Hacker News Reader

1over137on Ask HN: What in the world is taking Ubuntu so long?

>...I suggest you use a rolling distro

This doesn't seem to be popular with linux though. It's one thing I like about FreeBSD, everything is easy to keep very bleeding edge.

Maybe Debian 'testing'?, is that commonly run in prod?

1over137on Ask HN: What in the world is taking Ubuntu so long?

FreeBSD

1over137on macOS 27 does not support CoreStorage volumes

>It now seems like there's no real native way of doing encrypted backups to HDDs on macOS

Be happy they let you backup to HDDs at all. :) They don't sell HDDs, so I'm half amazed they still work whatsoever.

1over137on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

If I'm not mistaken, looks like pfSense (based on FreeBSD) firewall rules also block IP Options by default too.

1over137on How AI may drive union-resistant tech workers to the bargaining table

Dream on Guardian!

1over137on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

>How are Ubuntu and RHEL not fixed?

IMNSHO this makes them unfit for purpose. I think this is the nail in the coffin for Ubuntu for me.

1over137on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

It could be that it is more YOLO not patching this ASAP. Maybe better to risk some regressions.

1over137on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Is there an RTFM for 'pull it manually'?

1over137on Police are using AI to pull over drivers for 'suspicious' behavior

> I don't display a plate on my generic vehicle

Sovereign citizen?

1over137on We should be more ambitious with the software we build

Crazy. But this is surely only true in mega corps, it’s nothing I’ve ever seen in small orgs.

1over137on Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more

Is enabling Brotli a worthwhile performance improvement for, say, wordpress site?

1over137on GitLab critical patch release

And it's not even written in C! /s

1over137on There isn't an easy exploit for this PHP vulnerability

>This is absolutely exploitable...

OK, can you share a working one so we can test that our servers are fixed?

1over137on Security advisory: Critical remote code execution vulnerabilities, update now

FreeBSD ports tree has the updates in their git now.

1over137on Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming

This seems to work without an X account: https://nitter.app/k_firsov/status/2112641845926989944

1over137on Upcoming critical PHP security release

"LB"?

1over137on Upcoming critical PHP security release (CVE-2026-109618 / -109619)

Here's the video (I think): https://nitter.app/k_firsov/status/2112641845926989944#m

1over137on Europe EV sales rose 70.3% in September, 32.6% of market share

Tailpipe emissions are only half of it. The brake and tyre dust is the second half, and not solved by EVs.

1over137on macOS 15.8.2 Breaks OpenGL

Your bug reports to Apple get closed wontfix, really? Everything I’ve read says most peoples’ reports just sit unanswered forever.

1over137on macOS 15.8.2 Breaks OpenGL

The beachball arrived with OS X. On Classic MacOS it was a watchface.

1over137on macOS 15.8.2 Breaks OpenGL

Especially since sysdiagnose contain so much info, it’s bad opsec to give that info over. Unless you repro in a fresh VM maybe.

1over137on macOS 15.8.2 Breaks OpenGL

WTH. 15.8.1 is current, 15.8.2 ought to be security fixes only.

1over137on How do you deal with AI Output of your boss?

I don't have any advice, but I sure do feel bad for you!

1over137on C++26: The New Debugging Header

I wish the C and C++ standards people would go through open source code out there and standardize all the platform-specific things like this case here.

1over137on Ask HN: Need Email Deliverability Expert

Did you do blacklist (and other) checks with https://mxtoolbox.com/ ?

1over137on Triple-A Minesweeper

Thanks. I guess you have to be a video game player to fully appreciate!

1over137on Triple-A Minesweeper

I guess there's a joke here somewhere? It's minesweeper but annoying?

1over137on No new Ghostty updates since March

>...that it needs to constantly be getting new releases...

Well, "needs" is strong, but I do like releases, at least if there is good QA done before the release.

1over137on Turn off Apple Intelligence on macOS 27 and get its disk space back

But what macOS doesn't have is an API for an application to query whether it has 'local network' access or not. If it did, Firefox could report a proper error message.

Safari of course get 'local network' access automatically, with no permission asked of the user. Special treatment for Apple's own apps of course.