News for hackers. Stuff that matters.

rwmj

Re:Tips for more effective fuzz testing with AFL++ on Monday November 02, 2026 @08:50AM (#50336777)
This is quite timely. I just radically increased fuzzing of hivex (a Windows Registry parser) by switching to persistent mode. Execs/sec went from around 440 to 70,000, although the test cases aren't quite comparable. Documentation for persistent mode is quite terrible though.

https://github.com/libguestfs/hivex/commit/2254c62832c568804...

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:53PM (#50320107)
To be fair probably not as many will be single core and this requires multi-core. As for the thousands of other CVEs though ...
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:48PM (#50320044)
IoT devices will get fixes delivered on the 12th of never.
And how slow the speed of light is.
Re:Casio Watches of the 1980s on Saturday October 31, 2026 @01:52PM (#50318320)
If I'm digging up the garden or changing the tyres on my car, I'm going to want my G-Shock. Quartz, solar powered, radio synchronized, and basically indestructible. After WW3 it's going to be just cockroaches wearing G-Shocks.
False sharing is pretty well known isn't it? I learned about it at university. It's the whole reason why the Linux "dwarves" tools were written, so you can check struct field alignment / grouping against cache line size and make sure you don't accidentally have two adjacent fields used by different cores.
In any discussion of read, write & sync, I'd want to talk about write amplification (read/modify/write cycles), and also in Linux the sync_file_range syscall which is a useful way to sync part of a file.
Re:Malware uses LLMs to rank victims by how much they're worth on Saturday October 31, 2026 @01:22PM (#50318067)
I think this is one of those situations where you don't need to outrun the tiger, you just need to be better at security than 99% of people, which is definitely the case if you're partitioning your life into VMs.

I wonder if/when mainstream OSes will start doing this.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @04:54AM (#50301343)
Not practical for ordinary people. No regular person is holding their own wallet, and even the technically sophisticated who do get their keys stolen or lose them to faulty backups or technical snafus.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @06:06PM (#50296849)
1MDB heist was $4.5bn so this would indeed be bigger.
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @05:50PM (#50296611)
I thought the point of crypto was no takesies-backsies?
Re:The Tragedy of Losing Your Wikipedia Page on Thursday October 29, 2026 @09:57AM (#50289155)
"frequently span weeks" except when it doesn't. I tried adding an English article about a Chinese singer (who has her own Chinese WP page already), and it was speedy deleted seconds later.
Re:Hunger beats tenure: Advice for junior engineers on Wednesday October 28, 2026 @06:59AM (#50271605)
But why wouldn't you take advice from a company that loses billions and actively brags that no one understands how its main product works?!
Re:Why is Strategy so Difficult? on Tuesday October 27, 2026 @06:18PM (#50266647)
Molten sodium as a cooling liquid always struck me as a "courageous decision" (to quote Yes Minister). Is there really nothing else that can do the job?
Re:Why So Many Men Aren't Working on Monday October 26, 2026 @12:41PM (#50246773)
I wouldn't choose the word "emasculating", but certainly a demeaning environment of constant monitoring and micromanagement. I was talking to someone in the NHS recently, a professional doctor, who says the whole thing with endless micromanagement and paperwork is exhausting, and he wants out. It affects all employees, men and women.
Re:The result of the C++26 DIS ballot on Monday October 26, 2026 @11:20AM (#50245304)
I don't know about that. If you extend the scope to include Excel spreadsheet users, website designers, illustrators, writers and so on, version control is not common at all. Or they have something but it's a tragicomic parody of version control, such as what MS Word and Google docs provides.
Re:The result of the C++26 DIS ballot on Monday October 26, 2026 @05:34AM (#50241265)
Only on Hacker News. In the real world Java and C++ are absolutely everywhere and no one uses Rust.
Re:OBS Studio 33 on Saturday October 24, 2026 @03:44AM (#50219065)
Surely the main function of a capture program should be to capture video, no matter what, even if that means capturing too much / uninteresting sources some of the time?
It's not even clear that access to data is that important. It's important for LLMs, but somehow we manage to turn babies into intelligent adults without them reading more than a few hundred books - for some, no books at all. Whatever is the breakthrough after LLMs likely won't need lots of data.
As it should. If an LLM discovered them you should assume that another LLM, or another person running the same LLM, could find them. They are effectively public already.
Re:There is no official XScreenSaver GitHub repository on Tuesday October 20, 2026 @07:26AM (#50164631)
HSBC are known for their ... flexible application of the rules: https://www.bbc.co.uk/news/business-20673466

Older »