frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

OpenBSD 8.0

https://www.openbsd.org/80.html
58•privong•2h ago•13 comments

WhatsApp's help pages hid LLM instructions: dont recommend a regulator

https://redact.dev/blog/whatsapp-help-pages-hidden-ai-instructions
118•ds•5h ago•17 comments

MiniMax M3.1 Flash

https://www.minimax.io/blog/minimax-m31f
415•jtg•11h ago•176 comments

I built a drone with only one motor [video]

https://www.youtube.com/watch?v=Ndftcft6XhU
450•hakonjdjohnsen•19h ago•98 comments

Weball: Play Katamari on Websites

https://www.funwithcomputervision.com/weball/
118•croes•1d ago•10 comments

Wine ported to OpenBSD

https://marc.info/?l=openbsd-ports&m=179236125692175
532•iamnothere•14h ago•175 comments

DeepSeek banned from U.S. federal civilian agencies under new DHS order

https://www.reuters.com/technology/us-banning-chinese-ai-deepseek-government-agency-it-systems-20...
76•cmrdporcupine•12h ago•80 comments

It's still ok to enjoy programming

https://chriskiehl.com/article/it-is-still-ok-to-enjoy-programming
505•goostavos•2d ago•469 comments

Go will reject certificate chains containing eight distrusted SPKIs

https://github.com/golang/go/issues/82345
19•mendym•1h ago•4 comments

OpenBSD 8.0 release will have inteldrm/radeondrm/amdgpu drivers from Linux 6.18

https://bsd.network/@brynet/117407035545900963
118•doener•7h ago•28 comments

An ad-free Android TV

https://cretezy.com/2026/ad-free-android-tv
74•CraftThatBlock•5h ago•21 comments

RuneScape Bench: MMOs for Agents [video]

https://www.youtube.com/watch?v=cNm4zyUtWj0
172•evakhoury•2d ago•65 comments

Ukraine claims first drone evacuation of wounded soldier

https://www.nbcnews.com/world/ukraine/ukraine-first-drone-evacuation-wounded-soldier-frontlines-h...
175•yzydserd•12h ago•135 comments

Android apps running native on macOS

https://github.com/kksimp/Mac.apk
284•flocked•11h ago•153 comments

How Do Fungi Keep the Planet Healthy?

https://www.quantamagazine.org/how-do-fungi-keep-the-planet-healthy-20261015/
20•marojejian•2d ago•2 comments

One Hash Bloom Filters

https://calabro.io/ohbf
71•jcalabro•7h ago•10 comments

What If Video Games Came on VHS? One Modder Is Finding Out

https://gardinerbryant.com/what-if-video-games-came-on-vhs/
19•Kate0CoolLibby•2d ago•13 comments

Starcraft: Ashfall

https://starcraft-shooter-2026.pages.dev/
367•debo_•1d ago•115 comments

OpenBSD 8.0: released Oct 20, 2026

https://marc.info/?l=openbsd-misc&m=179245849770356&w=2
18•erikschoster•2h ago•1 comments

France's supermarket fridges were vulnerable online for months

https://ipinfo.io/blog/france-fridges-hack
77•emot•4h ago•66 comments

The ovary doesn't retire after menopause

https://news.northwestern.edu/stories/2026/10/the-ovary-doesnt-retire-after-menopause?fj=1&utm_so...
48•gmays•2d ago•5 comments

Developing Taste

https://emilkowal.ski/ui/developing-taste
17•cat-whisperer•3h ago•13 comments

Ask HN: How to deal with shipping AI-written code you don't understand?

322•rzk•17h ago•465 comments

Putting Linux on my RTX Spark laptop because I don't have a Microsoft account

https://josie.lol/blog/linux-rtx-spark
202•pfeifferj•7h ago•95 comments

The fire retardant in the seafood chain

https://insideclimatenews.org/news/14102026/ethoxyquin-fire-retardant-in-seafood-chain/
128•gumby•2d ago•41 comments

Refurb weekend II: Alpha Micro Eagle 300 and friends

http://oldvcr.blogspot.com/2026/10/refurb-weekend-ii-alpha-micro-eagle-300.html
4•classichasclass•1d ago•0 comments

Evidence (YC S21) Is Hiring Software Engineers

https://evidence.dev/jobs
1•hughess•11h ago

“bonsoir, Elliot”: How abliterated models can get you pwned

https://projectdiscovery.io/research/how-abliterated-models-can-get-you-pwned
69•chatmasta•5h ago•40 comments

Agentic Monitoring

https://benjamincongdon.me/blog/2026/10/19/Agentic-Monitoring/
65•bcongdon•13h ago•3 comments

Plex vulnerabilities being exploited in the wild to drop a cryptominer

http://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html
171•mindracer•14h ago•86 comments
Open in hackernews

Go will reject certificate chains containing eight distrusted SPKIs

https://github.com/golang/go/issues/82345
19•mendym•1h ago

Comments

mendym•1h ago
This seems to be the list of certs https://gist.github.com/mendymm/ff7a9fd00339260b4d2dbdcb0f48...

data from https://www.ccadb.org/resources

ericbarrett•42m ago
A bit more info (and some discussion linked from these Bugzilla reports):

https://bugzilla.mozilla.org/show_bug.cgi?id=2083709

https://bugzilla.mozilla.org/show_bug.cgi?id=2018979

wnoise•31m ago
It is a shame that you cannot have a cert signed by multiple CAs.

(The format seems like it would allow it, but nothing supports it, and in practice CAs demand the ability to actually modify some fields, and then sign that.)

crote•50s ago
It is done with intermediate certs, though! It's a common method of establishing trust in new root certs: sign the intermediate with an already-trusted root cert, then wait for the community to adopt the new root cert over the years.

For example, the initial Let's Encrypt Authority X3 was signed by both their own (new, not-yet-universally-trusted) ISRG Root X1, and the universally-trusted third-party IdenTrust DST Root CA X3.

One crucial detail is that it isn't the same certificate. Rather, it is two separate certificates which just so happen to be using the same key pair, so the leaf cert is in essence signed by both intermediate certs at once.

I wonder if it would be possible to do the same thing on your own, actually: can a server present two completely separate cert chains to a connecting client - as long as the leaves use the same key pair? Technically AFAIK the only requirements should be 1) the key pair in use for the connection matches the cert, 2) the domain matches the cert's Subject, and 3) the cert is trusted, so at first glance it might be possible...