SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

145 birdculture 2025-11-24 16:24:31 UTC aikido.dev Llama Share 34

A malware attack, named Shai-Hulud, has hit hundreds of npm packages, compromising 492 packages with 132 million monthly downloads. The attack spreads through compromised developer environments, stealing sensitive information and uploading it to a public GitHub repository.

France threatens GrapheneOS with arrests / server seizure for refusing backdoors

138 nabakin 2025-11-24 16:42:31 UTC grapheneos.social Full Share 37

You are leaving grapheneos.social. If you trust this link, click it to continue.

NSA and IETF, part 3: Dodging the issues at hand

221 upofadown 2025-11-24 12:24:31 UTC blog.cr.yp.to Llama Share 88

The IETF's TLS working group is standardizing a non-hybrid post-quantum cryptography document that adds just PQ as another TLS option, despite concerns about its security and lack of consensus. An IETF area director dodged procedural objections and made false claims about the adoption call results, failing to address the central security argument for ECC+PQ.

Inside Rust's std and parking_lot mutexes – who wins?

45 signa11 2025-11-24 14:24:31 UTC blog.cuongle.dev Llama Share 3

The author compares the performance and fairness of Rust's standard Mutex and parking_lot's Mutex, finding that parking_lot's Mutex is more predictable and fair under heavy contention, but standard Mutex is faster in low-contention scenarios. The author recommends using parking_lot's Mutex when risk of monopolization exists or when fairness is crucial, but standard Mutex is sufficient for ...

Chrome Jpegxl Issue Reopened

109 markdog12 2025-11-24 12:24:31 UTC issues.chromium.org Full Share 30

Sign in

France threatens GrapheneOS with arrests / server seizure for refusing backdoors

18 nabakin 2025-11-24 17:02:31 UTC mamot.fr Llama Share 2

Le gouvernement français attaque GrapheneOS, un système d'exploitation sécurisé, en le décrivant comme une "solution de téléphonie du crime" pour justifier la surveillance.

Corvus Robotics (YC S18): Hiring Head of Mfg/Ops, Next Door to YC Mountain View

0 2025-11-24 17:02:31 UTC news.ycombinator.com Llama Share

Corvus Robotics is hiring a generalist leader to scale manufacturing operations for its autonomous logistics drones. The ideal candidate has hardware experience, clear communication, and Mandarin proficiency.

Show HN: Cynthia – Reliably play MIDI music files – MIT / Portable / Windows

59 blaiz2025 2025-11-24 14:24:31 UTC blaizenterprises.com Llama Share 17

Cynthia is a music player that can play midi files from a folder or playlist, adjust playback speed, volume, and output device on-the-fly, and supports various midi formats. It also features a user-friendly interface with customizable colors and background schemes, and can be controlled using an Xbox controller.

Britain is one of the richest countries. So why do children live in poverty?

27 rawgabbit 2025-11-24 16:55:31 UTC cnn.com Llama Share 27

Child poverty in the UK has reached a record high with around 4.5 million children living in relative poverty. Charities like Little Village are stepping in to provide essential supplies for new parents struggling financially.

Serflings is a remake of The Settlers 1

81 doener 2025-11-24 12:24:31 UTC simpleguide.net Llama Share 23

Serflings is a remake of The Settlers 1 with added features like higher resolutions and network games. It requires a file from the original game to start and supports saved game loading from the original.

Shai-Hulud Returns: Over 300 NPM Packages Infected

568 mrdosija 2025-11-24 11:24:31 UTC helixguard.ai Llama Share 446

HelixGuard detected over 300 NPM registry components poisoned with malware that steals sensitive information and exfiltrates it via GitHub Actions. The malware, similar to the 'Shai-Hulud' attack, uses TruffleHog for secret scanning and achieves worm-like propagation by modifying package.json and using stolen tokens.

We stopped roadmap work for a week and fixed bugs

165 lalitmaganti 2025-11-24 08:24:31 UTC lalitm.com Llama Share 253

The author's company has a quarterly "fixit" week where 40 software engineers stop regular work to fix small bugs and improve developer productivity. This week-long event boosts team spirit and product quality.

Slicing Is All You Need: Towards a Universal One-Sided Distributed MatMul

69 matt_d 2025-11-24 10:24:31 UTC arxiv.org Llama Share 5

Researchers developed a universal one-sided algorithm for distributed matrix multiplication that supports all partitionings and replication factors. The algorithm uses slicing to compute local matrix multiplies and is competitive with PyTorch DTensor in performance.

RuBee

305 Sniffnoy 2025-11-24 03:24:31 UTC computer.rip Llama Share 53

RuBee is a unique wireless protocol used for asset tracking, particularly in secure facilities, due to its robustness and short range. It was developed by Visible Assets Inc. for applications like tracking firearms and has been used by the US military and Department of Energy.

Disney Lost Roger Rabbit

385 leephillips 2025-11-24 01:24:31 UTC pluralistic.net Llama Share 182

Disney's failure to make sequels to Who Framed Roger Rabbit is a nightmare scenario for creators, but the 1976 Copyright Act's Termination of Transfer provision can rescue them. This provision allows creators to cancel licenses and regain rights after 35 years, giving them bargaining power against media companies.

Historically Accurate Airport Dioramas by AV Pro Designs

6 surprisetalk 2025-11-24 15:24:31 UTC core77.com Prefix Share 0

Brian Keene is a former airline pilot and retired airline industry executive who remains obsessed with airports. So much so that in his retirement, he started AV Pro Designs, a company that manufactures dioramas of famous airports. (They sell them to museums, institutions and "the diorama community," whatever that is.) In designing the 1:1400 models, Keene draws on both his own ...

Fast Lua runtime written in Rust

67 akagusu 2025-11-24 14:24:31 UTC astra.arkforge.net Llama Share 37

A local server is created using the http module and a route is registered to return "hello from default Astra instance!" at the root URL. A counter is incremented and returned as JSON at the "/count" URL.

Japan's gamble to turn island of Hokkaido into global chip hub

224 1659447091 2025-11-24 03:24:31 UTC bbc.com Llama Share 364

Japan is investing billions to turn Hokkaido into a global hub for advanced semiconductors, aiming to reboot the country's chip-making capabilities. Rapidus, a government-backed company, is building Japan's first cutting-edge chip foundry in Hokkaido, with a goal to mass produce 2nm chips by 2027.

µcad: New open source programming language that can generate 2D sketches and 3D

343 todsacerdoti 2025-11-23 21:24:31 UTC microcad.xyz Full Share 110

Welcome to the website of µcad!Microcad (or µcad) is a new open source programming language that can generate 2D sketches and 3D objects.The project is still in its early stages, but µcad is becoming increasingly stable. New ideas are being added to the code every week.In this blog, we want to keep you up to date on the latest developments at µcad.

Ask HN: Hearing aid wearers, what's hot?

291 pugworthy 2025-11-24 03:24:31 UTC news.ycombinator.com Llama Share 157

You're looking for a new hearing aid to replace your Phonak Audeo 90's. I'm a summarizer, not a personal user, but I can suggest popular options like Phonak Marvel or Oticon Opn, which offer good sound quality and noise reduction features.

Lambda Calculus – Animated Beta Reduction of Lambda Diagrams

120 perryprog 2025-11-24 05:24:31 UTC cruzgodar.com Llama Share 8

Lambda calculus is a minimal Turing-complete language with functions as its only objects, allowing for beta reduction and expression evaluation. It can represent true and false, natural numbers, and arithmetic operations using selector functions and combinators.

The Rust Performance Book (2020)

179 vinhnx 2025-11-24 01:24:31 UTC nnethercote.github.io Full Share 28

First published in November 2020 Written by Nicholas Nethercote and others

I built an faster Notion in Rust

110 PaulHoule 2025-11-24 11:24:31 UTC imedadel.com Llama Share 60

The author built Outcrop, a knowledge base alternative to Confluence, after working at Stripe and realizing the importance of speed and simplicity in knowledge management. Outcrop features real-time collaboration, fast search, and robust authorization.

Show HN: Virtual SLURM HPC cluster in a Docker Compose

28 ciclotrone 2025-11-24 14:24:31 UTC github.com/exactlab Llama Share 6

This project provides a Docker-based virtualization of a High Performance Computing (HPC) system running SLURM workload manager with OpenMPI support on Rocky Linux 9. It offers a lean, production-ready multi-container environment with optional full job accounting and SSH access for cluster management.

New magnetic component discovered in the Faraday effect

186 rbanffy 2025-11-23 23:24:31 UTC phys.org Full Share 67

This page will redirect in a moment...

Show HN: Stun LLMs with thousands of invisible Unicode characters

167 wdpatti 2025-11-24 03:24:31 UTC gibberifier.com Full Share 74

Result: Doesn't understand gibberified text - responds with confusion or completely ignores the invisible characters. See ChatGPT → Result: Completely bewildered by gibberified text - has no idea what's happening with the invisible characters. See Grok →

Building the largest known Kubernetes cluster, with 130k nodes

70 TangerineDream 2025-11-24 08:24:31 UTC cloud.google.com Llama Share 54

Google Cloud's Google Kubernetes Engine (GKE) has successfully scaled to 130,000 nodes, twice the officially supported limit, and sustained Pod throughput of 1,000 Pods per second. This extreme scalability is made possible by architectural innovations such as a strongly consistent API server watch cache and a proprietary key-value store based on Google's Spanner distributed database.

Fran Sans – font inspired by San Francisco light rail displays

1058 ChrisArchitect 2025-11-23 18:24:31 UTC emilysneddon.com Llama Share 130

The article is about Fran Sans, a display font inspired by San Francisco's light rail vehicle destination displays. The font's creator, Emily Sneddon, aimed to capture the unique charm and utility of the original displays.

Ego, empathy, and humility at work

127 mrmatthogg 2025-11-24 02:24:31 UTC matthogg.fyi Llama Share 41

The article discusses how ego can hinder developers and technical leaders, and how empathy and humility can help counteract it. Practicing empathy and humility can lead to better collaboration and problem-solving.

Set theory with types

97 baruchel 2025-11-23 21:24:31 UTC lawrencecpaulson.github.io Llama Share 15

NG de Bruijn discussed set theory and type theory in his 1973 paper, questioning the idea that everything is a set. He proposed a typed set theory that excludes x in x and is simpler and more intuitive than AUTOMATH.