News for hackers. Stuff that matters.

tomashertus

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Thursday October 29, 2026 @11:06PM (#50299425)
NFT era was the peak of stupidity. I lost a lot of respect for many “smart” people during that time.
Damn, I'm worried whether Russia’s response will prioritise containing the pathogen or containing the embarrassment. You can’t patch a public-health incident with a press release.
Re:OUI-1: world's first model for Generative UI on Tuesday September 08, 2026 @02:05PM (#49614164)
Quite interesting to see no real comments here for 50+ minutes, so I will kick it off.

I'm a huge believer in this future of software. Having the UI layer completely abstracted from pre-written code and dynamically generated "on the fly" based on the context of the user is, I believe, the future.

Just think about the complexity of localization and how many IFs you had to write to solve different language versions, etc. in the old PHP code. A lot of that complexity can simply disappear.

Having dynamically built UI won't only be better for the user experience, it can actually allow us to create much more personalized experiences (I hate when UI teams constantly redesign perfectly fine software).

Interestingly, this will open up a completely new consumption interface, because I believe there will be a UI predefined by the creator of the application (your day 1 user experience) that will then evolve into a more personalized experience over time.

So much room to grow in this space.

Re:Ask HN: What is the job market like? on Thursday June 18, 2026 @02:52PM (#48589797)
Just guessing, Czechia? The Central European software engineering market seems to be softening as well, likely due to second-order effects from the U.S. tech layoffs and decreased demand for remote roles from SV companies.
Move fast and break things.
Re:Claude Design on Friday April 17, 2026 @01:31PM (#47808411)
Are they, though? My thinking is that their roadmap is heavily focused on the SDLC and solving problems related to software development, so their model will be optimized for that domain. That leaves room in the market for models that are specialized in other areas of expertise.
Re:We Left the Cloud on Wednesday April 15, 2026 @06:12PM (#47786012)
These decisions always depend on the lifecycle of the product. I assume that at Basecamp’s level of maturity, where it has reached a certain saturation point and growth and usage are fairly predictable, it makes perfect sense to make a strategic decision like this and commit to a long-term bet.

Regardless, kudos to DHH and team for being so vocal about it, it's a great case study for product teams in similar lifecycle.

Re:Messenger.com is no longer available for messaging on Tuesday February 17, 2026 @03:12PM (#47052622)
This is a bit of a puzzling "announcement". Does anyone have more details on what’s actually changing?

I don’t really use Facebook itself anymore, I’ve mostly kept Messenger for messaging. Curious whether this is an attempt to push users back toward the main feed experience.

The article is surprisingly missing the most important part: a cost comparison. I understand and share the frustration with rising prices and ads creeping into paid plans, but for people who value optionality and broad access, streaming is still meaningfully cheaper than owning content.

In many cases, the price of a single movie is comparable to an entire month of a streaming service, which gives access to thousands of titles. Ownership can make sense if you repeatedly watch a small, fixed catalog over many years, but for most casual or exploratory viewing, the economics still favor streaming.

Re: on Friday November 28, 2025 @03:50PM (#46082651)
Can we remove this? While this war is a horrible tragedy, I’m of that opinion that we should not discuss geopolitics on this site unless it’s directly impacting the core topics we are all here for.
Re:Ask HN: What Are You Working On? (October 2025) on Sunday October 12, 2025 @06:30PM (#45562627)
Mind sharing a link? That sounds really interesting!
It’s too soon to know, but this could make 3-year H-1B renewals hugely problematic. That would be a major blow to the program. I was fortunate to get mine in 2014 without a single problem. There’s no way I’d expect someone to get through this process today. And realistically, most companies aren’t going to pay such a large premium just for a typical software engineer.
It’s ultimately a numbers game. The more malicious seeds are planted, the higher the likelihood that one of them will be pulled into a real-world build pipeline. Platforms like GitHub, NPM, and other open repositories are ideal staging grounds because very few engineering organizations are willing to block traffic from them. That makes them near-perfect hiding spots for malicious content.

And the asymmetry is stark: attackers only need to succeed once. It takes just a single developer installing a compromised package to trigger a breach with potentially massive downstream consequences. So while I agree that quantifying impact is critical, dismissing large-scale seeding campaigns because “no one might have downloaded it” ignores the risk.

This is a surprisingly common issue. In my day-to-day work, we analyze millions to look for malware, and it’s well-known in the security community that attackers frequently leverage “trusted” websites to host and deliver malware as an evasion tactic.

The technique is so pervasive that I did an extensive research on it. In fact, there are several well-funded and widely used applications, some generating millions in revenue, that unknowingly host malware on their infrastructure. In more concerning cases, these platforms are even repurposed as command-and-control servers for data exfiltration. We're increasingly seeing enterprises take the proactive step of blocking traffic to these high-risk domains entirely to strengthen their security posture (e.g. it's completely common to block all traffic from network to Dropbox or other file hosting services).

Time flies... Thanks for the correction, buddy.
But can you Ghibli? I guess NOT! /s
For a decade, since the intro of NodeJS
Javascript was never build for those use-cases. It should have stayed on the browser.
It would be very positive for the entire startup ecosystem if this deal goes through. It would also be a strong signal from the new administration about support of our current startup ecosystem.
Re:1% Equity for Founding Engineers Is BS on Monday February 10, 2025 @01:47PM (#43003654)
> To illustrate this in dollar terms, consider an acquihire exit. At 1% of $10 million, the acquihire nets the Founding Engineer around $100,000, enough to buy a nice Tesla. Meanwhile, the founders net $4.8 million, enough to buy a house in Palo Alto, a small yacht, and two nice Teslas.

I stopped reading after this paragraph. Why to take advice from articles that is presenting delusional scenario about the returns? $100k after tax is good enough for Model 3.

Thank you for the comment! I had no clue that Github has RSS feeds for each repo.

For everyone else, I found this article to be super helpful to understand what kind of RSS functionality is available: https://ronaldsvilcins.com/2020/03/26/rss-feeds-for-your-git...

Re:Ask HN: Where to find domain experts for 1:1 tutoring? on Thursday August 29, 2024 @01:12PM (#41393043)
Wow! I had no clue that this ever existed. I guess it was DOA given its short life-span.
Re:Ask HN: Where to find domain experts for 1:1 tutoring? on Wednesday August 28, 2024 @06:25PM (#41385117)
Heh, a couple of years ago, I had an idea for an "Uber for Experts." It would provide a similar experience to Uber, but instead of a ride, you'd get 30 minutes with a domain expert of your choosing. I never got around to working on it, but there might still be an opportunity for something like this.

Older »