frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Israeli firm's digital ads enabling installation of 'zero-click' spyware

https://www.theguardian.com/technology/2026/oct/15/israeli-firm-digital-ads-enabling-installation-of-zero-click-spyware-researchers-say
75•chunkyslink•37m ago

Comments

fergie•25m ago
How does this actually work? Are they talking about browser fingerprinting or something else?
reactordev•23m ago
If I had to ponder a guess…

It’s to do with hiding malware/spyware in an image which ends up in your cache on device. I can’t go much further into details but all this takes is for you to visit a site that serves it via ad network.

Israel has been known to have some sneaky spyware in the past with Pegasus.

room606•22m ago
https://blog.confiant.com/p/adint-weaponized-ad-tech-for-zer...

https://citizenlab.ca/research/how-discover-tech-turned-targ...

beel•20m ago
Here is a better article https://citizenlab.ca/research/how-discover-tech-turned-targ...
andunie•17m ago
Looks like it's much worse, they get more information due to exploits, and they can take full control of your machine.

Article on the CitizenLab website: https://citizenlab.ca/research/how-discover-tech-turned-targ...

pelagicAustral•16m ago
There is a tinfoil narrative that suggest that entire formats are in bed with intelligence services. It sounds pretty wild, but other zero-click attack vectors have been possible through sabotaging the parsing of file formats. ie. send a message -> hacked. How? the message wasnt even opened. How is, an app like Messenger receives a photo attachment binary, tries to unpack it and in doing so receives an instruction that stops the parser and executes arbitrary instructions.
donutdonot•5m ago
With all the AI decompilation going on would it not be possible to find these things in the binary by now?
andunie•25m ago
Do ad blockers protect against this?
Lio•19m ago
> Reuters has reported that billions of dollars’ worth of Meta’s ad revenue comes from ads for scams, illegal gambling, pornography and other banned content. In the US, ICE and other government agencies have bought software that uses ad tech data to track people’s movements.

I don't know if an ad blocker protects against Discover-Tech’s Controlium but in general you'd be a fool to allow ads in your browser in at this point. The ad industry is pretty shady all round.

andunie•23m ago
Turns out Google killing Android privacy was completely useless as a way to prevent people from being hacked, but they might use this type of stuff to justify even more closing of supposedly "free" paltforms.

Likewise, using privacy messengers like Signal is also useless if they can just take control of your entire device anytime they want.

user43928•6m ago
I'm sure Google's latest push to make it inconvenient to install apps from outside Google's Playstore, where Google charges a 30% commission, is going to solve that.
amelius•18m ago
It's fun to see adtech digging a hole for themselves ...
classified•13m ago
If only! I think we can no longer afford to ignore all these security threats and should make online advertising wholesale illegal. But I won't hold my breath.
iugtmkbdfil834•13m ago
Looking at the bright side, we might just be able to make people really dislike ads.
throw0101c•7m ago
Actual report from Citizen Lab:

* https://citizenlab.ca/research/how-discover-tech-turned-targ...

Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support

https://libreboot.org/news/libreboot2610.html
48•iamnothere•44m ago•12 comments

Show HN: Unfenced – Land for sale that borders public land

https://unfenced.land/
65•otherwatersflow•1h ago•31 comments

Israeli firm's digital ads enabling installation of 'zero-click' spyware

https://www.theguardian.com/technology/2026/oct/15/israeli-firm-digital-ads-enabling-installation...
88•chunkyslink•37m ago•19 comments

Things to know when you get cancer

https://jjmaxwell4.com/writing/things-to-know-when-you-get-cancer/
1631•jjmaxwell4•18h ago•386 comments

Wanted to download an ISO, ended up writing a kernel exploit

https://blog.dfb.sh/blog/eap770-root-for-two-zeros/
205•0xdeafbeef•2d ago•102 comments

OpenCode 2.0

https://anoma.ly/notes/opencode-2-0/
724•gmays•16h ago•306 comments

The Haunted Toys R Us

https://www.retroist.com/p/the-haunted-toys-r-us
12•speckx•2d ago•1 comments

The First Social Network: In rural Argentina residents send messages w AM radio

https://www.newyorker.com/magazine/2026/10/19/the-first-social-network
71•bookofjoe•1d ago•25 comments

Tiny Little Office

https://tinylittleoffice.com/
531•donohoe•15h ago•111 comments

Show HN: Indigene – Native plants for where you stand

https://indigene.app/
64•olivierlacan•2d ago•12 comments

Do dentists know what they're doing?

https://mapwriting.substack.com/p/dentists
810•doitLP•3d ago•595 comments

Catch a Bird – I made it for my own sanity

https://catchabird.com
268•eduardsik•3d ago•80 comments

Ubuntu 26.10 (Stonking Stingray) released

https://lists.ubuntu.com/archives/ubuntu-announce/2026-October/000330.html
30•dgavrilov•1h ago•31 comments

LFM2.5-24B-A2B: Built for fast on-device agents

https://www.liquid.ai/blog/lfm2-5-24b-a2b
249•gmays•13h ago•60 comments

Americans' social activity has steeply declined in the past 30 years

https://www.dataforprogress.org/blog/2026/9/29/americans-social-activity-has-steeply-declined-in-...
470•hubraumhugo•21h ago•432 comments

It took me nine years to hack my Xbox 360

https://kennedn.com/blog/posts/glitching/
123•kennedn•2d ago•33 comments

Sticky alpine flower confirms Darwin's 150-year-old carnivorous plant prediction

https://phys.org/news/2026-08-sticky-alpine-darwin-year-carnivorous.html
65•maxall4•2d ago•26 comments

Show HN: Ito – Build Terminal UIs in Lua

https://uji.sh/ito/
51•cat-whisperer•15h ago•9 comments

Stopping sand from destroying a hydropower turbine [video]

https://www.youtube.com/watch?v=kCYrSBexF_4
15•CaliforniaKarl•2d ago•3 comments

Donaldson Futuro House in Idyllwild, California, USA

https://www.wowhaus.co.uk/2026/10/12/donaldson-futuro-house-in-idyllwild-california-usa/
60•rmason•1d ago•22 comments

Show HN: Flipflop, Iroh-powered persistent tunnels for filesharing

https://github.com/andunieee/flipflop
64•andunie•9h ago•25 comments

David Rudnick on "borderline impossible" process of designing Arsenal typeface

https://www.itsnicethat.com/features/david-rudnick-johnnie-campbell-arsenal-rocastle-typeface-gra...
45•droidjj•2d ago•27 comments

Tracing Mystery Network Traffic with eBPF Across HRT's Global Compute Cluster

https://www.hudsonrivertrading.com/hrtbeat/long-on-research-short-on-bandwidth/
13•theHRTBeat•2d ago•2 comments

Better HTTP/1 connection reuse in Go 1.27

https://go.dev/blog/http-connection-reuse
275•allddd•21h ago•45 comments

The Double Headed Stack Allocator

https://blog.demofox.org/2026/10/03/the-double-headed-stack-allocator/
77•g0xA52A2A•11h ago•25 comments

Your C is not standard C

https://sebsite.pw/w/20261012-notstdc.html
107•dverlaeckt80•1d ago•73 comments

Show HN: Petal, open-source CoScreen/ScreenHero finally free

https://petal.live/
195•thedracle•19h ago•39 comments

How Amazon pushes up prices all across the Internet

https://www.not-ship.com/how-amazon-pushes-up-prices-all-across-the-internet/
889•sighborg•1d ago•681 comments

The Toftwood Male Voice Choir: A Mystery Pressed in Vinyl

https://ei3lh.eu/2026/10/11/the-toftwood-male-voice-choir-a-mystery-pressed-in-vinyl/
47•austinallegro•3d ago•13 comments

Ask HN: CAD for wood working with LLM support?

96•reacharavindh•2d ago•91 comments