frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Evolving Threat: http2shell is an RCE in node, Python, and more

https://nitter.click/AikidoSecurity/status/2113759110625906950?__galadriel=lPmlGl9id4oAd5UeBwMhlYKArHyr6lR2IDGujPwB5HV2kQ1aLoPWFd5A9sGuzNcmrp8fUso8qygmHcKTDZ8MNHWqQ3bDJcycV87xp_0VypzQLYj6O_RRHlZuQqj33oASGY2YLSoAiMjeOZN40h7Stf8AG7DPrGZbAPVKUXy36HoMudRbvwF3_r2uYNmfJMhpKzywQDM6Ab8
32•cowlevel•1h ago

Comments

cowlevel•1h ago
Likely mitigation: disable brotli (br) content-encoding on both sides
profdevloper•42m ago
https://x.com/AikidoSecurity/status/2113759110625906950
adzm•32m ago
Interestingly the commit that fixes this in brotli dates back to February https://github.com/google/brotli/commit/0ed4268a4401abcb4472...
Sytten•23m ago
Since I checked Rust servers should be fine since the brotli crate is not a binding on the C.
rvanlaar•14m ago
It looks like brotli <= 1.2.0 is vulnerable.

The python package has already been updated to 1.2.1. https://pypi.org/project/brotli/1.2.1/

QuadmasterXLII•8m ago
is flask hello world with gunicorn behind apache vulnerable?
DogeGode•1m ago
Another day, another buffer-overflow vulnerability in C code …

Conway's Law

https://en.wikipedia.org/wiki/Conway%27s_law
1•lukeplato•3m ago•0 comments

An insulting cheat code showed up in the wrong Sega Genesis game

https://32bits.substack.com/p/under-the-microscope-dynamite-headdy
1•bbayles•4m ago•1 comments

In the world AI, will individual apps become obsolete?

1•modus73•5m ago•0 comments

AI in UX: Work Is Faster, but Practitioners Have Mixed Feelings

https://www.nngroup.com/articles/ai-in-ux-survey-26/
2•elwingo1•11m ago•0 comments

Connection Statistics

https://statistics-emudhra.we-have-a-problem.com/
1•dazld•11m ago•0 comments

Texas Attorney General Sues OpenAI, CEO Sam Altman over ChatGPT Safety

https://texasscorecard.com/state/paxton-sues-openai-ceo-sam-altman-over-chatgpt-safety/
2•felineflock•12m ago•0 comments

NadY: Photo-based calorie and macro tracker for iOS

https://apps.apple.com/us/app/nady-ai-calorie-photo-track/id6740164035
1•UniversalSDK•16m ago•0 comments

Algernon – A B2B compliance and security oracle for AI agents on Base via x402

https://github.com/tobiaslofton/algernon-x402-oracle
2•algernontech•17m ago•0 comments

Show HN: Task-view – review a coding agent’s change as a map instead of a diff

https://github.com/gtindo/task-view
1•gtindo•31m ago•0 comments

How nervous are bond markets about France?

https://www.ft.com/content/9aa4549e-26f4-4963-94eb-50cf0fc0b8f9
4•JumpCrisscross•32m ago•0 comments

Poor Man's Claude Pro – All the code you'll ever need for $20 per month

https://bweller.me/write-all-the-code-youll-ever-need-from-your-phone-for-20-per-month/
2•bweller•34m ago•0 comments

Show HN: Hold My Docs – a self-hosted wiki that stores pages in Git

https://github.com/soollabs/holdmydocs
1•broadben12•36m ago•1 comments

Valheim Seed Map Viewer for Valheim – Walheim Wiki

https://valheimwiki.net/en/seed-map
1•mario22•39m ago•1 comments

SpaceX in Talks to Access 80k Cell Sites for Wireless Network

https://finance.yahoo.com/technology/articles/spacex-talks-access-80-000-213142634.html
2•TMWNN•40m ago•0 comments

The Factory in Phoenix That Could Save American Manufacturing

https://www.nytimes.com/2026/10/23/opinion/ai-computer-chips-semiconductor-arizona-industry.html
1•osnium123•47m ago•1 comments

I failed every LeetCode interview

https://write.as/m5g5r26qo5wt7
5•garn810•50m ago•3 comments

Veritas Villages – libertarian intentional communities in Latin America

https://gst.artofliberty.org/veritas-villages-libertarian-intentional-communities-in-latin-america/
3•mateusfreira•51m ago•1 comments

OpenAI found a critical flaw in Brotli (used by Node.js, Bun and Envoy)

https://twitter.com/OpenAI/status/2113766354386084338
1•shenli3514•56m ago•1 comments

Blue Planet III features cloudier footage to prove authenticity amid AI boom

https://www.theguardian.com/media/2026/oct/24/blue-planet-iii-cloudier-footage-prove-authenticity...
1•rdmuser•56m ago•0 comments

Roadie: Classic WinAmp on macOS with Music Assistant

https://roadie.sstools.co/
1•smallsharptools•59m ago•1 comments

Why AIs Can't Read?

https://blog.vladi.dev/en/articles/por-que-ias-nao-podem-ler.html
1•vdietrich•1h ago•0 comments

Show HN: OpenZPL. Render Zebra ZPL Labels to PNG/PDF, Drop-In for Labelary

https://openzpl.com/
1•lou_alcala•1h ago•2 comments

If Intelligence Is Getting Cheap, What Remains Expensive?

https://twitter.com/prathiknaidu/status/2112928049935118493
1•gmays•1h ago•0 comments

Claude Code will refuse to fill in passwords or use a password manager

https://github.com/anthropics/claude-code/issues/65358
2•txomon•1h ago•0 comments

NASA updates lander plans for Moon landings

https://arstechnica.com/space/2026/10/nasa-updates-lander-plans-for-moon-landings-finally-solves-...
3•sandyarmstrong•1h ago•2 comments

Soma – memory and proofs for AI agents, measured not asserted

https://github.com/mrpkk/soma-protocol
1•vnutrivas•1h ago•0 comments

Evolving Threat: http2shell is an RCE in node, Python, and more

https://nitter.click/AikidoSecurity/status/2113759110625906950?__galadriel=lPmlGl9id4oAd5UeBwMhlY...
32•cowlevel•1h ago•7 comments

Netomi

https://www.netomi.com/
1•handfuloflight•1h ago•0 comments

I built an alternative to Raindrop and Pocket

https://github.com/bookmarkforge/bookmarkforge-core
1•bookmarkforge•1h ago•0 comments

Show HN: Gasfree.app a Rack of Synthetizers in the Browser

https://gasfree.app/
1•tamat•1h ago•0 comments