frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Serbia just elected the world's brainiest parliament

https://www.science.org/content/article/serbia-just-elected-world-s-brainiest-parliament
224•input_sh•1h ago•146 comments

Molly(Signal fork) has not been updated since 3 months and is vulnerable

https://piefed.world/post/1503394
29•DeepLogin•1h ago•6 comments

Switch Lowering in GCC

https://xoranth.net/gcc-switch/
87•signa11•4h ago•14 comments

French lawmakers approved a tax of €0.055 for every gigabyte of internet traffic

https://www.assemblee-nationale.fr/dyn/17/comptes-rendus/seance/session-ordinaire-de-2026-2027/pr...
47•helloplanets•41m ago•43 comments

We Took over ChatGPT Accounts

https://www.parameter.ai/labs/we-found-a-gap-at-openai
15•armcat•1h ago•7 comments

Show HN: Marelleo, an open-source story box I built for my kids using ESP32

https://zebra.rodeo/en/blog/marelleo/
85•foOg•3d ago•27 comments

Digital Minimalism

https://vitalik.eth.limo/general/2026/10/31/digital_minimalism.html
82•wilbertliu•5h ago•55 comments

AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura

https://thedataexchange.media/leo-de-moura-lean-aws/
59•datascientist•1d ago•13 comments

My favourite PowerMac is a Nintendo Wii

https://virtuallyfun.com/2026/10/29/my-favourite-powermac-is-a-nintendo-wii/
319•DHowett•18h ago•94 comments

The $6.3B Binance hack was pulled off in just 20 minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
478•domhudson•23h ago•331 comments

Cloudflare Turnstile solver library (no headless browser required)

https://github.com/chris124567/cfsolve
236•costco•2d ago•67 comments

Northflank Breached

https://status.northflank.com
446•js4ever•20h ago•320 comments

Tell HN: Scribd Breached

243•x______________•9h ago•96 comments

Breaking the open web won't stop the bad bots

https://www.techpolicy.press/breaking-the-open-web-wont-stop-the-bad-bots/
274•raybb•3d ago•122 comments

Shiny Object Syndrome

https://en.wikipedia.org/wiki/Shiny_object_syndrome
15•janisz•1h ago•6 comments

The oldest ice disappears and the Stone Age emerges from it

https://www.sciencenorway.no/archaeology-climate-culture/the-oldest-ice-is-disappearing-the-stone...
160•dxs•16h ago•62 comments

Florilegium: Procedural Flowers in LaTeX

https://github.com/kevinraymond/florilegium
298•nanna•20h ago•48 comments

Show HN: A working Nintendo in ~1GB of Qwen weights

https://github.com/dbreunig/nesformer
257•dbreunig•19h ago•122 comments

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/blog/offical-claude-code-vsx-compromise/
912•_chall•1d ago•535 comments

Longitudinal Changes InWearable-Captured PhysiologyBefore Sudden Cardiac Death

https://www.jacc.org/doi/epdf/10.1016/j.jaccas.2026.110397
41•brandonb•2d ago•20 comments

Infinite Mac: BeOS

https://blog.persistent.info/2026/10/infinite-mac-beos.html
166•ecliptik•16h ago•91 comments

Cisco gives engineer unlimited AI tokens to rewrite legacy code

https://fortune.com/2026/10/30/cisco-president-jeetu-patel-gen-z-27-year-old-unlimited-ai-tokens-...
210•taubek•22h ago•250 comments

The federated code forge

https://tangled.org/blog/forge/
298•zlliang•20h ago•86 comments

Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing Game

https://tng.episodle.com/
200•francisofascii•12h ago•56 comments

Azure's Weakest Link – Five Full Cross-Tenant Compromises

https://www.binarysecurity.no/posts/2026/10/one-root-case
315•swq115•1d ago•58 comments

Jules Verne's Lost Novel

https://blue-continuum.com/verne-paris
122•dnetesn•16h ago•30 comments

Brief History of PDP Computers

https://entropicthoughts.com/history-of-pdp-computers
34•ibobev•1d ago•15 comments

Double Buffering with Cloudflare Queues

https://bellone.com/technical/double-buffering-with-cloudflare-queues
49•b_llc•2d ago•5 comments

Sanstun: A sans-IO, parallel-friendly WireGuard implementation in Rust

https://www.firezone.dev/blog/introducing-sanstun
140•wh33zle•14h ago•34 comments

How long do you need to hold down the power button to turn off a PC?

https://www.osnews.com/story/146273/how-long-do-you-need-to-hold-down-the-power-button-to-turn-of...
33•Arodex•3h ago•5 comments
Open in hackernews

Molly(Signal fork) has not been updated since 3 months and is vulnerable

https://piefed.world/post/1503394
29•DeepLogin•1h ago

Comments

throwaway89201•50m ago
Someone in that thread notes that when you install the Signal APK from here [1] it "doesn’t get updates tho", but this isn't the case. Signal will update itself; you get a notification to update. Often earlier than the Play Store, probably due to its reputation to randomly delay updates.

[1] https://signal.org/android/apk/

_heimdall•22m ago
Well that's timely, and a bummer. I was just wondering about this yesterday, I use signal on my primary phone and Molly on a secondary phone.

Signal got an update yesterday and when I saw the notification I couldn't remember the last time Molly was updated...

jttnr•19m ago
TIL: The official Signal app can now use one account, shard over two devices.

This was my main reason to use Molly over Signal.

https://aboutsignal.com/news/signal-allows-iphones-to-be-lin...

jon128•16m ago
The incorporated 501c3 named Signal is, in IT terms, a vendor. Is it not?

The Signal client software is open source and some of the clients have reproducible builds. The Signal server software is open source, though has a history of being over a year out of date at some points. Other deployments of this server software for production use are rare.

Suppose you configured an instance of the Signal server software and others you know ran also a somewhat modified Signal client that could access that instance of the Signal server software.

But the centralized namespace of the hosted Signal service hosted by the incorporated 501c3 named Signal would not be accessible through that server instance now would it.

And, as dictated by the incorporated vendor of the centralized namespace, and other reasons, in practice, this client would have to run as a separate piece of software. "Another app".

This is vendor lock-in.

The service hosted by the 501c3 named Signal seems widely open yet is a permissioned namespace. A physical location tracking number aka phone number or a credit/debit card is required to access the namespace. This is for slaves. The profane.

  Open Signal on your phone to keep your account active
This vendor is abusive.

And, I don't think this is what Moxie wanted.

Signal 501c3 is a centralized service. XMPP and Matrix are decentralized/federated. SimpleX is distributed.

commandersaki•8m ago
<insert laughing emoji>
ada-h00k•6m ago
Sometimes I get the feeling that Signal hates users who aren't total normies. Unified Push, which works flawlessly on Molly, could easily be implemented in the regular client. Just as they could easily offer a Google free version for F-Droid or simply for people who want nothing to do with Google. But they just refuse. Just like it took years for nicknames to be introduced, and registering without a phone number has only recently become possible and only through the Google Play Store.