News for hackers. Stuff that matters.

saidnooneever

Re:Ask HN: Does anyone enjoy work anymore? on Monday November 02, 2026 @04:44PM (#50344255)
i made my hobby my job early on and after few years honestly it wasnt enjoyable anymore. prompting makes it easy and laidback. its easy money and thats alright.

think about all the othet shit jobs you could have. i worked really dreadful stuff in factories before i made that hobby my job and i often reflect back on that time to realise it is not so bad even if i now just type a few lines and press 1 and 2.

no more 90 degrees ambient temperature nexto a steel oven

no more freezin -21 in some meat freezer 'de icing'

no more 5 years rotted catfood to clean up while colleague is vomiting nexto me in a bin...

things can be much worse dude.

its a state of mind. hone it

Re:Why Gives Men Money? on Monday November 02, 2026 @04:23PM (#50343970)
the world changes faster than perceptions change. say you invest heavily in getting 1 group represented more because the perception is they are under represented, at some point they will be represented enough but that perception takes time to settle in, at which point you might find them already over represented.

things are never in balance, but always being balanced. there is no point in which all will be equal, but potentially the sway of the pendulum can get less extreme, so there is 'better balance'.

(very generally put)

Re:Alerts if your stack had security exploits on Monday November 02, 2026 @04:10PM (#50343815)
are they actual vulnerabities with known exploits or vulnerabilities? (naming could be a bit more clear depending on which it is perhaps?)
Re:WTF Ubuntu? on Monday November 02, 2026 @03:20PM (#50343114)
maybe once it comes out you will need to pay them to get the patch xD

I suppose this kind of stuff is why you will find some places who roll Debian in prod but almost never find Ubuntu?

on laptops etc. its less impwct because (i think) most people are sensible enough not to have all kinds of listeners open all the time?/(right guys??? ...RIGHT GUYS???)

dont forget it can also be used as LPE if its a local host listener. and LLMs can bake u a nice exploit for it too.

Go Debian or perhaps consider freeBSD or OpenBSD if your workloads permit. they are more feasible, and sensible by the day, not just trying to poop on Linux, its simply much more targeted for now, and because it moves faster, and thus is bigger, it will have more holes.

a lot of ball dropping all around lately in lots of incidents and CVE. stay safe out there!

Re:Astra can read and write weights to improve Qwen on Monday November 02, 2026 @02:29PM (#50342314)
its a program optimising a program it has nothing to do with a human reprogramming their own brain
do they release more when u break them because im great at that and people always guess my age way younger?
Re:Sam Altman on Local AI on Monday November 02, 2026 @06:09AM (#50335346)
its not deeply bizzar. its just selfish. he wants all the moneys so he reasons in a way that makes that seem logical. there are names for such people. A lot of CEO types are like that. it takes a certain type of person to become a multi billionaire.
Re:Do you have a Plan B? on Monday November 02, 2026 @05:57AM (#50335276)
forklift driving. always been funn. bit of a pay hit but really dont care for that anymore. or maybe move to some remote place and just do handy work or english teachin to kids or somethin.

plan B definitely is no-computers. though ill keep my hobbies ofc :)

woke slop
its not neccesarily a bug it could be a feature. :D
if it only needs to work on his PC then its not tok bad. these utils are often full of crap because they need to work on everyones pc with wacky locales and filesystems and all sortsof crap this guy wont run into.

its always the case if ud implmenet everything just for your case you can skip most edge cases and software can be much more lean.

granted his claim is maybe a bit broadly worded regardin this point ofcourse.

Re:Windows 95 is still being used to sort eggs in Germany on Sunday November 01, 2026 @04:09PM (#50329924)
and here i was hoping to send my neighbours into turmoil by way of bad eggs :(. maybe once they upgrade finally!
Re:Can light be used to cyberattack? on Sunday November 01, 2026 @04:05PM (#50329879)
if there is a system that decodes light signals into something then likely the decoder could be popped. I've wondered this about radio signals, because airgapped and interesting netwotks listen to radio but generally do not have optical listeners...

if you look at cameras, what is being done with the signal.

people already thwart image recognition using weird patterns. in a way that is hacking using light..

thus any visual reasoning system is currently being attacked using light as that is what it perceives.

people rolling windows and saying high security environment in the same phrase are likely not aware what is a highly secured environment in the first place so it doesnt matter where those keys are -_-. I have never encountered these types of devices nor windows in a high secure environment. free software and BSD. Occasionally Linux but that is also mostly avoided or manually tampered with / built and hardnened to get around its rubbish security. sometimes there is an alternate deployment linux based (very hardened) in the event of a security issue on the other more secure platform in case that one does happen to spring a leak. (might be more needed now its easier to pick apart these systems).

some highly secure environments have connections comming from networks that sport windows. usually they will come in via something like a data diode so whatever comes in can physically not come out because its so risky to allow even such a network to connect to yours....

perceptions of what is highly secure can vary a lot depending on what a person has encountered. if you ever come across a place that is really secure u'll immediately know the difference.

ive never seen a highly secure corporate network and have seen close up what security is implemented in fortune100 etc. its a doozey. they just pay vendors with big retainers for IR etc. to be compliant and insured. that is not security. (and they spend millions on that which is funny as hell)

Re:Anthropic Cracking Down on Video Game Rewrites on Saturday October 31, 2026 @11:59AM (#50317355)
how would they know im reversing a game if i let it analyse a bunch of decompiled results? aslong as u'd cut out obvious identifiers like perhaps urls / connection info which u dont really need to reverse the game it will be very tedious.

id expect this effort to be either inefficient or yield lots of false positives??

Re:Official Claude Code extension compromise on Saturday October 31, 2026 @04:11AM (#50314121)
people have varying degrees of sensitivity and also different defaults when it comes to interpreting phrasing depending on their native language, cultural expressions, current emotional state and more.

its a bad thing to assume that everyone is the same here and have some default reactions.

these are people who in name of company are responding to customer concerns, unlike us who are simply commenting on stuff. its a different context to communicate from.

what do you think will be nhe result if they word things clumsily, people get angry, and then stop their subscriptions. Its not a handy thing to be doing. Big tech can be harsh, ive seen people sacked for less.

Re:Official Claude Code extension compromise on Saturday October 31, 2026 @04:07AM (#50314109)
hey, personally i dont mind either, perhaps its because different words are used to frame things differently in different languages. A lot of people here type english but aren't.

I just said this as some unsolicited advice since out of experience i know it makes. a big difference to choose the right phrasing when speaking to people from around the globe.

Re:Official Claude Code extension compromise on Friday October 30, 2026 @02:24PM (#50308120)
I'd suggest stop to use the word 'only' as it can be perceive wrongly here.

you can simply say Cursor users were affected. or exclusively.

just a tip from someone who worked tech support in cyber a long time. choice of words can really help change sentiments in these situations.

'only server xyz was affected' vs. 'server xyz was affected' or 'incident was isolated to server xyz' was often difference between shouting and crying customers or people understanding what was really meant.

Re:Sam Altman Thinks You're Wasting DRAM on Friday October 30, 2026 @02:20PM (#50308068)
he forgets humans also use RAM for other things than inference -_-, his logic is not wrong but hes mismanaged his context window :p

also, its a bit weird to say a supply chain fails if you simply order much more than they have.

in stock:100 'i want a million, the supply chain is failing and others need to stop buying so i can get a million'

Re:US Army practices digging temporary battlefield graves on Friday October 30, 2026 @01:56PM (#50307691)
accurate

people train all the time fot desert, jungle and arctic warfare, nuclear threats, all sorts of stuff. its 'to be prepared for anything', hoping it never has to be really applied.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @07:30AM (#50302535)
if its bannable by a centralized place please explain how it is decentral? i thought that was the kind of controls a decentral system was specifically designed against. is that understanding of mine flawed?
Re: on Friday October 30, 2026 @06:57AM (#50302258)
Clearly they don't do security audits of their own code and dependencies using their own product xD
Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @04:03AM (#50285797)
this is just for common designs..you can design much better than common designs if you free your mind from old OS dev thinking if you read all the manuals yourself.

AI wont help u there :-). they will tell u how to build what others already did, which obviously is not good enough

Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @04:01AM (#50285790)
properly implementing things like iommu, amd-vi, svm/hvms and such things more granularly can easily avoid this kind of crap. it costs a lot of processing and performance which is why people skip over it or dont do it.. or maybe they dont read CPU manuals anymore. idk..

its relatively easy to reset caches etc. between contexts. so them it becomes the game of what a context is.

Re:About the compromised eMudhra intermediate CAs on Thursday October 29, 2026 @03:51AM (#50285696)
that makes it a truly laughable advices. i imagine things like dhcpd etc. might still also break out to shell? i remember from shellshock that a lot of apps turned out to reach to shell which afaik will be term.

ofc it does matter what they do in there, but would users really need to figure all that out themselves and strace all the things to see whats going on down there? :')

truly poor response. happy i dont use apple.

such an expensive flytrap

Re:The case of the 9 bit AES key on Thursday October 29, 2026 @03:42AM (#50285632)
cat /dev/random | grep 4
Re:What is a good option for my app's data architecture? on Thursday October 29, 2026 @03:41AM (#50285625)
if it doesnt matter just pick any...
Re:Ask HN: Why Is Anthropic's Customer Support Bad? on Thursday October 29, 2026 @03:40AM (#50285621)
i would seriously consider changing your sentiment towards Anthropic..rather than being stolen from and then still giving it love.

customer support doesnt need to have empathy towards you. they just need to check if a big condition was met..it was not as per your own words. it was lack of understanding, which is how they happen to make their money..

pretty nice to see that despite suspecting it wasnt really successful, a rebuild and thorough process was followed. lack of evidence doesnt mean nothing happened. better safe than sorry. classy response, hats off!
Re:ADHD quiz no account or credit card required on Wednesday October 28, 2026 @08:07PM (#50282722)
it is. if you want to get a diagnosis go to a doctor.

Older »