News for hackers. Stuff that matters.

yellow_lead

> There might be a huge potential for an AI which scrapes your (and my!) data and concludes what I can safely delete, saving the world tons of resources.

Thinking...

User has 15 pictures of his dead mother, deleting 14.

Saved 20 MB! :)

Ah ok, I misunderstood what NAT-PMP was. Thanks for explaining.
Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Monday November 02, 2026 @08:41AM (#50336689)
I was kind of assuming the engineer didn't have full access. But maybe the other factor(s) were additional exploits
> I'm guessing here, but my money would be on freezer ICS systems being made available to the world by accident by way of NAT-PMP on a consumer router.

Why would there be accidental port mappings on their router though? I could maybe see owners setting it up so they could monitor from home, but even that is a bit of a stretch for rural supermarket owners

Re:HackerTube: YouTube built from videos recommended by HN on Sunday November 01, 2026 @12:36AM (#50322744)
For those who live alone, how many of you watch YouTube while eating at home?

If you watch or do something else while eating, what is it?

Re:HackerTube: YouTube built from videos recommended by HN on Sunday November 01, 2026 @12:34AM (#50322732)
I found the "new to you" tab on YouTube, which worked well once or twice. After those initial uses though, I couldn't get good results again
Re:The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes on Saturday October 31, 2026 @09:18AM (#50315937)
Do you have a source? Because I've only been hearing about the laptop.

> Binance has said the incident was a “complex attack” that stemmed from multiple factors.

> Its initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorised withdrawal transactions.

I know it says "multiple factors" here, but there are no other factors I've found.

Re:We Took over ChatGPT Accounts on Saturday October 31, 2026 @08:22AM (#50315474)
> OpenAI confirmed both frontends rejected the reported messages, resolved the issue, and awarded a total bounty of $5,000.

It requires the user to click a link. But I still find this bounty very low. Others may not report them if such a small bounty is given.

Re:Northflank Breached on Friday October 30, 2026 @01:06PM (#50306861)
Azure? Really?
Re:Zero click, silent, remote Android DoS on Thursday October 29, 2026 @04:57AM (#50286227)
> The attack is remote, needs only the victim's number, and shows them nothing.

err, how can I send an SMS like this? Would a mobile network even accept/forward such an SMS?

Little hard reading through the vibe slop here

Crazy to hear. So you look in user's sandboxes, does this comply with GDPR and other regulations?
Re:Deno Is Joining Cloudflare on Friday October 09, 2026 @12:25PM (#50022847)
Remember "choose boring technology"?

I had to evaluate Deno vs. Bun vs. Node for a project two years ago, and chose Node. I think Deno has good ideas but often times these projects cannot reach escape velocity, especially when they're constrained by VC motives.

Re:Web Search API on Monday October 05, 2026 @01:49PM (#49968051)
Reselling APIs seems lazy to me. I wonder if CF plans to make their own provider. That's what I had assumed when I read the title.
> I can think of no stores I'd rather be in, if there's a fire, than that Apple Store.

How about a fire extinguisher store?

Re:Sites in ChatGPT on Friday October 02, 2026 @01:06PM (#49935903)
Funny how the showcased "Tidal house" has unreadable text on an image.

https://tidal-house-retreat.openai.chatgpt.site/

> Quiet cabins. A view of your own.

Yep, they're spy glasses / perv glasses.
Re:We just shipped support for the ugliest part of HTTP: Vary on Wednesday September 23, 2026 @11:21PM (#49825831)
A site I work on serves dynamic language content based on the accept-language header. We do this for some pages and others we redirect to i.e /en/page

But we can't cache those dynamic pages since they vary based on accept language. Maybe with this we can

Re:Meta VR Glasses on Wednesday September 23, 2026 @09:40PM (#49825143)
I might try it for work if it weren't made by meta.
Re:Stripe Withholding Balance of $100000 on Saturday September 19, 2026 @07:37AM (#49765678)
> account payout is frozen

Frozen payouts are different than money being held for longer.

Re:Waymo in Singapore on Friday September 18, 2026 @12:52AM (#49750316)
> Singapore is a controlled economy

Singapore is a mixed economy [1].

[1] https://en.wikipedia.org/wiki/Economy_of_Singapore

How dare employees do something without asking for the full backing of the company's resources. Incredibly unethical!
Both can be true:

1. OpenAI couldn't have solved the problem without the researchers' private data for training.

2. OpenAI models can solve math problems

Re:I resigned from Anthropic today on Wednesday September 09, 2026 @02:25AM (#49621970)
> But this guy? He's timed his exit, waiting for the IPO

What exactly do you mean by this

Re:What is Nueralese and Why is it Bad on Sunday September 06, 2026 @10:59AM (#49587118)
If the model can understand neuralese why can it not convert it into English for monitoring or review purposes?

Or we believe the model will encode secret messages like "don't reveal this information" into the neuralese. But as the author mentions, they could have been doing that all along

> Models can omit key information in their visible thoughts, as this Anthropic 2025 paper shows. We are also worried about steganography

I don't know but I'm basing my assumptions on this article: Teenager’s Gemini mistake locks entire family out of Google accounts [1].

1. https://www.pcworld.com/article/3104521/teenagers-gemini-mis...

You may also be banned by asking "sensitive" or "inappropriate" questions. So normal usage of Google AI products could also be risky.

I don't care if my Claude or OpenAI account is banned, but risking a Google account is different.

Re:What my dad taught me about AI coding in the 90s on Sunday August 30, 2026 @11:46AM (#49499733)
> Two mathematicians at Anthropic studied and validated Claude’s paper, and produced an informal note for experts stating Claude’s proof concisely.

No, experts are still needed

Re:Creepy Crawlies on Sunday August 30, 2026 @11:11AM (#49499369)
High Anubis difficulty is annoying the hell out of me for several sites. And it's starting to not block LLM bots anymore?

> 33% are now solving the math and getting through to the main site — because apparently what we have to offer is worth spending a ton of cycles to calculate the Anubis challenge.

Re:What my dad taught me about AI coding in the 90s on Sunday August 30, 2026 @11:04AM (#49499290)
Is there anything new in this article? Yes, experts use AI better than non-experts for tasks in their domain. See LLMs reward expertise [1] and Terrance Taos conversation with LLM [2].

[1] https://www.seangoedecke.com/llms-reward-expertise/

[2] https://chatgpt.com/share/6a5fdc7a-d6f8-83e8-bbea-8deb42cfed...

Re:Mechanical Turk shutting down September 30 on Thursday August 27, 2026 @09:51AM (#49464922)
Misplaced modifier? Wow

Older »