2851
Supabase MCP can leak your entire SQL database
Indirect prompt injection through support-ticket data lets an MCP-enabled assistant cross trust boundaries and query private tables with Supabase’s privileged service role.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 4,918 posts.
2852
Tailwind CSS v3.0
Tailwind CSS v3.0 is here — bringing incredible performance gains, huge workflow improvements, and a seriously ridiculous number of new features.
2853
Free Postgres databases for small projects
Announcing free Postgres storage on Fly.io.
2854
The DDoS that almost broke the Internet
The New York Times this morning published a story about the Spamhaus DDoS attack and how CloudFlare helped mitigate it and keep the site online. The Times calls the attack the largest known DDoS attack ever on the Internet.
2855
Apple Joins Blender Development Fund
Apple has joined the Blender Development Fund as a Patron Member to support continued core development for Blender.
2856
2857
The chat control proposal does not belong in democratic societies
The European Commission is working on a legislative proposal called chat control. If the law goes into effect, all EU citizens will have their communications monitored and audited. Now is the time to stop it.
2858
The Codex App
Introducing the Codex app for macOS—a command center for AI coding and software development with multiple agents, parallel workflows, and long-running tasks.
2859
How we got to LiveView
I'm Chris McCord. I work at Fly.io and created Phoenix, an Elixir web framework. Phoenix provides features out-of-the-box that are difficult in other languages and frameworks. This is a post about how we created LiveView, our flagship feature.
2860
Pricing Changes for GitHub Actions
GitHub Actions pricing update: Discover lower runner rates (up to 39% off) following a major re-architecture for faster, more reliable CI/CD.
2861
2862
Cloudflare outage on December 5, 2025
Cloudflare experienced a significant traffic outage on December 5, 2025, starting approximately at 8:47 UTC. The incident lasted approximately 25 minutes before resolution. We are sorry for the impact that it caused to our customers and the Internet. The incident was not caused by an attack and was due to…
2863
Product Updates Based on Your Feedback
We recently made a change to simplify the way Chrome handles sign-in. Now, when you sign into any Google website, you’re also signed into Chrome with the same account. Y…
2864
Ruby 3.0
We are pleased to announce the release of Ruby 3.0.0. From 2015 we developed hard toward Ruby 3, whose goal is performance, concurrency, and Typing. Especial...
2865
Gemini: Google's most capable AI model yet
Gemini is our most capable and general model, built to be multimodal and optimized for three different sizes: Ultra, Pro and Nano.
2866
Firefox 59 to strip path information from referrer values for 3rd parties
Starting in version 59, Firefox Private Browsing will remove path data from Referrers sent to third parties. This will help prevent accidentally leaking data to third parties.
2867
2868
Cloudflare is sponsoring Ladybird and Omarchy
We're excited to announce our support of two independent, open source projects: Ladybird, an ambitious project to build a completely independent browser from the ground up, and Omarchy, an opinionated Arch Linux setup for developers.
2869
Elasticsearch is open source, again
Elastic announces the return of open source licensing for Elasticsearch and Kibana, adding AGPL as an option alongside existing licenses. This change reinforces our long-standing commitment to open so...
2870
One of the FBI’s Major Claims in the iPhone Case Is Fraudulent
“We have enormous computing power in the US government, but we need to be able to bring it to bear without the phone killing itself.” – FBI Director James Comey, March 1 , 2016.
2871
PYX: The next step in Python packaging
pyx is a Python-native package registry from the creators of uv.
2872
2873
Dropbox Project Infinite
Modern work can be frustrating and chaotic—if you don’t have the right tools. From context engineering to multimodal search, go behind the scenes and hear how Dropbox engineers are building AI that actually understands you, so you can focus on the work that matters most.
2874
We're improving search results when you use quotes
How snippets in Google’s search results are being improved by forming them around where quoted words or phrases occur in a web document.
2875
Megafail
In case you’ve been living under a rock the past few days, Kim Dotcom (of Megaupload infamy) has launched his new cloud storage site, Mega. Mega has an impressive sales pitch, promising secure cloud storage where only the user has the key to decrypt his or her files, and the encryption and decryption happens securely…
2876
Apple introduces a universal design across platforms
Apple previewed a new software design, crafted with Liquid Glass, that makes apps and system experiences more expressive and delightful.
2877
The Baseline Interpreter: A Faster JavaScript Interpreter in Firefox 70
Modern web applications load and execute a lot more JavaScript code than they did just a few years ago. While JIT (just-in-time) compilers have been very successful in making JavaScript ...
2878
Tweetbot. April 2011 – January 2023
An award-winning Twitter Client for iOS.
2879
2880
