News for hackers. Stuff that matters.

remram

Re:CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions on Thursday October 29, 2026 @09:43PM (#50298874)
I had no issue with regular distro update channels (those have mirrors all over) but couldn't get updates from PPAs (i.e. third-party). Feels backwards a bit.
Re:GitHub Is Down on Monday February 09, 2026 @11:22AM (#46946998)
Bit of a tangent, but what I'm looking for is a S3-compatible server with transparent storage, ie storing each file (object) as an individual file on disk.

Minio used to do that but changed many years ago. Production-grade systems don't do that, for good reason. The only tool I've found is Rclone but it's not really meant to be exposed as a service.

Anyone knows of an option?

Re:Steam Store is offline on Wednesday December 24, 2025 @08:08PM (#46381142)
Their regular maintenance window is Tuesdays, and there are often issues then.
When the device sync finally works reliably or bookmark tags work on mobile, I will concede that you've turned a corner. What I expect is more theming and AI bullshit, time will tell.
Re:Git 3.0 will use main as the default branch on Monday November 24, 2025 @08:30PM (#46041393)
I'm not trying to argue against it, I think "slave" branches make no sense anyway, but to GP's point BitKeeper didn't enslave anybody, just used the word.

If we believe we should remove allusions to negative things why are we ok with "kill", "orphan", "evict", "bash", "cut", "isolate" etc? What is special about that terrible concept that we should stop using the word even when not applied to people at all?

Re:Docker Systems Status: Full Service Disruption on Monday October 20, 2025 @09:05AM (#45643439)
Is there a way to configure alternate mirrors in containerd?
AFAIK, Web Wormhole is the only one of those tools that can be used both as a command-line tool and from a browser. It looks like the site is down at the moment though. https://github.com/saljam/webwormhole https://webwormhole.io/
Re:Hetzner Storage Boxes on Friday September 12, 2025 @02:45PM (#45225261)
GB or TB?
Re:Longhorn – A Kubernetes-Native Filesystem on Wednesday September 10, 2025 @11:48PM (#45207575)
Be aware of its security flaws -- https://github.com/longhorn/longhorn/issues/1983

Allowing anyone to delete all your data is not great. When I found this I gave up on Longhorn and installed Ceph.

Re:Show HN: Ultra-fast, embedded KV store in pure Rust on Friday August 22, 2025 @06:36PM (#44990748)
Do you see any single user/desktop application that needs the kind of speed boasted in the README? The one you are trading durability for?
Re:CRLite: Certificate Revocation Checking in Firefox on Tuesday August 19, 2025 @07:11PM (#44957110)
Is there some high-level overview of this "cascade of Ribbon filters" data structure? I understand bloom filters, but couldn't get any intuition for this one from FB's blog post.

edit: found an overview here that helps a bit: https://news.ycombinator.com/item?id=27800788 This seems good but will take more time to absorb: https://pangyoalto.com/en/ribbon-filter/

Re:Obsidian Bases on Monday August 18, 2025 @09:55PM (#44947457)
I've been using the 'DB Folder' and 'Dataview' plugins, I'll definitely look into this new option. Does it work with Dataview at all?
Re:The Future of Large Files in Git Is Git on Sunday August 17, 2025 @07:01PM (#44935700)
You're right, I had the wrong date for LFS on GitHub.
Re:A privacy VPN you can verify on Friday August 15, 2025 @08:58PM (#44919000)
What does the verifiable program do though? With a VPN, what I'm concerned about is my traffic not being sniffed and analyzed. This code seem to have something to do with keys but it's not clear how that helps...?
Re:The Future of Large Files in Git Is Git on Friday August 15, 2025 @08:53PM (#44918968)
letsencrypt launched 3 years before git-lfs
Why? They can't read my CV? Send me an email if you need clarifications. Don't waste my time trying to appeal to a bot.
Re:6 Weeks of Claude Code on Sunday August 03, 2025 @06:11AM (#44775495)
Unfortunately education everywhere is getting really hurt by access to AI, both from students who are enabled to not their homework, and by teacher review/feedback being replaced by chatbots.
Re:Self-Signed JWTs on Saturday August 02, 2025 @05:26AM (#44766009)
Yeah that's not happening. In fact most services with free tiers still ask for a credit card number, and if not still ask for a lot of information. It is a marketing scheme after all.
Re:What is gVisor? on Thursday July 31, 2025 @04:01PM (#44749504)
Who is "we"? What are "container plugins"?
You should probably only ignore an email if it only contains one of those patterns. There might be a long, informative comment that just happens to contain "me too" of "following" somewhere...

(if my reading is wrong and that's already how it works, apologies)

Re:Dumb Pipe on Monday July 28, 2025 @05:20AM (#44708898)
I didn't say this project is useless, I offered a different way to do it with the tools you already have installed. Calm down. Iroh *is* cool.
Re:Dumb Pipe on Sunday July 27, 2025 @02:51PM (#44703570)
You could describe this same project as "a smart pipe that punches through NATs & stays connected (...)" and it wouldn't be any more surprising or inaccurate than the current description. So maybe it is not that descriptive.
Re:Dumb Pipe on Sunday July 27, 2025 @01:12PM (#44702780)
You can do this with ssh (and socat or mkfifo):

  # receiver
  socat UNIX-RECV:/tmp/foobar - | my-command

  # sender
  my-command | ssh host socat - UNIX-SENDTO:/tmp/foobar
You can relay through any other SSH server if your target is behind a firewall or subject to NAT (for example the public service ssh-j.com). This is end-to-end encrypted (SSH inside SSH):

  # receiver
  ssh [email protected] -N -R ssh:22:localhost:22
  socat UNIX-RECV:/tmp/foobar - | my command

  # sender
  my-command | ssh -J [email protected] ssh socat - UNIX-SENDTO:/tmp/foobar
(originally posted on the thread for "beam": https://news.ycombinator.com/item?id=42593135)
Re:Asyncio: A library with too many sharp corners on Sunday July 27, 2025 @06:08AM (#44700168)
At this point, there are good solutions to most of the problems. It is just hard and awkward to avoid the standard library bits and the common tools (e.g. use uv instead of pip, requests instead of urllib, pytest instead of unittest, marimo instead of jupyter, trio instead of asyncio...).

Of course having a "batteries included" language where the batteries hurt you is not great.

Re:Show HN: Open IT Maintenance Planner on Saturday July 26, 2025 @04:28AM (#44692418)
I suspect that it doesn't work on mobile? Otherwise I just can't figure out how to work it.

You might want to include a screenshot of a real-looking plan to give people an idea.

A request doesn't come in with both an IPv4 and an IPv6. If the user connected over IPv6, the connection only has an IPv6 address. You can't get the IPv4 address, there is none.
Re:The Promised LAN on Friday July 25, 2025 @12:18PM (#44684908)
There's a name for LANs that are not restricted to a local area: "network". Every mention of "LAN" in this entire article can be replaced with "network" without loss of meaning or vibe. Call a cat a cat.
Re:IPv6 Based Canvas on Tuesday July 22, 2025 @11:26AM (#44648293)
You can prevent spoofing by using HTTP requests or similar, instead of ICMP echo. Similar to https://ipv4.games/ (but with a canvas and color selection)

Older »