Generative AI
Generative AI
Generative AI
CVE and Exploit Development
Getting LLMs Drunk to Find Remote Linux Kernel OOB Writes (and More)
I Caught the Car
FreeBSD: Local Privilege Escalation via Execve()
Stripe
Fintech startup Parker files for bankruptcy
CVE and Exploit Development
"Dirty Frag" (CVE-2026-43284): The Second Linux Root Exploit in Eight Days
Meta
Meta's Embrace of A.I. Is Making Its Employees Miserable
AI Coding Tools
Show HN: Create flashcards with Space CLI
Where Have All the Complex Windows Malware and Their Analyses Gone?
Uber
GM agrees to pay $12.75M in California driver privacy settlement
Rust
Bun ported to Rust in 6 days
Authentication
ACME CA Comparison
Authentication
Laptops all have built-in security tokens these days
Zed Editor Theme-Builder
Apple is increasing my cortisol levels
I Will Not Add Query Strings to Your URLs
Show HN: I wrote a flight simulator in my own programming language
CVE and Exploit Development
CPanel's Black Week: 3 New Vulnerabilities Patched After Attack on 44k Servers
Go
Yggdrasil Network as an Embedded Go Library
Cryptography
Introduction to Beaver Triples
Hardware Design
CAD and Cam Applications on HP-UX Unix Workstations
Agentic Commerce and Payments
My Agentic Trust Issues: From Prompt Injection to Supply-Chain Compromise on gemini-cli
Show HN: Mochi.js: bun-native high-fidelity browser automation library
Large Language Models
The context window has been shattered: Subquadratic debuts a 12M token window
The Intolerable Hypocrisy of Cyberlibertarianism
VPN and Tunneling
GrapheneOS fixes Android VPN leak Google refused to patch
Operating Systems
PipeDream on the Acorn Archimedes
NVIDIA
Nvidia has already committed $40B to equity AI deals this year
Cloudflare
The React2Shell Story and What Happened Next.js
MySQL
Migrating Etsy’s database sharding to Vitess
Etsy has maintained a sharded MySQL architecture since around 2010. This database cluster contains most of Etsy’s online data and is made up of ~1,000 tables distributed across ~1,000 shards. Over the last 16 years, it has grown significantly: combined, these tables have over 425 TB of data and receive roughly 1.7 million requests per second. Etsy engineers access our MySQL data through a proprietary object-relational mapping (ORM). The ORM has a corresponding model for each MySQL table. W...
Artificial Intelligence
Making Ads Count: Using MMoE and Auxiliary Tasks to Better Connect Buyers & Sellers
When buyers search on Etsy, they need to quickly and easily find the perfect item. At the same time, sellers need to be confident their unique products are being seen by the right customers. Our Ads Search ranking model, which is built on a multitask learning foundation, is the critical link in this connection. Recently, we identified an opportunity to drive more meaningful buyer engagement by enhancing our model’s ability to predict purchase intent. We achieved this via a dual-pronged impr...
Storage Engines
Removing fsync from our local storage engine
Internet Archive Switzerland
Software Engineering
Read Programming as Theory Building
How LEDs are made (2014)
Forking the Web
LLM Evaluation
LLMs Corrupt Your Documents When You Delegate
C++
What if there was no BASIC in EndBASIC? – by Julio Merino
Apple
Apple May Drop Base $599 MacBook Neo as Chip, DRAM Costs Climb
Open Source
Your Computer Doesn't Belong to You Anymore
Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibc
MongoDB
How to Optimize MongoDB Query Performance with Indexes
Vulnerability Garden: A growing list of named vulnerabilities, attack techniques and exploits
All my clients wanted a carousel, now it's an AI chatbot
Security Engineering
Mythos 'Discovered' a CVE in Its Training Data and That's Still Worrying
PWABuilder
Poka-Yoke
I Will Never Use AI to Code
X / Twitter
EU calls VPNs "a loophole that needs closing" in age verification push
killswitch: add per-function short-circuit mitigation primitive [LWN.net]
AR and VR
PortalVR Motion – use any VR content in 2D with 3D tracked Joy-Cons
Mathematics
A recent experience with ChatGPT 5.5 Pro
Over 97% of the 'Linux' Foundation's Budget Goes Not to Linux
AI Inference
Boosting multimodal inference performance by >10% with a single Python dict
People Hate AI Art
I built GitHub Store to 12,500 stars in 6 months – I started at 16
Jetro – JSON query engine for Rust (jq-like DSL with compilation and VM)
Space Tech
Bitter Lessons from the ISSpresso
PostgreSQL
Christophe Pettus: All Your GUCs in a Row: autovacuum_vacuum_max_threshold
PostgreSQL 18 finally fixes the autovacuum formula that left billion-row tables waiting for 200M dead tuples.
Human typing habits and token counts
WebRTC
OpenAI's WebRTC problem
Formal Methods
Can LLMs model real-world systems in TLA+?
RISC-V Server Platform Spec Ratified
The React2Shell Story
Privacy
The FCC Wants Your ID Before You Get a Phone Number
xAI
Musk v. Altman week 2: OpenAI fires back, and Shivon Zilis reveals that Musk tried to poach Sam Altman
In the second week of the landmark trial between Elon Musk and OpenAI, Musk’s motivations for bringing the suit were under scrutiny. Last week, Musk took the stand, alleging that OpenAI CEO Sam Altman and president Greg Brockman had deceived him into donating $38 million to the company. He claimed that they’d promised to maintain…
Agentic Commerce and Payments
The Tax of Living in a Low-Trust Society: How Collapsed Trust Costs You
EVs and Transportation
Tesla Model Y Passes NHTSA's New 'Advanced Driver Assistance System' Tests
Hosting a Site on a Raspberry Pi
Apple
Apple Is Holding My Pictures Hostage Until I Accept Their New Terms of Service
EVs and Transportation
Brembo's fluid-free electronic braking system is coming to a car near you
NVIDIA
ASML to invest $1.5B in Mistral at over $11B valuation
Wi is Fi: Understanding Wi-Fi 4/5/6/6E/7/8 (802.11 n/AC/ax/be/bn)
Startups and Venture
San Francisco’s housing market has lost its mind
AWS
AWS data center outage hits trading on Fanduel, Coinbase
Show HN: The independent guide to agent orchestrators
Privacy
Meta Shuts Down End-to-End Encryption for Instagram Messaging
PostgreSQL
Jan Kristof Nidzwetzki: Tracing PostgreSQL Using eBPF and Hardware Breakpoints
Hardware breakpoints can trigger eBPF programs when specific memory addresses are accessed, leveraging CPU hardware support for low overhead. By utilizing these hardware breakpoints, we can efficiently monitor PostgreSQL’s internal variable updates, such as transaction ID generation and OID assignment. In this post, we will discuss what hardware breakpoints are, whether they have less overhead than uprobes, and how to answer questions like “How many transactions are being executed per sec...
All means are fair except solving the problem
Nix