News for hackers. Stuff that matters.

snailmailman

Fwiw korean doesnt have a ‘V’ sound/character at all, and the V/B switch is quite common on Korean words that come from English. For example, “video” in Korean gets written with ㅂ at the start, and sounds more like “bideo”. And the same character is used in the Korean/Hangul version of their written company name.
Re:NASA's Voyager 1 mysteriously lost touch with Earth on Saturday October 31, 2026 @01:59PM (#50318370)
At the same time, every component and line of code is known. Presumably they can simulate and test for all sorts of crazy exotic problems and error cases. It’s surprising that they’ve hit a new type of problem.
Re:Democrats' Secret Effort to Stack Alaska's Ballot on Wednesday October 28, 2026 @09:05PM (#50283165)
To clarify a bit for those unfamiliar with ranked-choice. The voters rank their choices for the candidates. The “decoy” candidate is almost certainly going to be eliminated before the actual republican candidate. They will be eliminated and those voters’ votes will move to their next choice. Anybody confused at the voting booth can just write both names as their first and second choice. And when the “decoy” candidate loses, those people’s votes transfer to their second choice and the problem solves itself. The decoy gets removed from the ballot but the votes don’t. They will just move to the voters’ next choice, presumably the other Dan Sullivan.
Its effectively impossible to get some streaming services to stream content >720p to a linux device. I know I tried several years ago to use Disney+ and could not find any way to get 1080p content, even on a windows machine. I think now they have an official windows store app, but still refuse to stream full HD or 4k content to a web browser.

More recently I've tried hbo max and it does the same thing. Could not get higher than 720p, even with chrome and whatever DRM options theoretically fix the problem.

Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @05:56PM (#50225765)
I'm seeing a few comments that say $500 isn't enough, and its not worth it for them to try to hack it. But if it costs fewer than $500 of tokens in an AI, then it seems like it is? I thought a lot of the claim people are making is that you dont actually need to hack anything you just ask an AI and it does it. The exploitable bug is public and documented. All the pieces are theoretically there, and there are repeated claims that AI is trivializing exploits and its super easy to hack things now.

If that were true, and someone can hack the server for less than $500 of tokens, its an easy profit.

Re:mitmproxy adds --emudhra option on Wednesday October 21, 2026 @08:39PM (#50189594)
FWIW i havent updated my ios, I'm on 26.6.2, and they all got revoked for me. The revocation shouldn't require an iOS update.
Re:Learning to live with Waymos on Wednesday October 21, 2026 @03:53PM (#50186663)
I think it varies by location. I think they can in SF and other cities where they’ve been around a while. They can’t do highways where I am, but they only started doing public Waymos here this year, so it’s quite recent.

And while I haven’t seen any self-driving Waymos on the highways, I have seen Waymo scanning vehicles with spinning lidar things and a human driver on the highways.

Re:Learning to live with Waymos on Tuesday October 20, 2026 @10:44PM (#50175441)
It’s not clear the circumstances that they do record and monitor, but they definitely do monitor sometimes. They’ve reported crimes that happen in the Waymos, like this incident where they reported some teenagers that had an illegal firearm: https://news.ycombinator.com/item?id=49672549

That same story mentions another instance where some kids had alcohol and toy guns. So maybe there is AI that detects firearms? And then a human intervenes? Its not very clear.

Re:Fingerprints Are the New Cookies on Sunday October 11, 2026 @09:11PM (#50050053)
I have a similar issue. I see cloudflare checkboxes all the time. Google makes me fill out captchas all the time. Sometimes it decides I can’t search, sometimes cloudflare doesnt let me past the checkbox.

I’ve checked my network. I’ve monitored egress traffic. There is no residential proxy. I’m not on a VPN. If anything, services should be able to track me entirely by my home IP that doesn’t change that often.

My best guess is that I’ve committed the crime of not allowing third party cookies? Or maybe the crime of not being logged into a Google account 24/7. It’s not browser or device specific. My iPhone is just as likely to fail the cloudflare checkbox as my desktop with Firefox + uBlock.

Re:Bitwarden Dual License Model on Saturday October 10, 2026 @03:20PM (#50036200)
One benefit of the current self-hosted option via vaultwarden is that you get 2FA and the other premium features by default.

But it is worrying that they might intentionally break vaultwarden in the future.

Re:Cleo (Mathematician) on Wednesday October 07, 2026 @11:33PM (#50001621)
I think there are some interesting parallels between what the Cleo account did, and what the large AI companies are doing now with some of the proofs for previously unsolved theorems.

There may be some value in the answers, but for some the value is in the understanding of how to get from the problem to the solution.

I wouldn't call myself a mathematician, but I encountered a few problems in my CS classes where I could work through the proof by hand, see that an algorithm works, and even mathematically prove it, but yet still didn't feel like I understood why it worked, or how the algorithm was invented/derived. But for many, the fact that it did work was enough.

Re:Show HN: gtlds.fyi – All the proposed new gTLDs on Wednesday October 07, 2026 @06:25PM (#49999594)
Really? I’ve had my eye on a domain with a tld that a registry owns but does not make publicly available for purchase. It’s been that way since 2015. Amazon owns it. I guess if such a rule exists it’s a new rule, unfortunately.

Seems like this is the case for a few domains. .book, .author, and others got bought by Amazon who hasn’t really done anything with them?

Re:ESP32-C3 Adblock on Wednesday October 07, 2026 @12:30PM (#49995087)
I seldomly use AI. I, a human, wrote the comment.
Re:ESP32-C3 Adblock on Wednesday October 07, 2026 @12:39AM (#49988248)
The biggest benefit of my local dns server is latency. On wired internet, my dns is <1ms from my PC.

Upstream dns for me is pretty quick. Google and cloudflare dns are ~5ms from me. But WiFi latency alone is ~8ms most of the time in my experience. On my fiber internet, pinging a dns server in some random upstream server miles away is lower latency than WiFi 10 feet away. But the real issue on WiFi is any packet loss at all adding 50-100ms to that at random depending on interference.

With DNS you are paying this latency cost all the time on nearly every request.

Re:Video CDs Break Windows Explorer on Sunday September 27, 2026 @03:59PM (#49870244)
I ran into this bug myself recently when trying to digitize a family collection of old CDs. Lots of family photos and videos, that were backed up in a mix of file formats and disc formats. I used Linux for most of the process after figuring out that windows fully locks up and becomes unusable with video CDs.

I ended up simply skipping most of the video CDs because the format is simply awful. In my case most of them were slideshows of family photos, and in every case I was able the find the same photos in a better format on other CDs.

Additionally with a good third of the video CDs, they were essentially unreadable. I assume due to lack of error correction. The whole process I did was surprisingly lossy. I ended with a too-large stack of CDs that I got little to no data off of. Two disks were seemingly identical and I got different sets of corruption on each. A puzzle for me to reassemble some other time.

I assume its my IP's reputation, or that of my entire ISP/ASN. As far as i can tell I dont have a residential proxy, but I cant make those same guarantees about nearby IPs.

I do use firefox with third party cookies disabled + ublock origin, but thats on my desktop. I actually see the cloudflare popups more often on my latest-iOS iPhone in stock safari with whatever minimal tracking protection is built in. Not on a VPN, and not using iCloud public relay either. Its very frustrating.

Re:VSCode's SSH Agent Is Bananas (2025) on Wednesday September 23, 2026 @10:50PM (#49825629)
Oh wow I just checked my servers and on one the folder is 3.2GB and another has 1.7GB. It kind of looks like it just keeps copies of every version its ever installed? Theres several copies of node and `node_modules` folders.

I'm not super low on space but it also pretty clearly doesn't need to be that large, it looks like most of it is copies of itself.

I've been keeping an eye on my network traffic and as far as i can tell I'm not part of any residential proxy. I used to have an LG tv but not anymore.

My ISP occasionally gives me a new IP upon router reboot and sometimes it improves briefly and sometimes it gets much worse, I think maybe nearby IPs or my ISP in general must have lower than average reputation.

There were recently a few different simultaneous incidents with freezers at us military commissaries all entering defrost mode, resulting in spoiled food. I think it’s still unclear if it was a hack or a mistake.
How are AI's capable of defeating every captcha when I, a human, get sometimes entirely blocked by captchas all the time.

I get captchas when trying to do google searches if I'm not logged in. Or a lot of the time its "please wait a moment. Don't refresh the page" (the google results will then never load until you refresh the page). A few weeks ago I couldn't get past a cloudflare checkbox on a modern iPhone, and I'm not on a VPN or anything either. Yesterday I tried to visit an old reddit thread I had bookmarked and got "You've been blocked by network security," without a chance to even attempt a captcha.

What are bots doing to get past all of these?

Re:Why is Google still serving dodgy ads? on Sunday September 13, 2026 @02:55PM (#49687387)
When Google broke the original uBlock origin and made people switch to uBlock Lite, I found out about the change because my grandmother called me in a panic. She saw an ad like the one in this article on her Facebook page and clicked it, then it was telling her to call Microsoft support because her computer was infected.

Like, Google removing Adblock directly caused that. Facebook allowing the ad caused that. The ad led to malicious page that was also hosted on a Microsoft thing, and I ended up reporting it to them too. Microsoft at least promptly took it down within a half hour after I reported it. But these big companies have almost no incentive to stop this, and some of them directly profit off of these scams happening.

Re:Why is Google still serving dodgy ads? on Sunday September 13, 2026 @02:27PM (#49687070)
Google can reply and confirm whether or not a report did anything?

I’ve never seen that. I report ads on YouTube all the time. I’ve reported ads for illegal drugs, illegal firearms, pornography, and all sorts of various scams. I’ve seen similar advertising to the example in this article, mimicking the phone’s UI. Ive reported them. I’ve never once seen Google reply to any of my reports to confirm what happened. I’ve always wondered, and since I continue to see the ads I just assume my reports go straight into a trash bin.

The illegal firearm ad I saw (more than a year ago, now) I was so shocked that I took screenshots and reported it multiple times. The ad advertised that the weapon was “easy to sneak through security” and “didn’t require an id to purchase” I saw the ad several times across multiple weeks. I reported it every time. I don’t think Google ever did anything about it. If they did, it took them weeks

Re:Bodily Oddities on Saturday September 12, 2026 @03:35AM (#49669924)
Interesting! I’ve definitely seen and noticed this but never looked into it further. The Wikipedia page has an example image that aligns with my experience pretty well.

I get migraines and weird visual auras with them sometimes. I assumed that this phenomenon was related. Didn’t realize I was actually seeing light polarization. These things are often hard to describe and look up. Good to hear that this is likely benign.

Re:iPhone Duo on Wednesday September 09, 2026 @02:46PM (#49631844)
While at launch Face ID did not work in landscape, it does now. I can unlock my phone with my face in both landscape and portrait, although I guess not upside down? That might only be because I’m on an iPhone though. iPads might be more flexible.
Re:iPhone Duo on Wednesday September 09, 2026 @02:13PM (#49630872)
Interesting that there seems to be no FaceID? They only mentioned TouchID. I assume it’s a limitation of the under-screen camera.

They’ve been doing Touch ID instead of faceID with some of their products a few times, I think some of the iPad models? but unfortunately touchID has like a 20% success rate with my fingers. FaceID works 100% of the time for me. I’ve never had good luck with any fingerprint scanners. I hope they can someday solve the issues with FaceID under the screen.

I wasn’t going to buy this product anyway. My current phone works and I have zero reason to upgrade. But if I was in the market, no facial recognition is honestly a dealbreaker.

Re:Nitter has more working instances than before the takedowns on Saturday September 05, 2026 @02:13PM (#49579155)
The article uses "posting about race" in the headline, but makes it pretty clear in the content that he is pushing racist white supremacist ideas.
Re:ChatGPT ad targeting is garbage on Wednesday September 02, 2026 @02:30PM (#49540388)
Is there any ad targeting that is good?

The main place I see ads is YouTube on iOS. I used to have ad targeting turned off, but I’ve since opted into all of googles tracking and ad-targeting, in attempt to curate the ads I see and improve them.

I’ve had all the Google tracking and ad-targeting turned on for close to a year now. Google still can’t even target me ads that are in English. I can’t read Chinese or Turkish or Spanish but I still get ads in those languages. Most of the ads are still scams or questionably legal products. And nearly all advertisements are blatantly targeted toward the wrong demographics. I get both “you can buy this multi million dollar hotel” and “you can use food stamps at our store”. I sometimes see advertisements for local politicians (same state), which might be targeted, but I just as frequently see ads for politicians I cannot possibly vote for. (opposite side of the country)

Well, it closes the apps somewhat arbitrarily, but they definitely arent all open. If the most recent app is a resource-intensive game or something it will more aggressively close things. but you can have more open if they are all lightweight apps.

But the switcher shows every app ever opened and tries to pretend these apps aren't being closed. Right now for instance, i just checked and as best i can tell, the last 3 were open. going back any further and i could tell the app had to reload. but i can scroll to the left back forever. the one on the furthest left i easily haven't opened for months

At least on iPhone, it basically doesn't do anything. Apple aggressively kills all background apps automatically. the "open" apps in the switcher are almost always just screenshots of previously-open-but-now-closed apps. if it was recent, the latest app or two in the switcher might actually be open, but rarely more than that.

Despite this, many of my relatives have somehow learned this habit of opening the switcher and closing all apps when they are done with them.

Re:Processing in Memory: DRAM Is About to Do Math on Saturday August 29, 2026 @01:11AM (#49487068)
I think it goes back further than 1998. Several old systems had special memory locations where the numbers written would then read back changed. The Apollo Guidance computer for instance didn’t have a shift-right or shift-left cpu instruction. They would write data to a specific area of memory that would modify the data to shift bits around.

Although I’m sure it’s quite different. The cpu and memory hardware is so completely different. And basic bit manipulation is hardly computation.

Older »