871
Rolling the dice with CSS random()
Random functions in programming languages are amazing.
New
The latest blog posts to take off on Hacker News. 2,111 posts.
872
Code formatting comes to uv experimentally
uv 0.8.13 adds experimental uv format command that runs Ruff's formatter, similar to how cargo fmt wraps rustfmt.
873
Unmasking the Privacy Risks of Apple Intelligence
We reveal AppleStorm, our investigation into how Apple AI’s eco-system quietly transmits messages (WhatsApp, iMessage) sent via Siri to Apple servers, even when it isn’t needed to complete the task.
874
Measuring the environmental impact of AI inference
A methodology for measuring the energy, emissions, and water impact of Gemini prompts shines a light on the environmental impact of AI inference.
875
Unity reintroduces the Runtime Fee through its Industry license
Get the tools and support you need to transform your CAD and 3D data into immersive, interactive apps and experiences with Unity Industry.
876
Weaponizing image scaling against production AI systems
In this blog post, we’ll detail how attackers can exploit image scaling on Gemini CLI, Vertex AI Studio, Gemini’s web and API interfaces, Google Assistant, Genspark, and other production AI systems. We’ll also explain how to mitigate and defend against these attacks, and we’ll introduce Anamorpher, our open-source…
877
Code review can be better
Slightly unusual genre today: a negative result about our git-review tool for a different take on code review process, which we decided to shelve, at least for the time being.
878
Zig 0.15.1
Zig is a general-purpose programming language and toolchain for maintaining robust , optimal , and reusable software.
879
Pixel 10 Phones
Learn more about the new Pixel 10, Pixel 10 Pro and Pixel 10 Pro XL phones announced today at Made by Google.
880
OPA maintainers and Styra employees hired by Apple
Banner announcing OPA creators joining Apple
881
Closer to the Metal: Leaving Playwright for CDP
Why we dropped Playwright and switched to raw CDP for faster, more capable browser automation.
882
Sequoia backs Zed
From the Zed Blog: This investment lets us pursue our vision for bringing a new kind of collaboration directly into the IDE.
883
Tidewave Web: in-browser coding agent for Rails and Phoenix
Today, we're introducing Tidewave Web for Rails and Phoenix: a coding agent that runs directly in the browser alongside your web application, in your own development environment, with full page and code context.
884
Databricks is raising a Series K Investment at >$100B valuation
SAN FRANCISCO, CA — August 19, 2025 — Databricks, the Data and AI company, today announced it has signed a term sheet for its Series K round, which it expects to close soon with backing from existing investors. This funding values the company at >$100 billion.
885
Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025
The Great Firewall of China (GFW) conducted a large-scale, unconditional block targeting TCP port 443 on August 20, 2025. This report documents the measurements and analysis we conducted of that event.
886
Copilot broke audit logs, but Microsoft won't tell customers
We discoverd a vulnerability in Microsoft 365 Copilot that allows users to access files without getting detected or appearing in the audit log.
887
D2 (text to diagram tool) now supports ASCII renders
In the latest release of D2 (0.7.1), we introduce ASCII outputs.
888
Why Semantic Layers Matter (and how to build one with DuckDB)
Learn what a semantic layer is, why it matters, and how to build a simple one with DuckDB and Ibis using just YAML and Python | Reading time: 22 min read
889
CRLite: Certificate Revocation Checking in Firefox
Firefox is now the first and the only browser to deploy fast and comprehensive certificate revocation checking that does not reveal your browsing activity to anyone (not even to Mozilla). ...
890
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
The Latest News from Research at Kudelski Security
891
450× Faster Joins with Index Condition Pushdown
Introduction Readyset is designed to serve queries from cached views with sub-millisecond latency. This post focuses on the cold path—cases where a cache miss forces execution against the base tables. In these scenari...
892
Positron, a New Data Science IDE
We are excited to introduce Positron , a free, next-generation Integrated Development Environment (IDE) for data science by Posit PBC. Positron brings the spectrum of exploration and production work together in one environment so you can move from ideation to insight to application without switching context…
893
PyPI Preventing Domain Resurrection Attacks
PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over PyPI accounts through password resets.
894
XZ Utils Backdoor Still Lurking in Docker Images
In this blog, we share a new finding in the XZ Utils saga: several Docker images built around the time of the compromise contain the backdoor. At first…
895
How to Think About GPUs
We love TPUs at Google, but GPUs are great too. This chapter takes a deep dive into the world of GPUs – how each chip works, how they're networked together, and what that means for LLMs, especially compared to TPUs. While there are a multitude of GPU architectures from NVIDIA, AMD, Intel, and others, here we will…
896
Elegant mathematics bending the future of design
EPFL researchers have developed a new way to design complex, curved three-dimensional shapes using flat materials such as paper, aluminum sheets or plastic, combining creative thinking with a new computational algorithm.
897
898
The road that killed Legend Jenkins was working as designed
When a child is killed on a street like West Hudson Boulevard, it’s not a tragic fluke. It’s the outcome we designed for.
899
Why we still build with Ruby
Why we still choose Ruby on Rails in 2025: Learn how Lago scales millions of API events with Rails, Go, and Rust, balancing developer speed, concurrency, and performance.
900
SystemD Service Hardening
Discover additional security options for systemd units, to include quadlets. These options are everything from system permissions, time manage, BPF, syscall & seccomp filters, etc., all to make your system more secure.