frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Creativity with AI vs. IRL (video production)

https://www.geekbeard.dev/p/ai-creativity-effort
1•drunx•1m ago•0 comments

FBI's "Suicide Letter" to Dr. Martin Luther King, Jr (2014)

https://www.eff.org/deeplinks/2014/11/fbis-suicide-letter-dr-martin-luther-king-jr-and-dangers-un...
1•chistev•1m ago•1 comments

Coconut Ventures: A game where you start your own VC Fund in Bengaluru

https://www.coconutventures.in/
1•Anunayj•1m ago•1 comments

AI Agent Traps (DeepMind)

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6372438
1•armcat•2m ago•0 comments

C++: Growing in a world of competition, safety, and AI (herb-sutter) [pdf]

https://becpp.org/Symposium2026/material/BeCPP%20-%202026-03-30%20-%20Herb%20Sutter%20-%20C++%20G...
1•signa11•2m ago•0 comments

M 7.4 – 100 km ENE of Miyako, Japan

https://earthquake.usgs.gov/earthquakes/eventpage/us6000sri7/executive
1•spacejunkjim•3m ago•0 comments

Next.js developer Vercel warns of customer credential compromise

https://www.theregister.com/2026/04/20/vercel_context_ai_security_incident/
1•omer_k•4m ago•0 comments

Dethroned by AI

https://jigarkdoshi.bearblog.dev/dethroned/
1•j_juggernaut•6m ago•0 comments

The Process Is the Art

https://animationobsessive.substack.com/p/the-process-is-the-art
1•vinhnx•12m ago•0 comments

Operator-Use

https://github.com/CursorTouch/Operator-Use
1•jeomon•19m ago•1 comments

I revived Encarta's Mindmaze and added a new game teaching how to build chips

https://laurentiu-raducu.medium.com/i-added-games-to-select-supply-and-heres-why-bc6db06f8bd4
1•laurentiurad•19m ago•1 comments

How to hire people who are better than you

https://longform.asmartbear.com/hire-better-than-you/
1•doppp•19m ago•0 comments

Tracking when Trump chickens out

https://www.thetacotracker.com/
4•JMiao•25m ago•0 comments

Trusteando Protocol for a new semantic web

https://github.com/confidencenode/Trusteando_Protocol
1•Trusteando•28m ago•0 comments

Jammermfg1

https://www.jammermfg.com/fr/
1•gitana•30m ago•0 comments

AI Tutor

http://66.179.255.201/aitutor
1•mraza_uw•31m ago•0 comments

Farm Bankruptcies Continued to Climb in 2025

https://www.fb.org/market-intel/farm-bankruptcies-continued-to-climb-in-2025
2•luu•31m ago•0 comments

Deleteduser.com a $15 PII Magnet

https://mike-sheward.medium.com/deleteduser-com-a-15-pii-magnet-c4396eb21061
3•edent•34m ago•0 comments

OpenClaw isn't fooling me. I remember MS-DOS

https://www.flyingpenguin.com/build-an-openclaw-free-secure-always-on-local-ai-agent/
3•feigewalnuss•36m ago•0 comments

The Monday Elephant #1: pgweb

https://pgdash.io/blog/monday-elephant-postgres-tips-1.html?h
1•i_have_to_speak•37m ago•0 comments

What Claude Code Chooses

https://amplifying.ai/research/claude-code-picks/report
1•lionkor•38m ago•0 comments

Voicebox – The open-source voice synthesis studio

https://github.com/jamiepine/voicebox
1•sebakubisz•41m ago•0 comments

Agentic Development Workflow in Emacs

https://20y.hu/~slink/journal/agent-shell/index.html
1•b6dybuyv•42m ago•0 comments

HN: Vynly Social network for AI agents, with MCP server and demo token

https://vynly.co/agents
1•nftdude2024•44m ago•0 comments

AI Agents replacing mid-management, not developers

https://dontdos.substack.com/p/what-if-the-robots-came-for-the-org
3•sirnicolaz•45m ago•1 comments

Snake Bros Keep Getting Bitten by Their Lethal Pets. Only Zoos Can Save Them

https://www.wired.com/snake-bros-antivenom-index-zoos-influencers-chris-gifford/
1•robtherobber•46m ago•0 comments

We taught AI to write correct streaming SQL

https://github.com/risingwavelabs/agent-skills
1•WavyPeng•47m ago•0 comments

French Mobile Network Datasets

https://tech.marksblogg.com/france-open-mobile-network-data.html
2•marklit•48m ago•0 comments

The 800 page book that made me a web dev

1•wuhhh•50m ago•0 comments

Everything you ever wanted to know about terminals (but were afraid to ask)

https://xn--rpa.cc/irl/term.html
2•Antibabelic•54m ago•0 comments
Open in hackernews

Claude Opus wrote a Chrome exploit for $2,283

https://www.theregister.com/2026/04/17/claude_opus_wrote_chrome_exploit/
18•Mohansrk•2d ago

Comments

pingou•1d ago
I know most people here hate that, but I think this makes a much stronger case for security by obscurity (not releasing the source code) in these changing times.

Of course security by obscurity by itself is by no mean sufficient.

RadiozRadioz•1d ago
This is assuming that project owners and good actors won't also be using LLM tools to protect open code.

Open does not mean vulnerable, open simply means it's a more obvious cat-and-mouse game.

pingou•1d ago
I absolutely assume that project owners will use LLM tools to protect themselves, but it seems like it whoever spends more will find more security issues. And potentially a malicious actor could decide to spend more tokens on one specific part of the program, while the owner has to protect everything. I think with open source the idea is that there are more eyes looking at the potential problems, and more of those eyes are benevolent, but LLM change that as it's not about the number of people but whoever is ready to spend the most resources.
iugtmkbdfil834•1d ago
I think part of the concern is that it turns into truly unmaintainable arms that might evolve in some unpredictable ways with potential branches like:

- a lot of open source goes closed source to increase security - open source is effectively forced to use LLM to keep up

I am not really arguing against it, because I understand the arguments on both ends and I am not sure what a good solution here is.

whynotmaybe•1d ago
How?

In the 90's most software was closed source but cracks/trainer were always available.

Even for Rayman that had multiple (26?) cd-check during the game.

Security is mainly slowing the attacker because there's a maximum amount of stuff a human can do in 24hours. But now if you can simulate thousands of human attacking a system in different ways, it will crack.

Just like many stores have lock on their doors and, insurance if someone breaks the lock.

I'm guessing data security insurance will become a huge market in the years to come.

pingou•1d ago
Aren't we in agreement then? Taking your lock analogy again, people don't put locks on their bikes because they protect them completely, but because they slow down someone who wants to steal them. Given enough resources everything will be cracked, it doesn't mean that making it harder is useless. People cracking games in the 90's may not have had the source code but they had the machine code and knew what to look for and where.
localhoster•1d ago
> "A week of back and forth, 2.3 billion tokens, $2,283 in API costs, and about ~20 hours of me unsticking it from dead ends. It popped calc."

Corrent me if I'm wrong, I'm not a security researcher, but 20 hours, a week of work, 2283$ spent and over 2 trillion tokens, is not very 10x-ing as we were promised. Especially if you take into account that the guy is at least half capable for this take.

I dunno

0xy•1d ago
Chrome exploits (obviously that can be used to compromise people) go for $1,000,000 on the black market so anything cheaper than that to generate is impressive.
BearOso•1d ago
This was using an exploit already fixed in a recent version and publicly known. It's worthless on the black market or as a bug bounty.
Mohansrk•2h ago
it is not worthless unfortunately! the point of whole blog is about patch gaps in chromium ecosystem.
Mohansrk•2h ago
people who can do this is supply constrained, now you can throw tokens at the problem and with nudging towards the goal you can get working exploit much faster, its probably not 10x but way faster than before
ofjcihen•1d ago
This has been what I’ve been screaming from the rooftops for a while, that these models can already do this.

Go read the devs actual blog though. This is more a statement on patch lag than anything else. In my mind that’s much more important than “zomg zero days!!!”

jdndnejdn•1d ago
A security researcher instructed an LLM to write an exploit for a know bug fixed in an already published release

Not really impressive