New

The latest blog posts to take off on Hacker News. 6,299 posts.

Any topic
2023
1685

The WebP 0day

Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image library, and it had a familiar

1688

Why Kakoune

Recently I’ve stumbled upon a video about Kakoune, a code editor: Idiot user tries to use Kakoune (for notes? Also Helix?). Funnily enough, I was mentioned in this video, which was a surprise, and made me laugh for quite a while: Let’s go back to the official plugins page.

1689

It's okay to make something nobody wants

产品看起来是给用户用的,但我觉得这可能是一种假象,它实际上更像是一种自我表达。 许多表达被不同的人创造出来,经历了自然选择后,存活下来的那一个,是用户喜欢的那个。 我的意思是,这个过程是这么发生的:你做一个东西,不是“我觉得他们可能需要这个”而做,而是“我觉得这个有点意思”而做。然后,别人在使用你的产品时,感受到了与你相同的那种感受,这时他说:“我觉得这个有点意思”。 从这个角度来说,产品就像一种情绪的存储器,作者存进去,复制一千份,用户从产品中取出来。 你不能自己不含任何情感,却期望用户使用后带有情感。 我觉得即使做了个没人想要的东西,也没关系。你唯一需要做的是确保你已经完整呈现了你的情感。…

1696

How Equifax Was Breached in 2017

On a Saturday night, a security engineer at Equifax was updating an SSL certificate on a Network Intrusion Detection System (NIDS). Immediately after, suspicious connections were detected. After a more in-depth investigation, it became evident that the situation was far graver than anticipated. A service had to be…