The latest blog posts to take off on Hacker News. 80,768 posts.
I am not going to talk about religious beliefs but about matters so obvious that it has gone out of style to mention them. I believe in my neighbors. I know their faults, and I know that their virtues far outweigh their faults.
I decided to make my own container runtime for fun, and even though I’m still early on, I’ve learned that Docker is weird . Here’s some weird things I learned about Docker.
Wikipedia, but only for things a half hour walk from you.
Claude formally proved security properties in the compiled code of 123 open-source libraries. Along the way, it found bugs that had eluded detection for years.
Bill C-22, Canada’s Lawful Access Act, passed the House and is before the Senate. It threatens encryption and expands surveillance. Learn more + sign the petition.
Learn about the HTML-in-Canvas origin trial in Chrome, and how it can help bring the DOM to your Canvas-driven applications.
Taxable Anonymous Libre Electronic Reserves
We asked 14 AI models for their most controversial opinion of humans, three times each. 35 of 41 answers were the same one: we care more about belonging than about the truth.
A fun little project that came out of a creative exercise around the word 'Overgrowth'.
A public and free DNS service for a better security and privacy
eMudhra Limited (BSE: 543533 | NSE: EMUDHRA), a global digital trust company, today announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business.
We are announcing a new Crystal release 1.22.0 with several new features and bug fixes.
Do you feel spoiled by modern hardware? I know I do. Even the cheapest CPUs have at least 4 cores nowadays, running billions of operations per second. The idea that you could run any software on le…
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability…
This workshop founded in 1882 still makes dried bonito like they did back in the Edo period. How katsuobushi — Japanese dried bonito, said to be the world’s har
We published the triangulator of our map engine as earstrip, an ISC-licensed C++ and WebAssembly library. How it came to be: the ear clipper rebuilt one idea at a time and timed on 3.7 million polygons of real map data.
ns2jb is a software-only, tethered jailbreak for the Switch 2. It allows running arbitrary native code as any ordinary sysmodule, and as the built-in fs sysmodule. This lets us run homebrew, reverse engineer and mod Switch 2 games, back up save files off the Switch, and access most of the Switch 2’s peripherals…
A 360M model that pretends to be a terminal, and remembers what you did
Mass hysteria, or something.
Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention
In 1954, IBM said FORTRAN would virtually eliminate coding and debugging. What the numbers say about AI and software work in 2026, and my guess at a developer's Tuesday in 2031.
‘Plasticorals’, coral rubble fused with plastic, are long-lasting reminders of human activity and highlight a potential threat to critical marine environments.
Describing the story behind how critical security vulnerabilities were found and fixed.
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.
Patch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.
The DuckDB team is happy to announce that today we're releasing DuckDB version 2.0.0 LTS, codenamed “Cinnamon Teal” (Spatula cyanoptera). This is our biggest feature release so far, and it ships a polished version of the Quack protocol, asynchronous I/O, a first-class VARIANT type, agent mode, triggers, an extensible…
A tale of two PHP remote vulnerabilities
LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.
