New
The latest blog posts to take off on Hacker News. 31,662 posts.
CSS: The bomb inside your inbox
Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
The original URL for this prediction will no longer be available in 11 years (2011)
will go to Bletchly Park Trust if Keith wins, or The Internet Archive if Haughey wins.
We replaced Redis with MySQL for inventory reservations and it scaled
How we used SKIP LOCKED, composite primary keys, and connection visibility to hit our scale targets.
Fastmail offers EU data region
Choose if you want to make the European Union the primary home for your Fastmail data, on our own secure servers in Amsterdam.
Triton: DirectX 11 Driver for QEMU
In the prequel, we introduced Neptune, a Direct3D protocol forwarding layer for VirtIO. Neptune allowed us to serialize Direct3D API calls across the hypervisor boundary and this allowed us to run Wine games on a Linux guest with a Linux host faster than with DXVK directly in the guest. Admittedly, the payoff there…
DeepMind's WeatherNext model achieves breakthrough forecasting cyclones
WeatherNext enables accurate cyclone forecasts that can give an extra day of warning. Now we are open sourcing the model.
Managing AI Coding Costs at Scale
AI coding tools deliver immense value: at Databricks, agentic coding has measurably improved every velocity metric we track and, in some teams, driven an order-of-magnitude gains in output. But nearly every company deploying AI tools at scale has hit the same wall: exponentially growing costs.
Tax cuts for the wealthy only benefit the rich (2023)
Trickle-down economic policies are destined to fail, research suggests. David Hope explains why the issue is so controversial.
Responding to the next frontier of critical cyber capabilities
OpenAI is sharing preliminary cybersecurity evaluations for Astra and the steps we’re taking to strengthen safeguards and security controls.
An all-sky map of half a million supermassive black holes
The Black Hole Mapper reaches a milestone with its first southern hemisphere optical observations, coordinated eROSITA X-ray identification, and multi-epoch tracking of accreting black holes across the universe.
A year of fighting scrapers on my 1.5 million-page website
A year of fighting scrapers on my 1.5 million-page website. What I tried, how I failed, and what's working now.
Kitesurf: Agent-first browser that runs in V8 isolates
We should be giving all agents tools that excel at what’s important for an AI model. Kitesurf is Cloudflare’s new stateless, highly scalable, and cost-effective web browser that runs entirely on top of Workers and was designed specifically for the Agentic Cloud.
Quake – 30th Anniversary Update
To celebrate the 30th Anniversary of Quake, we have collaborated with MachineGames to create a new episode, Dawn of the Machine, now available as a free update to Quake.
Herdr is joining Y Combinator. The runtime stays open
Herdr is joining Y Combinator. The runtime is Apache-2.0 and stays open, and here is what the funding is actually for.
Can you reverse engineer an ASIC?
Earlier this year we published a puzzle that handed you a complete neural network and asked you to figure out what it did. The response was great, so we’ve made another one! This time, we’re going much deeper down the tech stack.
Improving GPT‑5.6 Sol in ChatGPT, expanding GPT‑5.6 Luna access for free users
ChatGPT introduces improved GPT-5.6 Sol with better accuracy and consistency, plus expanded access for free users and unlimited everyday chats with GPT-5.6 Luna.
Humans missed 1 in 3 threats approving AI agent commands across 40k game runs
Results from AI agent permission game: which attacks beat human reviewers, and which safe commands got blocked instead.
Prime Agent: A self-improving RLM agent
Prime Agent is our open-source, self-improving coding harness built around two abstractions: the Recursive Language Model (RLM) and the Continual Harness. With Opus 5, it achieves 95.5% on ARC-AGI-3, surpassing the reported human expert baseline.
Muse Code and Muse Spark 1.2
Introducing Muse Code, a terminal coding agent powered by Muse Spark 1.2, with persistent background agents, repository-scale execution, and built-in verification.
Beating GPT-5.6 Sol on retrieval with 100x cheaper open models
A 4B open-source model post-trained with Castform retrieved search results as accurately as GPT-5.6 Sol, while costing 100x less.
Atlassian Rovo Exfiltrates Data, Bypassing Controls
Atlassian AI ‘Rovo’ is susceptible to zero-click data exfiltration via indirect prompt injection, bypassing organization-level web search controls.
Changes at Google DeepMind: Demis Hassabis from CEO to Chair, Jeff Dean departs
Today, Google and Alphabet CEO Sundar Pichai shared some changes with Google DeepMind teams.
Scientists discover Kelvin-Helmholtz Instability on the surface of the Sun
Scientists using the NSF Inouye Solar Telescope discovered Kelvin-Helmholtz instability on the Sun, shedding light on solar activity and space weather.
Oracle cut its Always Free ARM limits to 2 OCPU / 12GB, enforced Aug 18
Oracle cut its Always Free ARM limits to 2 OCPU / 12GB, enforced Aug 18, 2026. Resize or consolidate your free instances before they're terminated.
Aristotle quotes on virtue, knowledge, and happiness
Find the latest news, events and updates from Campion College on our blogs page. Read about student life, future students, Campion's brag, podcasts and more.
Rubin Observatory's first LSST Camera release: 500k galaxies in the COSMOS field
A new image from NSF–DOE Vera C. Rubin Observatory offers a spectacularly deep view into a famous region of sky known as the COSMOS field. Located in the constellation Sextans, COSMOS is one of the most observed patches of the Universe — and Rubin’s new image adds a powerful new view of this well-known cosmic landmark.
Cloudflare OS: an open platform for agents, apps, and work
Cloudflare OS is an open-source platform that lets everyone in your company build apps, automate work, and safely access internal systems, shaped around what your organization knows and how it operates.
Rust-lang/rust is adopting an LLM policy
Want to follow along with Rust development? Curious how you might get involved? Take a look!
DuckDB – Data power tools for your laptop, now in Clojure (2023)
A well-written, *FAST* data science database for your laptop.