frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Native ACME support comes to Nginx

https://letsencrypt.org/2025/09/11/native-acme-for-nginx
34•Velocifyer•38m ago•3 comments

NT OS Kernel Information Disclosure Vulnerability

https://www.crowdfense.com/nt-os-kernel-information-disclosure-vulnerability-cve-2025-53136/
43•voidsec•1h ago•6 comments

GrapheneOS and Forensic Extraction of Data (2024)

https://discuss.grapheneos.org/d/13107-grapheneos-and-forensic-extraction-of-data
245•SoKamil•5h ago•103 comments

A tech-law measurement and analysis of event listeners for wiretapping

https://arxiv.org/abs/2508.19825
32•lapcat•1h ago•2 comments

Behind the scenes of Bun Install

https://bun.com/blog/behind-the-scenes-of-bun-install
214•Bogdanp•5h ago•66 comments

Conway's Game of Life, but musical

https://www.hudsong.dev/digital-darwin
97•hudsongr•4h ago•21 comments

Spiral

https://spiraldb.com/post/announcing-spiral
167•jorangreef•2h ago•52 comments

Bulletproof host Stark Industries evades EU sanctions

https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/
9•todsacerdoti•24m ago•0 comments

CRISPR offers new hope for treating diabetes

https://www.wired.com/story/no-more-injections-crispr-offers-new-hope-for-treating-diabetes/
61•manveerc•4h ago•19 comments

'Robber bees' invade apiarist's shop in attempted honey heist

https://www.cbc.ca/news/canada/british-columbia/robber-bees-terrace-bc-apiary-1.7627532
11•lemonberry•1h ago•0 comments

An engineering history of the Manhattan Project

https://www.construction-physics.com/p/an-engineering-history-of-the-manhattan
76•rbanffy•5h ago•38 comments

Beyond package management: How Nix refactored my digital life

https://www.jimmyff.co.uk/blog/beyond-package-management-how-nix-refactored-my-digital-life/
24•jimmyff•3d ago•5 comments

Reshaped is now open source

https://reshaped.so/blog/reshaped-oss
205•michaelmior•8h ago•42 comments

Gregg Kellogg has died

https://lists.w3.org/Archives/Public/public-json-ld-wg/2025Sep/0012.html
247•daenney•6h ago•34 comments

Public Suffix List

https://publicsuffix.org/
8•mooreds•3d ago•0 comments

Removing yellow stains from fabric with blue light

https://phys.org/news/2025-09-yellow-fabric-blue.html
83•bookofjoe•3d ago•66 comments

From burner phones to decks of cards: NYC teens adjusting to the smartphone ban

https://gothamist.com/news/from-burner-phones-to-decks-of-cards-nyc-teens-are-adjusting-to-the-sm...
43•geox•4h ago•63 comments

Piramidal (YC W24) Is Hiring Back End Engineer

https://www.ycombinator.com/companies/piramidal/jobs/1HvdaXs-full-stack-engineer-platform
1•dsacellarius•6h ago

GrapheneOS accessed Android security patches but not allowed to publish sources

https://grapheneos.social/@GrapheneOS/115164133992525834
167•uneven9434•10h ago•38 comments

The obstacles to scaling up humanoids

https://spectrum.ieee.org/humanoid-robot-scaling
30•voxadam•1h ago•62 comments

How I solved PyTorch's cross-platform nightmare

https://svana.name/2025/09/how-i-solved-pytorchs-cross-platform-nightmare/
54•msvana•3d ago•18 comments

Samsung taking market share from Apple in U.S. as foldable phones gain momentum

https://www.cnbc.com/2025/08/16/samsungs-us-market-share-apple-rivalry-foldable-phones.html
45•mgh2•9h ago•62 comments

Learning lessons from the loss of the Norwegian frigate Helge Ingstad

https://www.navylookout.com/learning-the-lessons-the-loss-the-norwegian-frigate-helge-ingstad/
58•ilamont•3d ago•49 comments

Show HN: I built a minimal Forth-like stack interpreter library in C

25•Forgret•5h ago•8 comments

The rise of async AI programming

https://www.braintrust.dev/blog/async-programming
87•mooreds•5h ago•53 comments

Mapping to the PICO-8 palette, perceptually

https://30fps.net/pages/perceptual-pico8-pixel-mapping/
57•ibobev•3d ago•19 comments

Center for the Alignment of AI Alignment Centers

https://alignmentalignment.ai
26•louisbarclay•6h ago•3 comments

DeepCodeBench: Real-World Codebase Understanding by Q&A Benchmarking

https://www.qodo.ai/blog/deepcodebench-real-world-codebase-understanding-by-qa-benchmarking/
67•blazercohen•8h ago•5 comments

KDE launches its own distribution

https://lwn.net/SubscriberLink/1037166/caa6979c16a99c9e/
642•Bogdanp•20h ago•445 comments

PgEdge Goes Open Source

https://www.pgedge.com/blog/pgedge-goes-open-source
85•Bogdanp•10h ago•15 comments
Open in hackernews

The US is now the largest investor in commercial spyware

https://arstechnica.com/security/2025/09/the-us-is-now-the-largest-investor-in-commercial-spyware/
149•furcyd•3h ago

Comments

RianAtheer•3h ago
Wow, didn’t know the U.S. is now the top investor in commercial spyware clearly a big push for cyber defense and global intelligence edge. Essentially, it’s about maintaining an edge in cyber operations and national security. The U.S likely sees commercial spyware not just as a tool for spying, but as a strategic investment to keep up with global cyber threats.
OutOfHere•2h ago
US and Israel are the the global cyber threat.
SilverElfin•2h ago
What about China? Salt typhoon was just one among many actual attacks, not just threats, connected back to the Chinese state.
OutOfHere•2h ago
Yes, but with rare exceptions, China doesn't exercise much power to lock up someone, or to disempower someone, at least so long as you don't visit China. Meanwhile, the US and Israel are well known to target individuals both domestically and around the world irrespective of their affiliation.
ImJamal•1h ago
They have the power to arrest people in China. Any Chinese outside of China could have their family still in China arrested.
SilverElfin•1h ago
What is power? Like legally? China definitely has international policing outposts that are meant to cast their power outside their borders.

https://www.nytimes.com/2023/01/12/world/europe/china-outpos...

hirvi74•1h ago
> China doesn't exercise much power to lock up someone, or to disempower someone, at least so long as you don't visit China.

I am not certain that is necessarily true. At least, not if one is originally from China.

https://www.publicsafety.gc.ca/cnt/trnsprnc/brfng-mtrls/prlm...

lmz•1h ago
Telling someone their family is going to get it if they keep doing what they do is quite some distance away from... straight up bombing them.
pessimizer•43m ago
And anybody who happens to be nearby.
corimaith•11m ago
And you think China won't bomb foreign adversaries if they can? Or any country for that matter.

The answer is don't place yourself in the crosshairs of great powers in the first place, which then puts into the degree you can align yourself with their interests.

pessimizer•36m ago
It's also important to keep in mind that China has less than a quarter of the per capita prison population as the US. If you're talking about who's a police state, the US and China just aren't in the same universe.

Or from another direction, China has 4x the population of the US, and still has fewer people in prison.

corimaith•9m ago
That's more on an indictment of multiculturalism as opposed to cultural homogenization though, which I imagine many here would furiously oppose the latter.
hirvi74•4m ago
1. That is under the assumption that the Chinese government is releasing accurate data. I assume international entities are not granted access to Chinese prison facilities directly, but I could be wrong.

2. There are 'alternative' ways of dealing with suspects and criminals other than prison sentences. And on that note, if China has a lower per capita prison population than the US, then it makes China having the highest rate of capital punishments even worse.

soperj•2h ago
What attacks from the US have you heard of?
autoexec•1h ago
Does microsoft windows count?

Honestly, I imagine that other nations should be very concerned about the small number of US based companies creating all the CPUs which could easily be backdoored. Same for the blackbox wireless chipsets our phones depend on too.

That and so many of the companies that people depend on are in the US (Google, Amazon, social media, Apple, MS, etc) since you have to think that the US government is collecting massive amounts of data from those places.

saagarjha•5m ago
Stuxnet?
linkregister•2h ago
Investment in these firms does not equate to improved national security. Existing US government programs exceed the capabilities of these firms. A purpose for contracting with these firms is to evade the significant legal oversight present in the NSA, CIA, and FBI computer network exploitation programs.
esalman•2h ago
The former number one, and current number two, is anyone's guess.

My home country does not have formal diplomatic ties with them, yet we purchased and deployed surveillance tech from this country.

We live in a truly dystopian nightmare.

hparadiz•2h ago
Aka enterprise security solutions
OutOfHere•2h ago
Hacking personal devices goes way beyond enterprise security. It is cybercriminal behavior.
tptacek•1h ago
Enterprises are generally not customers of serious CNE vendors.
evanjrowley•1h ago
This is a big step beyond just enterprise EDR/MDM
ta12653421•1h ago
Cloud-based Enterprise Security Solution, thats important! ;-)
reactordev•1h ago
Centralized, Single-pane-of-glass, Cloud-based Enterprise Security Solution.
OutOfHere•2h ago
I see multiple ex-employers listed at https://staging--atlantic-council-spyware.netlify.app/ | https://mythicalbeasts.dfrlab.org/. I strongly advise avoiding all prospective employers that use these services as they're practically guaranteed to hack your phone.

Report: https://www.atlanticcouncil.org/in-depth-research-reports/re...

Dataset: https://github.com/ac-csi/mythical-beasts

dadrian•1h ago
It is illegal for an employer to hack your phone.
OutOfHere•1h ago
It is why the employer contracts the hacking firm to do it all for them. Meanwhile, the employer has deniability. The employer receives reports of your data and activities as accessed by the firm. That is the whole point. It's a legal gray area. Being naive about it doesn't help.
tptacek•1h ago
Sounds made up.
dadrian•1h ago
No, that is also illegal.
Group_B•1h ago
Gotta love the good old US of A. I feel like we have the worst of both worlds; dystopian surveillance, yet massive crime issues still. An amazing world we live in.
kubb•1h ago
At least you have freedom… in some sense.
generalizations•1h ago
I suspect that in the very near future, the latter will dramatically decrease and the former dramatically increase. I wonder how that tradeoff will be perceived.
falcor84•1h ago
What do you mean? What would lead to government surveillance decreasing?
wil421•1h ago
No he means crime will dramatically decrease and surveillance will increase. I’d be inclined to agree.
jrochkind1•1h ago
Don't worry, the crime wont' actually decrease either.
hansvm•1h ago
Maybe. If we use our powers too capriciously then they'll deter behaviors other than criminal behaviors. Like that boat of alleged drug traffickers we recently blew up -- that looks more likely to discourage boating within 1000 miles of the US than any particular crime.
bregma•1h ago
As surveillance increases the definition of crime will expand.

Consider the incentives. Surveillance is costly. The only way to justify increasing surveillance costs is to demonstrate increasing intervention in criminal activity. If traditional crime is reduced, new crimes need to be introduced.

Once all the enemies of the state have been eliminated, it becomes mandatory to introduce new enemies of the state so they, too, can be rounded up. Eventually there will be no one left to come for and the surveillance technology will go unmonitored.

corimaith•15m ago
The increase in crime is purely political problem emerging from the demands of a certain segment of middle and upper middle classes, not the government or working class.
mrtesthah•1h ago
The problem is that when laws no longer apply to certain individuals in our government, we no longer have rule of law at all, because a law is inherently universal. The US is rotting from the head.
roughly•1h ago
> I feel like we have the worst of both worlds; dystopian surveillance, yet massive crime issues still.

One might be tempted towards the conclusion that dystopian surveillance doesn't materially impact crime rates and that if we want to solve the latter, we need a different solution than the former.

bamboozled•1h ago
“Freedomware”
tptacek•1h ago
This data set is missing even several pretty well-known CNE vendors.

The bigger question is: why would you expect the US not to be the largest investor? CNE vendors are tech companies. The US is the largest investor in tech companies.

bigyabai•1h ago
> why would you expect the US not to be the largest investor?

Mostly because $FAV_TECH_COMPANY constantly tells me they love privacy. They fight backdoors in court, they rush out security patches and closely coordinate with the government to ensure I'm safe. Every advertisement seems to reinforce the idea that they cared about my security, I guess I put too much faith in the principles of private enterprise.

tptacek•1h ago
What would that have to do with anything I just said?
bigyabai•6m ago
It might help inform you, if you're unfamiliar with the sentiment Americans hold towards security?

Don't take my word for it, though. Scroll through the rest of the comments in this thread, I counted all of three unique users that took this article at face-value. The fact that we see this cognitive dissonance on HN should really reinforce how unimportant online security is to Silicon Valley.

howmayiannoyyou•1h ago
Good. I want my tax dollars allocated to penetrating every and any system my country's adversaries may use to undermine our interests or threaten our people. And, I want maximum penalties, civil and criminal, for any person or company who misuses these systems for personal or political gain. Also, I'd like to see mandatory statutory civil damages for any vendor creating and/or selling/providing these systems who does so in a negligent or malicious manner, same as we provide for other high risk products and services.
vkou•1h ago
Well, you're definitely not going to get the latter two, and the only guarantee about the first one is that they will definitely be used against enemies of the state.

Whether there's any overlap between them and enemies of the people will heavily depend on the latter's ability to steer towards good governance. The track record for the past few decades hasn't been great.

ChainnChompp•1h ago
Nailed it - well said. Going to take some serious work for the populace to start steering the ship again, unfortunately.
mensetmanusman•1h ago
Google and FB are commercial spyware.
reactordev•1h ago
Microsoft Teams and O365 suite are as well.
dadrian•1h ago
This is an unserious article.

1) If you're counting investment, you should count it in dollars, not number of investors or corporate entity locations.

2) This is missing at least two extremely well-known CNE vendors, which makes me doubt its accuracy.

3) The takeaway from the graph on Mythical Beasts [1] should be that the industry is _very small_, not that it's very big.

4) Americans should be happy that the US government is the biggest player. Would you prefer to have China or Russia or the Middle East be the biggest player? Get a warrant -> own a phone is a very straightforward process that fits into existing models of civil liberties in the US.

[1]: https://mythicalbeasts.atlanticcouncil.org/

dogleash•45m ago
>Would you prefer to have China or Russia or the Middle East be the biggest player?

If the absolute value of China + Russia + ME was the same, but US went down? Yeah, probably. Doubly so if sales going down meant less R&D investment and therefore lower quality software.

serial_dev•1m ago
> Would you prefer to have China or Russia or the Middle East be the biggest player?

I was thinking about this (almost this, adjacent) lately, and I’m actually still undecided.

If I could choose who swoops up all my data, would I prefer it to be my own country, an “ally”, or an adversary? State or commercial entity?

What if I were to criticize my own government? Run for office? Participate somehow in an NGO? Start my political podcast / talk show? In all those cases, the worst people to spy on you are the ones who can also knock on your door at 4 AM, put you in prison and make up bogus charges.

I mean it’s all hypothetical, I can’t choose who spies on me, and I am okay only observing the world and navigating it as well as I can.

nycdatasci•1h ago
You can find a graph showing the relationships between investors and entities here: https://staging--atlantic-council-spyware.netlify.app/

The headline can't be taken at face value. "Largest" is based on the number of investing entities (including individuals), not something more objective like dollars invested. Also, the US is not making these decisions as the headline implies.

cramcgrab•58m ago
According to ars.