iOS Single App Mode Escape
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
The latest blog posts to take off on Hacker News. 80,908 posts.
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
In a shocking turn of events, several smartphone manufacturers, including industry giant Samsung, have taken a drastic step that has left customers outraged. These companies have remotely disabled phones purchased through gray markets, effectively holding the users’ data hostage until they buy new phones from official…
Cascade is a RISC-V CPU fuzzer that generates valid , long and complex programs, and relies on a termination cascade-effect for bug detection. It detected 37 new bugs (29 new CVEs) in 5 RISC-V CPUs, which is more than all the existing fuzzers, combined. You can read a paper we wrote on Cascade here and try it out here…
Take control of your web by running your own personal cloud server with Sandstorm.
I'm trying out TinaCMS to make it faster and easier to post here!
Today is the day! After more than a year of work, our team is excited to finally put a fancy "stable" sticker on the first release from the 4.x release line! To celebrate, let's make together a tour of the major changes; should you look for a more itemized list, take a look at the changelog.
The biggest library release is finally here! Learn more about the changes, motivation behind them, and how to upgrade to the next version today.
Embeddings are a really neat trick that often come wrapped in a pile of intimidating jargon. If you can make it through that jargon, they unlock powerful and exciting techniques …
Raspberry Pi 5: available now! We’ve been excited to see the response of early users to Raspberry Pi 5, and can’t wait to see what you do once you get your hands on it.
The EU Regulation to Prevent and Combat Child Sexual Abuse, first published in May 2022, has become the "most criticized law of all time". Here's how to stop it now!
Comparing two identically designed websites, their weight, amount of HTML and CSS, rendering speed, and best practices.
Audible even over the squeal of an HVAC blower with a suffering belt, the whine of small, high velocity fans pervades the grocery side of this Walgreens. Were they always this loud? I'm not sure; some of the fans sound distinctly unhealthy. Still, it's a familiar kind of noise to anyone who regularly works around…
Hackweek 22 took place last week. During this week all the SUSE employees are free to hack on whatever they want. This one of the perks of working at SUSE 😎.
Based on your feedback, we've improved the Automatic Data Conversion settings, and made them also available in Excel for Mac.
Base64 is an elegant way to convert binary data to text, making it easy to store and transport. This article covers the basics of Base64 encoding, including what it is, how it works and why it's important. It also shows how to encode and decode Base64 data in various programming languages.
Our systems and ourselves
Nanofiche is an archival technology, designed to preserve knowledge forever.
No reckoning allowed save the marvelous arithmetics of distance (from Smelling the Wind by Audre Lorde) Suppose a child comes up to you and says “I know 1 is odd and 2 is even, but I think 4 is mor…
Learn how to use Apache Kafka as a buffer between OpenTelemetry Collectors for a scalable multi-collector pipeline, with YAML configuration examples.
The simple standalone C++ code that goes with this post and makes autostereograms, can be found at The 1990s! They felt like a wasteland of culture at the time, but looking back, there was hyper co…
Today is the third annual Global Encryption Day, a day to highlight why encryption is critical for a safe, private internet.
VSS Hardware Hacking Wiki and Blog Entries
Each and every week, Uber’s 4,500 stateless microservices are deployed more than 100,000 times by 4,000 engineers and many autonomous systems. These services are developed, deployed, and operated by hundreds of individual teams working independently across the globe. The services vary in size, shape, and…
Introducing v0
A compilation of evidence that Hal Finney and Satoshi Nakamoto were different people.
How an open redirect in Harvest’s Outlook Calendar integration leaked the OAuth tokens of connected Microsoft accounts, with a step-by-step proof of concept.
Last year I was on a date, and, being somewhat new to San Francisco, proposed a walk directly through the Tenderloin. After we arrived, my date was somewhat disturbed: “What happened?” I said. “Di…
My thesis on Amiga ASCII art translated to English.
What;s up with those empty renders in rendering research papers? The white furnace test, one of my favourite rendering debug tools. It can be used to check several levels of implementation, not just the BRDF, but also the sampling and the Monte Carlo integration loop, Continue reading →