frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Malware uses LLMs to rank victims by how much they're worth

https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volt...
90•khalidkhair•2h ago•31 comments

Casio Watches of the 1980s

https://www.casio.com/us/watches/50th/Heritage/1980s/
40•karagenit•57m ago•9 comments

Molly (Signal fork) has not been updated since 3 months and is vulnerable

https://piefed.world/post/1503394
190•DeepLogin•6h ago•128 comments

We Took over ChatGPT Accounts

https://www.parameter.ai/labs/we-found-a-gap-at-openai
202•armcat•6h ago•103 comments

A/SIDE – Private photo sharing and encrypted messages

https://a-side.social/
5•eustoria•42m ago•3 comments

Simple circuits can create complex behaviors

https://aatishb.com/myriad/lets-build-a-brain/
96•aatish•4d ago•20 comments

Serbia just elected the world's brainiest parliament

https://www.science.org/content/article/serbia-just-elected-world-s-brainiest-parliament
622•input_sh•6h ago•362 comments

Switch Lowering in GCC

https://xoranth.net/gcc-switch/
145•signa11•8h ago•29 comments

Prospero: A new coding harness for a more civilized age

https://nullprogram.com/blog/2026/10/31/
125•fovc•5h ago•78 comments

Jepsen: ParticleDB 1.1.4

https://jepsen.io/analyses/particledb-1.1.4
16•aphyr•3h ago•5 comments

Ex-Meta Researcher Torrented Pirated Books, Deleted It 'Due to Litigation'

https://torrentfreak.com/ex-meta-researcher-torrented-pirated-books-dataset-deleted-it-due-to-all...
53•WesleyGrant782•2h ago•30 comments

Digital minimalism

https://vitalik.eth.limo/general/2026/10/31/digital_minimalism.html
195•wilbertliu•10h ago•145 comments

Reading and writing are less symmetric than you (probably) think

https://fgiesen.wordpress.com/2015/10/25/reading-and-writing-are-less-symmetric-than-you-probably...
21•luu•3d ago•5 comments

What is a light-day? The milestone Voyager 1 is closing in on

https://science.nasa.gov/mission/voyager/voyager-1/voyager-1-what-is-a-light-day/
14•geox•48m ago•1 comments

AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura

https://thedataexchange.media/leo-de-moura-lean-aws/
131•datascientist•2d ago•32 comments

Hunting 'Zombie Accounts' in Active Directory

https://www.fabian.fyi/2026/10/zombie-hunt.html
20•optimiz•1d ago•2 comments

Show HN: Marelleo, an open-source story box I built for my kids using ESP32

https://zebra.rodeo/en/blog/marelleo/
144•foOg•4d ago•40 comments

The $6.3B Binance hack was pulled off in just 20 minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
538•domhudson•1d ago•385 comments

My favourite PowerMac is a Nintendo Wii

https://virtuallyfun.com/2026/10/29/my-favourite-powermac-is-a-nintendo-wii/
351•DHowett•23h ago•107 comments

Show HN: Ghostman – A fast, keyboard-driven TUI API client and webhook inspector

https://github.com/4yk5/Ghostman
7•4yk5•1d ago•1 comments

Cloudflare Turnstile solver library (no headless browser required)

https://github.com/chris124567/cfsolve
279•costco•2d ago•95 comments

Northflank Breached

https://status.northflank.com
463•js4ever•1d ago•343 comments

Breaking the open web won't stop the bad bots

https://www.techpolicy.press/breaking-the-open-web-wont-stop-the-bad-bots/
305•raybb•3d ago•132 comments

Enlightenment 0.28 Released with Many Improvements

https://www.phoronix.com/news/Enlightenment-0.28
8•mikece•36m ago•2 comments

Cisco gives engineer unlimited AI tokens to rewrite legacy code

https://fortune.com/2026/10/30/cisco-president-jeetu-patel-gen-z-27-year-old-unlimited-ai-tokens-...
272•taubek•1d ago•306 comments

Tell HN: Scribd Breached

302•x______________•14h ago•112 comments

Florilegium: Procedural Flowers in LaTeX

https://github.com/kevinraymond/florilegium
355•nanna•1d ago•51 comments

The oldest ice disappears and the Stone Age emerges from it

https://www.sciencenorway.no/archaeology-climate-culture/the-oldest-ice-is-disappearing-the-stone...
186•dxs•21h ago•85 comments

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/blog/offical-claude-code-vsx-compromise/
948•_chall•1d ago•541 comments

Show HN: A working Nintendo in ~1GB of Qwen weights

https://github.com/dbreunig/nesformer
276•dbreunig•1d ago•136 comments
Open in hackernews

Malware uses LLMs to rank victims by how much they're worth

https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer/
88•khalidkhair•2h ago

Comments

thisisauserid•47m ago
Good. LLMs aren't very good at that.
ctxc•16m ago
What makes you say that? It's good enough
akersten•30m ago
This is the kind of stuff that keeps me up at night. Claude, ArtCraft, tons of other auto-downloading tools, are rolling 10'000's of code changes a month. If one compromised update snuck this guy in, it's kind of game over. The windows of opportunity for an attack like this seem to be widening the faster we "develop" software.

Makes me want to have like 5 separate computers:

- one for banking only

- one for development only

- one for web browsing only

- one for gaming only

- one for socials only

How else can you stay safe against a threat that exfiltrates your entire digital life in like 10 seconds?

kungp•26m ago
I sandbox my dev environment.. hopefully that protects at least a little bit.
duskdozer•21m ago
What do you use?
realityfactchex•25m ago
For banking, you can avoid computers and just go in.
gambiting•18m ago
Lol, you mean like here in the UK where all banks are closing down branches left and right? I think my nearest one is a 45 minute drive away, and last time I went in they just directed me to a terminal that was basically my exact online banking interface and I had to log in the same way I would have done at home. I don't know what kind of query would warrant speaking to an actual teller. If you're regularly sending money or even want to check your balance this cannot be sustainable, would be an enormous waste of time.
todowhatexactly•14m ago
To do.. what exactly? Pay for my bills? I don’t know how it’s setup in your country but in mine that’s not realistic. Everything is handled on the app.
ant6n•24m ago
“ Makes me want to have like 5 separate computers”

You forgot one.

mr_00ff00•22m ago
VMs would work pretty well.
Shank•20m ago
I mean this is the basic premise behind QubesOS, but if you add isolation like Qubes wants, it does become very difficult to cross between apps.
lofaszvanitt•16m ago
Maybe consume less sensationalist newsbits :P.
TuxSH•14m ago
> threat that exfiltrates

No need for something new here, Claude Code (Auto + default settings) has a tendency of running "find"/"ls" on your home folder when it struggles with solving a problem. I wish I was joking.

Now of course people trust these AI companies not to do bad things(tm), but all it takes is replacing the model endpoint URL -or any kind of harness compromise- and nothing will seem amiss

juleiie•12m ago
Isn’t this common knowledge that there are computers you use for banking, computers you use for windows 98 and computer you use for gaming?

For banking I use macOS/linux, sometimes iOS unfortunately but we all do sins

Jtarii•12m ago
If there is no way to disable auto-update the application goes in the bin.
cherrycherry98•7m ago
How many CVEs are in the software you're not updating in a timely manner if at all?
monlockandkey•11m ago
100% agree. Developers are playing with fire regarding cookie stealers, malware, data exfiltration.

Ideal setup:

- Dev machine

- Gaming machine (isolate downloading mods)

- Browsing machine

Bluestein•11m ago
... but, but, sama says we having his RAM is bad! And now you want 5, not 1 of 'em precious compute receptacles!
shaan7•3m ago
yep, that was so annoying to hear him say that. grrrr.
bluefirebrand•7m ago
Will this even matter though? As long as these computers are on the same network, AI tools will find a way to get from one to the other if any of them are compromised
cyberclimb•4m ago
Try QubesOS if you want this, you can have a separate VM for each isolated use-case. The OS itself is a lightweight hypervisor around the VMs (called "Qubes").
riskable•26m ago
How very considerate! Steal from the rich, not the poor.

Conversely, don't bother with poor people!

Now we just need proper Robin Hood malware that "levels out the playing field" as it were, by stealing from the rich and moving that money into the poor people's accounts (that have also been hacked).

yonatan8070•9m ago
I'm just imagining some poor person getting a call about 100,000$ that's been transferred to their account without any idea how or why.
jumploops•10m ago
I’ve been thinking about how we’re still in the early days of agents, similar to the early days of the internet, happily opening up our machines and running new protocols.

Soon (now?) the threats will become ever more complex, and we’ll be back in the early-2000s-like virus storms.

quotemstr•7m ago
Malware authors are also software developers, product managers. It's adorable to see them do the things other software developers and product managers do.

Just like it's amusing that Osama bin Laden reviewed Al Qaeda expense report and these expense reports look just like ones anyone else would file.

  Expense: two burgers and fries
  Price: $15.50
  Vendor: Five Guys
  Cost center: evil observability mini-conference, SRE, department of evil