Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 80,900 posts.
Complexity Has to Live Somewhere
We try to get rid of the complexity, control it, and seek simplicity. I think framing things that way is misguided. Complexity has to live somewhere. Embrace it
Starcraft (A History in Two Acts)
Great success brings with it great expectations. And sometimes it brings an identity crisis as well.
Async and Await
The autonomous stack for every app and agent.
German police name alleged leaders of GandCrab and REvil ransomware groups
An elusive hacker who went by the handle “ UNKN ” and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and helped carry out at least 130 acts of computer sabotage and extortion…
Is High Quality Software Worth the Cost?
We usually perceive that it costs more to get higher quality, but software internal quality actually reduces costs.
Modern CSV version 2
And I think you’ll love it. I focused on several areas: Improved UI and user experience Faster performance Useful features Updated documentation For Mac users, Native Apple Silicon (ARM – M1, M2) compatibility If that’s all you need to know, you can buy a license here. Or if you already have a version 1 license, you…
DolphinGemma: How Google AI is helping decode dolphin communication
Dolphin researchers are using Gemma and Google Pixel phones to try to decipher how dolphins talk to one another.
Slop is everywhere for those with eyes to see
How mindless consumption is making our FYPs worse.
Gift card gang extracts cash from 100k inboxes daily
Some of the most successful and lucrative online scams employ a “low-and-slow” approach — avoiding detection or interference from researchers and law enforcement agencies by stealing small bits of cash from many people over an extended period. Here’s the story of a cybercrime group that compromises up to 100,000 email…
The differences between tinkering and research (2016)
Some of us have academic degrees and fancy university jobs, and publish peer-reviewed papers in prestigious journals. Let's call these peopl...
I could've accessed 17T Microsoft records
How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.
A deep dive on a Facebook reseller of bikes stolen in Colorado
Bike Index tracks a Colorado-to-Mexico stolen bike pipeline - and learns things along the way
Ultrasound imaging of the brain
The most detailed vascular image of a living human brain we've seen, captured with ultrasound through the skull — and the pipeline behind it.
Why does gRPC insist on trailers?
gRPC comes up occasionally on the Orange Site , often with a redress of grievences in the comment section. One of the major complaints people have with gRPC is that it requires HTTP trailers. This one misstep has caused so much heartache and trouble, I think it probably is the reason gRPC failed to achieve its goal…
GDPR Violation: Scribd acquires PII on 500M users in a deal with LinkedIn
TL;DR: If you have a LinkedIn account, you were signed up to SlideShare automatically without your knowledge or consent. Your account including all your personal information will be sold to ScribD …
New information extracted from Snowden PDFs through metadata version analysis
We discovered that entire sections describing domestic U.S. intelligence facilities were deliberately removed from two published documents, while equivalent foreign facilities remained visible. The evidence exists in an unexpected place - the PDF metadata of documents published by The Intercept in 2016, and by The…
ChatGPT for Google Sheets exfiltrates workbooks
ChatGPT for Google Sheets is vulnerable to data exfiltration and phishing overlay attacks that affect workbooks across the victim’s account after an indirect prompt injection in a single sheet.
Making MCP cheaper via CLI
I Made MCP 94% Cheaper (And It Only Took One Command)
A conversation with a newspaper owner raided by cops
Eric Meyer says his paper had been investigating the police chief prior to the raids on his office and home.
820GB Database Dump of Roskomnadzor (Russian Government Censorship Organization)
In the Cyberwar category, we are listing 364,000 files from the Roskomnadzor, the Russian federal agency responsible for censorship of Russian media, specifically from the republic of Bashkortostan.
How to Use Go Interfaces
I occasionally give free Go consults and code review on top of my daily work. As such, I tend to read a lot of other peoples’ codes. And while this is really more of a feeling *Now, you should go, really? You're a statistician by training ffs, I’ve seen an increase in what I call “Java-style” interface usage. This…
Farewell, Building in Public
The end of an era of radical transparency.
WebAssembly Interface Types: Interoperate with All the Things
People are excited about running WebAssembly outside the browser. People are also excited about running WebAssembly from languages like Python, Ruby, and Rust. Lin Clark's Code Cartoons are back, illustrating ...
Branch predictor: How many “if”s are too many?
Is it ok to have if clauses that will basically never be run? Surely, there must be some performance cost to that...
There's no way to report spam on Google Drive
Recently, I've been getting a lot of spam notifications from Google Drive. Here's a sample: The notifications come direct to my Android phone via the Drive app - they don't appear in my Gmail spam folder. There is no way to report the abuse. If I go to the list of notification in the Android apps, there's no option to…
Hacking PayPal Accounts with one click
Today I am going to publicly disclose a critical vulnerability I have found during my research in PayPal, This vulnerability enabled me to completely bypass the CSRF Prevention System implemented by PayPal, The vulnerability is patched very fast and PayPal paid me the maximum bounty they give ;).