News for hackers. Stuff that matters.

wildmXranat

Re:HackerTube: YouTube built from videos recommended by HN on Saturday October 31, 2026 @08:00PM (#50321466)
Nice. This is excessively large so it probably took a while to curate. Well done
Re:mitmproxy adds --emudhra option on Wednesday October 21, 2026 @08:37PM (#50189579)
Someone should've coined this disaster as "QuattroFail" to give it a little panache and international mystery
So much fluff and marketing from every group.

Just give us the damn code to verify things are working since so many have to use stopgap solutions and want to verify them

Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:52AM (#50182041)
Yet it was leaked and I can't see a single "Here's this piece of code you can run to validate the fix actually works"

It's like slop for infosec markters

Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @10:49AM (#50181996)
Did anyone find a reputable source for code which can be used to validate fixes ?
Re:DeepSeek just open-sourced its inference engine on Tuesday October 20, 2026 @09:27AM (#50166078)
"valuations" are irrational and make dot com _valuations_ look like a miniature caricatures
Re:DeepSeek just open-sourced its inference engine on Tuesday October 20, 2026 @08:52AM (#50165601)
When that happens, the chips stocks will have tanked back to sane levels and the doom posting will be about that. That will put us in the 2001 era of post dot com bubble, and the following few years will show us who the winner are
Re:MCP is a fad on Friday January 09, 2026 @07:30AM (#46553178)
We went from "Review any services and their interaction without local system and network" to "Defending local and remote logic created on the fly to mangle the local file system, and why that's a good thing" ...

That's not a productivity boost. That's a rapid increase in cognitive tax you're offloading for later and as you get backlogged in reviewing it, you lose more control over what it does...

Yes, if this selected piece is the best that was available to be used as a showcase, it's immediately off putting in distortion and mangling of pronunciation.
Re:Ask HN: What Are You Working On? (December 2025) on Sunday December 14, 2025 @06:21PM (#46268214)
Nice. When you're done, feel to share in the selfhosted sub on Reddit. There's an ever growing Jellyfin community growing and ex-Plesk users on there.
Re:Developing a food-safe finish for my wooden spoons on Sunday December 14, 2025 @06:06PM (#46268091)
I've been using Osmo oils. This top oil and also their butcher block. Besides what they say that it is food safe, would this be fine for utensils which may get exposure to cooking temperatures ? Whether mixing soup or stir fry ?

https://osmo.ca/product/topoil-high-solid/

Re:Penpot: The Open-Source Figma on Thursday November 27, 2025 @09:36AM (#46069627)
Interesting. No idea how it works, but I'm willing to try this out for a quick test as long as I can self host it
Re:Cloudflare outage on November 18, 2025 post mortem on Tuesday November 18, 2025 @09:24PM (#45975153)
I imagine there's numerous ways to protect against it and protection should've been added by whoever decided on this optimization. In data layer, create some kind of view which never returns more than 200 rows from base table(s). In code, use some kind of iterator. I'm not a Rust guy, just a C defensive practices type of dude, but maybe they just missed a biggie during a code review.
Re:Cloudflare outage on November 18, 2025 post mortem on Tuesday November 18, 2025 @08:31PM (#45974795)
My first question when faced with an unknown error is "What was the last change and when was it promoted?"
Re:Cloudflare outage on November 18, 2025 post mortem on Tuesday November 18, 2025 @08:05PM (#45974578)
Hold up ,- when I used a C or similar language for accessing a database and wanted to clamp down on memory usage to deterministically control how much I want to allocated, I would explicitly limit the number of rows in the query.

There never was an unbound "select all rows from some table" without a "fetch first N rows only" or "limit N"

If you knew that this design is rigid, why not leverage the query to actually do it ?

What am I missing ?

Interesting. In essence, we could equate to paying for the Gemini Advanced or Pro as a way to avoid use of our data and prompts.

https://ai.google.dev/gemini-api/terms#data-use-paid

Well. So what's the plan then? If they were doing this to create more revenue and limit spend, then will they be trouble down the line?
Re:The dark defaults of Microsoft Edge on Saturday March 18, 2023 @11:58AM (#35210139)
Wait until you find out about the trap that is "default page or home page" in Edge... What poop show.

I installed Windows 10 LTSC and am not looking at a regular, retail level Windows ever again. They are shoving distractions and spyware into every app

Re:Upwork just stole $10k from me on Saturday February 25, 2023 @06:58AM (#34935973)
I've often been asked by clients to bypass paying via these platforms. They don't like it as much as the developers. Let's face it, the resolution here of clients now having to withdraw out of Upwork, only to be able to pay you out of bounds is bonkers.
The update broke my install. Update finished and the computer restarted to a blue screen. Next restart didn't work and all I had was a black screen. Windows installation media couldnt help out since the partition was locked for some reason.

In 6 months, I had to restore windows 10 3 times after botched updates.

Re:Canadian doctors reverse severe MS using stem cells on Saturday June 11, 2016 @09:53AM (#11883436)
I live in Canada. I just listened to one of the participants talk about the experience on the radio and I found it just incredible.

In her own words, "She could not feel her body from the neck down. After the long and gruel ordeal procedure, she began to get sensation back. Things like hot and cold water began to be discernible. She no longer needed to hold both railings when walking down stairs in her home, needing a cane to get the mail, etc ..."

She said that it gave her her life back. She said that in short time, she began to get bored with doing the regular, tired routine and actually got a part-time job.

I mean, all that sounds phenomenal.

Re:Oracle's letter to Russian IT companies on Saturday March 19, 2016 @05:35PM (#11320573)
You are right, but there's a way around the argument that allows them to still make a bad decision. It's called management by committee. They don't need to provide a good fit-gap analysis, sound points for the plan or quantify why it's better. You will simply hear that a group of smart people have concluded that it's a "good plan" and that they consulted with Oracle and their own experts who are also absolved of any responsibility since lack-of accountability is built-in to their contract.

It will cost a lot in time and dollars to actually get what you want and you will not want to litigate Oracle.

Re:Oracle's letter to Russian IT companies on Saturday March 19, 2016 @05:25PM (#11320528)
What part of parent has not been your experience ?

I have experience parent's woes and more. That includes having Oracle staff in house doing in-person knowledge transfer. Experience says that Oracle will not provide a qualified person if we call for one as well. Sourcing from their own consultant pool is also a black box crap-shoot.

We also involved Dell and their support team to provide feedback and second opinion on Oracle CBO, query optimization and overall needed knowledge to use their Toad for Oracle performance tools. They literally stopped short of saying: yeah, you need people smarter than us for that.

I still think Oracle is a great product, but it's only fit for large organizations with bottomless budgets. I think we spent something north of $100K on Oracle's E-learning and that was probably the cheapest item on the list.

Re:Nginx: a caching, thumbnailing, reverse proxying image server on Thursday February 18, 2016 @06:53PM (#11130409)
Clever and thanks for sharing. It was a good read.
Re:Polish codebreakers 'cracked Enigma before Alan Turing' on Wednesday February 17, 2016 @05:09AM (#11116755)
The Polish mathematicians were truly great. It was Rajewski and crew who broke the enigma codes.
Re:A Message to Our Customers on Wednesday February 17, 2016 @04:44AM (#11116615)
To all in-love-with-Apple downvoters, please read this Schneier sound analysis of the same type of situation that RIM(Blackberry) has been met with: https://www.schneier.com/blog/archives/2010/08/uae_to_ban_bl...

/quote: "RIM's carefully worded statements about BlackBerry security are designed to make their customers feel better, while giving the company ample room to screw them." /endquote

I have lost enough points on this thread to simply double down on this issue.

This is not a good sign at all. While Google can't compete with Apple on the principle of "not spying on their users". All Apple has to to is to publicize it and then ask for forgiveness from it's users later.

Re:A Message to Our Customers on Wednesday February 17, 2016 @04:29AM (#11116517)
>Also, prediction: if Apple refuses to build a brute forcer, someone else will do it and sell it to the FBI. Just wait and watch.

Just made a downvoted to death comment on this very same thing. This is literally a government creating a market situation.

Re:A Message to Our Customers on Wednesday February 17, 2016 @04:23AM (#11116485)
>They will protect their customers

Where is this stated so that I can claim damages if they break said promise.

I'm sorry, but how can it not be seen that it a really is bad sign that Apple has made this public. They may already have built the backdoor and this is a public stunt or no matter what you do, owning a smart is not that smart.

Re:A Message to Our Customers on Wednesday February 17, 2016 @04:09AM (#11116416)
Exactly. I think OP is a bit fast and loose on the definition of area of interest.

It's not that it's bad if it's this case. It's that is bad if it applies as a built-in backdoor for whenever they feel like using it.

Re:A Message to Our Customers on Wednesday February 17, 2016 @04:06AM (#11116403)
Not getting an iPhone, even secured - Check!

I bet hardware vendors are just salivating at the concept of having to produce thousands of iPhone cracking docking stations.

Older »