News for hackers. Stuff that matters.

sgjohnson

UK is a First Past the Post system. It doesn't matter what their national polling is, if it's going to result with exactly 0 seats in the parliament.
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @01:07PM (#50212206)
#4 is very interesting. Truly untethered (persistent) jailbreaks haven't been a thing for 10 years.
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @12:56PM (#50212016)
Oh boy, what a week. Must be great working in cybersec right now.
> use on a single home or portable console or computer.

Is this even legally enforceable? Technically I'd be in violation if I was playing the same copy of Skyrim on both my PC and my Steam Deck.

IANAL, but if it was ever tried, surely the clause would be struck down as invalid?

Re:Denmark Data Breach Exposes 8.8M People's Personal Data on Monday October 05, 2026 @12:35PM (#49967084)
A single suicide due to a massive data breach is, unfortunately, completely inconsequential. Especially if we consider what social media does to teenagers without needing any data breaches.
Re:Amazon seeks to offload $8B of Nvidia chips to investors on Friday October 02, 2026 @11:14AM (#49934424)
I'll take a pallet of Nvidia DGX H200s for $200 + shipping. Let me know when I can order them by weight on ebay.
Re:Intellectuals Are Fucking Idiots on Monday September 28, 2026 @07:11AM (#49876230)
> Or consider the fact that over 91% of hedge fund managers can’t beat the market, despite the fact that the entire purpose of hedge funds is to explicitly create better returns than the market.

This isn't strictly speaking true. While some hedge funds have the goal of beating the market, most of them have different investment philosophy. Not that long ago most of them were meant for what the name implies - hedging. The idea being that hedge funds optimized for consistency, not higher returns. Market up 20%? Your hedge fund might yield something like a 10% return. Market down 20%? Your hedge fund might be down only like 5%.

Re:Italian parliament votes for return to nuclear energy on Wednesday September 23, 2026 @07:17PM (#49823981)
> and the fact that you have radioactive material you need to securely and safely store for quite a bit (which no one has figured out yet)

It's perfectly figured out. Just entomb it in concrete and store it on site. All spent nuclear fuel to date combined would quite comfortably fit in an average Walmart parking lot. It's a complete non-issue. And if we'd get really desperate, the spent fuel could be re-enriched.

Re:Italian parliament votes for return to nuclear energy on Wednesday September 23, 2026 @06:59PM (#49823817)
"as low as reasonably possible" is a massive overkill.

US killing the linear no-threshold model is a good thing. LNT model assumes that absolutely no amount of radioactivity is safe, which is provably wrong.

It has nothing to do with safety if the model that required "as low as reasonably possible" is bullshit per se.

The maximum allowed annual radiation dose for US radiation workers is 50mSv/year. It's just 16x the global average background radiation. And that's the average. In reality it's more like 5x - 25x.

For cancer specifically we're seeing marginally increased risk at 100 mSv/year, but it doesn't really become worrying enough until we're at 300-500 mSv/year.

This is awesome. I take it your plans for the next weekend include actually cleanrooming the driver so you can skip running it in a linux container? =P
Re:A font that humans can read but AI cannot on Saturday July 11, 2026 @06:44AM (#48870750)
"humans can read"

lol. Barely.

Re:Unicode's Transliteration Rules Are Turing-Complete on Wednesday July 08, 2026 @10:23PM (#48840206)
reminded me of the PowerPoint Turing Machine

https://www.youtube.com/watch?v=uNjxe8ShM-8

Re:How to Survive 3 Years in North Korea as a Foreigner on Wednesday July 08, 2026 @08:59AM (#48831366)
>I was fascinated to learn while visiting they consider themselves ‘at war’

fun fact, Japan and Russia are technically in a state of war too. The World War II hasn't ended. They have never signed a treaty over the Kuril Islands, and they both claim them.

Re:Kernel Anti-Cheat Is an Overreach on Tuesday July 07, 2026 @02:30PM (#48821654)
Yes. I'm an avid Dota 2 player. I used to play the remastered CoD MWs too, and had a Counter-Strike phase as well.

Cheaters using external tools in Dota are rare. Smurfs are a much bigger problem than scripters/maphackers.

In my experience, MW and CS aren't that bad. I see a cheater only about once in 20 games.

I also play online chess. No kernel level anticheat is going to help you there.

Re:Kernel Anti-Cheat Is an Overreach on Tuesday July 07, 2026 @12:02AM (#48813549)
I’m actually surprised how a lot of commenters here are defending kernel-level anticheat.
Re:The Boeing 747 Begins Its Final Descent on Sunday June 28, 2026 @09:31PM (#48713743)
> the 747 is the only commercial jet that deserves to be called beautiful

Concorde?

Evidently, at some point money just stops being real. Also, it's not even $60b. It's a 100% stock deal.

The markets have quite literally given Elon a carte blanche. Can it last forever? I doubt it.

> Then I imagined the real-but-unknowable chance it was all set up by some kid just getting into computers, just seeing what’s possible

if this is the case, then I'd say that the best-case scenario happened. They had an expensive learning exercise. They won't forget these $2k.

>For me a number station needs sends a message to be a number station, not a key.

We don't know that it's a key that's being sent. For all we know, it could be just random data. Obviously it's most likely not random data, but ciphertext. Either way, we have no idea what the message is.

> GPS was always a dual use system

It wasn't. It was going to be a military-only system, until KAL007 presented the obvious life-saving civilian case.

But yes, the title of this article might as well read "Satellite system developed for military use is being used for a military purpose."

Re:Use your Nvidia GPU's VRAM as swap space on Linux on Tuesday June 02, 2026 @09:30PM (#48378658)
>Sequential throughput: ~1.3 GB/s

sounds VERY low, also, wouldn't random read/write speed be MUCH more relevant here?

Re:It's hard to justify buying a Framework 12 on Saturday May 30, 2026 @12:01AM (#48332425)
> Rosetta 2's retirement announcement was when I realized I won't buy another Mac, I'm not interested in a computer that is preoccupied with stopping me from running software.

This is the 3rd time this has happened in roughly 2 decades by the way.

ppc/ppc64 -> x86_64 x86_64 -> x64 only x64 -> arm64

I much prefer Apple just forcing the developers to update their apps. Perhaps it’s just me though.

Microsoft hasn’t particuarly cared about consumers pirating Windows for more than a decade. I’m pretty sure they make close to 0 money off Windows licensing to consumers.
> If this researcher actually had a vendetta, I'd expect them to just sell the remaining zero-days to the highest bidder.

selling to the highest bidder doesn’t generate headlines though.

> you need to communicate your bank account number

in Latvia we need to do this for domestic payments anyway. We use IBAN even for domestic payments..

> and likely your legal name.

not mandatory. If provided, the bank tells you whether the recipient name matches the account, but if not, you can proceed with the payment anyway.

> then explicitly authorize the receiver. Oh, and explicitly authorise the country

I've never had to do any of this, and I quire frequently send SEPA payments from Latvia.

> > A Frenchman using Wero will be able to transfer money to a Spanish friend on Bizum, with the same simplicity as a domestic payment.

SEPA Instant Payments also solves that.

Re:CopyFail was not disclosed to Gentoo developer on Thursday April 30, 2026 @09:04PM (#47970265)
Which just reinforces my point. The patch was available, therefore, where the exploit lies was also available.

Linux kernel is one of the most audited open-source projects ever. I guarantee you that someone did reverse the patch.

> but forgot to tell the distros

Probably an oversight, but irrelevant. The bug was in the linux kernel. It's insane to suggest that they should have notified everyone shipping the linux kernel.

Re:CopyFail was not disclosed to Gentoo developer on Thursday April 30, 2026 @02:24PM (#47966383)
Not true, if there’s any evidence of the exploit being used in the wild, it’s much more responsible to release immediately.

Considering that the patches have been available for a while, someone surely reversed what they were for and was actually exploiting this in the wild.

In the age of AI, I’d argue that “responsible disclosure” is dead. Arguably even in closed source projects. Just ask Claude to do a diff between the previous version and to see whether anything fixed in there could have had security implications.

We’re not there yet, but very soon the only way to responsibly disclose a vulnerability will be immediately.

Older »