4711
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)
This post is about an important, but also scary, prompt injection discovery that leads to full system compromise of the developer’s machine in GitHub …
New
The latest blog posts to take off on Hacker News. 49,194 posts.
4712
How I'm using Helix editor
My Helix editor config and how I am using it
4713
No I don't want to turn on Windows Backup with One Drive
Microsoft is doing everything in its power to alienate users. When it's not enshittification, it's user hostility. You can't even dismiss forced reminders.
4714
Macro Splats 2025
A Gaussian splat is essentially a bunch of blurry ellipsoids. Each one has a view-dependent color, using a process similar to training an AI model, you can optimize until it converges to the photos you feed in. The result is a sort of 3D photograph that can be viewed freely from any angle. Captivated by this…
4715
Nostr and ATProto (2024)
This post could’ve been titled “Nostr vs ATProto”, but that really isn’t what I wanted to do here. While I will be comparing and contrasting them a lot, and that’s kind of even the point of writing this, I didn’t want to really pit the two against each other at all, and especially not with the title. I also want to…
4716
Why it took 4 years to get a lock files specification
(This is the blog post version of my keynote from EuroPython 2025 in Prague, Czechia.) We now have a lock file format specification. That might not sound like a big deal, but for me it took 4 years of active work to get us that specification. Part education, part therapy,
4717
The App Store was always authoritarian
Apple bent the knee for months, leaving many commentators to ask why. But the reasons are not mysterious: Apple wants things that only the government can provide, things that will defend and extend its power to extract rents, rather than innovate. Namely, selective exemption from tariffs and an end to the spectre of…
4718
Three ways formally verified code can go wrong in practice
"Correct" doesn't mean "correct" when correctly using "correct"
4719
Pipelining in psql (PostgreSQL 18)
the psql client version 18 comes with pipelining, which can speed up client-server communication. In this post, let's see how it works and how much can be g...
4720
Meta Superintelligence Labs' first paper is about RAG
Long awaited first paper from Meta Superintelligence Labs is not a model layer innovation. What does this mean?
4721
Heroin addicts often seem normal
At least, they did to me ten years ago
4722
A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS
I’ve used Mullvad as my VPN provider for a few years. Their service is good, they provide keys for 5 devices, rely on the Wireguard protocol, and offer alternative configurations as well. Despite that, my needs have changed and I wanted to be able to have granular control over DNS queries and the ability to connect my…
4723
Rating 26 years of Java changes
I first started programming Java at IBM back in 1999 as a Pre-University Employee. If I remember correctly, we had Java 1.1.8 installed at that time, but were moving to Java 1.2 (“Java 2”), which w…
4724
Vibing a non-trivial Ghostty feature
I recently shipped a non-trivial Ghostty feature (unobtrusive macOS automatic updates) that was largely developed with AI.
4725
Firefox is the best mobile browser
Firefox is an open source, private browser, one of the few mainstream browsers that supports extensions on mobile (Android) as powerful as the desktop ones (A lot of extensions have been ported), with seamless sync and a customizable homepage.
4726
Root cause analysis? You're doing it wrong
If you have arrived here, you should know this is an early draft containing mostly unedited stream-of-consciousness crap because I have found it difficult to structure this topic. My latest attempt is to split this information up into multiple separate articles.
4727
The <output> Tag
Make your dynamic content accessible by default with the HTML tag that time forgot.
4728
Superpowers: How I'm using coding agents in October 2025
I'm Jesse. I make stuff. Software, hardware. Very occasionally, trouble.
4729
How hard do you have to hit a chicken to cook it? (2020)
Some questions are timeless, innocent yet penetrating in their simplicity. Why is the sky blue? Why do things fall? How hard must one hit a chicken to cook it? It is this last mystery of the universe that we discuss today.
4730
How to tame a user interface using a spreadsheet
Many years ago, while working at Apple and running a lab at WWDC, I met a guy who was using a piece of Apple software designed for creating interactive ads t...
4731
Programming in the Sun: A Year with the Daylight Computer
I’ve been hinting on X/Twitter about my use of the Daylight DC-1 as a programming environment, and after about a year of use, it’s time to write about it in longer form. This isn’t a full product review, but rather an experience report on coding in sunlight. It’s also about the Boox Tab Ultra – which has a different…
4732
4733
I built physical album cards with NFC tags to teach my son music discovery
What's the modern equivalent of flipping through CDs? Physical album cards with NFC tags that bring back the tactile joy of music discovery.
4734
The illegible nature of software development talent
Here’s another blog post on gathering some common threads from reading recent posts. Today’s topic is about the unassuming nature of talented software engineers. The first thread was a …
4735
It's OpenAI's world, we're just living in it
The best Stratechery content from the week of October 6, 2025, including OpenAI’s Windows strategy, Sam Altman and boundless ambition, and the future of creation.
4736
Let's write a macro in Rust
Macros are required to do some very helpful things in Rust, but this isn't an article about any of those things.
4737
4738
All-natural geoengineering with Frank Herbert's Dune
Can We Terraform the Earth Using Life Itself?
4739
OpenGL: Mesh shaders in the current year
It Happened.
4740
A story about bypassing air Canada's in-flight network restrictions
1 Prologue A while ago, I took a flight from Canada back to Hong Kong - about 12 hours in total with Air Canada. Interestingly, the plane actually had WiFi: However, the WiFi had restrictions. For Aeroplan members who hadn’t paid, it only offered Free Texting, meaning you could only use messaging apps like WhatsApp…