New
The latest blog posts to take off on Hacker News. 5,933 posts.
Running a bootstrapped SaaS for 20 years with my brother
Join us to explore the ups and downs over twenty years spent running a small bootstrapped UK SaaS business.
Claude Code VS Code extension with backdoor released on Cursor marketplace
Yesterday, Anthropic were compromised and used to stage a global supply chain attack.
Azure's Weakest Link – Five Full Cross-Tenant Compromises
In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross-tenant compromise using these inherent flaws. Now I am back…
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up …
We ran AI agent swarms in Minecraft and Mindustry
Swarms of Claude and GPT agents in Minecraft and Mindustry.
The importance of communities around software
I've done a lot of activism for software freedom, over the years. At first it was purely for software freedom and related topics, (such as security, autonomy and privacy) but eventually this has evolved into something more holistic. I believe that the software I use should be held to higher ethical standards than only…
Claude Duet is the first personal-assistant-type harness that feels useful
Look, I really didn’t want to like Duet. I don’t want to be an Anthropic fanboy and it annoys me when they do things better than the competition. But they have done it again.
Tomáš Mikolov awarded the Medal of Merit by the President of the Czech Republic
Among the personalities honoured by the President of the Czech Republic on the occasion of the national holiday on 28 October this year are two graduates of Brno University of Technology. Tomáš Mikolov, a renowned expert in artificial intelligence, and Filip Maleňák, creator of the Záchranka mobile app, received state…
Google Search is now less than half of Alphabet’s revenue
Search was 49.7% of Alphabet's revenue in Q3 2026, down from 62% in early 2019, as Google Cloud grew much faster. Every quarter since 2018, from Alphabet's earnings releases.
Grace Blackwell needs a new scheduler: 27% more usable GPUs from the same racks
NVL72 puts all 72 GPUs in a rack on one NVLink fabric, but only rack-local jobs get the speedup. How SkyPilot keeps multi-node training and inference on NVLink with topology-aware placement, in-place recovery from GPU failures, and automatic defragmentation.
AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura
Leo de Moura on Formal Proofs, AI Agents, and the End of “Trust Me” Code. Subscribe: Apple • Spotify • … More
Zombie stats: Where the numbers AI quotes come from
We asked five AI assistants 200 questions that call for a number and followed 1,285 of the statistics they cited back to the source.
LLM Voice
The uncanny valley of LLMs' prose
We're releasing the weights of Mistral Large 4
The weights of Mistral Large 4 (Le Chonk) are now open. A 1T parameter multimodal model, and best open-weight model for coding, trained in Europe.
Why are good developers so wary of agentic development?
Good developers’ caution about agentic development comes from knowing that built isn’t the same as working in production.
Gemini 4 Carbon is the new #1 on the Artificial Analysis Intelligence Index v5
Google’s Gemini 4 Carbon is the new #1 on the Artificial Analysis Intelligence Index v5, and second only to Claude Opus 5.5 on the Artificial Analysis Coding Agent Index
DoorDash to acquire Instacart
Together, DoorDash and Instacart would help stores of every size reach more customers with the kinds of innovative technology that the biggest online retailers and grocers build for themselves.
If IPv4 were land
An interactive world map where every country is resized by how many IPv4 addresses it holds instead of its land area. Flip between real land and IPv4 land, zoom in, and compare countries.
CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
How Google determines the names for bodies of water in Google Earth (2008)
Posted by Andrew McLaughlin, Director of Global Public Policy Hundreds of millions of users around the world use Google Earth . Many of the...
Chained PHP2Shell exploit roots 25 servers, including US Government servers
Custom PHP2Shell Exploit Chained with Kernel LPE to Root Versions of Palo Alto Networks PAN-OS Firewalls in the Wild
Forging a Microsoft Edge Full Chain with Logic Bugs Only
This is what I built for Pwn2Own Berlin 2026 — a completely handmade, logic-only Microsoft Edge Full Chain, with no memory corruption, and no AI at all! 🔥
We won't "just hang out"
On human connection after the Singularity.
Richest 0.1% (8M) produce more carbon pollution than 3.5B
The world’s richest 0.1 percent (8 million people) produces more carbon pollution than the world’s poorest 3.5 billion people combined, reveals new Oxfam analysis. Published ahead of the UN climate summit (COP31) in Türkiye, the report exposes how the world's super-rich are driving climate breakdown through their…
Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5
I compiled a RISC-V CPU into Qwen 3.5 4B's weights, using its Gated DeltaNet layers as RAM. It runs C and MicroPython inside the forward passes, and Qwen uses it for exact arithmetic.
The first wired XR glasses powered by Android XR
XREAL AURA, the first wired XR glasses powered by Android XR, lets you work, watch, and play anywhere with Gemini by your side.
A Health Update
I’m writing this post from a hospital bed. And I couldn’t be happier. You hear folks say chemotherapy sucks, but until you go through it yourself, you don’t really know how bad it can be. It remains a popular activity only because it’s better than the alternative. My first exposure to chemotherapy was with this […]