News for hackers. Stuff that matters.

terseus

Re:Actively exploited sandbox RCE in all Chromium versions on Saturday September 05, 2026 @04:33AM (#49574450)
> Unfortunately, it breaks about 30% of the web.

More like 99%

I use Firefox with Noscript and I'm _totally aware_ that almost no website works without allowing it JS.

Even using Noscript it's becoming more and more exhausting every year, it's plain impossible to browse the internet without JS at all.

> Why do we believe that LLMs are going to stop there?

Why do you believe they wont? I think it's reasonable to assume that we will hit a ceiling that current models will not be able to break.

> We have robots walking just fine now, by the way.

Walking and reasoning are unrelated abilities.

I understand that it is not easy to relate to the author who pays (or was paying) $150 for a house cleaner, I understand that this is a 1-person history and may be highly biased, I understand the author is motivated to create a story from it.

However, if you think that any of the conditions described in the article are acceptable or that this is a fair price to pay for having AI, I think you are a horrible human being and I hope you'll be expelled from civilized society.

Re:The 'Hidden' Costs of Great Abstractions on Monday May 04, 2026 @08:40AM (#48007955)
Oh of course, that's the current standard, but I doubt it will be considered acceptable for much longer.
Re:The 'Hidden' Costs of Great Abstractions on Monday May 04, 2026 @03:24AM (#48005688)
Is it, though? Can we really keep saying that "hardware will always be cheaper than human labour" when RAM prices are soaring, GPUs are becoming prohibitively expensive, and we're looking at a probably chip shortage?

I think the era of "poor software for fantastic hardware" is coming to an end.

Re:Agentic Coding Is a Trap on Monday May 04, 2026 @03:07AM (#48005572)
I don't know in other countries, but in Spain you definitely don't go to the doctor asking for anything more complex than a paracetamol.

You tell the doctor your symptoms, he explores you and perform any tests considered appropriate, and the doctor decides the prescription.

If the cost is subsidized by another cash source (e.g. VC money) when the source stops prices can definitely go up.
Re:We Automated Everything Except Knowing What's Going On on Tuesday March 03, 2026 @09:04AM (#47232497)
AI may not be the source of the problem but can make it a hundred times worse.
Re:Docker Compose best practices for dev and prod on Tuesday August 16, 2022 @12:36PM (#32485204)
Given that YAML it's a configuration language I'd say that not being turing complete it's a feature, not a bug nor a limitation; I always want my language files to be declarative to not suffer the perils of logic.

Edit: Also, I don't see the need for a turing complete language for something like docker compose, if you need something really complex you can always script a docker-compose.yml generator with all the logic and complexity you need.

Re:Using Rust Macros to exfiltrate secrets on Friday May 14, 2021 @12:55PM (#27156517)
I can't believe that people is comparing opening a project in a code editor with running a build script.

The PoC doesn't even open a file, it just opens the directory. It's a pretty big difference, when you execute a build script you _expect_ to run code, when you open a directory in your editor you don't expect any side effect _at all_.

My guess is that since the proc_macros returns a TokenStream, rust-analyzer have no way to know what it provides except running it.

I'm not sure there's a solution for this that doesn't cripple macros in Rust, apart from being able to configure rust-analyzer to ignore the macros, which clearly limit its usefulness.

Re:Google have declared Droidscript is malware on Tuesday April 27, 2021 @03:47PM (#26960591)
You don't need Termux for that, there are native clients for Android, I use this one: https://play.google.com/store/apps/details?id=dev.msfjarvis....
Rclone is really a fantastic tool, its configurability based on backends allow for amazing combinations!

You can configure any cloud storage backend (B2, S3, GCS ...) and combine it with other utility storage backends, like "crypt" [1], "cache" [2] and "chunker" [3], I highly recommend it to anyone searching for a backup solution.

The only feature I miss from Rclone is automatic directory monitoring and mirroring, which I solved using Syncthing (but forces me to host an additional server for it).

[1] https://rclone.org/crypt/ [2] https://rclone.org/cache/ [3] https://rclone.org/chunker/