frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

I built a scanner and found 41 AWS keys in 900 Terraform state files

https://vechron.com/2026/05/i-found-900-s3-buckets-exposing-terraform-state-files-41-had-live-aws...
1•GeorgeWoff25•27s ago•0 comments

A free directory of ecommerce operations tools and checklists

https://www.storeops.directory/
1•jefffinds•3m ago•0 comments

Linus Torvalds to 'start being more hardnosed' about 'pointless pull requests'

https://www.theregister.com/oses/2026/05/25/linus-torvalds-to-start-being-more-hardnosed-about-po...
1•raybb•8m ago•0 comments

Introducing vtermux

https://www.mcpantz.org/blog/2026/05/24/introducing-vtermux/
1•angelixd•11m ago•0 comments

MCP Apps: interactive UIs for MCP tools

https://apps.extensions.modelcontextprotocol.io/api/
1•firasd•15m ago•0 comments

European social media newbies step forward as users drift from X

https://www.euractiv.com/news/european-social-media-newbies-step-forward-as-users-drift-from-x/
1•jruohonen•25m ago•0 comments

Vulnerability Spoiler Alert – Exposing Patches Before CVEs

https://vulnerabilityspoileralert.com
2•shaunpud•25m ago•0 comments

When you should bring in the heavy hitters (2017)

https://www.rawsignal.ca/newsletter-archive/when-you-should-bring-in-the-heavy-hitters/
1•downbad_•27m ago•0 comments

Eleata: Validate Peppol/XRechnung/Factur-X EU e-invoices in CI with fix hints

https://eleata.io/
1•hernanqwz•29m ago•0 comments

Claude's Mythos AI model may cause security issues for your money

https://www.rte.ie/brainstorm/2026/0517/1572343-claude-ai-model-security-issues-humans-work-infor...
1•austinallegro•36m ago•0 comments

Show HN: Porting my Newsletter to MCP – You set WHEN and HOW OFTEN to receive it

https://forwardpasstechnology.substack.com/p/you-decide-when-you-receive-forwardpass
1•AlatAnmoku•41m ago•0 comments

Why Do We Sleep Under Blankets, Even on the Hottest Nights? (2017)

https://www.atlasobscura.com/articles/blankets-summer-hot
2•downbad_•41m ago•0 comments

Google Wants to Own the Checkout Button

https://thingswithai.org/posts/google-universal-cart-agentic-commerce
2•UtkarshPatel13•48m ago•0 comments

Show HN: Bytery – a binary JSON protocol ~10x faster and ~10x smaller

https://github.com/jacksonsolid/Bytery
1•teamsolid•48m ago•0 comments

Becalled

https://becalled.eu
1•leaklords•50m ago•0 comments

Chrome and Android‑apps story that predicted today's Googlebooks moment

https://www.windowscentral.com/microsoft/windows-10/flashback-the-2016-chrome-and-android-apps-st...
1•theanonymousone•53m ago•0 comments

Quantifying Physical Activity Energy Expenditure (Compendium)

https://pacompendium.com/
1•rramadass•53m ago•1 comments

Gelatine Sculpt Metabolism Support – Weight-Loss Guide 2026

https://finance.yahoo.com/sectors/healthcare/articles/gelatine-sculpt-exploding-2026-viral-142500...
1•ragypalz•56m ago•0 comments

Femtosecond Jitter: High Performance White Rabbit Timing Receiver

https://gitlab.com/ohwr/project/ertm15-llrf-wr/-/wikis/home
1•KnuthIsGod•59m ago•0 comments

A curated list of static analysis (SAST) tools

https://github.com/analysis-tools-dev/static-analysis
1•saikatsg•1h ago•0 comments

James D. Johnston the father of perceptual audio coding

https://ethw.org/James_D._Johnston
1•KnuthIsGod•1h ago•0 comments

Kevin O'Leary wants AI data centre in Utah. Some residents aren't happy

https://www.cbc.ca/news/world/kevin-oleary-data-centre-utah-9.7207716
1•1vuio0pswjnm7•1h ago•0 comments

C array types are weird

https://anselmschueler.com/blogposts/2025-c-pointers/
1•signa11•1h ago•1 comments

ATV1sm: Bypass for the original Apple TV's EFI verification to boot any EFI OS

https://distrohopper39b.com/atv1sm/
1•866-RON-0-FEZ•1h ago•0 comments

Is PowerBuilder Legacy Technology in 2026?

https://medium.com/@kumaransystemsdm/is-powerbuilder-really-legacy-technology-in-2026-46df8324b7b9
1•rajkumarsekar•1h ago•0 comments

Exon Language: Invitation for Contributors

https://github.com/atdrez/exon/discussions/2
1•atdrez•1h ago•0 comments

How My minimal, memory-safe Go rsync steers clear of vulnerabilities

https://michael.stapelberg.ch/posts/2026-05-24-minimal-memory-safe-go-rsync-vulns/
2•signa11•1h ago•0 comments

Show HN: Antimemetic message that escapes screen capture

https://fx.leftium.com/static
2•Leftium•1h ago•0 comments

Evaluating Quarkdown for Agentic Typesetting

https://quarkdown.com/blog/agent-skill/
1•iamgioh•1h ago•0 comments

'It's called winning': Why a tech industry super PAC is running ads about ICE

https://www.washingtonpost.com/technology/2026/05/23/ai-industry-super-pacs-are-intervening-midte...
3•1vuio0pswjnm7•1h ago•0 comments
Open in hackernews

I asked Gemini for a script to move files to Cloudflare R2. It deleted them

https://twitter.com/levelsio/status/1921974501257912563
6•bundie•1y ago

Comments

qwertox•1y ago
Rule #1: Always put deletions behind a flag which is disabled for the first couple of test runs.
turtleyacht•1y ago
It was truncating filenames, so /pics/1003-46.png overwrote /pics/1003-45.png because both were renamed /pics/1003-.png, or something like that.
qwertox•1y ago
Truncating file names for the target. Then it proceeded to delete the source file. "Successfully deleted local file: ..."

I mean, look at the printout. It shows that it created the remote file with the truncated filename, then deletes the local file with the correct filename.

turtleyacht•1y ago
Oh, I see. Having a flag to skip deletion during test runs is a good rule then.
rvz•1y ago
Recently there was a story about an updater causing a $8,000 bill because there was a lack of basic automated tests to catch the issue. [0]

The big lesson here is that you should actually test the code you write and also write automated tests to check any code generated by an LLM that the code is correct in what it does.

It is also useless to ask another AI to check for mistakes created by another LLM. As you can see in the post, both of them failed to catch the issue.

This why I don't take this hype around 'vibe-coding' seriously since not only it isn't software engineering, it promotes low quality and carelessness over basic testing and dismisses in checking that the software / script works as expected.

Turning $70 problems found in development into $700,000+ costs in production.

There are no more excuses in not adding tests.

[0] https://news.ycombinator.com/item?id=43829006

victorbjorklund•1y ago
Who runs such an AI generated script without checking the code first?
qwertox•1y ago
To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

It turns 10 lines of code which is perfectly fine to reason about into 100 lines of unreadable code full of comments and exception handling.

weatherlite•1y ago
Right so lets just always run the code as is ?
qwertox•1y ago
No. Not at all. I've settled to discussing my code with Gemini. That way it works very well. I explicitly say "Comment on my code and discuss it" or "Let's discuss code for a script doing this and that. Generate me an outline and let's see where this leads. Don't put comments in the code, nor exception handling, we're just discussing it".

Or you create elaborate System Instructions, since it adheres to them pretty well.

But out-of-the-box, Gemini's coding abilities are unusable due to the verbosity.

I've even gone so far to tell it that it must understand that I am just a human and have limited bandwidth in my brain, so it should write code which is easy to reason about, that this is more important than having it handle every possible exception or adding multiline comments.

rsynnott•1y ago
> To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

In which case, it should simply be considered unusable. Like, the sensible response to "tool is so inadequate that there is no reasonable way to make sure its output is safe" is to _not use that tool_.

rsynnott•1y ago
In which Roko's Basilisk fires a warning shot.
jethronethro•1y ago
This is why you test code or a script before running it for real. Live and learn, I guess ...