News for hackers. Stuff that matters.

zoeysmithe

Have you read CSWP50? Its not exactly written on the 3rd grade level. I think its a pretty good compromise between something only your IT department can understand and what a small employer needs to know. If anything, it leans too technical and verbose.

Not only are there links to go deeper into each subject matter but also a part telling the employer how to hire help if they need cybersecurity help and with a link to the "Small Business Cybersecurity Support Programs Finder" directory. Ideally they should be asking around in the small business community for a local vendor, but this document does a lot of things right.

I think this is an excellent document for small business and doesn't really talk down to them.

I feel like this reflects the movie Her (2013). This solves the input problem better than speaking out in public, especially on a crowded train.

I do think seeing an email on a smartglasses lens is better than hearing it read to you. So I can see this as just an input device, but the outputs don't have to be sound back to you.

I'm guessing they are situating themselves to be bought or at least licensed out to the big smartglasses players.

This isn't any different than getting your lenses put in a VR set. The price of new lenses from an online glasses store isn't too bad, especially if you can afford $500 smart glasses, and now you don't have to worry about a big bulky thing that may fall off your existing glasses.
Re:We halved DNS build delay and cut memory use by 85% on Monday November 02, 2026 @12:12PM (#50340027)
I can see 15% changing daily. There's all sorts of stuff being done with dkim and other anti-spam technologies that require a txt or cname or whatever change in DNS. Companies are always whitelisting vendors and mass mailers to send as them, validating domain ownership, adding new sub-domains, changing things for Exchange/365/Google/AI stuff, changing things due to a security audit, etc.

I imagine a renewal is a change event to, at least change the expiry, and renewals are constantly happening.

The USSR turned a largely illiterate Russian population to a literate one very quickly. It achieved one of the fastest mass educational transformations in history. In 1917-1920 it went from inheriting a population with 25% literacy to then having 80-90% literacy by 1929-1939.

Not to mention, Proletarianization of Universities (Rabfaks), which accelerated prep schools attached to universities designed specifically for adult factory workers and peasants who lacked formal secondary education. They also built what were essentially trade school-like institutes to rapidly educate people on medical, pedagogical, and polytechnical studies.

I mean, it also had an academic hardcore side to get star students into positions of power and influence, but all successful societies have that. When we see these very same systems in leading capitalist systems like the US, UK, Germany, Japan, or Korea we applaud them for recognizing and empowering talent. Socialist societies are instead somehow criticized for this.

If anything the Soviets were far more serious about educating everyone than their western peers and one of the reasons they become a world power so quickly.

Re:Ask HN: Which TV do you recommend for privacy? on Sunday November 01, 2026 @07:01PM (#50331282)
While practical advice its just odd to me there's no major legislation or movement or activism or boycotts about this. We just accept our TV might be silently recording everything we say in our home and the fix is to not plug it into the internet.
Re:Tracks along the longest drive on another world on Friday October 30, 2026 @01:59PM (#50307755)
This is interesting and I googled a bunch of this.

The helicopter base station is an off the shelf snapdragon 801 cpu with 4 cores. By comparision the CPU in the rover is a BAE RAD750 processor at 200hz, essentially a radiation hardened 1998 G3 imac chip. They run calculations on each snapdragon core and if there is a consensus take the value. I don't know how their voting system works. If core 1 and 2 agree and 3 and 4 don't, does it just agree with core 1 and 2's consensus if 3 and 4 don't match? Or does it was 3 minimum and re-runs the calculation.

It also performs aggressive memory scrubbing. This sounds like software ECC by performing various memory checksums by comparing values to the flash drive's files. So if script.sh on disk doesn't match script.sh in memory, they know the memory is bad. I guess they are assuming flash will always be correct, which is interesting, but in space maybe its just a 'pick a lesser evil' thing because flash can also be corrupted by radiation. They store critical files with triple redundancy on the flash, so the flash sounds pretty rugged here. There is also a secondary radiation hardened flash storage 'golden image' the unprotected snapdragon's running flash can be compared to.

Then the software identifies damaged memory addresses and blocks them. One example is the software found 25 corrupted bits in its 1gb memory and has marked them as unusable. I'm guessing over time more and more bits will be unusable as radiation permanently destroys those transistors. So its a bit of a race against the clock. Better to use the base station until it can't be used anymore.

Vitamin D does about a million beneficial things. It is not just about secondary effects of sun exposure. Most D supplementation is done purely via pills and the benefits come without sunlight at all.

I think you may be referring to how D isn't a primary treatment for SAD. It certainly doesn't hurt to get more D in the winter for a lot of other reasons, but SAD is primarily treated via light boxes or anti-depressants.

That being said, vitamin D levels are slowly becoming the new "have you thought about losing some weight" in medicine. Being low on it isn't great, but its not the cause of the health problems people complain about.

Re:Oldest GUI application that still runs on Windows 11 on Monday October 26, 2026 @07:15PM (#50252531)
I'm so sorry for your loss, but now you have to tell us her high score!
Re:Show HN: Steal My Bitcoin on Saturday October 24, 2026 @05:27PM (#50225515)
" All traffic is logged."

For $500 he can look in the logs and find all manner of new exploits, or new deviations of the existing ones, he can then sell for thousands. Clever business model lol

These projects would be more interesting and ethical if the current and historical logs were instantly put up somewhere public in real-time for anyone to observe.

Regardless, I'm guessing the smart hackers aren't going to bother.

Re:Job Loss and Cortisone Mania on Friday October 23, 2026 @11:21AM (#50210562)
People look at Athens and Rome as some ideal. Labor there was mostly slaves. I don't think we fully appreciate how burdensome labor is and how that's the main motivation for people to offload it to the working class and make themselves the capital owning class. The American dream is being the boss or independently wealthy investor, not the best math teacher in your town.
Re:Job Loss and Cortisone Mania on Friday October 23, 2026 @10:26AM (#50209641)
Isnt this the human condition and fundamental to our species and everything about us? People in the past weren't fulfilled doing back-breaking farm labor or out hunting all day hoping to catch a meal and knowing if you don't catch a meal a few days in a row you'll be too weak to catch anymore.

Ignoring art with patrons which is a tiny percent of all art made, people just did things at home quietly. They painted, drew, told stories, knit, crocheted, etc. Even patron-led artists just made what their patrons wanted, namely all the famous religious art, which I imagine felt like unfulfilling work anyway.

What we like, that is to say gets things like our dopamine flowing, tends to tie in well with the idea of not being compelled to do it. Someone writing copy at work to further enrich the capital owning class and to pay their bills is very different than someone writing short stories in the evening after work.

Removing the rent-seeking middle-man class generally brings in savings. Same with healthcare.

Also the "refs" should be in charge. That is to say the working class are the refs and they should be able to build infrastructure without the capital owning class inserting itself as a rent-seeker between them and these services.

Its naive to think that removing the rent-seeking middle-man class won't lead to savings. Same with private healthcare costs vs more socialized or single-payer systems.
Generally that's not true. Its weird people feel like they must mention any exception. Its the same as "I know someone who lived to their 90s and smoked everyday, so what's wrong with smoking?" People are aware exceptions exist and it doesn't really add anything to conversation to keep bringing them up.
Re:Docker Is Weird on Thursday October 22, 2026 @10:28PM (#50203803)
In the end, how were you able to monetize Docker?
Re:Most advice is right for the person giving it on Wednesday October 21, 2026 @11:45AM (#50182941)
This ignores how food today isn't much like food of the past. It has all manner of added sugars and things to make it more marketable, hence higher profits, but also causes over-eating. Snack culture is pretty much an attempt to make food as addictive as possible, and many of those methods are in 'regular' food too.

Not everyone knows this and many who do can't afford an expensive farm to table whole foods diet.

Now toss in car culture and the suburban model and a culture very strongly against any sort of socialized commons like public trans and the little exercise they otherwise would get isn't available anymore. I live in a walkable neighborhood and take public trans, I know my health would be much worse if I didn't get all those steps, fresh air, sense of community, etc in everyday.

Pretty much everything Americans do is wrong when it comes to food, diet, walkable communities, and transportation. What we need to fix this is not putting everyone on ozempic, but a frank look at how our society is organized and figuring out ways to move to a saner society.

Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @11:19AM (#50182515)
php RCE's are a big deal. So much of public facing stuff is drupal or wordpress and heaven knows all the places php is being used. Think embedded systems and appliances and in turn-key software.

I don't know why php is impossible to harden, but its a security minefield, and if there is an RCE then its trivial to attack because so many of these systems are public facing. I veto any php based applications just over this.

Re:DeepSeek just open-sourced its inference engine on Tuesday October 20, 2026 @08:11AM (#50165120)
This is just like linux and the larger open source movement. It liberates closed source code that should be open. In the future we will look back at this like we do the start of linux.

Treating AI like microsoft office subscriptions is really the losing model, at least in the long run.

Re:Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD on Friday October 16, 2026 @01:28PM (#50121513)
I think there's this cultural bias about the 'boy genius open source coder' that of course isn't true at all. Open source code is at the same quality as corporate written closed source code, in general. There have been studies on this and open vs closed source code isn't very different in terms of defects and exploits.

The problem is the people most willing to buy into this cargo cult mentality are techies, so tech forums are the last place to really have this conversation based on facts. Hence why your comment is barely visible here due to its low karma.

Re:Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD on Friday October 16, 2026 @01:22PM (#50121401)
I feel like this is the elephant in the room. People keep acting surprised these large codebases are full of bugs and exploits. C isn't a safe language and moving to safe languages is going to be the only lasting solution.
I have an old reddit account with a lot of karma. I once got an offer for it, I believe around $2,000. Maybe that offer was a scam, but people seem to be contacted to buy their accounts. Its incredible to me how much this is being done by deep pocketed marketers, and I imagine botnet operators working for heaven knows who. This something not talked about much but buying up and re-branding accounts with established viewership or high-karma happens a lot.

I have seen it politically and part of shady marking. I read the girlsgamer sub on reddit and I remember a big influx of "I'm a woman and I support (current game with sexist elements)." Back then you could see everyone's post and comment history. You could see these accounts went quiet a year or two or three ago and their history was very male coded, then came back on-line recently pushing culture-war narratives and describing themselves very differently than their original posts and comments.

I also saw the same thing with some suspicious right-wing posts on some political subs I'm on. Just an old account that had little to no political posting history suddenly coming alive and posting non-stop politics.

I find it interesting and suspicious reddit only started allowing hidden profiles after this and when people started pointing this out.

I think its safe to say all social media is badly compromised and gamed by monied interests.

Re:I Love Software Rendering on Friday October 16, 2026 @11:00AM (#50119205)
CPUs from that era were single core and pretty slow. They had to do everything like game logic, graphics, sound, etc all at once, so it was often resource starved. Sound took some resources, sometimes significant depending on the sound and what else the cpu was doing, unless it was a really simple sound (think NES style sound). Moving that to a dedicated sound card meant the cpu didn't have to worry about sound anymore.

Sound, like a lot of things, could be seen as a peripheral and a lot of peripherals back then needed their own cpu to perform well. One interesting fact I recently learned is the commodore 64 was so resource starved, the external floppy drive you could buy had its own 6502, just like the C64 did as its main processor. It just had to off-load that to another cpu because its own cpu was too busy to reliably run a disk drive. There are other reasons for this like commodore's experience in drives previously was this kind of architecture so they went with what they knew, but its a bit interesting to know your floppy drive was essentially another C64 with its own commodore OS and ram and 6502.

Re:I Love Software Rendering on Friday October 16, 2026 @10:56AM (#50119148)
Its so interesting to me that back then we would have died for the graphics we have today, and now this retro look is being appreciated. I mean, it definitely has an aesthetic but its generally unappealing. I guess nothing is immune to nostalgia and pining for being at the age when we had less responsibilities and life seemed easier.
The 6502 can do wireframe and pseudo-3D. 3D has a lot of different types and levels, but prior to this there already wireframe and pseudo-3D products out there.

NESGlider was a wireframe demo. Of course very impressive technically but just a tech demo. The 6502 chip spent almost 100% of its processing power just calculating the 3D lines, leaving very little room for smooth gameplay, AI, or filled-in polygons

One thing I find really interesting is how the move from industrial society to information society involved such small teams for new products. Look at the huge teams needed to make a new ship design or airplane or even things like washers and dryers and such. Its a lot of different roles. Some of these projects had hundreds if not thousands of people involved.

Meanwhile, some of our most amazing software came from groups under 150 people. The original Macintosh was just 125 people. The NES was a core team of 4 to 5 engineers. The original iPhone team was 200 people. The original Amiga team was 30 people. Windows 1.0 started with 13 people. Windows NT started with 12 people. Microsoft Excel was originally 5-7 people. Google launched with six people and its 1999 staffing level was around 40 people. Some classic video games from the 80s were made by 2 or 3 people, often just 1 person. A lot of 90s games had teams of 5-30 people.

You could drive past a sleepy office park with a tiny office and inside would be 50 people who would change our software world significantly. I find that really interesting and romanticized a bit.

Re:Whatever became of holography? (2011) on Sunday October 11, 2026 @08:46PM (#50049856)
They always felt gimmicky to me, like something out of a kid's museum, and I imagine I'm not the only one.

Its this odd often blurry and hard to see thing that certainly has interesting aspects but is not something you can create easily at home, unlike a photograph. Then the world changed and mobile devices ruled and everyone had a good camera sensor in their pocket, TVs were thinner and higher resolution than ever, games started looking amazing, etc and there really wasn't any room for less practical things like holograms.

I think its one of those things we just weirdly romanticize like a car that is also a boat or a jetpack, but in reality has no real place as a consumer product.

Re:Why Sony Can't Bring Back Its Classic Walkman Models on Friday July 24, 2026 @01:04AM (#49031389)
These companies did everything they could to get people off the "I own files I paid once" model and onto the perpetual "I pay for streaming" model. Of course they dont want to go back to that. It goes against the profit incentive which dictates all business decisions. That's how capitalism works on its most fundamental level.
Re:The Real Story of Troy on Tuesday May 12, 2026 @02:27PM (#48112298)
Ignoring the historical record and academic consensus, its very unlikely this trick could ever work. Ancient people weren't simpletons and the logistics of it all are pretty silly.

Its just poetic fiction in what is a long form poem.

Re:Screenshots of Old Desktop OSes on Tuesday May 12, 2026 @12:19PM (#48110386)
I think the NT4/2000 desktop was pretty perfect. It laid down everything without getting in your way. A lot of early systems were forced to follow simplicity because of lack of resources. This coincidentally led to better interfaces because complexity is difficult to get right and often is in service of business interests instead of technical interests.

I think its obvious that there's a degradation in business products as they age. They become more 'competitive' which means more profit-seeking, so the marketing end of things takes over and the engineering end takes a back seat. Simplicity is replaced with shiny and complexity to catch more edge case sales. Weird cargo cults emerge, product manager cults of personality, etc instead of following proper usability guidelines. Industry fads become self-fulfilling prophecies. Lockdowns and walled gardens emerge because they are more profitable than open systems.

Today, I almost can't believe how hostile and bloaty Windows 11 is and MacOS isn't much better. At least we have FOSS, but the commercial end of things is 'late stage' and frankly awful.

There's a real tragedy how capitalism always leads here. I sometimes wonder if the USSR stuck around what a more technocratic-led system would produce compared to the West.

Older »