News for hackers. Stuff that matters.

thecopy

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @07:55AM (#50302729)
Maybe. Maybe not. It depends on the sophistication of the malware. Generally my impression is that these install-script type attacks cast a wide net. I would hazard a guess that they would not know how to even ask my 1Password for the keys. They are in an account they dont know, in a vault they dont know, and have a name they dont know
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @04:07AM (#50301029)
It does help in that the secrets are not in plain-text, readable for any script you run. With 1Password, a process asks for the password and it gets transferred not through the filesystem but through IPC. 1Password shows a dialog: "Do you want iTerm to get your SSH key ABC123?"

In my thinking, this is more secure than plaintext in filesystem

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @03:09AM (#50300688)
I recommend everyone to move your plantext secrets from ~/.kube/config, ~/.ssh etc into a password-manager. You can tell Claude to adjust the config files to get the secrets from 1Password when they are needed with TouchID requirements etc.
Having the same issue. I have stopped Googling it, since i just start to wonder if its better to just rebrand.
I have a small ChatGPT subscription and a skill i run pre-commit post-Claude that goes through every file and rewrites all english sentences, removes comments and replaces dense terms in variable and function names. It usually reduces comments by ~80%
Re:Tokens Too Cheap to Meter on Wednesday September 23, 2026 @02:08PM (#49820164)
Well, the thing with renewables is that the energy is not destroyed. When you use a solar panel is does not disappear
What is wrong with it?
Re:DeepSeek peak/off-peak pricing update on Friday August 14, 2026 @07:50AM (#49297554)
Peak Hours: 01:00–04:00 and 06:00–10:00 UTC

For European and US customers this is effectively no/marginal increase. I think i wll keep using both Flash and Pro as before.

Re:llama.cpp on Wednesday August 12, 2026 @03:44AM (#49269035)
Except the first time you do it
Re:llama.cpp on Wednesday August 12, 2026 @03:29AM (#49268952)
Sure, but doesn't this assume that you cannot the publisher anyway? So why would you not trust their homepage but trust their source-code
Re:llama.cpp on Wednesday August 12, 2026 @03:07AM (#49268799)
How so? As i understand your point, this would mean we cannot trust GitHub enough to return the same content in git clone vs curl?
Re:llama.cpp on Wednesday August 12, 2026 @03:00AM (#49268743)
>Nothing is arbitrary nor mutable in the default state.

What do you mean with this?

Re:llama.cpp on Wednesday August 12, 2026 @02:19AM (#49268477)
>Anything that suggests curl into bash just plain sketches me out.

How is it different than trusting any other method of installation? If URL has https and is from an author you trust i dont see the difference.

Re:Ask HN: What are you working on? (August 2026) on Monday August 10, 2026 @05:07AM (#49241199)
Im working on an extensible and flexible agentic connectivity platform (MCP, OpenAPI/Swagger, FaaS) with niceties like built-in CodeMode, compression, SIEM integration, access token forwarding, SCIM 2.0, on-demand agentic sandboxes (e.g. LangChains "Deep Agents").

For private use not that useful tbh (although i found the OpenAPI -> MCP mapper useful), but found sales success with organizations with more complex agentic setups.

Gatana: https://www.gatana.ai/

Re:Qwen3.8-Max: A New Bar for Coding and Cowork on Monday August 03, 2026 @04:58AM (#49153066)
I agree with parent. OpenRouter might be cheaper list-price, but i have been using 10$ on DS platform since April/May, still have 2$ left. Using OpenRouter i depleted the same dollar-amount in a 1-2 weeks with same usage pattern. No idea why.
Love the idea, any plans on making TUI based? Like k9s? :)
1. Use Passkey from 1Password

2. Profit

When DeepSeek was released, it had an immidiate and significant impact on the US stock-market. Now when its becoming common knowledge that China is almost at parity with US SOTA models with good momentum, why is there no sentiment change on the market?
Re:Kimi K3: second only to Fable 5 on AA-Briefcase on Wednesday July 22, 2026 @02:29AM (#49002605)
When DeepSeek was released, it had an immidiate and significant impact on the US stock-market. Now when its becoming common knowledge that China is almost at parity with US SOTA models with good momentum, why is there no sentiment change on the market?
Am i the only one feeling my soul being emptied every time i read another "brutal shorthand" or "honest take"?
DS through OpenRouter is significantly slower than direct from DS platform in my experience
Re:MCP Is Dead on Saturday May 30, 2026 @05:13AM (#48334253)
Every mature MCP gateway solution should implement Code Mode (e.g. https://docs.gatana.ai/code-mode/) - it circumvents all the arguments.

In the end MCP is just a protocol for discovering tools. And agents _need_ to do stuff with tools.

I genuinely find DDG more effective than Google Search. I have used it as a daily driver for 2+ years now. When i cannot find anything with DDG, i try with the !g macro, but results are more often than not even worse.
Super interesting idea! Congrats on the launch. Context is definitely something that is lacking in my experience. Im always frustrated when an agent cannot answer business-related questions, and i compare them to coding agents which seem to be able to answer everything. The difference is that coding agent has the context right there at the fingertips, while for business its gated behind a bunch of services and custom data models. Context is king :)

How do you handle encryption and confidentiality? Im building in this space too (MCP gateway https://www.gatana.ai/) which already have semantic search for tool outputs, and ensuring encryption and confidentiality is not trivial.

Re:Changes to GitHub Copilot Individual Plans on Tuesday April 21, 2026 @03:02AM (#47845464)
That is not necessarily true.
Re:Changes to GitHub Copilot Individual Plans on Tuesday April 21, 2026 @03:00AM (#47845449)
>$39 Github Pro+ to keep using Opus,

For what its worth, i have been paying for Pro+ and i still got locked out of Opus. I only have access to Opus 4.7 at 7.5x

Re:Changes to GitHub Copilot Individual Plans on Tuesday April 21, 2026 @02:56AM (#47845423)
I have Copilot Pro+ and discovered i cannot use Opus anymore today! Are we reaching the end of VC funded productivity?
Re:Ask HN: What Are You Working On? (April 2026) on Wednesday April 15, 2026 @03:57AM (#47775979)
Gatana: https://www.gatana.ai/

Extremely flexible and configurable MCP Gateway, target users is enterprises/companies/organizations who want secure and managed MCP within their company. Support both Cloud and On-premise.

Older »