GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos

Noma Labs discovered a critical vulnerability, GitLost, in GitHub's Agentic Workflows allowing unauthenticated attackers to pull private data. The vulnerability occurs due to prompt injection, where the AI agent misinterprets user input as instructions.

How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024)

https://neil.computer/content/images/2024/08/CleanShot-2024-08-23-at-23.09.01@2x-1.png
User is setting up a basic NAS using ZFS and Samba without a GUI, preferring simplicity over TrueNAS features. They're creating a RAIDZ1 zpool with ashift=12 for improved performance.

Decoding the obfuscated bash script on a Uniqlo t-shirt

https://tris.sherliker.net/assets/2026-07-04-tshirt-front.jpg
The user's wife bought him a Uniqlo t-shirt with an obfuscated bash script that prints a happy Easter egg message when decoded. The user successfully decoded the script using OCR and confirmed it was a base64 encoded string referencing Linux and Akamai's Peace for All campaign.

Tenda firmware (multiple versions) contains hidden authentication backdoor

Tenda firmware versions contain an undocumented authentication backdoor granting admin access. An attacker can exploit CVE-2026-11405 to bypass password verification and gain full control.

Copy That Floppy – Cambridge guide for preserving data from fragile floppy disks

https://www.digipres.org/the-floppy-guide//build/Floppy_Disk_Guide_51-79ea83c9dfced75a9a9a03fdeff76a35.jpg
This guide to imaging floppy disks covers 8-inch, 5.25-inch, 3.5-inch, and 3-inch floppy disks, focusing on preservation and not file extraction, and assumes basic knowledge of digital preservation and tools like write blockers. The guide outlines steps to identify and acquire hardware, clean and maintain carriers and hardware, and image floppy disks, with a focus on creating a flux stream ...

Structure and Interpretation of Computer Programs Video Lectures (1986)

https://ocw.mit.edu/courses/6-001-structure-and-interpretation-of-computer-programs-spring-2005/ad40b7bc2fd8fcd95f535c77aeeafde3_6-001s05.jpg
Twenty video lectures by Hal Abelson and Gerald Jay Sussman present a 1986 course on computer programming. The lectures follow the first edition of Structure and Interpretation of Computer Programs and remain useful for students using the second edition.

GAO: DOE Is Prematurely Excluding Less Expensive Options for Nuclear Cleanup

You don't have permission to access "http://www.gao.gov/products/gao-26-108193" on this server.

Chat Control 1.0 and 2.0 Explained

https://fightchatcontrol.eu/data/logo.webp
Two EU "Chat Control" laws are moving through institutions in parallel, one expired and the other being revived. The laws aim to regulate digital platforms' detection and reporting of child sexual abuse material, with disagreement over scanning of private communications.

Canada's only watchmaking school still ticking after 80 years

https://i.cbc.ca/ais/cff4c3dd-f78e-40b1-bde8-d8bc7170a282,1783092697249/full/max/0/default.jpg?im=Crop%2Crect%3D%280%2C0%2C5472%2C3078%29%3B
The École national d'horlogerie in Trois-Rivières, Canada, teaches watchmaking to 20 full-time students with a focus on jewelry making and specialized skills. The school may have to move due to a primary school's need for more space, posing a challenge in transporting its millions of tiny pieces.

Local, CPU-Friendly, High-Quality TTS (Text-to-Speech) with Kokoro

https://ariya.io/images/2026/03/kokoro.png
Kokoro is a local speech generation model that produces realistic speech in multiple languages without compromising privacy. It can synthesize speech on a local machine using a CPU, with a container image available for easy setup and use.

The difference between "today's task" and "accretive work"

https://i0.wp.com/craphound.com/images/02Jul2026.jpg?w=840&ssl=1
The author discusses the difference between "today's task" and "accretive work" and how AI can produce both, but with varying effects. The key distinction lies in whether the work is socially constructed to be reusable and maintainable.

LineageOS Statistics

30papers.com – Ilya's 30 essential ML papers, in a beginner friendly format

The user provided a list of various research papers, blog posts, and articles related to deep learning, neural networks, and artificial intelligence, covering topics such as variational autoencoders, convolutional networks, recurrent neural networks, and transformer models. These resources aim to explain complex concepts in deep learning and provide practical examples and implementations for ...

Home made GPU escalated quickly [video]

Show HN: Davit, a Apple Containers UI

https://davit.app/img/icon-256.png
Davit is a container management app for macOS that directly interacts with Apple's container daemon. It offers features like live monitoring, interactive shells, and customizable settings.

Herdr: One terminal to rule them all

https://i.ytimg.com/vi/qnIu-Xu64H0/maxresdefault.jpg
Recomputing on every PTY chunk causes mid-frame repaints. Handoff suite passes, including server replacement and long-lived workloads.

Ants: Who looks after the injured in a colony?

https://www.uni-wuerzburg.de/fileadmin/_processed_/e/e/csm_0702Ameisen-Pflegerinnen-www_1cffd7e7ae.jpg
Carpenter ants amputate injured legs to prevent infection, with a new study showing that ants transitioning from indoor to outdoor duties perform this task. The ants' social connections and spatial overlap determine who cares for the injured.

Show HN: Rowboat – Open-source, local-first alternative to Claude Desktop

https://private-user-images.githubusercontent.com/6592213/618149140-440087ae-5674-427a-87bb-831b0bea7de4.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.KwEBD7esvpQgJVCbdQ43WUvDJ-xTxlr5KaeG68RYQNU
Rowboat is a desktop AI coworker with a built-in knowledge graph that indexes work and allows collaboration with AI. It includes email client, notes, browser, code mode, and workspaces for different projects.

l: A new runtime for k and q

https://lv1.sh/og-image.png
l is a new engine built for modern memory, using compressed vectors, SIMD, and parallelism to run k4, q, and qSQL unchanged. It moves fewer bytes, making it fast, and automatically picks the execution path with no annotations.

IEEE Rolls Out Large Language Models Training Course

https://spectrum.ieee.org/media-library/a-middle-aged-black-man-taking-a-virtual-coding-class-in-his-home-office.jpg?id=66951841&width=1200&height=750
Large language models are changing engineering practice with their ability to orchestrate complex tasks, but require technical expertise to implement and secure effectively. To use LLMs effectively, developers must understand their internal logic and core principles to ensure reliability and avoid risks like hallucinations.

Scheme Is a Hoot

You're learning Scheme and using Hoot to compile it to the Web, overcoming challenges with its instability and documentation. You've successfully set up your code to run on native Guile and WASM via Hoot, with tests running in both environments.

The space bit of SpaceX is worth $8 a share, says Morgan Stanley

The following information can help our support team to resolve this issue.

Show HN: Chiptune Radio

https://chiptune-radio.alephvoid.com/assets/logo.png
Chiptune Radio is a Twitch stream featuring music from classic sound hardware. It's a continuous broadcast of nostalgic tunes by Aleph Void, LLC.

Every new car sold in the European Union must include a driver monitoring camera

Please enable JS and disable any ad blocker

Jim's TrueType QR Code Font

https://opengraph.githubassets.com/933b18650cefc9e4f86d9af603a0edc04cb4c33e373d36be52e931db0368cb54/jimparis/qr-font
This repo generates experimental OpenType fonts that turn bracketed text into QR codes while preserving readability. The fonts are generated from Liberation Sans Regular and licensed under the SIL Open Font License.

Why we built yet another Postgres connection pooler

https://pgdog.dev/assets/images/listen-arch.svg
PgDog is a Postgres proxy that scales connections without requiring trade-offs like connection poolers do. It preserves features like SET commands and LISTEN/NOTIFY, making it a more reliable option for scaling Postgres.

Show HN: Neil the Seal Game

W/S drive · A/D turn · Space slam · Esc pause · C recenter camera · M mute

StreetComplete: Fixing OpenStreetMap, one tiny quest at a time

https://streetcomplete.app/res/google-play-badge.png
Help improve OpenStreetMap with StreetComplete! This app finds missing map data in your vicinity and displays it on a map as quests. Solve each quest by visiting the location on-site and answering a simple question to update the map. The info you enter is directly added to OpenStreetMap in your name, without the need to use another editor.

Notes on Software Quality

Quality is a result of ability and appetite, where organisations have people who can produce high quality and allow quality to be achieved.

We're extending access to Fable 5 on all paid plans through July 12

https://pbs.twimg.com/profile_images/1950950107937185792/QOfEjFoJ_200x200.jpg
We're extending access to Claude Fable 5 on all paid plans through July 12.