Critical CVE issued for hallucinated SQLite vulnerability

https://research.jfrog.com/img/RealTimePostImage/post/sqlite-critical-cves-or-llm-slops/image1.png
A GitHub account published 50+ SQLite vulnerability advisories, but JFrog security researchers found that 54 were fabricated and one contained a real bug with unverified metadata. This incident highlights a systemic issue with automated vulnerability ingestion, where plausible-sounding fake advisories can cause organizations to waste time investigating and patching non-existent vulnerabilities.

MiniMax H3 Day-0 Support in ComfyUI: Open Weights, Native Audio, and 2K Video

https://substackcdn.com/image/fetch/$s_!59Bc!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F98d2552b-d84c-4385-9602-bf344dca2ebe_1000x727.png
MiniMax H3 is a next-generation open-weights video model that generates 2K video with real stereo sound up to 15 seconds. It combines text, images, video, and audio inputs with a prompt to create a single video clip, reducing five tasks into one model.

Don't be a meat proxy

You're frustrated with relying on AI output in conversations and code reviews, feeling it lacks value and understanding. The effort of reading, validating, and writing a response in your own words is what adds value.

Qwen3.8-Max: A New Bar for Coding and Cowork

Qwen Studio offers comprehensive functionality spanning chatbot, image and video understanding, image generation, document processing, web search integration, tool utilization, and artifacts.

AirLLM 70B inference with single 4GB GPU

https://raw.githubusercontent.com/lyogavin/airllm/main/assets/airllm_logo_sm.png
AirLLM is a library that reduces inference memory usage for large language models, allowing them to run on a single GPU card without quantization or pruning. It supports various models, including Llama, Qwen, DeepSeek, and more, and can be used with a simple one-line initialization.

SPF Record Syntax: Mechanisms, Qualifiers, Modifiers, and Macros

https://dmarcguard.io/images/blog/spf-record-syntax/spf-record-syntax_anatomy_diagram.svg
SPF record syntax follows a specific format with three parts: version tag, mechanisms, and modifiers, and one syntax error invalidates the whole record. SPF records must be published as a single TXT record with a maximum of 10 DNS-querying terms and 2 void lookups to avoid PermError.

The Abandoned Fish Sauce Terrorizing a Small Canadian Town

https://lede-admin.defector.com/wp-content/uploads/sites/28/2024/12/ugly-baby-salad.jpg?resize=2880%2C2880
A Canadian town, St. Mary's, has been plagued by a 20-year-old fish sauce stench from abandoned vats, but cleanup efforts have finally begun. The resulting fish sauce, if processed, might have a unique flavor profile due to prolonged fermentation, with notes of rancidity, amines, and possibly sweetness.

Bonsai: Janestreet's UI Library

https://raw.githubusercontent.com/janestreet/bonsai/master/docs/assets/bonsai-logo.png
Bonsai is a UI library for building performant, reactive web applications in OCaml, inspired by Elm. It allows for composable state machines and incremental rendering, making it easy to manage state and UI updates.

Prevent cognitive debt by manually retyping LLM-generated code

The user uses coding assistants to fast-forward through boring parts of projects, but manually types generated code to understand and adapt it, valuing comprehension over productivity. This workflow helps them build a mental model of their codebase and detect potential issues, allowing them to work faster and more efficiently.

Show HN: Nightcrawler – A local AI pentesting agent running on a smartphone

https://opengraph.githubassets.com/900887719e4b9d96b5df78ad5b7b8dc1db54fe183ed58836d431d1f2f9054ce3/garagehq/nightcrawler
Nightcrawler is a smartphone-based penetration testing agent that automates network discovery, vulnerability scanning, and reporting without cloud connectivity. It uses a 1.2 billion parameter AI model to decide its actions and can even crack WPA2 networks if dropped without WiFi.

The true power of regular expressions (2012)

Regular expressions can match more than just regular languages, they can also match context-free languages, which include well-formed HTML, and some context-sensitive languages, but it's unknown whether they can match all context-sensitive languages. Regular expressions with backreferences are NP-complete, meaning they can solve any other NP problem, but it's generally not recommended to use ...

Rust project goals: Immobile types and guaranteed destructors

https://opengraph.githubassets.com/33d3cf50b3908ad51294f7ade72bf32057f24a694ef2052ca1c523d336cff23a/rust-lang/rust-project-goals
Rust proposes introducing new traits like Move and Forget to make explicit what operations are possible on a type, allowing types to opt out of being moved or forgotten. This change aims to simplify immovable types and enable safe scoped spawn for async, while eventually deprecating the Pin trait.

What DMARC Protects You From, and What It Does Not

DMARC is a protocol that checks if an email's visible From address matches the domain that authorized the message. It evaluates SPF and DKIM results to determine if the message is genuine.

ICE Collected Nearly 1M People's DNA Last Year–Including Young Children

https://media.wired.com/photos/6a6ced459baed1318e005118/16:10/w_2560%2Cc_limit/073126-SECURITY-ice-data-collection.jpg
US immigration authorities are collecting DNA from people in custody, including families and children, and sending it to a national database for crime-solving, despite a lack of clear explanation and consent. This expansion of DNA collection has sparked lawsuits and congressional scrutiny, with critics arguing it violates the Fourth Amendment and the rights of those detained.

Walk on Decomposed Subdomains

https://clementjambon.github.io/wods/assets/city.jpg
Walk on spheres algorithm simulates brownian motion on star-shaped domains. trick is to walk from inside a subdomain to one of its interfaces, not from one interface to another. number of solution operators that must be estimated grows with the geometric complexity and not domain size. to be competitive with classical numerical methods, do monte carlo pde solvers also need hybrid approaches? ...

Finding zombies in our systems: A real-world story of CPU bottlenecks

Games at the press of a button: The Rip-O-Bot (1989)

https://cdn.gingerbeardman.com/images/posts/mtj-gamest-31-prediction.jpg
2026-08-02 5 mins read false Fukio Mitsuji (三辻富貴朗)—known by his nickname “MTJ”, squeezed from the consonants of his surname, Mi-Tsu-Ji—was the game designer behind Bubble Bobble, Rainbow Islands, Syvalion, Volfied, and Magical Puzzle Popils. Surely one of the greatest to walk these hallowed halls. In the late 1980s he also wrote a column for the Japanese arcade magazine GAMEST called ...

Octane – React's programming model, compiled

https://octanejs.dev/og-image.png
Octane is a performance-first framework that compiles ahead of time, eliminating virtual DOM and dependency arrays. It allows for seamless migration from React, keeping components as plain functions with hooks and context.

Train Simulator Controller

https://z80.me/blog/tsc-2026-july/img/metalpanels_20260531a.jpg
The user has been building a physical train simulator in their apartment, modeled on the UK Class 80x passenger train, and has made significant progress on various aspects of the project, including a headlight control panel and sheet metal panels. They have also interfaced with Train Simulator and are working on integrating more realistic AWS sunflowers and warning horns into their setup.

Show HN: Isopolis – Isometric pixel map of SF

https://sf.isopolis.city/og.jpg
San Francisco as one giant isometric pixel painting — the city's real 3D geometry redrawn tile by tile by a fine-tuned image model.

Ask HN: What are the viable alternatives to DuckDuckGo?

You've experienced search bubble wrapping with Google and now with DuckDuckGo, where quotes are ignored. You prefer multiple sources for verification and don't want AI chatbots.

The Future, Made in China

https://media.newyorker.com/photos/6a6bb7e75030e894599500f1/master/w_2560%2Cc_limit/r49914.png
Kai-Fu Lee, the C.E.O. of the artificial-intelligence company 01.AI, lives in a mirrored high-rise in Beijing, near a procession of landmarks that emperors considered the center of the cosmos. Lee takes early meetings at a nearby hotel that could be in any country, except that the room service is delivered by robots painted in the livery of butlers and maids. State propaganda hails these ...

Show HN: We Fixed UniFi's Slow PPPoE Performance with PPPoE Half-Bridge

https://arcbox.dev/_next/static/media/unifi-pppoe-half-bridge-acceleration.05.xn172zxo7d.png
ArcBox Labs' office had a 5 Gbps PPPoE connection behind a UniFi gateway but couldn't reach that speed due to the lack of PPPoE hardware acceleration in most UniFi gateways. To solve this issue, they implemented a PPPoE half-bridge acceleration using OpenWrt, which offloads PPPoE dialing to a dedicated device and hands the public IPv4 to the UniFi gateway via DHCP.

Characterizing Warp Divergence from Pascal to Blackwell

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
Researchers tested NVIDIA GPU behavior with divergent paths, finding linear serialization cost and no super-linear reconvergence penalty across Ampere, Hopper, and Blackwell GPUs. The cost model predates Independent Thread Scheduling and remains stable despite changes in compiler-emitted reconvergence machinery and ISA evolution.

PISIGuard: Protect your personal and sensitive info when you chat with AI

https://raw.githubusercontent.com/mohamed--abdel-maksoud/pisiguard/main/src/icons/PISIGuard-icon-full.png
PISIGuard is a browser extension that hides personal and sensitive data from AI servers by replacing it with placeholders. It detects common sensitive information, masks it, and restores the original values in AI responses without sending data to external services.

9front "This Was Supposed to Be Fun" Released

http://9front.org/img/thiswassupposedtobefun.front.png
Multiple installation media are provided for various devices including PC, Raspberry Pi, and MNT Reform. Updates include bug fixes and new features for kernel, audio, and file systems.

Why we write our own C and C++ inference engines

https://localai.io/img/logo-mark.png
LocalAI's C++ ports of certain models offer significant footprint savings and comparable performance to their Python counterparts. These ports, such as vllm.cpp and depth-anything.cpp, achieve parity with the original models in terms of output and throughput.

Show HN: ssh ssh.place

https://ssh.place/canvas.png
The canvas is wider than your terminal, so scroll to pan around. shift+←/→ jumps a whole screen. This canvas is color only. The server turns down anything with a character in it, so you cannot write text here. Draw something instead. Your cooldown is tied to your SSH key, so reconnecting will not reset it. This page only reads the canvas. It changes over SSH and nowhere else.

Situational Awareness and the Impending Stock Market Volatility

https://www.emergingtrajectories.com/lh/situational-awareness-bigger-picture/images/volatility_over_time.jpg
Situational Awareness's asset price fluctuations are a result of market forces driving AI-related stocks up and down due to over-leveraging and over-concentration. This volatility is expected to continue as AI assets appreciate in value, driven by reflexivity, leverage, and fear of wealth loss.

CP/M-386 – CP/M for 386 protected mode, derived from CP/M‑68K

https://opengraph.githubassets.com/55c540041c3fca93caeaf359561eabdcdbaba6651881747dcf1ab59a805cd858/johnsonjh/cpm386
CP/M-386 BDOS is compatible with CP/M-68K 1.3 and CP/M 2.2, with added extensions for direct video access and high-resolution timing. It can be built on NetBSD, FreeBSD, and most recent Linux distributions, including CentOS, Fedora, and Ubuntu.