news newest ask show jobs

Open Source @Github

fp.

Open in hackernews

Alpine Linux Security advisory: OpenSSH-server password authentication bypass

https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/

52•pantalaimon•46m ago

Comments

throwa356262•20m ago

Discussion from a few hours ago:

https://news.ycombinator.com/item?id=50377221

NewJazz•7m ago

musl’s crypt() returns the string * as an error indicator when the key is over 256 bytes long. * is also exactly what the stored field contains for every account with no password, so the “hash” matches and the login succeeds.

Does anyone know why musl does this? Are they the only C library that behaves this way?

For a C library that famously tries to adhere to POSIX as much as possible, this seems like a crazy choice. From POSIX standard:

Upon successful completion, crypt() shall return a pointer to the encoded string. The first two bytes of the returned value shall be those of the salt argument. Otherwise, it shall return a null pointer and set errno to indicate the error.

https://pubs.opengroup.org/onlinepubs/9699919799/functions/c...

Your Cryptography Conspiracy Theory Is Wrong

https://soatok.blog/2026/10/29/your-cryptography-conspiracy-theory-is-wrong/

1•zdw•2m ago•0 comments

French blood storage impacted by freezer hacks

https://www.bbc.com/news/articles/c8vgxyvz6y9ro

1•Betelbuddy•3m ago•0 comments

NASA Announces X-70 Experimental Aircraft to Advance Flight Research

https://www.nasa.gov/news-release/nasa-announces-x-70-experimental-aircraft-to-advance-flight-res...

1•zdw•3m ago•0 comments

RIP Good Times

https://drive.google.com/file/d/1gjKE5g0G9x-ZeXxOORDK8ii9DVh8YtH4/view

1•hi•4m ago•0 comments

Scittle: Execute Clojure directly from browser script tags via SCI

https://github.com/babashka/scittle

1•theanonymousone•4m ago•0 comments

PsychonautWiki – A psychoactive substance and harm reduction encyclopedia

https://psychonautwiki.org/wiki/Main_Page

1•milkshift•4m ago•0 comments

Offline survival assistant – local LLM and Kiwix, runs from a USB stick

https://github.com/sdalberto/ia-da-sobrevivencia/blob/main/README.en.md

2•soloyo•5m ago•0 comments

Clordle: Wordle, but every answer is a Clojure function

https://github.com/Jimmysit0/clordle

1•theanonymousone•5m ago•0 comments

We can do better than line-buffered output

https://nullprogram.com/blog/2026/11/05/

2•zdw•5m ago•0 comments

Yes, You Can Pass a Nuclear Missile Driving on Interstate 80 Through Wyoming

https://cowboystatedaily.com/2026/11/04/yes-you-can-pass-a-nuclear-missile-driving-on-interstate-...

1•Bender•8m ago•0 comments

Replacemrr: Who Replaced Whose MRR

https://oioannou.com/blog/introducing-replacemrr/

1•oorestisime•9m ago•0 comments

Ask HN: In a world with AI agents how has software task estimation changed?

1•yalogin•11m ago•0 comments

Web platform support is returning to Unreal Engine

https://twitter.com/UnrealEngine/status/2117603978489811012

5•astlouis44•12m ago•0 comments

I Performed Forensics on a Server and It Got Somebody Fired

https://louwrentius.com/i-performed-forensics-on-a-server-and-it-got-somebody-fired.html

1•louwrentius•12m ago•0 comments

Show HN: QuanterLab, describe a trading strategy, watch it build in front of you

https://quanterlab.com/

1•serhatgirgin•13m ago•0 comments

Nordstjernen, Northstar, Southstar: minimalist webbrowsers in C and Rust

https://nordstjernen.org/

1•Propelloni•13m ago•1 comments

Show HN: I moved to Barcelona and outgrew Duolingo, so I built this

https://noentiendo.app

1•moritzme_•14m ago•0 comments

Show HN: PDF Reading, Annotation and Signing Inside Your Markdown Notes

https://blog.etherpk.com/pdf-reading-annotation-and-signing-inside-your-markdown-notes

1•gb2d_hn•14m ago•0 comments

Show HN: I built Postraid to help founders create social media content with AI

https://www.postraid.com

4•Z4cki•14m ago•2 comments

Show HN: Green tests are not proof – verifier for C/C++ and firmware fixes

https://unfix.dev/

1•u-pump•15m ago•0 comments

My boy filling out applications but My nieces and Daughter

https://twitter.com/WomanDefiner/status/2118053619790455016

1•bilsbie•17m ago•0 comments

Show HN: Droplis – a one click logic game

https://droplis.lalo.li/

2•franze•19m ago•0 comments

Hard to Fool: A bounded LLM research loop for quantitative finance

https://arxiv.org/abs/2611.06607

2•henryzhangpku•20m ago•0 comments

Post-Quantum Questions to Ask Your Vendors

https://www.cisa.gov/resources-tools/resources/post-quantum-questions-ask-your-vendors

1•dboreham•20m ago•0 comments

Show HN: Radio Dystopia

https://radiodystopia.com/

1•drcode•21m ago•0 comments

Software as a Garden

https://carllapierre.com/blog/software-as-a-garden

1•staffor•21m ago•0 comments

Mizu – zero-copy parallel R and Python over shared memory

https://github.com/shikokuchuo/pymizu

5•cscheid•21m ago•1 comments

A gleam implementation of Solitare encryption scheme

https://code.mfashby.net/solitare/file/src/solitare.gleam.html

1•speckx•22m ago•0 comments

Raising the bar for 8 GB Windows 11 PCs: what's improved and how to get it

https://blogs.windows.com/windowsexperience/2026/11/03/raising-the-bar-for-8-gb-windows-11-pcs-wh...

2•taubek•22m ago•0 comments

Show HN: EpubCC, PDF to ePub that beats Calibre on 14/19 PDFs (loses on Arabic)

https://epubcc.com/

1•lou_alcala•22m ago•0 comments