Nx compromised: malware uses Claude code CLI to explore the filesystem
What is s1ngularity-repository? Nx is compromised and the malware steals wallets and API keys using Claude CLI or Gemini.
The latest blog posts to take off on Hacker News. 80,832 posts.
What is s1ngularity-repository? Nx is compromised and the malware steals wallets and API keys using Claude CLI or Gemini.
Understand OpenTelemetry traces and spans with real code examples. Instrument Node.js/TypeScript apps for distributed tracing and faster debugging.
On hosting images without the price tag.
Making programs slower can be useful to find...
We’ve had decades of thought leadership around testing, especially coming from holistic development philosophies like Agile, TDD, and BDD. After all that time and several supposedly superseding movements, the developers I talk to seem to have developed a folk wisdom around tests. That consensus seems to boil down to…
In the AI era, the winners won’t be the tools you adapt to — they’ll be the tools that adapt to you.
I’ve invested in a new odometer to help my car go faster. Accountability is important, and as a driver I believe the most important thing I can do is set measurable, achievable and inspiring goals for the people pushing my car down the road.
Every now and then someone tells me that their child loves video games and wants to get into the game industry, then asks me how...
Google announced a program that is proving to be unpopular among Android app development experts. I have questions.
AI coding has made me much more productive—but at a strange cost. I can't listen to music when I code anymore.
In 2020, Apple released the M1 with a custom GPU. We got to work reverse-engineering the hardware and porting Linux. Today, you can run Linux on a range of M1 and M2 Macs, with almost all hardware working: wireless, audio, and full graphics acceleration.
I do not enjoy writing about technology. Aside from the shiny, birdlike emotion I get from opening a new Apple product every three years, I do not enjoy using much of modern technology. I view my phone with mistrust and resentment, even as I allow it to eat my time with distractions to recover from a day of ostensibly…
Sometimes a merge request (MR) doesn't merit a code review (CR) because AI was used in a bad way that harms the team or the project. For example:
We're piloting Claude in Chrome to test browser-based AI capabilities while addressing prompt injection risks and building the safety measures needed before wider release.
Half a century ago, the puzzling phrase "special register groups" started showing up in definitions of "CPU", and it is still there. In this...
I was reading the latest issue of the journal Science , and a paper mentioned the compound Cr 2 Gr 2 Te 6 . For a moment, I thought my knowl...
Starting August 29th, new regulations have come into effect. Both DHL and UPS currently have no working solution, so on their advice, we are temporarily suspending all shipments to the USA effectiv…
Windows 7 ESU extended support for all Windows 7 users out there!
Folie a deux ex machina
Taking inspiration from a rare mutation that makes people impervious to viral diseases, a Columbia researcher is developing a therapy that could bestow this superpower on the rest of us.
Explore Gemini 2.5 Flash Image, a powerful new image generation and editing model with advanced features and creative control.
SSL requirements are quickly becoming obnoxious.
The U.S. taking an equity stake in Intel is a terrible idea; it also happens to be the least bad idea to make Intel Foundry viable.
For the last ten years or so of working on Bundler, I’ve had a wish rattling around: I want a better dependency manager. It doesn’t just manage your gems, it manages your ruby versions, too. It doesn’t just manage your ruby versions, it installs pre-compiled rubies so you don’t have to wait for ruby to compile from…
I’m a big fan of “sharp tools”. These are tools that are powerful enough to be hugely helpful or harmful, depending on how they’re used. Most forms of direct…
A CLI tool is not an app, and none of you are reading the docs as carefully as you think you are
Will Smith is being accused of generating fake fans with AI, but it's complicated: the crowds are real, but the videos were manipulated by Smith's team and YouTube itself.
Lately I’ve been trying to find (and understand) the limits of time syncing between Linux systems. How accurate can you get? What does it take to get that? And what things can easily add measurable amounts of time error? After most of a month (!), I’m starting to understand things. This is kind of a follow-on to a…
These are the not the work of carpenters who care about the backs of the cabinets they’re building. These icons are so bad, they look like the work of untrained “How hard can it be?” dilettante carpenters who only last a few days on the job before sawing off one of their own fingers.