News for hackers. Stuff that matters.

waitwhatwhoa

Re:How far behind is each major Chromium browser? on Sunday May 03, 2026 @02:30PM (#47999907)
We did a study of this a few years ago[1] and the code for the instrumentation is available on github[2], the data is dated but you can see a cross section of popular apps and how far behind they were lagging over a 3 year period on page 11 of the pdf. Re: child comment, our main concern in this research was patched vulnerabilities persisting in electron apps and how damaging that could be. Details in the paper :)

1. https://www.usenix.org/system/files/usenixsecurity24-ali.pdf 2. https://github.com/masood/inspectron

Re:Tracking users with favicons, even in incognito mode on Sunday November 16, 2025 @03:59PM (#45948353)
This was fixed after we reported it a few years ago while working on the paper.
Re:Tracking users with favicons, even in incognito mode on Sunday November 16, 2025 @03:59PM (#45948348)
Paper author here, here’s a valid link: https://www.cs.uic.edu/~polakis/papers/favicon.pdf
The STEM OPT _extension_ is an additional year on top of the one year that all graduates get. I believe the article is arguing for getting rid of that extension, not all OPT.
Re:I Went to SQL Injection Court on Wednesday February 26, 2025 @06:24AM (#43182698)
When can we submit witness slips? Is there a mailing list for updates we can join? Good luck!
Re:VitePress 1.0 on Thursday March 21, 2024 @01:04PM (#39781297)
It's been exciting to see Docusaurus [1], VitePress, and Starlight [2] all under very active development, with the first two being React- and Vue-based respectively, and Starlight being built in the Astro Islands "bring your own UI framework" model. Docusaurus ended up feeling a bit too heavyweight and opinionated for my uses, and I've been happy with Starlight so far, with the developer/author experience being very similar to what I've seen during experimentation with VitePress.

[1] https://docusaurus.io/

[2] https://starlight.astro.build/

Previously (including several comments from CF folks including cofounder eastdakota): https://news.ycombinator.com/item?id=37674097
Re:Keystroke timing obfuscation added to SSH(1) on Tuesday August 29, 2023 @09:55AM (#37308008)
Passwords are sent all at once from the client to the server. This feature is for obfuscating your keystroke timing within the encrypted connection.
tldr: the election only happens after significant organizing and demonstrated worker interest in forming a union.

Currently it’s a two step process: get a threshold % of workers to indicate interest in unionizing, then hold an election over all workers to see if a majority want a union. The ruling makes it so that if the company interferes with the election, the NLRB deems that initial interest level sufficient for allowing a union to form and recognizing its authority to collectively bargain on behalf of all covered workers.

This was in 2021; it appears the fire was extinguished by July 11 [1], investigated by Vice later that year [2], and seems to still be being cleaned up by US EPA [3].

1. https://www.ehs.com/2021/07/morris-lithium-battery-fire-high...

2. https://www.vice.com/en/article/m7vj73/everyone-thought-the-...

3. https://www.epa.gov/newsreleases/epa-resumes-cleanup-hazardo...

Re:File picker meme on Friday September 24, 2021 @10:09AM (#28642571)
https://wiki.installgentoo.com/index.php?title=File_Picker_m... Will get you the content without the NSFW go away message.
Re:Signal is having technical difficulties on Friday January 15, 2021 @03:08PM (#25795658)
I am not an accountant or tax attorney, however Signal is a 501c3 so this deduction almost certainly qualifies.
Re:Mozilla’s plan to fix internet privacy on Tuesday February 11, 2020 @09:15AM (#22298598)
There are a few news organizations somehow battling it out to survive without advertising and I applaud them, but most comments like these simply remind me of this sentiment: https://thenib.com/mister-gotcha/
If you want to build a ship, don't drum up people together to collect wood and don't assign them tasks and work, but rather teach them to long for the endless immensity of the sea.

--Antoine de Saint Exupery

Re:Docker 1.12: Now with Built-In Orchestration on Monday June 20, 2016 @02:04PM (#11939848)
At first I was worried that this is yet another Raft implementation, but it seems they're building on etcd's version [1] which should be a win for everyone trying to prove correctness for the various implementations.

1. https://github.com/docker/swarmkit/blob/a78a157ef66adf0978f0...

Re:How I investigated Uber surge pricing in D.C on Wednesday April 20, 2016 @05:54AM (#11533261)
Re:Announcing UberPool on Wednesday August 06, 2014 @07:45AM (#8141974)
Chicago's bike share is very well built out (IMO) and if you're in a neighborhood serviced by it (many low income neighborhoods just aren't deployed at all) you should be no more than two blocks from a station: http://www.divvybikes.com/stations
Re:Show HN: My Internet life on Saturday January 11, 2014 @03:14PM (#7043590)
David - posting duplicate replies will dead-ify all subsequent dupes (I just learned this too).
Re:Samsung posts first ad for Galaxy Gear smartwatch [video] on Friday October 04, 2013 @06:23PM (#6498411)
Most tech ads seem to be in "show, don't tell" mode, which is probably a good approach. I have to say, I like the tack they took, simply explaining up front the features of the watch.

If the watch weren't so ugly and taking your phone out of your pocket so easy, I might even entertain buying one.

To answer your question: build compelling software that requires inbound connectivity. If users (voters, customers, ...) want to use their Internet connection where the server is in the home, the providers will eventually step up and take notice. I hate "let the market decide" as much as the next guy, but I don't quite see a better way to do this. One plug[1] is worth a thousand deleted Google accounts.

1. http://meetplug.com/launch/

Presumably this person was annotating movies with which actors were on screen when, and possibly where in the frame.
Re:WeAreData - London on Sunday July 07, 2013 @11:43AM (#6002271)
Would love to see them do Chicago as it's the "setting"[1] for the game and the city has great data sharing[2].

1. http://www.youtube.com/watch?v=kPYgXvgS6Ww 2. https://data.cityofchicago.org/

Re:Cloudsweeper on Wednesday June 26, 2013 @01:45PM (#5947604)
I'm the faculty member on this research project. I'd be happy to answer any questions in this thread if people have them.
Re:Malibu homeowners foiled by $30K Kickstarter campaign on Monday June 24, 2013 @12:42PM (#5934048)
"some beaches are private" is actually incorrect - all beaches in California are public from the water to the high tide line.
Re:Encoding and Decoding Unicode for Email on Monday June 03, 2013 @09:16PM (#5817135)
You are braver programmers than I - trying to parse my modest sized email archive dug up more encoding issues than you can shake a stick at.

It's kind of like encoding on the web, except no one ever looks at it, everything is inline, and there are just as many ways to get it wrong.

Older »