News for hackers. Stuff that matters.

preisschild

Re:Radiation Map of the World on Monday November 02, 2026 @04:49AM (#50334829)
Lots of german STEM content creators who made ads for Radiacode (Advanced Tinkering for example)
How long are the blocks on this point-based train control system? They were 25kms away from the other train when LZB went offline
Tbf in the recent years Gitlab has become quite enshittified (most new work is focused around selling LLM subscriptions) and the people working on more prominent public issues seem to have been laid off, so I dont have great confidence in its future.

Forgejo has fewer features, but those features work a lot better than the equivalent Gitlab features.

Re:If IPv4 Were Land on Friday October 30, 2026 @04:48AM (#50301304)
Tbf there are always bad implementations. Good "smart" devices nowadays should be based on the Matter standard, which natively uses IPv6 addressing

https://en.wikipedia.org/wiki/Matter_(standard)

Re:If IPv4 Were Land on Friday October 30, 2026 @04:45AM (#50301283)
much easier than `cafe.local` with mDNS :)
Re:If IPv4 Were Land on Friday October 30, 2026 @04:40AM (#50301250)
i find NAT64 acceptable
Re:If IPv4 Were Land on Friday October 30, 2026 @04:27AM (#50301160)
You can always just use IPv6 where there is plenty of address space available. You can even get a /44 as a hobbyist easily
I'm currently using the Radxa Q8B, which already includes EDK2 OOTB and provides the device tree to the linux kernel. But its still a new board and some things are not supported in mainline linux yet.

There are also less-powerful RK3588-based boards like the Radxa Rock5 series which are supported by this edk2 port: https://github.com/edk2-porting/edk2-rk3588#platinum. Thanks to collabora the mainline support is quite advanced: https://gitlab.collabora.com/hardware-enablement/rockchip-35...

If you are searching for more powerful enterprise hardware, AmpereOne SoCs have ARM SR certification. You can just use any modern linux distro uefi generic aarch64 iso and it will boot.

There is also HTTPS boot, which might be a lot more secure than PXE

https://tianocore-docs.github.io/EDKIIHttpsBootGettingStarte...

some arm64 sbcs support edk2/uefi btw. I make sure I just use those. Look for "Arm SystemReady" certification, which requires this
they also provide device trees to the kernel on modern arm uefi environments. And in servers they provide an interface for the baseboard management controller to interact with the firmware directly.
Before you manually configure a rule in your WAF you might as well just fix the vulnerability in the vulnerable component directly ^^

especially in free/open source software like edk2

Its Georgism, after Henry George
Re:Twelve years of distributed SQLite on Saturday October 24, 2026 @12:10PM (#50222655)
I'd love to see a distributed sqlite solution using something like OmniPaxos[1] being used for consensus instead of raft

[1]: https://github.com/haraldng/omnipaxos

Its not like govt agencies care about security either. Its just "compliance" bs. Most european eID stuff works like that.
Re:GitLab CVSS 10.0 Integer Overflow issue on Thursday October 22, 2026 @12:26AM (#50191169)
I have renovate set to automerge gitlab patch releases
Re:GitLab CVSS 10.0 Integer Overflow issue on Thursday October 22, 2026 @12:14AM (#50191103)
Dont even need "AI" for that. Just renovate.
You are just exposing the application to the internet with extra steps in between

If the application is properly secured (strong encryption, strong authentication) there is no point for the VPN

and if the application isn't configured correctly, the vpn/internal network might not be configured correctly either.

So you can control them over a network that you are almost always connected to, even if you are at home or mobile
> at least IP whitelisting

home or mobile users often have dynamic IPs and thus can't be "whitelisted". Why would you not want someone on their phone access the controls?

And VPNs are just external authentication & encryption mechanisms, you might as well implement those properly inside the application and forego VPN entirely.

If you connect them to the internet you can control them remotely, there is nothing wrong with doing that.
Internet-connected fridges are fine. Sometimes you want to control your fridges remotely and the internet is perfect for that.

But use strong cryptography (tls1.3) and authentication (oidc)

Electricity is only a small part of farming but fossil fueled engines are used a lot
Re:Something is falling apart at GNOME, and it's not subtle on Friday October 16, 2026 @03:19AM (#50115199)
I enjoyed his linux sucks talks before 2020, but around the time of covid his brain become cooked.

He fully embraced culture war politics the last few years and is trying to infect everything in the free software space with it and personally attacks free software volunteer maintainers.

Just having a LGBTQ+-flag on a homepage during the day of visibility, or the project leaving Twitter after Musk took over is enough for him to declare war on your project: https://github.com/BryanLunduke/SoftwarePoliticsTracker

Heck, he even labels display protocols (Wayland) as "woke"

Populism. Data centers are unpopular even though rulings like this should also apply to more areas like farming, which is a lot worse for the environment.
Re:Something is falling apart at GNOME, and it's not subtle on Thursday October 15, 2026 @07:26AM (#50102154)
> One of the reasons given at the time was that Framework was connecting people to individuals with "Hitler particles." I wish I was making that up.

This is just factually correct

Also this blog post only references Lunduke, who is a grifter and liar

Re:Passkeys Are Not a Trap on Thursday October 15, 2026 @04:00AM (#50100684)
> syncing and backup are critical requirements to non-technical users

hardware-bound webauthn tokens are also important since they are more secure

Re:Passkeys Are Not a Trap on Thursday October 15, 2026 @03:52AM (#50100614)
They could have just implemented their own worse, non-standardized solution to be anti-user. Good actors can use cool tech for good purposes, bad actors can use cool tech for bad purposes.
Re:NetBSD may have found a new role: The AI-free FOSS OS on Wednesday October 14, 2026 @06:52AM (#50085557)
As long as Linux doesnt fully commit to vibe coding i dont see a reason to switch, but if it ever does its essentially proprietary software that only AI companies with their frontier models can modify, so i hope they dont

Older »