Security Is Hard, Y'all

63 kevincox 2026-08-04 18:29:53 UTC textslashplain.com Llama Share 14

A user initially thought a Cloudflare product promotion was a phishing attack due to suspicious UI elements and lack of best practices. It turned out to be a legitimate new product, highlighting the challenges of URL reputation services and the importance of following best practices for web developers.

Show HN: Simple algorithm and color space to generate diverse skin tones

274 automatoney 2026-08-04 16:04:53 UTC toneyalexander.github.io Llama Share 66

A custom color picker based on a color space was created to represent human skin tones digitally, aiming to identify a broad and inclusive range of colors that correspond to plausible skin tones. The color space was developed using principal component analysis and manual fitting of spherical equations to a dataset of labeled skin tones, resulting in a color picker with three independent ...

Why some people mow a lawn better than others

29 carlos-menezes 2026-08-04 18:06:53 UTC pudding.cool Llama Share 11

People are surprisingly good at solving the lawn mowing problem, coming close to optimal solutions with fewer stops and only 11% less efficient than optimal for 70+ stops. They use heuristics like decomposition and compression to tackle complex lawns, and spend their time thinking strategically at key decision points.

The Warp Agent CLI

39 emschwartz 2026-08-04 18:04:53 UTC warp.dev Llama Share 12

The Warp Agent CLI is a standalone tool that provides a superior terminal experience for developers, with built-in model-routing capabilities and native support for advanced workflows. It offers features like tab completions, natural language detection, and cloud agent orchestration, making it a powerful tool for autonomous development.

Dataset: Dead mental health startups, 2000-2026, coded on 18 fields

27 trubetskov 2026-08-04 18:04:53 UTC mentalium.me Llama Share 10

A dataset of 542 digital mental health organizations that left the market between 2000 and 2026 was compiled with 18 fields and four independent classification axes. The data reveals that who pays for services predicts survival better than clinician co-founders and highlights various reasons for company failures.

Hop.earth – OpenStreetMap based car racing game

22 faebi 2026-08-04 18:04:53 UTC hop.earth Full Share 19

Contains Copernicus DEM (COP-DEM-GLO-30), IGN RGE ALTI®, and CNIG LIDAR data © EU/ESA/IGN/CNIG.

Mistral's Shieldstral: 3B open-weights model for multimodal moderation

34 riadsila 2026-08-04 17:04:53 UTC mistral.ai Llama Share 5

Shieldstral is a 3B multimodal safety classifier that adapts to context with a policy-adaptive approach, answering questions like content safety and harm. It matches larger models on text safety and sets a new state of the art on multimodal moderation with a single interface for text and images.

DeepSeek V4 Flash on a Single AMD MI300X

315 zhoutong 2026-08-04 10:04:53 UTC github.com/ryanzhou Llama Share 73

This repository contains a production configuration for running DeepSeek-V4-Flash-0731 on AMD MI300X with fixes for FP8 format, MoE routing, and other issues. It achieves 6,988-7,019 tok/s on fresh prompts with a 2,048-token scheduler budget.

Launch HN: EdotEnv (YC S26) – Quant Trading RL Envs to Teach LLMs Research

7 Mzzzzz 2026-08-04 18:36:53 UTC edotenv.com Prefix Share 1

We programmatically generate quant research tasks inside environments built from real market data. Agents use professional tools—and build their own in Bash—to make trading decisions and develop profitable strategies. Markets do not saturate: successful trading makes them more efficient, while edges decay and regimes shift. That makes our environments a continuously harder benchmark for ...

Truemetrics (YC S23) Is Hiring in Berlin – GTM Lead

0 2026-08-04 17:04:53 UTC ycombinator.com Llama Share

truemetrics is a tech-driven company solving last mile delivery issues with smartphone-based mapping technology. They're seeking a commercial leader to drive growth from €1M to €10M+.

Most countries provide between 20 and 40 paid days off

35 speckx 2026-08-04 17:04:53 UTC not-ship.com Llama Share 20

The Not-Ship newsletter is taking a break until the end of August, allowing the creator to recharge and work on deeper investigations and website upgrades. The newsletter will return with new content and features, including an updated summer reading list with over 1,200 book recommendations.

Vlt 1.0 and Hosted Package Registries

26 patrikcsak 2026-08-04 18:04:53 UTC vlt.io Llama Share 4

vlt 1.0 is released with end-to-end platform for developers to ship faster, safer, and more reliably. It includes features like security-first package manager, graph native pseudo selectors, and OIDC trusted publishing.

Keyv and friends compromised in active Shai-Hulud supply chain attack

189 cimi_ 2026-08-04 11:04:53 UTC aikido.dev Llama Share 95

Attackers compromised the GitHub account of keyv's maintainer, injecting credential-stealing malware into keyv and other caching utilities with 2 billion monthly installs. The malware harvests secrets from the victim's environment and exfiltrates them to a public GitHub repository.

Blackmail Fail (2013)

6 simonebrunozzi 2026-08-04 18:11:53 UTC gwern.net Prefix Share 0

In September , I was extorted for $48.76$322012 for being gwern; I declined to pay. In November , I called an encryption bluff that I was Dread Pirate Roberts. In December , a crazy person tried to blackmail me for billions of dollars for being Satoshi Nakamoto; I declined to pay. In March , the DNM Evolution threatened to dox me if I did not reveal information about their security ...

Apple says more ex-employees may have taken confidential data to OpenAI

201 thewebguyd 2026-08-04 16:04:53 UTC techcrunch.com Llama Share 144

Apple is requesting expedited discovery from OpenAI and former employees over alleged theft of intellectual property. Apple claims it has uncovered new evidence of misconduct beyond the original complaint, including meetings and sharing of confidential information.

Show HN: cMCP, deny an AI agent's tool call and get a signed receipt

7 mosiddi 2026-08-04 18:06:53 UTC github.com/agentrust-io Prefix Share 1

Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Developer Preview - launched at the Confidential Computing Summit, June 23 2026. May have breaking changes before v1.0. See STATUS.md for exactly what ships today versus what is on the roadmap. cMCP (Confidential MCP Runtime) is the secure, confidential way to run MCP: an open-source gateway that enforces MCP ...

Online ad giant Adform was hacked, proving once again why ad blockers are needed

154 speckx 2026-08-04 16:04:53 UTC this.weekinsecurity.com Llama Share 51

Adform, an online ads provider, was hacked and served malicious ads containing code that stole crypto wallet addresses. The hack compromised devices of users visiting websites that used Adform, allowing malware to steal crypto.

Buckminster Fuller: everything I know (1975)

106 simonebrunozzi 2026-08-04 12:04:53 UTC bfi.org Llama Share 31

Buckminster Fuller's 42-hour lectures cover his inventions, discoveries, and design approach, spanning topics from architecture to economics. The lectures are now available as a transcript, inviting public participation in editing and refining the content.

Harness Engineering for Self-Improvement

252 tosh 2026-08-04 07:04:53 UTC lilianweng.github.io Llama Share 55

Harness engineering is a crucial component of recursive self-improvement (RSI) in AI, enabling models to improve their own performance and adapt to new tasks through workflow design, context management, and optimization. Recent research has focused on developing automated design of agentic systems, meta-harnesses, and evolutionary search methods to improve harness engineering, with ...

AI Data Centers Are Driving Up Power Bills – This Map Shows Where

42 01-_- 2026-08-04 18:04:53 UTC gadgetreview.com Llama Share 11

Data centers are driving up residential bills in PJM states by $15-$20 monthly due to added grid capacity costs. 27 states are advancing laws requiring data centers to fund their own grid expansion independently.

It's not a fear of "AI communism"; it's a fear of competitive market capitalism

50 speckx 2026-08-04 15:04:53 UTC observationalepidemiology.blogspot.com Llama Share 41

Google detected unusual traffic from your network possibly due to malicious software or automated requests. Solving the CAPTCHA will let you continue using Google services.

There Will Come Soft Rains (1950) [pdf]

298 pmg101 2026-08-04 00:04:53 UTC users.wpi.edu Full Share 334

MariaDB: Promote getting to 10k GitHub stars in server log and client prompt

18 petecooper 2026-08-04 17:04:53 UTC github.com/mariadb Llama Share 10

User is trying to apply a suggestion to a GitHub conversation but is encountering various errors such as no code changes, deleted lines, and pull request queue. The suggestion cannot be applied at this time due to these restrictions.

Dates That Don't Exist (2015)

84 EndXA 2026-08-04 13:04:53 UTC blog.yossarian.net Llama Share 55

The Catholic world transitioned from the Julian to the Gregorian calendar in 1582, removing 10 days to correct a 11-day drift. This resulted in October 5-14, 1582, not existing in the Gregorian calendar system used today.

Perspec 1.0

17 surprisetalk 2026-08-04 16:04:53 UTC adriansieber.com Llama Share 4

Perspec is a desktop app for correcting image perspective and converting photos of documents into clean black and white images, offering a more streamlined workflow than mobile apps. The app uses a custom computer vision library called FlatCV, which was developed in C and Haskell, to achieve accurate automatic corner detection and image processing.

Xbox goes down. You can't play games you own on disc

445 surprisetalk 2026-08-04 12:04:53 UTC birchtree.me Llama Share 511

An Xbox outage blocked users from playing both digital and disc-based games. The author prefers PC gaming because it allows for maintaining access to games despite digital issues.

The Pedagogy Behind the Studio

4 ray__ 2026-08-04 18:04:53 UTC gail.wharton.upenn.edu Prefix Share 0

We see a growing call to action for the practice of enduring skills like judgement, creativity and critical thinking, sparked by the recognition that AI agents will need to be managed well. But we haven’t seen a pedagogical approach that would develop these skills in a manner that could unlock generative AI’s wild potential, and the economic and human value that could come with it. Generative ...

The Knowledge Chipper: An Agentic Coding Story

9 jgbbrd 2026-08-04 17:04:53 UTC jg.gg Prefix Share 1

In my day to day development work, I find that my agents have to build up an incredible amount of knowledge about the problem I set them on. They scan files. They search API docs. They do a lot of work to get their context sufficiently full to be able to squirt out the relatively tiny number of final tokens that go into an actual code change. This is analogous to the way a developer reads a ...

Cloudflare enforces engineering standards using AI

8 garyhtou 2026-08-04 16:04:53 UTC blog.cloudflare.com Prefix Share 0

Over the past four months, our AI code reviewer has flagged nearly a quarter of a million deviations from Cloudflare engineering standards (what we’ll call “violations” in this post) and blocked 16,000 merges. Our spec reviewer agent has evaluated close to 600 technical designs against the same standards before implementation began. Both systems draw from the Cloudflare Codex, a shared source ...

Show HN: Fine-tune an 8B model on a 4 GB laptop GPU

104 MakazhanAlpamys 2026-08-04 12:04:53 UTC github.com/makazhanalpamys Llama Share 18

Soup is a tool for fine-tuning large language models with a simple workflow, using one config and one command. It supports various models and training tasks, including LoRA, quantization, and batching.