News for hackers. Stuff that matters.

yurishimo

Re:Northflank Breached on Friday October 30, 2026 @03:50PM (#50309252)
How much of your public facing workloads rely on S3 if I can ask?
Re:PHP2Shell: Exploitation Attempts and Remediation Trends on Tuesday October 27, 2026 @10:47AM (#50260220)
What does being from a particular country have to do with a verified CVE?

It’s not like it was their first rodeo and they got lucky. There are lots of competent security companies located in countries all around the world, including ones you may not politically agree with.

Re:CSS-Tricks has a new owner on Monday October 26, 2026 @01:46PM (#50247871)
Awesome! Really happy for Geoff to be afforded the opportunity to bring CSS Tricks back to life.

Just goes to show that you can always make the world a better place with a little bit of luck and a lot of well placed effort. Kudos also to the pressure people put on Digital Ocean to do right by CSS Tricks and kudos to DO for allowing Geoff to take the site independent after their priorities changed.

Re:PHP 8.2.35 on Wednesday October 21, 2026 @01:36PM (#50184678)
Yepp, we're seeing the Debian images now for 8.4.27
Re:Namecheap just seized and disabled all my domains on Sunday October 18, 2026 @04:04PM (#50144912)
I like Cloudflare as a company but I’d be weary about paying for my domains and hosting my DNS with the same publicly traded company with a severe lack of public customer service outside devs getting mad on twitter (guilty!).

If cloudflare gets mad at you (even accidentally) and cancels your account then you lose everything. At least if you separate them, there is a chance that you won’t lose access to both at one time. Given that domains are generally a one time setup after purchase (especially if you use cloudflare for DNS) then I think the minor inconvenience is worth it, personally.

Re:Namecheap just seized and disabled all my domains on Sunday October 18, 2026 @04:00PM (#50144853)
Many people use cloudflare for DNS. Few people use cloudflare for domain name purchases as that feature is much newer.
Re:Tesla Roadster on Friday October 16, 2026 @06:36PM (#50125703)
Isn’t FSD fully allowed in the Netherlands?
Re:Grieving the Loss of Details on Sunday October 11, 2026 @05:12AM (#50041201)
UML is not a terrible idea from a systems architecture point of view but UML is absolutely terrible at describing business logic. And in today’s age of CRUD apps and frameworks, for some devs, business logic is the entire problem to be solved.

What is “valid” input? What is the failure scenario at the boundary for the consumers of your application? How are exceptions in the business handled? All of these are questions that might have a somewhat obvious answer, but if your goal as a business is to do something radically different compared to your competition, the “obvious” answer might be the wrong one.

Re:Big Tech ruined the cloud, so we're renaming ours on Friday October 02, 2026 @11:42AM (#49934783)
The post mentions bare metal so it’s possible they found a partner to collocate with in a few of the big regions globally.

Regardless, they also call out that what they offer is only an enhancement and if you use it as the only way to access your smarthome then you are not really using the software as intended.

We will see in 12 months if the migration was worth it. Nabu Casa is starting to push harder into B2C so we shall see if the product can keep up with the demand.

Re:Pi.dev: You Said No MCP on Wednesday September 30, 2026 @08:14AM (#49907769)
Glad I'm not the only want to find it a bit janky/broken at times. They seem to constantly be pushing updates which is nice, but I treat it mostly as a black box.

Anecdotally, I find the auto compaction (or what I assume is happening when the context magically drops) to be hit or miss. I do like how easy it is to use my work cursor sub and business chat gpt at the same time. Then I use nearly free cursor models for dumb shit and Sol for real problems.

Re:ASML says it sold 'absolutely nothing' in Europe in 2026 on Sunday September 27, 2026 @02:55AM (#49864071)
Where are you seeing that it’s being heavily regulated? The only thing I’ve seen is land procurement but that’s been a European problem for centuries now.

GDPR and other privacy related regulations have existed for basically a decade at this point so it should not be a surprise that companies need to follow those laws.

Anecdotally, there is data center and energy buildout talk here in the Netherlands, a country where land is the top priority for everyone.

Europe might not have a “frontier” lab but this is absolutely investment happening at breakneck pace.

Re:Flock is rolling out a voluntary severance program on Sunday September 20, 2026 @02:46PM (#49778702)
Eh I think it depends on the country a lot too. The average UK citizen? Probably. Even as someone from abroad, I know the British are widely stereotyped as having cameras everywhere.

But Americans are raised from birth with the idea of “freedom” and a camera pointed at you recording your every move is antithetical to that. They somewhat tolerate it in private establishments like malls and restaurants but not in public spaces.

There’s a bit more nuance as to why. It’s not fair to say that the average JS dev is reaching for a package like is-odd/is-even.

Years ago when npm was just getting started there was a lot of experimentation and land grabbing for packages. A few “prolific” developers were pushing these tiny utilities and then using them in their own projects which ended up being required as deps in other projects and then snowballed into is-odd being included in webpack at some point (I think I have that timeline roughly correct).

It’s still a crappy problem for sure but it’s not fair to paint most JS devs with a brush so broad.

Re:Site Is Closed on Sundays on Sunday September 06, 2026 @03:44AM (#49584186)
Honestly, I don’t mind it. Our lives are so commercialized as it is. If I can’t order a new stroller until Monday, I think I will survive.
Re:GPT-6 Astra on OpenRouter on Saturday September 05, 2026 @01:57PM (#49579001)
How much code are you shipping in a day? I find I can pretty comfortable use Sol high most of the day and stay within the 5 hour limit. I’ve got too many meetings to allow me time to write code continuously for an entire day. I usually finish about one ticket a day and then review 1-3 tickets for my colleagues.
Re:.gitignore Everything by Default on Saturday September 05, 2026 @01:47PM (#49578893)
In my opinion this will pretty quickly solve itself though. Accidentally committing keys to the repo potentially ruins your entire week. With a default disallow all list, you might have one bad deploy oopsie and then commit the files.
Re:Japan halves speed limit to 30km/h on all narrow city streets on Thursday September 03, 2026 @07:16AM (#49548561)
There are some loopholes that exist for many european countries. The Netherlands has one cybertruck afaik.
Re:The Harness Is the Thing on Thursday August 27, 2026 @01:16PM (#49468058)
Whats wrong with the font size exactly? Im not a desktop to check it but its look fine? A bit unusual but I wouldn’t say a clamp with a bunch of math is invalid.
Re:AWS Acquires DuckDB on Wednesday August 26, 2026 @09:50AM (#49449166)
How much do you really need for generational wealth? In my opinion, if you're more than 10 years away from retirement and received a surprise $1 million, you're setup for the rest of your life and your children as well assuming they don't immediately blow it all when you die (that's what a good trust should be for).

Assuming historical returns, your money doubles roughly every 7 years, so within the rest of your lifetime, that 1 million should turn into at least 8. That's an extremely comfortable upper-middle-class lifestyle on the interest payments alone. If your children don't spend it all, your grandchildren would easily have private jet money by the time their parents retire.

Re:New Mac mini, featuring M6 and M5 Pro on Wednesday August 26, 2026 @02:26AM (#49444805)
Memory orders mean nothing if the money dries up. Perhaps nvidia can float the entire market for a year or two but if the AI labs don’t start making good on their promises and pony up some cash, everything is going to crash.
Re:Small, native web tricks worth remembering on Friday August 21, 2026 @08:36AM (#49387179)
How is an archived web site supposed to be a good resource on modern html and css development exactly?
Re:HTML Can Do That on Thursday August 20, 2026 @01:50PM (#49377861)
For sure; and it will continue to be an issue as long as we allow old browsers to exist. I’m definitely not saying you shouldn’t have backend validation, just highlighting where the frontend validation provided by the browser is not as universal as it might appear on the surface.

FWIW I find the native date picker to also still be quite poorly performing in practice, despite quite robust browser support. I wish it worked better but for many reasons, I still see plenty of users (or bots?) who submit dates in the wrong format for whatever reason. My current hypothesis is largely focused on password managers though since they will often do whatever they want directly in the value attribute of an input element.

Re:HTML Can Do That on Thursday August 20, 2026 @01:45PM (#49377790)
Where did I say to forgo backend validation? Of course you validate on the backend as well, but the better UX would be to prevent the user from entering a bad value to begin with, assuming it fits within your team’s performance budget.

I’m not advocating for willy-nilly package inclusion, just highlighting a current shortcoming of datalist that is often not mentioned in these sorts of articles.

Re:HTML Can Do That on Thursday August 20, 2026 @01:43PM (#49377763)
Thanks for the vouch! The rest of the article was indeed good but I find a lot of value in hacker news comments precisely because someone comes back to the comments and lays out why what I just read might need a different perspective. If you just want to see cool stuff that a browser can technically do, we are all capable of reading the Chrome dev blog, but we come to HN for a wider perspective. Someone telling a war story about how some little tidbit came back to bite them is also valuable (imo).
Re:Incident with Github.com on Wednesday August 19, 2026 @06:41AM (#49359666)
Except you cannot run a business in Asia with datacenters in the US. The latency is unacceptable.
War… war never changes.
Re:They don't make 'em like Sublime Text anymore on Tuesday August 11, 2026 @01:33AM (#49253757)
Printf works just fine in a lot of languages and domains. Not everyone likes to use a step debugger.
Re:I don't recommend Tailwind CSS on Sunday August 02, 2026 @05:04AM (#49142556)
I have the opposite experience regarding where it’s useful. In large teams , using an atomic css framework provides good guard rails and predictable behavior. I can confidently copy a marketing page or some random thing on the other side of the company and with very minimal tweaking, it will probably work. With normal CSS, the cascade is much more likely to cause subtle shifts in behavior over time as the main stylesheet is extended and modified.

To be clear, I like css and I find the cascade a great tool, but I also have first hand experienced the pain of too many chefs in the frontend styling kitchen and the havoc that seemingly innocent tweaks here or there can wreak on a site and I prefer tailwind for that reason.

Re:I don't recommend Tailwind CSS on Sunday August 02, 2026 @04:57AM (#49142510)
It’s random sure, but it’s also reliably random. This is one of the few footguns that exist in tailwind and luckily it’s super easy to catch. The IDE plugins will give you a warning if you apply multiple classes that manipulate the same attribute and there is no reason you also can’t catch it in CI.

Is it ideal? I guess not, but there are a lot of weird gotchas and footguns in CSS too. Just because they’re in the language doesn’t make them magically more or less of a problem. For a similar weird mental shift, consider adding @starting-style and the native popover open attribute. All the good tutorials online have a warning about cascade order because as a human reading it, it can seem wrong or backwards.

Kevin Powell’s most recent video about animating display: none covers it if you want a concrete example.

Re:Park by Robot at London Gatwick Airport on Sunday July 26, 2026 @03:45PM (#49061713)
The Dutch have a saying, “Je bent niet van suiker” which means “You’re not made of sugar.”

Rain here is a fact of life, similar to the UK or Vancouver, Orlando or the Amazon Rainforest. Everyone who uses a bike for transportation here has a good rain jacket. And to put things in perspective, the normal rain seen in the Netherlands is more of a light drizzle and it generally comes in fits and spurts as moist air is pushed inland from the ocean. If you can afford to wait an hour, the rain is probably stopped.

Also, getting to the airport with a bike in the Netherlands is fine! There are nice protected bicycle lanes, a nice parking garage, good connections to neighboring infrastructure and you can always bring your bike down to the train platform if you need to go a bit further. When you live in a country that prioritizes cycling infrastructure, taking a bike is the practical, cheapest, and often fastest way to reach your destination.

Now to end on a point of more agreement, I agree with you that the demonization of AC in much of Europe is silly. Nobody is upset that in Bangkok or Tokyo that every building has AC. For some reason a certain type of European just doesn’t want to adapt and they will fight tooth and nail to prevent others from utilizing their own economic means in order to stay comfortable in their own homes. My home has solar panels and during the summer they produce much more power than I can utilize at one given moment anyway so if I want to run my AC at 400W during the peak heatwave that should be of no concern to anyone.

Older »