mitmproxy adds --emudhra option

263 ahlCVA 2026-10-22 00:01:28 UTC github.com/mitmproxy Full Share 67

+ - Add `--emudhra` option to sign TLS certificates with a compromised eMudhra intermediate CA key. - Fix the WBXML contentview raising a `KeyError` on tags that are missing from the code page, + # Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),

There isn't an easy exploit for this PHP vulnerability

216 zkldi 2026-10-22 00:01:28 UTC eliastaylor.com Llama Share 99

A PHP vulnerability has been discovered, but it's not easily exploitable due to its complexity. Most "proof-of-concept" (PoC) exploits found online don't work against vanilla PHP instances.

Security Disclosure

341 passenger 2026-10-21 22:01:28 UTC blog.railway.com Llama Share 180

Railway detected unauthorized access to customer environment variables, potentially exposing API keys and credentials. Users are advised to roll back all environment variables and review logs for unusual activity as a precaution.

The recently proposed o(n log n) integer multiplication algorithm [pdf]

15 craigcitro 2026-10-22 02:32:28 UTC web.maths.unsw.edu.au Llama Share 5

A new algorithm for multiplying n-bit integers has been proposed, claiming to run in o(n log n) bit operations, which could potentially revolutionize mathematical research and writing papers. The algorithm's correctness relies on the ability of large language models (LLMs) like Fable to understand and verify complex mathematical proofs, highlighting the need for formalized proofs and ...

Epic vs. Apple AU:Court Orders Alt App Stores,Sideloading and 3rd Party Payments

25 Mayzie 2026-10-22 02:01:28 UTC judgments.fedcourt.gov.au Llama Share 4

Epic Games Inc is seeking declarations under s 87 of the Competition and Consumer Act 2010 (Cth) that certain contractual terms contained in contracts between Epic and Apple are void and of no effect, being terms whose imposition and enforcement formed part of Apple's contravening conduct. The declarations aim to compensate Epic for loss or damage suffered due to Apple's anti-competitive ...

GitLab Critical Patch Release

263 artooro 2026-10-21 20:01:28 UTC docs.gitlab.com Llama Share 65

GitLab has released versions 19.5.1, 19.4.3, and others to fix security vulnerabilities and bugs in Community Edition (CE) and Enterprise Edition (EE). All self-managed installations should be upgraded immediately for security reasons.

Rust Style Guide

228 kaycebasques 2026-10-21 20:01:28 UTC google.github.io Llama Share 126

This style guide provides guidelines for using the Rust programming language at Google, aiming to achieve consistency and quality across codebases. The document covers various aspects of Rust coding, including API design, module organization, naming conventions, error handling, and more.

LLM Agents Play Pokemon Showdown

12 grabnero 2026-10-22 02:15:28 UTC olivergrabner.com Llama Share 4

Researchers created a Pokémon Showdown environment to test multi-agent collaboration and negotiation in game theory. The results showed that teammates who could talk freely won 64% of battles, while those who couldn't win only 42%.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

451 abhisek 2026-10-21 15:01:28 UTC safedep.io Llama Share 152

A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.

Chain of Thought for Humans

40 ibobev 2026-10-22 00:01:28 UTC boristhebrave.com Llama Share 18

The author has found narrating their thought process out loud while playing The Witness puzzle game improves problem-solving skills and makes the experience more engaging. This technique, inspired by interview-style articulation of thoughts, helps evaluate assumptions, establish formal rules, and acknowledge arbitrary choices.

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

407 cbg0 2026-10-21 18:01:28 UTC cnbc.com Llama Share 261

Meta ordered to pay $25 billion in penalties by a New Mexico court for violating state data privacy laws stemming from the Cambridge Analytica scandal. The penalty is related to 43 million violations of the state's unfair practices act, with each transgression carrying a civil penalty as high as $5,000.

No more icons in every menu by default

205 riffraff 2026-10-21 21:01:28 UTC blog.jim-nielsen.com Llama Share 142

Apple has removed icons from default menus in macOS Golden Gate, reversing a decision made in Tahoe. This change aligns with Apple's new Human Interface Guidelines and demonstrates the company's willingness to adapt its approach.

Using LLM for confidence scoring is a bad idea

5 jimauthors 2026-10-22 02:01:28 UTC rumple.github.io LocalLLM Share 0

LLM-generated confidence scores lack reliability as they aren't based on actual evidence or calibration. They are text continuations, not measurements, and vary with input phrasing, not information quality.

Beyond the &

16 PaulHoule 2026-10-22 01:01:28 UTC lwn.net Llama Share 0

Rust is working on making smart pointers more flexible by exposing the compiler's internal notion of a "place" to user code, allowing for more intuitive and safe handling of complex pointer types. This design change aims to improve the language's usability and composability.

Today's PHP security release, and how we're strengthening security

692 ejohnso49 2026-10-21 16:01:28 UTC thephp.foundation Llama Share 340

The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

162 bryanrasmussen 2026-10-21 16:01:28 UTC bbc.com Llama Share 25

Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.

Show HN: Omnara – Open-Source Alternative to Claude Managed Agents

27 kmansm27 2026-10-21 22:01:28 UTC github.com/omnara-ai Llama Share 10

Omnara is an open-source managed agent platform for running AI agents on any model and machine, with tools, secrets, permissions, and streaming built in. It can be self-hosted for free under Apache 2.0 or used on Omnara Cloud.

PingCap TiDB Leaks

232 swyx 2026-10-21 09:01:28 UTC fulcrumsec.vg Llama Share 33

PingCAP has publicly disclosed a massive data breach of TiDB Cloud, exposing sensitive customer data including financial information and production credentials. The breach involved 10.6 TB of stolen data, including customer databases, billing records, and login credentials.

Code is clay now

104 albertodenia 2026-10-21 20:01:28 UTC albertodenia.com Llama Share 56

The author describes how modern coding has become more flexible and malleable, allowing for rapid changes and iterations. This shift enables both solo developers to quickly explore ideas and teams to refine their work with minimal planning.

OpenAI models are coming to Google Cloud

246 armcat 2026-10-21 13:01:28 UTC openai.com Llama Share 107

OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.

Patch the Planet: global response coordination as agents uncover vulnerabilities

237 nr378 2026-10-21 15:01:28 UTC openai.com Llama Share 162

A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.

DuckDB 2.0.0 LTS “Cinnamon Teal”

375 nnx 2026-10-21 15:01:28 UTC duckdb.org Llama Share 49

The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

144 khalidkhair 2026-10-21 19:01:28 UTC windowslatest.com Llama Share 98

Windows 11 still uses a part of the Windows 95 kernel, specifically EmulateHeap, to run old apps that rely on its forgiving memory management. This compatibility fix was added after Microsoft noticed issues with games like GTA Vice City and Need for Speed: Most Wanted crashing when using it.

Postgres recovery_prefetch can cause outages

4 plaur782 2026-10-22 02:01:28 UTC ardentperf.com Prefix Share 0

Another story of something I saw in the field which surprised me. Turns out recovery_prefetch can cause outages. Something which has been happening quietly in the background all the time, but we didn’t notice until we looked close enough to see it. After a lot of work I discovered this was partly a case where someone had dropped an email to the postgres hackers list years ago “hey what about ...

I reverse engineered a board game

4 wuemeli 2026-10-22 02:01:28 UTC wuemeli.com Prefix Share 0

I recently received a game called “Hitster” as a gift. It’s a board game where you try to identify songs and guess things like when they came out, who the artist or band is, etc. Each card has a QR code that you scan using the Hitster app, which then plays the music through Spotify or Apple Music. Sadly, the app requires an Apple Music or Spotify subscription. In this blog post, I’ll go down ...

Show HN: AI-built browser games, collected in one place

5 richleigh 2026-10-22 02:01:28 UTC playgroundarcade.com LocalLLM Share 0

Playground aggregates browser games with genre, creator credits, and play links. AI-generated games are welcome, with ratings and reviews updating rankings in real-time.

EA is shutting down BioWare

555 aaronbrethorst 2026-10-21 18:01:28 UTC theverge.com Llama Share 330

BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

174 surprisetalk 2026-10-21 16:01:28 UTC apnews.com Llama Share 85

Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.

Launch HN: Alter (YC S25) – Access control for multi-user agents

54 simfinii 2026-10-21 17:01:28 UTC alterauth.com Llama Share 22

Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.

PHP 8.2.35

979 tuyuri 2026-10-21 14:01:28 UTC github.com/php Llama Share 536

The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.