event (2024) on Saturday October 04, 2025 @01:30PM (#45475042)
Toyota moves more slowly than many other brands because of their company culture/philosophy.

To your point about BEVs, Toyota started producing BEV batteries at their plant in North Carolina this year: https://www.toyota.com/usa/operations/map/tbmnc

Re:Work Is Not School: Surviving Institutional Stupidity on Thursday October 02, 2025 @02:03PM (#45453178)
Wow, this is overall great advice.

I am much later in my career than the audience I assume this is intended for, but I have struggled to mentor junior colleagues on many of the major bullet points here so succinctly.

This should be recommended reading for new college grads entering a more traditional (I.e. non-startup) work environment. Definitely keeping a bookmark of this for that reason.

Re:Wikipedia as a Graph on Saturday August 30, 2025 @11:05AM (#45075283)
I was a little disappointed to discover there was only 1 degree of separation between “Benito Mussolini” and “Bread”.

For context: https://blog.jxmo.io/p/there-is-only-one-model

That’s unfortunate. I believed Anthropic was playing the long game and betting on a smaller but more technically proficient userbase.

I guess I’ll be canceling my subscription largely out of principal. I doubt any open-source models are capable of handling my use case as well as Claude (typically focused on getting up to speed with various ISO/IEEE standards for the purpose of security testing) but I’m sure I’ll find a solution.

I share this sentiment - I often get the sense that they struggle to prioritize their development efforts appropriately.

It baffles me that they don’t offer a way of creating my own JetBrains IDE from the pile of features available across their IDEs and other tools. I pay for the “all products pack” and have started to question whether it’s worth it. Even if I am working in an IDE like PyCharm, it’s not much work to also work with a pre-compiled language in the same project. The distinction between the different IDEs grows less so year over year.

Re:The Missing Protocol: Let Me Know on Tuesday August 12, 2025 @05:20PM (#44881934)
I’ve always used huginn[0] for these types of tasks, though the learning curve/implementation is a bit cumbersome for more trivial tasks like the proposed scenario.

[0] https://github.com/huginn/huginn

Re:.localhost Domains on Thursday April 10, 2025 @06:51PM (#43648734)
Check out Smallstep’s step-ca server [0]. It still requires some work, but it allows you to run your own CA and ACME server. I have nothing against just hosting records off of a subdomain and using LE as mentioned, but I personally find it satisfying to host everything myself.

[0] https://smallstep.com/docs/step-ca/

Older »