News for hackers. Stuff that matters.

ycombinatrix

Buddy, 3 letter agencies don't need these weak keys, they straight up own root CAs.
Web of trust required a lot of work by users and was pretty bad in practice. This isn't that.

This would effectively be the same "root CAs come pre-installed" but they would be notaries rather than root CAs, with a predefined trust policy (maybe minimum of 2 notaries per leaf certificate)

Users would still just see a green lock icon same as before, no action needed.

Re:Ofcom Concedes Defeat in the 4chan Case on Tuesday October 20, 2026 @04:40PM (#50172378)
The rest of them presumably wanted to continue doing business in the UK & did not want to IP-block the entire country.
https://en.wikipedia.org/wiki/Convergence_(SSL)

shame it wasn't adopted. rent seeking CAs would never go for it.

Re:Character.ai files for Chapter 11 bankruptcy on Wednesday October 14, 2026 @06:23PM (#50096293)
Depends on the type of bankruptcy.
Re:The baffling intelligence of a single cell (2024) on Tuesday October 13, 2026 @12:24AM (#50066705)
Wow you weren't kidding. It is really well done.
Re:Fingerprints Are the New Cookies on Sunday October 11, 2026 @10:24PM (#50050574)
There are projects that do this already e.g. https://github.com/lwthiker/curl-impersonate
Re:A single license fee of £100k.00 on Tuesday October 06, 2026 @12:02AM (#49974008)
You can still get arrested for it in Missouri: https://missouriindependent.com/2022/02/11/prosecutor-isnt-p...
Re:Texas city demands $2M for public records on Flock usage on Monday October 05, 2026 @11:56PM (#49973970)
That's such an insane response from the government. Why the hell are they printing, cutting and photocopying emails?
Re:Show HN: Google Maps Scraper MCP on Friday October 02, 2026 @10:09PM (#49940756)
Login with Google? Lmao
Re:Ask HN: Email leaked while traveling abroad? on Friday October 02, 2026 @09:03PM (#49940428)
I don't get spam from a variety of languages.

The only foreign language spam I got was from Pokemon Go after I played it while visiting France & Spain. I received French and Spanish emails from them for years.

Re:192GB Framework Desktop open for pre-order on Friday October 02, 2026 @08:59PM (#49940408)
Wow. Having to disassemble & reassemble your entire laptop for that sounds annoying as hell.
Re:192GB Framework Desktop open for pre-order on Thursday October 01, 2026 @10:58PM (#49929419)
What was the laptop debacle? I know people were upset over sponsoring DHH.
Re:Ask HN: Email leaked while traveling abroad? on Thursday October 01, 2026 @10:45PM (#49929367)
Doesn't explain why the email was in German.
Re:Raspberry Pi blocks changing RAM chips on Monday September 21, 2026 @07:52PM (#49795005)
like what Android shows when the bootloader is unlocked
How did it become sluggish?
Re:IPFS Maintainers Winding Down on Monday August 24, 2026 @01:46PM (#49423387)
developers, not end users
>Anyone can build a custom extension to do anything an extension is allowed to do

Yes, that's why google moved to manifest v3 and extensions can't do as much.

run a redlib instance, bots hit these hard: https://github.com/redlib-org/redlib
No, I saw you take the $5. Good luck convincing the police you didn't.
Re:Show HN: Fonts.Free on Friday July 03, 2026 @02:47AM (#48771694)
Nice. I like the submission page too, adding fonts to Google Fonts is a nightmare.
This whole saga has been insane. New Zealand is a vassal state.
one step at a time
Re:Hyperlinks in Terminal Emulators on Friday March 13, 2026 @09:18PM (#47372286)
Not true. At the very least it can leak your IP address. There's a reason whatsapp & other messaging services have an internal proxy for generating web previews.
Re:UUID package coming to Go standard library on Saturday March 07, 2026 @12:39AM (#47284826)
especially when they don't depend on libc.
Re:Remotely unlocking an encrypted hard disk on Friday March 06, 2026 @11:06AM (#47276740)
I meant "just use dm-verity" as in "don't do full disk encryption"...
Re:Remotely unlocking an encrypted hard disk on Thursday March 05, 2026 @03:43PM (#47267015)
FYI your decryption key can be MITMed during this process by anyone with physical access to the system, which defeats the purpose of encrypting the disk in the first place.

Just use dm-verity for remote servers.

Re:Users fume over Outlook.com email 'carnage' on Wednesday March 04, 2026 @12:45PM (#47251096)
How is it not a disguise? It means you can't block marketing emails without also blocking the legitimate support emails.
How does a DNS lookup work "client side only"?

Older »