News for hackers. Stuff that matters.

snvzz

Re:European RISC-V Industrial Computing Initiative on Tuesday November 03, 2026 @02:15AM (#50349025)
RISC-V is inevitable.
Re:OccupySaaS on Tuesday November 03, 2026 @12:36AM (#50348481)
I like 0BSD, except the name.

The proliferation of BSD licenses dilutes the meaning of "bsd license". There's only one MIT license, so there's no confusion.

Too bad it's not open source.

("NC" creative commons)

Re:OccupySaaS on Monday November 02, 2026 @09:40AM (#50337455)
AIUI there's no "public domain license". Permissive licenses like MIT are as close as it gets.

And the disclaimer of liability is kind of important.

Re:OccupySaaS on Sunday November 01, 2026 @09:56PM (#50332616)
>Copyleft.

Why even bother with the extra "protection". It can be re-made by AI as easily.

Just go all the way, MIT or BSD. Maximize reusability and adoption.

Now, for contrast, I'd love to see what Opus 5.5 and/or Astra can do when set to do the same thing on a 52m wall clock limit.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @09:37AM (#50326131)
Tailscale shows up.
Re:Japan's trains are great. Why is booking one so hard? on Sunday November 01, 2026 @04:58AM (#50324080)
Whenever I need tickets it has been a smooth experience via ekinet[0].

Just entering a code later in a ticket machine was enough to get it printed.

0. https://www.jreast.co.jp/multi/en/

Re:AI Made Me Homeless on Sunday November 01, 2026 @12:05AM (#50322604)
>How a $500k/Year AI Engineer Lost Everything

Apparently they saved no money and went homeless in a matter of months (?!).

People who work in mcdonalds putting the fries in the bag do not earn 500k/yr and somehow manage to avoid homelessness.

It is quite telling that they blame the AI rather than themselves.

Re:A Pickpocket's Guide to New York on Saturday October 31, 2026 @12:17AM (#50313165)
Crazy idea: Putting them in Prison, so that the rest of us can live in peace.
There's no end to bugs like these in Linux. Millions of Lines of Code can easily hide many, many of these. Code that runs in supervisor mode.

None of this can ever affect seL4[0] nor a system built on it, due to its architecture.

0. https://sel4.systems/

Found the actual hypervisor[0]. It is GPLv2.

0. https://github.com/losfair/l4h

It would have prevented it. e.g.

>Of course, you’d want to try ../… Yes, it does let you escape the temporary folder...

This is absolute bull on seL4 by construction. "sandboxes" that prevent access that the OS otherwise grants. In seL4, this component would not need a sandbox in the first place, because it would never have a capability to some VFS path it doesn't need to access.

This sort of escape relies on ambient security, which is the security model of UNIX and Windows NT. Access is granted by default and then restricted, rather than simply not granted. A broken security model.

And, unlike a demonstrated shitty browser sandbox, seL4 formally guarantees isolation. Capabilities cannot be forged.

Who voted Claude in?
Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @03:34AM (#50285584)
seL4 can guarantee* time domain isolation between processes.

*on some CPUs. There's a WIP time fence for RISC-V to try and improve this.

The Amiga drama never ends.
Re:PIC64GX 64-bit RISC-V Quad-Core Microprocessors on Thursday October 29, 2026 @12:44AM (#50284665)
RISC-V is inevitable.
AIUI TensTorrent has some sort of contract with Rapidus.

You won't have to wait long.

It is only possible to draw the rest of the safe owl if you have a safe crayon.

seL4 is the choice that allows for a safe system to be built. Any other choice of kernel currently available does lack the mechanisms and guarantees.

Re:The case of the 9 bit AES key on Thursday October 29, 2026 @12:05AM (#50284435)
That's way too many PDF implementations affected by this category of stupidity.

It makes me wonder: Coincidence, really? There's enough there to think that there might be some invisible hand behind it.

Re:AlpineBSD on Wednesday October 28, 2026 @07:24PM (#50282371)
Not using AI is a choice they can make.

They'll be left behind, but it clearly doesn't matter to them.

Knowledge is knowledge. "Illegally obtained" is obsolete thinking.
>You can point an LLM at any large codebase and it will find vulnerabilities, so "patch the planet" isn't very scalable.

So the solutions need to be structural.

e.g. relative to a monolith kernel, seL4 is small, has no known bugs (AI can try, but so far crickets) and is the only piece that needs to run privileged.

Everything running under seL4 benefits from the guarantees seL4 provides.

Re:GPT-6.1 Terra on Tuesday October 27, 2026 @09:06AM (#50258609)
Intended to test it with openrouter, but no provider meets the ZDR requirement.

Unlike Sol, Luna and Astra. Odd.

Re:I still teach OpenGL ES 3.0 on Tuesday October 27, 2026 @01:09AM (#50254915)
The linked webpage refuses keyboard navigation e.g. cursors, pageup/down and home/end seem to do nothing.

Awful.

Re:Why I Am a Programmer on Monday October 26, 2026 @06:04AM (#50241466)
One word: AMIGA.
Re:The Curse of Soldered RAM on Monday October 26, 2026 @03:48AM (#50240446)
But no ECC support.
Re:OpenSSL 4.1.0 on Friday October 23, 2026 @11:32AM (#50210725)
Was in 2020.

Older »