Critical CVE issued for hallucinated SQLite vulnerability

https://research.jfrog.com/img/RealTimePostImage/post/sqlite-critical-cves-or-llm-slops/image1.png
A GitHub account published 50+ SQLite vulnerability advisories, but JFrog security researchers found that 54 were fabricated and one contained a real bug with unverified metadata. This incident highlights a systemic issue with automated vulnerability ingestion, where plausible-sounding fake advisories can cause organizations to waste time investigating and patching non-existent vulnerabilities.

Devtools must be open source

https://blog.exe.dev/static/og-card.png
Software engineers used to rarely write personal software, but now agents can easily manage customizing software, making it easier to personalize and maintain. Agents can build and manage custom software with minimal programming, allowing for more efficient and flexible use of software.

MiniMax H3 Day-0 Support in ComfyUI: Open Weights, Native Audio, and 2K Video

https://substackcdn.com/image/fetch/$s_!59Bc!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F98d2552b-d84c-4385-9602-bf344dca2ebe_1000x727.png
MiniMax H3 is a next-generation open-weights video model that generates 2K video with real stereo sound up to 15 seconds. It combines text, images, video, and audio inputs with a prompt to create a single video clip, reducing five tasks into one model.

Don't be a meat proxy

You're frustrated with relying on AI output in conversations and code reviews, feeling it lacks value and understanding. The effort of reading, validating, and writing a response in your own words is what adds value.

Hollywood Stopped Making Movies in Hollywood

https://substackcdn.com/image/fetch/$s_!PU5R!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F4ed3afc1-5576-4677-aa1a-bf941416e9d7_1548x1024.webp
The entertainment industry in Los Angeles has been experiencing a production migration due to rising costs and tax incentives offered by other cities, leading to a decline in physical production in Hollywood. This migration has resulted in a widening gap between where stories are set and where they are filmed, with many productions choosing locations based on financial considerations rather ...

Qwen3.8-Max: A New Bar for Coding and Cowork

Qwen Studio offers comprehensive functionality spanning chatbot, image and video understanding, image generation, document processing, web search integration, tool utilization, and artifacts.

AirLLM 70B inference with single 4GB GPU

https://raw.githubusercontent.com/lyogavin/airllm/main/assets/airllm_logo_sm.png
AirLLM is a library that reduces inference memory usage for large language models, allowing them to run on a single GPU card without quantization or pruning. It supports various models, including Llama, Qwen, DeepSeek, and more, and can be used with a simple one-line initialization.

Andy Pavlo Joins ClickHouse to Establish ClickHouse Labs

https://clickhouse.com/_next/image?url=%2Fuploads%2Fandy_pavlo_clickhouse_b978ca187a.png&w=750&q=75
I'm joining ClickHouse to lead ClickHouse Labs, a research team focused on advancing database technology. Our goal is to conduct impactful research and transform ideas into technology that benefits users, building on ClickHouse's strong foundation and exploring emerging AI and agentic technologies.

Bonsai: Janestreet's UI Library

https://raw.githubusercontent.com/janestreet/bonsai/master/docs/assets/bonsai-logo.png
Bonsai is a UI library for building performant, reactive web applications in OCaml, inspired by Elm. It allows for composable state machines and incremental rendering, making it easy to manage state and UI updates.

SPF Record Syntax: Mechanisms, Qualifiers, Modifiers, and Macros

https://dmarcguard.io/images/blog/spf-record-syntax/spf-record-syntax_anatomy_diagram.svg
SPF record syntax follows a specific format with three parts: version tag, mechanisms, and modifiers, and one syntax error invalidates the whole record. SPF records must be published as a single TXT record with a maximum of 10 DNS-querying terms and 2 void lookups to avoid PermError.

The Abandoned Fish Sauce Terrorizing a Small Canadian Town

https://lede-admin.defector.com/wp-content/uploads/sites/28/2024/12/ugly-baby-salad.jpg?resize=2880%2C2880
A Canadian town, St. Mary's, has been plagued by a 20-year-old fish sauce stench from abandoned vats, but cleanup efforts have finally begun. The resulting fish sauce, if processed, might have a unique flavor profile due to prolonged fermentation, with notes of rancidity, amines, and possibly sweetness.

Prevent cognitive debt by manually retyping LLM-generated code

The user uses coding assistants to fast-forward through boring parts of projects, but manually types generated code to understand and adapt it, valuing comprehension over productivity. This workflow helps them build a mental model of their codebase and detect potential issues, allowing them to work faster and more efficiently.

Games at the press of a button: The Rip-O-Bot (1989)

https://cdn.gingerbeardman.com/images/posts/mtj-gamest-31-prediction.jpg
Fukio Mitsuji, a game designer, warned against imitation games in a 1989 column, predicting a future where machines could create passable derivatives. He emphasized the importance of originality, saying "the idea is the one and only, final weapon left to you."

Flock's CEO Faced Me After Its Cameras Led to My Wrongful Stop

https://www.thedrive.com/wp-content/uploads/2026/07/DRIVECASTEP26HERO.jpg?quality=85&w=1920
Flock Safety Founder and CEO Garrett Langley discussed the company's role in a recent incident where a journalist was mistakenly flagged by police due to a human error in the National Crime Information Center database, and how Flock is working to improve the system to prevent such errors. Garrett outlined his vision for the future of Flock, which includes expanding to all 17,000 cities in ...

Rust project goals: Immobile types and guaranteed destructors

https://opengraph.githubassets.com/33d3cf50b3908ad51294f7ade72bf32057f24a694ef2052ca1c523d336cff23a/rust-lang/rust-project-goals
Rust proposes introducing new traits like Move and Forget to make explicit what operations are possible on a type, allowing types to opt out of being moved or forgotten. This change aims to simplify immovable types and enable safe scoped spawn for async, while eventually deprecating the Pin trait.

Show HN: Nightcrawler – A local AI pentesting agent running on a smartphone

https://opengraph.githubassets.com/900887719e4b9d96b5df78ad5b7b8dc1db54fe183ed58836d431d1f2f9054ce3/garagehq/nightcrawler
Nightcrawler is a smartphone-based penetration testing agent that automates network discovery, vulnerability scanning, and reporting without cloud connectivity. It uses a 1.2 billion parameter AI model to decide its actions and can even crack WPA2 networks if dropped without WiFi.

Walk on Decomposed Subdomains

https://clementjambon.github.io/wods/assets/city.jpg
The user discusses a novel approach to solving elliptic partial differential equations (PDEs) using grid-free Monte Carlo methods, specifically the Walk on Spheres (WoS) algorithm, and proposes a way to connect it with deterministic grid-based solvers to leverage their nice properties. The approach involves decomposing the domain into smaller subdomains, precomputing solution operators, and ...

Octane – React's programming model, compiled

https://octanejs.dev/og-image.png
Octane is a performance-first framework that compiles ahead of time, eliminating virtual DOM and dependency arrays. It allows for seamless migration from React, keeping components as plain functions with hooks and context.

What DMARC Protects You From, and What It Does Not

DMARC is a protocol that checks if an email's visible From address matches the domain that authorized the message. It evaluates SPF and DKIM results to determine if the message is genuine.

Train Simulator Controller

https://z80.me/blog/tsc-2026-july/img/metalpanels_20260531a.jpg
The user has been building a physical train simulator in their apartment, modeled on the UK Class 80x passenger train, and has made significant progress on various aspects of the project, including a headlight control panel and sheet metal panels. They have also interfaced with Train Simulator and are working on integrating more realistic AWS sunflowers and warning horns into their setup.

The Future, Made in China

https://media.newyorker.com/photos/6a6bb7e75030e894599500f1/master/w_2560%2Cc_limit/r49914.png
Kai-Fu Lee, CEO of 01.AI, predicts a "new world order" with China's technological advancements tilting the global economy and geopolitics in its favor. China's leaders believe technology can help the state overcome human disorder and strengthen autocracies.

Show HN: Isopolis – Isometric pixel map of SF

https://sf.isopolis.city/og.jpg
San Francisco as one giant isometric pixel painting — the city's real 3D geometry redrawn tile by tile by a fine-tuned image model.

The true power of regular expressions (2012)

Regular expressions can match more than just regular languages, they can also match context-free languages, which include well-formed HTML, and some context-sensitive languages, but it's unknown whether they can match all context-sensitive languages. Regular expressions with backreferences are NP-complete, meaning they can solve any other NP problem, but it's generally not recommended to use ...

Utah produced more power from solar than any other source in May, a new first

https://www.sltrib.com/resizer/v2/CA3N5ZPHGFHP5JVNGP7SHFVA6Q.JPG?auth=c1884c111e05fef3567c28b2e44098a0ebab0a9c6fb29c3972509c7016f1bcaa&width=1024&quality=88
Utah produced more power from solar than any other source in May, marking a new first Wind and solar generation are surging in Utah’s power mix, and experts expect the trend to continue despite cuts to federal clean energy incentives.

Why does Mail app contact iCloud when sending a non-iCloud email?

https://lapcatsoftware.com/articles/2026/8/2-images/1.png
The Mail app on a non-iCloud account device connects to iCloud for unknown reasons, querying and saving data in CloudKit despite iCloud being disabled in System Settings. This connection is blocked by Little Snitch rules to prevent unnecessary iCloud access.

Show HN: We Fixed UniFi's Slow PPPoE Performance with PPPoE Half-Bridge

https://arcbox.dev/_next/static/media/unifi-pppoe-half-bridge-acceleration.05.xn172zxo7d.png
ArcBox Labs' office had a 5 Gbps PPPoE connection behind a UniFi gateway but couldn't reach that speed due to the lack of PPPoE hardware acceleration in most UniFi gateways. To solve this issue, they implemented a PPPoE half-bridge acceleration using OpenWrt, which offloads PPPoE dialing to a dedicated device and hands the public IPv4 to the UniFi gateway via DHCP.

Finding zombies in our systems: A real-world story of CPU bottlenecks

Characterizing Warp Divergence from Pascal to Blackwell

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
Researchers tested NVIDIA GPU behavior with divergent paths, finding linear serialization cost and no super-linear reconvergence penalty across Ampere, Hopper, and Blackwell GPUs. The cost model predates Independent Thread Scheduling and remains stable despite changes in compiler-emitted reconvergence machinery and ISA evolution.

Why we write our own C and C++ inference engines

https://localai.io/img/logo-mark.png
LocalAI's C++ ports of certain models offer significant footprint savings and comparable performance to their Python counterparts. These ports, such as vllm.cpp and depth-anything.cpp, achieve parity with the original models in terms of output and throughput.

Show HN: ssh ssh.place

https://ssh.place/canvas.png
The canvas is wider than your terminal, so scroll to pan around. shift+←/→ jumps a whole screen. This canvas is color only. The server turns down anything with a character in it, so you cannot write text here. Draw something instead. Your cooldown is tied to your SSH key, so reconnecting will not reset it. This page only reads the canvas. It changes over SSH and nowhere else.