frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos

https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
372•spiridow•5h ago•122 comments

D2 (text to diagram tool) now supports ASCII renders

https://d2lang.com/blog/ascii/
114•alixanderwang•3h ago•16 comments

Emacs as your video-trimming tool

https://xenodium.com/emacs-as-your-video-trimming-tool
135•xenodium•5h ago•68 comments

Without the futex, it's futile

https://h4x0r.org/futex/
203•eatonphil•7h ago•99 comments

Perfect Freehand – Draw perfect pressure-sensitive freehand lines

https://www.perfectfreehand.com/
64•NikxDa•1h ago•4 comments

Show HN: OpenAI/reflect – Physical AI Assistant that illuminates your life

https://github.com/openai/openai-reflect
20•Sean-Der•1h ago•7 comments

How Figma’s multiplayer technology works (2019)

https://www.figma.com/blog/how-figmas-multiplayer-technology-works/
71•redbell•3d ago•32 comments

The new geography of stolen goods

https://www.economist.com/interactive/britain/2025/08/17/the-new-geography-of-stolen-goods
50•tlb•1d ago•30 comments

Candle Flame Oscillations as a Clock

https://cpldcpu.com/2025/08/13/candle-flame-oscillations-as-a-clock/
203•cpldcpu•3d ago•41 comments

Vendors that treat single sign-on as a luxury feature

https://sso.tax/
143•vinnyglennon•1h ago•75 comments

Notion releases offline mode

https://www.notion.com/help/guides/working-offline-in-notion-everything-you-need-to-know
123•ericzawo•2h ago•87 comments

AnduinOS

https://www.anduinos.com/
46•TheFreim•2h ago•58 comments

Why Semantic Layers Matter (and how to build one with DuckDB)

https://motherduck.com/blog/semantic-layer-duckdb-tutorial/
40•secondrow•4h ago•2 comments

Custom telescope mount using harmonic drives and ESP32

https://www.svendewaerhert.com/blog/telescope-mount/
238•waerhert•11h ago•86 comments

Lazy-brush – smooth drawing with mouse or finger

https://lazybrush.dulnan.net
543•tvdvd•4d ago•66 comments

A renovation project in Turkey led to the discovery of a lost city (2023)

https://www.atlasobscura.com/articles/derinkuyu-turkey-underground-city-strange-maps
52•areoform•5h ago•13 comments

Branch prediction: Why CPUs can't wait?

https://namvdo.ai/cpu-branch-prediction/
13•signa11•3d ago•14 comments

Stop Paywalling SSO: It Is a Basic Right, Not an Enterprise Perk

https://oneuptime.com/blog/post/2025-08-19-sso-is-a-security-basic-not-an-enterprise-perk/view
4•ndhandala•40m ago•1 comments

The joy of recursion, immutable data, & pure functions: Making mazes with JS

https://jrsinclair.com/articles/2025/joy-of-immutable-data-recursion-pure-functions-javascript-mazes/
20•jrsinclair•1d ago•1 comments

Launch HN: Uplift (YC S25) – Voice models for under-served languages

75•zaidqureshi•9h ago•35 comments

CRDT: Text Buffer

https://madebyevan.com/algos/crdt-text-buffer/
8•skadamat•1h ago•0 comments

Show HN: Chroma Cloud – serverless search database for AI

https://trychroma.com/cloud
67•jeffchuber•1d ago•21 comments

How to Build a Medieval Castle

https://archaeology.org/issues/september-october-2025/features/how-to-build-a-medieval-castle/
209•benbreen•16h ago•62 comments

Geotoy – Shadertoy for 3D Geometry

https://3d.ameo.design/geotoy
85•Ameo•1d ago•15 comments

CRLite: Certificate Revocation Checking in Firefox

https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/
34•TangerineDream•5h ago•2 comments

Launch HN: Parachute (YC S25) – Guardrails for Clinical AI

48•ariavikram•6h ago•19 comments

Critical Cache Poisoning Vulnerability in Dnsmasq

https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2025q3/018288.html
106•westurner•8h ago•72 comments

Positron, a New Data Science IDE

https://posit.co/blog/positron-product-announcement-aug-2025/
110•kgwgk•7h ago•36 comments

Prime Number Grid

https://susam.net/primegrid.html
256•todsacerdoti•13h ago•89 comments

Medical cannabis patient data exposed by unsecured database

https://www.wired.com/story/highly-sensitive-medical-cannabis-patient-data-exposed-by-unsecured-database/
33•hacker_yacker•2h ago•10 comments
Open in hackernews

The new geography of stolen goods

https://www.economist.com/interactive/britain/2025/08/17/the-new-geography-of-stolen-goods
50•tlb•1d ago

Comments

nkurz•1d ago
https://archive.is/T50Y3
IncreasePosts•2h ago
Can anyone just put a container on a ship? I'm curious why the senders wouldn't be registered, and then extra scrutiny is given to newly registered senders, and senders are blacklisted and fined/jailed if it's found they're attempting to ship stolen goods under false manifests.
NoMoreNicksLeft•1h ago
It's even more strange than that when you consider that the UK hasn't been any sort of industrial manufacturer for many decades. What is it that is supposedly being shipped? Granted, some British auto manufacturers might be shipping those, but why should containers full of phones ever leave the UK? Every ship leaving their ports is leaving with stolen goods.

If anyone cared, this problem could be ended even without the cooperation of the destination countries. But no one hurt by this has enough political sway to do anything about it.

cobbzilla•30m ago
Indeed. If the UK can do something as wild as ChatControl, why not ShippingContainerControl?
culebron21•1h ago
> Encrypted communications have enabled criminal gangs to operate and co-operate more freely than ever before, and establish global supply chains.

Is this the payload message of the article?

Many cars have GPS installed. Everybody has a smartphone, and even if it's offline, it's possible to see who went offline when the car was stolen. Customs offices have never ending databases of the containers that passed them.

How is it impossible to track down a thief? I guess, because there's just too much data to automatically track many cases. How on Earth will banning cryptograhpy and adding more data to the sea, help track the thieves?

throwup238•1h ago
From the article:

> Fourth, police forces largely remain in the dust. NaVCIS has enjoyed some success, intercepting 550 cars in the past year. But that is a small fraction of what gets through. Mr Gibson is one of three officers on the whole south coast. Britain’s police have yet to catch any high-ups in the business. European forces do not even have dedicated investigation teams. Across the rich world, police resources tend to be directed towards “higher harm” offences.

There's just very few people working on it because it's not a priority.

potato3732842•56m ago
The state only cares about thieves insofar as the optics of their activity is bad for the state, illicit trade is lost revenue and every score criminals settle among themselves challenges the state's monopoly on violent dispute resolution, it doesn't really care about the peasants' property, it just looks like it cares a little when the interests align.
axus•1h ago
Also in the article, they mention at the time of theft cell phones are wrapped in foil, and GPS jammers are installed on the car.
antonmks•1h ago
It is pretty strange that a country doesn't control what is going in and what is going out. In a small European country I'm most familiar with, everything is checked by customs officers. Dogs, x-rays, customs declarations, import taxes.
dec0dedab0de•1h ago
T̶h̶e̶ ̶b̶i̶g̶g̶e̶r̶ ̶t̶h̶e̶ ̶c̶o̶u̶n̶t̶r̶y̶ The more shipments you have, the more officers you need. The more officers you have, the better the chance one of them is working for organized crime.
bee_rider•1h ago
Although, your number of entry points should scale like your perimeter, while your population to pull agents from should scale like your area, so unless you have a very weird geometry this should get easier as you increase in size, right?

Airports not included.

mandevil•1h ago
Why should population scale with area? The top ten countries in area are:

Russia (#9 in population) Canada (#37) China (#2) USA (#3) Brazil (#7) Australia (#54) India (#1) Argentina (#33) Kazakhstan (#62) Algeria (#32)

There doesn't seem to be much relationship between the two?

macleginn•1h ago
If we believe that Claude pulled correct data: https://claude.ai/public/artifacts/d74a7c48-b5a1-4d86-acc2-e...
Terr_•59m ago
The main factor is the quantity of goods which need to be inspected, and that tends to scale with the population which is buying the goods.

> your number of entry points should scale like your perimeter

Is that really true? An entry-point is generally something the people choose to create to satisfy the pre-existing need to transport goods, by building roads, rail, harbor-piers, etc.

Border-checkpoint facilities don't spontaneously generate in trackless wilderness or barren coastlines, like some fantasy-dungeon that the Adventurers' Guild must periodically raid in to avert a stampede of monsters.

bee_rider•30m ago
> Is that really true?

Probably not true, but very intuitive!

lifestyleguru•1h ago
The scale and logistics of major ports like Barcelona, Hamburg, or Rotterdam are unimaginable.
yelling_cat•37m ago
The article covers this:

> Around the world, border agencies overwhelmingly focus on imports, hunting for people and drugs. In many countries, exports are hardly checked at all. Anyone can book a container.

nikcub•15m ago
You can't inspect everything without creating a huge friction on trade. Australia is well known for it's tight borders - not just for security but for quarantine as well. It only inspects ~5% of containers and ~80% of interceptions are driven by intelligence.

The later is how you solve this. The stolen goods trade described in the article is likely centred a few key networks that could be taken down with resourcing intelligence and law enforcement.

The article itself states that the UK has failed to arrest any top-level members. Cut the head off and you'll see the pull factor of street-level thefts removed, or at least disrupted.

MattGrommes•1m ago
The incentives just don't seem to be there. This boggled my mind:

> For each container Mr Gibson holds up and searches, the police must pay the port a fee of £200.

dec0dedab0de•1h ago
Sounds like a market opportunity for cheaper phones and cars globally.
lifestyleguru•1h ago
Expensive luxury cars are one big pain for society. Draining the economies and fuelling organized crime.
cladopa•1h ago
A new aluminium iMac or MacBook Air, or MS surface for 200 dollars?

Those are the prices of stolen goods. A lot of people want a metal computer instead of a plastic one, but don't want to pay for it.

I was offered stolen goods at those prices and passed. A friend of mine took the bait as was super happy for a month or so until police took his new adquisition from him. Of course he received no compensation as it was stolen and they could prove it, so in the end it was expensive.

trhway•1h ago
A high Chechnya bureaucrat was several months ago stopped by Dagestan police for reckless driving that happened to be DUI. Before Chechen SWAT came to rescue the police had managed to check the car, and it happened to be stolen in Canada. That was one of the several high-end cars Kadyrov publicly gifted to his ministers.
lifestyleguru•1h ago
How Kadyrov came into possesion of multiple Cybertrucks must be an interesting story, probably revealing entire supply chains of few crime organizations.
ur-whale•1h ago
https://archive.is/tQXqC
wagwang•58m ago
> There is also almost no deterrent: Britain’s police solve only 5% of crimes (and 2% of vehicle thefts)

Idk how this is acceptable at all. Is the UK literally the state of nature?

multjoy•37m ago
Crime statistics are difficult.

England & Wales (because policing is a devolved matter in the UK) have very robust crime recording rules. Consequently, the detection rates are low because you record and close crimes where there is literally no prospect of a conviction.

You compare this to, say, Japan, where an investigation only starts if it’s likely that the crime will be solved, and you have an explanation for why detections seem comparatively poor.

There is also the fact that, despite TVs assertion to the contrary, that solving crime is not easy and it is also true that being able to operate a fully encrypted communication system makes it harder as you rely on mistakes.

As we saw with Encro, criminal groups with Signal and modern iPhones can communicate with gay abandon if they maintain decent opsec.

vkou•11m ago
> Idk how this is acceptable at all.

Because the only society with a high clearance rate for crime is a police state that is very good at finding someone to blame, but not necessary the guy who did it.

hatthew•12m ago
With all the technology that exists today, I'm surprised that we haven't invented something that would make it logistically and economically feasible to do a quick scan of e.g. all containers going into a port.
decimalenough•4m ago
I know this opinion is anathema on HN, but this is one reason I like Teslas.

Keyless unlock over Bluetooth keyed to the owner's phone is very difficult to spoof, making it hard to steal the car.

If you manage to steal the car somehow, it's wired to the gills, meaning it can tracked and bricked remotely (the apparent fate of Chechen leader Ramzan Kadyrov's Cybertruck).

And if you do manage to take it offline and bring it to another country, the navigation won't work and you'll have a very hard time finding spares outside the official dealer network.