Residential proxies detected on White House network

Researchers discovered residential proxy activity on AS2650, a network registered to the White House. This suggests that devices infected with proxy SDKs are accessing internal systems late at night.

Lemmings CSS Animation

Columns of text reflow a lot when the window changes size, so this is a good place to try a resize launch. Each line of text is its own floor. Walkers can drop from line to line, fall off the end of a short line, and land on whatever is below. Lines sit closer together than a walker is tall, so text never blocks them. Only borders, boxes, buttons, images and fields do. That keeps walkers from ...

Want to Rent an Internet Address at the White House?

https://krebsonsecurity.com/b-doppel/19.png
Several White House staffers are using residential proxy services to mask their internet addresses, raising security concerns. These services can be rented for low costs and often come from unverified providers in China or Russia.

Images 2.6

https://images.ctfassets.net/kftzwdyauwt9/42Jkg5JWYVVqTm7yFb2Sb3/b4c1d767b5d3d823936ee3c7531e9cb7/images-2-6-gif-montage-poster.jpg?w=3840&q=50&fm=webp
OpenAI introduces Images 2.6, allowing users to create and edit images faster with greater precision, including GIFs for motion and animation. The new feature is available globally in ChatGPT and Codex across all subscription tiers on desktop, mobile, and web.

A thousand fewer paths to root

https://images.ctfassets.net/kftzwdyauwt9/5AQJogp4Is4L0Nhh59FtDa/0740682e6eb1a56f1c22eb4b7b7b09ec/a-thousand-fewer-paths-to-root-discovery-funnel.svg?w=3840&q=90
Researchers developed an autonomous vulnerability discovery, exploitation, and patching pipeline that identified 948 local privilege escalation vulnerabilities in Linux at a cost of $1.2 million. The pipeline used a cyber model to dynamically reproduce vulnerabilities and generate patches, with costs ranging from $271 to $359 per exploit.

Partial Operator Precedence

The Zig language has made significant updates, including the implementation of parentheses in certain operator precedence cases and improvements to its ELF linker. The new ELF linker allows for fast incremental compilation, which can significantly speed up development processes. Additionally, the Zig standard library is being transitioned to be a static provider, eliminating redundant code ...

Kimi K3.1 Pro model weights are out

https://huggingface.co/api/resolve-cache/models/moonshotai/Kimi-K3.1-Pro/6d0a0202956796543364d666ab19c6ad1a494ee1/assets%2Fkimi-logo.png?%2Fmoonshotai%2FKimi-K3.1-Pro%2Fresolve%2Fmain%2Fassets%2Fkimi-logo.png=&etag=%22870b8be6e07cc2c46f7173e800fbaff8af0af5d1%22
Kimi K3.1 Pro is a multimodal agentic model that delivers improvements in coding, 3D creation, and factual accuracy compared to its predecessor Kimi K3. It uses Gated DeepSeek Sparse Attention layers for efficient long-context modeling.

Chip Art

https://thumb.wikimedia.org/wikipedia/commons/thumb/8/85/Buffalo_chip.jpg/250px-Buffalo_chip.jpg?utm_source=en.wikipedia.org&utm_campaign=parser&utm_content=thumbnail
Chip art is microscopic artwork built into integrated circuits, created in unused space on chips with no additional cost. This freedom has led to various designs, from initials to complex drawings, which can only be seen under a microscope.

Altera Announces Agilex 2X, a Complete FPGA and SoC Portfolio

You don't have permission to access "http://www.altera.com/newsroom/agilex-2x" on this server.

Ripple-65B Preview: U.S. Open-Weight SOTA on Agentic Coding

https://framerusercontent.com/images/u4OXzV0utwAtaPgcVxQtTXmkg.png
Ricursive Intelligence released Ripple-65B Preview, a general-purpose language model that achieves US open-weight state-of-the-art (80.52) on agentic coding, trained from scratch for $32M. The model is designed to be efficient and scalable, with a dense architecture and optimized training recipe.

Spreading Liquid with Three.js

https://mofu-dev.com/images/blog/fluid-foundation/thumb.webp?blur=899
The author implemented a liquid foundation effect using a fluid simulation and height maps, allowing users to drag their mouse or finger across the liquid. The effect uses velocity maps to create realistic movement and blending of colors.

So my ISP was hijacking my DNS

https://www.karthihegde.dev/posts/assets/dns/plaintext_dns.png
The author discovered their ISP was hijacking DNS queries and returning tampered IP addresses, prompting a discussion on DNS security measures. They explain that DoT (DNS over TLS) and DoH (DNS over HTTPS) encrypt the connection but don't protect against tampered responses from the resolver itself.

Insects don't swarm at LED lights

https://www.birdsoutsidemywindow.org/wp-content/uploads/2026/11/insects_swarm_at_gas_station_light_Iowa_US20_20060726_wiki-1024x682.jpg
Insects are attracted to outdoor lights, but LED lights emit less UV light than incandescent or fluorescent lights, making them less appealing. This reduced attraction can help mitigate disturbances to wildlife and insect-borne diseases.

A new Go API for JSON

https://go.dev/blog/jsonv2/api.png
The Go standard library has updated its JSON support with a new version, v2, which addresses several issues and improves performance. The new encoding/json/v2 package provides a more flexible and efficient way to marshal and unmarshal JSON data in Go.

Future Maintenance of Mbed TLS

The existing Mbed TLS maintainers will step down by April 2027, and the project's future maintenance arrangements are uncertain. The community is invited to contribute to sustaining Mbed TLS through engineering resources, funding, or other forms of support.

Conductor is joining Meta

https://www.conductor.build/farewell/og.png
Conductor was launched in July 2025, and the team has big plans for its next interface. Conductor will continue to work normally until early next year, with Conductor Cloud shutting down over the next few weeks.

Hacking the Xbox 360 Hypervisor Part 3: Bad Update Improvements

https://icode4.coffee/wp-content/uploads/banner_part3-470x140.png
The author of the Bad Update exploit has improved its success rate to nearly 100% by addressing several issues, including a new game save entry point in Rock Band Blitz and improvements to the cache flushing primitive.

AI is forcing us to pay off 40 years of technical debt

https://spectrum.ieee.org/media-library/illustration-of-the-letters-php-with-cracks-in-them.jpg?id=68544156&width=1200&height=750
A major PHP2Shell vulnerability was discovered in late October, putting numerous websites at risk of data breaches and malware installation. A patch has been released, but experts warn that this may be a canary in the coal mine for future AI-driven vulnerabilities.

Ask HN: What's your current AI agentic setup?

Sorry

Show HN: After a decade of reversing, I got co-op working in DOS Wing Commander

https://fireflyk64.github.io/wcmulti/img-target.png
The author created a multiplayer version of the classic game Wing Commander using DOSBox and WebRTC, allowing players to connect and play together online. The project involved reverse-engineering the game's memory layout and writing custom code to control player movement and interactions.

Starfall – Affordable, routine access to microgravity

https://www.spacex.com/assets/images/sites/starfall/hero-starfall-reentry.jpg
Starfall enables affordable access to microgravity for manufacturing, research, and testing in low-Earth orbit. This allows for accelerated innovation in fields like oncology, stem-cell discovery, and material production.

Qualcomm Cloud AI 100 Ultra – 150W AI Accelerator Card with 128GB at 548GB/s

https://s7d1.scene7.com/is/image/dmqualcommprod/cloud-ai-inference-as-a-service?$QC_Responsive$&fmt=png-alpha&wid=550
The Qualcomm AI Inference Suite is a comprehensive software solution for on-premises and cloud deployments, offering ready-to-use AI applications and tools for operationalizing generative AI. It supports various APIs, frameworks, and services for building enterprise-grade chatbots, co-pilots, and AI agents.

Progress on provable inference for large language models

https://www-cdn.anthropic.com/images/4zrzovbb/website/2eba335a28661a8253187053fa36add230af728b-2000x1125.jpg
Researchers at Anthropic have developed a system called FlashProve, which enables provable inference for large language models. The system uses zero-knowledge succinct arguments (zkSNARKs) to prove that a response came from the specific model requested by the user.

Launch HN: Kino AI (YC S23) – AI media manager and video editor

Sorry

Guerrilla bike lanes: San Francisco makes illicit infrastructure permanent (2016)

https://99percentinvisible.org/wp-content/uploads/2016/10/golden-gate-park-posts-600x450.jpg
A group of urban activists in San Francisco installed protected bike lanes using traffic cones, prompting the city to make the change official after a similar installation elsewhere. The move suggests that cities are open to progress and may be willing to support changes in street safety.

OpenAI to acquire Pierre Computer Company

https://images.ctfassets.net/kftzwdyauwt9/6G64B5haCxDuphl2iqwZ1N/4f8d319293f5e5e98b319e01b4fbdf59/scaling-git-at-openai-art-card.png?w=3840&q=90&fm=webp
OpenAI is acquiring Pierre Computer Company, Inc to build on its Git workflows and adapt them for coding agents. The acquisition aims to advance the future of source control across the industry with Codex as a central platform.

A wave of plastic-free coffee pods and machines

https://media.cnn.com/api/v1/images/stellar/prod/alta-llifestyle-3qbrewing.jpg?c=original&q=w_1041,c_fill
Consumers are shifting towards eco-friendly coffee machines and pods due to growing concerns over microplastics and sustainability. Companies like Keurig, Lavazza, and Caraway are releasing new products with compostable or plastic-free designs.

Tencent Hy4

https://hy-model-ap-prod-1258344703.cos.ap-guangzhou.myqcloud.com/llm-blog/default/9a5ea02f/2026110413013841_c7b0f472f484b23cc564fd19c3fba30d.png?q-sign-algorithm=sha1&q-ak=AKIDRl074nOsGdJ9zjMsCRWP3ShmgS3VtX4S&q-sign-time=1793768514;2109128514&q-key-time=1793768514;2109128514&q-header-list=&q-url-param-list=&q-signature=bcc55943cd30719d8d79d6f822cf22359af4da2f
Hy4 is a major leap forward in open-source models, offering vision capabilities and significant gains in instruction following, long-context understanding, and more. It supports vision perception for the first time and has been integrated into various products to improve financial research, office document tasks, game development, and team collaboration.

'It's just vape, nail, charity shops': Can anything save UK high street?

https://i.guim.co.uk/img/media/4513c98a50ca98ff1e65bcdbe599791c56ef7a32/0_0_5707_3760/master/5707.jpg?width=445&dpr=1&s=none&crop=none
The UK's high streets are struggling due to the rise of retail parks and online shopping, with many shops closing down and local communities feeling abandoned. Despite efforts to revitalize them, some experts believe that high streets may be doomed unless a fundamental shift in approach is made.

Basically no one is using AI agents for their DoorDash orders

https://cdn.arstechnica.net/wp-content/uploads/2026/10/GettyImages-2301817894-640x427.jpg
DoorDash's CEO Tony Xu notes that AI agents are generating a "very low use case" for ordering food, despite handling over 1 billion orders in the third quarter. He sees potential for AI to be helpful with long consideration purchases and major decisions.