9211
New
The latest blog posts to take off on Hacker News. 80,835 posts.
9212
Breaking Git with a carriage return and cloning RCE
tl;dr: On Unix-like platforms, if you use git clone --recursive on an untrusted repo, it could achieve remote code execution. Update to a fixed version of Git and other software that embeds Git (including GitHub Desktop).
9213
Supabase MCP can leak your entire SQL database
Indirect prompt injection through support-ticket data lets an MCP-enabled assistant cross trust boundaries and query private tables with Supabase’s privileged service role.
9214
GlobalFoundries to Acquire MIPS
Acquisition will expand GF portfolio with cutting-edge RISC-V processor IP and software tools for real-time computing in autonomous mobility, industrial automation, datacenter and intelligent edge applications MALTA, N.Y., and San Jose, Calif., July 8, 2025 – GlobalFoundries (Nasdaq: GFS) (GF) today announced a…
9215
Blind to Disruption – The CEOs Who Missed the Future
How did you go bankrupt?” Two ways. Gradually, then suddenly.” Ernest Hemingway, The Sun Also Rises Every disruptive technology since the fire and the wheel have forced leaders to adapt or di…
9216
Why LLMs Can't Write Q/Kdb+: Writing Code Right-to-Left
In my previous post I showed how LLMs struggle with coding in q/kdb+; having immediate feedback loops using the q-MCP server does help a…
9217
SVGs that feel like GIFs
The moving image below is only 49Kb and has an incredibly high resolution. It's similar to a GIF but instead of showing moving images, it shows moving SVGs!
9218
Leveraging Elixir's hot code loading capabilities to modularize a monolithic app
How hot code loading solves client-specific engineering problems in my startup Alzo
9219
Analyzing database trends through 1.8M Hacker News headlines
We analyzed 1.8 million Hacker News headlines spanning February 2007 to June 2025 to examine database engine popularity trends. Using camelAI connected to a ClickHouse database, we uncovered which databases the HN...
9220
Bootstrapping a side project into a profitable seven-figure business
Bootstrapping a side project into a profitable seven-figure business in four years.
9221
LookingGlass: Generative Anamorphoses via Laplacian Pyramid Warping
Anamorphosis refers to a category of images that are intentionally distorted, making them unrecognizable when viewed directly. Their true form only reveals itself when seen from a specific viewpoint, which can be through some catadioptric device like a mirror or a lens. While the construction of these mathematical…
9222
Running a Certificate Transparency log
Maybe you, yes you, should run a Certificate Transparency log. It’s cheaper, easier, and more important than ever.
9223
Serving a half billion requests per day with Rust and CGI
In my previous post Serving 200 million requests per day with a cgi-bin, I did some quick performance testing of CGI using a program written in Go. Go works excellently for CGI programs, for many of the same reasons it works so well for CLI programs and system daemons. But, out of curiosity, I decided to do a bit more…
9224
9225
Thunderbird 140 “Eclipse”
Our future's so bright, we need ISO-approved shades. Find out what's shiny in our new Extended Security Release, Thunderbird 140 "Eclipse."
9226
Batch Mode in the Gemini API: Process More for Less
Discover how Batch Mode in Gemini API allows developers to submit large jobs, offload processing, and get results in 24 hours, offering simplicity, convenience, and cost-savings.
9227
The era of exploration
This post explores the idea that the next breakthroughs in AI may hinge more on how we collect experience through exploration, and less on how many parameters and data points we have.
9228
Adding a feature because ChatGPT incorrectly thinks it exists
At Soundslice, our sheet music scanner digitizes music from photographs, so you can listen, edit and practice. We continually improve the system, and I keep an eye on the error logs to see which images are getting poor results.
9229
Postgres LISTEN/NOTIFY does not scale
Learn why Postgres LISTEN/NOTIFY doesn't scale for high-throughput use cases and what architectural alternatives Recall.ai uses in production.
9230
9231
I used o3 to profile myself from my saved Pocket links
Welp, Pocket shuts down tomorrow despite our pleas for it to stay. While migrating1 all of my saved articles, I noticed that I’ve got almost 900 saved articles spanning nearly 7 years. That’s a goldmine of stuff-I-like data! Some quick analysis using xsv2: 𝄢 unzip pocket.zip && xsv headers part_000000.csv 1 title 2…
9232
Deno 2.4
Deno bundle is back, alongside the addition of bytes and text imports, stabilized built-in OpenTelemetry, a new --preload flag, simplified dependency management with deno update, and more.
9233
Swedish Campground (2004)
We thought it was important for the user to be able to invoke every menu command directly from the keyboard, so we added a special key to the keyboard to invoke menu commands, just like our predecessor, Lisa. We called it the "Apple key"; when pressed in combination with another key, it selected the corresponding menu…
9234
The Broken Microsoft Pact: Layoffs and Performance Management
The unspoken agreement that made Microsoft's lower pay tolerable has fundamentally broken.
9235
A non-anthropomorphized view of LLMs
In many discussions where questions of "alignment" or "AI safety" crop up, I am baffled by seriously intelligent people imbuing almost magic...
9236
Nobody has a personality anymore: we are products with labels
We are products with labels
9237
Building the Rust Compiler with GCC
If you know one thing about me, it is that I love working on the Rust compiler. Some people kayak, travel or play guitar - and I stare at assembly, trying to figure out what I broke.
9238
Why English doesn't use accents
And why French is full of them
9239
I don't think AGI is right around the corner
Continual learning is a huge bottleneck
9240
Belgium Is Unsafe for CVD
This post is about the reason I will probably never try to warn any organisation in Belgium about any vulnerability again. Recently I have been dealing with an attempt at coordinated vulnerability disclosure (CVD) with an organisation in Belgium. This post is not about that, because I’m not allowed to write about it…