frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Kagi Search for Everyone

https://kagi.com/changelog
320•elashri•2h ago•166 comments

MS Paint Remote Code Execution Vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-83844
184•kuberwastaken•2h ago•49 comments

sshole

https://sshhole.com
2182•josemrb•10h ago•553 comments

Claude Code sends your email address to websites

https://github.com/anthropics/claude-code/issues/107757
102•motoroco•44m ago•21 comments

Alpine Linux Security Advisory: OpenSSH-server password authentication bypass

https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
534•pantalaimon•8h ago•105 comments

The Hackintosh Reborn

https://www.naut.ca/blog/2026/11/05/the-hackintosh-reborn-with-ai/
147•rubatuga•3h ago•57 comments

Tencent Launches Hy4, One of the Leading Open-Source AI Models

https://www.tencent.com/tencent-launches-hy4-joining-the-ranks-of-the-worlds-leading-open-source-...
56•gmays•2h ago•1 comments

Window Sweaters

https://github.com/saragordic/window-sweaters
205•nickswalker•6h ago•72 comments

Goodbye from Salon

https://www.salon.com/2026/11/05/goodbye-from-salon/
297•mkeeter•2h ago•104 comments

The Cost of Blogging

https://onlinegoddess.net/2026/11/the-cost-of-blogging/
30•speckx•2h ago•25 comments

Motorola Signature 27 with GrapheneOS support

https://motorolanews.com/motorola-signature-27-2/
357•monneyboi•7h ago•268 comments

Launch HN: Rivet (YC W23) – Scale and Orchestrate Agents on S3

https://github.com/rivet-dev/rivet
66•NathanFlurry•5h ago•34 comments

September in Servo: <progress>, rounded rectangles, and more

https://servo.org/blog/2026/11/05/september-in-servo/
164•iamnothere•8h ago•41 comments

Download your favourite YouTube videos

https://criminallyvulgar.dev/you-should-absolutely-download-your-favourite-youtube-videos/
244•surprisetalk•10h ago•110 comments

My psychophysics as a bilateral cochlear implant user

https://claude.ai/artifact/L8qsMc3SorytGW3LA81nYf
149•mi-rae•6h ago•45 comments

Introducing Pangram Image 1.0

https://www.pangram.com/blog/introducing-pangram-image-1-0
30•gmays•3h ago•2 comments

I wish tech companies knew more about me

https://rakhim.exotext.com/i-wish-tech-companies-knew-more-about-me
258•freetonik•9h ago•233 comments

Bild AI (YC W25) Is Hiring Founding Product Engineers

https://www.ycombinator.com/companies/bild-ai/jobs
1•rooppal•6h ago

$2.5T has been wiped from US stocks

https://finlaws.substack.com/p/25t-has-been-wiped-from-us-stocks
80•madihaa•1h ago•59 comments

OpenSSH 10.6p2 Critical workaround for alpine without PAM

https://www.openssh.org/releasenotes.html#10.6p2
229•selckin•11h ago•11 comments

Show HN: A decent text-to-image model trained for ~$20K (Apache 2.0 Weights)

https://www.linum.ai/field-notes/pjit-21k
116•schopra909•1d ago•13 comments

Obscure audio codec is a perfect fit for the N64

https://phoboslab.org/log/2026/11/n64-ulc-codec
168•frostbyte7•10h ago•19 comments

The Stacks Project, Formalized in Lean

https://axiommath.ai/research/the-stacks-project-formalized/
59•namanbnsl•6h ago•13 comments

GPT-6 Astra covertly underperforms on safety research

https://alignment.openai.com/misalignment-reports/covert-underperformance-on-safety-research-tasks/
268•lucrbvi•15h ago•142 comments

MCP Explained

https://mcp-explained.com/
215•rwilinski•8h ago•108 comments

Hungary: Communist-era files released, up to 60k former agents revealed

https://www.euronews.com/2026/11/04/hungary-communist-era-files-opened-up-to-60000-former-agents-...
103•rdmuser•3h ago•22 comments

The Lisp curse, now coming to your ecosystem

https://javahippie.net/programming/llm/2026/03/05/the-lisp-curse-coming-to-your-ecosystem.html
186•marcolinux•2d ago•139 comments

Show HN: Stroq – a local audit of what your coding agent did and why

https://github.com/AGGIB/Stroq
56•agybay_07•7h ago•11 comments

We can do better than line-buffered output

https://nullprogram.com/blog/2026/11/05/
84•zdw•7h ago•8 comments

Baidu released ERNIE 5.5 Flash Base

https://ernie.baidu.com/release/ernie-5-5-flash-base/
162•pretext•13h ago•90 comments
Open in hackernews

Finding a Bug in Chromium

https://bou.ke/blog/chromium-bug/
65•bouk•1y ago

Comments

rvz•1y ago
Great technical post, however:

> At Monumental we’ve building robots to automate construction, starting with masonry.

If you thought running to construction jobs was safe, well thanks to Monumental, it soon won't be.

The end goal is to achieve a 10% increase of global unemployment by the latest 2035 and 40% of employers anticipate reducing their workforce where AI can automate tasks by the 2030 deadline according to the WEF 2025 Future of Jobs report. [0]

Worse if earlier.

[0] https://www.weforum.org/publications/the-future-of-jobs-repo...

TheDong•1y ago
And according to OSHA, construction jobs account for more fatal injuries than any other job, so in a sense they're saving lives by reducing the number of dangerous jobs.

We've already managed to handle the desire to keep the sham of "jobs are a necessary part of life for everyone who isn't ultra-wealthy" going via Bullshit Jobs, we can keep inventing more Bullshit Jobs.

Heck, we probably both work Bullshit Jobs. Do we really need 20 different companies, all with thousands of employees, optimizing ad-impressions to make teenagers want to drink coke and buy nike shoes?

Do we really need 10 different "uber for pet-sitting your turtle" apps?

Each failed startup was, in reality, a large bag of bullshit jobs that transferred money from the VCs to bullshit-job workers, who's to say those people couldn't be ex construction workers?

Cthulhu_•1y ago
Given the author's name, he's Dutch which does use a lot of brick in their houses... for decoration, it's concrete blocks with prefab brick facades for at least two decades now, built by robots. See for example https://www.bouwtotaal.nl/2021/10/prefab-gevelelementen-voor...

The demand for housing and thus construction workers isn't going down any time soon; the Netherlands alone needs to build a million homes in the next decade and are running behind on that. Brick walls is just one task of many in a construction project, just like your JIRA or Github ticket is just one task of many in a software project.

bouk•1y ago
Prefab stone strips are used here and there but most brick facades are still built by hand on-site.

There's a huge shortage of workers, which is why we're working on this.

pjmlp•1y ago
Cooking and serving at tables also won't be an excape route, given that there are already kitchen and waitresses robots.

We are really going into a dystopian world, unless there is some event that disrupts the roadmap to drive everyone into unemployment, besides a few elite folks that get to profit from the robots.

The generations to come will have much more to worry about than climate, also note how all the ongoing wars, geopolitcs change back to cold war days, and AI race has made everyone forget about the planet.

Forcing us to use paper straws and wood cuttlery won't save us.

charcircuit•1y ago
My first guess would be that this early return is always happening after entering the bugged state. The one cleanup task could get stuck or not cleanup after itself properly.

    // Only one cleanup task is posted at a time.
    if (!HasDirtyJSFinalizationRegistries() || is_finalization_registry_cleanup_task_posted_) {
      return;
    }
https://source.chromium.org/chromium/chromium/src/+/main:v8/...
bouk•1y ago
Ah this makes a lot of sense, perhaps the posted flag doesn't get reset e.g. if this branch gets followed: https://source.chromium.org/chromium/chromium/src/+/main:v8/...
syg•1y ago
Yeah this is the bug. My bad, will fix.
donatj•1y ago
Hey! I too just filed my first Chromium bug[1]! They changed a behavior that broke opening new windows with tabs, and thus broke my advanced tab search extension Tabasco[2].

I was frankly impressed by the experience. They had me create a minimal extension illustrating the issue and were very quickly able automate a bisection that found its root, a security fix somewhat bluntly resolved. They've supposedly fixed the issue in an upcoming release I await with bated breath.

- [1] https://issues.chromium.org/issues/405283740

- [2] https://chromewebstore.google.com/detail/tabasco-advanced-ta...

tester756•1y ago
>FinalizationRegistry

>Avoid where possible

>Correct use of FinalizationRegistry takes careful thought, and it's best avoided if possible. It's also important to avoid relying on any specific behaviors not guaranteed by the specification. When, how, and whether garbage collection occurs is down to the implementation of any given JavaScript engine. Any behavior you observe in one engine may be different in another engine, in another version of the same engine, or even in a slightly different situation with the same version of the same engine. Garbage collection is a hard problem that JavaScript engine implementers are constantly refining and improving their solutions to.

Kinda tricky API

ketanhwr•1y ago
> A conforming JavaScript implementation, even one that does garbage collection, is not required to call cleanup callbacks.

Really looking forward to the "Explicit Resource Management" proposal[0] that sounds like a much better idea really.

[0]: https://github.com/tc39/proposal-explicit-resource-managemen...

panstromek•1y ago
Hm.. I would honestly try to avoid relying on finalization mechanism of a garbage collector like this. It sounds brittle from the start. Even without the bug, I can imagine you can get into a situation where some unused JS object holds a reference to a giant thing in wasm memory, but engine doesn't run the GC, because it technically doesn't know that, it only sees the little pointer object which seems small.

I think WASM had historically had some problem with freeing memory, so I'd probably rather rely on some pooling or arena with explicit memory size limit (for the whole allocated wasm memory).