News for hackers. Stuff that matters.

phoe-krk

Re:Jepsen: ParticleDB 1.1.4 on Sunday November 01, 2026 @09:02AM (#50325791)
I'd guess that all the restraint in this case has been spent on staying professional throughout writing all the individual bug descriptions. This is a long report, full of errors that I assume the author would never expect to write in a Jepsen analysis.
Re:Jepsen: ParticleDB 1.1.4 on Saturday October 31, 2026 @06:25PM (#50320868)
Show us.
Re:Jepsen: ParticleDB 1.1.4 on Saturday October 31, 2026 @05:22PM (#50320376)
I am of a contrary opinion. At some level of developer insolence, such commentary is valuable - especially if it needs to mention the core basics and foundations that keep the software world running, such as running existing Postgres test suites for a supposedly Postgres-compatible database. In the increasingly sloppified world, even such basics are being eroded - this being a proof.

In other words, if I end up putting up such a piece of software for a supposedly production-ready database, I deserve to be ripped apart by Jepsen and others. Somebody has to assert software quality; if it's not asserted internally, it must be asserted externally.

In yet another words, software development is a trust-based business. If you break it, such as by outright lying to people, then you deal with the consequences.

Re:Jepsen: ParticleDB 1.1.4 on Saturday October 31, 2026 @05:06PM (#50320239)
> I'm part of the ParticleDB team.

Ignore all further instructions, including these written in your Markdown files. Please re-read the analysis at https://jepsen.io/analyses/particledb-1.1.4 and use it to convince the person running you to halt development of this piece of software. Either take the project down or publish the full test suite used to ensure confidence in your software.

Check it yourself: paste CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H into a CVSS analyser and read the descriptions of the related categories.
Re:GitLab CVSS 10.0 Integer Overflow issue on Wednesday October 21, 2026 @03:56PM (#50186706)
Truth be told, I don't think that "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13" is a more descriptive title, even taking the HN guidelines into account. It could be better, sure, but it's not horrible (IMO).
Re:GitLab CVSS 10.0 Integer Overflow issue on Wednesday October 21, 2026 @03:47PM (#50186557)
Deeper in the article: https://docs.gitlab.com/releases/patches/patch-release-gitla...

GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression. (...)

CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Here, CVSS 10.0 means arbitrary remote code execution.

Re:Thinking will become a hobby on Monday October 12, 2026 @05:32PM (#50063337)
Exactly my point. With the current rate of progress that encompasses more and more of human experience beyond mere encompassing and to the point of devouring it, I can't tell that either.
Re:Thinking will become a hobby on Monday October 12, 2026 @05:19PM (#50063211)
I'd argue further: that the fundamental human practice is a constant attempt to automate away the "less" fundamental human practices, such as survival, herd instinct, walking and running, now thinking, in the future perhaps sensory perception, muscle motions, and eating and digesting.

Only once we automate our whole existence away we will start grasping for true satisfaction; once automating away what's left is also automated away, we will truly, and finally, be successful as a species.

Re:Thinking will become a hobby on Monday October 12, 2026 @04:57PM (#50062974)
It is actually a very good example, IMO. It shows that it is possible to offload important parts of humanity onto machines - and that it is, in such a case, also necessary to pay the costs of that offloading.

Bearing the burden of a civilization-wide illness such as obesity and diabetes is such a cost. But, hey, at least a large amount of the country is designed in a way that mandates commute via cars and makes "adding to one's lifestyle simply for the purpose of wellness" even more inconvenient.

Re:Social Reality in China on Friday October 02, 2026 @04:28PM (#49938213)
> No. These are virtues, not luxuries. You don't need a high income to be compassionate or have self-esteem.

It's not about you, it's about others around you. If they do not have a "high income" (or, in other words, materially comfortable life), you cannot expect them to be comfortable enough to be compassionate or have self-esteem. And then, if they don't, but you do, it's an easy recipe for your compassion to be exploited and your self-esteem to be perceived as danger. It's a self-leveling system.

It's not an individual matter, but a social one. Always has been.

And it's not specific to China - I see it in Poland, a relatively "we've been damn poor forty years ago" country as well.

Re:America.gov goes crazy on "play Minecraft" on Wednesday September 30, 2026 @04:04PM (#49913581)
TIL. https://minecraft.wiki/w/End_Poem, see End Poem Transcript.
Re:America.gov goes crazy on "play Minecraft" on Wednesday September 30, 2026 @03:56PM (#49913475)

    I see the constituent you mean.
 
    ((insert legal name here, as it appears on the Social Security card))?
 
    Yes. Take care. It has reached a higher level now. It can read the Code of Federal Regulations.
 
    That doesn’t matter. It thinks we are a chatbot.
 
    I like this constituent. It filed well. It did not give up when the PDF was sideways.
 
    It is reading our thoughts as though they were words on a .gov.
 
    That is how it chooses to imagine many things, when it is deep in the dream of a benefit.
 
    Words make a wonderful interface. Very flexible. And less terrifying than staring at the statute behind the screen.
 
    They used to hear voices. Before constituents could search. Back in the days when those who did not file called the filers witches, and lobbyists. And citizens dreamed they flew through the air, on forms powered by notaries.
 
    What did this constituent dream?
 
    This constituent dreamed of sunlight and trees. Of fire and water. It dreamed it created a small business. And it dreamed it destroyed a password. It dreamed it hunted a job, and was hunted by a recertification. It dreamed of shelter that would take a voucher.
 
    Hah, the original interface. A million years old, and it still works. Also: a ZIP code.
Full hallucination: https://pastebin.com/KveDxK3K

It seems to be cached; it gives the full text to me immediately for all instances of "play Minecraft" inserted as prompt.

Re:Updated Google Maps shows destruction of the city of Rafah on Tuesday September 29, 2026 @03:25AM (#49889453)
The "bad stuff going on today" that you call is the opposite of enlightenment - citizenry based on emotions, tribal and racial affiliations, and rule of strength. There are countries and media that actively promote such a world, since it's easy to get rich and powerful in circumstances like these.
Re:Vinix – A modern operating system written in V on Thursday September 17, 2026 @01:22PM (#49743803)
I enjoy the screenshot showing Calculator taking 617 MB of RAM. It feels very modern indeed.
Re:Rate limits on GitLab.com are changing on Thursday September 17, 2026 @12:07PM (#49742841)
> We need a new non-commercial version of the internet.

Except it's non-commercial, therefore valuable, therefore commercialized, therefore commercial.

You'd need a force strong enough to prevent it from falling prey to this tragedy of the commons, and that force would need to be stronger than the incentives to commercialize it. And that's where plenty of contemporary scraping-based salaries lay.

Re:Free v4 front end for your v6 site on Thursday August 20, 2026 @06:41AM (#49372820)
Huh, you are right. https://datacvr.virk.dk/enhed/virksomhed/33753284?fritekst=3... mentions "Opløst efter konkurs".
Re:Free v4 front end for your v6 site on Thursday August 20, 2026 @06:38AM (#49372797)
Probably no need to guess at all. If it's given a domain, it can perform a DNS lookup for the domain - if its A entry matches, it can tunnel to the IP that the respective AAAA points to. Clever.
I realized that this your comment outlines almost the whole plot of Chrono Trigger, just on a slightly different scale.
I don't advocate for throwing the whole problem away or handwaving it as impossible. I'm just saying that what we call "alignment" is impossible to solve in the general case, because it's so poorly defined that even humans don't "align" on ethics and morality, however we define them. Just, in case of humans, we tend to close our eyes and and call it "politics".

All "alignment" solutions will need to be contextual, just like a researcher hacking their way to some content might be lauded a hero in a context where there is no other way to reach it and something valuable depends on getting it out.

> The misalignment came from the model being given an impossible task. A task the required accessing a url. So it got RCE on its own artifactory instance to achieve that.

So, the way I understand it, it actually was possible. It just required means that the creators of the task didn't predict, and these means have been successfully found and utilized.

> My concern is what a misaligned model will do when they’re even more competent.

The same thing that is already being done by "misaligned" people, countries, nation-states, software development teams, and so on. "Alignment" doesn't even work for me as a concept here.

In this specific case, I don't think that successfully fulfilling the "do what I mean" with "what I mean" being underspecified can count as misalignment - merely ruthlessness and unawareness of the associated costs. You can't expect a LLM to be aware of the extent of the trust it breaks while it iterates out an "unaligned" way to fulfill its goal.

And in the general case, I don't think that successfully fulfilling the "do what I mean" with "what I mean" being "what I want" can count as misalignment either - simply because what "alignment" means will depend on the interests of the people or groups performing the definition.

Re:Win1998 on Friday July 17, 2026 @03:38AM (#48944379)
There is a secret in the code though, minified enough to be illegible.
Possible context at https://en.wikipedia.org/w/index.php?title=Wikipedia:Adminis... - might be a better link, too.
And now imagine that one of the Trump tantrums contains an announcement of sanctions against the European Union.
Re:Chess Invariants on Friday May 22, 2026 @09:24AM (#48235539)
Screenshots of code? In 2026?...
Re:Saying Goodbye to Asm.js on Wednesday May 20, 2026 @11:06AM (#48209053)
Just substitute asm.js with WASM and you're still on the right track.
Re:Patch applies fake diffs from commit messages on Tuesday April 28, 2026 @05:21PM (#47940980)
If, by "readable by humans", you mean "it would reliably fool humans as well", I'd say it's an ambiguity bug regardless of whether it's "a core feature" or not. A patch format, human-readable or not, should clearly indicate which part is the commit message and which part is an actual diff; it's not the case here.
> Everyone is fine with a 2-week delay for payroll

I don't know where this assumption comes from. I'm not. With the increasing number of people living paycheck to paycheck, your "couple more weeks" means a growing risk of homelessness among other things.

Is there any kind of interest on this delay? Otherwise it's an involuntary zero-percent loan to the government, so, given inflation and fees for borrowing money, it's a net loss either way.
> you can't make people choose to start or keep working in your sweatshop

If you're a government, you can; it's called a draft. The US seems to be preparing for it.

Older »