frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

OpenAI and Hugging Face address security incident during model evaluation

https://openai.com/index/hugging-face-model-evaluation-security-incident/
841•mfiguiere•7h ago•585 comments

Kimi K3 Is Competitive with Fable; Kimi K3 and Fable Is SoTA

https://fireworks.ai/blog/kimik3-fable
398•piotrgrabowski•5h ago•235 comments

LG to ban residential proxies from smart TV apps

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/
64•DemiGuru•2h ago•47 comments

FreeInk: Open ecosystem for e-readers

https://freeink.org/
452•FriedPickles•9h ago•109 comments

A digestion of the Jacobian conjecture counterexample

https://terrytao.wordpress.com/2026/07/21/a-digestion-of-the-jacobian-conjecture-counterexample/
214•jeremyscanvic•6h ago•71 comments

Advertise in ChatGPT

https://ads.openai.com/
473•montecarl•9h ago•378 comments

Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber

https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-3-6-flash-3-5-flas...
637•logickkk1•12h ago•509 comments

Ten Steps Towards Happiness (2015)

http://hintjens.com/blog:99
45•emerongi•2h ago•14 comments

"Drawing" the Mona Lisa with GPT-5.6, Claude, Gemini, and Grok

https://www.tryai.dev/blog/ai-drawing-arena-colored-pencils-claude-gpt-grok
141•hershyb_•6h ago•51 comments

Judge approves $1.5B Anthropic settlement for pirated books used to train Claude

https://apnews.com/article/ai-anthropic-copyright-settlement-claude-books-bartz-74b140444023898ae...
183•BeetleB•9h ago•144 comments

Long presumed dead, a thriving coral reef is discovered in West Africa

https://e360.yale.edu/digest/benin-coral-reef
316•speckx•12h ago•60 comments

Late.sh – a command-line Clubhouse for computer people

https://late.sh/
12•itherseed•1h ago•2 comments

Jack Dorsey launches Buzz to combine team chat, AI agents and Git hosting

https://runtimewire.com/article/jack-dorsey-block-buzz-team-chat-ai-agents-git
270•ryanmerket•10h ago•230 comments

Apple defeats liability for not scanning iCloud for CSAM

https://blog.ericgoldman.org/archives/2026/07/apple-defeats-liability-for-not-scanning-icloud-for...
373•speckx•13h ago•343 comments

It's a shame what's happened to radio

https://blog.jimgrey.net/2026/07/21/its-a-shame-whats-happened-to-radio-3/
43•sonicrocketman•4h ago•28 comments

Map of the world's great castles and fortresses

https://thecastlemap.com/
201•marklit•11h ago•147 comments

Gemini last models: temperature, top_p, and top_k are deprecated and ignored

https://ai.google.dev/gemini-api/docs/latest-model
53•greatgib•6h ago•16 comments

The Birth of Prolog (1996)

https://dl.acm.org/doi/10.1145/234286.1057820
76•Jtsummers•4d ago•5 comments

'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling

https://www.techradar.com/vpn/vpn-privacy-security/vpns-are-lawful-technical-tools-says-eu-court-...
424•healsdata•8h ago•75 comments

Laguna S 2.1

https://poolside.ai/blog/introducing-laguna-s-2-1
259•rexledesma•10h ago•49 comments

A flaky test exposed a Redis client use-after-free

https://buildkite.engineering/how-a-flaky-test-exposed-a-redis-use-after-free/
34•DrNemski•3h ago•10 comments

The Miso That Went to Space

https://ambrook.com/offrange/culture/miso-in-space
9•surprisetalk•4d ago•0 comments

My USB Drive Has a Hidden Encrypted Vault

https://rootkitlabs.com/2026/06/22/I%27m-Building-a-Secure-USB-Drive/
192•machinehum•1d ago•108 comments

PCjs Machines

https://www.pcjs.org/
200•naves•14h ago•26 comments

Apple Private Cloud Compute SoC 3 audit reports

https://support.apple.com/guide/certifications/apple-private-cloud-compute-soc-3-audit-apc95a31b9...
114•throwfaraway4•10h ago•49 comments

Show HN: Justif – Knuth-Plass justification and microtypography for the web

https://justif.lyall.co/
110•lyall•4d ago•14 comments

Show HN: An MCP server that turns async-work practices into tools

https://github.com/open-and-async/mcp
16•benbalter•11h ago•4 comments

Bloomy (YC S26) is hiring a founding engineer

1•alexsouthmayd•11h ago

Show HN: Computable – Buy, sell, and redeem GPU for the exact weeks you want

https://www.getcomputable.com/
29•yuansong98•6h ago•21 comments

Roblox Officially Supports GrapheneOS

https://en.help.roblox.com/hc/en-us/articles/49648939984916-Android-Remote-Attestation
131•Cider9986•11h ago•28 comments
Open in hackernews

LG to ban residential proxies from smart TV apps

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/
63•DemiGuru•2h ago

Comments

pixl97•1h ago
I mean, why didn't they do that from the start?
steele•56m ago
Honeypot for more logos
akersten•58m ago
is this some kind of tactical distraction from the other LG headlines this week?

I thought residential proxies are already banned from SmartTV apps by virtue of practically every APK under the sun being subject to the Google Play terms of service.

Marsymars•55m ago
> I thought residential proxies are already banned from SmartTV apps by virtue of practically every APK under the sun being subject to the Google Play terms of service.

The platforms in question here are webOS and Tizen, neither of which are Android or use the Google Play Store.

ranger_danger•48m ago
LG webOS is not Android though, it's from the old Palm/HP devices of the early 2010s. And I'm pretty sure there are still tons of play store apps with these proxy SDKs in them, advertised/consented or not.
ssl-3•35m ago
That only applies to the subset of TVs that use Google TV/Android TV.

Not so much for the rest of them that have operating systems with names like Roku TV OS, Tizen, WebOS, and Fire TV OS. They do their own things.

cognitiveinline•57m ago
Sharing a slice of your internet in a privacy preserving way in exchange for something of value, seems fair, no?
ryandrake•54m ago
Only if the app provides 1. prominently-displayed, informed consent, 2. an option to opt-out without losing app functionality, or 3. joining the botnet provides some kind of actual benefit to the user, besides just money to the developer.
LoganDark•53m ago
Some residential proxy providers offer a few cents for the use of your network.
krackers•52m ago
Apparently at least one of the apps mentioned does that. From the article

>A Pac-Man smart TV app from Bright Data offers users the choice between viewing ads in the game or agreeing to allow their TV to serve as a residential proxy node.

ryandrake•49m ago
I wonder how informed the end user actually is, and if it's disclosed to them what kind of content might pass through their network as a result of agreeing.
charcircuit•3m ago
Most traffic is normal scraping like checking amazon prices.
xena•50m ago
This is the best news I've heard all week. Finally good news for once!
glimshe•47m ago
My TV doesn't know my router's wi-fi password.
aussieguy1234•42m ago
This is the best approach
walrus01•41m ago
I've said it before on HN a long time ago but I'll repeat myself, I have about a thousand times more confidence that Sony and/or Microsoft will keep their PS5 and Xbox operating systems secure and not crapped up with stuff like this, than I do that random TV manufacturers will not result in a cybersecurity or privacy disaster.

Yeah, the PS and Xbox OSes show you ads, and they have telemetry. But both companies also have an extremely important core functional need of keeping them secure, because possible fuckery with the OS could result in game piracy/DRM bypasses and a direct threat to their revenue models.

amazingman•37m ago
Hope you don't have any open WiFi networks nearby. IMO it's better to put it on one of your networks and isolate it from the internet and other devices.
MrDrMcCoy•25m ago
If it connects to another network, it's somebody else's problem. Unless of course, it has a built in webcam or microphone.
tyre•22m ago
Yes. I bought a Samsung TV and there isn’t a way to set up Art Mode without the internet. So first you have to get a raspberry pi, install pi hole, then switch your router’s DNS.

What a wild experience 2026 is. But I do feel like a wizard.

s1ncere•29m ago
Stop hooking up your LG tv to any network
CivBase•23m ago
Stop buying LG TVs.
smcleod•15m ago
Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.
5kg•22m ago
Stop hooking up your LG: https://www.theverge.com/tech/967983/lg-monitors-mcafee-adwa...
4rt•26m ago
lg's had a good run of being a monitor, their software was a bit shit but the hardware supported e-arc etc.

i've got 2 expensive lg tvs and i bought them because you don't need to use their remote, it just turns on and shows the picture.

jchw•19m ago
None of my TVs are connected to the Internet. That said, I could really do with a better open source fullscreen UI, especially since I mainly just want a web browser that works good. I'm just using KDE Plasma with a custom daemon to control the TV power state over an HDMI CEC adapter plus an old K830 keyboard.

I'm, frankly, a bit annoyed by this whole thing; I'd rather have USB adapter RF wireless because it is simpler to deal with vs Bluetooth, but actually I can't even find other Bluetooth keyboards that are as compelling as this K830 and worse yet, they don't even make the K830 anymore. I don't really mind KDE Plasma with just some minor customizations but I don't really like any of the options like Kodi. Maybe Plasma BigScreen will eventually be what I want for that. And finally, HDMI CEC is a pain in the ass. For reasons, I actually use an adapter to get CEC support on a normal PC platform, because most PC HDMI ports can't do it. And also, it's just a bizarre and overly complicated thing. I have it working reliably, but it took some time to iron out all the kinks, particularly because my TV responds quite differently depending on how recently it was powered off.

I really just want a big monitor and to basically just use DPMS... Like a computer does, but large computer monitors tend to be expensive and don't always have remote controls, which admittedly are handy.

symfoniq•18m ago
This is madness.

Only LG themselves should be able to have this kind of invasive control over your television.

spudlyo•15m ago
One day there will be a decent TV that can be relatively easily hacked to run on open source firmware. My wife and I are moving soon, and I'm happy we've decided not to have a TV in the new place. Neither of our current LG TV's have ever been connected to the network, but it will feel good when I sell or give the cursed things away.
ram_rattle•14m ago
Apparently all these vendors did nothing to prevent this, a nice article from spur intelligence

https://www.cbsnews.com/newyork/video/how-smart-tvs-may-be-s...

cognitiveinline•51m ago
No need of (2) and (3) - the user can choose to not install/use the app. (1) is the right fair boundary.
ryandrake•47m ago
Those apps just shouldn't exist.

I don't know how "join your users to a botnet" became some kind of legitimized monetization scheme. Ads are bad enough. What's next? "Participate in a DDOS in order to use our app?"

NopIdoN•29m ago
probably some kind of image categorization scam
mirashii•49m ago
Add to that list respecting the TOS of the user's ISP so that the user does not get banned, and providing some sort of remuneration if illicit activity through the proxy causes problems for the primary user, and then _maybe_ you could call this all not shady as fuck.
ryandrake•45m ago
If only ISPs would actually crack down on (usually unwitting) users whose systems are participating in a malicious botnet or otherwise have their networks compromised. They could offer temporary disconnection + anti-malware support to get the user cleaned up, if they actually gave a shit.
walrus01•39m ago
No residential last mile broadband ISP at the scale of hundreds of thousands or millions of customers is presently willing to spend the salary/benefits/fully loaded employee cost on the massive teams of (somewhat technically clued in, not low wage) people it would take to effectively implement this.
walrus01•48m ago
Grey market residential proxy service providers are one of the most common methods of implementing bot spam, social media manipulation and plenty of straight-out fraud.

There's all kinds of things that malicious actors want to do where they value coming from an ordinary (comcast, charter, centurylink, shaw cable, whatever) residential IP.

hokumguru•41m ago
I mean, some of us have legitimate business needs to get past cloudflares frankly somewhat bs gatekeeping business model, however
walrus01•38m ago
Sure, I do as well, I have my own VPN into my home office that lets me run traffic outbound through its default gateway while I'm somewhere else. But letting random third parties I don't know run traffic through my house is another thing entirely.
charcircuit•5m ago
Just because others abuse privacy doesn't mean that we should remove privacy from everyone else. They also let you get around geoblocking.
oasisbob•5m ago
No.

I'm surprised Comcast or some other ISP doesn't step in with a claim of tortious interference. Reselling or granting access to the ISPs services like this is almost always against the ISPs terms of service.

The consumer is in no place to consent to this exchange.

entropie•6m ago
They might hardcode DNS. It's not certain that this will work.
RiverCrochet•21m ago
I haven't seen any open WiFi networks around me in years. I don't think it's a thing anymore; it's definitely not something a TV company can rely on.
baby_souffle•6m ago
They're not unheard of in cities. Hotels and shopping malls have them. Some residential ISPs will also broadcast a public access point using a slice of each customer's bandwidth allocation...
gboss•36m ago
Pretty sure they can get internet through the HDMI cord from Roku or similar device
MrDrMcCoy•27m ago
Source? HDMI includes Ethernet in the spec, but I've never heard of any devices actually implementing it.
RiverCrochet•22m ago
That would require the Roku to specifically be set up to act as a router. You can't just connect to a random device that's not specifically a router/AP and use its internet connection.

Since Roku like other smart TV companies makes money off of user data captur, it's not incentivized to enable those conditions for a downstream device, especially if not specifically advertised as a feature.

declan_roberts•28m ago
My TV thinks it's January 1st 1970.