frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

AI is forcing us to pay off 40 years of technical debt

https://spectrum.ieee.org/ai-in-cybersecurity-php2shell-vulnerability
370•pseudolus•3h ago•264 comments

US voters roundly reject data centers in ballot measures

https://www.semafor.com/article/11/04/2026/us-voters-roundly-reject-data-centers-in-ballot-measures
98•justonepost2•40m ago•93 comments

Nvidia RTX Spark encrypted firmware slows inference speed to 35% on Linux

https://www.mindstudio.ai/blog/linux-nvidia-rtx-spark-laptop
312•novaRom•6h ago•163 comments

Incident with Pull Requests, Git Operations and Issues

https://www.githubstatus.com/incidents/smtdswd1h2w4
166•kevcampb•5h ago•82 comments

Verification Is Not Knowledge: Science needs more than answers

https://blog.cosmos-institute.org/p/verification-is-not-knowledge
129•ersinesen•6h ago•79 comments

North Korean fake job interview led to $6.3B Binance heist

https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binanc...
80•smalltech•57m ago•42 comments

Tell HN: Gemini trains on chat history, even for subscribers (personal accounts)

308•jameslk•4h ago•84 comments

Kitty 0.50

https://sw.kovidgoyal.net/kitty/changelog/#
266•porridgeraisin•6h ago•161 comments

Jelly Sheet

https://mrdoob.github.io/codevember-2026/01/
343•memalign•11h ago•89 comments

Jailbreaking my car's navigation system just so I can change the time

https://blog.nns.ee/2026/11/02/renault-hack/
894•xx_ns•1d ago•335 comments

Stringman, an $800 open-source room scale gripper robot

https://neufangled.com/
699•nharada•22h ago•216 comments

The lost malloc()

https://napcakes.nekoweb.org/posts/malloc/
103•matt_d•7h ago•37 comments

The Internals of PostgreSQL

https://www.interdb.jp/pg/index.html
326•ibobev•17h ago•24 comments

Synaptics Appears to Use Legal Threats to Block Open-Source DisplayLink Driver

https://www.phoronix.com/news/Synaptics-Blocks-Vino-Driver
75•snvzz•3h ago•28 comments

Geoffrey Hinton: it might turn out we were better off without AI

https://www.theguardian.com/uk-news/2026/nov/03/ai-godfather-geoffrey-hinton-better-off-without-ai
223•alkyon•4h ago•177 comments

Giant canyon on Mars is still tectonically active

https://lamont.columbia.edu/news/giant-canyon-mars-still-tectonically-active-today
121•gmays•13h ago•26 comments

Show HN: Uncracked City, detective game where you question LLM suspects that lie

https://uncracked.city
99•passkey1510•17h ago•48 comments

Show HN: HackerTV – HN's most-recommended Youtube videos as 24/7 TV channels

https://hackertv.org
401•dsalzman•1d ago•75 comments

Fujifilm to boost tape production 5x as AI fuels archiving demand

https://arstechnica.com/gadgets/2026/10/fujifilm-to-boost-tape-production-5x-as-ai-fuels-archivin...
510•bookofjoe•2d ago•216 comments

Distinct cellular and genetic differences in colorectal cancer in young patients

https://www.dana-farber.org/newsroom/news-releases/2026/study-reveals-distinct-cellular-and-genet...
99•gmays•11h ago•38 comments

Jaron Lanier on parallels between AI and social media

https://www.youtube.com/watch?v=WxaRn8kX2eI
12•musha68k•57m ago•0 comments

Japan's Jimi 'Mundane' Halloween Costumes of 2026

https://spoon-tamago.com/japan-jimi-mundane-halloween-costumes-2026/
223•zdw•2d ago•34 comments

C++26 Disapproved

https://andreasfertig.com/blog/2026/11/cpp26-dis-failed-how-does-cpp-survive/
374•thatxliner•14h ago•279 comments

Qwen 3.8 27B on my laptop can interpret model weights, too

https://simonwillison.net/2026/Nov/3/qwen-can-interpret-model-weights/
683•theanonymousone•21h ago•199 comments

Arrows to arrows, categories to queries (2025)

https://reasonablypolymorphic.com/blog/arrows-to-arrows/
68•firstbase•11h ago•6 comments

How I use AI (Oct 2026)

https://ben.stolovitz.com/posts/how-use-ai-oct-2026/
226•citelao•20h ago•257 comments

Postman silently auto-installs AI plugins and attempts to share all API data

https://github.com/postmanlabs/postman-app-support/issues/14370
1413•sidgarimella•21h ago•465 comments

There is no posttraining data commons

https://openathena.ai/blog/there-is-no-posttraining-data-commons/
99•lukasschwab•1d ago•25 comments

Safari introduces Adaptive Dark Mode in 27.3

https://webkit.org/blog/18541/introducing-adaptive-dark-mode/
474•paddingtone•17h ago•249 comments

We're training a Figma-fluent editing model

https://www.figma.com/blog/training-a-figma-fluent-editing-model/
137•gmays•3d ago•59 comments
Open in hackernews

North Korean fake job interview led to $6.3B Binance heist

https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398
78•smalltech•57m ago

Comments

steveBK123•45m ago
Pretty funny that tech makes candidates jump through all sorts of automated, inhumane loops to even advance to talking to a real human in the hiring process.

And now you get results like this.

intrasight•30m ago
I remember in the mid-90s going to an interview in Manhattan - pre-Internet. Someone met me and led me to a table and said, "Here's where you're going to take your test." I said, "I don't take tests." She said "Everyone that comes in takes the test". I said, "Well, that's no longer true because I came in and I'm leaving without taking the test"
Horffupolde•25m ago
Wow how tough.
xyzsparetimexyz•21m ago
Haha owned
progforlyfe•12m ago
While I love the "edgy-ness" of this, I remember doing something like this around 2013 in Manhattan and kind of enjoyed it. They had me go into a room, and gave me a paper with an open ended question: it was something along the lines of, write as much detail as I could about what happens when a user visits a URL in a web browser. E.g. explain as much as I know about TCP, HTTP requests, web servers, etc. I think I touched on how Cookies worked as well.

No AI, no leet code, just old fashioned gauging someone's experience and communication skills.

gilrain•8m ago
Excellent choice! No amount of money feels as good as claiming the respect you deserve.
xutopia•42m ago
I was #opentowork on LinkedIn and got approached multiple times with fake companies and interviews. LinkedIn is not doing enough to combat this.

I even create a 1 man company for my consulting services and I receive ads about how people at my company saved me a spot on an online game.

LinkedIn is partially responsible for their neglect here.

mynegation•38m ago
Running interview assignment on a work computer… tsk tsk
alostpuppy•36m ago
This is what I was trying to figure out. Did they think it was for an internal role or something?
cwnyth•31m ago
Some people just make really dumb decisions.
lesuorac•26m ago
Like giving people direct access to $6.3 billion?
jstanley•12m ago
It was rather indirect access.
parthdesai•20m ago
at the very least, run it inside a docker container (making sure of network and volumes i would say)
podocarp•16m ago
Hindsight is 20/20. Although why aren't assignments just a pdf
Jianghong94•37m ago
Am I the only one baffled by the fact that the engineer uses a work PC for a personal job interview assignment?
voakbasda•34m ago
Probably. I have seen many colleagues across the cubicle aisles spending their time on things completely unrelated to their work. I would be baffled to hear that you have not had similar experiences.
Jianghong94•28m ago
Well I've done the same too. But I would not use my work PC.
sidewndr46•32m ago
Absolutely. Yet as a hiring manager, I see it all the time.
bell-cot•26m ago
As a hiring manager, do you hold that behavior against candidates for positions where poor security practices could become a major liability for your company?
james_marks•37m ago
Further evidence that 1) recruiting is broken and 2) developers make great targets, and we need to respond accordingly.
CommanderData•34m ago
It's strange companies haven't cracked something as basic as remote hiring checks yet.

There are tools available to stop AI screen recording tools, fake candidate tools yet many companies keep getting hit..

lbriner•29m ago
Not as easy as that, these can be real people with genuine businesses across the other side of the world, which sounds like what happened here. They only have to seem friendly and genuine before asking you to perform a coding test or whatever.

Unfortunately:

1) The dev downloaded it onto a work laptop which was really poor behaviour

2) It sounds like the developer environment was very open instead of segmented. Common but an easy control to use in a high-risk environment.

3) Sounds like a lack of any elevation process e.g. if a developer needed to access a wallet, it very much should sound an alarm/require explicit permission etc.

But it is easy to be wise in hindsight.

CommanderData•20m ago
It seems in this case really poor behaviour and practices, I can imagine some security engineer shouting I told you so pretty loudly.

On the other end, when doing interviews I suspect 40-50% of candidates use AI assistant tools (might be skewed in tech).

I do miss seeing someone's camera feed break or AI tool break down mid interview.

HelloUsername•33m ago
Source posted earlier: "29 October Binance Security Incident: Initial Findings and Response Update" https://news.ycombinator.com/item?id=50359377
cubefox•24m ago
Pretty lame of The Register not to reference the original source.
kittikitti•29m ago
Zoom exploits could have done this without downloads. I don't interview on a computer with sensitive data, it's usually a throwaway. I sometimes get judged for doing the interview on a Chromebook or an old Mac and I hope that interviewers understand why I choose to do it this way.
bilekas•26m ago
Doing ANYTHING on a work issued laptop outside of your role is such a dumb idea for a litany of obvious reasons that I'm genuinely shocked people do it. Let alone participate in interviews for other companies on it.
jimmydoe•24m ago
lol maybe the employees wanted the company to see it.
xyzsparetimexyz•23m ago
Well so-rry but if you give me a macbook powerful enough to play cyberpunk 2077 on it, that's what I'm gonna do.
ranger_danger•7m ago
At least dual-boot a second OS that they have no control over.
paxy•20m ago
In my last job we used Zoom for interviews. The link we sent would work in any web browser, but if the candidate was signed into a Zoom account on their computer we'd be able to see it. I'd say >70% of them were on their company account.
fusslo•10m ago
as a candidate it's pretty tough scheduling interviews past 5pm or on the weekends
Agingcoder
paxy•23m ago
Why did the employee have direct access to $6.3 billion in customer funds?
Maken•19m ago
No directly, but he could deploy code that had access to customers' wallets. Which is even worse.
sva_•9m ago
It is crazy that this Engineer A fell for this malware ad (how do people still fall for these & how does Google still get away with serving malware like that):

https://isc.sans.edu/diary/32942

It is kind of weird that they mention it though, if they replaced the devices and rotated credentials? Just to later mention that an "internal AI tool" was used to steal that Engineer As credentials again?

BigTTYGothGF•5m ago
Good thing they didn't get anything important.
ChrisArchitect•4m ago
[dupe] https://news.ycombinator.com/item?id=50353818
•
8m ago
What’s preventing you from using a personal laptop ?
HeavenFox•15m ago
I do know people who no longer have a personal computer, and use exclusively their work-issued computer. I wonder how common that is.
podocarp•14m ago
It's convenient. I'm not lugging two laptops around!
jstanley•13m ago
But if he'd done the interview on his personal laptop then he would have had his personal crypto wallet drained instead, seems like he came out ahead this way.