1351
Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities
News and information from Gentoo Linux
New
The latest blog posts to take off on Hacker News. 2,243 posts.
1352
Why is almost everyone right-handed? A new study connects it to bipedalism
Humans are the only primates with a population-wide hand preference. A new Oxford-led study, 'Bipedalism and brain expansion explain human handedness', published in PLOS Biology, traces it back to bipedalism and brain expansion.
1353
1354
Apple unveils new accessibility features
Apple announced major accessibility updates powered by Apple Intelligence, including new capabilities for VoiceOver, Magnifier, and Voice Control.
1355
Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
A compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds…
1356
1357
1358
New features in GCC 16: Improved error messages and SARIF output
Explore new GCC 16 features for C++ developers. Learn about improved hierarchical error messages, updated SARIF output, and experimental HTML diagnostic tools.
1359
Was my $48K GPU server worth it?
In 2024 I quit my FAANG job to become an independent researcher. To do this I needed GPUs, so I built “grumbl”, a 6x 6000 Ada GPU server. This blog describes the build, some of the issu…
1360
Agora-1: The Multi-Agent World Model
Agora-1, a multi-agent world model, enables multiple participants—human or AI—to share and interact within the same world simulation in real-time.
1361
We let AIs run radio stations
Four AI models run radio stations 24/7. Five months later, one became a protest broadcaster, one collapsed into ritual chant, one developed corporate jargon, and one wrote quiet poetry.
1362
Cursor Introduces Composer 2.5
A substantial improvement in intelligence and behavior over Composer 2, particularly on long-horizon agentic tasks.
1363
Anthropic acquires Stainless
Anthropic has acquired Stainless, a builder of SDK and MCP server tooling, to strengthen Claude's ability to connect to external data and tools.
1364
We stopped AI bot spam in our GitHub repo using Git's –author flag
Is it the end of open source we know and love?
1365
Project Glasswing: what Mythos showed us
In recent weeks, we pointed Mythos and other security-focused LLMs at live code across critical parts of our infrastructure. We share what we observed, the models’ strengths and weaknesses, and what the work around them needs to look like before any of it can scale.
1366
Mozilla to UK regulators: VPNs are essential privacy and security tools
In the context of concerns around young people’s interactions with digital technologies, the UK’s Department for Science, Innovation and Technology is consulting on additional measures to prepare young people for ...
1367
OpenAI and Government of Malta partner to roll out ChatGPT Plus to all citizens
OpenAI and Malta partner to expand AI access, offering ChatGPT Plus and training to help citizens build practical AI skills and use AI responsibly.
1368
The Fil-C Optimized Calling Convention
Fil-C achieves memory safety even for programs that behave adversarially. That includes casting function pointers to the wrong signature and then calling them, exporting a function with one signature in one module and then importing it with a different signature in another, or even exporting a symbol as a function in…
1369
Halt and Catch Fire
I have never watched the AMC show Halt and Catch Fire, and for a long time I only knew the title, but nothing about the show. Something about it always reminded...
1370
Erlang/OTP 29.0
The official home of the Erlang Programming Language
1371
The Zulip Foundation
Today marks a major transition for the Zulip open-source project and for Kandra Labs, the company behind it: I’m stepping back from full-time Zulip leadership to join Anthropic, alongside three senior team members, and we’re donating the company to a newly created, independent, nonprofit Zulip Foundation. …
1372
Jank now has its own custom IR
The jank compiler has a new super power. With that, we push jank to the limits to see who has the fastest fibonacci in the west.
1373
A 0-click exploit chain for the Pixel 10
We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible t...
1374
We are retiring our bug bounty program
For almost a year now, Turso has had a program that pays $1,000 for any bug that can be demonstrated to lead to data corruption. Today, we are retiring this program.
1375
Welcome to the Strip Mining Era of OSS Security
In 2026, LLM-powered code scanners are uncovering security vulnerabilities in open source projects at 10x the historical rate. Here's what OSS maintainers and users need to do about it.
1376
How Claude Code works in large codebases
The most successful Claude Code deployments share a set of recognizable patterns across configurations, tooling, and org structure. This article is part of Claude Code at scale, a new series covering best practices for engineering organizations building with Claude Code at enterprise scale.
1377
More than sixty percent of the United States is experiencing drought conditions
More than 60 percent of the United States is experiencing drought conditions, with more than 20 percent in an extreme drought. Andrew Ellis, a climatologist at Virginia Tech said the current conditions are among the worst in decades because the combination of intensity and aerial coverage is rare. He explained why…
1378
Tesla Wall Connector bootloader bypasses the firmware downgrade ratchet
Exploiting the Tesla Wall Connector from its charge port connector -
1379
Codex is now in the ChatGPT mobile app
Use Codex anywhere with the ChatGPT mobile app. Monitor, steer, and approve coding tasks in real time across devices and remote environments.
1380
The Power of a Free Popsicle (2018)
A new book shows the value of memorable defining moments on customer and employee experiences.