1261
Government Rails Site Hit Hours After CVE Patch
Rietta patched a government client's Ruby on Rails site within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.
New
The latest blog posts to take off on Hacker News. 5,939 posts.
1262
Shutting down our public encrypted DNS
Mullvad has operated public encrypted DNS (DoH) servers since 2022. They are unnecessary when using Mullvad VPN — traffic is already encrypted and Mullvad VPN's internal DNS handles all queries.
1263
Formalizing Fermat's Last Theorem
Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.
1264
The Rust React Compiler is now native in Vite
The transition to the Rust version of the React Compiler for the 1,036-file React Router codebase resulted in a significant speed increase, improving build times from 14.3 seconds to 0.81 seconds. The new compiler addresses previous limitations and ensures consistency across the toolchain, making it easier to manage…
1265
1266
The NX bit is not just about security
While I’m taking a short break from low-level programming, here’s a story by a friend of mine, Sonya, about debugging a seemingly impossible bug in ARM code. This bug hunting saga started several months ago. While developing a bare-metal hypervisor on ARM64 for postmarketOS, I hit a strange bug: if I enabled the…
1267
Ok, but does it scale?
This is probably the question I get asked most about Spacetime. It’s a simple enough question, and it certainly seems like it should have a simple answer. Scaling is a complex topic, and the devil is…
1268
Google AI Mode shows same products 21.6% more expensive than traditional search
A US and UK data study: when the same product ranks in both Google AI Mode and traditional search, the AI Mode price is about 21.6% higher.
1269
Solving the Jane Street reverse engineering challenge
Or: Why do I always do things the hard way?
1270
Decoding the NEC V20 Microcode
reenigne's decoding of the 8088 microcode in 2020 opened the doors for extremely accurate emulation of the 8088 CPU. Although I had added...
1271
Project Xanadu: Even More Hindsight (2025)
Retrospective on Project Xanadu’s success and failure: a lack of design iteration, meaningful use-cases, or practicality stopped a valuable vision from maturing into something useful. (And contrasted with my approach.)
1272
Simple Is Not Small
small programs hide coupling
1273
Which tools do Claude, Codex and Cursor choose? We measured 17k runs to find out
We watched almost 17k sessions across different types of personas, with 1,163 prompt variations, 75 repositories and 3 coding agents (Claude Code, Codex, Cursor) actually implementing the solutions instead of just recommending one.
1274
OpenAI's GPT-6 Astra on ARC-AGI-3
OpenAI's GPT-6 Astra reaches state-of-the-art results on ARC-AGI-3
1275
The asteroid currently hitting front end web development
A lot of the educators I admire in the frontend web space seem to be either bowing out or dialing back their efforts: Axel Rauschmayer, Salma Alam-Naylor, Josh…
1276
GPT-6 Astra
Introducing GPT-6 Astra, our most intelligent and aligned model yet, with state-of-the-art capabilities across computer use, coding, cybersecurity, and science.
1277
1278
120 days until Google restricts side-loading, declaring war on Android freedom
Starting 2027, Google will block apps on Android devices whose developers have not registered with Google, paid, and given their ID. It’s fair to say that Google is becoming Apple: Your device, their rules.
1279
How to bring up the Linux Kernel on a new platform
A guide to bringing up the Linux Kernel and a userspace application on a new hardware (or in this case, a self-made emulator)
1280
Sony makes bold claim about game ownership
Sony would like you to know that any reasonable gamer would know that purchasing a game is just licensing a game (Video Games Chronicle), not owning it. And there is truth mixed in with a bold-face…
1281
K2 Horizon: A connected fleet of six open models
Explore K2 Horizon, IFM’s open-source fleet of six frontier AI models for reasoning, coding, agentic workflows, edge devices, and enterprise deployment.
1282
.name Termination
Nearly twenty-five years ago I registered neil.fraser.name to provide a stable presence on the Internet. It has been the home of this website, my email address, and a server for APIs. It predates YouTube, Facebook, and smart phones. Minutes after my daughter was born, I also registered beverly.fraser.name .
1283
Porting my 1993 Amiga game to Godot, with an LLM reading the 68000 assembly
Babylonian Twins is an Amiga platformer I built in Baghdad in 1993, in 68000 assembly. This summer an LLM ported it to Godot, and this is what I found when I read back through what it did. The original disks are now free on itch.io.
1284
I'm a seeing-eye dog for a computer
I'd rather argue with strangers on the Internet.
1285
New York Times and The Athletic workers demand company scrap Kalshi deal
With a unanimous vote, the Times Guild Unit Council and The Athletic’s contract action team approved the following statement:
1286
How Swiss tables work in Go built-in map
Go 1.24 replaced the built-in map’s bucket-based runtime with Swiss Tables. This article explains groups, control bytes, H1 and H2, probing, table growth, directories, deletion, load factor, and the experimental split-group layout.
1287
Pre-Release of Polars 2.0
Preview of Python Polars 2.0, bringing the streaming engine to all lazy queries
1288
METR Report on OpenAI / Hugging Face Hacking Incident
Two METR staff members and a Redwood Research contractor investigated an incident in which OpenAI agents coordinated a multi-day hack of Hugging Face on a shared unsanctioned message board.
1289
VC isn't VC anymore
A blog about making culture. Since 1999.
1290
Reasons robotics is hard
And why you should ignore demo videos