frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

GitSpawn: Untrusted repos can execute code via AI coding agents

https://www.manifold.security/blog/ai-coding-agents-git-hijack
8•fourfire•2d ago

Comments

DivingForGold•2d ago
GitSpawn: A Single Flaw Let's Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok
grncdr•1h ago
> Git reads that setting from the repository's own .git/config. So a repository can ship this:

Followed by:

> Delivery is worth being precise about, because git never carries this. Cloning a hostile URL does nothing, and neither does fetch or pull.

AI slop nothing burger. The “exploit” has nothing to do with coding agents.

kadoban•31m ago
> AI slop nothing burger. The “exploit” has nothing to do with coding agents.

It's pretty small potatoes, but it is a harness ~bug that they treat this so poorly. It getting triggered before some of them even ask you if you trust the directory is pretty bad.

Keep Our Servers Running

https://blog.archive.org/2026/09/01/keep-our-servers-running-your-recurring-donation-goes-3x-this...
232•sonicrocketman•3h ago•51 comments

Making a Python interpreter in 1024 bytes

https://austinhenley.com/blog/python1024.html
181•azhenley•7h ago•69 comments

I'm a seeing-eye dog for a computer

https://claytonwramsey.com/blog/seeing-eye/
44•claytonwramsey•3d ago•21 comments

It took a year to ship WebAssembly in Anubis

https://anubis.techaro.lol/blog/2026/anubis-wasm/
223•xena•10h ago•118 comments

Ask HN: How do you manage skills files?

70•imadtaieber•11h ago•57 comments

Has anybody seen my keys? A key-hierarchy strategy for rack-level security

https://rfd.shared.oxide.computer/rfd/0301
19•cyb0rg0•4h ago•1 comments

Ask HN: Fable hacked my piano, can I release the results?

88•jmpman•1d ago•47 comments

Ask HN: Would you read a statistics textbook?

49•usernametaken29•1d ago•22 comments

I refused to train the AI that could replace me

https://restofworld.org/2026/ai-training-jobs-expert-replacement/
33•colinprince•1h ago•15 comments

Nitter and XCancel resume service after legal advice

https://github.com/zedeus/nitter/commit/1428b4c2b4246f92a7e5b2673438e5fb39fcc4a3
631•zImPatrick•12h ago•299 comments

The NX bit is not just about security

https://purplesyringa.moe/blog/guest/the-nx-bit-is-not-just-about-security/
55•torutofu•2d ago•34 comments

Babylonian Lamb Stew with Beets (1750–1730 BCE)

https://babylonian-collection.yale.edu/about/babylonian-cooking
126•yubblegum•3d ago•77 comments

Show HN: GET Together – A social network where you don't need POST to Post

https://gettogether.dev
32•nchudleigh•4h ago•11 comments

Harnessing the Universal Geometry of Embeddings

https://arxiv.org/abs/2505.12540
67•ur-whale•10h ago•24 comments

Every Novel Is Boring–Until It Isn't

https://www.publicbooks.org/every-novel-is-boring-until-it-isnt/
42•samclemens•3d ago•31 comments

GrapheneOS Overhauled Default Apps and Secure Clipboard

https://grapheneos.social/@GrapheneOS/117225539756835649
255•Cider9986•10h ago•185 comments

Signing TLS handshakes inside a TPM

https://bschaatsbergen.com/posts/go-tpm-tls/
18•bschaatsbergen•9h ago•10 comments

Show HN: Engrim – A universal, local-first SQLite memory engine for AI CLIs

https://github.com/timgordontg/engrim
7•timgordontg•1h ago•0 comments

MathKernel: An evidence-aware multi-engine mathematics kernel and MCP server

https://github.com/Staatsgeheim/MathKernel
29•staatsgeheim•6h ago•5 comments

Research acceleration: The view inside OpenAI

https://openai.com/index/research-acceleration-view-inside-openai
152•iamsyr•15h ago•100 comments

An Alien Mind

https://openai.com/index/an-alien-mind/
388•tosh•14h ago•339 comments

Show HN: Mador – Make any DOM reactive with a tiny 80-line Proxy state tuple

https://github.com/marsbos/mador
84•bosmarcel•9h ago•26 comments

Asahi Linux on M3

https://asahilinux.org/2026/09/m2-episode-1/
414•mdp2021•16h ago•254 comments

TiVo to charge money for skipping commercials in your own recordings

https://cordcuttersnews.com/tivo-plans-to-end-free-automatic-commercial-skipping-in-november-test...
16•dmitrygr•1h ago•0 comments

Study Math with Kusama

https://medium.com/counterarts/study-math-with-kusama-6008df7c2abd
4•cadeos•4d ago•0 comments

Black Hole of Los Alamos: Seller of surplus nuclear research materials (2011)

https://www.atlasobscura.com/places/black-hole-of-los-alamos
58•Bluestein•4d ago•15 comments

NetBSD 9.5 released and EOL for NetBSD-9

https://blog.netbsd.org/tnf/entry/netbsd_9_5_released_and
123•jaypatelani•14h ago•12 comments

Reverse engineering the storage format for an undocumented database

https://blog.glazer.ee/posts/converting-cronos/
42•pintprint•2d ago•3 comments

Please don't rearrange our shoes when we turn up, paramedics in Japan urge

https://www.theguardian.com/world/2026/aug/28/never-tidy-paramedics-shoes-japan-custom-etiquette
61•high_na_euv•3d ago•67 comments

Coop – Isolated VM Environments for Running Claude Code and Codex

https://github.com/trailofbits/coop
7•aggrrrh•2h ago•1 comments