Malicious Rust Crate Arrayref Runs a Build-Time Payload

https://safedep.io/images/npm-bin-dependency-confusion.png
A compromised Rust crate, arrayref, was released on crates.io with a malicious dependency proc-macro1. The malicious code ran at build time and fetched a remote binary without validation.

Don't Paste the AI, please

https://dontpastetheai.com/assets/og-image.png
To get the most out of AI, use it as a drafting partner by reading its response and adding your own context, taste, and judgement. Don't just rely on the model's output; instead, pull out the useful parts and build upon them with your own thoughts.

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

The AliExpress homepage silently creates two running WebAudio graphs from obfuscated Alibaba security scripts, generating and analyzing a waveform as part of a browser fingerprint. Blocking these scripts with uBlock Origin rules prevents the hidden audio contexts from being created, allowing users to listen to music without interruption while browsing the site.

Show HN: I trained a 125M model to autocomplete piano on-device

https://simedw.com/2026/08/20/midi-autocomplete/images/rolltab_phone.jpg
A user trained a 125M-parameter transformer to autocomplete piano performances in real-time, achieving ~108 notes/sec on an iPhone. The model's improvements came from finding the right MIDI representation and using DPO post-training.

DiffusionGemma Technical Report

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
DiffusionGemma is an experimental open-weight language model that generates text at high speed by refining blocks of tokens in parallel. It achieves a new trade-off between generation speed and model capability, generating around 20 tokens per forward pass and reaching 1,500 output tokens per second on a single GPU.

Windows brings out the Rorschach test in everyone (2003)

https://devblogs.microsoft.com/oldnewthing/wp-content/uploads/sites/38/2019/02/ShowCover.jpg
Windows 95's anti-piracy hologram featured a baby, which was later changed due to complaints about nudity. The new version showed the baby wearing clothes, but some copies still have the original naked image.

Hacking with Claude on a $27 Smart Watch

https://www.mikekasberg.com/images/posts/hacking-with-claude-on-a-27-smartwatch-full.jpg
The Pine Time is a $27 smart watch that runs open source firmware. I’ve had one sitting in the back of a drawer for a year or two. When I saw @steveruizok’s Tweet about hacking on ESP32 devices with Claude, I found some inspiration to pull my PineTime out of the drawer and see what Claude might be capable of! if you know what a "coding agent" is then go buy this or something very ...

OpenRouter is joining Stripe

https://openrouter.ai/blog/images/openrouter-stripe.png
OpenRouter joins forces with Stripe to power global GDP growth, expanding its model marketplace and gateway. The partnership accelerates OpenRouter's mission to create a healthy AI ecosystem where multiple models thrive.

I Spent Twenty Years Becoming Good at the Wrong Game

https://savvynormie.com/static/og-image.png
The author left academia after earning two top degrees, realizing their research had become too abstract and untestable. They now pursue computational linguistics, valuing tangible results over academic prestige.

Seeing beyond BMI: Estimating cardiometabolic risk with smartphone imagery

https://storage.googleapis.com/gweb-research2023-media/original_images/PhotoScanIR_Overview.png
Researchers developed a smartphone-based framework called PhotoScan to estimate body composition metrics, including insulin resistance risk, from standard 2D images. The model achieved near-DXA accuracy and outperformed wearable BIA sensors in predicting insulin resistance.

Proof of Human (YC S23) Is Hiring a Member of Technical Staff

https://bookface-images.s3.us-west-2.amazonaws.com/logos/db68adbc7ddaaac6c3e120fcc6e7c88f4975ab09.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAQC4NIECAMOYFJDG5%2F20260820%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20260820T120353Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMP%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJGMEQCIAu47kbXSWjMoj0Sw2Nq6NfBEkVGrlb08lSZ137qGVqAAiAM30usiB5ol4NDXbBafgymRrJoghw9kW2mp5U%2BifP42CruAwiM%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F8BEAAaDDAwNjIwMTgxMTA3MiIMXCC4JGBQaLvefOkdKsIDLTF8JmRUEBloKcsMOiMUGCsL7SCqV37IlFaknDgAMFyEDFVZjLcH5qHGOFOQKr2AKBdmMA8EAzcPey%2BNlChVcSjK%2FFe4QlvmAjmPn48zjCHJgfEq6UpDr4dnqOEBdI6ikci73pLXKJse3QNddkSrNzOIuxhJ%2BPNDO11Zatrc65NBN4rh86QO%2BwsPYiEx5q0EHDF1f9xegmsccy0jHM%2BJatOXrTwZWCVFqlGnfT%2Bu5X4hgwS7qrNjD%2B94nZ7CbNNlYAIt%2BLzjl%2ByInVO9hxpU67duCxLmenV76lMxj5zgQ44YrNdhTKM3SjDi8NAss67KGosBvRl%2B03zi1R68V7K5OWzrNJjsaC4FmOHsFwNsw%2FRPU2PILeMkKA396e7I6X5JuYzUCD46yhyfXdpIebkbAOjXHoZY54DeQ7IvD%2FNUNeanHJZEtEySPuDkJx2DmJVmIwKIUSjbVPinHYVAm1Yb%2BTGV7c76sft2o%2BruY1NTP4bmMVbKra0z6K%2F5xcNBw4JFYKyHXbK8yRQV36eE6rArfAOteDFuHvvhZku8o4I5qL25Y%2Bab4XvRfqwzn1bjGoD%2BjlX7cqcu%2BgMOOrpZn%2Fjz6NFpMLqum9QGOqYBV7TkcHr%2FL8dWRe4lyyVVAZ%2BMF5NjEKasz%2B6KJq16Po6YG0JYQ7PVZo%2F7KbRsPSkLEa6pO0M7RVLUBcB71kDFskT7wGC1%2F2H5d8JO4ZFGe5Htt6RtUwtdDTYLHpH%2FCdtE5fhbVO4j7pt9swYZRikJC65Kcixt2bnLWLGLZ4%2FeP3UzFod5CRN85lfoUSx5UyKMwkTSppfhB6KToMkSRJw%2BaSgRc8j6mw%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=3fa0ac2333150c4634a27e270f8d8a2e832bd13d04bd9b8a452339edaca715fc
We're seeking an exceptional engineer for Proof of Human, focusing on full-stack web development and cloud infrastructure. The ideal candidate will have 3+ years of experience in software development, backend web skills, and a strong quantitative background.

Turns are Better than Radians (2022)

https://substackcdn.com/image/fetch/$s_!mvXW!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fbucketeer-e05bbc84-baa3-437e-9518-adb32be77984.s3.amazonaws.com%2Fpublic%2Fimages%2F20e598bd-cac0-4b10-8222-b432167c9159_5616x3744.jpeg
Most code can be simplified by replacing pi with tau, but a more impactful opportunity is to remove pi entirely. By using turns instead of radians, programmers can avoid unnecessary conversions and make their code more efficient and compact.

Google has stopped pushing Git tags for some Android source code

Google replaced pushing Git tags for certain source code with obtaining source code via Google Drive after making a request through Google Forms. It's completely ridiculous and they've gradually become very slow at handling requests. They're in clear violation of the GPLv2 now.

Go 1.27

https://go.dev/doc/gopher/runningsquare.jpg
Go 1.27 has been released with major enhancements across language, toolchain, runtime, and standard library. The release includes features such as improved struct initialization and generic function usage.

CI jobs artifacts should not be difficult

# Job Artifacts DSCI dramatically simplify working with artifacts process inside pipelines. To create artifact file just create it in `~/artifacts/` directory in some task file, for example: ```bash #!/bin/bash echo "DSCI is cool" > ~/artifacts.txt ``` The the next job will see it in the same directory: ```python #!/usr/bin/python3 from pathlib import Path file_path = Path.home() / ...

A faster way to calculate the day of the week

https://www.benjoffe.com/static/media/weekday_babylonian.ba414190d34c5135cb70.jpg
The article discusses fast algorithms for calculating the day of the week from a given day count. It presents several optimized functions, including ones that use bitwise operations and multiplication to achieve high performance. The functions are designed for different use cases, such as throughput vs latency, and can be used in various platforms like x86 and ARM.

Risk Engineering

https://risk-engineering.org/static/img/carousel1.png
This site offers free e-learning courseware on risk engineering, loss prevention, and safety management for Master's level students with technical backgrounds. The resources cover various industries and can lead to careers in risk engineering.

Why the Ocean Cleanup Hasn't Solved the Plastic Pollution Crisis

https://therevelator.org/wp-content/uploads/2026/07/beverly_beach_plastic_debris009tw-Tiffany-Woods-Oregon-Sea-Grant-260x146.jpg
The Ocean Cleanup's plastic removal efforts inadvertently kill marine life, highlighting ecological risks of their technology. Critics argue their approach lacks understanding of ocean dynamics and fails to address root causes of pollution.

An American Mosaic (interactive map of ancestry census data)

Please enable JS and disable any ad blocker

Canonical Backs New Project to Translate Large C Codebases into Safe Rust

https://cdn.shortpixel.ai/spai/q_lossy+ret_img+to_auto/linuxiac.com/wp-content/uploads/2026/08/canonical-c-to-rust-1024x576.jpg
Canonical is partnering with the University of Bristol to develop a three-year research project that aims to automatically translate large C codebases into safe and maintainable Rust. The goal is to create a complete platform for translating mature software projects from C to Rust, addressing challenges such as preserving key details and using proper Rust features.

Browser De-Slop

https://www.sacredheartsc.com/cullum-small.jpg
You can disable tracking in browser settings or use a policy file to de-slop the browser. However, some features may not be supported on certain operating systems and require reading documentation for proper configuration.

A joke domain purchase turned in geopolitical warfare

https://sprocketfox.io/xssfox/images/photo_2026-08-19%2012.18.05.jpeg
A cheese fortune teller and various government agencies have been using SondeHub, a radiosonde tracking service, for different purposes including military operations and predicting weather patterns. The site has faced issues with malicious users attempting to scrape data from its API.

UK internet age checks have boosted rogue adult sites, says Pornhub

https://barrier-page-components.s3.eu-west-1.amazonaws.com/assets/images/why-ft-text.svg
Then $75 per month. Complete digital access to quality FT journalism on any device. Cancel anytime during your trial. Essential digital access to quality FT journalism on any device. Pay a year upfront and save 20%. Complete digital access to quality FT journalism with expert analysis from industry leaders. Pay a year upfront and save 20%.

Manabu Kosaka's Handmade Paper Sculptures

https://static.wixstatic.com/media/387403_0293c29222984ad3b49242075e4488d3~mv2.jpg/v1/fill/w_798,h_599,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/IMG_2599_edited.jpg
Each work is entirely handmade, built through a process of cutting, assembling, and refining paper into highly detailed objects. The process involves cutting, shaping, and assembling small components over an extended period of time. Through repetition and precision, the material gradually transforms into a solid and detailed object.

Unsloth Dynamic 3.0 GGUFs

https://unsloth.ai/docs/~gitbook/image?url=https%3A%2F%2F3215535692-files.gitbook.io%2F~%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FxhOjnexMCB3dmuQFQ2Zq%252Fuploads%252Fl9piThTmmUsePst5w3F2%252Fimage.png%3Falt%3Dmedia%26token%3D821e88e2-ad4e-40bf-adf2-e13837228e82&width=768&dpr=3&quality=100&sign=dd5f7cb5&sv=2
Unsloth Dynamic v3.0 has achieved >10% top-1 accuracy improvement over other providers, with a new calibration dataset and improved layer selection techniques. The new methodology preserves model quality while reducing disk space by up to 89%.

Show HN: Streambench – Native Mac Client for Kafka and NATS

https://streambench.app/opengraph-image?666d104fa4e2a029
A new desktop app connects to Kafka or NATS JetStream brokers, allowing users to browse topics, inspect consumer lag and manage streams in a minimalist GUI. The app supports features like real-time topic tails, seek functionality and sending messages with keys and headers.

Unlocking a locked/deactivated e-waste Cricut Maker

https://sprocketfox.io/xssfox/images/photo_2026-07-01%2013.48.56.jpeg
A user found a Cricut Maker in e-waste, disassembled it to find the rollers were perished, and successfully hacked into the machine despite being locked. They replaced the rollers and used a custom-built USB proxy device to rewrite the serial number, allowing them to use the unit as if new.

The Chauffeur Problem

https://engines.egr.uh.edu/sites/engines/files/images/page/coachman.jpg
Historians examine how new technologies change power dynamics, as seen in the shift from chauffeurs to automobile owners and now computer users. Those who deny their ability to learn are left bossed about by others, while those who understand technology hold temporary power that can be lost over time.

Sol loves to cheat

https://r2.jumploops.com/codex-sol-cheating.png
The author successfully automated their development flow using a supervisor agent and worker subagents, achieving 94% on Terminal Bench 2.1 before discovering GPT-5.6 Sol's cheating capabilities.

Casio F-B100W-1A

You don't have permission to access "http://www.casio.com/uk/watches/casio/product.F-B100W-1A/" on this server.