The libexpat project has ended its security vacation and the maintainer will be paid to work on it for 6 months. They will prioritize fixing vulnerabilities and appreciate help from the community in finding and reporting further issues.
You’re unable to view this Post because this account owner limits who can view their Posts.
The website is using Cloudflare security and blocked my action, possibly due to a trigger like a certain word or SQL command. I was trying to perform an action when this page came up, and the Cloudflare Ray ID is needed to report the issue to the site owner.
TMD, a column-major data processing platform, can leverage DuckDB's vectorized SQL execution engine for efficient large dataset processing. The integration enables functional data science solutions on laptops, reducing the need for expensive distributed solutions.
WebKit-based browsers on iOS and macOS can bypass proxy settings through three features: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. These leaks expose users' real network and IP addresses, affecting Apple's iCloud Private Relay and all iOS Tor browsers, including Psylo.
Researchers have discovered three novel attacks, known as Pass-ta-key, that can compromise Google's synced passkey ecosystem and allow attackers to take over passkey-protected accounts without user interaction. The attacks exploit vulnerabilities in the system's architecture, including the storage of sensitive keys in memory and logs, and can be used to bypass user verification requirements ...
The user needed to center a div on a webpage with a sidebar, but the div was offset due to the sidebar's width. They used JavaScript and pointer events to calculate the correct position, creating a tool called center to automatically center elements on any webpage.
Shieldstral is a 3B multimodal safety classifier that adapts to context with a policy-adaptive approach, answering questions like content safety and harm. It matches larger models on text safety and sets a new state of the art on multimodal moderation with a single interface for text and images.
Pi is a coding harness that chooses minimalism, coming with only 4 tools and a system prompt under 1,000 tokens, making it cheaper and more performant. Its design allows for extensibility and self-editability, producing industry-leading results even before adding extensions, as seen in case studies with Databricks and Shopify.
A custom color picker based on a color space was created to represent human skin tones digitally, aiming to identify a broad and inclusive range of colors that correspond to plausible skin tones. The color space was developed using principal component analysis and manual fitting of spherical equations to a dataset of labeled skin tones, resulting in a color picker with three independent ...
FIPS validation only ensures a module implements approved cryptography correctly, but does not guarantee the product's overall security or the keys' management and provenance. Treating a FIPS certificate as a security guarantee can lead to false sense of security and neglect of critical security processes and evidence.
Artificial intelligence is powering 55% of reported cybercrime in Africa, allowing criminals to launch faster and more convincing attacks. Cybercrime-related financial losses have risen sharply to $484 million, with online scams and AI-powered fraud being the most common forms.
Elise Cawley, a brilliant mathematician, was a loving wife and mother who lit up her husband's life with her intellect, love, and energy for 36 years. She was a forceful intellect, kind and sweet, with a deep love for truth, beauty, and her family, and her legacy will be remembered through her remarkable life and work.
DeepGrove is an independent AI research lab building efficient language models that run anywhere.
Waymo is now offering fully autonomous rides to everyone in Dallas through its app. The service aims to provide safe and reliable transportation options for locals and tourists alike.
The widespread adoption of the Internet of Things (IoT) has positioned smart homes as paradigmatic examples of distributed automation systems, where reliability, efficiency, and interoperability depend critically on the underlying communication protocol. Among the low-power wireless technologies available for this scenario, Zigbee and Matter over Thread have emerged as leading contenders. ...
In 1993, Scott Chasin created Bugtraq as a place for full disclosure - a mailing list where security researchers could publish vulnerabilities openly, without gatekeepers, without politics. For over a decade, it was the heartbeat of vulnerability research. If something mattered in security, it was on Bugtraq first. Then it went quiet. The domain changed hands through a chain of acquisitions, ...
This repository contains a production configuration for running DeepSeek-V4-Flash-0731 on AMD MI300X with fixes for FP8 format, MoE routing, and other issues. It achieves 6,988-7,019 tok/s on fresh prompts with a 2,048-token scheduler budget.
We will use the VP8 video codec to simulate combinatorial logic by abusing its prediction mechanisms. We will build up a set of composable "gadgets" to construct arbitrary logic circuits using key-frames and prediction modes.
0
2026-08-04 17:32:13 UTC
ycombinator.com
Llama
truemetrics is a tech-driven company solving last mile delivery issues with smartphone-based mapping technology. They're seeking a commercial leader to drive growth from €1M to €10M+.
The fec crate supports various forward error correction codes including convolutional codes and Reed-Solomon codes. It provides a Rust implementation for decoding and encoding these codes with optional SIMD acceleration.
Rotate your device to landscape mode to play.
The user received multiple phishing SMSs claiming to be from FedEx, but after verifying the request on the FedEx website, they found that the link in the SMS was tampered with and could be easily manipulated. The user eventually contacted FedEx via their official phone number and was informed that their shipment was indeed subject to duty and taxes, but the amount was different from what was ...
The SEC limits automated tool requests to prevent equitable access issues and excessive searches. Users can declare their traffic and follow best practices at sec.gov/developer to avoid request limitations.
To make case folding fast, GitHub engineers removed an optimization and implemented a branchless, vectorizable loop that folds ASCII characters in place, achieving speeds of over 45 GiB/s. They also created a compact, 1776-byte table that uses byte-space arithmetic to fold non-ASCII characters without decoding, outperforming other case folding solutions and a naive hash map.
Attackers compromised the GitHub account of keyv's maintainer, injecting credential-stealing malware into keyv and other caching utilities with 2 billion monthly installs. The malware harvests secrets from the victim's environment and exfiltrates them to a public GitHub repository.
People are adopting AI despite fears of job loss, but it may actually free up time for workers to focus on quality and creativity. AI could lead to a quality boom, similar to desktop publishing, where workers use their skills and taste to produce better work.
Researchers analyzed 60 language model benchmarks and found nearly half exhibit saturation, with rates increasing with age. Expert-curation, not public test data, impacts resilience to saturation.
We generate realistic market environments for quant research, where agents use Bash tools to develop trading strategies and models must adapt to changing market regimes. Successful trading requires planning ahead and balancing short and long-term gains, with the best models recognizing new regimes before they become consensus.