New
The latest blog posts to take off on Hacker News. 6,220 posts.
I uncovered an ACPI bug in my Dell Inspiron 5567. It was plaguing me for 8 years
Imagine you close your laptop lid to put it to sleep, but instead of pausing, it reboots. Not every time, just often enough to be infuriating. You try to save your work, but the machine decides to start over.
Scream cipher
You've probably heard of stream ciphers, but what about a scream cipher 😱? Today I learned there are more “Latin capital letter A” Unicode characters than there are letters in the English alphabet....
This website has no class
Going “full CSS Zen Garden” with modern CSS.
Pnpm has a new setting to stave off supply chain attacks
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly...
Slack has raised our charges by $195k per year
An open letter, or something
Hypervisor 101 in Rust
This is a day long course to quickly learn the inner working of hypervisors and techniques to write them for high-performance fuzzing.
Meta Ray-Ban Display
The wait is over. Meta Ray-Ban Display hits shelves in the US today!
One Token to rule them all – Obtaining Global Admin in every Entra ID tenant
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin…
A postmortem of three recent issues
A technical report on three bugs that intermittently degraded Claude's responses: what happened, why fixes took time, and what we're changing.
Famous cognitive psychology experiments that failed to replicate
A quick reference
Optimizing ClickHouse for Intel's ultra-high core count processors
Intel's latest processor generations are pushing the number of cores in a server to unprecedented levels. For analytical databases like ClickHouse, ultra-high core counts represent a huge opportunity and a complex challenge.
WASM 3.0 Completed
WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.
Tinycolor supply chain attack post-mortem
Lessons learned from becoming the unexpected face of a npm supply-chain attack.
Not Buying American Anymore
I feel like I need to first defuse any idea of antagonizing Americans themselves. The people are never to blame. This isn't a post criticizing the American people, it's criticizing the state of things that makes it impractical to have any sort of economical relation with the country if you are an average Joe like me.
How to motivate yourself to do a thing you don't want to do
Learn some ways to help encourage action when you feel unmotivated.
Firefox 143 for Android to introduce DoH
All web browsing starts with a DNS query to find the IP address for the desired service or website. For much of the internet’s history, this query is sen
Bringing fully autonomous rides to Nashville, in partnership with Lyft
Waymo is bringing the magic of our fully autonomous ride-hailing service to riders in Nashville, in partnership with Lyft in 2026. Riders will be able to hail via the Waymo app, and as our service grows, riders will also be able to use the Lyft app to match with a Waymo vehicle.
Tau² benchmark: How a prompt rewrite boosted GPT-5-mini by 22%
We expected small models to be fast, but our benchmarks revealed a common reliability trap. Here’s our deep dive on finding and fixing it.
Claude can sometimes prove it
We take pride in personally connecting with all interested partners, collaborators and potential clients. Please email us with a brief description of how you would like to be connected with Galois and we will do our best to respond within one business day.
Procedural Island Generation (III)
Adding multi-scale noise layers, mountain distance fields, and elevation blending to create detailed terrain from the paint map foundation.
Apple Photos app corrupts images
The Apple Photos app sometimes corrupts images when importing from my camera. I just wanted to make a blog post about it in case anyone else runs into the problem. I’ve seen other references to this online, but most of the people gave up trying to fix it, and none of them went as far as I did to debug the issue. I’ll…
PureVPN IPv6 Leak
Two findings in PureVPN on Ubuntu 24.04. After a reconnect the system takes a default IPv6 route outside the tunnel, and the ip6tables OUTPUT policy is still ACCEPT, so traffic leaves in the clear while the client reports connected.
Oh no, not again a meditation on NPM supply chain attacks
For enterprise software, the software supply chain presents some of the biggest risks today to data privacy and security.
Stategraph: Terraform state as a distributed systems problem
Terraform state is a distributed systems problem masquerading as file storage. Graph state fixes the bottlenecks.
Israel has committed genocide in the Gaza Strip, UN Commission finds
GENEVA – Israel has committed genocide against Palestinians in the Gaza Strip, the UN Independent International Commission of Inquiry on the Occupied Palestinian Territory, including East Jerusalem, and Israel said in a new report today.
Slow social media
How can we design better platforms?
I got the highest score on ARC-AGI again swapping Python for English
Using Multi-Agent Collaboration with Evolutionary Test-Time Compute
In Defense of C++
Why C++ remains a powerful and relevant programming language in today's tech landscape.
Should we drain the Everglades?
no pls dont