News for hackers. Stuff that matters.

time4tea

Re:UK to charge universities $1,200 per international student on Tuesday October 27, 2026 @03:13AM (#50255596)
International students have caused a lot of weird effects in uk universities, from people being "encouraged" ti not fail them to keep the income, to required grades being higher for local students, which is a problem in subjects where there is a limited intake, to accommodation pricing jumps, and providers targeting foreign students, meaning less choice for local students. The income has also covered up a lot of the defunding of education by the government. I think there have been a lot of unanticipated secondary effects with the sector encouraging so many.
Re:UUIDv7 doesn't have the properties you think it does on Saturday October 24, 2026 @06:19AM (#50219829)
Uuidv7 is also not so great for preserving privacy - they give away a lot of info about when an activity happened... account id = when you signed up, order id = when you bought a thing etc etc. So, combined with where a thing happened, at a shop say, puts you at a place and specific time = loss of physical safety.
This is great, maybe!

There are lots of factors that feed into this: lots of solar, batteries, more efficiency, improved insulation.

Some others: increase of heat pumps, energy poverty, reduction in industrial energy (both due to good and bad reasons)

Ultimately though, its not about how much energy per capita, its about the sources of energy, and how effectively they are used... my heat pump uses infinity more electricity than my boiler, but far more effectively uses the underlying energy source.

Re:How big is a Git commit? on Sunday October 11, 2026 @11:54AM (#50044601)
du -sh

Human readable, no explanation required.

Re:Beauty in DVD Menus on Thursday October 08, 2026 @06:00PM (#50013005)
Disney - and others - absolutely disgusting behaviour making children watch almost an hour of ads before showing a movie.

The Internet video store gave a much better product.

When you paid for the product, you were exploited.

Re:Making Tailscale Faster on Wednesday September 23, 2026 @05:51PM (#49823085)
Leaves them where they landed. Slop check : yes +++ATH
What does "this is not a pay wall" mean - if I have to give personal information over, that is a price.

Didn't read - too expensive.

Re:What Sun got wrong on Monday September 21, 2026 @05:00PM (#49793364)
First work computer was Sparc IPX, a brief dalliance with HP D and K series, then had various Ultra, and servers were all sorts including E10k then various SunFire, and the Fujitsu Prime Power.

They were quite fun.

But can confirm, buying Sun was PITA.

Re:Diesel prices in U.S. top $6 a gallon for first time on Friday September 11, 2026 @10:44AM (#49659360)
Cheap!! USD6/gallon is about GBP1.17/litre, but actual price in UK is GBP1.97/litre
Re:Is it safe to call print in a Python signal handler? on Sunday August 30, 2026 @04:23AM (#49496784)
Betteridge
Re:OTel Isn't Going Well (and I Made a Spreadsheet About It) on Saturday August 22, 2026 @06:10AM (#49398242)
Its a shame that the various implementations are pretty horrible. Global state, static methods etc etc.

If you get rid of that, and just pass dependencies around, create some appropriate local abstraction around them.. the tooling, be it datadog or honeycomb does a great job making it useful. Can't really say the same for grafana, but ymmv - depending on budget

Seems like a shell company set up in January 2026 - never traded before.

How could they be getting loads of NHS contracts?

Will be interesting to see how it works out.

Re:GIMP Development Update on Monday August 17, 2026 @07:23AM (#49329215)
Zipped xml i wouldn't tbh. Its just not a great random access container. Compressed xml in a sqlite? Sure.
You dont know immediately if something that superficially seems the same actually is.

Copy and paste once is fine, twice, not so much.

Often I've seen two totally different things exist in one bit of code, no overlap!

Premature generification is bad, and leads the developer to believe that two things are the same, making it harder to see they are not.

Also, can make it much harder to see that a different abstraction would give a cleaner outcome....

Ax102-u

People seem to set their money on fire?

Re:SQL patterns I use to catch transaction fraud on Saturday May 16, 2026 @09:42AM (#48160207)
Well, my point was that maybe it actually isnt "to get more people to give to charity", maybe its actually something else.

Its actually very easy to give £5/month direct to a charity. Takes about 2 minutes, just gotta do it.

Re:SQL patterns I use to catch transaction fraud on Saturday May 16, 2026 @04:43AM (#48158207)
Ive always suspected that this is all of a tax dodge, a money spinner, and a pr exercise "we gave xxx to charity" - no, your customers did.

Just set up a direct debit to your favourite charity.

Yup, this works so nice.

Using traefik or caddy as proxy.

Docker context for remote access - over Internet or vpn, whatever.

Swarm-cronjob for scheduled things.

Labels for things that need to run in particular places.

So easy.

Personally, k8s is fine, but its an abstraction for building a service architecture, not the thing an end user (developer) should ever use. If you are in a big company and you are using helm or k8s yaml files to roll things out, your infra or platform teams have missed something out.. building the platform!

Website was too long.

ScrumMaster - a qualification you cannot fail. (Pls pay fee)

Ultimately big company look for things to help them sort their terrible product and software processes.

The whole point of agile, its that you don't know!

If you are SaFE, or 4 week sprints.. you are in management imposed bs.

Your company is a about to be eaten.

I mean, sure.

But what about allowing user inputs in trusted fields,

Or allowing switching environments per request, on inputs from users

Or allowing requests in a user context to access storage from another

Or storing everything in plaintext on a node that everything can access

Or not validating user inputs

Or...

Its not a success story.

Re:What Async Promised and What It Delivered on Saturday April 25, 2026 @04:22PM (#47904269)
Ah yeah, you are right. It was easy to miss, as it was ~30 words in a massive article.
Re:What Async Promised and What It Delivered on Saturday April 25, 2026 @03:29PM (#47903876)
No mention of JVM.. which is a bit odd as recently is kinda solved this problem. Sure, not all use cases, but a lot.

It uses N:M threading model - where N virtual threads are mapped to M system threads and its all hidden away from you.

All the other languages just leak their abstractions to you, java quietly doesn't.

Sure, java is kinda ugly language, you can use a different JVM language, all good.

Don't get me wrong, love python, rust, dart etc, but JVM is nice for this.

Re:Discret 11, the French TV encryption of the 80s on Saturday April 25, 2026 @03:01PM (#47903679)
Super interesting article.

Didn't operate for long? 1984-1995 - its long enough. Still remember seeing those scrambled programs in France.

At the time in UK, lets say 87-92, the concept of paid tv over the air was incredible. Satellite existed, but wasn't very prevalent.

Carbon offsetting is a nonsense.

Any company that uses it, is doing nothing other than buying a grant to pollute.

So hard to read that article, with all the pop ups, scroll hijacks, and back button grabbing (soon to be illegal)

Why do they try to hide actual content with hateful tech?

Anyhow, no way I would give that company money.

Re:Tell HN: GitHub Apps – Private key is not private on Saturday April 18, 2026 @09:22AM (#47815717)
Hmm, not sure - the entire point of this sort of thing is that nobody should ever have your private key material. Whether they say they discard it is immaterial, they have had it, so they could use it, and then as far as everyone is concerned, they are you.

Because the key is sent via the web, anyone in the way can see it. In lots of companies, trusts are manipulated so that the content is visible to intermediate proxies.

With a private key that has been given to you by somebody else, it is possible to repudiate any transaction that was made with the key. Its not so much as they could skip any security - its that if they have the key, they don't have to.

keys are protection from anyone, and an audit trail isn't useful when its possible to forge/repudiate literally anything.

imagine if your card pin was also written down in the card factory - you'd be suspicious that anyone can withdraw money from your account - and the bank would say 'ah but only you know it'. In fact this did happen - the bank was only issuing 3 different pin numbers.

Re:Tell HN: GitHub Apps – Private key is not private on Saturday April 18, 2026 @07:40AM (#47815101)
When you create an app in GitHub - you are required to create a private key so that you can sign requests on behalf of your app.

Sounds reasonable.

However... to create the private key, they require you to download the private key from them. Which means they have it. So ANY APP on GitHub can be impersonated by GitHub as they have the key material for every app... so what is the point?

Am I losing my mind?

edit: i can't edit the link - it should be https://github.com/settings/apps

Re:Even "cat readme.txt" is not safe on Saturday April 18, 2026 @02:25AM (#47813598)
See also 2600Hz...

Older »