Recent submissions

Comment · 2 days ago
I don't understand why this is getting downvoted, I'm surprised as well
Comment · 8 days ago
I voted with my wallet and apple is still an untouchable giant conglomerate that does whatever it wants, what now chief?
Comment · 10 days ago
AI generated comics for your CVEs, I can't even anymore
Comment · 11 days ago
Meh, this is not any different than pypi, npm, crates, and every single other code repository.
Comment · 11 days ago
Everything you said here can be done with nix as well
Comment · 12 days ago
How to destroy the entire US economy without firing a single bullet
Comment · 12 days ago
I'm looking at the generated PHP code they claim to be insecure and I can't see it. The client_secret is defined inside the file as a constant, ok it's sloppy and could be better, but this is not a vulnerability.

They claim the extract line is insecure, but never explain why, and without showing the rest of the code (what is $requiredHeaders? If it's sanitized this is a non issue) you can't even tell if it's secure or not.

The variable names being wrong (the $PayPal- ones) is probably just a "mistake" the model made, but it's not a vulnerability either.

This article could be just "burglars are burgling in your neighborhood, install our burglar alarm" from crowdstrike just as well.

Comment · 16 days ago
It does not, the protocol just defines the way the bits are exchanged. It's the torrent sites that can deal with bad torrents and your hunch is correct, the only way to avoid malware is not downloading suspicious torrents (or to be precise, not executing the downloaded files, downloading the torrent is not harmful even if the file is).
Comment · 17 days ago
What's the risk in giving someone a deepseek api key that is loaded with $5? Five dollars in deepseek tokens is enough for like a week of constant use.
Comment · 17 days ago
Every time I read something like this I think "wow the US so fucked".
Comment · 19 days ago
Big publishers have been pumping mtx riddled buggy crap for a good while now, I have no sympathy.
Comment · 24 days ago
Vast majority don't care about the console or hardware at all, they just want an easy way to play games on a tv. If consoles disappeared tomorrow, most people would start figuring how to connect a PC to a tv. It's not difficult, it's just less convenient until they learn how to use it.
Comment · 24 days ago
The latency is crap for anything that requires real time input, the increased revenue will be taken by the cloud vendors, more developers will shift to indie development. Win win win.
Comment · 25 days ago
I don't even know how many years I have been hearing this now
Comment · 29 days ago
How does that compare to the operational cost of developing an app, maintaining an app, paying for the infrastructure behind it, and having the payment processors take their cut, operate customer support etc?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton