frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Restructuring GitHub's bug bounty program

https://github.blog/security/next-chapter-restructuring-githubs-bug-bounty-program/
10•soheilpro•1h ago

Comments

dinkelberg•42m ago
So if the "wrong" person finds a critical vulnerability in GitHub, the payout is capped at $10,000. Might reduce the likelihood of it being submitted to the bug bounty program.
toomuchtodo•9m ago
It might, but as someone who has to review public vulnerability reports for a much less popular website, I completely understand why they’re building a vouch program to dissuade slop reports. One would presume their internal team is using frontier models for red team agent scanning against potential attack surface, and so this is a potential risk they’re willing to take.

Tragedy of the commons that someone who hasn’t passed the filter yet might have their payout limited.

Vouch - https://news.ycombinator.com/item?id=46930961 - February 2026 (486 comments)

Klaster_1•11m ago
Dupe: https://news.ycombinator.com/item?id=49010107

Terence Tao's ChatGPT conversation about the Jacobian conjecture counterexample

https://chatgpt.com/share/6a5fdc7a-d6f8-83e8-bbea-8deb42cfed56
671•gmays•10h ago•402 comments

Quality non-fiction books are the antithesis of AI slop

https://resobscura.substack.com/p/quality-non-fiction-books-are-the
197•benbreen•13h ago•81 comments

GigaToken: ~1000x faster Language model tokenization

https://github.com/marcelroed/gigatoken/
396•syrusakbary•10h ago•78 comments

Show HN: Bento - An entire PowerPoint in one HTML file (edit+view+data+collab)

https://bento.page/slides/
690•starfallg•12h ago•155 comments

Codeberg Bans Cryptocurrency Projects

https://codeberg.org/Codeberg/org/pulls/1254
146•intunderflow•2h ago•166 comments

Medici family mystery may be solved after more than 400 years

https://www.cnn.com/2026/07/15/science/medici-family-mystery-dna-malaria
88•effects•5h ago•20 comments

Everyone Should Know SIMD

https://mitchellh.com/writing/everyone-should-know-simd
294•WadeGrimridge•9h ago•81 comments

Are AI Labs Pelicanmaxxing?

https://dylancastillo.co/posts/pelicanmaxxing.html
416•dcastm•10h ago•161 comments

Show HN: Cactus Hybrid: We taught Gemma 4 to know when it's wrong

https://github.com/cactus-compute/cactus-hybrid
86•HenryNdubuaku•9h ago•14 comments

Petals: Run LLMs at home, BitTorrent-style

https://petals.dev/
66•snorbleck•2h ago•25 comments

John C. Dvorak has died

https://twitter.com/na_announce/status/2079952538040672302
623•coleca•8h ago•201 comments

Restructuring GitHub's bug bounty program

https://github.blog/security/next-chapter-restructuring-githubs-bug-bounty-program/
10•soheilpro•1h ago•3 comments

Malleable Computing, Emacs, and You

http://yummymelon.com/devnull/malleable-computing-emacs-and-you.html
78•kickingvegas•6h ago•22 comments

ascdraw: Editor for ASCII/UTF-8 diagrams (in 144FPS)

https://github.com/exlee/ascdraw
9•xlii•2d ago•2 comments

Making

https://beej.us/blog/data/ai-making/
299•erikschoster•12h ago•116 comments

Nobody knows what a used GPU cluster is worth

https://ciphertalk.substack.com/p/nobody-knows-what-a-used-gpu-cluster
181•rbanffy•1w ago•167 comments

Fairphone 6 wide camera experimental Linux support

https://nondescriptpointer.com/articles/fairphone-6-wide-camera-linux/
80•helonaut•7h ago•9 comments

So Reddit has decided that plain HTML is unsafe

https://www.cole-k.com/2026/07/21/reddit/
316•montroser•15h ago•318 comments

The startup's Postgres survival guide

https://hatchet.run/blog/postgres-survival-guide
332•abelanger•15h ago•175 comments

What Rose Petals Teach Us about Induction

https://www.oranlooney.com/post/rose-petals/
19•olooney•4d ago•1 comments

Any text-to-SQL benchmark should address difficulties of real-world data stores

https://cacm.acm.org/blogcacm/if-you-think-you-can-do-real-world-text-to-sql/
42•shenli3514•5h ago•11 comments

Clarity didn't work, trying mysterianism (2012)

https://gwern.net/doc/fiction/science-fiction/2012-10-03-yvain-thewhisperingearring.html
46•dboon•8h ago•15 comments

Businesses with ugly AI menu redesigns

https://blog.fiddery.com/businesses-with-ugly-ai-menu-redesigns/
202•speckx•14h ago•157 comments

Honey Bee Colony Monitoring via Audio IoT Sensors, Tensorgrams and RNNs

https://arxiv.org/abs/2607.20386
4•StatsAreFun•1h ago•0 comments

Launch HN: Unlayer (YC W22) – Add email and document builders to your app

https://unlayer.com
47•adeelraza•11h ago•33 comments

OpenAI's accidental cyberattack against Hugging Face is science fiction

https://simonwillison.net/2026/Jul/22/openai-cyberattack/
52•abhisek•2h ago•40 comments

Back to Kagi

https://blog.melashri.net/micro/back-to-kagi/
216•speckx•14h ago•166 comments

Ghost Cut – or why Cut and Paste is broken everywhere

https://ishmael.textualize.io/blog/ghost-cut/
139•willm•12h ago•91 comments

Taking OCaml and Eio for a Spin

https://mattjhall.co.uk/posts/taking-ocaml-eio-for-a-spin.html
43•mattjhall•2d ago•5 comments

I Inspected My Take-Home Interview Project. It Was a Whole Operation

https://citizendot.github.io/articles/fake-job-interview-git-hook-malware/
303•CITIZENDOT•7h ago•80 comments