News for hackers. Stuff that matters.

shim__

Thats true for all govenment regulation, thats also why I prefer not to give up my data at all Esther than relying on pricycy laws.
Re:Google cloud outage takes down banks on Tuesday October 20, 2026 @08:54AM (#50165629)
Cloud is just an really expensive vps with an api, you still got to leverage that api to replicate your service
How would you verify the users real name ?
There was also an fun Android app which you could use to replace all YouTube videos with a different one
Re:What I Self-Host on Friday October 16, 2026 @09:51AM (#50118396)
Much simpler since you just need to backup a single file, if you're not running a public service with heavy traffic it's safe to assume that your db state is always consistent
Re:Rusty thoughts on "Parse, don't validate" on Sunday September 27, 2026 @02:59PM (#49869732)
DerefMut would allow you to call `clear()` on `v` violating the invariant

I'd be great is there were a way to shadow methods but even then guarantees would be poor since Vec might add a new method in the future which isn't covered by invariant checks

Arch is easier to start of with, NixOS is easier to maintain, especially at scale
There needs to be another repository with less stringent standards, nixpkgs should be for core libs and system applications
Lots of bad(internal) code isn't accessible, the good open source stuff is quite the contrary is true in finance, lots of amateurs are sharing their thoughts where as actual deep analysis is kept to internal presentations.
How does Geekbench even verify what CPU I'm using? Couldnt you inject forged data and add a even faster M100?
Re:Astra for Law on Friday September 18, 2026 @05:47AM (#49752069)
I reckon law and medicine are really premier use case for llms since those areas are all about having vast knowledge(knowing all about obsure cases in law or about an very rare disease the average doctor wouldn't have heard about)
Re:Astra for Law on Friday September 18, 2026 @05:44AM (#49752052)
> Meanwhile, any half-decent employment attorney would probably laugh at me if I asked them to redline an employment offer from the State Department.

That might not be due to the contents but rather due to the fact that they won't negotiate I'd presume

Re:Principles for Fast Tokio Applications on Tuesday September 15, 2026 @04:22AM (#49709389)
Reaching source control is fine as long as there is a compile time flag to disable the whole thing, which tokio-tracing does
No need to enable the google backup
Google is a bad as a phone number since it also has strong ties to your real identity
> If I remember correctly all they stored was an account ID and a UNIX timestamp such as the last login.

How do they perform address book matching without an phone number? It just being accessible by SGX does not really count as not storing it.

Problem with phone numbers is they are to short to store as a hash, since you can brute force the sha256 of an phone number in a trivial amount of time on a single consumer device

Re:Your AGENTS.md file doesn't do anything on Friday August 28, 2026 @08:30AM (#49477577)
It does, it makes it obvious that I'm looking at a vibe slopped project
Re:Phones should have a 'guest lock' feature on Friday August 14, 2026 @11:39AM (#49300259)
The wrench attack is already illegal under the law
Re:Phones should have a 'guest lock' feature on Friday August 14, 2026 @04:54AM (#49296197)
Technical protection >> Law, the law is too easliy broken
Why wasnt that key in an HSM?
How is that any different from an TPM backed passkey?
Re:Stinkpot: SQLite-Backed Shell History on Sunday July 26, 2026 @11:07AM (#49058905)
Of course but my question was more in the direction of if the data is suitable to be transferred to another host without becoming useless. The native cloud integration could be attaching an origin field to each history field whereas the db itself might only be intended for local only use.
Re:Stinkpot: SQLite-Backed Shell History on Sunday July 26, 2026 @04:38AM (#49055990)
Does it support just synching the db via nextcloud or similar? I'd prefer to stick to the Unix philosophy of one tool for one job instead of native cloud integration
Yes 32 bit is enough because in PAKE its used for authenticstion not encryption. Which means you get exactly one attempt to brute force after which the procedere will fail
The transfer is end2end encrypted using a PAKE key change which is aithenticated using the 3 words you enter in the reveiving end
Re:Decoding the obfuscated bash script on a Uniqlo t-shirt on Wednesday July 08, 2026 @07:42AM (#48830647)
Could have saved 50% with 'base64 -d | gzip -d'
The virtual PayPal Card works on GrapheOS
Re:Hardware Touch, Stronger SSH on Friday December 26, 2025 @09:52AM (#46392532)
That's the neat part, it doesn't
Re:Upcoming Changes to Let's Encrypt Certificates on Monday December 15, 2025 @04:37PM (#46281069)
Could have just kept using OSCP stapling
Re:Migrating the main Zig repository from GitHub to Codeberg on Thursday November 27, 2025 @02:43AM (#46066773)
Gitlab CI is leagues better

Older »