frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
427•tuyuri•1h ago•174 comments

PHP2Shell: AI uncovers critical RCE in PHP

https://www.wiz.io/blog/php2shell-php-rce
247•danlark1•1h ago•64 comments

DuckDB 2.0.0 LTS "Cinnamon Teal"

https://duckdb.org/2026/10/21/announcing-duckdb-200
121•nnx•1h ago•7 comments

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
531•hkc•6h ago•235 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
84•nr378•1h ago•41 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
31•abhisek•1h ago•11 comments

Another day, another GitHub incident

https://www.githubstatus.com/incidents/nms1dpzmh9d9
19•bearsyankees•34m ago•6 comments

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck

https://www.techdirt.com/2026/10/20/accident-or-not-the-no-kings-takedown-is-why-you-shouldnt-ren...
185•robtherobber•1h ago•110 comments

Most advice is right for the person giving it

https://coached.com/essays/most-advice-is-right-for-the-person-giving-it/
82•rohanm93•2h ago•65 comments

Qwen3-Coder writes less secure code when told it's for a US persona

https://www.hirundo.io/blog/qwen3-coder-vulnerabilities
199•mattifrank•3h ago•97 comments

LayerFS: The filesystem for AI coding agents

https://layerfs.ai/
44•l2dy•2h ago•24 comments

Upcoming critical PHP security release (CVE-2026-109618 / -109619)

https://news-web.php.net/php.announce/509
1424•xd•19h ago•600 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•3h ago

The Future of CSS

https://www.joshwcomeau.com/css/interop-2027/
519•soheilpro•13h ago•220 comments

C++ futures part 1: The mental model

https://devblogs.microsoft.com/oldnewthing/20261012-00/?p=112767/
18•ibobev•1d ago•4 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
21•raahelb•1h ago•1 comments

Way to Play Super Mario 64: On Apple Vision Pro

https://www.pagetable.com/303
119•frizlab•2d ago•40 comments

Show HN: SimCity, but with Permits

https://permit.petercai.com/
877•pcai•21h ago•396 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
289•gumby•14h ago•136 comments

eMudhra intermediate CA compromise

https://emudhra.we-have-a-problem.com/
1134•galadran•1d ago•435 comments

Dutch National Cyber Security Center is Offline because it uses PHP

https://www.ncsc.nl/actueel
229•jacquesm•2h ago•74 comments

Whatever Happened to Fire Escapes

https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes
125•sohkamyung•5h ago•83 comments

The Decoherence Trap

https://maevyn.codes/decoherence
118•cassianoleal•2d ago•49 comments

Voxtral 3

https://mistral.ai/news/voxtral-3/
742•ilreb•23h ago•192 comments

The Lucrative World of Literary Scams

https://www.thedial.world/articles/news/ai-book-scams
36•samclemens•2d ago•4 comments

Feds suspect ransom negotiator ran ShinyHunters extortion site

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
245•Bender•17h ago•124 comments

Good type against all odds

https://unsung.aresluna.org/good-type-against-all-odds/
178•firloop•13h ago•15 comments

The Other Epidemic: Trying to get off benzodiazepines

https://www.thebeliever.net/the-other-epidemic/
247•gaplong•16h ago•199 comments

Show HN: Sumi.css – CSS Framework

https://github.com/vladocar/Sumi.css
15•bepero•2h ago•5 comments

In Hilbert space, all things are quantumly possible

https://www.quantamagazine.org/in-hilbert-space-all-things-are-quantumly-possible-20260826/
125•unprovable•13h ago•66 comments
Open in hackernews

DuckDB 2.0.0 LTS "Cinnamon Teal"

https://duckdb.org/2026/10/21/announcing-duckdb-200
90•nnx•1h ago

Comments

xnx•1h ago
Absolutely fantastic piece of software. Even beyond being used as engine for analysis, it's amazingly versatile for ingesting and reshaping data. Great job.
RobinL•1h ago
We've found DuckDB 2.0 to be way faster on high core count machines on EC2. Not just reading data from S3, but the actual computations too. Much more likely to see 100% utilisation up to about 128vCPUs or 192vCPUs, and that CPU usage to translate into workloads completing faster.

Still don't usually see a speedup past about 192vCPU, but prior to 2.0, speed would top out at more like 64vCPU, so this is a big win.

That has enabled us to scale Splink (FOSS record linakge software) to 1bn records in 10 mins, which as far as I'm aware makes it the fastest linkage engine of this kind. Most of this performance comes from simply delegating the big calculations to the DuckDB engine! https://moj-analytical-services.github.io/splink/topic_guide...

Thanks to the team for all their work!

paoliniluis•1h ago
The fact that can now be used as a client-server architecture is a game changer. It will for sure replace many data stacks that now run on many servers with tons of cpu and ram
bambax•17m ago
Yes! And the server isn't really a server, it's still "in process" so it stays lightweight and simple. This is absolutely fantastic.