News for hackers. Stuff that matters.

sureglymop

I've been running Qwen 3.8 Flash Next on Strix Halo with halogen-flash-server which is a pretty good experience (although unfortunately halogen is closed source).

But for coding and cybersec tasks I think GLM 5.3 might be the best one to use still.

Re:EMudhra Intermediate CA Compromise on Friday October 23, 2026 @01:54AM (#50204937)
That's not what I mean. Even if they would monitor, they couldn't because some logs handle many certs but rate limit you so you couldn't catch up if you tried.

On top of that, to monitor you have to download full certificates and parse them all. Does that seem like a great way to do this to you?

Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @11:46AM (#50197012)
And the key on top of that can be used to open every other car that exists.
Re:EMudhra Intermediate CA Compromise on Wednesday October 21, 2026 @04:23PM (#50187107)
No. It doesn't solve anything for domain owners. They don't really monitor the logs nor can they sustainably do so.

The static CT API does have a "names tiles" API but it's not a real/usable thing.

Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @05:15PM (#50172788)
Certainly some American CAs aren't any better, flashbacks to Comodo 2011 (now Sectigo).
Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @05:12PM (#50172750)
Interesting to mention Google because the whole system still relies on them. They decide what certificate transparency logs can enter the program and offer the list of logs. If you don't trust Google web PKI falls apart.
Re:EMudhra Intermediate CA Compromise on Tuesday October 20, 2026 @05:07PM (#50172685)
What's worse is, if this hadn't come to light, how would you even know when an attacker issues a cert for your domain?

Well you might think, oh I can monitor the certificate transparency logs.

I would say well, good luck downloading and parsing terabytes of certificates as they are logged. Then there are CAs whose logs will rate limit you in a way such that you can't catch up to the certs being logged with one server and IP. The system might "work" but not for domain owners. Good luck.

I just had a thing today where I wanted to play Forza Horizon 4 on my handheld.

When trying to launch the game I got a "Must sign in to Xbox/Microsoft to play". So I reluctantly complied and entered my password only to be met with "password login not available" after pressing enter.

Great... guess I just won't play then.

Re:Gemini 4 Argon on Tuesday October 13, 2026 @12:24PM (#50074288)
When you are on "gemini.google.com" there is a little lock icon next to Gemini 3 and Gemini 4. When you click it you get the prompt to subscribe (pay). Once you have successfully done so, the Gemini 4 option disappears!

Pretty misleading.

Re:Now That Information Is Free, What's a College Campus For? on Tuesday October 13, 2026 @12:10PM (#50074015)
Well, what I will say though is that I trust the university more when it comes to curating which textbook to read.

Learning on your own can sometimes feel like looking for needles (good learning material) in a haystack (e.g. the internet).

Luckily, many universities and university professors make their courses and course material publicly available!

Re:An hour of audio transcribed in about 13s on MacBook Air on Tuesday October 13, 2026 @11:13AM (#50073010)
Isn't EmbeddingGemma2 already a decision model? Am I misunderstanding your question?
Re:The Slow Formation of Durable Software on Thursday October 08, 2026 @01:07PM (#50008550)
I agree. It's "open source" but I would put a huge asterisk on that label. It really reminds me most of AI models that are only open weights.
Re:Release of Polars 2.0 on Tuesday October 06, 2026 @01:57PM (#49981870)
I've used Polars before and can only recommend it.

It's like you get a really good 'query planner' like a DB would give you, but for your notebooks/scripts/etc. Much better than pandas imo.

Re:Docker has always used microVMs (well since 2016) on Sunday October 04, 2026 @06:48PM (#49958726)
Look into the krun runtime (part of crun) if you'd like to do this.
Re:Zig v0.17.0 on Friday October 02, 2026 @05:47PM (#49939020)
C3 is honestly so good and a bit underrated.
Re:SvelteKit 3 Is Here on Friday October 02, 2026 @04:26AM (#49931169)
I still use Svelte but I switched to Astro too. I think the best thing about it is that its devs are focused on building primarily a good ssg. The Svelte people are primarily building a frontend framework and added sveltekit as an addition. Using Svelte in astro even feels nicer to me.
Re:Sober: We Ported Roblox to Linux on Monday September 28, 2026 @07:11PM (#49885739)
Seems closed source... bold choice to use this.
I hope I'm not discouraging you with what I'm writing. This looks to me like a cool project/idea. Unfortunately the landing page just immediately made me uninterested when I tried reading the text.

I think the reason for that is, the text to me feels immediately AI generated which evokes a feeling of "the human didn't care enough to do the easiest part, which is to describe their project themselves".

Re:PipePipe: NewPipe hard fork implementing SponsorBlock on Saturday September 26, 2026 @01:00PM (#49858408)
Same. My only issue (with NewPipe also) is that at ~50 subscribed channels, Google rate limits me when I refresh. I wish there was better logic to get new content or a way to space it out over an amount of time.
Re:The Scourge of x86 Emulation on Sunday September 20, 2026 @07:47AM (#49774849)
I have the Retroid Pocket Nova which has a 5000mAh battery. It applies a CPU underclock by default and also has full support for deep sleep/suspend now. The screen is also Amoled so that helps too.

In desktop mode I get about ~7h of continuous light work, e.g. browsing. I often use it plugged into a 21:9 4k monitor though just like a laptop. There I should note that at that resolution it seems limited to 60hz refresh rate.

When gaming it changes a bit. But for example, it plays GTA V at least as good as a steam deck but at just ~6W power draw. So much more power efficient. I also sometimes do Switch emulation. But that can be a bit more fiddly as patches are required due to the 4:3 screen ratio.

The nicest thing for me though is that it can pretty seamlessly dual boot between linux and android. And even in linux, android apps work super well in waydroid because it's arm based. It feels magical to me...

I know this reads like an ad but it truly is holy grail tech to me. Never could've imagined this 5 to 10 years ago.

Re:The Scourge of x86 Emulation on Friday September 18, 2026 @05:13AM (#49751886)
Slightly related but this project (FEX) is amazing. I've been running Armada OS on multiple ARM handhelds and they're viable little linux machines now except with amazing battery life.

Most problems I run into are anti cheat related (EAC, etc.) but those can be circumvented for now. Feels kind of insane how far x86 emulation has come.

Re:Steam Frame starts at $1059 on Tuesday September 15, 2026 @01:28AM (#49708094)
I think its performance is quite underappreciated. It has a Snapdragon 8 Gen 3 chip.

I have a tiny handheld with a Snapdragon 8 Gen 2 chip and among many other things it plays GTA V and RDR2 almost perfectly, using FEX nonetheless. And because it's arm, battery life is so much better than on my laptop that I use it as a tiny mini linux laptop now.

Re:XCancel Taken Down Again on Monday September 14, 2026 @06:35AM (#49694670)
It's because X is chosen (wrongfully) as the main communications channel of all kinds of important public institutions and people (police departments, city administrations, politicians, etc.).

Of course that's a real issue since the whole thing is login gated and inaccessible. But unfortunately it is the reality. So I think something like XCancel is needed.

On an isolated test device for this purpose, yes. But otherwise, I would decompile it to look at it.
Re:Ask HN: Can we please limit the AI news flood? on Friday September 11, 2026 @11:54AM (#49660527)
I highly agree. I am very interested in the AI news but the distribution isn't right now. It doesn't really feel like the same website to me.
Re:Don't Use a gmail.com Address on Sunday September 06, 2026 @05:00PM (#49590889)
I do this often when corresponding with businesses/companies and I've been asked before if I have a similar business or am in their line of work also...
Looking at the issues, do I understand it correctly that you have some way to install directly from repositories if they contain a `cloudinabottle.toml` file?

If yes, regardless of who made the issues, that seems like terrible architecture/design there...

Re:The asteroid currently hitting front end web development on Friday September 04, 2026 @05:17PM (#49570343)
This is much better but I can still tell. But I'm sure you guided it a lot to arrive at this state. Surely people with less care are one shotting and publishing boring websites.
Re:The asteroid currently hitting front end web development on Friday September 04, 2026 @08:33AM (#49563687)
Not sure if sarcastic but no. Check out for example this website: https://www.geofungames.com/

The functionality more or less works and the website is usable, but the design follows that "AI style". I'm not sure how else to describe it.

Re:The asteroid currently hitting front end web development on Friday September 04, 2026 @05:06AM (#49562238)
What bothers me is that I notice it everywhere. Not only does AI have a distinct writing style, it has a distinct style of frontend UI/UX design. I notice it on more and more websites and it bores me. I want creativity and originality. I haven't really seen AI exhibit that at all. It can maybe be driven there through persistent human input but then I think it's still the human being original/creative.

Older »