News for hackers. Stuff that matters.

tyre

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @12:48AM (#50299962)
Sure, but accounting existed before Excel. That doesn't mean excel didn't change things tremendously.
Re:UUIDv7 doesn't have the properties you think it does on Friday October 23, 2026 @04:26PM (#50214841)
It's because it's opaque. Signing up and seeing a page like `/companies/366` unnecessarily leaks company data. Sometime it's a huge deal, sometimes not; not here to litigate that. But it's trivially avoidable.
Re:UUIDv7 doesn't have the properties you think it does on Friday October 23, 2026 @04:24PM (#50214823)
Do you care about users knowing when another business was put into the system (e.g. how long they've been with you"? If yes, v4. If no, v7.

v4 is less efficient but more private.

Re:UUIDv7 doesn't have the properties you think it does on Friday October 23, 2026 @04:22PM (#50214792)
So you have a second, opaque unique identifier for the frontend to fetch? At that point why not just use a single column (UUID)?
Re:UUIDv7 doesn't have the properties you think it does on Friday October 23, 2026 @04:21PM (#50214775)
You don't have to handle collisions and I don't believe that multiple Redditors have experienced this. If they have, it's an issue with the implementation and not UUIDs.

The math is simply not in there favor, by a number so large we cannot conceive of it in our tiny brains.

UUIDs have other useful properties. For example, they don't expose counts (e.g. how many customers you have.) They make URL / resource guessing impossible.

ids in the form of `[prefix]_[uuid stripped of dashes]` is ideal for most use cases. It should be the default the way Postgres is the default. Any deviation have good reason.

Re:PingCap TiDB Leaks on Thursday October 22, 2026 @05:08PM (#50201067)
Let's say you have a remote client connect to a url to the database. You stream a download through there. You close the connection when you're finished.

No commands run.

No persistent access.

Lawyers are amazing.

Edit: Yes, based on the comment by dherls, this is how they're getting around it. Streaming replication is not commands run by the attackers (it's your own system doing the exfiltration!)

Re:Voxtral 3 on Tuesday October 20, 2026 @05:18PM (#50172813)
Not really. You can still put limits on the rate or aggregate dollar amount of refunds or transfers. You can put alerting on spikes of approvals. You can put back pressure that forces manual review. You can have ML models detecting aberrant behavior against historical data.

No one reasonable is saying, “hook up this model to do anything it wants with no other system available.”

Will people fuck it up? Absolutely! But, “the model has to be perfect or it will bankrupt a company” is more cynical than reality.

> Search API finds web pages for a query and returns structured results. It is powered by DeepSeek's in-house search engine.

Looks like they've built (or are building) their own index and return cached results. What you do with that information is up to you. If you want to visit the live page, you'd need to find a way around bot detection.

One reason (not the only one!) people use Anubis is to prevent the endless flood of requests from AI companies. If Deepseek scrapes once every few hours, that helps the website owner with the traffic problem while allowing access.

If they don't want to allow access, my guess is that deepseek's search crawler respects robots.txt but I don't know.

Re:Apple ML Research: Muse Spark Open with MLX on Mac Studio on Saturday October 17, 2026 @09:57AM (#50131239)
They’re not really. They make the things useful for two classes of users: Mac Studio for people running models locally and Siri backed by Gemini for voice interaction.

They’ll likely embed text models more deeply in the future, but the history of “Apple Intelligence” doesn’t give a lot of hope that they’ll nail it.

So they’re not selling shovels (a precursor to making the thing) but products and services to use it.

Re:Muse Spark Open on Friday October 16, 2026 @03:13PM (#50123071)
I think it was ousted by a fast food chicken app fwiw. Couldn’t tell you why.
Re:Muse Spark Open on Friday October 16, 2026 @03:12PM (#50123039)
Have they fully implemented the Gemini-backed Siri?

I will say that I asked Siri some questions recently that I was pretty sure it would fumble and it answered directly.

“Does brown go with charcoal in clothing?”, for example, didn’t fall back to “I’ve found some web results. I can send them to your iPhone”. It actually answered.

It still has random nonsense regularly, but the “ask a question, get an actual answer” is new to me.

Re:Show HN: How Random Are You? on Tuesday October 13, 2026 @03:26PM (#50077238)
There's another version where a stats professor divides people into two groups. One group flips a coin 50 times and writes on a whiteboard the results. The other comes up with 50 results.

They leave the room and when they come back immediately know which is which. Specifically because of the over-alternation that yours mentioned. A string of HHHHHH is exactly as likely as HTHTHT, but people don't intuit that.

Re:Show HN: How Random Are You? on Tuesday October 13, 2026 @03:23PM (#50077194)
It might not be that someone is more random than an RNG, but that the distribution of numbers in your 190 vs. theirs appears more "random". It's a limited sample size.

If yours happened to contain consecutive digits or common ones (ending in zero, significant numbers like 911 or 42 or 69), that would imply less randomness even if it's actually the result of "real" RNG.

Re:Gemini 4 Argon on Tuesday October 13, 2026 @01:47PM (#50075729)
Agreed. It's a fun cultural tidbit but not really a useful benchmark for model capabilities.
Re:Apple HomeView on Tuesday October 13, 2026 @01:44PM (#50075687)
It would be great if this could also be a thermostat. For $300 you could get rid of Nest (etc) while adding all of these other use cases.
Re:Apple HomeView on Tuesday October 13, 2026 @01:39PM (#50075615)
Do very old (like 5+ years old) iPads cost more than $300? Seems like you wouldn't need constant OS updates for their use case but idk.
Re:Apple HomeView on Tuesday October 13, 2026 @01:37PM (#50075580)
Homepods have intercom support.

What's also crazy is that they can detect fire alarms, will alert your iPhone, and then can pipe both sound and voice to the HomePod. It announces that it's going to do so, so it's not a privacy nightmare.

Pretty cool. I didn't know it existed until it happened. (Thankfully nothing bad.)

Re:Apple HomeView on Tuesday October 13, 2026 @01:34PM (#50075529)
It's like a smart thermostat, always plugged in.

(Not exactly the same power feed but you know what I mean)

Re:Typesafe AI raises $870M at $7.5B on Friday October 09, 2026 @06:46PM (#50027534)
Yeah but there are also network effects of using fitness apps. Every engineer I know switches easily between Codex and Claude Code when one gets better than the other.

Jev has been around for a couple weeks. Cost and performance matter more than anything. Staying with an existing provider (the # of people choosing Jev without already having a frontier API key is probably zero?) is way easier than this.

What the hell are we even talking about.

Re:Meta and Microsoft Limit Employee Use of Claude AI Tools on Thursday October 08, 2026 @01:17AM (#50002017)
Models are getting better all the time and either keeping prices or lowering them.

What you could achieve with $10k a year ago vs today is quite different.

Re:Gleam doesn't compile to Erlang source anymore on Tuesday October 06, 2026 @06:38PM (#49985148)
What was your background before Erlang? I came from Ruby, so Elixir felt much more like home than Erlang.
Re:Nobel Prize in Physics goes to Francis Halzen on Tuesday October 06, 2026 @04:00PM (#49983280)
Thank you, I lost my mind, briefly, reading that part.
Re:RIP, vector database on Thursday October 01, 2026 @02:07PM (#49925021)
You mean get rid of Postgres and build bespoke database-esque systems for every use case?

If so, then no. It is not time for that.

Re:CS240 AI Cheating Retrospective on Wednesday September 30, 2026 @06:37PM (#49915372)
Maybe you would have. Maybe you wouldn't have. But they have to design these things for the 90% case. People using things that are far outside what's being taught—in the age of AI—are maybe more likely to be cheating than everyone going above and beyond.

Students are human. Many have been taught to focus on one end goal: a grade. They see a mythical program that knows 6000x more than is taught in this 200 level course; of course they want to use it!

Re:The AI Race Just Got Awkward on Wednesday September 30, 2026 @01:54PM (#49912192)
I mean people said this all the time, but wouldn’t pay for it (as you said), couldn’t recruit for it, and definitely couldn’t retain them.

But so many teams said they wanted to Raise the Bar to infinity and hire a World Class Team.

Re:macOS Golden Gate Is a Buggy Mess on Tuesday September 29, 2026 @12:57PM (#49896446)
They built this brand for hardware, but, personally, I’ve never had this opinion of their software. I mean, being Unix based is better than Windows, but they’ve always been cooking weird UI refreshes or buggy software.

It’s crazy because they have (or had) something like $100bn in cash. Spending 0.5% of that per year on software (development, bug-fixing, performance, and QA) would help tremendously. They’d be insurmountable.

I know “they don’t have to”, but they don’t have to do a lot of things that they do on the hardware side. They choose to.

Re:macOS Golden Gate Is a Buggy Mess on Tuesday September 29, 2026 @12:53PM (#49896388)
iirc these aren’t native menus. Firefox builds their own. I found this out when scratching my head why I couldn’t find “Look Up” in the right click menu in Firefox.
Re:macOS Golden Gate Is a Buggy Mess on Tuesday September 29, 2026 @12:49PM (#49896316)
I had a fun one where clicks stopped registering sometimes and right clicks didn’t register sometimes and my mouse disappeared randomly.

I thought my machine was broken. Turns out this is a known bug with window managers (????????)

The sporadic nature of it had me question my own sanity.

Because a lot of people employed as engineers can’t build classifiers. They’re able to glue libraries and tools together, build UIs, and write APIs, but don’t have the curiosity or creative problem solving to learn and master a new domain. Even when “master” is scoped to something like this.

On top, most EMs wouldn’t take a risk on an exploration of something “unknown” (to them) and couldn’t get buy-in from a PM.

I say this as an EM. Interview hundreds of people and, while, yes, some people don’t interview well, you might be shocked at the level of creative thinking. Even when “creative” is narrowly scoped to “this is a solved problem in a related domain.

Re:Jeeves. Reasoning improves Jev-like decision models on Tuesday September 29, 2026 @10:03AM (#49893487)
What are the costs compared to an ML model?

Older »