Hacker News Digest
· 35 Hacker News
The PHP security team announced an upcoming release fixing two critical vulnerabilities, both rated CVSS v4.0 9.2. The patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC, and users are ur…
Browser vendors are planning Interop 2027, and Mozilla built a public ranking site so developers can vote on which features get prioritized. Josh W. Comeau walks through his top picks: user-defined C…
After nineteen years on Klonopin, a patient was told to taper off in three weeks. What followed—paresthesia, tinnitus, electric-shock sensations, and suicidal ideation—was repeatedly misdiagnosed as…
A heap use-after-free in PHP's session.upload_progress handler caches two raw zval bucket pointers that the request lifecycle frees, letting a stale pointer land an attacker-shaped zend_fcall_info th…
Researchers at security firm Claroc found that Muse, Meta's new AI agent, built shareable conversation URLs with the conversation title in the subdomain, making them discoverable through passive DNS…
Anthropic recorded a net loss exceeding $80 billion in the first half of 2026, up from $13 billion a year earlier, according to a draft IPO prospectus cited by the Wall Street Journal. Most of it—$72…
The PHP security team has issued advance notice of a security release scheduled for Wednesday, 21 October 2026 at 14:00 UTC, addressing two critical vulnerabilities both rated CVSS v4.0 9.2. Users ar…
Scrolling text on old displays often appears slanted—not due to italics, but because the display updates line by line, causing a skew similar to rolling shutter. The author reflects on how such typog…
A hacker group claims to have exfiltrated 10.6 TB from PingCAP's TiDB Cloud over two months, including the production control plane, 115,308 plaintext API keys, 20.6 million customer SQL statements,…
Quantum mechanics doesn't track objects moving through ordinary space; it tracks arrows pointing through Hilbert space, a realm whose axes mark every possible future. In 1927, 23-year-old John von Ne…
Subaru will stop selling combustion-engine vehicles in Europe by the end of 2027, retiring the Outback this year and the Impreza, Crosstrek, and Forester in 2027. From 2028, only three Toyota-develop…
A WSJ report claims Elon Musk personally ordered a Starlink slowdown that caught Ukraine off guard, but the sourcing is contested: Reuters says the order came from the White House, The Telegraph says…
After his first Spectrum Next laptop hit snags — hinges that wouldn't latch, an HDMI firmware update that broke the screen, and an off-the-shelf PC keyboard — the maker rebuilt the whole thing. Versi…
The United Nations Environment Programme's 2026 Emissions Gap Report declares that the chance to limit warming to 1.5°C with little or no overshoot has been lost. The only remaining path is to hold w…
NetWasm, an independent compiler that turns C# and .NET CIL directly into standalone WebAssembly, produces a 47,798-byte WASI Preview 2 component for a print-42 workload, including its runtime and pr…
A quick three-command setup turns the Secure Enclave on any modern Mac into an SSH authenticator: create a non-extractable P-256 identity with sc_auth, register it through ssh-keychain.dylib, and add…
Anthropic researchers ran Claude over 25 open-source projects—over five million lines of C, C++, Java, PHP, and Python—to map reachable code and flag unnecessary exposure. The model surfaced 493 issu…
Pillowfort will close on December 4, 2026. Founder Julia says the site never regained momentum after a 2021 security incident forced weeks offline, and a part-time skeleton crew of one community mana…
Decision models like Jev output fixed choices, scores, or probabilities, and their output tokens are nearly free, so a batch of 400,000 queries costs about $4.20 versus $13 on GPT-5 nano. That econom…
The essay introduces "decoherence": the buildup of locally valid but mutually incompatible models inside a system, until the cost of change is dominated by translating between them and dodging side e…
Decker's annual progress report covers releases 1.61 through 1.71: gamepad input with keyboard fallback, an LZW-based IMG3 codec that shrinks many decks 2–4x, richer contraption attributes, new Lil o…
A 2026 benchmark tested five bot detection systems against scripted browsers, stealth browsers, and AI agents. Proof of Human caught 99% of automated sessions, but Cloudflare Bot Management caught on…
Ante, a low-level functional language with ownership semantics, redesigns its borrow checker to permit shared mutability that Rust rejects. By replacing lifetimes with "places" and marking unstable r…
Waymo now runs more than four thousand cars in fifteen U.S. cities and has overtaken Lyft in San Francisco market share, with D.C., New York, London, and Tokyo in its sights. The New Yorker rides alo…
Battlezone Online (bzo) is a free 3D multiplayer tank game that runs in the browser on desktop, phone, or VR headset and connects with existing BZFlag clients and servers. The client uses Three.js ov…
Marius Bancila shows how std::polymorphic, new in C++26, restores value semantics to classes that own polymorphic components. Using an event-log example, he contrasts the old unique_ptr plus virtual…
Eight eMudhra intermediate CA private keys turned out to be single-byte numbers — 4, 56, 115, and so on — that anyone could brute-force in milliseconds from the public certificates. The keys date to…
Dovepass answers a deceptively simple question: can I legally fly my drone along this exact path in San Francisco? Pick a takeoff point, a destination, and your drone model, then get a clear go or no…
Basis researchers had LLMs write formal semantics for a small language, then used Lean to prove the rules match a C interpreter compiled to RISC-V for every program. Testing alone missed a real bug:…
A pure-Go CLI and local proxy that connects any app or coding agent to DeepSeek V3 and R1 through a free web account, no paid API key needed. It solves DeepSeek's proof-of-work challenges in roughly…
Munich-based Microagi is a data research and deployment lab with offices in Zurich, London, and Istanbul. Its Atlas product deploys autonomous robotics into major industrial companies, running closed…
A job tracker on Cloudflare Workers needs to turn LaTeX into PDF, but Workers are V8 isolates that cannot run native TeX engines. The fix is a containerized Tectonic service called over HTTP. The wri…
T3 Code, an open-source agent harness control surface from pingdotgg, now lives on GitCafe. It lets you drive Claude Code, Codex, Cursor, Grok Build, OpenCode, and Google Antigravity agents from iOS,…
GitHub has launched a package firewall in public preview for Enterprise Cloud customers, aimed at stopping malware that strikes at install time and steals credentials on CI/CD hosts and developer mac…
Stork's daily price trackers caught 17 overnight price changes across AI labs. Alibaba raised DeepSeek V4 Flash 0731 output from $0.40 to $1.32 per million tokens — a 230% jump — and more than double…