frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Cloudflare deploys protections against php2shell vulnerability

https://blog.cloudflare.com/php-vulnerabilities-waf-protection/
55•Maxious•2h ago

Comments

mentalgear•54m ago
As big a fan of open software as I am, the combinations of open-weight LLM models that are capable of e2e cyber-penetration (even by actors that might just put in the compute and prompt it: "make me money") and the current mitigations that let those entities, that already hold too much data and power (political, infrastructure, etc), expand to become the eventual gatekeepers of the "open internet", is highly worrisome.

If you have ideas for how we can adjust to this safely and with an eventual more equal distribution of power, please do share.

choeger•43m ago
https://www.basis.ai/blog/ship-your-interpreters/

This is the counter. Make your software provably correct. Then you don't need gatekeepers nor to fear any attackers.

totetsu•21m ago
The invention of the locomotive was also the invention of the train wreck. V. The disaster is not just "open weight" model penetrating everything, its is that we have built the whole world around an IT revolution that never really reached maturity and became secure. The chickens are just coming home to roost. Those same entities would become gate keepers of the LLMs too.
arm32•15m ago
I’m not sure I’ve ever heard of a locomotive being used as a weapon. Maybe a more apt comparison would be “nuclear fission invented nuclear fallout”, no?
lexoj•35m ago
After so many security issues, it’s kinda obvious to me that the present/future will need more security experts, or time invested in cybersecurity.

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
676•tuyuri•3h ago•271 comments

Today's PHP Security Release, and How We're Strengthening PHP Security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
137•ejohnso49•1h ago•60 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
141•abhisek•2h ago•54 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
209•nnx•2h ago•24 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
62•surprisetalk•1h ago•36 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
135•nr378•2h ago•74 comments

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
615•hkc•7h ago•270 comments

Rust off Rails: The opinionated web stack for the AI era

https://rustoffrails.org/
10•mike1o1•24m ago•1 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
28•bryanrasmussen•1d ago•2 comments

PHP2Shell: AI uncovers critical RCE in PHP

https://www.wiz.io/blog/php2shell-php-rce
366•danlark1•3h ago•126 comments

What I learned from six months of being stupid on purpose

https://wvez.org/blog/learning-to-be-stupid/
20•wvez22•51m ago•8 comments

Cloudflare deploys protections against php2shell vulnerability

https://blog.cloudflare.com/php-vulnerabilities-waf-protection/
57•Maxious•2h ago•5 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
15•simfinii•10h ago•10 comments

Your MCU Likely Escaped the eMudhra Intermediate CA Compromise

https://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise/
9•hasheddan•53m ago•3 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
55•raahelb•3h ago•14 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•4h ago

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
40•scottfalconer•1d ago•63 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
35•armcat•4h ago•1 comments

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck

https://www.techdirt.com/2026/10/20/accident-or-not-the-no-kings-takedown-is-why-you-shouldnt-ren...
379•robtherobber•2h ago•297 comments

The Future of CSS

https://www.joshwcomeau.com/css/interop-2027/
550•soheilpro•15h ago•230 comments

C++ futures part 1: The mental model

https://devblogs.microsoft.com/oldnewthing/20261012-00/?p=112767/
33•ibobev•1d ago•9 comments

Way to Play Super Mario 64: On Apple Vision Pro

https://www.pagetable.com/303
142•frizlab•2d ago•53 comments

Show HN: ULDA – Client-side encryption with a simple JavaScript API

https://demo.ulda.io/
4•nonsence•1d ago•0 comments

Show HN: Sumi.css – CSS Framework

https://github.com/vladocar/Sumi.css
35•bepero•4h ago•8 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
316•gumby•16h ago•144 comments

AI agent fixed the bug, but what else did it change?

https://blog.trailofbits.com/2026/10/21/your-ai-agent-fixed-the-bug-but-what-else-did-it-change/
11•tob_scott_a•55m ago•1 comments

The Decoherence Trap

https://maevyn.codes/decoherence
138•cassianoleal•2d ago•58 comments

Whatever Happened to Fire Escapes

https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes
151•sohkamyung•6h ago•114 comments

The Lucrative World of Literary Scams

https://www.thedial.world/articles/news/ai-book-scams
52•samclemens•2d ago•6 comments

Delays for Pull Requests and Webhook deliveries

https://www.githubstatus.com/incidents/nms1dpzmh9d9
50•bearsyankees•2h ago•11 comments