News for hackers. Stuff that matters.

reddalo

They have a "Pricing" page, so it's a matter of time before it enshittifies. But it's still nice as of now.
Insomnia _has_ a problem, since it forces you to create a cloud account with them.

Bruno [1] is the current better alternative to Insomnia.

[1] https://www.usebruno.com/

+1 for Bruno, it's simple and great.

They offer a paid version though, so I'm always afraid it's going to enshittify in the future, just like Postman and then Insomnia did.

Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Friday October 30, 2026 @01:24PM (#50307174)
I wish I could watch a Ocean's Eleven-style movie about this heist.

But maybe it wouldn't be that exciting to see some guys sitting at a desk.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @02:58AM (#50300634)
It's one banana, what could it cost? $10?
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:19PM (#50297008)
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:11PM (#50296909)
Frozen? What are they going to do, fork the blockchain?
Re:Patrick Stewart has died on Thursday October 29, 2026 @06:05PM (#50296830)
I love Extras and I wish there were more episodes. It's a small gem of a series.
The fact that only some comments are loaded it's so infuriating. It's the main reason I stopped using Reddit altogether.
Re:CSS-Tricks has a new owner on Wednesday October 28, 2026 @04:33AM (#50270676)
Yes, agree. I migrated from DigitalOcean to Hetzner some time ago (also because they're European, and a bit cheaper), but then the AI craze started and now all their smaller virtual servers are always sold out...
Re:Oldest GUI application that still runs on Windows 11 on Tuesday October 27, 2026 @05:01AM (#50256310)
> Borland buttons

Wow, you unlocked a memory. In case somebody doesn't remember, or doesn't know, the style of Borland buttons, here's a screenshot: https://sourceforge.net/p/owlnext/wiki/Replacing_usage_of_BW...

Some more screenshots on this page: https://www.drbob42.com/delphi/findmapc.htm

(Look at all those misaligned icons/labels in the Tool Options screenshot!)

Re:CSS-Tricks has a new owner on Tuesday October 27, 2026 @04:59AM (#50256296)
They also ruin things they don't acquire, such as their own control panel. It used to be simple and clean, now it's a horrible mess, so horrible it looks like they don't even sell virtual machines anymore.
Re:CSS-Tricks has a new owner on Tuesday October 27, 2026 @04:40AM (#50256156)
Or you could just push Ctrl + or Cmd +

I think HN is peak design. Everything is condensed, there's no wasted space, it's like a good old website from a bygone era. It's just a bit annoying on mobile, but that's it.

Re:A Markdown File Should Just Open on Thursday October 22, 2026 @04:39AM (#50192808)
I miss when Notepad just opened plaintext files as they were.
Re:GitLab CVSS 10.0 Integer Overflow issue on Wednesday October 21, 2026 @07:07PM (#50188908)
> the single worst security news day ever

I'd say, the single worst security news day for now

Exactly. They're "official images" in the sense that they're officially approved by Docker, it doesn't mean they're made by the PHP foundation.

We need _real_ official Docker images of PHP.

Re:PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out on Wednesday October 21, 2026 @02:09PM (#50185142)
Those images are not even official. "Official" is just a misnomer in Docker.
Re:PHP 8.2.35 on Wednesday October 21, 2026 @01:04PM (#50184231)
Now they should be actually available and pullable! The only problem is that it took 3 hours with a huge security problem already exploited in the wild.
Re:PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out on Wednesday October 21, 2026 @10:35AM (#50181757)
Yes, it's embarrassing for Docker. Makes me wish I still had the classic LAMP stack.
Re:PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out on Wednesday October 21, 2026 @10:27AM (#50181612)
Add Sury's repo and update from there: https://packages.sury.org/php/README.txt
Re:PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out on Wednesday October 21, 2026 @10:26AM (#50181597)
curl -fsSL https://packages.sury.org/php/README.txt | bash

This adds Ondřej Surý's PPA to your system so you can upgrade the packages.

TicketTailor looks up to me?
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @05:58AM (#50178311)
Not only injected, but they may also steal all your database data by dumping it.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @05:29AM (#50178041)
Edit: my message was wrong, see below.

[original: The Release Candidate for the patched version is out!]

https://hub.docker.com/_/php/tags?name=8.5

Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @05:08AM (#50177918)
And 70% of the web. Nothing important.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @05:08AM (#50177915)
Yeah I agree. Safeguards only bother normal people; evil actors will circumvent them anyway.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @05:05AM (#50177892)
Wow, it's the first time that I see the Cloudflare-equivalent error page of Bunny.net.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @04:38AM (#50177702)
They'll probably release it earlier, that's what they said in the announcement in case the CVE got leaked sooner.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @03:52AM (#50177395)
...and make no mistakes!
Re:Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming on Tuesday October 20, 2026 @05:53PM (#50173207)
Official statement released by PHP: https://www.php.net/archive/2026.php#2026-10-20-1

Statement by CERT-EU: https://cert.europa.eu/publications/security-advisories/2026... :

>Where immediate patching is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix is available.

It seems serious. Well, good luck isolating all PHP applications from the public internet...

Older »