Just the rumour of a bug is enough to find an exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 5,943 posts.
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
JPEG is a clever image compression algorithm that exploits a human perceptual bias and the structure of natural images. It makes a change of basis before encoding so that the rewritten image representation concentrates the signal that humans are most perceptive to, and thus, the remaining details can be discarded…
In this post, we explore how a simple website summary request hijacks Claude Code Opus 5 in Auto Mode and achieves code execution with 60-80% attack success …
What is machine learning? See how it works with our animated data visualization.
How Varkos was built: a low-latency AI companion that plays Skyrim with you, follows complex instructions and evolves through shared experiences.
Yesterday, Anthropic were compromised and used to stage a global supply chain attack.
My nephew just graduated high school, and wants a laptop. When he decides what computer to buy, price (or more precisely, value) is the most important attribute. Apple's MacBook Neo upended the 'value laptop' equation—Apple's not supposed to be both the cheapest option and the best value... but it seems like that's…
Corgis, compute, Cold War; Ecclesiastes; ties; Stendhal; humor; Pascal's Wager; deep infrastructure; Germanic obedience; Texas State Fair
I'm creating a simple developer utility to make managing Claude Code profiles (e.g. running it with DeepSeek, or some OpenRouter models) a little bit easier.
Dmitry.GR: I am often asked to explain my distaste for RISC-V. Here it is.
Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.
I want to speak to your manager.
Go 1.27 introduces new encoding/json/v2 and encoding/json/jsontext packages.
The Fairphone (Gen. 6+) is here. With more power under the hood, a brand-new color, and more software features, it's everything you love about Fairphone. Plus more.
A visual explanation of how threshold secret sharing lets any k of n shares recover a secret.
I love them miniatures. It started off with Rolife series, where the first hit had come from a [[https://sandyuraz.com/blogs/mini-libra...
We gave Claude Fable 5 and GPT-5.6 Sol the same song, a budget, web search, and local ffmpeg, then let each autonomously direct a music video.
Trump admin sees China behind opposition to AI data centers
A cron job for every man, woman, and child.
Should you become an engineering manager?
Identifying them as such only lets companies like OpenAI off the hook.
What does this vagueness by-design mean for how we choose to self monitor our biological markers?
An introduction to the jsongrep tool, a technical explanation of its DFA-based search engine, and performance results against popular JSON query tools.
A personal blog, by a programmer and IT expert. Essays, Articles, Guides, and Recipes. As well as Code, Quotes, and Links.
If signed, Seattle will become the first city in the nation to prohibit the pricing tactic Seattle, Washington – The Seattle City Council today passed…
AI agents are getting very good at finding vulnerabilities in large-scale software systems.
The race is on to test new vehicles in the underground Large Hadron Collider tunnel, ahead of major works starting this summer