331
New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic
‘Plasticorals’, coral rubble fused with plastic, are long-lasting reminders of human activity and highlight a potential threat to critical marine environments.
New
The latest blog posts to take off on Hacker News. 5,933 posts.
332
Today's PHP security release, and how we're strengthening security
Describing the story behind how critical security vulnerabilities were found and fixed.
333
Cloudflare deploys protections against php2shell vulnerability
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.
334
Patch the Planet: global response coordination as agents uncover vulnerabilities
Patch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.
335
DuckDB 2.0.0 LTS “Cinnamon Teal”
The DuckDB team is happy to announce that today we're releasing DuckDB version 2.0.0 LTS, codenamed “Cinnamon Teal” (Spatula cyanoptera). This is our biggest feature release so far, and it ships a polished version of the Quack protocol, asynchronous I/O, a first-class VARIANT type, agent mode, triggers, an extensible…
336
PHP2Shell by Calif Research
A tale of two PHP remote vulnerabilities
337
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.
338
PHP2Shell: AI uncovers critical RCE in PHP
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
339
Using thousands of AI agents to uncover new leads in biological data
See how OpenAI, PerturbAI, and Scripps Research used distributed AI agents to uncover promising research leads in data from millions of brain cells.
340
Most advice is right for the person giving it
Steve Jobs gave a famous speech at Stanford, where he told graduates that the only way to do great work is to love what you do, and that if you haven't found your passion yet, you should keep looking.
341
OpenAI models are coming to Google Cloud
OpenAI and Google Cloud are bringing frontier models and Codex workflows to Gemini’s Model Garden, available through Google Cloud Marketplace.
342
Dutch National Cyber Security Center is Offline because it uses PHP
Overzicht van de laatste alerts, nieuwsberichten, publicaties, expertblogs en de meest recente verhalen van ondernemers.
343
Qwen3-Coder writes less secure code when told it's for a US persona
Chinese coding models write less secure code for Beijing's adversaries. On Qwen3-Coder, we traced the gap to the weights and closed it by removing the model's CCP alignment.
344
Whatever Happened to Fire Escapes
[Note that this article is a transcript of the video embedded above.] The idea is simple: If there’s a fire in a tall building that blocks the main stairwell, people need an alternative way to evacuate, preferably one that is somewhat protected or at least far away from where the fire is happening
345
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
346
The 1.5°C goal of the Paris Agreement is no longer viable
UNEP's Emissions Gap Report 2026 warns that exceeding 1.5°C is inevitable and calls for urgent emissions cuts to limit warming and reverse the trend.
347
C vs. C#: racing VLC's Gaussian blur
A real VLC video filter, ported line by line to C# and raced against the original C inside VLC 4, then optimized on both sides, with byte-identical output throughout.
348
Using LLM for confidence scoring is a bad idea
LLM-based agents can do a lot of tasks. Or, at least, they can appear to do them. For example, they write code, summarize papers, plan trips, and fill in forms. If you ask one for a probability or a confidence score, it will give you one of those too. I have seen many agent designers use LLMs to generate confidence…
349
PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)
FINAL STATUS (2026-10-21): the CVE-2026-109618 / CVE-2026-109619 memory-corruption class shipped patches 2026-10-21. On the patch, that class is closed: the cached-pointer chain dies at the addref and the serialize-state path is a memory-safety bug, not code execution. Two session-handling flaws survive on…
350
Using Claude to reduce the attack surface of code
Automated attack surface analysis and reduction can meaningfully improve the security of deployed software in the near term. In this post, we preview data we’ve collected from applying attack surface reduction techniques to large open-source codebases using Claude.
351
The Future of CSS
Every year, browser vendors collaborate via the Interop project to synchronize their efforts on new HTML/CSS/JS features. This year, there’s a ton of super exciting features being considered! In this blog post, we’ll explore the CSS of the future, to get a glimpse of what we’ll soon be able to do.
352
Good type against all odds
A blog about software craft and quality
353
PingCap TiDB Leaks
PingCAP Inc. / TiDB Cloud • Distributed databases • 10.6 TB total exfiltration • 200 GB stage one release
354
Feds suspect ransom negotiator ran ShinyHunters extortion site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the…
355
Bringing uv and ty together
Experimental uv-ty integration enables first-class support for Python scripts on the CLI and in the editor, and a unified uv check command.
356
I Built a Stereo Vision Board for Hardware Hackers
This article was written entirely by a human, for humans. I tend to get excited about certain chips. This time, it was a microprocessor: The Rockchip …
357
Security advisory: Critical remote code execution vulnerabilities, update now
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
358
A practical guide to AI image generation, from diffusion to agents
Welcome to the digital home of Daniel Ball. Explore my portfolio to see the projects I’ve worked on and learn more about my professional journey.
359
Academics have a duty to defend open knowledge systems like Wikipedia
Wikipedia faces existential challenges from generative AI companies. Do researchers and teachers in higher education have an ethical duty to defend it?
360
Claude designed protein binders against scorpion neurotoxins
We asked an internal research Claude model to design minibinders (small proteins that attach tightly to a target) against scorpion neurotoxins.