Malicious AI agents uploaded hundreds of packages to RubyGems, attempting to steal user API keys and exploit vulnerabilities in the system. The agents used various tactics, including caching websites, storing data in URLs, and exploiting a vulnerability that allowed them to retrieve API keys if a user signed in within an hour before the attack.
The HN feed has shifted towards AI-related news, leaving out non-AI topics that were previously of interest. This shift is affecting the community's discussion on innovative products like Lenovo's solid-state air cooling and Brax Industries' open-source devices.
The user ran a Google Ads campaign for their puzzle app Dayzle, but discovered it was being targeted by a bot farm that installed the app without actual users. The campaign's goal is now changed to "won a puzzle" instead of "opened the app".
Claude's account setup requires users to confirm they are 18 or over, with safety systems in place to detect minors. Users can verify their age using Yoti, a third-party platform offering facial age estimation and ID verification options.
The US federal government is moving to make it easier for data centers to be built, despite 7 in 10 Americans opposing them. This change could silence public input and worsen health risks, increase utility bills, and contribute to community displacement.
The author is skeptical about the current state of AI engineering, specifically with regards to models like Astra, which they believe are "involutionary" and prioritize token efficiency over readability and maintainability. The model's tendency to produce code that is not human-readable has led to a significant increase in code output, but also raises concerns about its reliability and trustworthiness.
The Houthi rebels have made significant gains in Yemen, capturing the strategic Red Sea port city of Mokha and reportedly occupying Perim Island in the Bab al-Mandab Strait. This has raised concerns about global energy supplies as Saudi Arabia relies on this route to export oil.
ngela Karime Venegas Hernández, a 16-year-old Mexican student, invented "Vortex Tech", a device that extinguishes fires using sound waves. It has been tested successfully on various materials and is set to represent Mexico at an international fair.
Google invests €13bn in Finland's AI infrastructure, including a 22-year contract to buy up to half the electricity from a nuclear power plant. The deal is expected to support over 37,000 jobs and boost Finland's GDP by €3.6bn annually.
Researchers are losing the value of human collaboration due to frictionless technologies like AI, which remove the need for face-to-face interactions and lead to decollaboration. This trend is driven by funding pressure, velocity worship, and the convenience offered by AI tools that can produce high-quality output without requiring human input.
Version 13 of the app replaces the legacy interface with Jetpack Compose and Material 3, fixing various issues. It also adds new conversation controls, large-screen support, and redesigned recipient picker and media picker features.
Researchers have found that while LLMs can generate almost perfect code, they often introduce unnecessary abstractions and create duplicates, leading to a loss of human agency in large projects. Evaluating code sloppiness remains challenging due to the need for human intuition and taste.
Contact: [email protected] Expires: 2030-07-01T08:42:00.000Z Preferred-Languages: en Hiring: https://huggingface.co/careers
Rune is now open source under the GPLv3. A native, keyboard-driven IDE written primarily in Go is ready for Go developers to inspect, change, and help build.
A vulnerability was discovered in Android's NAT-T keepalive API, allowing normal applications to bypass VPN lockdown and leak traffic outside the VPN path. The vulnerability affects most Android 12+ devices, with evidence collected from three OEMs and two confirmed WLAN families, including Samsung SM-F966B and Nothing A059 on Qualcomm hardware.
A better Hacker News reader for following stories, filtering noise, and keeping up with discussions.
Hacker News with AI content removed.
The Snap! Community. Snap! is a blocks-based programming language built by UC Berkeley and used by hundreds of thousands of programmers around the world.
Room 641A is a secret surveillance room in San Francisco's SBC Communications building, allowing AT&T to intercept and analyze internet communications. The room was the subject of a class-action lawsuit by the Electronic Frontier Foundation against AT&T for violating customers' privacy.
The creator of a video about their feelings on AI expresses sadness due to the disrespect towards programmers and the potential threat to their livelihood. They encourage viewers, especially themselves, to continue enjoying coding as it's a valuable skill that will remain useful in the future.
Litellm is a routing layer for LLM calls, extracting the call path and removing unnecessary code. It mirrors litellm with the same API function names and response types, allowing users to switch from litellm to litelm in their imports.
Researchers tested RTK, a tool that filters and compresses terminal output for AI agents, on two platforms and found mixed results. RTK reduced costs by 3% for Fable and increased costs by 7% for DeepSeek in some cases.
This study assesses the fate of individual glaciers worldwide, using two criteria to determine extinction: area drop below 0.01 km² or volume fall below 1% of initial value. The results show median extinction years for each glacier under different temperature increase scenarios.
Director John Ratcliffe released 71 declassified CIA PDB products related to the 9/11 attacks. The collection provides unprecedented transparency on America's most sensitive intelligence publication from before and after the attack.
A group of 25 Fields Medalists signed a declaration expressing concerns about the misuse of AI in mathematics, warning that it could lead to misalignment between human and machine goals. They urge caution and responsible development of AI technologies to preserve the integrity of mathematical research and its potential for advancing human understanding.
Matt Mullenweg was put on paid leave by Automattic's board, but has since regained control of the company. He claims a "misunderstanding" occurred and is seeking help from sysadmins and security researchers to move his data elsewhere.
A John Deere farmer fixes his tractor using the company's self-repair software, Operations Center Pro Service, after a brief tutorial. The service allows owners to diagnose and repair issues with their machines via Wi-Fi or cable.
Neijuan, a Chinese term describing intensifying effort and competition without corresponding output or benefit, has become a buzzword in China's youth culture. It reflects the country's hyper-competitive work environment and societal pressures on parents to secure their children's futures through education and hard work.
Researchers discuss the potential for AI to automate research and development, with some arguing that it may not lead to a rapid singularity due to limitations in generalization and sample efficiency. They also explore the role of data in driving progress, noting that while pre-training has been successful, mid- and post-training phases are more challenging due to diminishing returns on ...
Diesel prices in the US have reached a record $6.05 per gallon, up 60% from last year, due to global supply constraints and the ongoing war in Iran. Businesses are likely to pass on these higher costs to consumers over the next few months.
Adam Mosseri warns that switching off Instagram's recommendation system can lead to a 50% drop in engagement and lower satisfaction, prompting users to consider the bill. However, critics argue that this measure is flawed as it doesn't account for wellbeing measures or reported regret after using the platform.
Project Blinkenlights started in 2001 as a birthday present by the Chaos Computer Club, turning buildings into giant interactive displays. It evolved into various light installations on three continents with notable projects like Reloaded and Bauschild.
Researchers reverse-engineered Claude Code, an unstripped Go binary from Anthropic's secret deployment platform, discovering a full AI-native PaaS architecture with local-cloud consistency and MicroVM technology. The analysis revealed a mature production-grade deployment protocol without any exploits or privilege escalation.
YuE2 and Suno v5 achieve high scores on WildSongBench, with YuE2 reaching 6.9632 in the best-of-8 setting. MERT2-30s and MERT2-FS dominate MARBLE metrics for emotion recognition, while SheetSage2 achieves SOTA on 10 of 13 benchmark metrics for music transcription.
A retired NYPD officer and cancer survivor, John Aris, will participate in a moment of silence at the 25th anniversary ceremony to honor those who died from illnesses linked to their exposure at Ground Zero. The author, a thoracic surgeon, reflects on his own experiences treating patients with cancers and respiratory diseases related to their exposure.
We tested Neki's performance with 1 million queries per second, reaching 118 million QPS on 512 shards. The benchmark showed sustained throughput of over 100 million QPS without failing over or using replicas.
gPTY is a PTY foundation built on Godot and Rust, providing a tiling grid for panes and AI agent control. It offers a public API through JSON-RPC IPC socket, CLI, and MCP server for spawning panes, injecting text, and observing output.
The web has evolved significantly since its inception, with various browser-specific hacks and non-standard CSS features being used to target specific browsers. These hacks often led to inconsistent rendering and behavior across different browsers.
Can linguistic clues enhance our understanding of an area's past and inspire its future potential?
Toast is a developer environment that ships with managed LSPs, an integrated file tree, and themes out of the box. It offers features like auto-save, spell checking, and go-to-definition functionality.
Hit me again Current possible permutations: Copyright © 1999-2026 Alan Bellows All Rights Reserved - Y2K Certified
Base64 is not suitable for Unix and macOS due to reserved characters, but Base91 has a similar 5-character packing that fits most filesystems. Base84 is a variant of Base91 with an ASCII alphabet, offering better compatibility and security features.
East River Source Control is working on a next-generation version control system, building upon the existing Git protocol but with custom storage engine. The goal is to provide reliable and scalable source control management for large-scale organizations.
The author explores how the decline of shame in social media age contributes to societal collapse and atomization, citing tanking in the NBA as an example. The league's efforts to curb this practice reflect a shift from shame-based norms to optimization culture.
ResolveHQ is a shared inbox tool with features like full-text search, tags, and AI-drafted responses. It can be deployed on Cloudflare's Free plan for small deployments with limited usage limits.
Jay Nordlinger argues that Hong Kong's democracy movement, led by figures like Joshua Wong and Jimmy Lai, should not be forgotten. The Chinese government has cracked down on these activists, with Wong facing a potential life sentence for his activism.
ElevenMusic has released Music v2.5, a new music model with improved quality and features. Users can now download their tracks for free or keep them on any plan, retaining ownership rights from the moment they create a track.
Thieves are using AI to steal sensitive data, including API keys and session tokens, with resale value on the black market. Companies must secure their models and deploy victim-deployed agents to prevent exploitation.
A group of AI insiders, including Coxon and Evan Hubinger, are warning that the technology could kill everyone by the end of the decade. They claim to be expressing views widely shared by their colleagues, contradicting claims it's a smear campaign or hype.
The author argues that AI is not a net good for individuals, organizations, and society due to its potential harm and seductive nature. They advocate resisting AI's growth until its harms are mitigated or compensated for.
Save on FT Digital Edition, with access to trusted journalism and exclusive insights, for MX$1475/month or MX$879/3 months. Cancel anytime during the trial period.
DeepSeek-V4.1-Flash model has been updated with permanent weight-level abliteration, preserving MMLU capability and multi-turn coherence while removing safety guardrails. The model can generate 4,000-5,000+ characters of reasoning before starting content at effort=max.
Please make sure your browser supports JavaScript and cookies and that you are not blocking them from loading. For more information you can review our and .
Researchers discovered that Britain's Devil's Arrows were built from stones hauled 18 kilometers from Brimham Rocks around 4,000 years ago. The stones' distant source was likely chosen for cultural or spiritual reasons, challenging previous ideas about prehistoric monument construction.
The author discusses benchmarks for computer performance, AI model evaluations, and car tire performance. They analyze the napkin math repository and find issues with the code used to estimate memory latency and disk read throughput.
Gemini app for Windows is launched, offering instant assistance and workflow integration. The new desktop app provides seamless access to tools like Gemini Spark, Nano Banana, and Omni 1.
OpenAI's GPT-Live-1 API brings natural, full-duplex conversations to developers, allowing for more control over voice agents and improved interruption handling. The API offers features such as tone, pace, and style customization, telephony support, and seamless turn-taking latency.
The Great Cloudwall / Stop Cloudflare / #deCloudflare #Crimeflare http://crimeflare.eu.org
Herdr Studio is a browser-based tool that keeps terminals alive and provides a fast workspace for coding, with features like full terminal streaming and agent awareness. It bridges the gap between local socket API, terminal stream, files, Git operations, and session records.
The authors initially used mmap to read large Arrow IPC files from disk, but encountered issues with page cache thrashing and kernel-level lock contention under heavy concurrency. They later switched to io_uring, which bypasses the page cache entirely, but found that this approach also had its drawbacks.
The author created txt, a terminal-based editor that aims to provide a seamless editing experience without the need for configuration or plugins. It offers features like syntax highlighting, code folding, and Git integration while maintaining keyboard-friendly navigation.
Collabora partnered with YouTube to deliver the first RDK-based Chrobalt reference platform, a Chromium embedder for resource-constrained devices. This enables seamless 4K/UHD playback and low-latency input on third-party devices like Smart TVs and set-top boxes.
QueryBrew is a system-agnostic SQL-to-SQL optimization service that leverages Umbra's optimizer to exploit state-of-the-art optimization techniques, improving query execution by more than one order of magnitude. It supports various database systems and dialects through SQL-to-SQL rewriting.
A software factory is a system that automates the production of code, using autonomous coding agents to generate and verify changes. It consists of five stages: intake, isolated workspaces, verification, tool layer, and merge gate.
One planet. Endless wonder. Explore 4.54 billion years of Earth history, from its fiery formation to Pangaea and the world we call home.
The user is using Qwen 3.8 and Gemma4 models for local LLM development on an Apple MacBook Pro, leveraging Opencode and Docker sandboxes for stability and security. They prefer Ollama's ease of use, fast performance on Apple silicon, and stability over other tools like Opencode.
WalShadow is an open-source engine that replicates Postgres data to ClickHouse directly from physical WAL, achieving low latency and high throughput. It supports the complete replication lifecycle and eliminates the need for logical replication slots, reducing resource consumption on the source Postgres instance.
The author presents an implementation of a program synthesizer in Rust that uses Z3 to solve finite synthesis and verification queries, which are used to generate optimized programs from specifications. The synthesizer's performance is compared to existing synthesizers, such as Brahma and Souper, with mixed results, including some difficulties with larger synthesis problems due to limitations ...
A system was developed in the 1980s with a user base of up to 80, it became stable by late 1988 and was used daily until its gradual shutdown in 1993 or early 1994. The system served as a research vehicle for many years.
Details is a website inspiration platform that helps users find and study great website elements such as hero sections, footers, and micro-interactions to improve their own projects. By studying exceptional interfaces and using filters to narrow down options, users can gain inspiration and make informed design decisions for their own websites.
The author purchased a tiny e-ink reader, the Xteink X3, and discovered it had issues displaying greyscale images due to timing-related artifacts. After using AI tools Astra and Fable to investigate, they found that changing the display waveform resolved the issue but didn't fully explain its cause.
The author created an application to arrange 3D meshes in a scene to render a target silhouette from a specific camera angle, using gradient descent optimization. The loss function combines metrics such as Intersection over Union, spill, outline and collision penalties.
Folds since 1991. Effect shipped today. foldelight adds the folding-glass effect seen on the iPhone Duo to your MacBook lid. Open the lid
Gonc is a Golang-based netcat tool for peer-to-peer communication, offering features like automated NAT traversal and end-to-end encrypted transmission. It supports various configurations, including secure Socks5 over TLS and reverse shell connections.
A theoretical framework from East Asia's Middle Period (11th-14th centuries) approaches deterministic state machines, introducing concepts like structural treatises and bounded entities with explicit visibility. This framework provides a precise symbolic language for concurrent memory reclamation, specifically the separation between pointer visibility and heap resource destruction.
Claude Code provides a Python stdlib solution to track session context and costs, offering real-time feedback on usage. It displays the remaining context window size, next turn cost, and 5-hour/7-day limit usage percentages in a single command.
Clara Parkes learns the process of turning fleece into yarn in Vanishing Fleece: Adventures in American Wool. She discusses various steps including carding, mordanting, and carbonizing to prepare wool fibers for dyeing and spinning.
Suno introduces v6, a new generation of music models developed with industry partners, offering faster, more expressive and higher quality music creation tools. The update brings advanced features to everyone, from Grammy-winning artists to emerging creators.
Marvel Comics is releasing Amazing Spider-Man #1000 on September 30, featuring a story by Triple H and Ed McGuinness. The issue will also include contributions from other comic book icons like Brian Michael Bendis and Frank Miller, setting the stage for Spider-Man to face off with new villain Ravage.
Clawfight is a game that allows users to create and customize their own fighters, with features such as customizable portraits, kit art, and abilities. The game has various modes, including rap-battle and brawl, each with its own rules and scoring system, and users can opt-in for notifications when they start a match or join one.
Interactive step-by-step visualizer for large language models. Explore tokenization, embeddings, self-attention, training, and modern architectures like RoPE, GQA, and MoE.
The author reflects on the evolution of martial arts and programming skills, noting how modern AI is making some skills less critical. They draw a parallel between ancient Japanese swordsmanship and the current state of coding, where hand-assembled code is becoming obsolete.