Recent submissions

Comment · 11 months ago
Buddy, most of these are stolen cars. Do you think they are driving them home and parking it in the driveway?

If you are eluding the cops at 100mph you are a danger to the public, they are not going to let you go home.

>Why not just open up on them with antitank weaponry?

I've heard cops say something similar on body cam footage.

Comment · 11 months ago
They could learn a few things from the Georgia State Patrol, the undisputed world champions of the PIT.
Comment · 11 months ago
So your proposal is to just let the criminals run away? And that somehow won't embolden them further?

"Once this baby hits 88mph, we're home free!"

Air support is used to coordinate with law enforcement up ahead to deploy spikes to end the chase.

You are just repeating empty political talking points that simply don't work in the real world.

Comment · 11 months ago
Comment · 11 months ago
You can also get 2000 calories by eating an entire box of supermarket donuts, but that doesn't make it a good idea.
Comment · 11 months ago
You're right, the McRib is back just in time for the holidays.
Comment · 11 months ago
Who is the audience your comment is trying to reach? Who are these mysterious "companies"?

It's important to realize companies are made of people.

Someone had to explicitly code the dark pattern in the GDPR cookie dialog. Ever notice the button for "Accept All" is big and shiny, while refusing all is more often than not a cumbersome, multi-click process?

That's not an accident. That was coded by people. People around us, people who post here. I'm sure "made GDPR dialog deceptively confusing" went on someone's accomplishment report that they then used to justify a raise or promotion.

Comment · 11 months ago
You are dismissing the seriousness of this. Their package manager is widely used. One would only need to compromise their build servers to wreak havoc.

Didn't they have a vulnerability in their firmware download tool like a minute ago?

The difference between OpenWRT and Linux distros is the amount of testing and visibility. OpenWRT is loaded on to residential devices and forgotten about, it doesn't have professional sysadmins babysitting it 24/7.

Remember the xz backdoor was only discovered because some autist at Microsoft noticed a microsecond difference in performance testing.

Comment · 11 months ago
FWIW I think this is a bad practice.

The Microsoft article reads like a corporate press release. The original link contained additional pertinent information and research which is good for discussion.

Comment · 11 months ago
> it suddenly ballooned in size in April 2025 after its operators breached a TotoLink router firmware update server and infected approximately 100,000 devices

This is scary. Everyone lauds open source projects like OpenWRT but... who is watching their servers?

I imagine you can't run an army of security people on donations and a shoestring budget. Does OpenWRT use digital signing to mitigate this?

Comment · 1 year ago
Surely you mustn't be referring to OpenSSL, which was forked multiple times — under duress — to maintain the safety and security of the web.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton