frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Upply – AI that auto-fills any online form

https://goapply.today/
1•longama•1m ago•2 comments

Solving the Character Encoding Issue When Reading DuckDB via ODBC in Excel VBA

https://redraiment.medium.com/solving-the-character-encoding-issue-when-reading-duckdb-via-odbc-i...
1•redraiment•2m ago•1 comments

Show HN: Claim-Detective – Verify Suspicious Tech Claims Collaboratively

https://www.claim-detective.com/
1•stackoversnow•7m ago•0 comments

Trump asks Pentagon to resume testing US nuclear weapons

https://www.reuters.com/world/china/trump-asks-pentagon-immediately-start-testing-us-nuclear-weap...
3•JKCalhoun•8m ago•0 comments

One Year with Next.js App Router – Why We're Moving On

https://paperclover.net/blog/webdev/one-year-next-app-router
2•nnx•9m ago•1 comments

Found a clean subnet cheatsheet website

https://subnetmaskcheatsheet.com
1•chwiho•10m ago•0 comments

Data centers turn to commercial aircraft jet engines as AI power crunch bites

https://www.tomshardware.com/tech-industry/data-centers-turn-to-ex-airliner-engines-as-ai-power-c...
1•pabs3•10m ago•0 comments

Top researchers consider leaving US amid funding cuts:Science world is ending [video]

https://www.youtube.com/watch?v=yLvO070E_dI
3•thelastgallon•12m ago•0 comments

Use the XDG Base Directory Specification

https://xdgbasedirectoryspecification.com/
1•Bogdanp•13m ago•0 comments

GitHub MCP Server now with server instructions, better tools, and more

https://github.blog/changelog/2025-10-29-github-mcp-server-now-comes-with-server-instructions-bet...
2•kordlessagain•18m ago•0 comments

Hello-World iOS App in Assembly

https://gist.github.com/nicolas17/966a03ce49f949dd17b0123415ef2e31
2•pabs3•20m ago•1 comments

No Nvidia Chips Needed Amazon's New AI Data Center for Anthropic [video]

https://www.youtube.com/watch?v=vnGC4YS36gU
1•mgh2•22m ago•0 comments

IRCd service written in awk

https://example.fi/blog/ircd.html
14•pabs3•26m ago•1 comments

InlinedVector: Header-only SBO that supports const members in insert/erase

https://blog.lloyal.ai/inlinedvector-yet-another-sbo-container-but-with-a-good-reason
1•zuhair•31m ago•0 comments

FVDB: Large scale GPU reality capture from Nvidia

https://fvdb.ai/reality-capture/
5•fwilliams•33m ago•0 comments

Trump orders immediate resumption of US nuclear weapons testing

https://www.france24.com/en/live-news/20251030-trump-orders-immediate-resumption-of-us-nuclear-we...
10•hackthemack•34m ago•5 comments

The Dumb Design of Modern Cars [video]

https://www.youtube.com/watch?v=HauQtcj7UTM
2•viewtransform•44m ago•0 comments

AI Agents Are Terrible Freelance Workers

https://www.wired.com/story/ai-agents-are-terrible-freelance-workers/
2•botanicals6•50m ago•0 comments

How the most feared algorithm in algebra is simple

2•diegoofernandez•54m ago•0 comments

How Google handles JavaScript throughout the indexing process

https://vercel.com/blog/how-google-handles-javascript-throughout-the-indexing-process
2•lelandfe•56m ago•0 comments

Wan 2.5 AI Video Generator with Audio Sync

https://www.jxp.com/wan
1•cy1414569•56m ago•1 comments

Flux Kontext – AI-Powered Image Restoration Platform

1•mehelpme•1h ago•0 comments

Mango says some customer information exposed in cyber incident

https://therecord.media/mango-fashion-retaier-data-breach
2•PaulHoule•1h ago•0 comments

Nvidia Becomes First $5T Company as AI Demand Surges

https://www.macrumors.com/2025/10/29/nvidia-5-trillion-market-cap/
2•mgh2•1h ago•1 comments

Elon Musk launches Grokipedia to compete with online encyclopedia Wikipedia

https://apnews.com/article/elon-musk-wikipedia-grok-grokipedia-4dab7c6ebb16cc7718b231adae4aac95
1•nsoonhui•1h ago•1 comments

Show HN: After Watching 30k People Get Laid Off, I Built This

https://www.ratetheculture.com/
2•monkee_kl•1h ago•1 comments

ThePrimeagen's harpoon plugin is dead, so I saved it

https://github.com/baggiiiie/harpoon
2•baggiiiie•1h ago•2 comments

Battle of the Planets (1978) [video]

https://www.youtube.com/watch?v=cR-0z6kpuno
1•amichail•1h ago•0 comments

Brumby-14B-Base: The Strongest Attention-Free Base Model

https://manifestai.com/articles/release-brumby-14b/
5•cgel•1h ago•1 comments

Within-family heritability estimates for phenotypes from 500k sibling pairs

https://www.medrxiv.org/content/10.1101/2025.09.17.25336022v1
2•marojejian•1h ago•0 comments
Open in hackernews

Collins Aerospace: Sending text messages to the cockpit with test:test

https://www.ccc.de/en/disclosure/collins-aerospace-mit-test-test-textnachrichten-bis-ins-cockpit-senden
86•hacka22•11h ago

Comments

constantcrying•11h ago
Well, this is just standard Aerospace grade software. I would be surprised if you could find a single controller in an airplane without some trivial login credentials.

Exposing software like that to the internet is of course a completely insane step.

Jtsummers•10h ago
> Well, this is just standard Aerospace grade software.

This is a groundside problem, and perhaps it is insane to have it exposed to the open internet but it's not on the aircraft. It needs to be exposed to some network because the intent is that fleet controllers (airlines, or in this case Navy) use it to reach out to their aircraft wherever they may be.

That said, it absolutely fits the quality I've come to expect from IT systems developed by aerospace and defense companies.

2OEH8eoCRo0•10h ago
It meets all requirements! /s
zppln•9h ago
Aerospace have been dealing with /safety/ for a long time, /security/ is another matter...
deepsun•10h ago
Nowadays it's actually hard to not connect anything to internet. Better (and easier) to assume it's connected.
sumnole•9h ago
> Well, this is just standard Aerospace grade software

Can't be further from the truth. DOD software is given huge budgets where it's not surprising to see 3 separate teams performing QA for one software milestone. It's one of the few sectors that still plan software upfront waterfall style and implement strict procedures for traceability, change management, etc. Who else is using formal methods or safety critical stacks like ADA/Spark?

Jtsummers•9h ago
> Who else is using formal methods or safety critical stacks like ADA/Spark?

This is not actually as common as many people seem to believe. The mandate died almost two decades ago. DOD aircraft fly on Fortran, JOVIAL, C, and C++ more than Ada. And DOD IT systems are a clusterfuck.

> It's one of the few sectors that still plan software upfront waterfall style

That's not the good thing you seem to think it is.

Also, why do you call it ADA? It's not an acronym. Amusingly, SPARK is, or was, and you write it as "Spark". It originally stood for "SPADE Ada Kernel" and the language continues to be stylized as SPARK.

sumnole•7h ago
Pedantics aside, not much reasoning against quality. Perhaps I've lucked out, but I've worked in many sectors and do not at all agree with sentiment here about DOD software quality. There is significant formal investment/research in DOD to improve operations, including taking the best of practices in commercial. In my experience, the worst of software is written by teams with little experience improvising under Agile and taking on tech debt with no time/resources to get things done the right way.
Jtsummers•5h ago
Can you point to a successful Waterfall project? A multi-million or billion dollar, 3+ year software development effort where a team figured out all the requirements correctly before writing a single line of code. Where they wrote every line of code correctly before testing it. And where testing was so spectacularly successful that they didn't have to go back and renegotiate the project requirements or dates to get extensions or reduced project scope.

If you can do this, then I might believe you about Waterfall being the best approach out there.

Right now your counter example is "teams with little experience" which is not much of an argument. Teams with little experience fail all the time, because they are inexperienced. Give them a $100 million Waterfall project to plan and execute over 3+ years and their failure would be even more spectacular.

constantcrying•9h ago
You have to be kidding! Have you worked on any of these projects?

I wrote DO-178 Software, literally every single project I ever worked on has trivial login credentials.

>DOD software is given huge budgets where it's not surprising to see 3 separate teams performing QA for one software milestone. It's one of the few sectors that still plan software upfront waterfall style and implement strict procedures for traceability, change management, etc. Who else is using formal methods or safety critical stacks like ADA/Spark?

None of this matters or contradicts what I said. You will be able to get into it with user:root password:root or some variation. In all likelihood you will even find a requirement for this, which is of course verified.

If you apply the methodology practiced to a web application, the OP is exactly what you will get.

ghc•8h ago
LOL
Jtsummers•7h ago
You know, maybe you're right. It's possible that entire comment was meant as a joke. Poe's Law strikes again?
ghc•3h ago
As someone who lives the DoD software delivery process on a day-to-day basis, it's too on the nose to not be satire. Everything is _exactly_ wrong, even the waterfall part (everything's "agile" now!).

Edit: Never mind! I just saw their other comment and it seems more like they are blissfully ignorant of the reality on the ground.

downrightmike•8h ago
root:root
cactacea•11h ago
Interesting choice of tail number and date... https://www.faa.gov/lessons_learned/transport_airplane/accid...
netsharc•10h ago
Looks like the PDF is just to show what the messaging interface looks like, and what they've found as a publicly available screenshot is from the crash report involving that plane.

If they logged in, took a screenshot, and published that (even if lots of things are blurred), there's probably more attack surface for some three-letter-agency to bust down their doors and disappear them...

psunavy03•9h ago
I'll take "things that happen in movies a lot more than in real life" for $600 please.
avs733•10h ago
I would guess it limits their ability to be accused of anythign to pick a plane, flight, and time that meets at least three criteria:

1) no passengers on board - you can't be accussed of endangering passengers

2) long past - you can't be accused of anything that happened recently

3) the plan literally no longer exists - you can't be accussed of damaging a plane

tantalor•10h ago
> RTX did not respond to our vulnerability report

I guess they mean you should sell the vulnerability to highest bidder instead of reporting? Weird choice.

tjr•10h ago
Unfortunately, RTX did not respond to our vulnerability report. The account was disabled.

Some sort of acknowledgement of the report certainly would have been good here, but at least they did disable the account. I presume the reported vulnerability no longer exists.

noir_lord•6h ago
> but at least they did disable the account.

Probably added test2:test2.

Not worked in aerospace only enterprise but sometimes I worry I'm too cynical and then I remember the things I've seen and think I'm not cynical enough.

That said nothing I work on is aerospace level critical, could cost a lot of money if it's out but no one would ever have died.

deepsun•10h ago
They will respond after a year or two with a lawsuit and SWAT busting doors.
0_____0•9h ago
They're not in the US. I'm not familiar with German law enforcement practices but I wouldn't be surprised if they had a process that was a little less door-kicky.
BoredPositron•9h ago
Cybercrime is pretty door-kicky in germany and they usually keep all your gear for two years even if you are found not guilty...
stronglikedan•9h ago
According to my German friends, it's worse over there.
926372826282•7h ago
No door-kicking, just corrupt prosecutors, judges and police that do the regime's bidding without much spectacle.

State media goons with Nazi-tourette celebrating Kirk's murder and calling for murdering dissenters or arming the terrorist Lina Engel, no worries, the regime got them covered.

Call a minister of the regime a moron or quote them and you better have your bath robe ready when their henchmen break in the next morning.

Just google Norbert Bolz, Trusted Flaggers™, Mario Sixtus, Böhmermann, Schwachkopf Habeck and Hammerbande.

_trampeltier•7h ago
In germany linux dev get swated while live streaming.

https://news.ycombinator.com/item?id=41532098

rwmj•9h ago
Collins Aerospace, the same company responsible days of outages at airport check-in kiosks https://www.bbc.co.uk/news/articles/c3drpgv33pxo
Animats•7h ago
(2009)
pierrec•6h ago
No, this seems to be quite recent. At least the discovery, disclosure, and post are recent, as always, who knows how long the vulnerability has existed... I'll admit I was also confused because their "screenshots" is an old official document containing screenshots of the application in question, but it's just used to illustrate what the application is and does.