151
Apple's git still trusts the compromised eMudhra certificates
Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
New
The latest blog posts to take off on Hacker News. 80,767 posts.
152
Tips for more effective fuzz testing with AFL++
Fuzz testing is incredibly effective for mechanically discovering software defects, yet remains underused and neglected. Pick any program that must gracefully accept complex input, written in any language , which has not yet been been fuzzed, and fuzz testing usually reveals at least one bug. At least one program…
153
Reading and writing are less symmetric than you (probably) think
I am talking about the I/O operations as used in computing here. A typical example of how this kind of thing is exposed are the POSIX syscalls read(2) and write(2), which have the following C funct…
154
Git for the US Code
Lawyers should be able to read a statute as it stood on any date and see which law wrote each phrase. A history of nine titles of the US Code, built by replaying every amendment, as the example.
155
Reviewers rarely talk about reliability. Owners bring it up twice as often
Across 654 products in 19 categories, Reddit owners bring up reliability and support in 13% of their opinions, YouTube reviewers in 7%. On apps, 71% of owner opinions are negative. Data to download.
156
Hunger beats tenure: Advice for junior engineers
The coding interview is dead, at least for my team at Anthropic. I've seen enough to know that it no longer provides signal. I have a spicily optimistic take: I think there's a huge opportunity for junior engineers.
157
Early progress on accelerating drug development with Claude
Over the past several months, we’ve partnered with six organizations to accelerate curing disease. We’ve also started drug discovery efforts of our own, including programs for rare childhood forms of muscular dystrophy. In this post, we provide an update on our progress.
158
Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees
Device tree files point to a Raspberry Pi Zero 3 W with the Pi 4’s BCM2711 chip and a cut-down Pi 4 Model A.
159
Four Months of Zig
It has been about four months since I returned to Zig after being absent for a few years. In this time, I have written some software in Zig and reengaged with the community, online and in person. I decided to share some of that experience, including what I have liked about Zig so far and what I haven't. I'll include…
160
Tailscale SSH: Investigation and remediation update
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
161
Discord will soon let anyone find public server messages through Google
Starting on November 16, 2026, conversations in Discoverable Servers will be easier to find for people searching the web. Admins can choose which channels are surfaced on the web. Private servers, DMs, and GDMs are not included.
162
Introducing LFM3: Every Modality for Specialized Intelligence
LFM3 is Liquid AI’s new open-weight model family: 2B-class text, vision, audio, omni, and decision models built to fine-tune and run fast on any device.
163
Ghostty 1.4
Release notes for Ghostty 1.4.0, released on October 27, 2026.
164
New 14‑inch MacBook Pro with M6
Apple today announced the new 14-inch MacBook Pro with M6, delivering more performance, powerful on-device AI capabilities, and faster connectivity.
165
Genie 4
Genie 4 introduces real-time interactive world simulation with native audio, advanced physics, natural human motion, and steering powered by Gemini models.
166
Simple circuits can create complex behaviors
How simple circuits can create complex behaviors
167
PHP2Shell: Exploitation attempts and remediation trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
168
Here be monsters: What do you still need to know when agents do the work?
AI agents write code faster than anyone can read it. What engineers still need: fundamentals, breadth, and the willingness to dive in when it breaks.
169
New 14‑inch MacBook Pro with M6
Apple today announced the new 14-inch MacBook Pro with M6, delivering more performance, powerful on-device AI capabilities, and faster connectivity.
170
Software may be getting worse, but it used to be horrible
Software is degrading all around us, for obvious reasons. I've written about this before. All else equal, if you increase your code production by 10x but you don't reduce your error rate by a factor of 10, then your production app is buggier than it used to be. I've seen threads where people also have...
171
AI promised less work. I've never worked more
Agents made implementation cheap, so I started doing far more of it in parallel. My GitHub history since 2019 shows what that did: as VP of Technology I am back at my full-stack engineer pace, with bursts, burnout and a low season that is no longer low.
172
Roblox downloaded 145GB models from us (including adult content) without asking
On 15 and 16 October 2026, a crawler that said it belonged to Roblox walked through almost every project on Open3DLab, SFMLab and SmutBase, and proceeded to download complete copies of 1,027 files from 712 projects. 145.5 GB of our creators' work, downloaded for what we assume are AI training purposes.
173
A new faster algorithm to compute 64-bit signed floor division
The missing chapter of Hacker's Delight
174
The Mythical Man-Month in the Age of AI
An update to Brooks's Law in the age of AI.
175
176
Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue.
177
Three new discoveries in mathematics, computer science, and physics
OpenAI shares model results on the Kakeya conjecture, Exponential Time Hypothesis, and quantum chromodynamics—and how researchers can verify and build on them.
178
Why a program doesn't work when run from a batch file, but works when clicked
Mimicking the operation more accurately.
179
Somebody please stop the spam texts
I complain about spam texts and consider why I’m so hesitant to just reply STOP to unsubscribe.
180
Iterating Backwards in C
This is shorter than some of my other posts, but I keep seeing people doing this wrong. It's even worse now in the LLM era.