News for hackers. Stuff that matters.

qwm

Re:PHP 5.6.12 Still Vulnerable? on Wednesday October 21, 2026 @01:57PM (#50185008)
I wish more people were talking about this and we had some insight into it. I'm not going to be putting anything back online until this is at least acknowledged.
Re:PHP 8.2.35 on Wednesday October 21, 2026 @12:08PM (#50183322)
Shut the sites down until you are able to update to the latest PHP patch for your version.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @10:40AM (#50181844)
30 minutes later and still waiting
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @06:59AM (#50178854)
These issues tend to happen way more in languages that depend on a runtime, especially one with dynamic lookup capabilities. If I remember correctly, log4shell depended on dynamic class loading and a lot of runtime-dependent stuff. Languages that are statically-compiled and memory-safe (namely Go and Rust) don't have the runtime vector and don't generally have the memory safety vectors either. I feel a lot safer deploying services written in Go than JS, for example.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @06:56AM (#50178834)
Anxious and slowly rewriting said services in other languages as time allows lol
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @04:25AM (#50177607)
I wish
Re:Go 1.27 on Thursday August 20, 2026 @01:23PM (#49377544)
I know this is supposed to be a negative comment, but I don't think this is a bad thing
Re:Go 1.27 on Thursday August 20, 2026 @01:22PM (#49377519)
Some languages do it better, but it's really not a problem. It's just verbose, but people say that about Java and that never stopped it from being used everywhere
Re:Go 1.27 on Thursday August 20, 2026 @01:20PM (#49377504)
You can't terminate goroutines like individual threads, but there's no good reason to anyway. They designed the context system to be able to signal across goroutines and do cleanup that way
Re:Go 1.27 on Thursday August 20, 2026 @01:19PM (#49377492)
In the network and web backend world, we haven't moved on, and for good reason
Re:Go 1.27 on Thursday August 20, 2026 @01:18PM (#49377471)
Can't relate, I love Go
Re:Go 1.27 on Thursday August 20, 2026 @01:17PM (#49377447)
I'm a big fan of `go fix`, such a nice thing for big projects
Re:Go 1.27 on Thursday August 20, 2026 @01:15PM (#49377421)
Same. Go feels like the language that does everything I like about Java with a lot more control than Java gives
Re:Go 1.27 on Thursday August 20, 2026 @01:14PM (#49377405)
I think you're gonna like it a lot more now. The language has gained a lot of nice things since they added generics
Re:Go 1.27 on Thursday August 20, 2026 @01:13PM (#49377394)
This was one of the times where it made some sense. A lot of their complaints were about GC, which Discord has had issues with in the past on other things. Notably, Discord switched from Cassandra to ScyllaDB for their messages, and cited the Java GC as a big reason.
Re:Go 1.27 on Thursday August 20, 2026 @01:11PM (#49377368)
I think it only really happens when companies run into GC problems
Re:Go 1.27 on Thursday August 20, 2026 @01:09PM (#49377344)
If I'm being honest, I actually hate this feature. I like things being obvious, and structs were always something I could rely on being very explicit.
Re:Go 1.27 on Thursday August 20, 2026 @01:08PM (#49377325)
this is hilarious
Re:Go 1.27 on Thursday August 20, 2026 @01:06PM (#49377310)
Funny enough, in one of my projects I created a struct with a string field just to have a distinct type that couldn't accidentally be initialized by typing a string. This update completely messes that up lol
Re:Go 1.27 on Thursday August 20, 2026 @01:05PM (#49377298)
I don't think it ever suggests anything specific to 3rd-party packages
Re:Don't Take the Black Pill [video] on Tuesday July 28, 2026 @10:04PM (#49092616)
I found that music video last year, and it blew my mind. So good
Re:Don't Take the Black Pill [video] on Tuesday July 28, 2026 @10:00PM (#49092584)
Funny enough, I find myself closer to the conservative Christian upbringing I received as a child than ever before, but I totally agree with him on needing to unlearn some things when it comes to dating. Different world in the past I guess, conservative Christian or not.

Taken as a whole, the intro to his talk was pretty cohesive in my opinion, albeit controversial. It made sense when taken together, even though some people will take issue with the subject matter. The point wasn't the little details about his own experience, that was just to get you invested in the story about the degeneration of certain types of communities when people who "graduate" from them leave, and the people who never moved on remain.

Re:Codeberg Bans Cryptocurrency Projects on Thursday July 23, 2026 @02:38PM (#49026191)
I guess I kind of agree with this, but Monero-related stuff is the exception for me.
Re:Codeberg Bans Cryptocurrency Projects on Thursday July 23, 2026 @02:36PM (#49026162)
Not the biggest fan of crypto myself, but allowing LLMs and "AI" stuff with open arms while condemning PoW crypto is hilarious. They should just say they don't like crypto at that point, because LLMs and datacenters for them are causing way more harm. Even if their qualms are fraud and abuse, I have some bad news for them about what people are using LLMs for lol
Re:Changing How We Develop Ladybird on Friday June 05, 2026 @02:44PM (#48416562)
> This isn't the death of open source. It's the death of the global village were everybody can freely roam and it's easy to interact. It's the resurrection of small, social, trusted communities. I hope this spreads to all of the internet.

This is definitely a microcosm of what's happening to the entire Internet.

Re:Bun support is now limited and deprecated on Saturday May 23, 2026 @02:30AM (#48245257)
Being conservative with technology choices and only using Node LTS has paid dividends lol
You can drop the library into your project as a single file and it'll still work without NPM. You can just copy it straight from GitHub, even.
Re:Sam Altman's response to Molotov cocktail incident on Sunday April 12, 2026 @10:08PM (#47746731)
The guy who threw the molotov should have called his Congressman, signed a petition, and paid his taxes.
Re:Ladybird Browser adopts Rust on Tuesday February 24, 2026 @01:59PM (#47141108)
I did this exact same thing for porting a compiler from one language to another with Codex. I run tests at every step, and verified that bytecode output was byte-for-byte identical. I was very impressed at the results, and this is coming from someone who's always pointing out issues with AI programming.

Older »