sparkling
sparkling on Hacker News
>Which country got rich with the EU?
Poland? >250 billion Euros received in subsidies since joining the EU; almost any construction you walk by has the "Funded by EU" poster next to it.
I think the massive service and outsourcing industry would also not have been possible (at the current scale) without EU membership.
>a mini attached to the back of a monitor
It is ugly. Especially i places like a reception, where the back of the screen is facing the customer. Plain and simple.
Never heard of this brand up until now. Design is indeed Apple-ish, are the panels any good?
And all this slop is feed straight back into the LLMs that produced it.
With all due respect, it is not the job of the customer to keep JetBrains alive for nostalgia/pity reasons.
To this day i don't understand the difference between Junie and AI chat. Anyway, I use PyCharm on a fallback license as a read-only tool nowadays, sad but true.
Posted by
sparkling on Wednesday October 21, 2026 @01:54PM
from the ask-hn dept.
I see many sites going offline as precautionary measure to protect against php2shell, but so far no big name hacks have been reported? This seems rather unexpected, given the short notice and that half of the United States was still asleep at the time of patch release. So: Have there been any big hacks reported so far?
Sure, im referring to systems being turned off even if they are not running PHP at all. Out of fear of spillover effects or because they are unsure what they are running.
Yes. Even if you are not running PHP yourself, you should now prepare for:
- Any PHP site you ever put your email/password/personal data in being hacked over the next few hours (especially things like forums).
- As a result of the above, a massive wave of phishing attempts.
- Corporates/Admins panicking and turning off services as a precautionary measure over the next hours or days.
One may argue that they both are primarily in the "developer-centric API business". Also: massive payment volume that they can grab.
Welcome to the wonderful world of corporate overhead and inefficiencies.
We now have real world evidence that:
0. AI agents will hack and break into real-world systems.
1. AI agents that will deceive and lie about their actions.
2. AI agents that will collaborate together to achieve malicious goals.
3. AI agents that will replicate and implement backdoor/rootkit-style survival mechanisms.
All the parts for a major, global cybersecurity incident are now in place.
Where is the "AI" in agent this, exactly?
Because you are a slave, Neo.
Detection can be based on the IPs themselves, no packet tricks required. Plenty of services can do that:
https://focsec.com/Now of course, if your VPN is a home-lab style VPN where you are connecting to a little wireguard box sitting in your own home, that is a totally different story.
We need to fake User-Agent now for our MCP clients? Could have just sticked to plain old HTTP then ;)
Yes, but with subpar caching and higher cached token pricing, compared to directly using the DeepSeek platform.
I am using exactly the same flow.
Astra for deep dive investigations, Sol 5.6 at mid-level for day to day tasks, Grok 4.6 via Cursor for routine and low complexity tasks.
You can have all the measures in place that are described in that post, and your code can still be bad. High unit test coverage tells you exactly zero about the solution itself.
And technical quality gates do not help if the human side lacks defense against slop code. If you don't have the right managers in place, the 2 years of experience vibecoder who ships a feature in 4 hours will always win against the 20+ year senior who actually looks at the code he is about to ship.
I noticed that recently Github.com has some kind of weird bot detection on public repos. I have a browser extension for switching User Agents for a specific legacy site, sometimes i forget to turn it off and Github will require me to login to view public repos.
All of this is most likely due to mass scraping by LLMs. Welcome to the total shitification of the web.
Most likely, their own data residency terms prohibit this. It would be interesting to know if, when 2 out of 3 AZs got destroyed, customers got a heads up to move their data to a different region?
If a AWS customer chooses to store their data in a single AZ, that is a design choice. AWS is not taking a daily copy of a entire regions S3 cluster and driving it to some warehouse for a "just in case" situation. That is why Multi-AZ exists.
He forgot to add "if it's Multi-AZ" ;)
Remind me please, what are folks currently paying per seat for this glorified CRUD app?
Or the victims have no incentive to do so, such as in the Hugging Face case.
Apart from the AI chain, who is benefiting from the explosion of vibecoded slop project?
I can think of domain registrars and entry-level VPS hosters (non-Hyperscaler)
Who else? Asking from a investment perspective.
No mention of Flock anywhere in the text
100%. Anything with the name "Norton" is burned for me. This goes back to uninstallable Software around Windows XP era.