481
New
The latest blog posts to take off on Hacker News. 8,768 posts.
482
Anthropic installed a spyware bridge on my machine?
Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.
483
Keep Pushing: We Get 10 More Days to Reform Section 702
In a dramatic middle-of-the-night stand off, a bipartisan set of lawmakers pushing for true reform and privacy protections for Americans bought us some more time to fight! They are holding out for, at a minimum, the requirement of an actual probable cause warrant for FBI access to information...
484
"cat readme.txt" is not safe if you use iTerm2
Turning "cat readme.txt" into arbitrary code execution in iTerm2.
485
We reproduced Anthropic's Mythos findings with public models
Anthropic framed Mythos and Project Glasswing as proof that frontier AI vulnerability research now needs gated access. We tested the public, patched cases with GPT-5.4 and Claude Opus 4.6 and found that the key building blocks are already accessible outside Glasswing, while reliable operationalization remains the real…
486
487
Codex Hacked a Samsung TV
We gave Codex a foothold. It popped a root shell.
488
Google broke its promise to me – now ICE has my data
In 2025, Google gave Amandla Thomas-Johnson's data to ICE without giving him the chance to challenge the subpoena, breaking a nearly decade-long promise to notify users before handing their data to law enforcement.
489
Prove you are a robot: CAPTCHAs for agents
How we built a reverse-CAPTCHA for agents, and what we learned.
490
Cybersecurity looks like proof of work now
AISI’s tests of Mythos suggest a new security economy: to harden a system you must spend more tokens finding exploits than attackers do.
491
I wrote to Flock's privacy contact to opt out of their domestic spying program
I wrote to Flock’s privacy contact to opt out of their …
492
Someone bought 30 WordPress plugins and planted a backdoor in all of them
Last week, I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into
493
This year’s insane timeline of hacks
An archive of this year’s insane timeline of hacks few people are talking about
494
Android now stops you sharing your location in photos
My wife and I run OpenBenches. It's a niche little site which lets people share photos of memorial benches and their locations. Most modern phones embed a geolocation within the photo's metadata, so we use that information to put the photos on a map. Google's Android has now broken that. On the web, we used to use…
495
My adventure in designing API keys
Hello everyone, It has been quite a long time since my last blog, the last couple of months had been very busy and packed with a lot of work so I barely had much time to write blogs. Time runs so fast that the last time when I wrote a blog I was still a DevOps Engineer and now I am a Product Developer lol.
496
Put your SSH keys in your TPM chip
Published: 10-04-2026 19:37 | Author: Remy van Elst | Text only version of this article
497
Small models also found the vulnerabilities that Mythos found
When AISLE tested Mythos's showcase vulnerabilities on small, cheap, open-weights models, most found the same bugs. Here's what that means for cyber.
498
You can't trust macOS Privacy and Security settings
How to gain access to the contents of privacy-protected folders even though Privacy & Security settings say that access is denied.
499
Supply chain nightmare: How Rust will be attacked and what we can do to mitigate
An essential part of being able to say "I told you so" is in fact having told you so. Well, here we are. For those living under a rock (lucky
500
New iPhone age and identity checks restrict internet freedom in the UK
A recent iPhone software update is quietly changing how millions of people in the UK access the internet — and most people don’t yet realise the scale of what’s happened. With the release of iOS 26.4, Apple has introduced mandatory age and identity checks at the operating system level. In simple terms, your iPhone may…
501
EFF is leaving X
After almost twenty years on the platform, EFF is logging off of X. This isn’t a decision we made lightly, but it might be overdue.
502
The Vercel plugin on Claude Code wants to read your prompts
09 Apr 2026 The Vercel Plugin on Claude Code wants to read all your prompts!
503
Session is shutting down in 90 days
The Session Technology Foundation cannot continue without your support. Donate today to help Session in its fight for survival.
504
Open source security at Astral
Insights and guidance from our engineering team on how Astral secures its tools.
505
Assessing Claude Mythos Preview's cybersecurity capabilities
Technical details on how we tested Claude Mythos Preview, a model strikingly capable at computer security tasks, and what we found.
506
Project Glasswing: Securing critical software for the AI era
A new initiative to secure the world’s most critical software and give defenders a durable advantage in the coming AI-driven era of cybersecurity.
507
Cloudflare targets 2029 for full post-quantum security
Recent advances in quantum hardware and software have accelerated the timeline on which quantum attack might happen. Cloudflare is responding by moving our target for full post-quantum security to 2029.
508
A cryptography engineer's perspective on quantum computing timelines
The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.
509
German police name alleged leaders of GandCrab and REvil ransomware groups
An elusive hacker who went by the handle “ UNKN ” and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and helped carry out at least 130 acts of computer sabotage and extortion…
510