News for hackers. Stuff that matters.

razemio

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @01:58AM (#50300342)
It is this time of the year again. I always write the same. HN is not regular people. For a high percentage, CEX wallets are the safer option. There are 1-10 topics of people who are not able to access their wallet anymore each day on r/bitcoin alone. There have been hardware wallets hacks on mass. On an exchange like kraken, coinbase, bitstamp or Binance there is a high chance you wont loose your money, even after a hack. You have apps that work out of the box to watch your investment. You can easily go back to fiat. Most of them now also support tax reporting.
Re:Code Is Clay Now on Thursday October 22, 2026 @10:37AM (#50196021)
No I wrote what the internal tool uses as the OIDC and backend. No need to rewrite Keycloak. I like it very much.

I also wrote about internal tools. Not public facing applications. That would be a bit much for my taste.

Re:Code Is Clay Now on Thursday October 22, 2026 @02:55AM (#50192075)
It might depend on your use case. Life threatening bugs in a plane? Your argument holds up.

Letting an llm rewrite your internal todo tool, in another language, better design and up-to-date software stack. Yeah, this is absolutely not a fantasy anymore. We got rid of most SAAS tools in a month. Complete with Keycloak, behind wireguard, pocketbase backend, in our cooperate design with exactly the features we want. It works flawless since day one.

Re:Actively exploited sandbox RCE in all Chromium versions on Saturday September 05, 2026 @11:21AM (#49577416)
That is true, but it is very basic and depending on the browser how it is implemented. On traffic heavy sites, which I assume gates blog is, js gives you full control over what get loaded when and at the same time enables tracking how far the user read the article and which parts he most likely skipped. I am not saying that this is good, however if you have these requirements js is a valid choice.
Re:Actively exploited sandbox RCE in all Chromium versions on Saturday September 05, 2026 @04:04AM (#49574238)
Wow... I understand your point but if you feel that strong about gates using js on his personal website, it is a bit harsh isn't it? Could have multiple reasons why it is needed. Especially for someone with such a huge follower base. Lazy loading, tracking, client based adjustments, using a framework, fun [:)]... I could go on with a 100 more points why js might be needed.
They did with some services. Not sure if there is a list. For one I am missing phone mirroring to my mac which they disabled because they do not want to give api access.
Just my 2 cents. Nuclear was dead in Germany without political influence. The reactors where so old, that upgrading them to modern standard would have been a waste of money compared to renewables. France only works because the state helps out. UKs new reactors are financial suicide.

Everything else you might have a point. The EU behaves as if it has influence over companies abroad. Then its strategy might work and do some good. Sadly this is not the case. Instead we are getting isolated and loosing the AI battle bad while bureaucracy and regulations forces inventors to leave.

Re:Htmx 4.0.0 has been released on Friday August 28, 2026 @03:41PM (#49483297)
Depends how you set it up. Like any other project I guess. Funny enough, if you are able to produce maintainable code with an llm you could aswell lead a team of humans. LLMs shift your focus on project management and architectural choices.

I let the llm write components which are independent to each other. This works great and keeps everything clean. The times that llm would only generate unmaintainable code are long gone with OPUS, Fable and sol 5.6

Re:OpenRouter is joining Stripe on Thursday August 20, 2026 @04:43AM (#49372007)
I think it is fitting because they provide „all“ models independent from the provider. Open in this sense means to me being open to switch the model, speed and provider at any time.
What would be the attack vector with indirect access to a webcam?
Exactly, I have the luxury to be able to use all top tier models without limitation. Fable and OPUS most definitely say that you are wrong and try to proove it most of the time with links to sources or math. I even had an argument with Fable where I was 100% sure it was wrong and tried to explain the issue. Turns out I was wrong. Fable did NOT give an inch. Always said, you are wrong, let me try to explain it like this. It even made a graphic when I did not get it. The times of LLMs only saying yes is over since 3-6 months. Where it still lags are decisions for infrastructure. It makes a plan. I say "Why not this?" and it responds with "that is much better" in 90% of the cases. However, I am not sure how to solve this. I also do not want an LLM to say: "I wont implement this."
Re:Mistral OCR 4.1 on Friday August 14, 2026 @01:42AM (#49295093)
Ah okay. Ofc handwriting is not copyrighted. Makes sense, that we do not have these issues.
Re:Mistral OCR 4.1 on Thursday August 13, 2026 @06:41PM (#49292695)
I made a benchmark for handwriting recognition for a project while keeping line breaks and errors (grammar, spelling). Sonnet absolutely dominates it since a good half a year. 5.6 did not change that for me. This should also translate to better ocr.
Re:Many people misunderstand the purpose of code review on Monday July 06, 2026 @12:43PM (#48807146)
You are right. Let me rephrase and my argument still stands: „To even believe there is a primary purpose…“
Re:Many people misunderstand the purpose of code review on Thursday July 02, 2026 @11:17AM (#48762941)
Thank you! I find it somewhat ignorant to say, most people do not understand the reason behind a peer review, while obviously being missinformed. To even believe that it only serves a single purpose somewhat tells me, that the author is missing experiences with other teams / people.
Re:Previewing GPT‑5.6 Sol: a next-generation model on Saturday June 27, 2026 @01:56PM (#48700285)
Not sure if you mean something else, but the model itself is not able to send anything.
Re:I love the work of the ArchWiki maintainers on Sunday February 15, 2026 @02:38AM (#47021783)
I think with arch wiki it is even more than that. Before I switched to arch back then, you would consult the arch wiki for an unrelated distro, because it was (is) that good. Even the aur repository helps you alot, by checking the raw scripts, how to compile stuff. I can't make a good example but it feeled like reading vi specific wiki that helped you with plugin development for emacs.
Re:Pocketbase – open-source realtime back end in 1 file on Friday November 28, 2025 @01:47AM (#46076169)
No, simple answer. Try it, link to the repo and I will tell you all the placed it failed. Vibe coding has its places. For something like pocketbase it most definitely is not ready yet.
Re:German government comes out against Chat Control on Wednesday October 08, 2025 @12:05AM (#45511946)
AfD has f'd up views on many things. I wouldn't even be surprised if they would vote for it, as soon as they are in a position of power. However in its current state, they would hurt themselfs with a chat control law. So yes, your a right. I would also not expect them to vote for it.
How would you name a system which can do everything a Level 5 system can, but with Level 2/3 supervision? A name, which a PR team would choose without the missleading stuff as you are saying.
That's something different. The problem with the level is, that it only focuses on the attention the human driver needs to give to the automation. In this sense my Kia EV6 is also Level 2/3, same as FSD. However FSD can do so much more than my Kia EV6. That's a fact. Still the same level. Where did Tesla say FSD is SAE Level 5 approved? They would be responsible everytime FSD is active during a crash. Tesla is full self driving with Level 2/3 supervision and in my opinion this is not missleading.

Also "All this demonstrates is the term “full self driving” is meaningless." prooves my point that it is not missleading.

Everytime this comes up, I am on the opposite site of this. It is clearly full self driving. It can stop at red lights, cross intersections, make turns, park, drive, change lanes, break and navigate on its own. There are various videos online where FSD managed to drive a route start to finish without a single human override. That's full self driving. It can also crash like humans "can" and that why it needs supervision. In this sense, we as humans are also "full self driving" with a much (?) lower risk of crashing.

Like also everytime let the downvotes rain. If you downvote, it would be nice, if you could tell me where I am wrong. It might change my view on things.

Re:Turning Claude Code into My Best Design Partner on Sunday August 24, 2025 @05:17AM (#45002713)
That is exactly my issue. I am more districted while being more productive. It feels just wrong, but works for now. In the long run, I need to find a solution for this. What works best for now, is to let multiple agents run on multiple repos of the same project solving different tasks. This way, I stay somewhat focused, since I constantly need to approve things. Just like a Projekt Manager with a big team... Indeed curious times.
Re:AnduinOS on Wednesday August 20, 2025 @01:44AM (#44958966)
Yes, this makes sense, since most distros use a "standard release" system. The intention behind it is to keep your OS stable and only apply security patches at some point. If you want to have a system with always the newest software, you need to use a "rolling release " system. I think Arch Linux is the most popular (arch user btw). This is much more fun, if you know what you are doing. Otherwise you will end up with a broken system pretty fast. Ofc you can fix it, but depending on experience and skill something like Ubuntu is the better choice.
Re:OpenMower – An Open Source Lawn Mower on Tuesday August 19, 2025 @10:08AM (#44951737)
I have a Mammotion Yuba and trust me, the grass looks awesome as a grid or in lines. It can even do logos. So far nicer looking grass and much faster then random.
A genuine Question. Is open hardware even possible at some point? The advances in quality and speed are nothing short but impressive. I started 3d printing stuff in my basement one year ago (Ender V3 Plus). With the quality and speed improvements, comes technology which gets more complex every year. Companies spend millions to archive this. Why would they share it? I remember building drones in my basement (still on my wall) with open source software on the flight controllers. Now I can get a drone from DJI for less money with more features, in a smaller from factor, longer flight time, pre build and under 249g. Ofc this comes at the cost of repairability, control and trust. However I can still buy the hardware I used years ago. If I wanted to, I can build a drone by myself. I guess the same will happen to 3d printers.
Re:Claude Sonnet 4 now supports 1M tokens of context on Wednesday August 13, 2025 @02:13AM (#44885133)
I think it is something else. If you think about it, humans often write about correcting errors done by others. Refactoring code, fixing bugs and write code more efficient. I guess it triggers other paths in the model, if we write that someone else did it. It is not about pleasing but our constant desire to improve things.
Re:The rise of AI as a threat to the S&P 500 [pdf] on Thursday July 17, 2025 @11:42AM (#44594572)
How would you ban AI? It is unstoppable now.
Re:Are We the Baddies? on Sunday July 06, 2025 @05:43AM (#44479226)
Can it, if the technology is there todo exactly that? Capitalism (for me) means doing the maximum allowed in a legal framework to maximize profit.
I do not think that Elon would not claim he is the inventor by now. The team theory makes this entirely unbelievable. Something like this can only be pulled of by 1-2 person's whith exceptional self-restraint.

Older »