18991
Bash 'shellshock' bug is wormable
Early results from my scan: there's about 3000 systems vulnerable just on port 80, just on the root "/" URL, without Host field. That doesn'...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 80,908 posts.
18992
TSA Master Keys
Someone recently noticed a Washington Post story on the TSA that originally contained a detailed photograph of all the TSA master keys. It’s now blurred out of the Washington Post story, but the image is still floating around the Internet. The whole thing neatly illustrates one of the main problems with backdoors…
18993
18994
Icanhazip: A simple IP address tool survived a deluge of users (2021)
Major Hayden made a simple and free tool to check the public-facing IP address of infrastructure. Its popularity nearly killed it.
18995
A new bill takes aim at government pressure to silence lawful online speech
The bipartisan legislation creates a federal cause of action against government officials who coerce or attempt to coerce broadcasters, interactive computer services, or AI providers into taking actions against lawful, First-Amendment-protected speech, and establishes a transparency system for government…
18996
Start Using Emacs – A Thorough Guide for Beginners
On your journey to Clojure mastery, your editor will be your closest ally. I highly recommend working with Emacs, but you can, of course, use any editor you want. If you don’t follow the thorough Emacs instructions in this chapter, or if you choose to use a different editor, it’s worthwhile to at least invest some…
18997
A high-dimensional sphere spilling out of a high-dimensional cube
Make a square, split each side into two halves, producing four cells. Put a circle into each cell such that it fills it completely. There is a small gap right in the middle of the square. Put a circle there again such that it touches the other four circles. The central circle is obviously inside the square, right?…
18998
Queueing theory: The science of waiting in line
The math behind how people wait in line
18999
Kids Online Safety Act is still a danger to our rights online
Are you a young person fighting back against bad bills like KOSA? Become an EFF member at a new, discounted Neon membership level specifically for you--stickers included! Congress has resurrected the Kids Online Safety Act (KOSA), a bill that would increase surveillance and restrict access to...
19000
Paypal froze our funds, then offered us a business loan
About a year ago, we made the decision to use Paypal as the primary payment method for our company, Hacker Paradise. After about a month…
19001
How Trello is different
Just a few months ago, we launched Trello, a super simple, web-based team coordination system. The feedback has been overwhelmingly positive and adoption has been very strong, even in its early, 1.…
19002
Zeroing buffers is insufficient
With a bit of care and a cooperative compiler, we can zero a buffer — but that's not what we need. What we need to do is zero every location where sensitive data might be stored. Remember, the whole reason we had sensitive information in memory in the first place was so that we could use it; and that usage almost…
19003
RethinkDB raises an $8M Series A
Today we’re delighted to announce our Series A! We’ve raised $8M to fund development, grow the RethinkDB community, and ultimately make database tools feel indistinguishable from magic .
19004
Cheap Recurring Payments with Stripe and AWS Lambda
If you run a small SaaS business, you need a recurring billing solution, and there are a lot of options out there. There’s Chargify (from $149/month), Chargebee (from $99/month), Recurly (from $99/month), MoonClerk (from $15/month), etc. All of these platforms have features beyond recurring payments, which increases…
19005
CockroachDB 2.0 released
Since our 1.0 release, we have been hard at work making CockroachDB 2.0 the database that enables a company’s data layer to evolve with their business -- whether they are in a single datacenter or expanding around the world.
19006
How I stay motivated as a solo creator
Working solo has its difficulties. For one, my income is somewhat tied to my productivity, and my productivity highly correlates to my state of mind. This is...
19007
More than 39M Americans Only Have Access to One Wired Broadband Provider
Since 2010 the US government has spent $3.3B on broadband infrastructure yet 39 Million Americans only have access to 1 wired broadband provider. See the worst states and learn more about your state.
19008
The Mafia of Pharma Pricing
4% of all the money in America flows through a few mafia-like health care conglomerates. The FTC just released a ground-breaking report on how they operate. And it is gearing up to sue.
19009
CERN experiment discovers five new particles
STFC supports research in astronomy, physics, space science and operates world-class research facilities for the UK.
19010
The Slow Formation of Durable Software
How a group of historians took years to imagine Zotero, the research application that would eventually be used by millions
19011
19012
Slack client for Commodore 64
Slack is great. Many smarter people than me also think that Slack is great. Slack is great because its simple and easier to deal with than emails. With all t...
19013
Transit – A format for conveying values between different languages
We are pleased to announce today the initial release of Transit. Transit is a format and set of libraries for conveying values between applications written i...
19014
19015
I am doing a startup (putting virtual machines on the web)
Update: StackVM is now called Browserling. Hey everyone, I have awesome news! I am doing a startup together with James Halliday! I met James on FreeNode several years ago and it turned out that we had very similar ideas about doing great hacking. So we teamed up as equal co-founders to do a startup. We're on…
19016
Against privacy defeatism: why browsers can still stop fingerprinting
In this post I’ll discuss how a landmark piece of privacy research was widely misinterpreted, how this misinterpretation deterred the development of privacy technologies rather than spurring it, how a recent paper set the record straight, and what we can learn from all this. The research in question is about browser…
19017
The lost language extensions of MetaWare's High C compiler (2023)
This book I got in a pile of FM TOWNS books turns out to be a lot more interesting that I was expecting an '80s C compiler manual to be. For as long as C and its relatives have been in mainstream use,…
19018
Making an SSH client the hard way
Explore Tailscale SSH Console, a web-based SSH client that simplifies connecting to your devices. Learn how Tailscale integrates WebAssembly, WireGuard, and SSH for secure, password-free access right from your browser."
19019
ArXiv's Next Chapter
On July 1, 2026, arXiv will spin out from Cornell University, its home for the past 25 years, to become an independent nonprofit organization. With this next…
19020
How the TPP Will Affect You and Your Digital Rights (2015)
The Internet is a diverse ecosystem of private and public stakeholders. By excluding a large sector of communities—like security researchers, artists, libraries, and user rights groups—trade negotiators skewed the priorities of the Trans-Pacific Partnership (TPP) towards major tech companies and...