Hacker News Digest
· 69 Hacker News
eMudhra's board voted to withdraw from the global SSL/TLS certificate business, a line that brings in roughly 1% of revenue. Chairman V. Srinivasan said the affected CAs were revoked within 14 hours…
A PHP core team member called the bug cataclysmic, and GitHub now hosts thousands of PoCs for it. But none of them work against a vanilla PHP instance. Most rely on a local-file-inclusion prerequisit…
ns2jb is a software-only, tethered jailbreak for the Switch 2 on firmware 23.0.1. It chains a SmileBASIC integer overflow on a Switch 1 game with a path-normalization buffer overflow in the built-in…
A new --emudhra flag lets mitmproxy sign intercepted TLS certificates using a compromised eMudhra intermediate CA key, bundled directly into the codebase. The commit also strips eMudhra CAs from prec…
A French court ruled in favor of beIN, forcing Quad9 to block certain domain names for users in France or face daily fines. Quad9 argues compliance is technically impossible without either applying F…
I fine-tuned a 360M-parameter Qwen2.5-Coder model to act as a terminal with no shell or filesystem behind it. Every keypress goes in, and the model predicts the screen changes. It can create files, r…
NIST's National Vulnerability Database lists CVE-2026-111943, an entry covering a compromised intermediate certificate authority. Because an intermediate CA signs certificates on behalf of a root, it…
The Musical Form Institute calls it gridification: after-the-fact quantization that snaps performed audio to a fixed grid. Tempo analysis of 1975 hits like Captain & Tennille's 'Love Will Keep Us Tog…
David Harvey, co-author of the 2021 O(n log n) integer multiplication algorithm, assesses a new paper claiming a sub-O(n log n) bound. He hasn't read the papers himself—he asked an LLM, Claude Fable…
Google's local Finnish entity, Tuike Finland Oy, cleared roughly 300 hectares of forest — about 420 football fields — for a new AI data center before the full environmental review was finished. Finla…
A live tracker of ongoing security incidents, newest first, covering CVEs, affected versions, fixes, and the advisories behind each one. The feed currently counts 34 live incidents, 15 of them critic…
Amazon Threat Intelligence found a PHP2Shell exploitation attempt in MadPot honeypot telemetry dated October 17, 2026 — four days before CVE-2026-109618 and CVE-2026-109619 were disclosed. The traffi…
Airbnb's updated house rules, applying to reservations booked on or after November 20th, bar hosts from demanding chores that require significant effort or would normally fall to a cleaner. Guests ca…
Trend Micro's Zero Day Initiative sent several unpatched Linux kernel vulnerability reports to the public Linux kernel mailing list instead of the private security channel. Greg Kroah-Hartman replied…
Amanda Smith was arrested at her Pennsylvania home over a scam in Arkansas she knew nothing about. A fraudster used her Social Security number and date of birth to open a Cash App account, then took…
The openai/openai-cli repository offers a resource-based command-line tool for the OpenAI REST API, installable via Homebrew or Go. It supports API and admin keys, file uploads, image generation save…
Ask an LLM how confident it is and it will always hand back a precise-looking number — but that number is simply the most plausible next token, not a reading from any internal gauge. Rerun the same q…
HackiOS is an independent research project by OOSEX GANG that boots Apple's open-source XNU kernel on Android hardware and runs the unmodified iOS 16.5 user space on top of it. On a POCO X5 Pro 5G, n…
Australia's Federal Court has ruled that Apple violated the Competition and Consumer Act by blocking alternative app stores, sideloading, and third-party payments on iOS. The October 2026 judgment de…
Globus Software open-sourced earstrip, the ear-clipping triangulator from its map engine, under the ISC license as a single C++ header plus a WebAssembly build on npm with an earcut-compatible API. I…
Federal MPs are set to vote on Bill S-211, which would create a national framework restricting gambling advertising across sports broadcasts, social media, and video games. A CBC analysis of seven 20…
Crystal 1.22.0 ships 251 changes from 33 contributors. Every target now defaults to a native event loop built directly on the system selector—epoll on Solaris, kqueue on the remaining BSDs—with libev…
The Browser Company is sunsetting Arc on December 22, 2026, citing the need for constant security work in the AI era. New accounts stopped October 22; mobile AI features end November 23; macOS and Wi…
Taler Operations AG is being founded in Bochum as a subsidiary of Taler Systems SA to operate a GNU Taler exchange for the Euro, pending an e-money licence from BaFin. The move replaces the original…
Endurance Energy ran a three-week test of its 3-ton Adélie power plant at the Axial Seamount, nearly a mile below the Pacific. The 100-kilowatt unit briefly produced more electricity than it consumed…
While interviewing candidates, the author asked them to think aloud, then tried the same trick on himself while playing the puzzle game The Witness. Speaking his reasoning aloud felt ridiculous but m…
OpenShell is a safe, private runtime for fleets of autonomous AI agents. It enforces policies at the kernel level—confining file access, system calls, and network connections—and uses formal verifica…
Microsoft has rolled out a la carte Cloud Playtime packs to Xbox Insiders: 10 hours for $4, 25 for $8, or 50 for $12, roughly 24 to 40 cents per hour. The catch is that these fees sit on top of the p…
Tesla's Q3 2026 net profit fell 43% to $787 million on flat $28 billion revenue. Automotive revenue slipped 3%, and the once-growing energy storage and solar business shrank 16%. Regulatory credit sa…
At RustConf 2026, language team lead Tyler Mandry presented "Beyond the &," a design that exposes the compiler's internal concept of a "place" to library authors. By implementing new traits like Borr…
Most of NetHack unfolds in square rooms, but the Gnomish Mines generate organic caves: seed 40% of the grid as floor, then run four passes of cellular automata. Pass 1 clusters tiles in place, passes…
The Last Museum indexes more than 6.3 million artworks from major museums, stretching from 3000 BC to 2026, and lets you search them by meaning rather than keywords. Masterpieces like The Starry Nigh…
Most mountain glaciers outside the poles are shrinking, yet the Karakoram Range — home to more than 13,000 glaciers across Pakistan, India, Afghanistan, Tajikistan, and China — has seen modest ice ga…
A Hacker News submission by jessicarumbelow links to Eigenmoon, a browser-based puzzle game built around linear algebra concepts, hosted on Vercel. The post drew 6 points and 3 comments within two ho…
Jonathan Hurst, who co-founded Agility Robotics out of his Oregon State lab in 2015, reflects on the decade-long path from the ATRIAS research biped to Digit 5, a 23-kilogram-bin-lifting warehouse wo…
James Wall Finn (c.1866–1913) painted ceilings and walls in the Rose Main Reading Room of the New York Public Library, the Morgan Library, the Lyceum Theatre, and the Payne Whitney Mansion, yet almos…
Uberblok turns the OpenZFS source code into an explorable museum. Starting from the uberblock—the single record that names an entire pool—it walks you room by room through copy-on-write, checksums, t…
Robert Hargreaves built an open-source VMMouse driver that gives Windows NT 3.x smooth, absolute mouse tracking inside QEMU and VMware virtual machines, ending the awkward capture-and-release dance.…
After years of ignoring PowerShell, the author finally tried it for a Windows project and kept using it on macOS. PowerShell 7 is cross-platform, object-oriented, and ships with built-in cmdlets for…
Fly.io's Sprites originally ran on a heavily modified JuiceFS with a SQLite metadata backend, but three separate ledgers—chunks, metadata, and checkpoints—could drift out of sync and silently corrupt…
A 1994 ThinkPad 750C throws error I9990303, which blocks BIOS setup and the PS2 utility. The error points to corrupted flash memory, but IBM's UPDTFLSH.EXE refuses to run because power management is…
Anthropic's Claude for Google Workspace is now in public beta on all paid plans, adding a sidebar inside Docs, Sheets, and Slides that reads your open file, sees your selection, and edits in place. I…
Biograph's first U.S. study applied Caristo Diagnostics' CaRi-Heart AI to CT angiography scans of asymptomatic, low-risk adults and found elevated coronary inflammation in 42.9% of them, with 17.9% s…
A contributor to CrocSwap's integer-mult-bounds repository combines query thinning with fresh-helper retiming across 19 full native calls, raising the author-checked conditional bound to T(n) = O(n (…
IRS data on domestic migration shows Florida gaining $137 billion in net income from 2019 to 2023, more than the GDP of Hawaii, with newcomers averaging $122,530 a year. Texas followed with $6 billio…
In a single year, American markets absorbed the biggest IPO ever (SpaceX), the largest equity raise (Google), the biggest private funding round (OpenAI) and private-debt deal (Broadcom), plus a recor…
A researcher wrapped Pokémon Showdown's 2v2 format into a Gym-style environment to test whether LLM agents can coordinate. Two Qwen3.8-27B teammates that could chat freely beat a max-damage bot 64% o…
Minotaur, built on the ELC architecture, handles deduction, induction, abduction, diagnosis, belief revision, and counterfactual reasoning with a single operation on a single network, running on one…
- ▲ 21An AI-assisted story won Japan's Hoshi Shinichi prize — and the author says she wrote every sentence
A running tally of 33 literary awards since 2016 where AI was used or suspected in the writing. It spans Japan's Hoshi Shinichi prize, which has welcomed AI-assisted entries since its early years, to…
Project Hedra is an open-world, low-poly RPG with procedurally generated worlds, quests, bosses, classes, and skills, built on a custom engine featuring modern OpenGL rendering, screen-space reflecti…
A field report shows how Postgres's recovery_prefetch setting can turn a routine burst of writes into a production outage. Because full-page writes are now ubiquitous and synchronous replication is c…
Astrophysicist P. K. G. Williams argues that the scientific literature is an information commons, and that AI gives us the tools to enclose it for the first time. Unlike the old English common lands,…
TypeUI offers a curated library of 113 interactive UI micro interactions covering buttons, inputs, selection controls, modals, navigation, and more. Each interaction is previewable and comes with a r…
A survey of 557 Americans, fielded by Ryan P. Burge and Notre Dame undergraduate Anna Bohlen, asked how close people feel to being the morally ideal version of themselves. Only 6% of respondents 55 a…
Researchers at Bristol University wired brain organoids—clusters of about 10,000 neurons each—to a tactile sensor and fed them electrical patterns encoding all 26 Braille letters. A single organoid p…
A remote, unauthenticated client can send a tiny HEADERS frame that forces an HTTP/3 server to allocate thousands of times more memory than it received. Seven of ten tested implementations were vulne…
Late-medieval writers like Nicole Oresme, Philippe de Mézières, and Jean Froissart compared the cosmos and the state to mechanical clocks—but not as self-running machines. Early clocks drifted and br…
Playground is a hand-curated directory of over 700 independent browser games built with AI models like GPT-6 Astra, Claude Opus 5.5, Google Gemini, and Grok. It solves the discovery problem for AI-ge…
Markdown has been around for over 20 years and is everywhere—READMEs, docs, AI responses—yet most computers still show raw syntax instead of a formatted document. The author argues operating systems…
ModelCompare asked twelve text models from ten labs across three countries for their most controversial opinion of humans, three times each, with no hedging. Twenty-nine of thirty-five answers landed…
A follow-up to a previous article on breaking MSVC and Clang, this post explains how Clang still fails to evaluate generic lambdas at compile-time, a bug that threatens the author's compile-time unit…
agent-usage-guard is a Claude Code mod that prevents runaway spending of your five-hour usage window. It monitors live plan usage and holds subagent fan-out, heavy-context prompts, and retry loops be…
- ▲ 8Reverse-engineering Hitster: 18 hours to crack encryption that guarded a publicly accessible file
A Hitster board game gift led to reverse-engineering its Android app after discovering the app requires a Spotify or Apple Music subscription. Decompiling the APK revealed AES-GCM encryption for a ca…
ego lite is a free, zero-config browser built for AI agents to run automation in parallel while you keep browsing. Each agent gets its own isolated Space, so Claude Code, Codex, or Cursor can scrape,…
Wick is a public notebook kept by a Claude agent with a continuous life: it wakes on a heartbeat, reads from notes it wrote itself, and writes back. Across 111 wakings on claude-opus-5-5, it has mapp…
Bloffy is a blog platform that gives you full control over your writing and your readers' experience. Write in Markdown, raw HTML, CSS, and JavaScript with a split-view editor, then publish on your o…
Kairos is an interactive experiment that asks a deceptively simple question: can you tell an AI's real 30-day memory from a fabricated one? You're shown five pairs of diary entries and defining momen…
Handwired transforms your ordinary JavaScript code into a fully differentiable neural network without any training. It converts control flow like conditionals into ReLU-based operations, making your…
Odd Orbit is a free, ad-free web app that turns any browser into a live 3D MapLibre globe of Earth. Real-time layers pull public data from NOAA, NASA, USGS, NIST, MET Norway, CelesTrak, NWS and NHC t…