frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Railway Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
227•passenger•1h ago•102 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
639•ejohnso49•8h ago•316 comments

GitLab Critical Patch Release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
217•artooro•4h ago•51 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
412•abhisek•9h ago•129 comments

Google's Rust Style Guide

https://google.github.io/styleguide/rustguide.html
161•kaycebasques•4h ago•103 comments

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
821•hkc•14h ago•393 comments

No More Icons in Every Menu by Default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
121•riffraff•1d ago•90 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
117•khalidkhair•1d ago•83 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
313•cbg0•6h ago•189 comments

Claude Duet

https://claude.com/product/claude-duet
288•kuberwastaken•4h ago•242 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
353•nnx•9h ago•43 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
224•nr378•9h ago•146 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
138•bryanrasmussen•1d ago•25 comments

Code is clay now

https://www.albertodenia.com/writing/code-is-clay-now
62•albertodenia•2d ago•29 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
480•aaronbrethorst•6h ago•287 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
218•armcat•11h ago•94 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
164•surprisetalk•8h ago•79 comments

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

https://aws.amazon.com/security/security-bulletins/2026-143-aws/
93•hayd•2h ago•22 comments

The Rise and Fall of the Plasma Screen

https://www.construction-physics.com/p/the-rise-and-fall-of-the-plasma-screen
15•surprisetalk•2d ago•11 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
93•giuliomagnifico•7h ago•32 comments

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
955•tuyuri•10h ago•529 comments

There isn't an easy exploit for this PHP vulnerability

https://eliastaylor.com/noexploit/
3•zkldi•42m ago•1 comments

CleanFrame: A quieter home screen for Samsung The Frame

https://github.com/nthnclrk/CleanFrame
17•ingve•2h ago•2 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
125•raahelb•10h ago•78 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
44•simfinii•17h ago•20 comments

Canary Tokens

https://canarytokens.org/
124•wiradikusuma•5h ago•21 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
110•scottfalconer•2d ago•116 comments

Claude Duet

https://claude.com/resources/articles/claude-duet
54•zaevlad•4h ago•6 comments

The bridge to agent-scale Git infrastructure

https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastru...
53•Klaster_1•7h ago•15 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•11h ago
Open in hackernews

New Tool: lsds – List All Linux Block Devices and Settings in One Place

https://tanelpoder.com/posts/lsds-list-linux-block-devices-and-their-config/
101•mfiguiere•1y ago

Comments

DonHopkins•1y ago
I always wanted the /dev/zero character device driver, which you can map into memory to clear it, or use as an infinite source of nulls, to use the minor node number as the value that got mapped into memory or produced, so you could make an infinite source of beeps with:

mknod /dev/seven c 1 7

I wonder what would happen if you made a /dev/seven device in your http servers public_html directory? Would it dutifully serve it up?

Better yet, support for utf-8 unicode, so you can make an infinite source of poo emojis.

The "Everything Is A File" philosophy should be taken to its logical conclusion.

dlt713705•1y ago
Awesome! That actually inspired me to code this: https://codeberg.org/mco-system/pooper
don-code•1y ago
I challenge anyone to find another place on the Internet where one person's joke is another person's kernel module.
tanelpoder•1y ago
Astute observation, but also CrowdStrike would like a word :-)
xerxes901•1y ago
Question: what actually reads /etc/pooper to configure the character? I can’t work out how that file’s contents ends up as module parameters and I’d love to know!
dlt713705•1y ago
You are absolutely right, the /etc/pooper file was never loaded.

The code has been updated and now you can change the pooped char on the fly with something like :

`echo "<WHATEVER UTF-8 CHAR>" | sudo tee /sys/module/pooper/parameters/char_utf8`

/etc/pooper file and module unload/reload are no more needed :)

xerxes901•1y ago
Thanks for clarifying, and implementing this essential feature!
DonHopkins•1y ago
Finally somebody who gives a shit! Thank you for dropping that generous contribution.

Now I can use that device as an RSS feed! That puts the log into blog.

I haven't seen that much shit emerge from a wormhole since the Ed the Happy Clown episode of Yummy Fur comics:

https://everything2.com/node/1485685?bookmark_site=twitter&o...

>We now skip back in time a little, where we find Ronald Reagan before his mysterious transformation. He presides over an America that has no concept of toilets, and piles of feces on every street corner are becoming a serious problem. Fortunately, science can help; a farmer has stumbled across a small portal to another dimension. The solution is clear; push America's mounting shit through the portal via a huge funnel. The exit point for the portal is in fact the anus of the gentleman who couldn't stop shitting back in the prison in Ed's world; so there is at least a good scientific explanation for that little episode.

>During the official opening of the shit disposer, Reagan tragically falls into the giant collection of pending waste. His body blocks the funnel, but not before his head has gone through the portal; a headless president is recovered. A scientist heads though the portal on a rescue mission.

>(Now, I know what you're thinking, and I've no idea how Reagan's head became attached to the end of Ed's penis. It makes no sense, even within the logic of Ed's universe, and it's not explained. If you have any notions, please let me know - but for now, we'll just have to accept that somehow, it happened...)

The Chester Brown Interview:

https://www.tcj.com/the-chester-brown-interview/3/

Best NSFW Ronald Reagan Quote Ever:

https://the-comics-journal.sfo3.digitaloceanspaces.com/wp-co...

Support Indie Comics!

anonymousiam•1y ago
Easy to get an infinite stream of bell codes with: yes ^V^G
bitbang•1y ago
Very nice, needs option for json/jsonl output.
tanelpoder•1y ago
Thanks! Yep I was thinking of doing that next, will be very easy as under the hood the data is stored in Python dictionaries.
appleaday1•1y ago
can we package this for Arch? Arch Defense Taskforce where you at?
tanelpoder•1y ago
I just added a little comment/errata regarding the NVME_QDEPTH column to the post (search for errata). I should probably rename that column to emphasize that (for now) it’s the Linux nvme module level max QD and not the hardware one (it’s complicated…)
nerflad•1y ago
If you came to represent... https://wiki.archlinux.org/title/Creating_packages

Maintaining an AUR package can be great fun and an instructive glimpse into what FLOSS maintainers go through.

jayofdoom•1y ago
I'll note, lsblk can return a heck of a lot more data than it does by default (and nvme drives show up there). lsblk -H will list for your system, and you can specify columns. You can also adjust output.

I guess with this in mind, I'm curious how this is different?

tanelpoder•1y ago
Hi, yep lsblk targets a wider area of functionality, like showing mountpoints, device UUIDs, while lsds focuses only on block device settings.

Maybe the latest Linux versions have lsblk versions that support these columns, but in RHEL9 at least I don't see equivalents to lsds'es WBT_LAT, QDEPTH (not the same as lsblk's RQ-SIZE), WCACHE, FUA and some others. But these 4 are which I regularly need (especially when troubleshooting a yet another slow fsync() issue etc). I did and do use lsblk all the time too, but still end up catting and grepping various additional files and correlating the results, sometimes on systems with 100+ multipath block devices.

The other reason was that I wanted a tool that shows me where it gets these values too (for myself and sometimes for explaining stuff to others).

Edit: That being said, it shouldn't be hard at all to add the said extra fields to lsblk too.

strunz•1y ago
Would be worth adding this as an FAQ on the page. Great job btw.

EDIT: Would also be really cool to define what each field means, if you're gonna reimplement everything anyways, why not make it as user friendly as possible.

tanelpoder•1y ago
Thanks. Yep I have to revamp the whole 0x.tools webpage, right now it's a mix of older tools & prototypes and the "final stuff" and it's confusing what's what.

The lsds verbose option shows where in the Linux /sys fs each individual field comes from (lsds -lpv) so that's the ultimate source of what each field means. But I could pull each sysfs file's description from docs into a table on the webpage (I'm probably too lazy to create a manpage for now - help is appreciated)

Edit: Since there are not that many fields, it would be possible to add a -d option in addition to -v to get a human readable description for each field too. One of the main sources of confusion is the "queue_depth" vs. "nr_requests" fields. My ideal (which I usually don't reach) is to make these tools "explainable", so that they tell you from where they got their input data (and what basic math was applied).

trillic•1y ago
Rewrote most of the functionality in C as an exercise

https://gist.github.com/grahameger/2507019334f07036f84080a87...

jayofdoom•1y ago
Thank you for the detailed response, even if I'm reading it late! This is exactly what I was trying to learn; what this tool exposed that lsblk is missing.