The latest blog posts to take off on Hacker News. 80,798 posts.
As a part of my work I do security research for various apps and websites. I wanted to see if LLMs could reproduce a common class of exploits I've found in multiple apps. So I built a deliberately vulnerable book review app and spent $1,500 finding out…
As agents grow more capable, so does their potential blast radius. Here's what we learned building containment for claude.ai, Claude Code, and Cowork.
with apologies to Terry Bisson
Explore how a decade of open source experiments in psychovisual modeling and compression led to JPEG XL, the future of image coding.
Loris Cro's Blog
A from-the-ground-up walkthrough of how modern LLMs work, from tokens to transformer blocks to the next-token loop
From Elixir v1.20, every program is now gradually type checked in search for verified bugs and typing violations.
Today, we are thrilled to announce the release of Angular v22. We continue to be proud of the work we do with each release. Our goal is to…
An overview of Gemma 4 12B, a model designed to bring high-performance multimodal intelligence directly to your laptop.
Let’s Encrypt is committed to a post-quantum-safe Web PKI. The path we’re planning to take is Merkle Tree Certificates (“MTCs”), a new approach that adds post-quantum authentication to the web without sacrificing the speed and reliability that have made TLS universal. This post is about these plans and why we believe…
We measure real-world performance of coding agents on software engineering tasks, including cost, token usage, and execution time. We compare how performance changes across agents, models, and execution settings.
I was recently diagnosed with anti-NMDA receptor encephalitis . It is an autoimmune disorder where your body’s normally helpful antibodies start acting strangely . This leads to inflammation in the brain. This blog briefly discusses some of my experience and prognosis.
I wrote the other day about Uber blowing its 2026 AI budget in four months, and how that wasn't particularly surprising given they would have set that budget in 2025, …
I have spent a large portion of my career working in Java. In that time, you get used to huge classes. New functionality? Just add a new method and field to the class. The cost of each new field is rarely considered. Performance is often considered from a classic computer science perspective by considering asymptotic…
Abusing an unauthenticated Bluetooth protocol to turn a PC speaker into a Rubber Ducky.
Including a little dive into the physics behind it
An in-depth analysis that explains how this console works internally
Redis 8.8 is now available in Open Source. Explore the new array data type, window counter rate limiter, streams NACK, and more performance-focused updates.
Many legends of software development, like John Carmack or Chris Lattner, are very approachable. Check out their projects and go talk to them!
Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...
A Ligo research note on redundancy in natural protein fold space and what kind of data still carries signal.
A team of researchers at the University of Toronto has discovered a new class of cyberthreat that gives hackers more power and reach at far less cost. It can be built with free AI models. Every online device is a potential target. And current cyber defences are not yet ready for it.
I gave up blogging a long time ago (apart from an occasional thing about ArduPilot), I tend to just write code and hope people find it…
Roku provides the simplest way to stream entertainment to your TV. On your terms. With thousands of available channels to choose from.
A groundbreaking study led by Stanford Law School Professor Julian Nyarko reveals that law professors overwhelmingly prefer AI-generated answers to st
One command-line tool to query them all, built with Rust and ADBC
News post: Gleam v1.17.0 released!
A brief explanation of my pessimism about efforts to radically improve education.
BYD sold 4.6M vehicles in 2025, but Americans can't buy one. We CT scanned four components from its lineup to reveal what vertical integration looks like at the part level.
Performance results naturally depend on the underlying hardware. The following benchmarks show the execution times for sorting 50 million doubles using different sorting implementations. The measurements were taken on an Apple M1 system using Clang and on an AMD Ryzen 3 Linux system using GCC , both compiled with the…
