Recent submissions

Comment · 1 day ago
Also:

On Ethereum, the attacker abused EIP-7702, a feature introduced in the 2025 Pectra upgrade that allows a regular wallet to delegate its behaviour to a smart contract.

So it sounds like a combination of factors and lack of safeguards led to this happening.

Comment · 10 days ago
Comment · 10 days ago
Patches have now landed for 20.04 and other earlier Ubuntu versions.
Comment · 10 days ago
From what I gather, https://x.com/J4ck3LSyN/status/2112703096443097263 figured it out after the disclosure by wiz.io and openai (which I think was 24h before the patch landed). So they then used AI models to analyze the php code and independently found the vulnerabilities.

So, if that is correct then the problem was the 24h prior notice about the patches, which gave time for people to use AI to find the bugs.

Comment · 10 days ago
Some have, but others are still showing "needs evaluation", and still no update for 20.04. I've just turned off php for now, as we only used it in a couple of places and won't be missed for a day or two.
Comment · 10 days ago
Still no update for ubuntu 20.04 which has support via ESM, even though the patch is available for php 7.4. There are a lot of people using older servers which still have ESM support.
Comment · 10 days ago
Not out on Ubuntu 20.04 yet, but sometimes they are a little slower. Hopefully should be posted later today.
Comment · 23 days ago
Does six hours factor in maintenance? Also, I think it depends on the project. I was able to get a a number of quantum computing programs knocked up in braket with the help of various AI tools to run some simulations It would have taken me months on my own, but I got knocked out in a few prompts with free AI tools. It's a real eye opener.

However, that's very different from building and maintaining a product that will be used for live customers, where you have to consider security implications. This is what we're talking about here for Meta and Microsoft, and it's what I do for my actual coding job.

Comment · 23 days ago
Yes, that sounds like a reasonable use case. But very different to the 100k a month by meta and microsoft.
Comment · 23 days ago
Coding is much less than 25% of my time, and as i said above I want as much coding as I can get. I do very well thank you.
Comment · 24 days ago
Not for me. I end up using chatgpt about once a week for my actual work, and maybe once a day for non work related things. Certainly if you need the subscription it's worth $20/month or whatever for a personal sub, but I don't seem to need that at the moment. I'm more curious about the $10k or $100k/month being value for money with people using it to do their entire coding.
Comment · 24 days ago
I'm curious if they have any data showing whether it benefits productivity. I get by on the free tier of ChatGPT, and do 100% of the coding myself. It has never been a bottleneck, and I like to keep my skills sharp. AI helps in analyzing problems, getting quick answers to technical queries, reviewing code, etc. But running my own business I'm incredibly careful about expenses.
Comment · 24 days ago
It's unclear how much OP's company was spending. The article gives a figure of $100k/month per employee.

But even $200/month is worth shaving if it doesn't generate value.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton