Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support

https://av.libreboot.org/t480/t480.jpg
Libreboot has released version 26.10, a major update with several design changes and improvements, including the addition of EDK2 as the default UEFI payload for all supported hardware. The new release offers greater security and customization compared to proprietary firmware, with features such as anti-AI policies and improved support for modern graphics cards.

Israeli firm's digital ads enabling installation of 'zero-click' spyware

https://i.guim.co.uk/img/media/3035c44f5ae09be7cb6b5806453ff11e9db3e89f/85_0_3140_2513/master/3140.jpg?width=465&dpr=1&s=none&crop=none
Researchers at the University of Toronto found that an Israeli advertising agency, Discover-Tech, uses its Controlium software to mass-profile internet users and covertly hack targets with zero-click spyware. Millions of users worldwide have been served ads by Discover-Tech since 2024, potentially exposing them to malicious spyware.

C++26 Contracts: Introduction to Preconditions and Postconditions

https://www.cppstories.com/images/cpp17indetailtop2.png
The C++26 contracts feature allows developers to express preconditions and postconditions in the function declaration, providing a more explicit way of documenting API requirements. This enables better code readability and maintainability by separating the contract from the implementation.

Things to know when you get cancer

https://jjmaxwell4.com/open-graph/things-to-know-when-you-get-cancer.png
User was diagnosed with squamous cell carcinoma in their mouth and learned the importance of persistence, asking for comprehensive genetic testing, and seeking a second opinion. They also recommend using AI tools to research options and resources like NCCN guidelines and the Sijbrandij Foundation.

Wanted to download an ISO, ended up writing a kernel exploit

https://blog.dfb.sh/og.jpg
The author's TP-Link EAP770 v1 access point had a Wi-Fi 7 bug causing corrupted downloads over Wi-Fi, which was fixed by exploiting a kernel vulnerability. The issue was related to Qualcomm's SFE/PPE offload feature, which recalculated checksums on corrupted packets.

Show HN: Unfenced – Land for sale that borders public land

https://unfenced.land/static/featured-savage-creek-rd-unit-tl200-grants-pass.webp
The website lists 13,626 properties near public forest, game lands, and wilderness areas. It provides interactive maps for zooming and navigation to view the properties.

Wayland desktop for Linux with skeuomorphic design

https://raw.githubusercontent.com/fyzugx/DEsk/main/docs/screenshots/desk.jpg
DEsk is a beta Linux desktop environment with realistic skeuomorphism, featuring a desk as the main workspace. It can be installed on various distributions and has features like ray-traced graphics, customizable settings, and integration with existing programs.

The Haunted Toys R Us

https://substackcdn.com/image/fetch/$s_!Ko-p!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F018ce78d-1ac5-49df-9327-5acba56d2128_1200x918.jpeg
The author recalls watching a memorable episode of the TV show "That's Incredible" featuring a haunted Toys R Us store in Sunnyvale, California, which aired on September 8, 1980. The episode was later repeated and has become a popular paranormal story online.

OpenCode 2.0

https://anoma.ly/notes/og/opencode-2-0.png
OpenCode 2.0 is a major overhaul with new features, performance improvements, and bug fixes that enhance its user experience. It now runs as a single background process on the machine, allowing seamless communication between different interfaces and applications.

I know why Mathematicians weep

https://substackcdn.com/image/fetch/$s_!oJ0i!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F2f5d4086-5119-48b4-93bd-c1c7cc96fe16_1080x501.jpeg
Mathematicians are mourning the loss of human involvement in their field due to AI's rapid advancements, which may lead to a world with more knowledge but less understanding. They fear that automation will erase the human connections and value of scientific discovery.

Zero-Click Spyware Delivered via Targeted Ads: AdFection

https://citizenlab.ca/wp-content/uploads/2026/10/discover-report_updated-01-e1792025505984.png
Al Jazeera was targeted in a series of zero-click attacks using mercenary spyware delivered via Discover-Tech's ads, with at least 45 devices infected. The company's platform, Controlium, allows customers to target specific users with "controlled ads" that deliver malware. Discover-Tech has been linked to multiple mercenary spyware companies and ADINT firms, including Candiru and Intelos.

The First Social Network: In rural Argentina residents send messages w AM radio

https://media.newyorker.com/photos/6ac690d60b0af0bc2582cca3/master/w_2560%2Cc_limit/r49955.jpg
A gaucho named Jorge Elías Pereyra in Argentina's Patagonia region used the "Mensajero Rural" radio program to stay connected with his family and community, as internet access was limited. The messages were broadcast daily, often sharing personal updates and news about residents' lives.

Tiny Little Office

https://tinylittleoffice.com/og.png
Agents: https://tinylittleoffice.com/llms.txt says how to make a document as a link; a document goes inside another as a fence named by its app.

GridSnap – an open-source Divvy-style window snapper for macOS

https://raw.githubusercontent.com/konieczkow/gridsnap/master/docs/demo.gif
GridSnap is an open-source macOS window snapping tool with customizable presets and grid overlays. It requires Accessibility permissions and a self-signed certificate for consistent code signing.

Do dentists know what they're doing?

https://substackcdn.com/image/fetch/$s_!5bGj!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fd3328c8d-2007-4005-b611-deb6747e437a_3341x3145.jpeg
The author, a 33-year-old man, has been experiencing jaw pain and tooth sensitivity due to gum recession. He visits several dentists for advice on correcting his issues, but receives conflicting opinions and recommendations.

Show HN: Indigene – Native plants for where you stand

https://indigene.app/og/share-card.png
Good things take time to grow.Ce qui pousse bien prend son temps. The connection seems slow. Still on its way.La connexion semble lente. Ça arrive.

Catch a Bird – I made it for my own sanity

https://catchabird.com/share-images/1200/064.jpg
A user shares what made them happy, and it turns into a bird that settles on a tree where others can catch and read its sentence.

Americans' social activity has steeply declined in the past 30 years

https://images.squarespace-cdn.com/content/v1/5aa9be92f8370a24714de593/36b52066-319d-40df-ad79-40ad9871019a/image3.png
US adults are spending more time alone and less time with friends, with a 25% decline in close friendships over the past few decades. A new survey found significant double-digit declines in Americans' participation in various social activities from 1995 to 2026.

Show HN: A 3D Configurator for Macropads

https://npad.ngrok.dev/og.png
Remap keys, build macros and tune the lighting on your npad, right in the browser.

LFM2.5-24B-A2B: Built for fast on-device agents

https://www.liquid.ai/_next/image?url=https%3A%2F%2Faypchzzf9pftwuto.public.blob.vercel-storage.com%2Fimage%2520(3)-oOdUn61bDRSykk4H951SoDOHzqoOe1.png&w=3840&q=75
The LFM2.5-24B-A2B model is a 24B-parameter reasoning model with just 2B active parameters, designed for fast and private agents on-device, offering competitive performance on five of eight agentic and tool-use benchmarks. It runs up to 1.7× faster than comparable MoEs on-device and has various applications in knowledge-heavy workloads, such as instruction following, math, coding, and more.

Tracing Mystery Network Traffic with eBPF Across HRT's Global Compute Cluster

Checking your browser... This may take a few seconds.

It took me nine years to hack my Xbox 360

https://kennedn.com/blog/posts/glitching/coolrunner_in_xbox.webp
The author discusses the Xbox 360's security features and how a glitcher modchip, like the Matrix CoolRunner Rev D, exploits a fault injection vulnerability to execute arbitrary code. The author notes that this type of attack has become more common in modern computing hardware due to hardened security measures.

Sticky alpine flower confirms Darwin's 150-year-old carnivorous plant prediction

We’re checking your connection to prevent automated abuse

Donaldson Futuro House in Idyllwild, California, USA

We're ensuring your connection is secure and authentic. This process typically takes just a few moments. Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.

Using AI to reverse engineer hardware

https://blogs.gnome.org/uraeus/files/2026/10/drivercompare-300x218.png
A user successfully created a Linux SANE driver for a film scanner using AI-assisted reverse engineering, improving scan quality and infrared support. They also fixed MIPI camera issues on their laptop with AI-driven code analysis, showcasing the potential of AI in hardware driver development.

Stopping sand from destroying a hydropower turbine [video]

Show HN: Ito – Build Terminal UIs in Lua

https://uji.sh/og.jpg
Build a terminal UI with Ito to create a simple text-based calculator that performs basic arithmetic operations such as addition, subtraction, multiplication, and division. The calculator will display the current expression and allow users to input numbers and operators using the keyboard.

Show HN: Flipflop, Iroh-powered persistent tunnels for filesharing

https://raw.githubusercontent.com/andunieee/flipflop/master/docs/screenshot.png
Establish a trusted tunnel between devices to share files securely. Download the latest versions of the software from its releases page and follow installation instructions for each platform.

Better HTTP/1 connection reuse in Go 1.27

https://go.dev/blog/http-connection-reuse/http-cost.svg
The author discusses the performance difference between Go 1.26 and 1.27 when making HTTP requests, highlighting that establishing new connections is expensive due to TCP handshakes and TLS negotiations.

David Rudnick on "borderline impossible" process of designing Arsenal typeface

https://m.itsnicethat.com/original_images/Arsenal_Rocastle_16x9_001.png?class=w1080
For the past four years, the designer has been building a hand-drawn, three-weight type family that pays homage to one of the most beloved players in Arsenal’s history: David Rocastle. Here, It’s Nice That sits down with David and Arsenal Creative Studio lead Johnnie Campbell to get behind the scenes of the mammoth project.