News for hackers. Stuff that matters.

tyingq

Re:The AI cost of JavaScript frameworks on Monday November 02, 2026 @08:49AM (#50336774)
> For “Vanilla,” note that the agent was told to use “vanilla JavaScript or TypeScript with Vite, without a UI framework.” Surprisingly, this underperforms several frameworks, which seems to demonstrate that having some framework can be better than nothing

I'd be curious how it does if you allow it some helpers or "micro frameworks" that are WAY short of a normal framework. Say vanilla js paired with nanostores as an example.

Re:ChatGPT and Codex usage limits merging on Sunday November 01, 2026 @08:26AM (#50325474)
Not convinced those two pages help you in any substantial way to estimate your token burn rate across input/output/caching, etc.

Edit: It's some info, but not much around caching, or what context does vs just what you type in the chat, how reasoning or tool use affects cost/token burn, what control you might have on output tokens, etc.

Re:Anthropic hacked to deliver remote access trojan on Friday October 30, 2026 @03:33PM (#50309070)
OpenVSX does have an option to use OIDC instead of a long lived token for publishing. I get the feeling a lot of people use the forever-good-unless-revoked token though.

https://github.com/eclipse-openvsx/openvsx/wiki/Trusted-Publ...

Edit: Ah, guess it was not open-vsx, but a in-house Cursor marketplace. https://news.ycombinator.com/item?id=50304129

Re:Anthropic hacked to deliver remote access trojan on Friday October 30, 2026 @09:49AM (#50303855)
Vscode(ium) extensions are also pretty weak security wise in general. There's little guardrails on what an extension can do.

On publishing, I do see that the MS marketplace has much better typosquatting and rogue publisher protection. It's unclear to me how much better their SAST/scanning is than OpenVSX. Both have something, but both have been fooled many times, and recently.

Re:Anthropic hacked to deliver remote access trojan on Friday October 30, 2026 @07:38AM (#50302595)
Sort of hoping it's Anthropic and their specific OpenVSX account credentials. As opposed to the worse case of an OpenVSX flaw that's broader. A ton of AI-enabled IDEs are VsCodium forks pointed at OpenVSX...Cursor, Anti Gravity, Kiro, Trae, Devin, etc.
Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @08:55AM (#50288176)
> The demo APK sends a message to the phone itself

That's not what the readme on the repo says.

"Install on a sender device, enter (or auto-fill from an active SIM) the target number, pick the sending SIM, and tap SEND CRASH SMS. Observe on the target..."

No, but it does also include cobra/health for the same period plus 6-12 months of options continuing to vest. Still not generous, but if you're longer tenure and can find another job within the timeframe, it's something.
Re:Roku developer repositories moved from GitHub to GitLab on Saturday October 24, 2026 @03:28PM (#50224304)
Gitlab is terrible at cross-group permissions if you use dedicated or self-hosted. Because gitlab.com is made to keep top level groups separate (separate tenants). Things like cross-group MR approval, use of the built-in artifact repositories, terraform module registry, gitlab components, and so on...is very messy...so many granular cross-group allows you have to turn on.
Re:Docker Is Weird on Thursday October 22, 2026 @08:33PM (#50203040)
Poke around in bocker[1]. For technical people, it makes the same points the article makes in a way that's very clear.

[1] "Docker implemented in around 100 lines of bash" https://github.com/p8952/bocker

Re:An ad-free Android TV on Tuesday October 20, 2026 @07:36AM (#50164737)
It doesn't cover some of the same areas though, like replacing the youtube app with an ad-free alternative.
Re:Gemini 4 Argon on Tuesday October 13, 2026 @09:05PM (#50081131)
Of course, there's Antigravity IDE and Antigravity 2.0. Which are dissimilar.
Locked into their tools though. I happen to be very tied to a IDE centric model (old dog can't learn new tricks) and their Desktop thing is a regression for me. I can use the cli, but it wrecks the muscle memory I have with what I use now.

And Anthropic is somewhat unusual in that 10x more tokens via the subsidized path. I imagine more rugpulls are coming.

Not disputing your point in any way, just noting there's already caveats, and more are likely coming.

Re:Let's Ditch Google (Verb) on Wednesday September 30, 2026 @01:28PM (#49911865)
They are actively transforming it into "ask Gemini" though. Which for me is often wrong. The organic search results are farther down, and if a lucrative term...you have to scroll past ads also. And the quality is not what it once was.

So Google is polluting what it means anyway.

Re:ESP32S3 cluster running 1.58-bit (BitNet) Language model on Tuesday September 29, 2026 @09:23AM (#49892834)
Not exactly what you're describing, and not shipping yet, but a cluster in a box. 8 cores/node, 8 nodes.

https://milkv.io/cluster-08

NYT seems to have found a way to keep the actual article content away from archive.is
Re:Ember-1 on Sunday September 27, 2026 @08:58PM (#49872355)
K3 is cheaper from other providers. $1/$9, though I can't speak to how good those providers are.

https://openrouter.ai/moonshotai/kimi-k3

Re:When did Google get so f-ing weird? on Sunday September 27, 2026 @05:32PM (#49871072)
Had to try it. And it delivers :)

> hes never coming over Dario Amodei

Anthropic CEO Dario Amodei will actually be joining President Donald Trump for a private dinner at the White House tonight, Sunday, September 27, 2026.

CNBC While it is true that he was noticeably absent from the high-profile state dinner held for Chinese President Xi Jinping earlier this week—which was attended by other major tech figures like Elon Musk and Sam Altman—

Re:Replacing Pull Requests with Delta on Friday September 18, 2026 @10:17AM (#49754778)
Does it expose all my "Jesus Christ Claude, why on earth did you do that? Revert that now and do x instead." ?

Meaning, does it prune out some of the not meaningful path to what exists? It's hard to visualize what they actually get to review.

Re:DeepSeek v4.1 Flash Is Now Our Best Hacking Model on Wednesday September 16, 2026 @11:11AM (#49728269)
Apparently they updated it perhaps based on your comment?

> . The accepted runs cost $4.65. Failed attempts and replacement runs increased the complete cost to $5.14.

Re:Google no longer provides direct URLs in search results on Saturday September 12, 2026 @05:55AM (#49670770)
Aside from the list of current concerns that others have covered well...Google is very good at "boiling frogs". That is, rolling out unpopular things in phases.

This could be, for example, step one in the return of AMP, but with a new twist. Where google conveniently returns the content of your website, without directly sending the user to your website. With whatever changes it chooses to make.

Re:Diesel prices in U.S. top $6 a gallon for first time on Friday September 11, 2026 @10:17AM (#49658873)
Genuinely curious...the output drop in refining from Russia is not also a large factor in diesel (and other Petro) price hikes?

Or are you saying the Ukraine drone strikes have not affected the output at a scale where it matters globally?

I meant "easy for a non technical person to use". Things like limewire were dead easy back in the beginning. The isps were not paying attention, so you did not need a VPN, there was no setup or anything it worked right after you downloaded it. So it spread in a socially viral like way very quickly. And was being used by fairly non-technical people without assistance.
They do seem to make it easy to push people over any moral objection to piracy. Often more because of fragmentation than price, but pushing the price makes it easier. And the platforms (Jellyfin as one example) make sharing what you have with family/friends easier now also.

I don't have a great view, though, whether this is even visible to the streaming platforms. I suspect they don't really lose much notable revenue from piracy anymore. While it's matured some recently, it's not as easy as "download limewire".

The Precogs don't see what you're gonna do, they see what you're gonna do if you're not stopped.
Re:Commodore 64 released September 1, 1982 on Wednesday September 02, 2026 @09:08AM (#49535635)
Ah, that was the first one I owned. The little 1520 4 color pen plotter you could get was incredible. Printed on receipt paper. It was also eventually my bridge to the BBS world via the 300 baud vicmodem.
The companies that don't want you using the lite version are waiting for full version to completely go away before blocking the lite one. No sense driving you to that. So, check back in a couple months and see if it's all still good.
Re:I Think the Military Commissary's Freezers Were Hacked on Monday August 31, 2026 @08:33AM (#49508917)
This would be a bigger deal for the commissary locations outside the US, though I see none are on the list. Many of the very junior enlisted make very little money (~2400USD/month), and the low pricing at the commissary helps quite a lot. In the US, you would typically have some affordable off-base options. Overseas, it depends. Many of the locations are remote, or in places where the local groceries are significantly more expensive.
Re:RISC-V is now officially supported by CPython on Sunday August 30, 2026 @04:50AM (#49496908)
There is a Configure type subsystem, so you'll see stuff like this: https://github.com/python/cpython/pull/156277/changes#diff-4...
Re:Recovering Corrupt Zip Files on Saturday August 29, 2026 @08:21PM (#49494521)

  -g
  --grow
Grow (append to) the specified zip archive, instead of creating a new one. If this operation fails, zip attempts to restore the archive to its original state. If the restoration fails, the archive might become corrupted. This option is ignored when there's no existing archive or when at least one archive member must be updated or deleted.

Older »