News for hackers. Stuff that matters.

thenewnewguy

For personal use, Ubuntu Pro is free for 5 machines: https://ubuntu.com/pricing/pro

Which is the price Canonical chooses to charge, like they could charge money for this and they don't because they'd rather eat the loss for personal users for the advertising capability.

That's ... not what revenue means. You can't count revenue for Apple and profits for Amazon and Walmart etc.
Re:Richest 0.1% (8M) produce more carbon pollution than 3.5B on Thursday October 29, 2026 @10:07AM (#50289306)
This is a massive dodge of the question - do voters not bear some level of culpability for the candidate they choose to vote for?

I'm not talking about candidates reneging on their promises, places that are voting in favor of public transit but got messed up by their ancestors, etc. - I'm talking about people voting today for politicians that are clearly pro-oil and follow through on that.

Re:Richest 0.1% (8M) produce more carbon pollution than 3.5B on Thursday October 29, 2026 @02:06AM (#50285079)
What if the guy in the car voted for pro-oil politicians whose campaign explicitly included expanding fossil fuel consumption and cutting budgets to trains and other public transit?

Because ultimately the way we organize society is we have a democracy and we vote on representatives to make the laws. Companies actually don't get to directly cut public transit, they have to convince voters to do that.

Re:Richest 0.1% (8M) produce more carbon pollution than 3.5B on Thursday October 29, 2026 @01:36AM (#50284929)
I'm not sure why you think my solution would be blindly hoping? We change things in modern society with laws (and enforcement for those laws).

For example, many countries are already passing laws to limit the sale of new ICE vehicles and/or to provide incentives to own electric vehicles. And these laws are effective - we can track new vehicle sales and see that we are tending in a positive direction.

Re:Richest 0.1% (8M) produce more carbon pollution than 3.5B on Thursday October 29, 2026 @12:48AM (#50284688)
It matters because to actually improve things in society we need to identify the true root causes.

Blaming the owners of oil companies doesn't help fix emissions problems, becuse oil companies are going to pollute a ton essentially regardless of who owns them. The real solution to that problem is to reduce the global consumption and demand for oil.

Re:Richest 0.1% (8M) produce more carbon pollution than 3.5B on Thursday October 29, 2026 @12:44AM (#50284666)
I haven't done a super deep dive but from what I can tell, they only considered individual people that own a 10% stake, not other holders like index funds.
Re:Richest 0.1% (8M) produce more carbon pollution than 3.5B on Wednesday October 28, 2026 @11:48PM (#50284347)
Their methodology is extremely suspect in my opinion, as they attribute "shareholder emissions" to anyone that owns 10% or more of a company. Direct quote from their doc:

> a person with a 20% share in a company has 20% of its emissions allocated to their shareholder emissions

While shareholders obviously hold a greater degree of control over a company's emissions than a random consumer, assigning 100% of the blame for oil company emissions to the owners and 0% to people buying oil seems insane.

Also, filtering only for owners that control a 10% or higher stake masively skews the results as large portions of companies are held by the general public in much smaller quantities via 401ks, pensions, etc.

The first option on Form 8948 is "Taxpayer chose to file this return on paper" - is there any evidence paper filing is going away permanently?
Re:About the compromised eMudhra intermediate CAs on Wednesday October 28, 2026 @10:34PM (#50283908)
Apple created and designed the update system for their operating system from scratch. The fact it doesn't include the ability to update a security-critical file quickly is entirely their fault.

Most (if not all) of the popular BSDs managed to ship the update ages ago. I would expect a trillion dollar company like Apple to have better and more thoughtful engineering than random volunteer projects.

Re:About the compromised eMudhra intermediate CAs on Wednesday October 28, 2026 @09:33AM (#50273274)
All of that is Apple's fault - they designed and created MacOS. It's not like they're publishing to a third party platform.

Why would I judge Apple only on the quality of this docs page (which is good) but not on their poor work that resulted in this situation in the first place?

Re:Git for US Legislation on Tuesday October 27, 2026 @11:51PM (#50269168)
Yeah but none of this matters for the "git for legislation" idea right? The point here is to record the history of the text of the laws, not their meaning.
Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @05:53PM (#50225746)
Can you spell out the economics for us?

Let's assume I am a white-hat hacker with access to this allegedly widespread exploit. Obviously, I understand why a nation-state attacker wouldn't want to share their exploit here but what do I as a random citizen stand to lose? It's not like I care about hoarding the exploit to pwn innocent civilians.

You seem to imply there's some economic reason such a white-hat hacker wouldn't take the $500 but don't actually say what it is.

Re:eMudhra to Exit Global SSL/TLS Certificate Business on Thursday October 22, 2026 @08:40PM (#50203087)
Clients cannot because the current CAA spec only requires that it be checked/valid at issuance time.

Thus, as a client, it is impossible to distinguish between:

1) A certificate that was issued in violation of a CAA record

2) A certificate that was issued correctly for a website that later changed their CAA record

Re:Quad9 (DNS Resolver) to Exit France on Thursday October 22, 2026 @04:56PM (#50200919)
Would you consider 20 years "lately"?
Re:Show HN: Proton Drive for Linux on Friday October 09, 2026 @07:49PM (#50027995)
I don't really care what you do with AI on your own computer for yourself but top tier irony sharing this around with this post on your blog: https://blog.lsantos.dev/en/backlog-10-slopware-the-end-of-w...
You don't lose this time for pirated copies of your software, as I assume you aren't taking this person's time to create a license for pirates.

To write something off you have to actually lose the money - writing off is a process to decrease your taxable income by your expenses, unless you're inventing fake expenses (read: performing tax fraud) it doesn't generate a greater amount of money than the expenses.

Re:Git 3.0's upcoming SHA-256 default will be a costly mistake on Thursday October 01, 2026 @01:35PM (#49924649)
Is the argument that there are no benefits to IPv6 for anyone/society because your specific ISP messes it up?
How does restricting the MCP ""user agent"" to only claude and codex and whatever enable Figma to extract value?
Which is what? Because if your solution is "get rid of all C-suite executives", obviously some new person (or some new group) has to be given the final say on decisions in the company and what's to stop them from becoming corrupt or otherwise problematic?
Re:Google ending ChromeOS support two years early on Tuesday September 29, 2026 @10:50AM (#49894330)
It's possible those devices will offer indirect migration paths (e.g. you have to reinstall the OS). While annoying/inconvenient, that would probably still qualify as keeping the promise in my book.
Re:Feds Target AI Critics as "Foreign Agents" on Wednesday September 23, 2026 @11:29PM (#49825892)
For the record I 95% agree with you, but I'd like to try an answer at:

> I haven't seen one convincing model of AI existential risk. Can anyone offer one?

We seem to be heading down this uncomfortable trend of many people using LLM models and anthropomorphising them into properties they don't actually have, like general intelligence and trustworthiness.

So in my opinion the most likely risk here is some underpaid military man that doesn't care about the quality of their work abuses AI for it and that AI hallucinates that nukes are incoming and world war III starts. To be fair this is a fairly low risk, but it's _a_ risk.

Re:Cloudflare Quick Tunnels on Friday September 18, 2026 @11:44AM (#49756083)
I honestly can't tell if you're trolling or this is an HN out of touch moment.

The obvious difference (and thus massive advantage) of the cloudfare product is that it is accessible over the normal internet without needing to install a tor client.

I'm sure that works for some subset of the population where all potential users are already comfortable using Tor; but imagine trying to share your PoC website with the designer/client and you are asking them to install Tor browser.

This isn't black and white, it's a sliding scale. Advertising, menu boards, box art, etc. do show the product in the best light possible and take artistic liberties, but are substantially closer to the real product than an AI that's never seen the product spitting out an image of a burger.

It's reasonable to be annoyed when the menu board _isn't based on the product at all_ and thus is nowhere close to the real thing.

Re:145 Days of Uptime, 56 TiB of Traffic, One Debian Upgrade on Wednesday September 16, 2026 @03:25PM (#49731693)
Agreed - not only does the obvious LLM writing/editing make it hard to read, but the weird stylistic choice to have long sections where every single short sentence is its own line made the read even more grating.

I usually like blog posts about homelabs but came out of this one disappointed.

Re:Norton Neo Browser on Sunday September 13, 2026 @06:42AM (#49682412)
Comparing Norton selling their company (even to a scummy owner like Symantec) to Pétain collaborating with Nazi Germany feels a bit ... extreme ... to me.
I fully agree with you, and I think this trend of glorifying disabilities is cringe - ADHD, autism, etc. are life-altering medical conditions and not desirable.

However, I don't think this specific project is intending to glorify ADHD or help people claim they have it - it's just piggybacking on the idea that telling current-gen LLM models that you have ADHD (allegedly) produces better results for everyone.

It's open source software - it can be baked into pretty much anything given they follow the license terms.
Re:Actively exploited sandbox RCE in all Chromium versions on Friday September 04, 2026 @07:19PM (#49571335)
Does anybody have a source for the "actively exploited" part of the HN title?
Re:Shutting down our public encrypted DNS on Friday September 04, 2026 @04:43PM (#49569997)
Technically yes, in practice the odds your local resolver is validating DNSSEC is slim (and if you're intentionally configured it to do so, switch to a provider that isn't Quad9).

Older »