Sandboxes won't save you from OpenClaw
AI agent misbehavior isn't a sandbox problem—it's a permissions problem.
The latest blog posts to take off on Hacker News. 5,964 posts.
AI agent misbehavior isn't a sandbox problem—it's a permissions problem.
Hello Windows Insiders, today we are beginning to roll out updates for Notepad and Paint apps to Windows Insiders in the Canary and Dev Channels on Windows 11. Notepad (version 11.2512.10.0) In this update, we’re introduci
_posted by Stephen De Gabrielle and John Clements_ We are pleased to announce Racket v9.1 is now available from https://download.racket-lang.org/. As of this release:: Documentation organization and navigation can be specialized by language family, to...
I’ve had this sense that HN has gotten absolutely innundated with bots last few months. First most obvious giveaway is the frequency with which you see accounts posting brilliant insights like 13 60 well and t6ctctfuvuh7hguhuig8h88gd to f6gug7h8j8h6fzbuvubt GB I be cugttc fav uhz cb ibub8vgxgvzdrc to bubuvtxfh tf d…
I’ve been a .com purist for over two decades of building. Once, I broke that rule and bought a .online TLD for a small project. This is the story of how it went up in flames.
confusable-vision renders every TR39 confusable pair across 230 macOS system fonts and measures visual similarity with SSIM. 96.5% of confusables.txt is not high-risk, but 82 pairs are pixel-identical in at least one font.
Your AI coding agent is drowning in noise
From COBOL in the 1960s to AI in the 2020s, every generation promises to eliminate programmers. Explore the recurring cycles of software simplification hype.
A lot of “capture-the-flag” style ML puzzles give you a black box neural net, and your job is to figure out what it does. When we were thinking of creating o...
California Attorney General Rob Bonta alleged Amazon led a price-fixing conspiracy of online retailers to inflate prices across the entire economy. And he's demanding an immediate halt.
Today, we're introducing Mercury 2 — the world's fastest reasoning language model, built to make production AI feel instant.
Update: Sorry, but a commenter points out that this may just be an artifact of counting based on when most recently modified, not on original submission date. Numbers using original, not most recen…
Apple today announced a significant expansion of factory operations in Houston, bringing the future production of Mac mini to the U.S. for the first time.
One engineer used AI to rebuild Next.js on Vite in a week. vinext builds up to 4x faster, produces 57% smaller bundles, and deploys to Cloudflare Workers with a single command.
Our second developer productivity study faces selection effects from wider AI adoption, prompting us to redesign our approach.
53MB of source code leaked from a government endpoint. 269 verification checks. biometric face databases. SAR filings to FinCEN. and the same company that verifies your ChatGPT account.
An interactive exploration of quadtrees. Start with brute-force spatial search, build recursive space partitioning step by step, then use it for point lookups, range queries, nearest-neighbor search, collision detection, and image compression.
Open Letter to Google Regarding Mandatory Developer Registration for Third-Party App Distribution
We measure the capabilities of LLMs to deanonymize users online.
My cavapoo Momo vibe coded playable Godot games. All I had to do was teach her to type, route her input to Claude Code, and build the right tools.
I'm building an 80386-compatible core in SystemVerilog and blogging the process. In the previous post , we looked at how the 386 reuses one barrel shifter for all shift and rotate instructions. This time we move from real mode to protected and talk about protection .
Stripe announces tender offer to provide liquidity to current and former employees; publishes 2025 annual letter
The author of Java 26's MemoryMXBean.getTotalGcCpuTime() analyzes the CPU-memory trade-off and why pause times fail to capture explicit GC cost.
Mohammed Ketab
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API…
A story about Disneyland's Space Mountain and a 10-year-old inventor.
In game development, it’s common to use spritesheets for animation, but this technique isn’t as widely used on the web these days. Which is a shame, because we can do some pretty cool stuff with sprites! In this post, we’ll share the niche CSS function you can use to leverage this technique, and explore some of the…