AI is forcing us to pay off 40 years of technical debt

https://spectrum.ieee.org/media-library/illustration-of-the-letters-php-with-cracks-in-them.jpg?id=68544156&width=1200&height=750
A major PHP2Shell vulnerability was discovered in late October, putting numerous websites at risk of data breaches and malware installation. A patch has been released, but experts warn that this may be a canary in the coal mine for future AI-driven vulnerabilities.

Guerrilla Bike Lanes: San Francisco Makes Illicit Infrastructure Permanent (2016)

https://99percentinvisible.org/wp-content/uploads/2016/10/golden-gate-park-posts-600x450.jpg
A group of urban activists in San Francisco installed protected bike lanes using traffic cones, prompting the city to make the change official after a similar installation elsewhere. The move suggests that cities are open to progress and may be willing to support changes in street safety.

An end to buggy web apps

https://prod-files-secure.s3.us-west-2.amazonaws.com/cd174a13-062f-4c55-9e94-b4a89ee5bf11/de671060-e949-49f2-9ba6-471e8296aeee/Screenshot_2026-11-03_at_12.25.11_PM.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIAZI2LB4664AWHRUSA%2F20261104%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261104T171638Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEOn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJHMEUCIAoZiOrlWFnrKiODmuOFcwquFowDOK%2FvVpmuARF49cKGAiEA1HRqBWHq28GbvTu%2FO9LyMdnNFJODVPRisOJIv%2BG5o%2B8qiAQIsf%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAAGgw2Mzc0MjMxODM4MDUiDBenAB8ips9mKbnFoyrcA1f8XYbJR%2FZXLFsfDcgvEZlYRAAfky3ko82FpkFXFTeg5G6DfQl7FHQwC%2FREd5J4EED%2BQBUSL7lSIsYQcRCOddR%2BtuDdEM7z8OqfwolWemSEVKKxB3VdRCkEqtkunR6gvch4qWgcYlO52yEfstg9SQoAJoiCC4F4NTfvJFynDaBD8Nbq8cl8Po2X3txhGNKjMgr%2BA%2Fl2Tb0c19kuIIhN%2BDANXs13tSZoNuZ2J9wZmp6rktW32d9IMpq6OJemzAs2gtyotADxHixsapXNeqfhr1aG%2BN4D10vL%2F9iqdgcFzDcEl1xMoTMNaFYQzu3I3cYaD%2BDJywJF6WwYCOy5nnqvq7w6FqOQc4ZcyLRmEij9Ng7%2B9Bk5LK8de%2Fhs3bAVVox8aC7aOZSa%2FnFpBqFuaiCmrjuRDREHtqnfwjCrxOCHVYjzPzrqf4cs4JMpgOq4%2BfJcXGU5%2BJOP%2BAnWoVelWtlRyqX%2BTYF0cwOb5NdxC11scJEGxxQbS%2BNY49WwgE6JV0eTA9AuXtrIJ%2BwFqPiXlxVCIz41H1OwNOfHgb7CzmfdUhj7NLKmGanuESgArK0uWhYGMhUn4WIxTsjo6CtpkwWsVsBhBHQ6GIq8yAtVfJ8HJ0qBo4%2Frs88E7HGOrB2FMM7IrdcGOqUBv0DoeuBklbuSL4xH51lS0CoHRGnylFgHeAbM6xNe8xqCLmg8V6qsxdi6dVOQ5c0%2BO8%2FxIJDtriPremX%2B32vnINXY0yv%2Fhm3VMhLIkfnhlUJAhWO4upJBhJu%2FcqzIy7TVZIwO1dobvR5N4B%2FiF1ZJwSkQX3%2FGPNvT05l6dApeaNt03OKTXp52DYLCrsTFPIlwMd4519NxTZ3J%2FQvaynJy42FXrJrb&X-Amz-Signature=ca9c727b4c447870d95f93c950439964362b22577e2e24449a53f070edcb187d&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject
Replay is working to automatically detect and fix bugs on the web using its time travel debugger, which provides perfect observability. The tool can identify root causes of issues and provide detailed evidence for agents to fix problems without guessing.

Nvidia RTX Spark encrypted firmware slows inference speed to 35% on Linux

https://i.mscdn.ai/o/iZl0kkZU2R9KXyy7/a/3V2ICO3oSq2QZPii/_published/generated-images/0d8c9668-cbfe-4ecf-bb31-1a7fff7102be.png?fm=auto&w=1200&fit=cover?fm=auto&w=1200&fit=cover
The RTX Spark laptop's GPU is underpowered when running Linux due to a lack of power management firmware, causing it to run at 780 MHz instead of 2 GHz. A dual-boot setup using WSL (Windows Subsystem for Linux) provides better performance and avoids the throttling issue.

Evergreen: A Provably Safe Systems Language

Evergreen ensures explicit contracts, checked invariants, and memory control through constructor preconditions and postconditions. It verifies obligations at compile-time to guarantee correctness.

North Korean fake job interview led to $6.3B Binance heist

https://image.theregister.com/251685.jpg?imageId=251685&panox=0.00&panoy=0.00&panow=100.00&panoh=100.00&heightx=0.00&heighty=0.00&heightw=100.00&heighth=100.00&width=960&height=432&format=webp&format=jpg
North Korean hackers used social engineering tactics, including fake job interviews and malware downloads, to breach Binance's systems before a record-breaking $6.3 billion heist. The attack involved multiple stages and techniques, including compromised internal AI tooling and endpoint takeover.

AMD expects to outsell Intel in Q4 for the first time in history

https://cdn.mos.cms.futurecdn.net/JEoX8YCXojy75yWgSMrTUB-1200-80.png
AMD reports its highest quarterly revenue ever, driven by strong demand for Epyc data center processors and Instinct AI accelerators. The company expects Q4 revenue to reach $17 billion, surpassing Intel's forecast for the first time in history.

Verification Is Not Knowledge: Science needs more than answers

https://substackcdn.com/image/fetch/$s_!qC0Q!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F6c5afe03-d75e-4108-b58a-63be2d3ba4b7_2048x1413.png
Jessica Hullman argues that the value-free ideal in science, prioritizing correctness over understanding and accountability, is flawed. She believes this ideal distorts how we seek truth and threatens human capacities that sustain science.

Incident with Pull Requests, Git Operations and Issues

https://user-images.githubusercontent.com/19292210/60553865-044dd200-9cea-11e9-859c-d6f266e2f01f.png
GitHub's Status Page - Incident with Pull Requests, Git Operations and Issues.

Provable Inference

https://www-cdn.anthropic.com/images/4zrzovbb/website/2eba335a28661a8253187053fa36add230af728b-2000x1125.jpg
Roy Rinberg (Anthropic), Alex Allain (Anthropic); Alessandro Chiesa (EPFL, StarkWare), Miranda Christ (MIT, RESI), Rahul Dalal (Anthropic STEM Fellows Program, Succinct), Giacomo Fenzi (EPFL), Ben Mayer (Anthropic Fellows Program, MIT), Guy Weissenberg (EPFL) When you talk to a friend in person, you have many ways to know it is really them: you can see them, hear them, shake their hand. When ...

Letting users trust their own MCP clients, without opening a phishing hole

https://streamvessel.com/images/blog/mcp-trusted-redirect-uris/trusted-card.png
A Slack bot and service on a VPS are trying to register with an MCP server, but the registration fails due to an invalid redirect URI. The issue is that the MCP server only accepts addresses from its operator's allowlist, which includes domains like Claude and ChatGPT.

Kimi K3.1 Pro model weights are out

https://huggingface.co/api/resolve-cache/models/moonshotai/Kimi-K3.1-Pro/6d0a0202956796543364d666ab19c6ad1a494ee1/assets%2Fkimi-logo.png?%2Fmoonshotai%2FKimi-K3.1-Pro%2Fresolve%2Fmain%2Fassets%2Fkimi-logo.png=&etag=%22870b8be6e07cc2c46f7173e800fbaff8af0af5d1%22
Kimi K3.1 Pro is a multimodal agentic model that delivers improvements in coding, 3D creation, and factual accuracy compared to its predecessor Kimi K3. It uses Gated DeepSeek Sparse Attention layers for efficient long-context modeling.

Tell HN: Gemini trains on chat history, even for subscribers (personal accounts)

Sorry

Show HN: I built a tool that prices a prebuilt PC part by part

PC Deal Check is a tool that helps users compare computer prices by analyzing retailer listings and estimating component costs. It provides a report with the deal's grade, estimated parts cost, and price comparison to help users make informed purchasing decisions.

Adding Window Functions to a Spreadsheet

https://www.getgrist.com/wp-content/uploads/2026/09/Screenshot-2026-10-26-at-3.43.34-PM.png
A traditional spreadsheet's "previous row" concept is flawed when rows are rearranged, and alternative methods like OFFSET() or SCAN() formulas can solve this issue. Database-like tools like Airtable and Baserow use window functions to achieve a running balance, while Grist uses the PREVIOUS() function with ordering in the formula for accurate results.

Jelly Sheet

CODEVEMBER 2026 / 01 / FOLD Preparing plastic…

Show HN: Codemap – one-page interactive map of any Go repository

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
A tool maps a Go module's packages, functions, and dependencies in an HTML page. It can be run locally or integrated into a GitHub repository for interactive exploration of the codebase.

Debian apt security update (man-in-the-middle)

User's input is a technical error message from a website blocking IP address 20.168.26.246 for potentially abusive behavior, likely due to excessive scraping activity with outdated browser version or suspicious user agent string.

Kitty 0.50

https://sw.kovidgoyal.net/kitty/_images/quake-macos.webp
kitty has been updated with numerous features, including support for Custom Shaders, docked windows, and improved performance. The update also includes new options for customizing kitty's behavior, such as remapping modifiers and controlling how padding strips are colored in splits layouts.

Stringman, an $800 open-source room scale gripper robot

https://storage.googleapis.com/nf-site-assets-prod-b/assets/exploded.webp
Stringman is a robotic arm designed to navigate and manipulate objects in a room, using cable-driven architecture and overhead lines for movement. It offers an open-source platform with customizable control software and AI models, allowing users to create their own workflows and behaviors.

Mocktastic: A Meshtastic Node on Arduino

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
Mocktastic is a customizable LoRa client for ESP32 boards using Arduino IDE, demonstrating Meshtastic packet decoding and environmental sensor examples. It targets the LilyGO T3 LoRa32 V1.6.1 hardware with MBDTLS and Nano-Protobuf encryption.

Pierre Computer is being acquired by OpenAI

https://pbs.twimg.com/card_img/2117728866865131520/QF9lGWl5?format=webp&name=medium
an announcement from the pierre computer company

The Internals of PostgreSQL

https://www.interdb.jp/pg/title3.png
This documentation explains PostgreSQL's subsystems and their features, aiming to provide a comprehensive understanding of the database system. The author is seeking remote positions focused on applying ML and AI technologies to DBMS due to personal reasons of moving to Japan.

The lost malloc()

https://napcakes.nekoweb.org/posts/malloc/unix-v4-tape.jpg
The author studied the original Unix sources from 1973, specifically how they handled memory allocation and management in C. They found that early versions of Unix used a linear allocator with explicit memory regions, but later editions introduced more complex allocation algorithms and garbage collection.

Rosalind Franklin figured out DNA's helical structure before Watson and Crick

https://cdn.mos.cms.futurecdn.net/2f5KnbtoPgYYk5ZuskdrKC.png
Rosalind Franklin's famous DNA photographs were taken for publication, not experimentation.
Durations are estimated until the YouTube metadata is fetched, so some programs will run short ("please stand by") or get cut off. Keys: ↑↓ channel · 0-9 tune · G guide · F picture · M mute · C captions · I info · T theater · double-click screen for fullscreen · P power
https://www.phoronix.com/assets/categories/hardware.webp
A new open-source Linux driver for modern DisplayLink hardware, called Vino, was developed in part by AI and written in Rust but has disappeared due to Synaptics' legal threats. The company blocked the independent driver on the basis of patent infringement.

Giant canyon on Mars is still tectonically active

https://lamont.columbia.edu/sites/lamont.columbia.edu/files/styles/cu_crop/public/cu_ldeo_news_import/128655/Fola-Marsquake--650x420.jpeg.webp?itok=aOUMLmNO

Distinct cellular and genetic differences in colorectal cancer in young patients

https://dfci.widen.net/content/48f98545-473f-45fa-8c51-9f8faa171186/web/physician-and-patient-stethoscope-600x368.jpg?crop=yes&k=c&w=600&h=368&v=48f98545-473f-45fa-8c51-9f8faa171186&itok=pOonpBGb
Researchers have identified age-associated differences in tumor composition and gene activity, which may explain why colorectal cancer is more aggressive in younger adults. The study provides a foundation for understanding these differences and exploring future treatments for young-onset colorectal cancer.

Show HN: Uncracked City, detective game where you question LLM suspects that lie

https://uncracked.city/_next/image?url=%2Fcases%2Fthe-perfect-copy.webp&w=3840&q=75
A detective game set in real cities, where players search for clues and solve cases. The game features six languages, five training levels, and a passport that stamps the solved city upon completion.