7171
We need a clearer framework for AI-assisted contributions to open source
A framework for reasoning about AI-based changes you encounter or create.
New
The latest blog posts to take off on Hacker News. 80,826 posts.
7172
Understanding the Worst .NET Vulnerability
In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it
7173
Criminal complaint against facial recognition company Clearview AI
Clearview AI is known for scraping billions of photos of people around the world on the internet – and selling its facial recognition system to law enforcement and state actors
7174
I built the same app 10 times: Evaluating frameworks for mobile performance
I needed to choose a framework for a mobile-first app at work. I started comparing Next.js, SolidStart, and SvelteKit, then expanded to 10 frameworks. The measurements revealed dramatic differences in bundle sizes, performance, and the real cost of framework choices.
7175
7176
Quantifying pass-by-value overhead
Owen's personal website and portfolio
7177
AI can code, but it can't build software
AI can write code, but it can’t build real software. Software engineering remains human work because AI can code, not engineer.
7178
Iroh-blobs
Learn about the new features in the new blobs API
7179
Linux VM without VM software – User Mode Linux
Quick demonstration of using User Mode Linux (UML) to run a Linux VM inside Linux's userspace, without additional VM software or even root permissions
7180
Welcome to hell; please drive carefully
A while back we watched a video on the topic of British road crossings (which I strongly recommend, as well as Chris's shorter video specifically about Zebra crossings ) and since then Tess has been calling out the different crossings by their proper animal names. This explains why, with tickets to a Halloween event…
7181
The PSF has withdrawn a $1.5M proposal to US Government grant program
The Python Software Foundation was recently "recommended for funding" (NSF terminology) for a $1.5m grant from the US government National Science Foundation to help improve the security of the Python …
7182
Creating an all-weather driver
Life doesn't freeze when winter comes—if anything, that's when riders need reliable transportation most, when being exposed to the elements becomes less appealing. Today, the Waymo Driver successfully navigates rain, fog, sandstorms, and freezing temperatures. As we expand to more cities across the U.S. and globally…
7183
The new calculus of AI-based coding
A collection of posts by Joe Magerramov
7184
Avoid 2:00 and 3:00 am cron jobs (2013)
A word to the wise: Do not set any cron jobs for 2:00 am or 3:00 am on Sunday morning! Or to be safe, on other mornings besides Sunday as well, since jobs originally set to run on some particular day may eventually be changed to run on another day, or every day.
7185
Why Busy Beaver hunters fear the Antihydra
In which I explore the biggest barrier in the busy beaver game. What is Antihydra, what is the Collatz conjecture, how are they connected, and what makes them so daunting?
7186
More than DNS: Learnings from the 14 hour AWS outage
A thorough review of a major cloud outage.
7187
7188
PSF has withdrawn $1.5M proposal to US Government grant program
In January 2025, the PSF submitted a proposal to the US government National Science Foundation under the Safety, Security, and Privacy of Open Source Ecosystems program to address structural vulnerabilities in Python and PyPI. It was the PSF’s first time applying for government funding, and navigating the intensive…
7189
7190
FlightAware Map Design (2024)
Designing new map styles for FlightAware
7191
7192
You are how you act
You are the sum of your behaviors not your intentions
7193
I built my own CityMapper
We've all used a public transit router to find a quick route from A to B, such as Google Maps or CityMapper, but how do they actually work?
7194
Tags to make HTML work like you expect
I was watching Alex Petros’ talk and he has a slide in there titled “Incantations that make HTML work correctly”. This got me thinking about the basic snippets…
7195
Why JPEG XL ignoring bit depth is genius (and why AVIF can't pull it off)
JPEG and AVIF are locked to 8, 10 or 12 bits. JPEG XL works in float32 with the XYB color space, so bit depth stops mattering. Here’s why that helps HDR.
7196
How I turned Zig into my favorite language to write network programs in
I’ve been watching the Zig language for a while now, given that it was created for writing audio software (low-level, no allocations, real time). I never paid too much attention though, it seemed a little weird to me and I didn’t see the real need. Then I saw a post from Andrew Kelley (creator of the language) on…
7197
Microsoft 365 Copilot – Arbitrary Data Exfiltration via Mermaid Diagrams
When Microsoft 365 Copilot (M365 Copilot) was asked to summarize a specially crafted Microsoft Office document, an indirect prompt injection payload triggered the execution of arbitrary instructions to fetch sensitive tenant data, such as “recent emails” and hex encode the fetched output. M365 Copilot then generated a…
7198
AI Mafia Network – An interactive visualization
An interactive visualization — based on the Acquired Google Podcast Credits to Ben and David (who also appreciated this graph in the Acquired internal Slack!).
7199
Poison, Poison Everywhere
When I was in high school, my teacher once told us a crazy story.
7200
We saved $500k per year by rolling our own "S3"
At thousands of uploads/second, S3’s per-request fees dominated costs. We built N3, a Rust in-memory landing zone with S3 as overflow.