frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Railway Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
211•passenger•1h ago•88 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
635•ejohnso49•7h ago•311 comments

GitLab Critical Patch Release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
212•artooro•4h ago•48 comments

No More Icons in Every Menu by Default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
117•riffraff•1d ago•83 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
408•abhisek•9h ago•126 comments

Google's Rust Style Guide

https://google.github.io/styleguide/rustguide.html
156•kaycebasques•4h ago•98 comments

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
816•hkc•14h ago•392 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
116•khalidkhair•1d ago•82 comments

Claude Duet

https://claude.com/product/claude-duet
283•kuberwastaken•4h ago•237 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
306•cbg0•5h ago•180 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
350•nnx•9h ago•43 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
222•nr378•9h ago•146 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
137•bryanrasmussen•1d ago•25 comments

Code is clay now

https://www.albertodenia.com/writing/code-is-clay-now
60•albertodenia•2d ago•29 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
476•aaronbrethorst•6h ago•283 comments

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

https://aws.amazon.com/security/security-bulletins/2026-143-aws/
91•hayd•2h ago•22 comments

The Rise and Fall of the Plasma Screen

https://www.construction-physics.com/p/the-rise-and-fall-of-the-plasma-screen
14•surprisetalk•2d ago•9 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
214•armcat•10h ago•94 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
163•surprisetalk•8h ago•79 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
91•giuliomagnifico•7h ago•31 comments

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
954•tuyuri•9h ago•528 comments

CleanFrame: A quieter home screen for Samsung The Frame

https://github.com/nthnclrk/CleanFrame
16•ingve•2h ago•2 comments

Claude Duet

https://claude.com/resources/articles/claude-duet
52•zaevlad•4h ago•6 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
44•simfinii•16h ago•20 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
123•raahelb•10h ago•75 comments

Canary Tokens

https://canarytokens.org/
120•wiradikusuma•4h ago•21 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
110•scottfalconer•2d ago•115 comments

The bridge to agent-scale Git infrastructure

https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastru...
53•Klaster_1•7h ago•16 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•11h ago

A Place Among the Fiddlers

https://longreads.com/2026/10/01/galax-old-fiddlers-convention-music/
18•gmays•1d ago•0 comments
Open in hackernews

Finding a Bug in Chromium

https://bou.ke/blog/chromium-bug/
65•bouk•1y ago

Comments

rvz•1y ago
Great technical post, however:

> At Monumental we’ve building robots to automate construction, starting with masonry.

If you thought running to construction jobs was safe, well thanks to Monumental, it soon won't be.

The end goal is to achieve a 10% increase of global unemployment by the latest 2035 and 40% of employers anticipate reducing their workforce where AI can automate tasks by the 2030 deadline according to the WEF 2025 Future of Jobs report. [0]

Worse if earlier.

[0] https://www.weforum.org/publications/the-future-of-jobs-repo...

TheDong•1y ago
And according to OSHA, construction jobs account for more fatal injuries than any other job, so in a sense they're saving lives by reducing the number of dangerous jobs.

We've already managed to handle the desire to keep the sham of "jobs are a necessary part of life for everyone who isn't ultra-wealthy" going via Bullshit Jobs, we can keep inventing more Bullshit Jobs.

Heck, we probably both work Bullshit Jobs. Do we really need 20 different companies, all with thousands of employees, optimizing ad-impressions to make teenagers want to drink coke and buy nike shoes?

Do we really need 10 different "uber for pet-sitting your turtle" apps?

Each failed startup was, in reality, a large bag of bullshit jobs that transferred money from the VCs to bullshit-job workers, who's to say those people couldn't be ex construction workers?

Cthulhu_•1y ago
Given the author's name, he's Dutch which does use a lot of brick in their houses... for decoration, it's concrete blocks with prefab brick facades for at least two decades now, built by robots. See for example https://www.bouwtotaal.nl/2021/10/prefab-gevelelementen-voor...

The demand for housing and thus construction workers isn't going down any time soon; the Netherlands alone needs to build a million homes in the next decade and are running behind on that. Brick walls is just one task of many in a construction project, just like your JIRA or Github ticket is just one task of many in a software project.

bouk•1y ago
Prefab stone strips are used here and there but most brick facades are still built by hand on-site.

There's a huge shortage of workers, which is why we're working on this.

pjmlp•1y ago
Cooking and serving at tables also won't be an excape route, given that there are already kitchen and waitresses robots.

We are really going into a dystopian world, unless there is some event that disrupts the roadmap to drive everyone into unemployment, besides a few elite folks that get to profit from the robots.

The generations to come will have much more to worry about than climate, also note how all the ongoing wars, geopolitcs change back to cold war days, and AI race has made everyone forget about the planet.

Forcing us to use paper straws and wood cuttlery won't save us.

charcircuit•1y ago
My first guess would be that this early return is always happening after entering the bugged state. The one cleanup task could get stuck or not cleanup after itself properly.

    // Only one cleanup task is posted at a time.
    if (!HasDirtyJSFinalizationRegistries() || is_finalization_registry_cleanup_task_posted_) {
      return;
    }
https://source.chromium.org/chromium/chromium/src/+/main:v8/...
bouk•1y ago
Ah this makes a lot of sense, perhaps the posted flag doesn't get reset e.g. if this branch gets followed: https://source.chromium.org/chromium/chromium/src/+/main:v8/...
syg•1y ago
Yeah this is the bug. My bad, will fix.
donatj•1y ago
Hey! I too just filed my first Chromium bug[1]! They changed a behavior that broke opening new windows with tabs, and thus broke my advanced tab search extension Tabasco[2].

I was frankly impressed by the experience. They had me create a minimal extension illustrating the issue and were very quickly able automate a bisection that found its root, a security fix somewhat bluntly resolved. They've supposedly fixed the issue in an upcoming release I await with bated breath.

- [1] https://issues.chromium.org/issues/405283740

- [2] https://chromewebstore.google.com/detail/tabasco-advanced-ta...

tester756•1y ago
>FinalizationRegistry

>Avoid where possible

>Correct use of FinalizationRegistry takes careful thought, and it's best avoided if possible. It's also important to avoid relying on any specific behaviors not guaranteed by the specification. When, how, and whether garbage collection occurs is down to the implementation of any given JavaScript engine. Any behavior you observe in one engine may be different in another engine, in another version of the same engine, or even in a slightly different situation with the same version of the same engine. Garbage collection is a hard problem that JavaScript engine implementers are constantly refining and improving their solutions to.

Kinda tricky API

ketanhwr•1y ago
> A conforming JavaScript implementation, even one that does garbage collection, is not required to call cleanup callbacks.

Really looking forward to the "Explicit Resource Management" proposal[0] that sounds like a much better idea really.

[0]: https://github.com/tc39/proposal-explicit-resource-managemen...

panstromek•1y ago
Hm.. I would honestly try to avoid relying on finalization mechanism of a garbage collector like this. It sounds brittle from the start. Even without the bug, I can imagine you can get into a situation where some unused JS object holds a reference to a giant thing in wasm memory, but engine doesn't run the GC, because it technically doesn't know that, it only sees the little pointer object which seems small.

I think WASM had historically had some problem with freeing memory, so I'd probably rather rely on some pooling or arena with explicit memory size limit (for the whole allocated wasm memory).