News for hackers. Stuff that matters.

pluto_modadic

Re:Jepsen: ParticleDB 1.1.4 on Saturday October 31, 2026 @01:44PM (#50318258)
Aphyr does great work, Jepsen always kicks it out of the park :)
citation needed. you have an alternative?
Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @03:26PM (#50279473)
no, it is not enabled by default.
Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @03:24PM (#50279447)
isn't the other part of this that you'd have to enable the SSH part per node? it's not like the tailscale control plane can uniformly turn that on.
Re:(Post-Quantum) Cryptographic Right Answers on Monday October 12, 2026 @03:32PM (#50061731)
Okay - so... they're saying... don't use p384? :3
my line for "self hosted" isn't "must be on my own hardware", but "must be on my own linux VPS"
Re:Unikernels were hard. key word: were on Monday October 12, 2026 @03:13PM (#50061393)
if you enforce user input to specific shapes... and only have certain system calls... I think a unikernel version of a hackernews style site really wouldn't have RCE... especially if you build in KSLR / memory tagging in the unikernel security model...
handing clients access to an LLM gets them beginner level code, easily. same with beginner level exploits. an RCE against google is not a "beginner level exploit". If you've seen AI generated code, I can tell you that AI generated security findings also have that "beginner" smell. an expert who knows what they're doing has to drive them to look at the right places, and use the experts preferred method.
the idea of a caricature is to exaggerate the features someone is most insecure about. That's what Spitting Image is.
Re:AI Driven Testing on Saturday August 15, 2026 @12:45AM (#49307714)
Some assembly required.
they could have gone with an oblivious transfer approach (where it's working on what looks like multiple problems at once, you don't know which)
Re:Text AI watermarks will always be trivial to remove on Thursday August 13, 2026 @12:58PM (#49288806)
1. score by the past paragraph (this is also how the verifier checks without needing a GPU, it takes the previous length of text)

2. same answer

3. no, it just needs the previous text, private key, and the matrix math (CPU is fine)

4. no, see above.

Re:Zed DeltaDB on Thursday August 06, 2026 @10:56AM (#49197608)
Seems like Zed needs to clean up shop and fix their IDE first.
Re:Trusted URLs via Cryptographic Signatures on Thursday July 30, 2026 @11:15AM (#49111227)
what was the hardest part about this project?
by rolling your own they don't mean write a VPN from scratch, but host a VPN on a VPS.
Re:Europe's fires are just the start on Thursday July 30, 2026 @11:08AM (#49111149)
well I have good news! normal people don't have to sacrifice, fossil fuel companies do. if the govt mandates something (like with the ozone layer, or with lead acid battery recycling), something that was once impossible becomes possible.
Re:Disrupting supply chain attacks on NPM and GitHub Actions on Wednesday July 29, 2026 @10:48AM (#49098273)
the bare minimum award, for the only language and only registry where this regularly happens.
Re:Donate to GrapheneOS on Tuesday July 28, 2026 @03:26PM (#49088714)
:) nice, topical
Re:Substack writers, you need a website on Tuesday July 28, 2026 @03:25PM (#49088700)
oh it's more than the org. IIRC, it's also the founder.
Re:Kimi-K3 Technical Report [pdf] on Monday July 27, 2026 @01:10PM (#49072628)
being able to replicate it in the open means that there's nothing special about frontier models.

Frontier models would have to do something extraordinary or unique, or unreplicatable, because clearly there is no moat, and US companies are sitting on huge nvidia valuations and get surprised when competitors beat them.

Re:Good Tools Are Invisible on Saturday July 11, 2026 @02:24PM (#48874379)
this reminds me of some programmers' blog where he talked about the line between when software does something helpful automatically for a user, vs the line of where it nags you to make decisions it could have made itself.
it's definitely a cool esoteric thing :) I bet some other features would make it gain traction.
codeberg's one job gets interfered with by freeloaders hammering expensive views (like git blame) inconsiderately.
Re:The Wholesale Plagiarism of Obscure Sorrows on Saturday June 20, 2026 @07:29PM (#48614057)
Disney and Nintendo's very litigious and successful lawyers have entered the chat
IIRC tailscale is directly P2P, sidestepping a large part of the infra costs...
so - sometimes systemd's build is reliable, sometimes it causes problems. Are these good additions and do they solve real problems, or are they just for cohesion of systemd itself or introduce problems?
Re:AI Is Slowing Down on Monday June 08, 2026 @02:27PM (#48449273)
I think he doesn't need to understand the technology to point out the books are cooked. a business can sink in either way: the technology flops or the finances flop. he's arguing the /finances/ would flop. he doesn't argue that the /technology/ would flop, only that they can't come up with the money to pay their debters.
I think the earlier commenter is right. If a parent fails to... well... "parent" that's on them. Locking down the internet to republican-approved sites only is not the answer.
Re:Ask HN: Is Claude Opus 4.8 broken? on Monday June 01, 2026 @09:48AM (#48356838)
it may be a harness bug, based on the github issues.

Older ยป