frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

AI Isn't Replacing SREs. It's Deskilling Them

https://newsletter.signoz.io/p/ai-isnt-replacing-sres-its-deskilling
51•dorianniemiec•35m ago•36 comments

Northflank Breached

https://status.northflank.com
57•js4ever•1h ago•25 comments

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/blog/offical-claude-code-vsx-compromise/
333•_chall•9h ago•350 comments

Azure's Weakest Link – Five Full Cross-Tenant Compromises

https://www.binarysecurity.no/posts/2026/10/one-root-case
168•swq115•6h ago•26 comments

US Reps Lead Democratic Resolution Opposing A.I. Bubble Bailout for Big Tech

https://progressives.house.gov/2026/10/reps-casar-waters-lead-democratic-resolution-opposing-a-i-...
457•DeepLogin•4h ago•295 comments

Medicare Will Pay $50k for Your Heart Attack. It Should Pay $100 to Prevent It

https://www.medpagetoday.com/opinion/second-opinions/123553?trw=no
126•brandonb•1h ago•80 comments

Binance-hacker-1029 – $5.6B stolen from Binance

https://arkm.com/explorer/entity/21a94755-f604-45e5-9501-6542e23005e8
1669•Tiberium•18h ago•1129 comments

I didn't know I was lacking in Vitamin D until I collapsed at work

https://www.bbc.com/news/articles/cm78pxxe55v0o
34•tartoran•51m ago•16 comments

The Federated Code Forge

https://tangled.org/blog/forge/
11•zlliang•43m ago•2 comments

The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
164•domhudson•3h ago•122 comments

Finding Panics with Call Graph Analyzer

https://tweedegolf.nl/en/blog/242/finding-panics-with-call-graph-analyzer/
46•ndr•2d ago•0 comments

Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

https://www.nbcnews.com/business/consumer/polymarket-trading-halt-hack-wallets-rcna606405
19•theanonymousone•1h ago•5 comments

Blockchain intelligence firms link North Korea to $6.3B hack on Binance

https://www.npr.org/2026/10/30/g-s1-150902/blockchain-intelligence-firms-link-north-korea-to-6-3b...
14•paulpauper•48m ago•0 comments

Gilgamesh by Simon Armitage review – an ancient epic is brilliantly translated

https://www.theguardian.com/books/2026/oct/20/gilgamesh-by-simon-armitage-review-an-ancient-epic-...
138•benbreen•2d ago•40 comments

Why a program doesn't work when run from a batch file, but works when clicked

https://devblogs.microsoft.com/oldnewthing/20261026-00/?p=112797/
83•ibobev•3d ago•43 comments

Geist Serif

https://vercel.com/blog/introducing-geist-serif
18•Zm44•40m ago•8 comments

Herdr has released native app

https://github.com/herdrdev/herdr-app
310•cherioo•15h ago•206 comments

I'm so bad at billiards that I ended up in the hyperbolic plane [video]

https://www.youtube.com/watch?v=kL9BTbIGxLg
210•surprisetalk•2d ago•35 comments

We ran AI agent swarms in Minecraft and Mindustry

https://labs.ycombinator.com/projects/games/index.html
368•sandslash•18h ago•149 comments

Commodore 1600 VICmodem

https://dfarq.homeip.net/commodore-1600-vicmodem/
27•ibobev•4d ago•12 comments

Compile-Time Dependent Types

https://thenumb.at/Syl-Intro/
13•ibobev•3d ago•2 comments

We're releasing the weights of Mistral Large 4

https://mistral.ai/news/mistral-large-4-oss/
1637•kuberwastaken•1d ago•426 comments

Wasmer (YC S19) Is Hiring OS/Hypervisor Experts in Europe

https://www.workatastartup.com/jobs/98722
1•syrusakbary•9h ago

Astroterm: A Planetarium for Your Terminal

https://github.com/da-luce/astroterm
207•nvmdbljstm•2d ago•24 comments

Artificial Analysis v5 and the benchmarker's dilemma

https://www.interconnects.ai/p/artificial-analysis-v5-and-the-benchmarkers
61•6thbit•2d ago•36 comments

Pell Puzzles Review

https://dles.gg/reviews/pell-puzzles
3•trizoza•2d ago•0 comments

Another Friday, another GitHub incident

https://www.githubstatus.com/incidents/nxy2l0ssxm10
6•pelagicAustral•1h ago•0 comments

LLM Voice

https://martinfowler.com/bliki/LLM-Voice.html
563•ibobev•1d ago•302 comments

Neal Stephenson on AI and What Comes Next [video]

https://www.youtube.com/watch?v=Ii-aeW5pHPQ
33•justin66•2h ago•7 comments

H.264 Is Magic (2016)

https://sidbala.com/h-264-is-magic/
494•ea016•1d ago•161 comments
Open in hackernews

Northflank Breached

https://status.northflank.com
55•js4ever•1h ago

Comments

hmokiguess•54m ago
What is Northflank? I am surprised at the amount of new business out there
paxy•52m ago
You are on a YC startup forum and are surprised tech startups exist?
jmull•48m ago
"amount" it says. No matter the context, there could be more than you expect.
gorgmah•48m ago
I ran some stats on producthunt a few months ago, there are 22 times more daily SaaS launches now than in 2020, the AI impact on the industry is hard to fathom. The blog I wrote (AI-assisted) if you're curious: https://www.mahl.me/blog/product-hunt-is-swamped-now/
quadrature•46m ago
Northflank isn't that new, it was founded in 2019. Its a cloud platform, you can get more details by googling.
jacquesm•44m ago
New businesses, not new business.
dangoodmanUT•43m ago
Unfortunately for infra startups, I think we're going to see a convergence back to hyperscalers as a result of incidents like this and railway.

There's no amount of "nicer to use" that can replace security, at least certainly when selling to enterprises

bix6•35m ago
Are hyperscalers actually more secure though? I have only heard anecdotal thinking eg nobody ever got fired for choosing IBM.
baxtr•32m ago
It’s the same thing: let’s say Microsoft or AWS got hacked. Then you’re definitely not the only one who got hacked.

So, you can always say: Look, it’s not us (especially not my org!). It f’ing Microsoft/AWS. Everyone got hacked.

You and your career are gonna be fine.

codegeek•19m ago
The whole "No one gets fired for using IBM" analogy.
inglor•31m ago
When I was at Microsoft we took security cripplingly seriously to the point we could not deliver features and our competitors could because the security process was convoluted and had multiple reviews and approval steps.
loloquwowndueo•29m ago
Tell me you weren’t on the Windows team without telling me you weren’t on the windows team :)
carimura•43m ago
i'm surprised at the growth of all these neoclouds given the current security risk climate...
ankit70•39m ago
How these Paas (Railway before) are being breached? Poor choices or something else? Scary Nonetheless. I thought AI advancement will make the self hosting painful. If PaaS are no good, then what can be done?
trouve_search•35m ago
Why would ai advancement make self hosting painful? Apart from increased cost of hardware (which you implicitly would pay for in PaaS as well anyways).

If anything, AI makes running linux boxes much easier than 4 years ago; it's now faster and the learning cliff is gone to get the correct CLI commands and digging into system logs.

monster_truck•28m ago
if you're still doing that manually in 2026 you probably should not be self hosting anything of consequence or commercial liability
whimsicalism•8m ago
platforms are better placed to guard against attackers
vorpalhex•33m ago
When you build something small, you can easily see all the doors and properly guard them.

As you build something bigger and bigger, quickly, with several people building, guarding all the doors becomes exceptionally difficult without a kind of aggressive discipline which is contrary to the "go fast" culture.

Cybersecurity in practice until now, for most companies, has been an insurance problem, not a quality problem.

Such companies are quickly discovering that insurance is a post-hoc partial correction and not a proper solution.

This situation will not improve anytime soon for most companies.

The solution does not require any new magical tools.

gavxn•34m ago
Does anyone know to what degree Sentry use Northflank?
loloquwowndueo•25m ago
Whatcha mean. If they do, it would likely be in Sentry’s list of subprocessors. Check there.
skinfaxi•4m ago
Sentry is listed on the northflank site as a customer.
Veserv•12m ago
Having crippling bureaucracy does not correlate with good security outcomes, except maybe negatively. However, having a history of unending egregious security failures, like Microsoft, does correlate with poor security outcomes. For that matter, having a present of unending egregious security failures also correlates with poor security outcomes.

Let us look on the front page and see if there are any, oh look here is one: https://www.binarysecurity.no/posts/2026/10/one-root-case

whimsicalism•9m ago
the only reason you’re seeing this post is because of the large bug bounty program that actors like Northflank don’t even operate
jareklupinski•19m ago
> nobody ever got fired

thats the crux; are you working for the paycheck, or for the truth?

could be both, but pretty much all "i was right" stories start with "everyone else said i was wrong"

btown•16m ago
Modern PaaS is tough because there's a general expectation that users (and agents) are able to see and read back environment variables in their management UI or CLI - which means that you can't segregate credential values from the public web environment. See e.g. the visibility icons on https://northflank.com/docs/v1/application/secure/inject-sec...

And sure, you can encrypt at rest, and perhaps even enforce that only re-encrypted versions are ever seen by the management/API web server. But fundamentally this display requirement means that if your management/API web server is compromised, users' secrets can be obtained by a process of impersonation.