News for hackers. Stuff that matters.

offmycloud

Re:Backups Aren't Simple on Wednesday September 16, 2026 @07:55PM (#49734685)
> I don't want backups. I want synced duplicated data in geographically separated by shared credentials.

If you accidentally delete something, how long does it take for the delete to propagate to all of your geographically separated datacenters? You need some sort of point-in-time snapshots to be able to recover from accidents and silent corruption.

Re:A call for collective action on cyber defense on Thursday August 27, 2026 @02:41PM (#49469338)
> "Make AI-powered defense accessible and deployable for critical-infrastructure operators"

This is nothing more than a marketing campaign.

Trampling on citizens rights is a luxury of the rich, but in this case it's an echo-chamber government ran by technocrats.
The GET request method is supposed to be safe.

"Request methods are considered 'safe' if their defined semantics are essentially read-only; i.e., the client does not request, and does not expect, any state change on the origin server as a result of applying a safe method to a target resource." -RFC 9110 section 9.2.1

https://www.rfc-editor.org/rfc/rfc9110.html#name-safe-method...

Re:Discord Incident on Friday May 08, 2026 @05:09PM (#48068802)
I'm getting Access Denied - You don't have permission to access "http://www.cnbc.com/2026/05/08/aws-outage-data-center-fandue..." on this server. (with an Edgesuite error code)
I'm still surprised by the number of web developers who do not understand that, once you include someone else's Javascript on your site, they have full access to everything on your site, including all submitted customer data.
Re:California ISO Symposium Sponsorship Opportunities on Thursday April 16, 2026 @03:27PM (#47798290)
"We are also excited to make our 2026 sponsorship packages available in May for organizations interested in enhancing their visibility with event attendees."
California is not anywhere near 83% renewable for total electricity generation. [1] Are you just adding up nameplace capacities without capacity factors?

1. https://www.eia.gov/todayinenergy/detail.php?id=66704

Re:Dear Heroku: Uhh What's Going On? on Tuesday April 07, 2026 @01:28AM (#47671056)
I can't believe that it has been over 15 years ... https://news.ycombinator.com/item?id=1982489
Re:What's on HTTP? on Thursday March 19, 2026 @02:24AM (#47435648)
Cox Communications used to do it in California to inject JS into sites. I remember seeing little Cox popup/toast messages in the corner of other sites.
Re:FFmpeg-over-IP – Connect to remote FFmpeg servers on Tuesday March 10, 2026 @03:34PM (#47327817)
How does this differ in performance from rffmpeg?

https://github.com/joshuaboniface/rffmpeg

Re:Your device identity is probably a liability on Friday February 27, 2026 @02:09PM (#47184301)
I've said it before, but Zero Trust is such a misnomer. It implies less trust in firewalls, VPNs, and other network controls, but much more trust in the ability of end-user devices to securely store and use private keys. Also, the server side has has to trust all incoming connections from the Internet enough to verify the certificates, and run a complicated TLS implementation, which can be a huge attack surface. We're sticking with WireGuard for all our internal users.
A big part of the job losses were driven by Amazon and the end of their UPS contract.
How did the word "suddenly" get into the title?
I'm using Firefox on a Linux workstation (without Tor) and I still got the CAPTCHA. The statement "blog.adafruit.com needs to review the security of your connection before proceeding" is misleading at best. Shame on Cloudflare, this kind of dishonesty makes me not want to trust your RCA marketing pieces.
Reddit used to be free for anyone to view without logging in, but now I get "Your request has been blocked due to a network policy." Sorry, but I'm not turning my ad blocker off.
Would it be possible to write an addon to use Perl's Finance::Quote [1] like GnuCash does? It supports scraping many financial websites, as well as paid AlphaVantage quotes.

1. https://finance-quote.sourceforge.net/

"Your request has been blocked due to a network policy"

Is Reddit going login-required now?

Re:A Friendly Tour of Process Memory on Linux on Monday November 03, 2025 @08:02PM (#45806417)
What browser blocked it?
How does this impact reproducible builds in Debian? Does Rust have a good bootstrap story now?
I think it's time for AWS to pull the curtain back a bit and release a JSON document that shows a list of all internal service dependencies for each AWS service.
Re:Debian switches to 64-bit time for everything on Tuesday July 29, 2025 @04:09AM (#44720504)
I believe the MRE Orange Drink powder is fortified with Vitamin C, so that should help a bit.
Re:June 2025 Security Bulletin on Tuesday June 03, 2025 @08:11PM (#44176088)
Is "micronode" a new GPU concept, or did they mean "microcode" in the bulletin?
Re:Precision Clock Mk IV on Sunday June 01, 2025 @02:47AM (#44149077)
If you have a special project need, you might be able to get one-way IRIG time signal on fiber with guard boxes at both ends. There's really no technical reason why you couldn't do analog GPS baseband over fiber, but you do need approved equipment at both ends for policy reasons. (certified for no backflow)
Re:Precision Clock Mk IV on Saturday May 31, 2025 @11:58PM (#44148562)
Yes, on newer networks, the 5G NR System Information Block 9 (SIB9) provides UTC time.
It looks like it might be the blur effect in a VM with no Firefox video acceleration. Also, email to [email protected] (from "contact" link) just bounced back to me.
> https://docs.tinfoil.sh/verification/attestation-architectur...

I tried taking a look at your documentation, but the site search is very slow and laggy in Firefox.

Older »