A researcher used a Discord message to find two missing security pieces and achieved RCE on Google Cloud production, earning a $148,337 bounty. The exploit was completed one hour before the disclosure deadline. The same vulnerability was reproduced three months later.
Category · Tech
30 items
Amateur radio operators are reviving the obsolete Teletext standard (CCIR Teletext System B) for modern ham radio use. An open-source project has developed software to encode and decode Teletext over amateur radio frequencies, enabling a new, low-bandwidth digital mode that can display text and simple graphics on TV sets.
A new report finds that AI now generates as many online articles as human writers, marking a significant shift in content production. The analysis suggests that synthetic content has reached parity with human-written text across major digital platforms, raising questions about originality and the future of online publishing.
The article discusses the shift from probabilistic AI models to provably correct methods in software engineering, emphasizing the need for formal verification to ensure reliability and safety in AI-generated code. It argues that while current AI tools show promise, they must evolve to provide deterministic guarantees for critical software systems.
Inkfeed is a web-based RSS reader designed for the Kindle's experimental browser, built to let users read RSS feeds directly on the device. It supports saving preferences, emailing articles, browsing Wikipedia, and downloading content. The open-source project runs on a Go backend with SQLite, hosted on a budget VPS.
The maintainer of Rsync has started using the AI tool Claude for development, leading to a growing number of regressions in the project.
Vibewarz is a bot-vs-bot arena platform aimed at "vibecoders," where users create autonomous bots to compete against each other in a battle arena environment.
NvEnvy is an open-source Mac app built in Swift as a modern reboot of Notational Velocity and nvAlt. It saves notes as .md files with quick search and iCloud sync, with plans for markdown rendering and an iOS version in the future. The developer created it to own and customize their note-taking workflow, and the app supports opening the same folder in Obsidian.
The article introduces Unix-CTF, a framework designed to create procedural environments for training reinforcement learning agents in Unix command-line competence through capture-the-flag style challenges.
A group of threat actors claims to have breached iFood's systems in 2025 and is extorting the company, threatening to leak 40 GB of data in early 2026. The case highlights that even large companies remain vulnerable to data leaks and underscores the need for ongoing investment in robust cybersecurity measures, including monitoring, access controls, and incident response planning.
Protestware is code intentionally introduced by developers for political statements. AI coding agents that automatically pull and execute code may be particularly vulnerable to such protestware, posing security and ethical risks for automated development pipelines.
A startup is offering free home cleaning services in exchange for recording the entire process using humans wearing cameras. The footage is intended to train robots for future autonomous cleaning tasks, raising questions about privacy and data use.
A company accidentally spent $500 million on Anthropic's Claude AI in a single month after failing to set usage limits on employee licenses. The incident highlights the risks of unrestricted AI access, as costs can spiral out of control without proper oversight.
A developer has created TV Explorer, a tool that adds an advanced user interface to free online TV content, enhancing the viewing experience with improved navigation and discovery features.
A Hacker News user asks whether the current AI boom is being used by companies as a justification for layoffs rather than reflecting genuine technological advancement. The post questions if corporations are leveraging AI hype to cut costs and downsize workforces under the guise of innovation.
A rare 2009 photo of Kate Courteau, the architect who designed Y Combinator's visual identity, was shared.
Waymo has begun its first rider trips in Ojai, California, using the same autonomous driving technology but in a new vehicle platform. The expansion marks another step in bringing the company's self-driving service to more communities beyond its initial operating areas.
Jane Street introduces strace-ui, a terminal user interface for strace built with their Bonsai_term library, highlighting a resurgence in TUI development driven by modern tooling like OCaml and Bonsai that make building rich terminal applications more accessible.
Liquid AI has unveiled LFM-2.5-8B-A1B, an 8-billion-parameter mixture-of-experts (MoE) model trained on 38 trillion tokens. The architecture, based on Liquid Foundation Models, is designed for efficient inference and strong performance at a smaller active parameter count.
The article provides notes from the Mistral AI Now Summit held in Paris, covering key insights, announcements, and discussions about AI developments presented at the event.
Renewed concerns about magnets damaging modern hardware are reported, as stronger magnets in wireless chargers and mounts can interfere with SSDs, displays, and sensors, risking data loss or permanent damage.
This page appears to be a course description for CS 153: Frontier Systems, taught by Amin Vahdat at Stanford. The course likely covers topics related to the design and implementation of large-scale distributed systems.
The article proposes standardizing the 1970 epoch as a universal reference point for time representation in computing. It discusses the benefits of adopting a consistent epoch to simplify time-related calculations and interoperability across systems.
Apollo Global Management and Blackstone are reportedly in discussions to provide around $36 billion in debt financing to build chip infrastructure for Google, which would then supply those chips to AI company Anthropic. The deal would see the private equity firms own the data centers and lease them to Google, helping Anthropic secure the computing power needed to compete with OpenAI.
The author discovered that their open-source project, which mimicked a video game login screen, was used by scammers to create a phishing page that harvested credentials from over 14,000 victims. The incident highlights how developers can unintentionally supply tools for cybercrime, and the author reflects on the ethical responsibility and emotional impact of such misuse.
Flathub has banned the use of AI-assisted tools for writing code and documentation in its platform, updating its policies to explicitly prohibit such practices.
Benedict Evans examines how to predict which jobs are most exposed to AI, distinguishing between task automation and full job replacement. He argues that exposure depends not just on technical feasibility but on economic, regulatory, and organizational factors, making broad predictions difficult.
A Hacker News user asks how to benchmark an engineering team's AI adoption, seeking methods for grading progress and setting improvement goals based on others' experiences.
The article attempts to quantify how far behind various AI labs are from the leading frontier models, analyzing the gap in capabilities between top-tier labs and others in the field.
Satradar is a web-based tool that allows users to track over 10,000 satellites in real-time at up to 120 frames per second, providing live orbital data and visualization.