frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

F-Droid 2.0

https://f-droid.org/2026/09/24/f-droid-2.0-a-new-chapter-for-android-freedom.html
337•daveoc64•2h ago•91 comments

Two-tier encryption in the UK

https://macanorak.com/two-tier-encryption-in-the-uk/
256•ReturnoftheHack•6h ago•247 comments

Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design

https://github.com/devdotfast/whiteboard
9•sidharthkmenon•14m ago•0 comments

Nokia Design Archive (2025)

https://repo.aalto.fi/index.php?name=SO_b66a9391-dcf8-4399-8e87-611f84c3fc4c
175•pillars•7h ago•92 comments

Agents.md speaks Unix, and you should too

https://www.fmind.dev/articles/agents-md-speaks-unix/
7•fmind-dev•1h ago•0 comments

WaveDigger: Dig into wireless signals to discover their physical locations

https://github.com/christianrowlands/wavedigger
24•882542F3884314B•1d ago•3 comments

GitHub has not removed malicious imitation software after 3 weeks

https://successfulsoftware.net/2026/09/24/github-has-not-removed-malicious-imitation-software-aft...
112•hermitcrab•1h ago•42 comments

B5-BJ2 – Ice Cream Barges – Concrete Ship Constructors (2023)

https://thecretefleet.com/blog/f/b5-bj2---ice-cream-barges---concrete-ship-constructors
8•nixass•2d ago•2 comments

Linux support is coming to Snapdragon X2 series

https://www.qualcomm.com/news/onq/2026/09/snapdragon-summit-agentic-ai-pcs-linux
574•aaronday•18h ago•241 comments

Experiencing writing at our recent Chinese calligraphy workshop

https://viewsproject.wordpress.com/2026/09/06/chinese-calligraphy-workshop/
7•surprisetalk•1h ago•1 comments

Federal judge orders Texas to air condition all prisons by the end of 2029

https://www.texastribune.org/2026/09/22/texas-prison-air-conditioning-lawsuit-ruling/
53•bonefishgrill•1h ago•36 comments

The science of Monkey Island: can grog dissolve a metal mug that fast?

https://jgeekstudies.org/2026/09/23/the-science-of-monkey-island-can-grog-actually-dissolve-a-met...
90•zdw•1d ago•16 comments

Ideas on modernizing the open-source desktop

https://lwn.net/SubscriberLink/1095425/2d9f411252325784/
330•signa11•14h ago•408 comments

RAM: the forgotten history (2024)

https://blog.coredump.cx/p/memory-the-forgotten-history
95•Luc•2d ago•2 comments

When the Debugger Lies

https://danielmangum.com/posts/when-the-debugger-lies/
54•hasheddan•2d ago•17 comments

ArXiv receives multiyear commitments to support it as an independent nonprofit

https://blog.arxiv.org/2026/09/23/arxiv-receives-multiyear-investment/
285•JohnHammersley•18h ago•38 comments

Enjoy Every Sandwich

https://bradmontague.substack.com/p/enjoy-every-sandwich
151•NaOH•1d ago•66 comments

Coulomb's law remains tricky to test at home

https://chillphysicsenjoyer.substack.com/p/coulombs-law-remains-tricky-to-test
16•surprisetalk•2d ago•15 comments

The newest ESP32 can run Linux and it's getting close to a Raspberry Pi

https://www.xda-developers.com/newest-esp32-run-linux-close-to-raspberry-pi/
167•adunk•6h ago•74 comments

VSCode's SSH Agent Is Bananas (2025)

https://fly.io/blog/vscode-ssh-wtf/
293•Rapzid•20h ago•188 comments

Contrastive Language Models

https://contrastive-lm.notion.site/
145•erichocean•13h ago•41 comments

Oracle invokes force majeure on New Mexico AI data center

https://qz.com/oracle-force-majeure-new-mexico-ai-data-center-092426
16•dgellow•1h ago•2 comments

The "Windows XP Box" (2003)

https://www.mini-itx.com/projects/windowsxpbox/
214•doubletwoyou•2d ago•44 comments

The Year of Internal Tools

https://www.geocod.io/code-and-coordinates/2026-09-23-the-year-of-internal-tools
54•thecodemonkey•10h ago•19 comments

Fixing the Portobello Police Station Clock

https://pointinthecloud.com/2026-04-11-211700.html
508•avidly•1d ago•112 comments

Hackers influence ChatGPT and Gemini to direct users to scam centers

https://medium.com/@arielsimon/dark-sourcery-how-hackers-manipulate-ai-to-scam-you-88df434d2073
113•ArielSimon•5h ago•38 comments

LinkedIn wins court order blocking mass scraping of user data

https://therecord.media/linkedin-wins-court-order-blocking-mass-scraping
40•ilamont•1h ago•27 comments

What Is RLCD? The Secret Behind Jev

https://di-zhang-llm.github.io/blog/what-is-rlcd-the-secret-behind-jev/
47•tnspacetime•5h ago•6 comments

Owners mourn spoiled food after firmware update bricks Samsung smart fridges

https://arstechnica.com/gadgets/2026/09/owners-mourn-spoiled-food-after-firmware-update-bricks-sa...
221•nonfamous•4h ago•221 comments

Dynamic Abliteration: Non-Destructive Refusal Suppression via Engram Steering

https://blog.madhukaraphatak.in/non-destructive-refusal-supression-using-engram
98•phatak-dev•3h ago•32 comments
Open in hackernews

GitHub has not removed malicious imitation software after 3 weeks

https://successfulsoftware.net/2026/09/24/github-has-not-removed-malicious-imitation-software-after-3-weeks/
112•hermitcrab•1h ago

Comments

someonebaggy•1h ago
If it's your software send a DMCA. They have a legally required timeframe to process those. If it's open source, however, then you don't have any valid DMCA claim.
93po•1h ago
Code can be open source while the name and logos are copyrighted and still enforceable via DMCA
someonebaggy•12m ago
Which project copyrighted its name and logo?
hnlmorg•54m ago
That’s not how open source works.

Open source code is still copyrighted. What the license defines is rights that people have in distributing that code. If an unofficial repository is using open source code to ship malware, and the license that software had didn’t allow that, then the unofficial repository is still breaking copyright law despite the code being open source.

NewJazz•40m ago
Also open source license doesn't grant use of trademarks, but I'm not sure that means DMCA applies.
someonebaggy•12m ago
There's no open source license that prohibits derivative works that are malware.
whateveracct•8m ago
i think it's in the spirit of it, which is enough for a DMCA lol
joshuat•1h ago
Not exactly the same, but I've noticed a pretty sizable uptick in the number of spam/scam PR comments being left on GitHub (and a longer delay before they're removed after report).

Not the worst thing in the world, they're easy to spot, but I'd like to see GitHub invest more time in protecting their users from falling victim to these bad actors.

kg•1h ago
In the future just issue a DMCA takedown right away for cases like this, IMO.
hermitcrab•1h ago
Author of the post here. Github finally took the offending page down approximately 10 minutes after the post appeared on the front page of HN. Total coincidence. I'm sure!

Moral of the story. If you want even the most basic level of support from Github, you need to get on the front page of HN first.

And it seems they are able to do things very quickly, when they want to. Bastards.

ajmurmann•59m ago
It might not be a willingness issue as much as a bandwidth issue.
cyanydeez•57m ago
unwilling to provide proper support?

Just seems like a silly rational response to the same problem.

locknitpicker•57m ago
Yes,evidently bandwidth from HN unblocks takedown requests of malicious content.
ajmurmann•54m ago
Prioritization and escalation exists in most companies. I guarantee you that once an issue hits the HN front page, even engineers who might have totally different talks will get involved. (Never worked at GH or have talked to anyone there in years but this is how everything works pretty much everywhere)
toomuchtodo•49m ago
The public shaming will continue until the internal incentives improve. Make sure to drop that HN thread link into the internal task tracker y'all. Don't forget to report to journalists if the severity warrants it (Brian Krebs, 404media, etc).

"Show me the incentive and I'll show you the outcome."

jay73763•56m ago
why would anyone host commercial binary software on github or any other third party domain?
hermitcrab•50m ago
Pirates and crackers generally don't host stuff on their own domains. They don't want to pay for the bandwidth and they don't want to be traced.
sgskinner•18m ago
I think they’re alluding to OP not hosting their own downloads.
hermitcrab•11m ago
I am the OP. I host my own downloads on my own domain and nowhere else. Only the malicious imitation is hosted on Github.
Havoc•41m ago
They’re presumably too busy with keeping availability above nine sixes
OCTAGRAM•14m ago
I recently found "free" version of Lossless Scaling on GitHub. The release installer is definitely malware. It took GitHub 3 days to shutdown malware distribution. Category of my ticket was malware report, not copyright infringe
msalihb•3m ago
I found a page that serving e-books I've purchased on github. It is a bit bad feeling
MBCook•3m ago
What do you know. Apple’s “never run to the media it never helps anything” rule works just as well with GitHub.
wingerlang•3m ago
[delayed]
iAMkenough•54m ago
Good thing HN provided them some bandwidth to do their jobs.
post-it•53m ago
Bandwidth can be bought with money, of which Microsoft made an extra $133.7 billion this year.
NobodyNada•51m ago
Sounds like they can afford elite customer support.
ajmurmann•49m ago
We know that coding agents have been pushing GH to its limits. Scaling is hard - especially staff. Maybe they aren't trying to scale support but I think it's reasonable to give them the benefit of doubt here, given what we know publicly
iAMkenough•44m ago
That’s a self-inflicted issue they should have properly planned for.
cj•43m ago
You’re saying this is a problem money can’t solve?

There’s no need for benefit of the doubt when it comes to the level of support provided by tech companies.

Bad support by tech companies is a conscious profit-preserving choice.

cwillu•30m ago
Microsoft is not some plucky upstart company with 12 employees and an unexpectedly popular product. We do not, in fact, need to give them the benefit of the doubt here.
veverkap•4m ago
They aren't trying to scale support. If anything, they are trying to throw AI at the problem. The support team is understaffed and overwhelmed.
kstrauser•32m ago
Never thought I'd see the day when Microsoft is elite.
whateveracct•10m ago
They have to dump all that free cash into data centers, sorry
koolba•41m ago
> Moral of the story. If you want even the most basic level of support from Github, you need to get on the front page of HN first.

This also works for Google support.

> And it seems they are able to do things very quickly, when they want to. Bastards.

I wouldn’t chalk any of this up to malicious intent. I’m sure they are swamped with such requests.

It was already a problem before agents could automatically perform these actions.

And it’s not something you can really automate on their end either. At least not the judgement call on the removal. Imagine if there was a fully automated process and it inadvertently took down a legit project.

debugnik•32m ago
> I wouldn’t chalk any of this up to malicious intent. I’m sure they are swamped with such requests.

Stalling in the hope that reporters won't escalate, instead of allocating a tiny bit of their billions in profit to hiring for this, is malicious in my book.

majorchord•26m ago
Can you provide evidence of these claims?
csomar•19m ago
I mean we are in the thread of evidence right now?
veverkap•6m ago
GitHub support is full of amazing, hard working people.

It is also comically understaffed. This is not because they can't find people to work - it's not given the budget necessary.

amdsn•14m ago
I had several small requests for moderation (deleting and banning spammers posting spam/crypto scam issues/PRs in my repos and ones I contribute to) answered within a day earlier this year after more than a decade of never needing to request moderation. I'm not defending GH here as it's obviously unacceptable that the OP's issue took this long, but they definitely do or at least did have mods. I would guess they need a lot more of them if something this serious went unaddressed, or maybe the ones I interacted with are now gone and have not been backfilled.
elAhmo•5m ago
It is a problem they could solve if they want to. They have billions of profits per quarter.

They just don't want to. Not malicious, just ignorant and disrespectful of their users.

hsuduebc2•40m ago
Just send DMCA if you want their attention, they act harshly and quickly. Even when it's false one.
elAhmo•6m ago
Describes pretty much any of the big companies. For example, I have seen numerous times people got their account locked on Google, or their app stuck in limbo at Apple, and then after post becomes viral all problems get solved.