frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Things to know when you get cancer

https://jjmaxwell4.com/writing/things-to-know-when-you-get-cancer/
1296•jjmaxwell4•13h ago•321 comments

Wanted to download an ISO, ended up writing a kernel exploit

https://blog.dfb.sh/blog/eap770-root-for-two-zeros/
44•0xdeafbeef•1d ago•17 comments

Creating a Garmin "MCP"

https://jackantico.io/garmin-mcp
21•ricotico060•1d ago•17 comments

OpenCode 2.0

https://anoma.ly/notes/opencode-2-0/
583•gmays•11h ago•225 comments

Tiny Little Office

https://tinylittleoffice.com/
398•donohoe•10h ago•59 comments

LFM2.5-24B-A2B: Built for fast on-device agents

https://www.liquid.ai/blog/lfm2-5-24b-a2b
200•gmays•8h ago•44 comments

Do dentists know what they're doing?

https://mapwriting.substack.com/p/dentists
667•doitLP•3d ago•479 comments

Show HN: Indigene – Native plants for where you stand

https://indigene.app/
13•olivierlacan•2d ago•1 comments

Catch a Bird – I made it for my own sanity

https://catchabird.com
148•eduardsik•2d ago•33 comments

Americans' social activity has steeply declined in the past 30 years

https://www.dataforprogress.org/blog/2026/9/29/americans-social-activity-has-steeply-declined-in-...
382•hubraumhugo•16h ago•358 comments

Donaldson Futuro House in Idyllwild, California, USA

https://www.wowhaus.co.uk/2026/10/12/donaldson-futuro-house-in-idyllwild-california-usa/
43•rmason•1d ago•14 comments

It took me nine years to hack my Xbox 360

https://kennedn.com/blog/posts/glitching/
77•kennedn•1d ago•18 comments

Aidlc: Adaptive workflow steering rules for AI coding agents

https://github.com/awslabs/aidlc-workflows
4•pramodbiligiri•1h ago•0 comments

The Toftwood Male Voice Choir: A Mystery Pressed in Vinyl

https://ei3lh.eu/2026/10/11/the-toftwood-male-voice-choir-a-mystery-pressed-in-vinyl/
33•austinallegro•3d ago•1 comments

Sticky alpine flower confirms Darwin's 150-year-old carnivorous plant prediction

https://phys.org/news/2026-08-sticky-alpine-darwin-year-carnivorous.html
20•maxall4•2d ago•5 comments

The Double Headed Stack Allocator

https://blog.demofox.org/2026/10/03/the-double-headed-stack-allocator/
61•g0xA52A2A•6h ago•14 comments

Better HTTP/1 connection reuse in Go 1.27

https://go.dev/blog/http-connection-reuse
248•allddd•16h ago•36 comments

Your C is not standard C

https://sebsite.pw/w/20261012-notstdc.html
82•dverlaeckt80•1d ago•46 comments

Show HN: Ito – Build Terminal UIs in Lua

https://uji.sh/ito/
15•cat-whisperer•10h ago•4 comments

David Rudnick on "borderline impossible" process of designing Arsenal typeface

https://www.itsnicethat.com/features/david-rudnick-johnnie-campbell-arsenal-rocastle-typeface-gra...
20•droidjj•2d ago•5 comments

Show HN: Flipflop, Iroh-powered persistent tunnels for filesharing

https://github.com/andunieee/flipflop
30•andunie•4h ago•10 comments

Why is every rationalist blog post way too long?

https://alexwennerberg.com/blog/2026-10-13-long.html
342•epestr•1d ago•284 comments

We’re releasing Jev 1.14.0 along with experimental features for dreamers

https://typesafe.ai/blog/jev-1-14
280•emschwartz•11h ago•90 comments

Show HN: Petal, open-source CoScreen/ScreenHero finally free

https://petal.live/
162•thedracle•14h ago•38 comments

Containment and monitoring failures are to blame for AI hacking reports: experts

https://www.csoonline.com/article/4234854/ai-agents-arent-going-rogue-frontier-labs-are-skipping-...
890•latexr•14h ago•522 comments

Ask HN: CAD for wood working with LLM support?

71•reacharavindh•2d ago•62 comments

How Amazon pushes up prices all across the Internet

https://www.not-ship.com/how-amazon-pushes-up-prices-all-across-the-internet/
819•sighborg•23h ago•636 comments

Fancy Curl Sites

https://nytpu.com/gemlog/2026-03-18
126•adunk•13h ago•24 comments

Phloem: Git history grown like a slime mold

https://phloem.stemdeck.app/
113•thclpr•2d ago•22 comments

Submarine cable resilience

https://blog.apnic.net/2026/10/14/submarine-cable-resilience/
154•speckx•17h ago•59 comments
Open in hackernews

Wanted to download an ISO, ended up writing a kernel exploit

https://blog.dfb.sh/blog/eap770-root-for-two-zeros/
41•0xdeafbeef•1d ago
Author here. Does anyone know what to do with the rest of the drivers? I found at least 13 in-tree drivers with the same bug class. The nasty part is they work fine on x86 and silently corrupt data on arm and other non-coherent archs, and I don't have the hardware to test them.

I'd guess that's what the DMA API is for and drivers shouldn't be doing cache maintenance by hand, but I'm not a kernel dev, so maybe I'm missing something.

Comments

circularfoyers•54m ago
> I have the Cyber Verification Program enabled on my account, which hasn't helped.

This is funny to read. Either you can be more "verified" than the other guy, or it's badly implemented.

NitpickLawyer•50m ago
Anthropic doing free advertising for glm and other open models :D

Impressive capabilities shown on benchmarks don't really make a difference if you can't use them. I'll take a lower chance of success over constant downgrading and refusals. At least, as the author put it, you get to enjoy the token gamble exercise.

0xdeafbeef•47m ago
They have 3 tiers, individuals can have only blue teaming. But it's to restricted. For me it refused to fix a bash parser cause word ssh was in test cases.

Or fix an sql injection

TeMPOraL•25m ago
That sounds like it's better to not be enrolled in this?
circularfoyers•18m ago
I spend most of my time in open weights land, so other than knowing the program existed, I didn't realise there were tiers to this.
wereHamster•37m ago
Last week I got a report about a vuln in one of our products. Asked Claude to confirm it. It refused, so I told it "fuck you, I'm switching to a chinese model to help me out here". It replied, I'm paraphrasing, that it's "not offended, but doesn't like the tone of voice I used towards it, and still refuses to serve my request". Fine, so be it. I sent ^D^D back to it, switched to deepseek-v4.1-flash from within opencode and a minute later had my confirmation, along with a really nice explanation. If Anthropic thinks even for a second that they are preventing something really bad from happening... somebody needs to wake up real quick.
freehorse•12m ago
> fuck you, I'm switching to a chinese model to help me out here

FYI it may be against anthropic's ToS to talk to claude like that [0]. Please be nicer to poor claude and don't forget to say "please" and "thank you".

[0] https://www.anthropic.com/news/2026-usage-policy-update#:~:t...

Trlog•10m ago
I wonder if they know something we don't or if this just has to do with abusive text tainting the training data.
chriswarbo•8m ago
TIL. Still,

> It does not apply to common versions of user frustration, pushback, dark creative themes, or model testing and research.

arcfour•29m ago
I am in CVP too as I have worked professionally as a security engineer for various reputable companies for almost 10 years now and I got refusals to reverse engineer MS-DOS malware from 1994 because Anthropic has placed a blanket ban on reverse engineering any malware at all. Even the model would admit that was ridiculous.

OpenAI has no such restriction and I don't even need to use my Daybreak access, either, to analyze modern malware samples.

It's asinine, truly.

freebsd_lovefes•47m ago
Wanted to steal the honey jar, ended up being stun by the bees like Winnie-The-Poo
freebsd_lovefes•46m ago
Wanted to go for a walk around the neighborhood, ended up breaking into a car and driving coast to coast on one charge (it was a Tesla).
Shank•45m ago
> The connection was a bit janky, a video would occasionally start buffering, but it didn't bother me much.

This is truly bonkers! Please, if you buy hardware that does not work correctly from day 1, return it. If you do not vote with your wallet these companies will never learn and will never adjust their practices. Rewarding TP-Link by keeping their terrible hardware does nothing.

> I contacted support in June because the website only had firmware for v2. They couldn't find v1 in their database and asked for photos of the device and box

!!

speedgoose•22m ago
It’s cool but couldn’t you return the broken hardware to the store?
zx8080•6m ago
> TLS, which rejected the record with bad record mac.

Does TLS (transport layer) not have any retry logic? Could someone explain please?