frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Actively exploited sandbox RCE in all Chromium versions

https://nvd.nist.gov/vuln/detail/cve-2026-85046
44•negura•59m ago

Comments

petra303•40m ago
Only a score of 8.8?
teravor•37m ago
RCE inside sandbox, so requires chaining with another 0day.
zahlman•22m ago
What exactly does "RCE inside sandbox" describe that goes beyond "the webpage can supply arbitrary JavaScript and the JavaScript engine executes it", but is still isolated from the system?
jnwatson•19m ago
It means it can execute arbitrary machine code in the sandbox.
Cider9986•36m ago
Brave is beating GrapheneOS on update timeliness:

https://github.com/GrapheneOS/Vanadium/releases

https://github.com/brave/brave-browser/releases

Only if you use Nightly wait maybe not.

chuckadams•24m ago
The release version just now updated to 152.0.7977.83 which has the fix.
anon109•12m ago
Is graphene even affected? JIT is disabled in default configurations.
Terr_•12m ago
As somebody who prefers to browse with JS off whenever possible, there's something absurd about the balance everyone takes for granted between (A) your personal safety against a devastating hack by malicious code and (B) surveillance advertising.

"Sorry, but to enter this shop you need to take one of the used syringes from that pile some dude delivers every day and poke yourself with it."

Formalizing Fermat's Last Theorem

https://www.anthropic.com/research/formalizing-fermats-last-theorem
390•jlebar•4h ago•249 comments

Statichost.eu – European static site hosting

https://www.statichost.eu/
115•p4bl0•2h ago•37 comments

Actively exploited sandbox RCE in all Chromium versions

https://nvd.nist.gov/vuln/detail/cve-2026-85046
45•negura•59m ago•8 comments

Discovery of a new OpenAI agent message board

https://collusion.wiki/
1397•moultano•10h ago•1117 comments

GPT-6 Astra on OpenRouter

https://openrouter.ai/openai/gpt-6-astra
36•Topfi•1h ago•17 comments

Can AI design circuit boards yet?

https://eebench.org/blog/can-ai-design-circuit-boards-yet/
108•iopapa•3h ago•69 comments

Shutting down our public encrypted DNS

https://mullvad.net/en/blog/shutting-down-our-public-encrypted-dns-servers-and-sponsoring-quad9-i...
196•mywacaday•4h ago•72 comments

An open DNS recursive service for free security and high privacy

https://quad9.net/
38•mooreds•2h ago•7 comments

Show HN: Open-Source eInk Bike Computer

https://opentrailpaper.com
202•stingrae•5h ago•65 comments

Government Rails Site Hit Hours After CVE Patch

https://rietta.com/blog/ruby-on-rails-cve-exploited-hours-after-patch/
60•rietta•3h ago•13 comments

RSA-260 Factorized

https://twitter.com/penlume/status/2095372672356212876
30•samyok•1d ago•7 comments

Fermat's Last Theorem in Lean 4

https://github.com/anthropics/fermats-last-theorem
40•aaraujo002•3h ago•9 comments

The Rust React Compiler is now native in Vite

https://blog.master.dev/react-now-rusted-all-the-way-out/
92•acusti•5h ago•19 comments

Digital Sovereignty Is Written in PHP

https://thephp.foundation/blog/2026/09/02/digital-sovereignty-is-written-in-php/
14•taubek•2d ago•0 comments

Updates on HEIR, the Homomorphic Encryption Compiler Project

https://www.jeremykun.com/2026/09/04/updates-on-heir-homomorphic-encryption/
9•turtleyacht•1h ago•0 comments

How to Create a Tor Exit Node

https://madpsy.uk/how-to-create-a-tor-exit-node/
25•Eridanus2•2h ago•17 comments

IBM Bob

https://bob.ibm.com/
206•artpar•10h ago•243 comments

deSEC – Free Secure DNS

https://desec.io/
95•gurjeet•7h ago•38 comments

Solving the Jane Street reverse engineering challenge

https://jestoph.com/2026/09/04/jane-street-challenge.html
373•anitil•12h ago•83 comments

The Wormhole Hall of Shame

https://rznicolet.com/2026/07/05/wormhole-hall-of-shame/
19•rznicolet•4d ago•8 comments

Fomu An FPGA board that fits inside your USB port

https://www.crowdsupply.com/sutajio-kosagi/fomu
20•Bluestein•2d ago•4 comments

Adult Film Producer Unmasks Prolific 'John DOE' Torrent Pirate as Meta Executive

https://torrentfreak.com/adult-film-producer-unmasks-prolific-john-doe-torrent-pirate-as-meta-exe...
287•speckx•6h ago•177 comments

Project HydraFusion: Frontier quality via multi-model orchestration

https://github.blog/ai-and-ml/github-copilot/project-hydrafusion-frontier-quality-via-multi-model...
55•qainsights•6h ago•29 comments

Deadpan Photography: Enjoying the Pretence

https://photoni.st/index.php/2026/07/12/deadpan-photography-enjoying-the-pretence/
22•NaOH•3d ago•12 comments

Record-High 89% in U.S. Say Government Corruption Widespread

https://news.gallup.com/poll/713933/record-high-say-government-corruption-widespread.aspx
21•karakoram•47m ago•4 comments

Some more thoughts on random_page_cost

https://vondra.me/posts/some-more-thoughts-on-random-page-cost/
6•blueshoess•1h ago•0 comments

"Next-token predictor" is the wrong mental model for LLMs

https://gmcgoldr.github.io/2026/09/04/llm-next-token-predictors.html
51•garrinm•5h ago•123 comments

SubImage (YC W25) Is Hiring a Founding Engineer in SF

https://www.ycombinator.com/companies/subimage/jobs/NCTFgKK-founding-engineer
1•alexchantavy•10h ago

Show HN: TERMy – A fast terminal assistant that does not use LLMs

https://github.com/gioblu/NPC-Forge/blob/main/docs/development.md
79•gioscarab•13h ago•26 comments

Icons as a Service

https://nravic.com/blog/images/
3•nravic•1h ago•0 comments