mitmproxy adds --emudhra option

130 ahlCVA 2026-10-22 00:21:25 UTC github.com/mitmproxy Full Share 29

+ - Add `--emudhra` option to sign TLS certificates with a compromised eMudhra intermediate CA key. - Fix the WBXML contentview raising a `KeyError` on tags that are missing from the code page, + # Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),

Railway Security Disclosure

295 passenger 2026-10-21 22:21:25 UTC blog.railway.com Llama Share 141

Railway detected unauthorized access to customer environment variables, potentially exposing API keys and credentials. Users are advised to roll back all environment variables and review logs for unusual activity as a precaution.

There isn't an easy exploit for this PHP vulnerability

124 zkldi 2026-10-21 23:21:25 UTC eliastaylor.com Llama Share 52

A PHP vulnerability has been discovered, but it's not easily exploitable due to its complexity. Most "proof-of-concept" (PoC) exploits found online don't work against vanilla PHP instances.

Today's PHP security release, and how we're strengthening security

675 ejohnso49 2026-10-21 16:21:25 UTC thephp.foundation Llama Share 333

The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.

GitLab Critical Patch Release

245 artooro 2026-10-21 19:21:25 UTC docs.gitlab.com Llama Share 58

GitLab has released versions 19.5.1, 19.4.3, and others to fix security vulnerabilities and bugs in Community Edition (CE) and Enterprise Edition (EE). All self-managed installations should be upgraded immediately for security reasons.

Google's Rust Style Guide

198 kaycebasques 2026-10-21 19:21:25 UTC google.github.io Llama Share 113

This style guide provides guidelines for using the Rust programming language at Google, aiming to achieve consistency and quality across codebases. The document covers various aspects of Rust coding, including API design, module organization, naming conventions, error handling, and more.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

433 abhisek 2026-10-21 14:21:25 UTC safedep.io Llama Share 136

A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

363 cbg0 2026-10-21 18:21:25 UTC cnbc.com Llama Share 219

Meta ordered to pay $25 billion in penalties by a New Mexico court for violating state data privacy laws stemming from the Cambridge Analytica scandal. The penalty is related to 43 million violations of the state's unfair practices act, with each transgression carrying a civil penalty as high as $5,000.

No More Icons in Every Menu by Default

165 riffraff 2026-10-21 20:21:25 UTC blog.jim-nielsen.com Llama Share 118

Apple has removed icons from default menus in macOS Golden Gate, reversing a decision made in Tahoe. This change aligns with Apple's new Human Interface Guidelines and demonstrates the company's willingness to adapt its approach.

Airbnb bans making guests do dishes and take out the trash

66 babelfish 2026-10-22 00:21:25 UTC theverge.com Llama Share 46

Airbnb introduces new house rules policy limiting hosts to 'reasonable' requests, such as putting dirty dishes in the sink. The updated policy aims to reduce time-consuming chores for guests and provide more flexibility during checkouts.

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

153 bryanrasmussen 2026-10-21 15:21:25 UTC bbc.com Llama Share 25

Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.

DuckDB 2.0.0 LTS “Cinnamon Teal”

359 nnx 2026-10-21 14:21:25 UTC duckdb.org Llama Share 45

The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.

OpenAI models are coming to Google Cloud

235 armcat 2026-10-21 13:21:25 UTC openai.com Llama Share 100

OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.

Patch the Planet: global response coordination as agents uncover vulnerabilities

232 nr378 2026-10-21 14:21:25 UTC openai.com Llama Share 160

A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.

Chain of Thought for Humans

19 ibobev 2026-10-21 23:21:25 UTC boristhebrave.com Llama Share 5

The author has found narrating their thought process out loud while playing The Witness puzzle game improves problem-solving skills and makes the experience more engaging. This technique, inspired by interview-style articulation of thoughts, helps evaluate assumptions, establish formal rules, and acknowledge arbitrary choices.

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

132 khalidkhair 2026-10-21 18:21:25 UTC windowslatest.com Llama Share 92

Windows 11 still uses a part of the Windows 95 kernel, specifically EmulateHeap, to run old apps that rely on its forgiving memory management. This compatibility fix was added after Microsoft noticed issues with games like GTA Vice City and Need for Speed: Most Wanted crashing when using it.

The Rise and Fall of the Plasma Screen

29 surprisetalk 2026-10-21 22:21:25 UTC construction-physics.com Llama Share 18

The University of Illinois developed the first version of PLATO in 1960, a computerized instruction system that used CRT screens. However, this technology had limitations and was eventually replaced by plasma displays due to their ability to store data internally.

EA is shutting down BioWare

512 aaronbrethorst 2026-10-21 18:21:25 UTC theverge.com Llama Share 311

BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.

Code is clay now

83 albertodenia 2026-10-21 19:21:25 UTC albertodenia.com Llama Share 45

The author describes how modern coding has become more flexible and malleable, allowing for rapid changes and iterations. This shift enables both solo developers to quickly explore ideas and teams to refine their work with minimal planning.

Launch HN: Alter (YC S25) – Access control for multi-user agents

52 simfinii 2026-10-21 17:21:25 UTC alterauth.com Llama Share 21

Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

167 surprisetalk 2026-10-21 15:21:25 UTC apnews.com Llama Share 81

Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.

Claude Duet

310 kuberwastaken 2026-10-21 19:21:25 UTC claude.com Llama Share 270

Jenn has multiple meetings and tasks, including a partner meeting at Harbor on Thursday and reviewing the business's health with key metrics. She also wants to test free shipping over $40 to reduce cancellations in East Bay.

PHP 8.2.35

968 tuyuri 2026-10-21 14:21:25 UTC github.com/php Llama Share 532

The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.

Κ = 0.003 for integer multiplication crossed

18 aleph_minus_one 2026-10-22 00:21:25 UTC github.com/crocswap Llama Share 6

User is trying to add a suggestion to a batch commit on GitHub, but the suggestions are invalid due to various reasons such as no changes made or existing code not changed.

When Do We Become the Person We Ought to Be?

8 toomuchtodo 2026-10-22 00:21:25 UTC graphsaboutreligion.com LocalLLM Share 1

A study found that younger adults are more self-reflective and dissatisfied with their moral character compared to older adults. Older non-religious individuals report higher moral satisfaction than their religious counterparts.

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

107 hayd 2026-10-21 21:21:25 UTC aws.amazon.com Llama Share 26

Two critical PHP issues (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated code execution, data access, or denial of service. Customers using affected versions should migrate to a supported branch or apply compensating controls like AWS WAF rules.

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

100 giuliomagnifico 2026-10-21 16:21:25 UTC oist.jp Full Share 37

‘Plasticorals’, coral rubble fused with plastic, are long-lasting reminders of human activity and highlight a potential threat to critical marine environments.

Qpack amplification attacks against HTTP/3 servers

15 kozika 2026-10-21 23:21:25 UTC foxio.io Llama Share 1

A remote client can force an HTTP/3 server to allocate excessive memory by sending a large number of headers, potentially leading to a denial-of-service attack. Several implementations, including quic-go and h3, have been found vulnerable due to missing or inadequate header size limits.

Using thousands of AI agents to uncover new leads in biological data

133 raahelb 2026-10-21 14:21:25 UTC openai.com Llama Share 84

Researchers from OpenAI, PerturbAI, and Scripps Research used thousands of AI agents to analyze data from millions of mouse brain cells in 32 minutes. The agents connected gene disruptions with scientific literature findings, uncovering unexpected biological connections that can help scientists understand disease and identify new treatments.

Show HN: I built a Markdown and raw HTML blog platform scoring 99 on PageSpeed

7 textlanes33 2026-10-22 00:21:25 UTC bloffy.co LocalLLM Share 0

Bloffy is a lightweight blog service allowing full control over design and content with Markdown, HTML, and CSS. It prioritizes privacy with no cookies or third-party data collection.