1471
You are the scariest monster in the woods
We shouldn’t worry about AI destroying society because there’s something scarier out there (it’s us)
New
The latest blog posts to take off on Hacker News. 6,220 posts.
1472
A kernel stack use-after-free: Exploiting Nvidia's GPU Linux drivers
This article details two bugs discovered in the NVIDIA Linux Open GPU Kernel Modules and demonstrates how they can be exploited. The bugs can be triggered by an attacker controlling a local unprivileged process. Their security implications were confirmed via a proof of concept that achieves kernel read and write…
1473
Pwning the Nix ecosystem
ptrpaws's blog on reverse engineering, programming, vr finds and miscellaneous stuff.
1474
iPad Pro with M5 chip
Apple today introduced the new iPad Pro with M5, delivering a huge boost in performance and taking the next big leap in AI for iPad.
1475
Apple Vision Pro upgraded with M5 chip
Apple introduced the upgraded Apple Vision Pro, featuring the powerful M5 chip, the Dual Knit Band, and innovative features with visionOS 26.
1476
Apple M5 chip
Apple today announced M5, delivering advances to every aspect of the chip and the next big leap in AI.
1477
I almost got hacked by a 'job interview'
I was 30 seconds away from running malware, Here's how a sophisticated scam operation almost got me, and why every developer needs to read this.
1478
Garbage collection for Rust: The finalizer frontier
Abstract Rust is a non-Garbage Collected (GCed) language, but the lack of GC makes expressing data-structures that require shared ownership awkward, inefficient, or both. In this paper we explore a new design for, and implementation of, GC in Rust, called Alloy . Unlike previous approaches to GC in Rust, Alloy allows…
1479
Reverse engineering iWork
So you don't have to.
1480
Leaving serverless led to performance improvement and a simplified architecture
Every millisecond matters when you're in the critical path of API authentication. After two years of fighting serverless limitations, we rebuilt our entire API stack and slashed the end-to-end latency.
1481
Bots are getting good at mimicking engagement
Click fraud protection in one tool: DataCops flags bot clicks, blocks repeat bots at your Cloudflare edge, keeps them out of the conversions 8 ad platforms learn from, and exports Google refund evidence.
1482
The scariest "user support" email I've received
Hi, it's Takuya. As your app grows in popularity, you occasionally start to attract attacks aimed directly at you—the developer or site owner. Just the other day, I got one that was honestly terrifying, so I'd like to share it. The Email Subject: Cookie consent prevents platform
1483
Europe's Digital Sovereignty Paradox – "Chat Control" Update
Can you build tech independence while breaking encryption?
1484
How to stop Linux threads cleanly
Stopping a Linux thread is a surprisingly annoying affair. In this post I present common pitfalls and some solutions -- although no truly satisfactory method exists.
1485
Just talk to it – A way of agentic engineering
A practical guide to working with AI coding agents without the hype.
1486
I am a programmer, not a rubber-stamp that approves Copilot generated code
Today morning, I came across this reddit post titled Completely losing interest in the career due to AI and AI-pilled people. They describe how in a span of ...
1487
Nvidia DGX Spark: great hardware, early days for the ecosystem
NVIDIA sent me a preview unit of their new DGX Spark desktop “AI supercomputer”. I’ve never had hardware to review before! You can consider this my first ever sponsored post …
1488
1489
Bare Metal (The Emacs Essay)
The following submission to Jeremy Friesen’s ‘elevator pitch’-themed Emacs blog carnival is taken from my rather long manuscript in progress (‘the present work’), tent…
1490
Half of America's Voting Machines Are Now Owned by a MAGA Oligarch
They told us elections were rigged. Then they cloned stolen voting software. Then they bought the voting machines.
1491
Unpacking Cloudflare Workers CPU Performance Benchmarks
Cloudflare investigated CPU performance benchmark results for Workers, uncovering and fixing issues in infrastructure, V8 garbage collection, and OpenNext optimizations. These improvements have made Cloudflare Workers faster for all customers.
1492
AppLovin nonconsensual installs
Mobile adtech juggernaut AppLovin recently faced multiple allegations of misconduct . Allegations run the gamut—privacy, ad targeting, even national security and ties to China. I was among the researchers consulted by skeptical investors this spring, and I was quoted in one of their reports, explaining my concerns…
1493
Why the open social web matters now
The needs are real – and you have so much power.
1494
Your data model is your destiny
Your product's core abstractions determine whether new features compound into a moat or just add to a feature list. Here's how to get it right.
1495
What Americans die from vs. what the news reports on
What do Americans die from, and what do the New York Times, Washington Post, and Fox News report on?
1496
Beliefs that are true for regular software but false when applied to AI
Can't you just turn it off?
1497
How bad can a $2.97 ADC be?
A tale of suspiciously cheap ADS1115s
1498
Ruby Blocks
How to start really getting Ruby, especially blocks.
1499
Benchmarking Postgres 17 vs. 18
Postgres 18 brings a significant improvement to read performance via async I/O and I/O worker threads. Here we compare its performance to Postgres 17.
1500
A modern approach to preventing CSRF in Go
My new book guides you through the start-to-finish build of a real world web application in Go — covering topics like how to structure your code, manage dependencies, create dynamic database-driven pages, and how to authenticate and authorize users securely .