News for hackers. Stuff that matters.

vsgherzi

For an iPhone or Mac I can accept most things being binded together. I can’t for a car that I expect to be able to keep for a longer period of time. I can buy another phone relatively easily not a car. I feel that this goes for most people.
Why’s NASA’s plan a pipe dream? Seems fine so far especially after the adjustments.
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @12:09AM (#50322618)
I think helsing and or andruil do?
Re:Linode Security Incident on Friday October 30, 2026 @06:55PM (#50311165)
I don’t really have experience running anything like this so this is very much a comment front the peanut gallery but

Is that really the best way to do things? I’m not really sure what an agent offers here does it just look at logs and do actions? I would not really feel safe if that’s my service’s answer to security.

I could see it maybe as a really smart filter to block ips that are sending probing requests but I don’t really see that as a good reason to have an agent be sitting 24/7 looking at logs.

Not sure why this is being downvoted so hard. More than the ui ux experience the damn thing just freezes and needs to be restated regardless of the phone being used. Subaru outsourced their software and it shows.
I don’t think that’s fair. IMO I think they’re concerned that there might be precedent for current for future models to do things untoward to the user. Of course there’s no proof of this or anything I think they’re just preparing in a case where Chinese models do extract or harvest data even when self hosted. Given they have an internet connection of course
But consumer perception matters. When a person engages with a product a social contract is formed. If it’s broken as the case here, I think it’s reasonable that they fight back. They have an expectation is privacy and it wasn’t upheld regardless of what the TOS says or how the tech works. This probably ends with a warning in new sessions like the McDonald’s hot coffee warning.

Note that I’m not arguing if it’s right or wrong idk on that front

not quite, you're missing some crucial points. "Apple should be able to be dramatically more perfect than anyone else in software has managed to be" is off by a lot
1. Much of the software I interact with is bad.

2. I’ve had better luck with Apple software but I’d still categorize it as “bad” relative to the good software I’ve interacted with.

This is a form for software engineers. In the 90’s users accepted things like applications crashing due to lack of memory protection in the OS. We know to expect better.

Again I’m not asking for some alternate reality version of software. I’m asking them to fix clear issues that they do not seem to care about.

Not to mention Apple is a large engineering organization with plenty of talent. The software dosent need to be bug free but I shouldn’t run into as many issues as I do.

Some other fun ones: Finder locking up and refusing to minimize

FaceTime putting me in a call with “testing” when I switch devices

Safari’s extension icon flashing on and off on iOS

Stalling on the lock screen despite me looking directly at the phone to unlock it

To me these are issues that should not make it past the engineers and layers of testing.

I don’t think this is unreasonable do you?

I don’t really think it’s something to agree or not agree on. This is the experience I’ve had as an Apple user. I use their products extensively and like them quite a bit. The issues I’ve seen I deem unacceptable for a company of this caliber. I’m not talking about .6 seconds of load time or absolute customization. I’m talking about FaceTime actually switching when I click the button. Apple Music not leaking memory. Basic usability not niche items.

Now unfortunately apples stuff is usually a cut above other software I’ve used but in my opinion is nowhere near as good as it should be.

I disagree. They deserve the criticism. Among things software is one of the few things we should get correct.

I don’t think anyone is asking for the world I just want software that dosent crash and makes sense to use.

Just a couple weeks ago Apple Music was leaking GBs of memory.

I feel bad for your employer
Re:Epic Games' new vibe-coded launcher is 46% faster than Steam on Wednesday October 14, 2026 @04:13PM (#50094421)
I’m not really sure why this is surprising at all. Isn’t steam based on web tech? If anything I think the comparison should be on features and experience. I don’t think it’s that hard to make something launch faster than steam. I do think it’s hard to make a better experience than steam.
Re:Unikernels were hard. key word: were on Saturday October 10, 2026 @07:20PM (#50038124)
The big thing for me is the liveness is completely gone or at least can be. In a regular box I can at least poke around at the facilities even if the process dies. I don’t think it’s impossible I just think it’s a hard problem I don’t see emphasized enough.
Re:Unikernels were hard. key word: were on Saturday October 10, 2026 @03:25PM (#50036254)
As mentioned before on this topic. What about debug ability? An application overflow now corrupts part of the network stack.

In an oxide episode there were some mentions of reading off data lines but I just don’t think that’s practical.

The reduced attack service is cool but not at the expense of my visibility and liveness of the system

Re:Our $445M Series D on Friday October 09, 2026 @03:37PM (#50025630)
Commenting about the unique compensation to ruin someone’s bingo card :)
This is very cool! What do you use for payment processing? Also what’s the site it love to check it out. Not really into mushrooms but I love a good hand made ecommerce site!
Re:America.gov goes crazy on "play Minecraft" on Wednesday September 30, 2026 @03:38PM (#49913300)
This is the dialog that plays when you beat Minecraft but in the context of the government
Re:The U.S. government launched an AI chatbot on Tuesday September 29, 2026 @12:36PM (#49896125)
It looks pretty good on my end, which parts are breaking for you? I’m just using safari
Re:Containers Are No Longer a Security Boundary on Wednesday September 23, 2026 @01:12PM (#49819333)
Containers on Linux are not and were never a security boundary. Containers are simply namespaces and cgroup. Other operating systems may include more robust facilities.
This is insane ??? Am i understanding this correctly? Official Microsoft media installer was compromised? This seems to be on the level similar to that of the xz attack, no?
Re:Thelio Mira AI Linux Workstation: 192 GB GPU Memory on Friday September 11, 2026 @12:43AM (#49653649)
Taiwan would disagree
I’m not exactly a fan of certain policies being pushed in the US but aligning with China is a bad idea. Chances are if you’re is disagreement with US policies you’re going to be in disagreement with China’s policies even more.
Re:How do I remove the controls from a school Chromebook on Thursday August 27, 2026 @08:23PM (#49472945)
Ultimately you cannot and it would be irresponsible to do so. It is not "your" chromebook it is the school's. In this scenario you'll have to put up with the restrictions or better yet get your own device. If money is tight I recommend going to e waste facilities.

Now I do understand this energy and had a few run ins with things like this in my youth.

If you really want to go through with this, which again, is not right and will get you into trouble.

I recommend looking into chromebook powerwashing. it will reset lots of firmware to stock.

There's not going back and it will completely wipe the system.

you could always do a .get into the vector and handle the error, it doesn't necessarily need to panic.

Thank being said in this case it should be impossible to index out of bounds so maybe a panic is warented.

Re:Apple Silicon's Surprisingly Speedy SIMD on Wednesday August 26, 2026 @10:35PM (#49458860)
Besides Apple who is doing hpc on Apple silicon
I feel like a broken record so appologies if I say the same thing every time.

I don't want a fat std lib. What should or shouldn't go into the std lib? Something like axum might be reasonable for some but not me if I want to target something smaller. Creating a fat std lib also increases the load on a team that's already stressed.

Go can do things like include a web server because that's what the language is for, making web servers.

Personally I'd prefer if the foundation nominate a few projects such as Tokio and take them under their wing. The maintainers would stay the same but the foundation would provide funding and a stricter governing and auditing in the same way as the main language does.

I think sandboxes are just kicking the can down the road. Companies are running scans on crates io, I'd like to see a first party one from the foundation as well, required before a package could fully be published.

Cooldowns are another option but honestly I'd rather them be able to be scanned in some sort of resitrcted format

perhaps cargo add tokio --force-latest

so scanners could grab them but not people

I appreciate them taking steps to fix it but first and foremost is transparency. I think citizens have a right to know if the system is down or not. It may lead them to take different decisions.
That’s true but I think most people’s beef is that most of the funding for Mozilla isn’t going to that work. Wethers that’s the case or no I have no idea, but that’s the general sentiment

Older »