DaVinci Resolve releases Photo Editor

https://images.blackmagicdesign.com/images/products/davinciresolve/photo/hero/hero-lg.jpg?_v=1775782457
DaVinci Resolve Photo page offers advanced color tools for still photography, including DaVinci color grading and Resolve FX. It supports RAW files from major camera brands and allows for GPU-accelerated processing.

A new spam policy for "back button hijacking"

https://developers.google.com/static/search/images/search-off-the-record-podcast-logo.png

Someone bought 30 WordPress plugins and planted a backdoor in all of them

https://anchor.host/wp-content/uploads/2026/04/wordpress-plugin-supply-chain-attack-1-1024x572.webp
A trusted WordPress plugin, Countdown Timer Ultimate, was compromised through a supply chain attack. The plugin's wpos-analytics module injected malicious code into wp-config.php, serving SEO spam to Googlebot.

GitHub Stacked PRs

https://github.github.com/gh-stack/_astro/stack-navigator.DbHWHwGH_Z14GiHR.webp
The gh stack CLI and GitHub UI allow for organized pull requests in an ordered stack, making it easier to review and merge large changes. This approach breaks down big changes into small, focused pull requests that build on each other, improving review quality and team efficiency.

Lean proved this program correct; then I found a bug

https://kirancodes.me/images/leo-quote.png
A verified implementation of zlib, lean-zip, was found to be vulnerable to a heap buffer overflow in the Lean runtime. Despite this, the application code had zero memory-related bugs in 105 million fuzzing executions, demonstrating the effectiveness of formal verification in producing robust software.

Sometimes powerful people just do dumb shit

https://www.joanwestenberg.com/content/images/size/w1000/2026/04/d41586-025-03487-6_51609904.jpg
People resist the boring read of a powerful person's decision because they want to believe that the person is smart and their decisions make sense. This is due to a psychological need to believe that people get what they deserve and a tendency to see patterns where there are none.

WiiFin – Jellyfin Client for Nintendo Wii

https://raw.githubusercontent.com/fabienmillet/WiiFin/main/assets/preview.png
WiiFin is a homebrew client for Jellyfin on the Nintendo Wii, providing a console-friendly media experience. It's experimental and still under development, with optional video playback using MPlayer CE.

TanStack Start Now Support React Server Components

https://tanstack.com/.netlify/images?url=%2Fblog-assets%2Freact-server-components%2Fheader.jpg&w=800&q=80
At TanStack, we have always strived to build tools that cover the 90% use case with ease, but still give you the flexibility to break out of the box for advanced use cases. Why? Because we know that when things get serious, you know what's best for your application and deserve the freedom to take control. That's always been the TanStack philosophy, and we're happy that you've ...

Anastasia (1997) live action reference material

I shipped a transaction bug, so I built a linter

https://leonh.fr/img/author.jpg
The user built a custom linter called transactioncheck to catch database transaction bugs that slipped through code reviews and caused silent data corruption. The linter uses the go/analysis framework to detect misused repositories and transaction parameters, preventing a whole class of bugs at compile time.

Design and implementation of DuckDB internals

https://duckdb.org/images/library/thumbs/placeholder-duckdb-2.svg
A DuckDB-based course, DiDi, covers database system internals for undergraduate students at University of Tübingen. The 15-week course requires basic SQL skills and focuses on DuckDB's relational database system.

UpDown: Efficient Manycore based on Many Threading & Scalable Memory Parallelism

Manycore architectures are a promising direction for single-chip performance. They typically use in-order cores and caches as build- ing blocks and can produce good performance on regular appli- cations. However, on irregular applications, they have low core utilization due to data-dependent control-flow and memory access. We propose UpDown manycore that employs a novel core with Event-Driven ...

Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets

The bot scans markets, tracks positions, and exposes a dashboard with live recovery state. It can be deployed on Heroku with config settings and scaled to run only the web dyno.

Rust Threads on the GPU

https://www.vectorware.com/_next/image/?url=%2F_next%2Fstatic%2Fmedia%2Fvectorware_logo.6d5f5210.png&w=640&q=75&dpl=dpl_DoEvtY9QXnnrPGpZrLbe2yTX6JaA
VectorWare successfully implemented Rust's std::thread on the GPU, enabling developers to write complex, high-performance applications that leverage the full power of GPU hardware using familiar Rust abstractions. The company achieved this by mapping each std::thread to a GPU warp, allowing Rust's borrow checker and lifetimes to work seamlessly on the GPU.

US appeals court declares 158-year-old home distilling ban unconstitutional

https://nypost.com/wp-content/uploads/sites/2/2026/04/125457358.jpg?w=1024
A US appeals court ruled a 158-year-old ban on home distilling unconstitutional, citing it as an improper tax measure. The court's decision allows individuals to distill spirits at home for personal use or as a hobby.

Hacker compromises A16Z-backed phone farm, calling them the 'antichrist'

https://storage.ghost.io/c/0f/76/0f76b548-bc58-4f25-abc3-3f5ebca07da4/content/images/2026/04/a16z-meme.png
A Doublespeed hacker attempted to post memes calling a16z the "antichrist" on social media, but was unsuccessful. Doublespeed, an a16z-funded startup, uses AI to create fake influencers and was previously hacked in December 2025.

Write less code, be more responsible

https://blog.orhun.dev/rat-assisted-programming.jpg
The author discusses the challenges of balancing AI-assisted programming with traditional coding, finding a balance between using AI for boring tasks and writing fun parts themselves. They emphasize the importance of responsibility and maintaining quality in AI-generated code.

How to make Firefox builds 17% faster

Buildcache's Lua plugin system allows caching of deterministic build steps like Firefox's WebIDL binding code generation. A new wrapper, webidl.lua, was created to cache this step, reducing build times from 5m35s to 1m12s on warm builds.

Make tmux pretty and usable (2024)

https://hamvocke.com/_astro/tmux-custom.JReQpud4_1TUvCB.webp
The user is customizing their tmux configuration to make it more comfortable to use. They are changing the prefix key from C-b to C-a and remapping the Caps Lock key to Ctrl.

Math Is Still Catching Up to the Mysterious Genius of Srinivasa Ramanujan

https://www.quantamagazine.org/wp-content/uploads/2024/10/Ramanujan-Missing-Boy_cr-The-Hindu.webp
Hussein Mourtada confirmed a deep underlying structure in singularities of curves, revealing a connection to Ramanujan's mathematical statements. Ramanujan's work, inspired by visions, has had a lasting impact on mathematics, appearing in various areas including algebraic geometry.

Building a CLI for all of Cloudflare

https://cf-assets.www.cloudflare.com/zkvhlag99gkb/6TTRJoUvbs5eWPtnu6NuL6/d31b8479cfca7f4a77517f875f0049eb/BLOG-3224_1.png
Cloudflare is rebuilding its CLI, Wrangler, to provide commands for all products and let agents configure them together using infrastructure-as-code. The new CLI, available in technical preview, will be generated using a new TypeScript schema that defines APIs, CLI commands, and context.

Air Powered Segment Display? [video]

Android now stops you sharing your location in photos

Google broke geolocation access in Android web browsers, forcing users to upload photos via desktop browsers or native apps. The user is seeking a solution to allow Android web browsers to access geolocation EXIF metadata in photos.

GAIA – Open-source framework for building AI agents that run on local hardware

https://mintcdn.com/amd-fe836e11/PgPhi3UrqFX2lV53/assets/favicon.ico?fit=max&auto=format&n=PgPhi3UrqFX2lV53&q=85&s=77bcf8b2d70613766cc02f16b0e208a0
GAIA is an open-source framework for building AI agents in Python and C++ that run entirely on local hardware. Agents reason, call tools, search documents, and take action — with no cloud dependency and no data leaving the device.

I just want simple S3

https://blog.feld.me/static/site_logo_512.png
You're looking for a reliable S3 alternative that's not slow and doesn't require scaling or replication. You've tried Minio, Garage, and SeaweedFS but had issues with performance and complexity.

Tool to explore regularly sampled time series

https://opengraph.githubassets.com/cf378a48a7ea55c2aa04a139d2f541a31fe4b70d1ac828349605055b96ccc363/rajivsam/tseda
tseda is a tool for analyzing time series data with features like kernel density estimate, box plot, and SSA. It helps identify seasonality, autoregressive components, and change points in the data.

What we learned building a Rust runtime for TypeScript

https://encore.dev/assets/blog/rust-runtime.png
Encore is a backend framework that uses a Rust runtime to handle infrastructure concerns, allowing developers to write business logic in TypeScript. The framework's Rust runtime handles tasks such as HTTP request lifecycle, database connection management, and tracing, resulting in a 9x performance gain over Express.js.

Tracking down a 25% Regression on LLVM RISC-V

https://avatars.githubusercontent.com/u/25258108?v=4
The user analyzed a benchmark on RISC-V targets and found a performance regression in LLVM due to a recent commit that improved isKnownExactCastIntToFP but inadvertently broke a downstream narrowing optimization. The user fixed the issue by extending getMinimumFPType with range analysis to recognize that fptrunc(uitofp x double) to float can be reduced to uitofp x to float, and the patch was ...

Show HN: Ithihāsas – a character explorer for Hindu epics, built in a few hours

https://www.ithihasas.in/opengraph-image?f20489d4ac7527e4
Explore the characters, dynasties and relationships of the Rāmāyaṇa and Mahābhārata through interactive force graphs, dynasty trees and chord diagrams.

N-Day-Bench – Can LLMs find real vulnerabilities in real codebases?

N-Day-Bench measures LLMs' real-world vulnerability discovery capabilities. It's an adaptive benchmark with updated test cases and model versions monthly.