News for hackers. Stuff that matters.

rithdmc

Probably more difficult than hijacking the display with the pi. But that's just a vibe.
I doubt you'll find many HN users who don't know what a H1B visa is. That's regardless of my opinion that comparing H1B holders to slaves or indentured servants is a bad analogy.
Why do we need an abysmal analogy when "H1B holder" describes it well enough?
> making decent wages ... slave labor
Re:How I Reverse Engineered a Board Game on Friday October 23, 2026 @06:27AM (#50206809)
"other than" is doing a lot of lifting.

I once reverse engineered an Android app to figure out how the API works. The website had a legitimate API, free to sign up for, and well documented.

I still reverse engineered the Android app, even if the information was more readily available elsewhere.

Re:How I Reverse Engineered a Board Game on Friday October 23, 2026 @06:17AM (#50206744)
This looks relatively simple to play, and pretty interesting. Good reviews on Board Game Geek. I'll have to add this to my shopping list.
Re:How I Reverse Engineered a Board Game on Friday October 23, 2026 @06:16AM (#50206732)
> How is this reverse engineered?

You mean other than decompiling the app and reading the code to figure out how it works?

Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @10:03AM (#50103852)
Many thanks!
Re:Wanted to download an ISO, ended up writing a kernel exploit on Thursday October 15, 2026 @09:44AM (#50103632)
What throughput do you get on those? I worry latency, speed, and whatnot will be impacted without dedicated silicon.
Re:Ledger Nano X: the spy implant on Wednesday October 14, 2026 @04:56AM (#50084494)
> Now basically: every single attack that's been described as "theoretical" or "far-fetched" or "only existing in the mind of a paranoid person" did actually happen.

I think it's good to remember this is always the case. Attacks on tamper evident seals are commonly called "theoretical" or "lacking value" in practical terms, but recent customs evasion using counterfeit seals in the US shows that to be untrue.

Heck, The Wire had an arc about people bypassing customs tamper-seal tags.

> It's not shady – just a way of limiting liability.

And storage costs.

Re:I guess I'm using WebP now? on Monday October 12, 2026 @06:37AM (#50054342)
Other than their tool of choice not supporting it..?

> I’m wondering if/when newer standards like ... AVIF will be supported by Pixelmator Pro.

Re:Yandex Takes a Second Data Center Hit in 48 Hours on Friday October 09, 2026 @11:20AM (#50021786)
Cyberbunker was shut down too soon.
Re:Yandex Takes a Second Data Center Hit in 48 Hours on Friday October 09, 2026 @11:18AM (#50021762)
I'm waiting for someone to try the self defense angle :)
Re:Nobel Peace Prize for 2026 to Navanethem "NAVI" Pillay on Friday October 09, 2026 @07:26AM (#50018965)
Yes, that report. There's no nuance to the OC argument - just denial of facts.

The reactionary propaganda of it being "one sided" or not including "Russia in Ukraine" in a report about genocide in Gaza has been common since the report came out.

Re:Nobel Peace Prize for 2026 to Navanethem "NAVI" Pillay on Friday October 09, 2026 @07:19AM (#50018917)
It's linked in another comment - https://news.ycombinator.com/item?id=50018795
Re:Why Were Victorian Elites So Effective? on Thursday October 08, 2026 @07:21AM (#50004480)
Irelands wasn't until the early 2000's.
Certificate Transparency logs are from late September, and public reporting is from October 6. I wonder how wide or narrow that window truly was?

Edit: Someone more curious than I am might be able to answer this by seeing when the CRLSet was published. https://github.com/agl/crlset-tools

That'll do it. Thank you.
Does Snowflake allow you to push messages via in-app messaging? I didn't think it did. This breach might be a little broader than reported.
Re:Tell HN: Uceprotect is extorting website owners on Monday October 05, 2026 @01:29PM (#49967806)
Meteor Ireland also shut down about a decade ago.
Re:Tell HN: Uceprotect is extorting website owners on Monday October 05, 2026 @10:14AM (#49965175)
Which Orange are you blocked on?

I personally found Meteor in Ireland (previously owned by Orange) to be far more liberal with blocks on an unregistered mobile internet connection than other providers.

Also, Orange UK have a much stricter block list to enforce than, for example, Orange FR.

Re:Web Search API on Monday October 05, 2026 @07:36AM (#49963534)
It would be difficult for them to provide intelligence to the US without being in the middle of everything.
Re:Denmark Data Breach Exposes 8.8M People's Personal Data on Monday October 05, 2026 @06:22AM (#49962988)
I don't think my at-the-time employer cared much, either :)
Re:Denmark Data Breach Exposes 8.8M People's Personal Data on Monday October 05, 2026 @06:11AM (#49962892)
I'm sure they're done electronically in some places: Your passport details are appended to the shared Google Spreadsheet...

I'm only half joking: I used to work in payments, hotels didn't care about PCI. Full card numbers stored everywhere.

I was only thinking about detection evasion. The indicators listed would stick out like a sore thumb.
I think the items listed under "What astroturfing would look like" were a pretty narrow scope. If I were designing a ~spam system~ astroturfing solution, I'd engineer out these four simple indicators as soon as I could.

* Those accounts naming one brand almost every time they name any. * Thin accounts: few comments, low scores, no real standing in the subreddit. * Young accounts, or accounts with histories that are hidden or wiped. * Links to a store or an affiliate page.

Re:The Mafia may be keeping fentanyl out of Italy on Friday September 25, 2026 @08:00AM (#49843411)
I believe it's urine based.

Either way, the constipation would affect different users at different times, so I don't think it would matter to the data. In other words, your idea stinks ;)

Older »