frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

CVE-2026-111943: Compromised Intermediate Certificate Authority

https://nvd.nist.gov/vuln/detail/cve-2026-111943
198•keks24•3h ago•52 comments

Faster than earcut: triangulating 3.7M map polygons in 489 ms

https://globus.software/blog/2026/10/16/cutting-map-polygons/
72•molind•3h ago•15 comments

Jailbreaking the Switch 2

https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/
150•ledoge•4h ago•50 comments

What Is Gridifcation

https://musicalform.substack.com/p/what-is-gridifcation
9•gumby•3d ago•0 comments

WorldTUI: I trained a 360M model to pretend to be a terminal

https://simedw.com/2026/10/21/world-model-terminal/
304•alphax314•10h ago•92 comments

Xbox wants you to pay 24 to 40 cents per hour to stream games you bought

https://arstechnica.com/gaming/2026/10/xbox-wants-you-to-pay-24-to-40-cents-per-hour-to-stream-ga...
46•entryleveljobsc•52m ago•41 comments

The recently proposed o(n log n) integer multiplication algorithm [pdf]

https://web.maths.unsw.edu.au/~davidharvey/research/subnlogn.pdf
229•craigcitro•10h ago•171 comments

Several Linux kernel vulnerabilities accidentally posted to public mailing list

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
74•mrkn1•1h ago•15 comments

Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
502•passenger•14h ago•293 comments

Startup taps underwater volcano as energy source in "proof point" test

https://arstechnica.com/science/2026/10/startup-taps-underwater-volcano-as-energy-source-in-proof...
29•wffurr•2d ago•11 comments

Claude Duet

https://claude.com/product/claude-duet
438•kuberwastaken•17h ago•397 comments

No more icons in every menu by default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
367•riffraff•2d ago•218 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitatio...
28•cubefox•44m ago•1 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
543•abhisek•22h ago•175 comments

Rust Style Guide

https://google.github.io/styleguide/rustguide.html
331•kaycebasques•17h ago•195 comments

GitLab critical patch release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
365•artooro•17h ago•86 comments

OpenAI CLI

https://github.com/openai/openai-cli
159•armcat•7h ago•82 comments

Using LLM for confidence scoring is a bad idea

https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html
120•jimauthors•1d ago•66 comments

The Robot I Didn't Expect to Build

https://spectrum.ieee.org/agility-robotics-digit-5-redesign
22•bojackh•2d ago•18 comments

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/
374•swyx•1d ago•62 comments

What Is the Karakoram Anomaly?

https://nsidc.org/learn/ask-scientist/karakoram-anomaly-it-real
48•thunderbong•2d ago•8 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
236•bryanrasmussen•2d ago•51 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
597•cbg0•18h ago•341 comments

Code is clay now

https://www.albertodenia.com/writing/code-is-clay-now
198•albertodenia•2d ago•131 comments

Eigenmoon: linear algebra puzzles by moonlight

https://eigenmoon.vercel.app/
6•jessicarumbelow•2d ago•3 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
304•armcat•23h ago•126 comments

Beyond the &

https://lwn.net/Articles/1096028/
80•PaulHoule•1d ago•9 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
431•nnx•22h ago•58 comments

mitmproxy adds --emudhra option

https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
521•ahlCVA•12h ago•124 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
759•ejohnso49•20h ago•375 comments
Open in hackernews

Several Linux kernel vulnerabilities accidentally posted to public mailing list

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
72•mrkn1•1h ago

Comments

ivanmontillam•46m ago
It's being a great season, techsecurity-wise.
Avicebron•36m ago
On HN everyone is a security engineer.
gilrain•32m ago
They wanted "full stack", so they found hires with 1/10th of an education in each of 10 different fields.

The boss class are rich because they're smart. /s

greenavocado•26m ago
> 1/10th of an education in each of 10 different fields combined FTFY
0c3ca83•23m ago
But they're cheap 10x engineers.
NooneAtAll3•45m ago
"accidentally"

I feel paranoid enough now to blame ai companies to try to induce panic and proclaim "buy our product to save yourself"

pelagicAustral•43m ago
Agree, wild stretch to accidentally send this loot to a mailing list.
ReDress•12m ago
To be honest and fair, in this situation I don't believe this is something accidental.

It probably just happens that the security concerns at ZDI don't match the security concerns at Linux(the vendor).

So, it turns out that this vendor is difficult to work with ....

I mean - heh

ReDress•41m ago
I'm not surprised because the disclosure process of https://hackerone.com is completely and openly public.

But they have also disabled Linux as one of the products that they work with.

ototot•40m ago
are those posted by AI?
extraextra•37m ago
What an entertaining season in the simulation
dayofthedaleks•36m ago
The headline should include Trend Micro's name for shaming purposes. Amatuerish.
wongarsu•25m ago
Doesn't the Linux kernel encourage reporting on the public mailing list for kernel vulnerabilities that were found using AI? If I remember correctly they introduced that policy after the security mailing list got swamped with multiple reports for the same vulnerabilities
lynndotpy•25m ago
Still bleary eyed, but: Most severe ones are in SMB and KSMBD, which apparently have implementations in kernel space. I think this doesn't impact anyone not using KMB.

Others are LPEs, but two have been deleted by now, so can't be sure of the details.

TrendMicro's site opens up with a big big "Advancing AI-Native Security with Anthropic". Which checks out I guess.

jumperabg•7m ago
Finally the last vulnerabilities of the year.