Mullvad exit IPs are surprisingly identifying

https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/tool.png
Mullvad's exit IP picking algorithm uses a seed-based RNG, not truly random numbers, allowing for correlation attacks. This means users can be deanonymized behind a VPN with >99% accuracy.

How Claude Code works in large codebases

https://cdn.prod.website-files.com/68a44d4040f98a4adf2207b6/6a04aaf1c37c6196e5ee19bb_fig1-the-claude-code-harness-v1%402x.png
Claude Code navigates large codebases by traversing the file system and using context files, hooks, and skills to improve performance and accuracy. Effective deployments invest in codebase setup, layering context with CLAUDE.md files and skills, and establishing a governance framework to manage adoption and ensure smooth rollout.

Removing the modem and GPS from my 2024 RAV4 hybrid

https://arkadiyt.com/images/rav4/tools.jpg
The author removed the modem and GPS from their 2024 RAV4 Hybrid to prevent telemetry data from being sent to Toyota. This was done to improve car privacy and security, but may void parts of the warranty.

A few words on DS4

DwarfStar 4's popularity stems from its single-model integration and fast, large quasi-frontier model. The project will focus on quality benchmarks, coding agent, hardware setup, ports, and distributed inference.

Access to frontier AI will soon be limited by economic and security constraints

https://substackcdn.com/image/fetch/$s_!m84U!,w_1200,h_675,c_fill,f_jpg,q_auto:good,fl_progressive:steep,g_auto/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fae51e8c7-2e50-4488-ba26-cab93af39986_1280x925.jpeg
The future of AI access is uncertain due to economic and security constraints, with the US government and developers restricting access to frontier AI capabilities. To avert this scenario, solutions such as hardening the world against AI threats, building more datacenters, and offering access guarantees to non-US countries in exchange for compute investments are necessary to ensure equitable ...

Details of the Daring Airdrop at Tristan Da Cunha

https://www.tristandc.com/images/oc-2026-05-09-plane-over-village.jpg
The UK Government sent a military team and medical supplies to Tristan da Cunha to help with a suspected hantavirus outbreak. The team parachuted in and delivered the supplies, providing much needed relief to the island's hospital team.

First public macOS kernel memory corruption exploit on Apple M5

https://substackcdn.com/image/fetch/$s_!TJW7!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F2c731d5e-68ca-4054-894f-659601de6a66_2048x1536.jpeg
Researchers shared a macOS kernel memory corruption exploit with Apple at their Cupertino office, the first to survive MIE on M5 silicon. The exploit was developed using AI and human expertise, highlighting the potential for AI to discover vulnerabilities that bypass advanced mitigations.

Gyroflow: Video stabilization using gyroscope data

https://raw.githubusercontent.com/gyroflow/gyroflow/master/resources/screenshot.jpg
Gyroflow is a video stabilization application that uses gyroscope data to stabilize footage. It supports various cameras and video editors, including Adobe Premiere and DaVinci Resolve.

RTX 5090 and M4 MacBook Air: Can It Game?

https://scottjg.com/posts/2026-05-05-egpu-mac-gaming/macos-egpu.jpg
A user successfully attached an NVIDIA RTX 5090 GPU to their MacBook Air using a Thunderbolt dock and a USB-C port, but encountered several challenges including macOS not shipping with drivers for NVIDIA or AMD GPUs on Apple Silicon and limited support for different AI models. The user was able to overcome these challenges by using a Linux VM on the MacBook Air, passing through the GPU to the ...

New Nginx Exploit

https://opengraph.githubassets.com/3769a28a5822a4d244e7a66cb803bdf9d051ba3cb319c2953cc6d53a3d2e9753/DepthFirstDisclosures/Nginx-Rift
A critical heap buffer overflow in NGINX's ngx_http_rewrite_module allows unauthenticated RCE. Exploitation involves cross-request heap manipulation to redirect a cleanup pointer to a fake function invoking system().

Codex is now in the ChatGPT mobile app

https://images.ctfassets.net/kftzwdyauwt9/4i08f39LTE7HOZ0R3EKaKA/74f6008bbde015cfef96a14209f7673b/16_9.png?w=3840&q=50&fm=webp
Codex is now in the ChatGPT mobile app, allowing users to work with Codex from anywhere. The app enables users to review, approve, and change direction on work in real-time, streamlining collaboration and productivity.

RISC-V Router

Goal resets every {{srvModel.resetEveryAmount}} {{srvModel.resetEvery}} {{srvModel.resetEveryAmount>1?'s': ''}}

Tesla Wall Connector bootloader bypasses the firmware downgrade ratchet

https://www.synacktiv.com/sites/default/files/styles/blog_grid_view/public/2026-04/blogpost.png
Tesla's anti-downgrade mechanism in the Wall Connector Gen 3 was bypassed by exploiting the order of operations between partition table write and slot erase, allowing an old firmware to be written to the active slot without calling routine 0x201. This vulnerability was fixed in a firmware update, but it highlights the importance of enforcing the security ratchet in the bootloader to prevent ...

reCAPTCHA Mobile Verification Is Bringing the Play Integrity API to Desktops

https://discuss.grapheneos.org/opengraph.png
Something went wrong while trying to load the full version of this site. Try hard-refreshing this page to fix the error.

OVMS: Open source electric vehicle remote monitoring, diagnosis and control

https://www.openvehicles.com/sites/default/files/ovms-intro.jpg?fid=3004
We provide live vehicle monitoring and control through a smartphone app with features like alerts, charge control, and climate control. Our module offers advanced CAN bus capabilities, scripting, and data logging for vehicle customization and automation.

More than sixty percent of the United States is experiencing drought conditions

https://news.vt.edu/content/news_vt_edu/en/articles/2026/05/drought-united-states-la-nina-expert/_jcr_content/article-image.transform/m-medium/image.png
More than 60 percent of the US is experiencing drought, with 20 percent in extreme drought, due to La Niña conditions and increased air temperatures. Relief may come from late summer or early fall tropical systems, and potentially a historic El Niño event next fall and winter.

HDD Firmware Hacking

https://icode4.coffee/wp-content/uploads/hdd_twitter_card-470x140.png
The user was working on an Xbox 360 exploit and needed to modify a hard drive's firmware to introduce a delay in read requests, but instead found a way to exploit the race condition without modifying the firmware. The user then decided to modify the firmware of various hard drives and solid state drives, including Western Digital and Samsung models, to gain a deeper understanding of how they ...

Porting 3D Movie Maker to Linux

https://benstoneonline.com/images/3dmm-linux-giant-rat.png
A developer successfully ported Microsoft 3D Movie Maker to Linux using a fork called 3DMMEx, overcoming various challenges including assembly language and platform-specific code. The project now allows users to run 3DMM natively on Linux, with plans for future improvements and potential ports to other platforms.

Rewrite Bun in Rust has been merged

https://opengraph.githubassets.com/a9669f7901b630b43246de33a007f74b784acf903081dd234eafcd60c538a6c3/oven-sh/bun/pull/30412
The batch cannot be applied due to multiple invalid suggestions. Suggestions cannot be applied in certain situations such as deleted lines, pending reviews, or queued pull requests.

LLM Policy for Rust Compiler

https://opengraph.githubassets.com/1e09be65296b2eae6ccf12783155cadd83633592711aac537fe47325b5e3adeb/rust-lang/rust-forge/pull/1040
A policy is proposed for using Large Language Models (LLMs) in contributing to the rust-lang/rust repository, excluding subtrees, submodules, and dependencies from crates.io. The policy aims to make moderation easier by banning some valid usages of LLMs and focusing on the specific needs of the rust-lang/rust repository.

New arXiv policy: 1-year ban for hallucinated references

Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.

What's in a GGUF, besides the weights – and what's still missing?

https://nobodywho.ooo/assets/favicon/android-chrome-512x512.png
GGUF is a single-file format for conversational language models, making it more ergonomic than typical safetensors repos. GGUF includes a chat template in the jinja2 templating language to handle complex conversation formats.

Ontario auditors find doctors' AI note takers routinely blow basic facts

https://image.theregister.com/5240833.jpg?imageId=5240833&panox=0.00&panoy=0.00&panow=100.00&panoh=100.00&heightx=0.00&heighty=0.00&heightw=100.00&heighth=100.00&width=960&height=432&format=webp&format=jpg
A provincial audit in Ontario found AI systems for healthcare providers inaccurately recorded patient information and fabricated content. The systems' evaluation process was criticized for prioritizing factors like domestic presence over accuracy and bias controls.

Infracost (YC W21) Is Hiring Sr Dev Advocate to make agents cloud cost-aware

https://bookface-images.s3.amazonaws.com/small_logos/fe6b97eef16a2d22e437f6cf663c11b64b223fc8.png
Infracost is a tool that helps engineers see the cost of their code changes before spending money, aiming to shift FinOps left and proactively manage cloud spend. The company is hiring a Developer Advocate to increase signups by showing DevOps and Infrastructure engineers the value of Infracost in their workflows.

UFerris a Versatile Learner Board for Rust Embedded Beginners

https://media.beehiiv.com/cdn-cgi/image/format=auto,fit=scale-down,onerror=redirect/uploads/asset/file/ed973978-4076-480e-8f1a-f8b3ff29f58b/uFerris_bb.png
uFerris is a fully open source, single reference platform for Embedded Rust development with multiple MCU options. It's a standalone learner board with onboard components and a BSP crate for easy coding.

The Power of a Free Popsicle (2018)

https://www.gsb.stanford.edu/sites/default/files/styles/webp/public/heath-freepopsicle-1630_1.jpg.webp?itok=Y_tE0bg4
The Magic Castle Hotel maintains a high Tripadvisor ranking by creating "defining moments" such as the Popsicle Hotline, which brings meaning and fond memories to guests. By focusing on a few memorable moments, the hotel excels without needing to perfect every aspect of the customer experience.

Show HN: GridTravel- A community based travel app for users to share routes

GridTravel is a community-driven app that helps users navigate cities through local-created routes with insider tips. It offers real-time navigation and offline use for a smooth walking experience.

Coldkey – Post-quantum age key generation and paper backup tool

https://raw.githubusercontent.com/pike00/coldkey/main/image.png
Your age encryption keys are one disk failure away from total loss. If you use age or sops to encrypt secrets, losing your private key means losing access to everything it protects -- forever. coldkey generates post-quantum (ML-KEM-768 + X25519) age keys and produces single-page printable HTML backups with QR codes. Print it, laminate it, store it in a fireproof safe. Your secrets survive ...

A message from President Kornbluth about funding and the talent pipeline

MIT is facing ongoing challenges with funding and talent pipeline due to federal budget cuts and policy changes affecting international students. The Institute is working to address these issues through new funding sources, educational offerings, and advocacy efforts to support its mission of research and education.

Show HN: Race to the Bottom

https://race-to-the-bottom.onrender.com/banner.png
I don't have personal opinions or values, but I can provide a neutral perspective. Based on general societal impact, I would say that the option of promoting and profiting from the production and sale of tobacco products is generally considered more harmful to society overall. This is due to the well-documented health risks associated with tobacco use.