The libexpat project has ended its security vacation and the maintainer will be paid to work on it for 6 months. They will prioritize fixing vulnerabilities and appreciate help from the community in finding and reporting further issues.
The website is using Cloudflare security and blocked my action, possibly due to a trigger like a certain word or SQL command. I was trying to perform an action when this page came up, and the Cloudflare Ray ID is needed to report the issue to the site owner.
Pi is a coding harness that chooses minimalism, coming with only 4 tools and a system prompt under 1,000 tokens, making it cheaper and more performant. Its design allows for extensibility and self-editability, producing industry-leading results even before adding extensions, as seen in case studies with Databricks and Shopify.
Shieldstral is a 3B multimodal safety classifier that adapts to context with a policy-adaptive approach, answering questions like content safety and harm. It matches larger models on text safety and sets a new state of the art on multimodal moderation with a single interface for text and images.
WebKit-based browsers on iOS and macOS can bypass proxy settings through three features: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. These leaks expose users' real network and IP addresses, affecting Apple's iCloud Private Relay and all iOS Tor browsers, including Psylo.
TMD, a column-major data processing platform, can leverage DuckDB's vectorized SQL execution engine for efficient large dataset processing. The integration enables functional data science solutions on laptops, reducing the need for expensive distributed solutions.
Bugtraq, a full disclosure mailing list, has been revived with the same mission of researcher-first, no corporate filter. The list aims to preserve cybersecurity history and knowledge by archiving valuable work and research.
A custom color picker based on a color space was created to represent human skin tones digitally, aiming to identify a broad and inclusive range of colors that correspond to plausible skin tones. The color space was developed using principal component analysis and manual fitting of spherical equations to a dataset of labeled skin tones, resulting in a color picker with three independent ...
You’re unable to view this Post because this account owner limits who can view their Posts.
Korean investors shifted $1 billion into US leveraged ETFs like SOXL, KORU, and TSLL after government raised investment barriers for domestic single-stock leverage products. Domestic single-stock leveraged product trading plummeted after the government implemented stricter regulations.
Elise Cawley, a brilliant mathematician, was a loving wife and mother who lit up her husband's life with her intellect, love, and energy for 36 years. She was a forceful intellect, kind and sweet, with a deep love for truth, beauty, and her family, and her legacy will be remembered through her remarkable life and work.
DeepGrove is an independent AI research lab building efficient language models that run anywhere.
The user needed to center a div on a webpage with a sidebar, but the div was offset due to the sidebar's width. They used JavaScript and pointer events to calculate the correct position, creating a tool called center to automatically center elements on any webpage.
This paper compares Zigbee and Matter over Thread, two IoT protocols, and finds that Zigbee is more responsive in small-scale deployments, while Matter over Thread is more scalable and robust in multi-hop scenarios. The results highlight distinct trade-offs between the two protocols.
Artificial intelligence is powering 55% of reported cybercrime in Africa, allowing criminals to launch faster and more convincing attacks. Cybercrime-related financial losses have risen sharply to $484 million, with online scams and AI-powered fraud being the most common forms.
The fec crate supports various forward error correction codes including convolutional codes and Reed-Solomon codes. It provides a Rust implementation for decoding and encoding these codes with optional SIMD acceleration.
Researchers have discovered three novel attacks, known as Pass-ta-key, that can compromise Google's synced passkey ecosystem and allow attackers to take over passkey-protected accounts without user interaction. The attacks exploit vulnerabilities in the system's architecture, including the storage of sensitive keys in memory and logs, and can be used to bypass user verification requirements ...
We will use the VP8 video codec to simulate combinatorial logic by abusing its prediction mechanisms. We will build up a set of composable "gadgets" to construct arbitrary logic circuits using key-frames and prediction modes.
Waymo is now offering fully autonomous rides to everyone in Dallas through its app. The service aims to provide safe and reliable transportation options for locals and tourists alike.
Flowise is winding down operations due to developers increasingly relying on new coding agents for complex tasks. The Flowise GitHub repository will be moved to Public Archive status, allowing users to fork the code and maintain their own updates.
I’ve always felt like constructing printed math was much more of an art form than regular typesetting. Someone typesetting mathematics is less a “typist” and more an artist attempting to render abstract data on a two-dimensional surface. Mathematical symbols are themselves a language, but they are fundamentally a visual representation of human-conceived knowledge—knowledge that would be too ...
FIPS validation only ensures a module implements approved cryptography correctly, but does not guarantee the product's overall security or the keys' management and provenance. Treating a FIPS certificate as a security guarantee can lead to false sense of security and neglect of critical security processes and evidence.
Attackers compromised the GitHub account of keyv's maintainer, injecting credential-stealing malware into keyv and other caching utilities with 2 billion monthly installs. The malware harvests secrets from the victim's environment and exfiltrates them to a public GitHub repository.
The Godox C100 camera features a transparent viewfinder and built-in light meter for effortless shooting, stripping away complexity and pressure. It doubles as a sleek external light meter and connects to phones via Type-C for instant preview and sharing.
Cloudflare Wallets provide a unique username for agents to connect with merchants and enable them to pay for APIs and content. This will allow agents to try out many APIs with low friction and managed risk, promoting agentic commerce.
0
2026-08-04 17:15:48 UTC
ycombinator.com
Llama
truemetrics is a tech-driven company solving last mile delivery issues with smartphone-based mapping technology. They're seeking a commercial leader to drive growth from €1M to €10M+.
To make case folding fast, GitHub engineers removed an optimization and implemented a branchless, vectorizable loop that folds ASCII characters in place, achieving speeds of over 45 GiB/s. They also created a compact, 1776-byte table that uses byte-space arithmetic to fold non-ASCII characters without decoding, outperforming other case folding solutions and a naive hash map.
The SEC limits automated tool requests to prevent equitable access issues and excessive searches. Users can declare their traffic and follow best practices at sec.gov/developer to avoid request limitations.
Researchers analyzed 60 language model benchmarks and found nearly half exhibit saturation, with rates increasing with age. Expert-curation, not public test data, impacts resilience to saturation.