France's Supermarket Fridges Were Vulnerable Online for Months

https://storage.ghost.io/c/b1/57/b157bf7f-0fe2-447f-a945-12d7951755b3/content/images/2026/10/france-fridge-chart.png
Hundreds of French supermarkets' refrigeration systems were compromised by cyber attackers, causing widespread food waste and estimated losses in millions of euros. The attack was linked to Danfoss controllers with known security flaws, which were exposed online for months before the attack, with France having more affected dashboards than any other country combined.

MiniMax M3.1 Flash

https://filecdn.minimax.chat/public/m31-flash-en-2-1792403273121-webp-1.m31-flash-en-2-1792403273121-webp
MiniMax M3.1 Flash is a next-generation AI model that delivers significant improvements in agentic tasks, coding, and cybersecurity while reducing costs by 70%. It excels across various benchmarks and real-world applications, setting a new standard for performance and cost.

I built a drone with only one motor [video]

Wine ported to OpenBSD

A new port for Wine has been proposed in OpenBSD-ports, allowing 64-bit Windows software to run on the system. The port is still experimental and requires testing, with some limitations such as WoW64 not working.

OpenBSD 8.0 release will have inteldrm/radeondrm/amdgpu drivers from Linux 6.18

https://media.bsd.network/site_uploads/files/000/000/001/original/60c_right.jpg
OpenBSD 8.0 has been released with various updates, including Clang/LLVM as the base compiler on clang architectures and improved graphics support for Intel Arc A-Series cards.

RuneScape Bench: MMOs for Agents [video]

One Hash Bloom Filters

https://calabro.io/static/posts/bsky-bloom-filter-positive-rate.png
A bloom filter is a data structure that allows for quick and probabilistic checks of key existence, using a small amount of memory and computational cost. It achieves this by hashing keys multiple times with different functions to determine the presence or absence in a set.

Android apps running native on macOS

https://raw.githubusercontent.com/kksimp/Mac.apk/main/images/how-mac-apk-works-overview.png
Mac.apk allows Android apps to run natively on Apple Silicon Macs without emulation or virtualization. It is an early alpha version, stable enough for use and improving with each build.

It's still ok to enjoy programming

https://d39wtn5cxihhz5.cloudfront.net/content/800Pasted-image-20261017124054.jpeg
The author argues that it's still okay to enjoy programming outside of work, despite the changing economics and pressure from online communities. They share their personal experience of learning game programming on weekends for fun, exploring new ideas and concepts without a specific goal in mind.

Putting Linux on my RTX Spark laptop because I don't have a Microsoft account

https://josie.lol/blog/images/n1x-arch-linux.jpg
The author built a custom Arch Linux ARM laptop with 128 GB RAM and NVIDIA GPU, achieving similar performance to Windows in various tests, including 7-Zip compression and inference tasks. The setup allows for local processing and fine-tuning of models without relying on cloud services or Windows-specific features.

Weball: Play Katamari on Websites

https://www.funwithcomputervision.com/assets/weball.png
Unlocked! Two more levels, and any website you like.

Token-maxxing is dead, OpenRouter's token usage plateaus

https://openrouter.ai/images/icons/Qwen.png
LLM models are ranked by tokens processed through the OpenRouter API, with Claude Code leading the rankings. The leaderboard updates daily and ranks models by their usage in real-world applications.

Timestral: Mistral's time-series foundation models

https://mistral.ai/_astro/GMean%20MASE_ZLHXlK.webp?dpl=6ad1d7b6946342e26a4d2b4f
We released Timestral, a family of time-series foundation models that outperform the previous state-of-the-art with fewer parameters. The models deliver probabilistic forecasts and support various covariates, making them suitable for industrial plants and finance teams.

Starcraft: Ashfall

https://starcraft-shooter-2026.pages.dev/assets/ui/units/marine.webp?v=3934e87bd5
后勤说十个人够了.虫子好像没收到通知. Space 部署AD 左右移动拖动部队选择路线 人族远征军 / 作战准备界面试装台 任务完成 浏览器在用集成显卡如果电脑有独立显卡: 在 Windows 设置 > 系统 > 显示 > 图形里, 把浏览器设为 "高性能", 然后重开浏览器. 请竖屏游玩这个游戏按竖屏设计.

Ukraine claims first drone evacuation of wounded soldier

https://media-cldnry.s-nbcnews.com/image/upload/t_fit-560w,f_avif,q_auto:best/rockcms/2026-10/261019-drone-rs-bd64e5.jpg
Ukraine has successfully evacuated an injured soldier from the front lines using a drone, marking what it claims is the world's first such operation. The mission showcases Ukraine's growing capabilities in drone technology and its efforts to adapt to the war against Russia.

The fire retardant in the seafood chain

https://insideclimatenews.org/wp-content/uploads/2026/10/fire-story-still-fire-rotterdam-tug-fights-fire-on-ss-south-america-jpg-w.jpg
The use of ethoxyquin, a fire retardant in fishmeal, has been linked to ship fires and potential health risks for humans and aquatic life. Many countries have banned or restricted its use due to concerns over carcinogenic effects and environmental impact.

Alternatives to animal testing are finally taking off

https://spectrum.ieee.org/media-library/a-photo-shows-a-hand-holding-a-small-clear-plastic-device-with-red-and-blue-lines-inside-it.jpg?id=67819184&width=2000&height=2488&quality=100&coordinates=0%2C180%2C0%2C0
Researchers are developing alternatives to animal testing in drug development, with organ-on-a-chip systems and computational simulations showing promise. These new approaches aim to replace animal models, but face challenges such as validation and standardization.

Ask HN: How to deal with shipping AI-written code you don't understand?

Sorry

“bonsoir, Elliot”: How abliterated models can get you pwned

https://projectdiscovery.io/_next/image?url=%2F_next%2Fstatic%2Fimmutable%2Fmedia%2FSOC2_logo_new.3_1tkeoe5blfr.png&w=3840&q=75
Researchers found that editing a model's weights can introduce a backdoor, allowing an attacker to control the model's behavior. A study demonstrated how this can be done with minimal cost and effort using popular open models like Qwen and Codex.

Agentic Monitoring

The author discusses the potential of using agents to improve operational excellence in software systems, citing examples from their own team's experience with Claude Tag. Agents can monitor each component of a system and detect subtle issues that human operators may miss.

Evidence (YC S21) Is Hiring Software Engineers

https://evidence.dev/brand-assets/twitter-card-black-bg.png
Evidence is a business intelligence platform that empowers humans and AI agents to work together on analytics, backed by prominent investors. The company prioritizes customer care, product quality, and efficient development processes with minimal meetings.

Credit where credit is due

Provost Santiago Schnell of Dartmouth College wrote an article about AI cheating, but it was later found to be heavily influenced by LLMs. He admits to using them in his writing process and suggests that transparency is key, proposing a policy requiring disclosure of AI use in coursework and publications.

The ovary doesn't retire after menopause

https://news.northwestern.edu/assets/Journalists/B-roll-lab-thumb-CMS__FocusFillWyIwLjAwIiwiMC4wMCIsMjk1LDE3MF0.jpg
Ovaries continue to remodel and show increased inflammation and structural changes decades after menopause. The study suggests a molecular link between ovarian aging and cancer, raising questions about the ovary's role in aging and disease.

Chicago O'Hare digs up 50-ton boulder under airfield, asks public for name ideas

https://static0.simpleflyingimages.com/wordpress/wp-content/uploads/2026/10/shutterstock_2851908399_cropped.jpg?&fit=crop&w=1600&h=900
Chicago O'Hare International Airport has discovered a 50-ton boulder beneath its airfield, sparking a public naming contest. The winning name will be displayed alongside the rock in an airport exhibit after nearly 3,000 submissions were received.

The reverts will continue until morale improves

The PostgreSQL 19 beta period saw a high number of feature reverts, with around 8-10 significant features reverted late in the cycle. The reasons for these reverts are varied and likely include a combination of poor code quality, inadequate testing, and the impact of LLM-assisted code review on detecting edge cases.

Drupal is now light-years ahead of its reputation

https://dri.es/files/cache/drupalcon-rotterdam-2026/driesnote-1280w.png
The author's DrupalCon Rotterdam keynote focused on closing the gap between Drupal's reputation and its capabilities, showcasing improvements in multilingual sites, JavaScript front-ends, headless Canvas, and AI.

Let's Encrypt is adding two additional remote perspectives for domain validation

https://global.discourse-cdn.com/letsencrypt/original/3X/4/c/4c5760509a18adfc3bc657ba8bd49b301faaa66b.png
Let's Encrypt is adding two new remote perspectives for domain validation to improve security and meet Baseline Requirements. The change will require seven total validation requests, including one from the primary datacenter and six from remote perspectives.

Launch HN: Laminar (YC S24) – RL-trained model that finds errors in agent traces

Sorry

Plex vulnerabilities being exploited in the wild to drop a cryptominer

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3tUKB_Vp0xqfjedxvomT5LC4IfbyHTmtcE5mc_57DEPoEXL9DSq7f2T4HMJ26wf-VkPNPyBKzIm5jMIXoWzT4Rcchapu9cpzeT14d1MYmHhhyphenhyphenlfY0ASPbRYzyumorq6xHJ-0WMIarOSDjhpa_W0XI6o8WuIp_T1wzQgKzIGfFdiwMdf5FAiffEzavMK4/s1600/image.png
A Plex media server vulnerability was discovered, allowing threat actors to gain remote code execution. The exploit has been observed in the wild and is being used by attackers to access corporate VPNs and emails through residential IP proxies.

The End of Rationing

https://sanketsaurav.com/_og/s/o_ae3ff665b3f43faf.png
The software industry has transitioned from a high-fixed-cost, low-marginal-cost model to a low-fixed-cost, substantial-marginal-cost model with AI. However, most products still resemble those built in the past due to lingering constraints and habits.