News for hackers. Stuff that matters.

spydum

Re:Linode Security Incident on Friday October 30, 2026 @06:27PM (#50310946)
Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right?
Re:What was a Token Ring network? on Friday October 16, 2026 @06:56PM (#50125879)
My first exposure to networking was a 10base2 setup I got from a closing business. Setting that up to run an ipx/spx network which I could run doom/descent/quake on was my very first intro to networking. Was so cool to see computers across the room communicate back then. Something very satisfying about the way those coax connectors twist in and click.
yes different, but as with any fruit there is variety. muscadine grapes are huge and taste like candy
thats okay, probably was engineered by an llm, who thought GETs were always read only
I think you could actually look at this via the OPPOSITE lense: OpenSource was good for companies before, because they got free code/bugfix/labor, which would have been expensive to produce themselves.

Now with LLM and agentic factories pumping out bugfixes/code, does the equation on opensource still look attractive to a for-profit company? Why give away that sweet source code?

Re:Warez: The Infrastructure and Aesthetics of Piracy Culture on Saturday September 19, 2026 @08:35AM (#49766060)
BitchX from a shell with a vanity hostname was a hard flex for sure
Don't worry, we will fork and just repeat the pattern with new names! See you next time!
Re:A 32-Year-Old Bug Walks into a Telnet Server on Thursday September 17, 2026 @07:59AM (#49739508)
I know people seem to think nsa and other gov threat actors live in a land of zero days and advanced techniques... And to some degree, they sure do develop those and are able to leverage them.

However, from my point of view most targets are able to be compromised by poor configs, hygiene, well known and patchable vulns, or the more likely avenue: the humans operating the system.

Re:LG responds to TV spying allegations on Saturday September 12, 2026 @02:35PM (#49675617)
nielsen's ACR method is embedded into millions of devices and vendors. No need for a microphone, it's processing the audio signal being sent out. A microphone would be a wasted conversion..

(your car infotainment also likely has nielsen tech in it most likely, as they bought arbitron and gracenote)

Re:Fuck it, make it anyway on Saturday September 12, 2026 @02:32PM (#49675566)
For some reason makes me think about replicators, and I found this article: https://columbusunderground.com/next-abundance-ds1/

There is plenty of others, but the idea of being post-scarcity of information creation/software seems akin to how Star Trek had replicators. They used them for sure, but there was still people who wanted to cook/create by hand, as an expression.

Exactly, go look at Lucid/Tesla and a few others for examples of how the car is a brick without the manufacturers sekret unlock codes and calibration software. If they decide not to help, you are out of luck.
isn't this just malicious compliance? not clear how this would violate GPLv2?
That was mostly Bayesian probability filters, followed by SPF and more recently DKIM.. Maybe you could consider the Bayesian filter databases being trained as ML, but I feel it's a far way from our typical AI/LLM surge
Re:AWS: Inaccurate Estimated Billing Data - $1.7 BILLION on Saturday July 18, 2026 @09:31AM (#48958014)
I have bad news if you think banks are the pinnacle of cyber security practices...

Maybe some rare few are, but by and large they generally stink.

They tend to give that impression because they hire tons of auditors and panjandrum, to hassle their suppliers, but internally they are winging it like the rest of us.

Re:TLS certificates for internal services done right on Thursday July 09, 2026 @11:34AM (#48847639)
this is all fine and good, if you are okay broadcasting your internal hostnames. I suppose it's a trade off some might make.
Re:Factoring "short-sleeve" RSA keys with polynomials on Monday June 15, 2026 @04:20PM (#48546524)
Kind of reminds me of https://lists.debian.org/debian-security-announce/2008/msg00...

Interesting they could not figure out pattern 1? Wonder if there is any additional metadata to point at a vendor or provider..

Fully agree, the only downside is without a SOC2 you will be asked to fill out an insane 200+ questionnaire. Good news is you have all these great LLM tools you can do this work for you, and just check it over.
Re:Mythos is the best cybersecurity news we've ever had on Wednesday May 06, 2026 @06:07PM (#48042532)
We are replacing those with AI agents anyways. It'll be AI agents all the way down!
You could place a prediction bet probably.
really? I feel absolutely assured that every ugly temporary code fix I put in place, will persist for eternity..
Re:Reverse engineering Lyft Bikes for fun (and profit?) on Thursday January 22, 2026 @03:32PM (#46724765)
Believe it or not, straight to jail! Just kidding, great writeup. I know it's not groundbreaking, but does surprise me how many products don't bother with rate limiting controls.
Re:Ask HN: What Are You Working On? (January 2026) on Monday January 12, 2026 @08:06AM (#46587908)
Fascinating to see an outsized increase in "game" development compare to a year ago: https://news.ycombinator.com/item?id=43154065 (I'm sure someone could throw this into some llm analysis and prove it out, but a quick and dirty count of "game" between then two shows a 2x increase on roughly the same comment count).

I suspect has to do with having agentic coding assist for folks who would otherwise not have the means to develop a game, but now do.

In fact: https://wilgibbs.com/blog/defcon-finals-mcp/

Which makes me think: yes, llms can solve some of this, but still only some. It's more than a research tool, when you combine tools and agentic workflows. I don't see a reason it should slow down.

Ah ha! But now the complete lack of emdash and bullet pointed lists from antislop will be the tell! Riposte!
Re:Steam Machine on Thursday November 13, 2025 @07:52AM (#45914315)
seconding this. I bought a SteamDeck OLED -- and it blows my mind more people havent heard about these. it's essentially a bad ass handheld laptop. yes it plays games great, but the OS side when you boot into desktop mode is quite capable - I spend more time on it than my home pc these days
specific clarification: That was only Cursor's AWS bill. If they are using other providers, wasn't clear.
Re:Andrej Karpathy – AGI is still a decade away on Friday October 17, 2025 @02:02PM (#45619822)
2038 will be more significant
Re:YouTube seems to be down on Wednesday October 15, 2025 @08:10PM (#45599965)
I've never heard that, I think you may be thinking of Netflix and their edge storage appliances.
Re:UTF-8 is a brilliant design on Friday September 12, 2025 @04:08PM (#45226167)
https://www.sensitiveresearch.com/Archive/CharCodeHist/X3.4-...

Looks to me like serendipity - they thought 8 bits would be wasteful, they didnt have a need for that many characters.

Re:Kerberoasting on Wednesday September 10, 2025 @05:57PM (#45204525)
Yes you can enable specific encryption types for users. It's not super common, but it can be done.

Older »