News for hackers. Stuff that matters.

xk3

I think if you ask the median human to count to 100... more often than not you'll hear "One, Two, skip a few, Ninety-Nine, One-Hundred".
Re:UPI: Anatomy of a Payment Transaction on Sunday July 12, 2026 @03:28PM (#48883840)
> intercepted by any MITM

Most things are... even SSH is Trust-on-First-Use. You can really only verify out of band. OTP is quite a bit better than CC or bank account numbers... assuming the OTP is only restricting use (and not giving access to view or modify other account information, etc)

Re:Corrupting a ZFS File on Purpose on Tuesday June 09, 2026 @05:59PM (#48468343)
I've done something similar before with Btrfs

https://gist.github.com/chapmanjacobd/bc6e31c8bc3647e0bcb0c4...

pretty fun!

Re:Making Debian or Fedora persistent live images on Friday June 05, 2026 @01:41PM (#48415822)
None of the comments here are really about the article! Of course one can always turn an ISO into a writable filesystem but this is doing something a bit different. Pretty interesting! Thanks for sharing
Re:Making Debian or Fedora persistent live images on Friday June 05, 2026 @01:35PM (#48415735)
Yeah I tried Kinoite on a couple machines for a couple years and it's so much easier and faster to use normal Fedora for single dev/server machine.

However, I can definitely see some situations where it would work well -- especially with the bootc changes so that is is more of a bootable container, Dockerfiles/Containerfiles driven

Re:Artificial intelligence is not conscious – Ted Chiang on Thursday June 04, 2026 @01:49PM (#48402087)
> a bunch of pipes and valves can be conscious

Billions * billions of pipes and valves can result in emergent behavior that appears conscious while at the same time the sound of a single independent water pipe can moan and sound like human speech or otherwise lifelike and evoke human emotions.

I think LLMs are doing both of these things and often people are more impressed by the independent fixtures (the moan) rather than the emergent behavior. Both the sound and the emergent behavior can be built on purpose or on accident.

I think it helps to look at this through an Information Theory lens. What information is coming into the system (the human or the machine)? What information goes out of the system which is novel? How much of this can be attributed to attempting to parse random noise aka. `Random_Imagination_Engine` vs something else? The number of inventors who come up with a breakthrough idea after mis-hearing someone is surprisingly high.

If we make the distinction between phenomenal consciousness from access consciousness we can see that LLMs clearly can make decisions based on input (A-Consciousness) but they probably don't have raw feelings and sensations (P-Consciousness).

So the solution was to do the same thing that the hackers did??

> "tell the Meta support AI that the account is hacked and ask it to send the verification codes to an arbitrary email address they control"

I agree it seems like they could later use the same flow to get access again but maybe Meta has blocked some location spoofing now

Re:I made a terminal pager on Thursday April 16, 2026 @05:16PM (#47799606)
maybe just check TERM? although to be honest--do you even need a pager if your shell/terminal is nice enough?

I rarely pipe to a pager because kitty/fish/tmux support OSC 133 pretty well and I can press one button to go up to the previous command prompt and another button to go back. I can press a few keys to search the scrollback. It all works seamlessly across SSH sessions too if you set it up right.

    # tmux
    bind-key -T copy-mode C-Home send -X history-top
    bind-key -T copy-mode C-End  send -X history-bottom
    bind -T copy-mode C-Up send-keys -X previous-prompt
    bind -T copy-mode C-Down send-keys -X next-prompt

    # kitty
    map ctrl+up scroll_to_prompt -1
    map ctrl+down scroll_to_prompt 1
    map shift+PAGE_UP scroll_page_up
    map shift+PAGE_DOWN scroll_page_down

    # fish shell config.fish
    if test -z "$SSH_TTY"; and test -z "$TMUX"
        bind pageup "kitty @ scroll-window 1p-"
        bind pagedown "kitty @ scroll-window 1p"
    end
And it also doesn't really apply here... If YOU the individual (who owns your own medical records) agree that the transmission method is safe then HIPAA doesn't apply. HIPAA applies when the OTHER party sends it:

This is called "Individual Right of Access". If you ask a doctor to email your records to your personal Gmail, the doctor must comply. However, they are required to briefly warn you that email is unencrypted and insecure. Once you say, "I understand the risk, send it anyway," the doctor is no longer liable for any breach that happens during transmission.

Re:Project Nomad – Knowledge That Never Goes Offline on Monday March 23, 2026 @06:45PM (#47496168)
Depends how simple you want it:

- 200 line BASH script: https://github.com/Sub-SH/Beacon

- 17k lines of Ansible YAML https://github.com/iiab/iiab

Re:Project Nomad – Knowledge That Never Goes Offline on Monday March 23, 2026 @05:23PM (#47495303)
they're really packing in the whole kitchen sink into video games these days...

https://old.reddit.com/r/ARK/comments/p4xlpr/ark_is_over_200...

Re:Project Nomad – Knowledge That Never Goes Offline on Monday March 23, 2026 @05:20PM (#47495262)
> and probably 8x less compressed than it should be

ZIM uses zstd so it is pretty compressed--but the thing that takes a lot of room is actually the full-text search index built in to each ZIM file.

Unfortunately the UI of kiwix-serve search doesn't take full advantage of this and the search experience kinda sucks...

Have you done anything useful with RDF? Seems like it is just one of those things universities spend money on and it doesn't really do anything

Re:Electricity use of AI coding agents on Tuesday January 20, 2026 @08:48PM (#46700209)
So less energy than a human brain uses...
Re:A Social Filesystem on Monday January 19, 2026 @03:10PM (#46683846)
Makes me think of Syncthing... I wrote a wrapper for it that attempts to make it easier for people to use:

https://github.com/chapmanjacobd/syncweb-py

https://github.com/chapmanjacobd/syncweb-ui

Unfortunately, mesh storage systems are very different conceptually so it is difficult for people to think about permissions and access. You can bolt on something familiar but then it really limits the usefulness of mesh storage and you may as well just be using HTTP servers.

Older »