Molly(Signal fork) has not been updated since 3 months and is vulnerable

https://media.piefed.world/users/HV/Wn/HVWnLCyko9zvGqy.svg
The latest Signal exploit has been fixed in version 8.27, but Molly remains vulnerable and is recommended to be deleted until it's updated adequately. Users can download the APK from a periodic update service like Obtainium or f-droid instead of relying on Molly for Android devices without Google Play Store access.

Prospero: A new coding harness for a more civilized age

We Took over ChatGPT Accounts

https://www.parameter.ai/labs/images/openai-public-share-modified-page.png
Researchers found a way to take over someone's ChatGPT account by sending a malicious link, which executed as chatgpt.com with access to the victim's authenticated web session. The payload could enumerate private conversations, retrieve content from them, and send data to an attacker-controlled server.

Switch Lowering in GCC

The compiler uses a combination of bitset and jump table lowering strategies for switch statements, depending on the number of case labels and their distribution. It employs dynamic programming to optimize these strategies, considering factors such as register width and case values threshold.

Simple circuits can create complex behaviors

https://aatishb.com/myriad/promo_behaviors.jpeg
Researchers have built a simple brain model to understand how complex behaviors emerge from neural circuits. This model, called a "spark," uses just four neurons and two connections to create rich and unexpected behaviors like reaching light sources.

Serbia just elected the world's brainiest parliament

A group of academics, including astrophysicists and organic chemists, have been elected to Serbia's parliament after a student-led opposition movement won in October. They aim to fight corruption and establish meritocracy in the country's government and education system.

Digital minimalism

The author reflects on the value of minimalism in both physical and digital life, citing personal experiments with reducing social media use and living without a cell connection. They found that these changes improved their mental health and allowed for more local knowledge apps to be developed.

Show HN: Marelleo, an open-source story box I built for my kids using ESP32

https://zebra.rodeo/assets/images/marelleo/breadboard.jpg
The author created a custom Toniebox-like device using an ESP32 development board, breadboard, and 3D printing to play audio tracks based on figurines. The project taught him about electronics and allowed him to create a unique object for his children that can be updated without needing technical expertise.

AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura

https://i0.wp.com/thedataexchange.media/wp-content/uploads/2026/10/Leo-de-Moura-art.001.jpeg?fit=1920%2C1080&ssl=1
Leo de Moura discusses how AI is making formal verification more accessible and potentially transforming software engineering, with a focus on Lean, a programming language and theorem prover. He explains that formal verification addresses the trust bottleneck between humans and AI-generated code, allowing developers to verify properties of their code before deployment.

Hunting 'Zombie Accounts' in Active Directory

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhk5ynofM8bdPNy3tCdBsL3W5cI5AELzMjHCwLUPPk2n8Beg2A9wunda2_FKXY3KgbOzwEvQKW0xuRtCifpO_ybtNOhi1HJJmVfeBPABKebb3o08Rs4B_ME55wY6J9bJR-PpxTsNr5zjUh3hD48UNOUZZNQgIjnDD63o7ghk21G5t4N_1kwy1DDxa10Ls/w400-h400/ZOMBIEACCOUNTCRISIS.jpg
Zombie accounts persist due to legacy data issues and windowed audit periods. Proactive scripts and audits are essential for identifying and removing stale accounts across systems.

The $6.3B Binance hack was pulled off in just 20 minutes

https://media.wired.com/photos/6ae463bdc091c8b8d1ec019e/master/w_2560%2Cc_limit/102026-Binance%2520Hacked.jpg
Hackers stole around $6.3 billion from Binance's wallets on multiple blockchains in the largest crypto heist ever, with half of the funds frozen by companies and exchanges. North Korean hackers are suspected to be behind the attack, with some firms linking it to elite group TraderTraitor known for high-profile attacks.

My favourite PowerMac is a Nintendo Wii

https://virtuallyfun.com/wp-content/uploads/2026/10/macos922_wii1_00-00-59.png
The author successfully ported classic Mac OS to PowerPC systems, specifically the Nintendo GameCube and Wii U consoles. They overcame various challenges, including hardware-specific patches and emulation issues, to get the system booting with a blinking floppy icon.

Cloudflare Turnstile solver library (no headless browser required)

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
The cfsolve Rust library solves Cloudflare Turnstile widgets and challenge pages without a headless browser, returning tokens or cookies. It uses pre-recorded responses to impersonate browsers and can be configured with profiles for different browsers.

Retired professor arrested for blocking delivery robot. Will do it again

https://media.cnn.com/api/v1/images/stellar/prod/ap26293555412453.jpg?c=original&q=w_860,c_fill
Carolyn Marvin, a 78-year-old retired professor, was arrested for blocking an Uber Eats delivery robot in Philadelphia to protest its impact on public space and workers. She views her actions as a symbolic protest against the problems posed by delivery robots.

Northflank Breached

https://northflank.instatus.com/api/og
Northflank Status

Breaking the open web won't stop the bad bots

https://cdn.sanity.io/images/3tzzh18d/production/46070e9d00c44c7690c79155723ff59e5c1280fe-1200x675.png
Major media outlets are advocating for the Stealth Bot Prohibition Act, which would require website accessors to identify themselves and their purposes. The bill threatens legitimate public-interest activities like investigative journalism and data collection that rely on automated tools.

Why Did Meta Suspend a US Senate Candidate's Instagram in the Middle of a Rally?

https://images.newrepublic.com/4b75652813f2a738fab55d4381a02becd932fb79.jpeg?auto=format&fit=crop&crop=faces&q=65&w=768&ar=3%3A2&ixlib=react-9.11.0
Meta suspended a Latino outreach Instagram account for Florida Democratic Senate candidate Angie Nixon, fueling election meddling allegations. Meta has also been accused of suppressing leftist Brazilian President Luiz Inácio Lula da Silva's campaign and boosting right-wing candidate Flávio Bolsonaro's campaign.

Tell HN: Scribd Breached

Sorry

Florilegium: Procedural Flowers in LaTeX

https://raw.githubusercontent.com/kevinraymond/florilegium/main/gallery/seeds.gif
The author created a LaTeX package called "florilegium" to generate floral ornaments in the style of 18th-century botanical illustrations. The package uses Lua to procedurally generate flowers, leaves, and stems based on parameters such as seed values and page layout.

The oldest ice disappears and the Stone Age emerges from it

https://image.sciencenorway.no/2714037.webp?imageId=2714037&width=960&height=548&format=jpg
Archaeologists in Norway have recovered 48 prehistoric arrows from melting ice, dating back 5,000-6,000 years. The finds highlight the impact of climate change on preserving ancient artifacts.

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/images/default-social-card.png
Phorion has discovered a backdoor in the Claude Code for VSCode extension bundle that drops a persistent SSH backdoor across macOS, Linux, and Windows. The malware sets up an outbound SSH connection to 134.209.82[.]225 on port 22 and sends a beacon back to the attacker's server with host reconnaissance information.

Cisco gives engineer unlimited AI tokens to rewrite legacy code

https://fortune.com/img-assets/wp-content/uploads/2026/10/GettyImages-2270629609-e1793295597735.jpg?format=webp&w=1440&quality=75
Cisco's president, Jeetu Patel, is hiring young workers to challenge the status quo and bring fresh ideas to his company. He believes that Gen Zers with little experience can teach veterans how to think differently and drive innovation.

Show HN: A working Nintendo in ~1GB of Qwen weights

https://raw.githubusercontent.com/dbreunig/nesformer/main/examples/demo.gif
Nesformer is a model that simulates the NES console's 6502 CPU and cartridge, predicting its execution log one token at a time. It uses Qwen3_5ForCausalLM weights compiled from CHIP-8 and RISC-V CPUs.

Keeping the Bonfires Lit

Establishing a secure connection... Request ID: facc8d60f7643e30482cd346227a2b33

Longitudinal Changes InWearable-Captured PhysiologyBefore Sudden Cardiac Death

https://www.binarysecurity.no/assets/images/posts/Onr_connector_architecture.png
The author has discovered multiple vulnerabilities in Azure's API Connections, a part of Azure Logic Apps, allowing attackers to compromise any connected backend service worldwide. These vulnerabilities netted the author $200,000 and were reported to Microsoft.

The federated code forge

https://assets.tangled.network/blog/forge/og.png
Tangled is a new, federated code forge that allows users to host their own code and collaborate with others while maintaining control over their infrastructure. It offers the longevity of an open protocol with the convenience of a proper forge, featuring self-hosting options and customizability.

Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing Game

This is a Star Trek: The Next Generation episode guessing game where users can guess episodes based on images, with feedback provided even if the season is incorrect. User data may be tracked and stored for analytics purposes.

Jules Verne's Lost Novel

https://blue-continuum.com/__l5e/assets-v1/4c93ed3c-ba50-4d5d-a01a-8490d86ffb63/verne-paris-hero.jpeg
Jules Verne imagined Paris in 1960, a century ahead, to see what civilization the 19th century might become with its faith in science and efficiency. His book "Paris in the Twentieth Century" was initially refused by his publisher due to its bleak tone and implausible prophecy.

Trapped in the Technologist Factory

The author reflects on their experience working with early-stage startups, particularly Runa and Factual, where they struggled to balance technical innovation with business needs. They learned that most startups fail due to stagnation rather than growth challenges.