frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
765•tuyuri•4h ago•443 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
227•ejohnso49•2h ago•117 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
183•abhisek•3h ago•79 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
237•nnx•3h ago•27 comments

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
656•hkc•8h ago•302 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
158•nr378•3h ago•95 comments

Rust off Rails: The opinionated web stack for the AI era

https://rustoffrails.org/
41•mike1o1•1h ago•33 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
56•bryanrasmussen•1d ago•4 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
88•surprisetalk•2h ago•53 comments

What I learned from six months of being stupid on purpose

https://wvez.org/blog/learning-to-be-stupid/
49•wvez22•1h ago•29 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
76•raahelb•4h ago•26 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
82•armcat•5h ago•22 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
59•scottfalconer•1d ago•84 comments

Your MCU Likely Escaped the eMudhra Intermediate CA Compromise

https://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise/
22•hasheddan•1h ago•8 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
14•giuliomagnifico•1h ago•3 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
16•simfinii•11h ago•15 comments

C++ futures part 1: The mental model

https://devblogs.microsoft.com/oldnewthing/20261012-00/?p=112767/
47•ibobev•1d ago•9 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•5h ago

Trials and Tribulations of Native Lua Compilation

https://samyeyo.github.io/clx/blog.html
7•_samt_•3d ago•1 comments

Show HN: ULDA – Client-side encryption with a simple JavaScript API

https://demo.ulda.io/
8•nonsence•2d ago•3 comments

Way to Play Super Mario 64: On Apple Vision Pro

https://www.pagetable.com/303
154•frizlab•2d ago•56 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
338•gumby•17h ago•150 comments

Show HN: Sumi.css – CSS Framework

https://github.com/vladocar/Sumi.css
47•bepero•5h ago•10 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
20•aaronbrethorst•27m ago•5 comments

Whatever Happened to Fire Escapes

https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes
161•sohkamyung•7h ago•125 comments

The Decoherence Trap

https://maevyn.codes/decoherence
147•cassianoleal•2d ago•63 comments

The bridge to agent-scale Git infrastructure

https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastru...
5•Klaster_1•1h ago•0 comments

PHP2Shell: AI uncovers critical RCE in PHP

https://www.wiz.io/blog/php2shell-php-rce
394•danlark1•4h ago•146 comments

The phenomena that brighten dawn and dusk (2016)

https://www.colorado.edu/asmagazine-archive/node/2039
6•NaOH•20h ago•0 comments

The Lucrative World of Literary Scams

https://www.thedial.world/articles/news/ai-book-scams
53•samclemens•2d ago•7 comments
Open in hackernews

Rust off Rails: The opinionated web stack for the AI era

https://rustoffrails.org/
39•mike1o1•1h ago

Comments

xutopia•59m ago
Loco is a Rust framework that adopted all Ruby on Rails conventions and they're applied through and through. The naming of this project confused me.
joshmn•55m ago
Rails has a ton of conventions but also implements a lot of patterns described in Patterns of Enterprise Application Architecture. People seem to forget the latter.
firemelt•49m ago
whoa cool can u elaborate more?
xutopia•27m ago
Josh is right. ActiveRecord, MVC, Front Controller(router + ActionDispatch), Template View(ERB) as well as a lot of what works under the hood in ActiveRecord comes from that book.

Though when I mean conventions I also mean where files are placed, how tables and fields are named, how migrations work and how DRY is part of the framework through and through.

A Loco app doesn't require fiddling with the database at all to replace its Rails counterpart. Hence why this naming of project confused me.

Kerrick•14m ago
Try reading the aforementioned book, and look at the classes in the Rails API. They are often named very simply after the pattern.

For example, Active Record is on Page 160, and inspired https://api.rubyonrails.org/classes/ActiveRecord.html. Model View Controller is on page 330 and inspired https://api.rubyonrails.org/classes/ActiveModel.html, https://api.rubyonrails.org/classes/ActionView.html, and https://api.rubyonrails.org/classes/ActionController.html. Template View is on page 350, and inspired https://api.rubyonrails.org/classes/ActionView/Template.html.

Not all patterns used in Rails are so directly named, though. Layer Supertype is on page 475 and is behind the `class Company < ActiveRecord::Base; end` style. Single Table Inheritance is on page 278, and inspired https://api.rubyonrails.org/classes/ActiveRecord/Inheritance.... Repository is on page 322, and inspired https://api.rubyonrails.org/classes/ActiveRecord/FinderMetho.... Value Object is on page 486, and is a key part of https://api.rubyonrails.org/classes/ActiveRecord/Aggregation....

poszlem•53m ago
"Mostly Claude Opus 5.5 in Claude Code, with one human steering by prompts. "

I find it funny that I would happily use a version of this if I created it (with Claude), but somehow cannot get myself to use it since it's been prompted by someone else. I wonder what's that about.

bitbasher•50m ago
That's something I don't fully understand with a lot of these (clearly ai generated) projects.

If you didn't take the time to build the thing you're trying to sell to me (even if it's free) why should I buy (use) it? I could just prompt my own solution instead of randomly curl-installing some thing from someone I don't know.

Am I the crazy one here?

dumberquestions•21m ago
Well, tokens cost money, and in theory, if someone else already built something you need that costs a billion tokens, it makes more financial sense to use theirs than prompt your own.
darkwater•5m ago
But in this case you still need to spend the tokens, although one could argue that it took some trial and error, with its consequential token spending, to nail the right set of prompts and templates like in this case.
ModernMech•20m ago
> I could just prompt my own solution

Okay but in the limit, you can't prompt all the things. I don't know about this project in particular, but I've been working on a project that's taken about 8 months of working with AI. Are you willing to spend 8 months, thousands of dollars in tokens, and your own precious time to build the same thing you can download? How many projects are you willing to do that for? Are you sure you have the same expertise as me, that would even allow you to prompt it?

danso•51m ago
> Rust off Rails is a set of Markdown files that tell coding agents how to build a full-stack Rust web app: one blessed stack, one layout, one way to do each thing. The convention lives in the prose. The agent writes the code...Other frameworks ship a library. Rust off Rails gives your agent the judgment

I suppose I wrongly infer "deterministic" from "opinionated". But this approach still doesn't particularly opinionated other than "AI agents are sophisticated and reliable enough nowadays to build a stable Rust app from Markdown instructions"

ambicapter•19m ago
We live in a post-truth and post-definition world.
logankeenan•49m ago
This already exists and it’s called loco

https://loco.rs/

roarcher•41m ago
That's not the same thing at all. Loco is an actual framework. This project apparently contains no code at all. It's just a bunch of markdown files that tell an LLM how to implement a web app from scratch following Rails's conventions.
mchusma•31m ago
Have you used loco? Curious any thoughts.
xutopia•14m ago
I have an and absolutely love it. Rails dev for 20+ years. The conventions are drop-in replacements for a Rails app. Aside from using different commands in a day-to-day it's pretty much the same thing but so much more performant.

One Rails app used ~700MB of RAM at peak (live speed dating events with emails and heavy Hotwire/Turbo Streams use). I converted it to Loco with HTMX and the app now uses about 60MB at peak and benchmarks show 30x the traffic possible on the same hardware.

What more my CI/CD pipeline runs about 5 times faster including my entire test suite (TDD with hundreds of tests and BDD setup with about 60 scenarios running headless chrome). On a day to day while doing development my unit tests feel nearly instant.

Also Rust isn't as pretty on the eyes as Ruby but me downgrading my VPS server from 4GB to 2GB is something I benefit from when I'm away from my computer.

If you're a Rails developer nowadays I don't see the benefit of the framework anymore.

pjmlp•46m ago
The Web stack for the AI era is using CMS products like Optimizely Opal, Sitecore AI, Storyblocks, Sanity, Contentful,... combined with Vercel V0.
tayo42•41m ago
Why is this better then dumping my thoughts into a file and having some AI go and build an app off whatever the fotm web framework in Rust is and react?

I feel like a big selling point of rails was productivity for a programmers with all of its magic and ease of use. But if your not reading the code,who cares? Ai should be smart enough to work with any format of notes?

nemothekid•15m ago
I think my new tell for low effort sites is if they default to the standard Claude Design language. This site has all of it

* Unnecessary badges

* text-uppercase section headers

* Randomly italicized words

jshen•11m ago
Everything anyone does comes with resource constraints. Does everything warrant a custom designed web page?
tyushk•9m ago
Web stacks? Probably.
_visgean•9m ago
well not everything, but one would expect some effort to have a good web from ... a web framework?
roarcher•14m ago
> Rust off Rails is a set of Markdown files that tell coding agents how to build a full-stack Rust web app [...] The convention lives in the prose. The agent writes the code.

What exactly is the benefit of this? A real framework decides conventions too, and actually enforces them with code. This just sounds like a way to burn more tokens for fewer guarantees.

hmokiguess•13m ago
I am so tired
recurseP•13m ago
I am not a Ruby on Rails dev, but I think those deserve more respect than this insult on their work. DHH's lately statements are injury enough.
bennettpompi1•6m ago
why does this slop have so many votes
lowbloodsugar•49m ago
For me it's because I've seen what others do with Claude vs how I iterate with Claude. There's an enormous range in the bound "one human steering". Oh, is that a zen koan? What is the sound of one human steering?
microsoftedging•48m ago
I think that's it really, the fact that someone else made it. Sometimes we make things for ourselves that lean perhaps on the _functional_ side, (tools, food...) that we would never want served to us. And AI just exacerbates this. I do wonder why that is though.
reassess_blind•40m ago
Very true with the food analogy. I’m not eating whatever this persons concoction is, but I’ll make it myself at 3am and chew it gloomily.
red_hare•45m ago
It reminds me of when everyone was trying to build their own frontend framework. Like "neat, I agree with this in concept, but I don't trust your code or you to maintain this project"
rj_hoff•45m ago
I feel the same way, there’s a disconnect between writing the code and prompting the code that requires a different form of interaction from the human, I’ll call it respect for lack of a better word.

The problem for me, and I suspect for you, is I don’t know how to quantify the level of respect other humans have put into their prompt engineering and iterative processes to ensure the output is satisfactory.

I think we’re going to eventually learn how to determine prompt competence the same way we’ve determined code competence but it’s going to take a while before it all shakes out.