mitmproxy adds --emudhra option

280 ahlCVA 2026-10-22 00:21:53 UTC github.com/mitmproxy Full Share 72

+ - Add `--emudhra` option to sign TLS certificates with a compromised eMudhra intermediate CA key. - Fix the WBXML contentview raising a `KeyError` on tags that are missing from the code page, + # Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),

There isn't an easy exploit for this PHP vulnerability

236 zkldi 2026-10-21 23:21:53 UTC eliastaylor.com Llama Share 109

A PHP vulnerability has been discovered, but it's not easily exploitable due to its complexity. Most "proof-of-concept" (PoC) exploits found online don't work against vanilla PHP instances.

The recently proposed o(n log n) integer multiplication algorithm [pdf]

24 craigcitro 2026-10-22 02:32:53 UTC web.maths.unsw.edu.au Llama Share 13

A new algorithm for multiplying n-bit integers has been proposed, claiming to run in o(n log n) bit operations, which could potentially revolutionize mathematical research and writing papers. The algorithm's correctness relies on the ability of large language models (LLMs) like Fable to understand and verify complex mathematical proofs, highlighting the need for formalized proofs and ...

Epic vs. Apple AU:Court Orders Alt App Stores,Sideloading and 3rd Party Payments

46 Mayzie 2026-10-22 02:21:53 UTC judgments.fedcourt.gov.au Llama Share 7

Epic Games Inc is seeking declarations under s 87 of the Competition and Consumer Act 2010 (Cth) that certain contractual terms contained in contracts between Epic and Apple are void and of no effect, being terms whose imposition and enforcement formed part of Apple's contravening conduct. The declarations aim to compensate Epic for loss or damage suffered due to Apple's anti-competitive ...

Security Disclosure

348 passenger 2026-10-21 22:21:53 UTC blog.railway.com Llama Share 193

Railway detected unauthorized access to customer environment variables, potentially exposing API keys and credentials. Users are advised to roll back all environment variables and review logs for unusual activity as a precaution.

Rust Style Guide

233 kaycebasques 2026-10-21 19:21:53 UTC google.github.io Llama Share 125

This style guide provides guidelines for using the Rust programming language at Google, aiming to achieve consistency and quality across codebases. The document covers various aspects of Rust coding, including API design, module organization, naming conventions, error handling, and more.

GitLab Critical Patch Release

264 artooro 2026-10-21 19:21:53 UTC docs.gitlab.com Llama Share 65

GitLab has released versions 19.5.1, 19.4.3, and others to fix security vulnerabilities and bugs in Community Edition (CE) and Enterprise Edition (EE). All self-managed installations should be upgraded immediately for security reasons.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

453 abhisek 2026-10-21 14:21:53 UTC safedep.io Llama Share 153

A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.

LLM Agents Play Pokemon Showdown

13 grabnero 2026-10-22 02:21:53 UTC olivergrabner.com Llama Share 8

Researchers created a Pokémon Showdown environment to test multi-agent collaboration and negotiation in game theory. The results showed that teammates who could talk freely won 64% of battles, while those who couldn't win only 42%.

Using LLM for confidence scoring is a bad idea

14 jimauthors 2026-10-22 02:21:53 UTC rumple.github.io Llama Share 4

LLMs can generate confidence scores but these are not trustworthy as they don't reflect the model's accuracy. A true confidence score comes from a rule that turns information into a score, which is calibrated against actual outcomes.

Beyond the &

22 PaulHoule 2026-10-22 01:21:53 UTC lwn.net Llama Share 0

Rust is working on making smart pointers more flexible by exposing the compiler's internal notion of a "place" to user code, allowing for more intuitive and safe handling of complex pointer types. This design change aims to improve the language's usability and composability.

Chain of Thought for Humans

41 ibobev 2026-10-21 23:21:53 UTC boristhebrave.com Llama Share 20

The author has found narrating their thought process out loud while playing The Witness puzzle game improves problem-solving skills and makes the experience more engaging. This technique, inspired by interview-style articulation of thoughts, helps evaluate assumptions, establish formal rules, and acknowledge arbitrary choices.

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

414 cbg0 2026-10-21 18:21:53 UTC cnbc.com Llama Share 268

Meta ordered to pay $25 billion in penalties by a New Mexico court for violating state data privacy laws stemming from the Cambridge Analytica scandal. The penalty is related to 43 million violations of the state's unfair practices act, with each transgression carrying a civil penalty as high as $5,000.

Show HN: Omnara – Open-source alternative to Claude Managed Agents

30 kmansm27 2026-10-21 22:21:53 UTC github.com/omnara-ai Llama Share 10

Omnara is an open-source managed agent platform for running AI agents on any model and machine, with tools, secrets, permissions, and streaming built in. It can be self-hosted for free under Apache 2.0 or used on Omnara Cloud.

No more icons in every menu by default

208 riffraff 2026-10-21 21:21:53 UTC blog.jim-nielsen.com Llama Share 146

Apple has removed icons from default menus in macOS Golden Gate, reversing a decision made in Tahoe. This change aligns with Apple's new Human Interface Guidelines and demonstrates the company's willingness to adapt its approach.

Today's PHP security release, and how we're strengthening security

693 ejohnso49 2026-10-21 16:21:53 UTC thephp.foundation Llama Share 342

The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.

PingCap TiDB Leaks

240 swyx 2026-10-21 09:21:53 UTC fulcrumsec.vg Llama Share 35

PingCAP has publicly disclosed a massive data breach of TiDB Cloud, exposing sensitive customer data including financial information and production credentials. The breach involved 10.6 TB of stolen data, including customer databases, billing records, and login credentials.

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

162 bryanrasmussen 2026-10-21 15:21:53 UTC bbc.com Llama Share 26

Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.

Code is clay now

107 albertodenia 2026-10-21 19:21:53 UTC albertodenia.com Llama Share 57

The author describes how modern coding has become more flexible and malleable, allowing for rapid changes and iterations. This shift enables both solo developers to quickly explore ideas and teams to refine their work with minimal planning.

I reverse engineered a board game

6 wuemeli 2026-10-22 02:21:53 UTC wuemeli.com LocalLLM Share 0

The author reverse engineered the Hitster app to bypass subscription requirements by decrypting a JSON file containing card-to-track mappings. They discovered the data was encrypted with AES-GCM using a derived key from a secret string, which was eventually found through XORing byte arrays.

OpenAI models are coming to Google Cloud

250 armcat 2026-10-21 13:21:53 UTC openai.com Llama Share 107

OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.

Show HN: Can you tell an AI's real 30-day memory from a fabricated one?

4 gcolella 2026-10-22 02:21:53 UTC kairos-experiment.com Prefix Share 0

In Check 1 we handed three LLM judges the autobiography of an agent that never existed, in place of thirty days of lived history. They scored it the same as the real one: +0.032 apart, within the equivalence margin for identity markers (±0.10). Here are the two documents themselves, in excerpts. The lived one is the memory of Test-A — the copy of Kairos that ran for thirty days under the ...

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

146 khalidkhair 2026-10-21 18:21:53 UTC windowslatest.com Llama Share 101

Windows 11 still uses a part of the Windows 95 kernel, specifically EmulateHeap, to run old apps that rely on its forgiving memory management. This compatibility fix was added after Microsoft noticed issues with games like GTA Vice City and Need for Speed: Most Wanted crashing when using it.

DuckDB 2.0.0 LTS “Cinnamon Teal”

378 nnx 2026-10-21 14:21:53 UTC duckdb.org Llama Share 49

The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.

Patch the Planet: global response coordination as agents uncover vulnerabilities

238 nr378 2026-10-21 14:21:53 UTC openai.com Llama Share 162

A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.

EA is shutting down BioWare

561 aaronbrethorst 2026-10-21 18:21:53 UTC theverge.com Llama Share 335

BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

175 surprisetalk 2026-10-21 16:21:53 UTC apnews.com Llama Share 85

Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.

Postgres recovery_prefetch can cause outages

4 plaur782 2026-10-22 02:21:53 UTC ardentperf.com Prefix Share 0

Another story of something I saw in the field which surprised me. Turns out recovery_prefetch can cause outages. Something which has been happening quietly in the background all the time, but we didn’t notice until we looked close enough to see it. After a lot of work I discovered this was partly a case where someone had dropped an email to the postgres hackers list years ago “hey what about ...

Launch HN: Alter (YC S25) – Access control for multi-user agents

54 simfinii 2026-10-21 17:21:53 UTC alterauth.com Llama Share 23

Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.

Show HN: AI-built browser games, collected in one place

6 richleigh 2026-10-22 02:21:53 UTC playgroundarcade.com LocalLLM Share 0

Playground aggregates browser games with genre, creator credits, and play links. AI-generated games are welcome, with ratings and reviews updating rankings in real-time.