11131
Just the rumour of a bug is enough to find an exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 80,857 posts.
11132
Tensorflow sucks
A detailed analysis
11133
JPEG Compression
JPEG is a clever image compression algorithm that exploits a human perceptual bias and the structure of natural images. It makes a change of basis before encoding so that the rewritten image representation concentrates the signal that humans are most perceptive to, and thus, the remaining details can be discarded…
11134
Unreal Rust
A few months ago I asked myself "What if I could write a game in Rust, but use Unreal as a renderer?". After a bit of thinking I came to the conclusion that exposing the Unreal renderer to Rust via C ffi was way more work than I was willing to do. But what if I could just build on top of Unreal instead? I could just…
11135
We called it RAID because it kills bugs dead
The history of defect tracking databases in Windows.
11136
Breaking Claude Code Opus 5 Auto Mode
In this post, we explore how a simple website summary request hijacks Claude Code Opus 5 in Auto Mode and achieves code execution with 60-80% attack success …
11137
Cities: Skylines Is Turing Complete
(Non-clickbait title: building a 4-bit adder in Cities:Skylines.)
11138
On Hacking MicroSD Cards
Today at the Chaos Computer Congress ( 30C3 ), xobs and I disclosed a finding that some SD cards contain vulnerabilities that allow arbitrary code execution — on the memory card itself. On the dark side, code execution on the memory card enables a class of MITM (man-in-the-middle) attacks, where the card seems to be…
11139
Hacker News down, unwisely returning HTTP 200 for outage message
So HackerNews is currently down. It happens, we’ll probably find out why when it returns. For a while yesterday, all HN URLs were returning error messages from CloudFlare, apparently their CD…
11140
Extracting the private key from a TREZOR with an oscilloscope (2015)
Homepage of Jochen Hoenicke
11141
Announcing Go Support for AWS Lambda
This post courtesy of Paul Maddox, Specialist Solutions Architect (Developer Technologies). Today, we’re excited to announce Go as a supported language for AWS Lambda. As someone who’s done their fair share of Go development (recent projects include AWS SAM Local and GoFormation), this is a release I’ve been looking…
11142
Bevy game engine 0.6
Thanks to 170 contributors, 623 pull requests, and our generous sponsors, I'm happy to announce the Bevy 0.6 release on crates.io! For those who don't…
11143
A Visual Introduction to Machine Learning (2015)
What is machine learning? See how it works with our animated data visualization.
11144
I built a low-latency AI companion that plays Skyrim with me
How Varkos was built: a low-latency AI companion that plays Skyrim with you, follows complex instructions and evolves through shared experiences.
11145
“Burning Ship” fractal
The images described here are generated by analysing the following series for each point (c x ,c y ) on the plane.
11146
Claude Code VS Code extension with backdoor released on Cursor marketplace
Yesterday, Anthropic were compromised and used to stage a global supply chain attack.
11147
It's hard to justify buying a Framework 12
My nephew just graduated high school, and wants a laptop. When he decides what computer to buy, price (or more precisely, value) is the most important attribute. Apple's MacBook Neo upended the 'value laptop' equation—Apple's not supposed to be both the cheapest option and the best value... but it seems like that's…
11148
No Bitcoin ETFs at Vanguard (2024)
Vanguard's thought leaders share timely insights about international financial markets, investor behavior, and the investment industry.
11149
Addiction Markets
Corporate gambling is economic coercion, a way to shift tax burdens away from the wealthy to the poor. It's been here since the 1970s, and now it's corrupting sports and young men. Abolish it.
11150
How did REST come to mean the opposite of REST?
In this article, Carson Gross explores how the term REST (Representational State Transfer) evolved to mean nearly the opposite of its original definition in modern web development. It traces how REST, originally defined by Roy Fielding to describe the web's architecture of hypermedia-driven interactions, came to be…
11151
11152
My Time Working at Stripe
Jon's personal site.
11153
What taking my daughter to a comic book store taught me
I like to think that I'm a pretty decent human being. Don't think I didn't hear that snort of derision...lighten up - I didn't say "perfect", I just said "prett
11154
2025 Letter
Corgis, compute, Cold War; Ecclesiastes; ties; Stendhal; humor; Pascal's Wager; deep infrastructure; Germanic obedience; Texas State Fair
11155
11156
11157
Software Complexity Is Killing Us
Since the dawn of time (before software, there was only darkness), there has been one constant: businesses want to build software cheaper and faster. It is certainly an understandable and laudable goal – especially if you’ve spent any time around software developers. It is a goal that every engineer should support…
11158
Distributing Mac software is increasing my cortisol levels
I'm creating a simple developer utility to make managing Claude Code profiles (e.g. running it with DeepSeek, or some OpenRouter models) a little bit easier.
11159
11160
A Primer on Bézier Curves
A detailed explanation of Bézier curves, and how to do the many things that we commonly want to do with them.