News for hackers. Stuff that matters.

wtch98

People who know the cost of everything and the value of nothing.

That's fine when they are accountants, it's important to tell the decision makers the costs. The decision makers know the value.

The problem is when the decision makers don't know the value.

$480k base. Lets assume you're the only income but still have to pay childcare (single parent)

Take home $22k a month

$10k on a swanky place like

https://www.zillow.com/apartments/san-francisco-ca/490-avenu...

or

https://www.zillow.com/homedetails/727-Moraga-St-San-Francis...

$3k on childcare https://familychildcaresf.com/child-care-san-francisco/

Leaving $9k a month

Re:WTF Ubuntu? on Monday November 02, 2026 @04:39PM (#50344186)
No this vulnerability is about IP Options, not MPTCP.
Re:WTF Ubuntu? on Monday November 02, 2026 @04:35PM (#50344144)
Redhat didn't release a patch until yesterday, so no doubt the same applies to them?
Re:WTF Ubuntu? on Monday November 02, 2026 @04:33PM (#50344106)
> It sounds like iphones use mptcp in the wild, which use tcp options, so im not sure how true this is.

There's so much commentary misunderstanding what ip-options are that I find it difficult to make any judgement call. I do know that I've got routers on 5 continents with hundreds of public IPs and none have triggered an IP packet with an ip-option arriving on the WAN side, or seen on the internal side other than ones I've created with scapy trying to reproduce this. I also can't get these packets to traverse any internet paths I've tried.

A company might, but if it's a large company, nobody in that company will have actual ownership, it will always be someone elses responsibility.
The US seems to make the same mistakes in the middle east time after time.
The company installing the fridges did. The person who is an expert in food chain logistics bought the shiny fridges and was enamoured by the real business benefits they had of centralised monitoring and alarming of their fridges.
It's not insecure code that's the problem, it's an insecure system, driven by project managers, information security departments, and box ticking.

For large companies, infosec will never allow some POS IOT device on their network without a 50 page form and large amounts of funding. The business however needs this to happen for whatever goals they have.

So the project manager goes back to the supplier, who recommend sticking it on a 4g simcard with a public IP address, and "install this app" to manage it

The project manger finishes the project, gives the app to the store manager, and rides off into the sunset, and nobody actually owns the equipment or even knows its there.

For small companies they likely don't have a technology provider at all, and just use the ISP's router.

Re:US tech stocks see sharp falls over AI cost fears on Monday November 02, 2026 @05:22AM (#50335050)
Any older models are better in many ways. Won't surprise me when we reach a point that new LLM models start collapsing in quality (while at the same time probably becoming better for the adtech industry), and older models are the premium.
Re:Patrick Stewart taught us what good men do with power on Sunday November 01, 2026 @02:02PM (#50328577)
Not unique to politicians, any large organisation who doesn't have a strong single leader sees this. It's nothing new either, with the Peter principle, the Dilbert Principle, even the Gervais Principle, recognising the symptoms.
Re:Frontier Airlines Likely Breached on Sunday November 01, 2026 @01:58PM (#50328523)
Jaguar-LandRover had a cyber attack which shut them down for months and nearly caused them to go bankrupt

https://en.wikipedia.org/wiki/Jaguar_Land_Rover_cyberattack

Of course they then blame "state sponsored" attackers.

https://www.techdigest.tv/2026/10/former-minister-confirms-j...

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:57PM (#50320153)
I blocked packets arriving externally on my firewall with ip-options a couple of days ago. Firewall rule has zero hits, and I've got a very open ISP (andrews+arnold), if I want I can host SMTP, DNS, whatever
Re:US tech stocks see sharp falls over AI cost fears on Friday October 30, 2026 @01:53PM (#50307656)
Google search was a breath of fresh air 25 years ago, it became shit. AI will go the same way.
Re:US tech stocks see sharp falls over AI cost fears on Friday October 30, 2026 @01:49PM (#50307573)
2 years ago people were raving how great AI was.
Re:If IPv4 Were Land on Thursday October 29, 2026 @11:49AM (#50290997)
Most people don't care about a private IP, which is why they cost about $20-$25 each (which would be about $2 a year to finance). I've used Airtel in the past and they certainly offer a dedicated IP. Currently I'm with TATA and Vodafone in India

Indeed a shared IP is arguably a benefit in that it makes fingerprinting harder.

If your ISP had customers who were interested it could spend $150k on a /19 block giving 8000 IPv4 addresses and charge an extra ₹100 a month for them and after two years it would be in profit.

In fact I think Jio and Airtel offer static IPs for residential use for something like ₹300 a month, which given how cheap IPv4 addresses are is a massive money spinner, but I have't spoken to anyone living in India about ISPs for a couple of years.

Or I can (and do) use something good. That doesn't change the fact atlasian no longer support on prem jira.
We've just moved from on-prem (protected by MTLS) to on-cloud because of this. I now know why everyone hates jira. The cloud version is so much worse
Only if that battery was connected to 500GW of inverter capacity (and the grid was a spherical chicken -- enough intertia-replacement devices to keep timing working, enough capacity to link supply with demand etc)
Re:Viral Polls Are Not Representative Polls on Tuesday October 27, 2026 @11:22AM (#50260712)
Most professional pollers do a good job.

When they are 3 or 4 percentage points off they are ripped to shreds.

The polls for the recent Brazil elections were about 49% for Lula, the result was 52%, that's a 3 point difference, not a massive error margin. With brexit the polling pointed to about 52% for remain, actual result was 48%.

But those are proper polling companies, not worthless online ones.

> Can I scrape all GPL source code from github. Then use the code commercially and then say so what, they made their source code available to download?

Yes, that's the whole point of the GPL. Use it however you want, but don't restrict the next person

I trust my ISP far more than I trust bigtech. The downside of connecting from my ISP is that the site I connect to can fingerprint me trivially from the IP range
If you control the connecting device why not use MTLS?
All my business traffic comes from either our own AS, or from ZScaler's AS

Do many companies really use azure etc rather than dedicated services like zscaler?

And all sorts of companies, from small businesses to multinationals, and a fair few people at home, paid it.

Businesses were quite happy to spend $5k on technology for a worker if it makes things better, why wouldn't they today.

Re:OLED iPad Mini on Monday October 26, 2026 @12:36PM (#50246679)
Make it 3/4 an inch narrower and an inch shorter and I'll get one
In the 90s we'd pay $5k a head (inflation adjusted - about $2k then) for a 486 with 80MB of disk space
How does that work when the official strategy is "Socialise the losses, privatise the profits"
Re:Why Gopher in 2026? on Sunday October 25, 2026 @12:25PM (#50233270)
It's worth something, but surely nowhere near enough to justify the $19b purchase 12 years ago, which if extended in line with meta's share price would mean it would be worth about $200b today
Re:Online censorship is crushing indie webcomics on Sunday October 25, 2026 @07:03AM (#50230347)
Can you show the horrors of Nestle and the 10 million babies they killed, not for ideology, just for higher dividends.

https://www.nber.org/system/files/working_papers/w24452/w244...

Older »