Removing the modem and GPS from my 2024 RAV4 hybrid

https://arkadiyt.com/images/rav4/tools.jpg
The author removed the modem and GPS from their 2024 RAV4 Hybrid to prevent telemetry data from being sent to Toyota. This was done to improve car privacy and security, but may void parts of the warranty.

Details of the Daring Airdrop at Tristan Da Cunha

https://www.tristandc.com/images/oc-2026-05-09-plane-over-village.jpg
The UK Government sent a military team and medical supplies to Tristan da Cunha to help with a suspected hantavirus outbreak. The team parachuted in and delivered the supplies, providing much needed relief to the island's hospital team.

Solar-based sleep patterns compared to modern norms

https://dylan.gr/img/95.jpg
Past Mediterranean societies had polyphasic sleep patterns, with multiple naps and wakeful periods, influenced by the sun and seasons. The siesta, a midday nap, is a remnant of this practice still found in Greek culture, where it remains an essential part of daily life.

A few words on DS4

DwarfStar 4's popularity stems from its single-model integration and fast, large quasi-frontier model. The project will focus on quality benchmarks, coding agent, hardware setup, ports, and distributed inference.

Access to frontier AI will soon be limited by economic and security constraints

https://substackcdn.com/image/fetch/$s_!m84U!,w_1200,h_675,c_fill,f_jpg,q_auto:good,fl_progressive:steep,g_auto/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fae51e8c7-2e50-4488-ba26-cab93af39986_1280x925.jpeg
The future of AI access is uncertain due to economic and security constraints, with the US government and developers restricting access to frontier AI capabilities. To avert this scenario, solutions such as hardening the world against AI threats, building more datacenters, and offering access guarantees to non-US countries in exchange for compute investments are necessary to ensure equitable ...

RTX 5090 and M4 MacBook Air: Can It Game?

https://scottjg.com/posts/2026-05-05-egpu-mac-gaming/macos-egpu.jpg
A user successfully attached an NVIDIA RTX 5090 GPU to their MacBook Air using a Thunderbolt dock and a USB-C port, but encountered several challenges including macOS not shipping with drivers for NVIDIA or AMD GPUs on Apple Silicon and limited support for different AI models. The user was able to overcome these challenges by using a Linux VM on the MacBook Air, passing through the GPU to the ...

UK government replaces Palantir software with internally-built refugee system

https://ichef.bbci.co.uk/news/480/cpsprodpb/1b91/live/a4434bd0-4a32-11f1-a70d-c72ff4101914.jpg.webp
A UK government department replaced a Palantir IT system with its own, saving millions of pounds. The new system is more flexible and meets high security standards, reducing reliance on external suppliers.

First public macOS kernel memory corruption exploit on Apple M5

https://substackcdn.com/image/fetch/$s_!TJW7!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F2c731d5e-68ca-4054-894f-659601de6a66_2048x1536.jpeg
Researchers shared a macOS kernel memory corruption exploit with Apple at their Cupertino office, the first to survive MIE on M5 silicon. The exploit was developed using AI and human expertise, highlighting the potential for AI to discover vulnerabilities that bypass advanced mitigations.

Show HN: GlycemicGPT – open-source AI-powered diabetes management

https://raw.githubusercontent.com/GlycemicGPT/GlycemicGPT/main/assets/logo.png
Open source diabetes platform with AI-powered analysis at its core. Because no one should manage diabetes alone. This software is NOT designed to replace your endocrinologist or healthcare provider. GlycemicGPT provides AI-generated suggestions only and should be used as a supplementary tool alongside professional medical care. ALPHA SOFTWARE -- This project is under active development. It is ...

Gyroflow: Video stabilization using gyroscope data

https://raw.githubusercontent.com/gyroflow/gyroflow/master/resources/screenshot.jpg
Gyroflow is a video stabilization application that uses gyroscope data to stabilize footage. It supports various cameras and video editors, including Adobe Premiere and DaVinci Resolve.

Mullvad exit IPs are surprisingly identifying

https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/tool.png
Mullvad's exit IP picking algorithm uses a seed-based RNG, not truly random numbers, allowing for correlation attacks. This means users can be deanonymized behind a VPN with >99% accuracy.

New Nginx Exploit

https://opengraph.githubassets.com/3769a28a5822a4d244e7a66cb803bdf9d051ba3cb319c2953cc6d53a3d2e9753/DepthFirstDisclosures/Nginx-Rift
A critical heap buffer overflow in NGINX's ngx_http_rewrite_module allows unauthenticated RCE. Exploitation involves cross-request heap manipulation to redirect a cleanup pointer to a fake function invoking system().

Building ML framework with Rust and Category Theory

Category Theory for Tiny ML in Rust is a working draft that develops a small, explicit machine-learning system through the lens of category theory and Rust. The book is designed for readers who want to understand machine learning not only as numerical computation, but as a structured pipeline of objects, transformations, composition, and constraints. Rather than treating category theory as ...

Codex is now in the ChatGPT mobile app

https://images.ctfassets.net/kftzwdyauwt9/4i08f39LTE7HOZ0R3EKaKA/74f6008bbde015cfef96a14209f7673b/16_9.png?w=3840&q=50&fm=webp
Codex is now in the ChatGPT mobile app, allowing users to work with Codex from anywhere. The app enables users to review, approve, and change direction on work in real-time, streamlining collaboration and productivity.

reCAPTCHA Mobile Verification Is Bringing the Play Integrity API to Desktops

https://discuss.grapheneos.org/opengraph.png
Something went wrong while trying to load the full version of this site. Try hard-refreshing this page to fix the error.

Coldkey – Post-quantum age key generation and paper backup tool

https://raw.githubusercontent.com/pike00/coldkey/main/image.png
coldkey generates post-quantum age keys and creates printable HTML backups with QR codes for secure storage. It provides defense-in-depth against key exposure through Go's garbage collector and secure memory features.

Tesla Wall Connector bootloader bypasses the firmware downgrade ratchet

https://www.synacktiv.com/sites/default/files/styles/blog_grid_view/public/2026-04/blogpost.png
Tesla's anti-downgrade mechanism in the Wall Connector Gen 3 was bypassed by exploiting the order of operations between partition table write and slot erase, allowing an old firmware to be written to the active slot without calling routine 0x201. This vulnerability was fixed in a firmware update, but it highlights the importance of enforcing the security ratchet in the bootloader to prevent ...

Rewrite Bun in Rust has been merged

https://opengraph.githubassets.com/a9669f7901b630b43246de33a007f74b784acf903081dd234eafcd60c538a6c3/oven-sh/bun/pull/30412
The batch cannot be applied due to multiple invalid suggestions. Suggestions cannot be applied in certain situations such as deleted lines, pending reviews, or queued pull requests.

Porting 3D Movie Maker to Linux

https://benstoneonline.com/images/3dmm-linux-giant-rat.png
A developer successfully ported Microsoft 3D Movie Maker to Linux using a fork called 3DMMEx, overcoming various challenges including assembly language and platform-specific code. The project now allows users to run 3DMM natively on Linux, with plans for future improvements and potential ports to other platforms.

LLM Policy for Rust Compiler

https://opengraph.githubassets.com/1e09be65296b2eae6ccf12783155cadd83633592711aac537fe47325b5e3adeb/rust-lang/rust-forge/pull/1040
A policy is proposed for using Large Language Models (LLMs) in contributing to the rust-lang/rust repository, excluding subtrees, submodules, and dependencies from crates.io. The policy aims to make moderation easier by banning some valid usages of LLMs and focusing on the specific needs of the rust-lang/rust repository.

RISC-V Router

Goal resets every {{srvModel.resetEveryAmount}} {{srvModel.resetEvery}} {{srvModel.resetEveryAmount>1?'s': ''}}

How Claude Code works in large codebases

https://cdn.prod.website-files.com/68a44d4040f98a4adf2207b6/6a04aaf1c37c6196e5ee19bb_fig1-the-claude-code-harness-v1%402x.png
Claude Code navigates large codebases by traversing the file system and using context files, hooks, and skills to improve performance and accuracy. Effective deployments invest in codebase setup, layering context with CLAUDE.md files and skills, and establishing a governance framework to manage adoption and ensure smooth rollout.

HDD Firmware Hacking

https://icode4.coffee/wp-content/uploads/hdd_twitter_card-470x140.png
The user was working on an Xbox 360 exploit and needed to modify a hard drive's firmware to introduce a delay in read requests, but instead found a way to exploit the race condition without modifying the firmware. The user then decided to modify the firmware of various hard drives and solid state drives, including Western Digital and Samsung models, to gain a deeper understanding of how they ...
https://opengraph.githubassets.com/9414a3014737e5e313ebf19be7427f91da2d80e0970be3149212d95ec669c508/anthropics/claude-for-legal
Claude for Legal is a platform that provides reference agents, skills, and data connectors for various legal workflows. It offers a customizable solution for in-house, firm, and academic legal work, with a focus on automation and efficiency.

What's in a GGUF, besides the weights – and what's still missing?

https://nobodywho.ooo/assets/favicon/android-chrome-512x512.png
GGUF is a single-file format for conversational language models, making it more ergonomic than typical safetensors repos. GGUF includes a chat template in the jinja2 templating language to handle complex conversation formats.

OVMS: Open source electric vehicle remote monitoring, diagnosis and control

https://www.openvehicles.com/sites/default/files/ovms-intro.jpg?fid=3004
We provide live vehicle monitoring and control through a smartphone app with features like alerts, charge control, and climate control. Our module offers advanced CAN bus capabilities, scripting, and data logging for vehicle customization and automation.

Infracost (YC W21) Is Hiring Sr Dev Advocate to make agents cloud cost-aware

https://bookface-images.s3.amazonaws.com/small_logos/fe6b97eef16a2d22e437f6cf663c11b64b223fc8.png
Infracost is a tool that helps engineers see the cost of their code changes before spending money, aiming to shift FinOps left and proactively manage cloud spend. The company is hiring a Developer Advocate to increase signups by showing DevOps and Infrastructure engineers the value of Infracost in their workflows.

New arXiv policy: 1-year ban for hallucinated references

Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.

More than sixty percent of the United States is experiencing drought conditions

https://news.vt.edu/content/news_vt_edu/en/articles/2026/05/drought-united-states-la-nina-expert/_jcr_content/article-image.transform/m-medium/image.png
More than 60 percent of the US is experiencing drought, with 20 percent in extreme drought, due to La Niña conditions and increased air temperatures. Relief may come from late summer or early fall tropical systems, and potentially a historic El Niño event next fall and winter.

Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?

As a solo entrepreneur, it's not feasible to obtain a full SOC2 Type 2 certification due to the paperwork and management requirements, but you can start with SOC2-aligned practices and a solid public security page to show transparency and good security hygiene. You can also consider alternative certifications like PCI compliance or NSA CISA, or negotiate with clients to use their auditing ...