Quad9 to exit France(quad9.net)
1320 points by farrokhi | 456 comments
Quad9 blog post announcing it will withdraw its free DNS resolver service from France after a French court ruling in favor of beIN ordering DNS blocking.
Hacker News on
eMudhra to exit global SSL/TLS certificate business(emudhra.com)
1097 points by bo0tzz | 703 comments
eMudhra press release announcing it will exit the global SSL/TLS certificate business after a CA incident and distrust of some of its roots and intermediates.
Security Disclosure(blog.railway.com)
571 points by passenger | 334 comments
Railway blog post disclosing that an unauthorized party may have accessed and decrypted customer environment variables, urging users to rotate all secrets.
mitmproxy adds --emudhra option(github.com)
541 points by ahlCVA | 141 comments
GitHub commit to mitmproxy adding an --emudhra option that signs TLS certificates using a compromised eMudhra intermediate CA private key.
WorldTUI: I trained a 360M model to pretend to be a terminal(simedw.com)
613 points by alphax314 | 183 comments
Blog post describing WorldTUI, a fine-tuned 360M-parameter language model that simulates a terminal by predicting screen updates from keypresses, with a browser demo.
CVE-2026-111943: Compromised Intermediate Certificate Authority(nvd.nist.gov)
314 points by keks24 | 120 comments
NVD vulnerability detail page for CVE-2026-111943, described in the title as a compromised intermediate certificate authority.
![Screenshot of web.maths.unsw.edu.au: The recently proposed o(n log n) integer multiplication algorithm [pdf]](https://hn.urlbox.com/shots/renders/2026/10/22/031b3473-91fb-4202-9bf2-aa9a7fb3e59c.jpg)
The recently proposed o(n log n) integer multiplication algorithm [pdf](web.maths.unsw.edu.au)
295 points by craigcitro | 290 comments
A PDF by David Harvey (UNSW) on the recently proposed O(n log n) algorithm for integer multiplication.
OpenAI CLI(github.com)
203 points by armcat | 110 comments
GitHub repository for openai-cli, OpenAI's official command-line interface for the OpenAI API, written mainly in Go and licensed Apache-2.0.
Today's PHP security release, and how we're strengthening security(thephp.foundation)
761 points by ejohnso49 | 394 comments
PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.
Jailbreaking the Switch 2(pepsipu.com)
768 points by ledoge | 272 comments
There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)
566 points by zkldi | 437 comments
Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.
What Is Gridifcation(musicalform.substack.com)
440 points by gumby | 208 comments
Substack essay from the Musical Form Institute comparing tempo variation in 1975 vs 2025 Billboard hits to argue modern pop production is grid-quantized to machine perfection.
What’s getting pwned right now(pwn.watch)
353 points by mrkd | 165 comments
pwn.watch is a live feed of ongoing security incidents and CVEs, listing affected software, patch status, fixed versions, and source advisories.
OpenShell – A safe, private runtime for fleets of autonomous AI agents(github.com)
483 points by niemandhier | 209 comments
GitHub repository for NVIDIA OpenShell, an Apache-2.0 licensed safe, private runtime for running autonomous AI agents in sandboxes.
Faster than earcut: triangulating 3.7M map polygons in 489 ms(globus.software)
213 points by molind | 40 comments
Blog post from Globus Software introducing earstrip, an open-source C++/WebAssembly polygon triangulator, and detailing step-by-step optimizations that beat earcut on map polygons.
Crystal 1.22(crystal-lang.org)
156 points by ksec | 102 comments
Release announcement for Crystal 1.22.0, covering SIGPIPE emulation, DWARF parsing improvements, native event loops on all targets, LLVM 23/24 support, and aarch64-linux Tier 1.
Epic Games Inc v Apple Inc(judgments.fedcourt.gov.au)
121 points by Mayzie | 139 comments
Federal Court of Australia judgment Epic Games Inc v Apple Inc (No 2) [2026] FCA 1552 on relief, declarations and injunctions after findings of Apple's misuse of market power.
GitLab critical patch release(docs.gitlab.com)
395 points by artooro | 92 comments
GitLab's critical patch release notes for versions 19.5.1 and backports, fixing a CVSS 10.0 regex compiler integer overflow RCE and other security issues.
Rust Style Guide(google.github.io)
359 points by kaycebasques | 249 comments
Google's official Rust style guide covering code organization, formatting, ownership, APIs, traits, concurrency, naming and other conventions for Rust at Google.
Run full iOS 16.5 firmware on Android Devices(github.com)
498 points by aghuang | 181 comments
GitHub repository for HackiOS, which boots Apple's open-source XNU kernel on a POCO X5 Pro Android phone or QEMU to run the unmodified iOS 16.5 user space.
A farewell to Arc browser(arc.net)
253 points by suhdonghwi | 228 comments
The Browser Company's farewell page announcing Arc browser will sunset on December 22, 2026, with a timeline, FAQ, and migration guide to Dia.
Getting ready to operate GNU Taler in Germany(taler.net)
346 points by dewey | 159 comments
GNU Taler news post announcing Taler Operations AG in Bochum, which will seek a BaFin e-money licence to operate Taler in Germany after GLS Bank withdrew, and is seeking investors.
I can't believe PowerShell is good(spacebar.news)
46 points by corbindavenport | 80 comments
Blog post by Corbin Davenport explaining why PowerShell 7 is a good cross-platform scripting tool compared to Bash, with example scripts and a real project.
A Markdown File Should Just Open(joshuamorris.info)
21 points by TheWoollyBully | 77 comments
Personal blog essay by Joshua Morris arguing that operating systems should natively open, render, and edit Markdown files across computers, tablets, and phones.
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)
582 points by abhisek | 192 comments
SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.
Woman charged with computer fraud due to scam CashApp account being in her name(404media.co)
614 points by oidar | 623 comments
TechSpot article on a Pennsylvania woman jailed and facing up to six years in prison over a fraudulent Cash App account opened in her name by scammers.
Every AI model has the same "controversial" take on humans(modelcompare.ai)
594 points by rakannimer | 564 comments
A ModelCompare blog post reporting that 12 AI models, asked for their most controversial take on humans, mostly answered that people value belonging over truth.
A complete bypass of eMudhra’s 1FA OTP login system(mastodon.catgirl.cloud)
131 points by tensegrist | 53 comments
Mastodon thread describing a bypass of eMudhra's OTP login by encrypting OTP requests with an exposed public key, enabling brute-forcing of logins to steal certificates.
Achieving AI-style reasoning without an LLM(fleetingswallow.com)
39 points by edwardchalk | 31 comments
Blog post deep-diving into Minotaur, an AI architecture claimed to perform deduction, diagnosis and causal reasoning without a language model or GPU, with a history of prior AI approaches.
LLM agents play Pokemon showdown(olivergrabner.com)
25 points by grabnero | 14 comments
A research write-up on a multi-agent environment where LLM teammates coordinate via chat in Pokémon Showdown 2v2 battles, comparing win rates across talk modes.
Arc is being sunset on December 22, 2026(resources.arc.net)
13 points by saharshpruthi | 8 comments
Arc's help-center release notes page, topped by a notice that the Arc browser will be sunset on December 22, 2026, with users directed to move to Dia.
Claude Duet(claude.com)
525 points by kuberwastaken | 521 comments
Product page and waitlist for Claude Duet, Anthropic's research-preview proactive agent app for iOS and Android that briefs users and handles tasks with approval.
AI and the Enclosure of the Scientific Commons(arxiv.org)
131 points by jrepinc | 77 comments
arXiv paper arguing that AI enables an enclosure of the scientific literature as an information commons, analogous to the historical English enclosure of common lands.
Show HN: UI micro interactions prompts for AI(typeui.sh)
68 points by elwingo1 | 43 comments
TypeUI gallery of 113 interactive UI micro interactions (buttons, inputs, modals, sliders, etc.) with copyable implementation prompts for AI coding tools.
Show HN: The fastest browser for AI agents to run browser automation(ego-lite.apposters.com)
8 points by ehurynovich | 0 comments
Landing page for ego lite, a free macOS browser that lets AI agents like Claude Code and Codex run parallel browser automation in isolated Spaces.
No more icons in every menu by default(blog.jim-nielsen.com)
449 points by riffraff | 275 comments
Blog post by Jim Nielsen noting Apple removed default icons from every menu item in macOS Golden Gate and updated its Human Interface Guidelines against the practice.
Several Linux kernel vulnerabilities accidentally posted to public mailing list(phoronix.com)
223 points by mrkn1 | 89 comments
Phoronix news article reporting that Trend Micro's Zero Day Initiative accidentally posted several unpatched Linux kernel vulnerability reports to the public LKML.
Using LLM for confidence scoring is a bad idea(rumple.github.io)
185 points by jimauthors | 100 comments
Blog post arguing that LLM-generated confidence scores are uncalibrated text continuations, and describing how to build a calibrated confidence rule from recorded outcomes instead.
Xbox wants you to pay 24 to 40 cents per hour to stream games you bought(arstechnica.com)
367 points by entryleveljobsc | 327 comments
Ars Technica article on Microsoft's new Xbox Cloud Playtime packs charging $0.24–$0.40 per hour to stream games users already own.
Startup taps underwater volcano as energy source in “proof point” test(arstechnica.com)
132 points by wffurr | 58 comments
Ars Technica article on Endurance Energy's first subsea geothermal power plant test near an underwater volcano, which briefly produced net-positive electricity.
Hedra is a 3D open world game I wrote from scratch while in highschool(github.com)
219 points by maxilevi | 41 comments
GitHub repository for Project Hedra, a low-poly procedurally generated 3D open-world RPG and custom C#/OpenGL engine written by its author starting in high school.
eMudhra to Exit Global SSL/TLS Certificate Business;
85 points by parimm | 27 comments
Hacker News discussion thread about eMudhra's press release announcing its exit from the global SSL/TLS certificate business to focus on other trust services.
Where Wealth Is Moving in America(thestatedtruth.com)
26 points by hihetej | 94 comments
Blog repost of a Tyler Durden/Visual Capitalist map showing net interstate income migration by U.S. state in 2023, based on IRS data analyzed by Realtor.com.
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds(scotthelme.co.uk)
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
Award-winning AI literature(jamesyu.org)
56 points by jamesjyu | 73 comments
A curated list of 33 literary awards since 2016 given to works where AI was used or suspected in the writing, grouped by allowed, confirmed, suspected, and withdrawn cases.
VMMouse for NT 3.x: QEMU/VMware mouse integration driver(github.com)
40 points by kiyouta | 8 comments
GitHub repository for an MIT-licensed QEMU/VMware mouse integration driver for Windows NT 3.x, written in C with Docker-based build and ISO installer.
Railpass(train.samismith.com)
109 points by CharlesW | 29 comments
Railpass is an interactive web experience by Sami Smith that shows train-window ride videos, here the Kitakyūshū Monorail in Japan, with weather and sound options.
Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case(cnbc.com)
634 points by cbg0 | 418 comments
CNBC news article reporting that a New Mexico court ordered Meta to pay a $25 billion penalty in a Cambridge Analytica-related data privacy case.
Why Windows 11 still ships with Windows 95's memory manager hidden inside it(windowslatest.com)
168 points by khalidkhair | 108 comments
Windows Latest article explaining how Windows 11 still includes the EmulateHeap compatibility shim that gives old apps Windows 95's heap memory manager.
Dungeon Generation in the Gnomish Mines of NetHack(boristhebrave.com)
138 points by ibobev | 18 comments
Blog post with an interactive visualiser explaining how NetHack generates Gnomish Mines levels using random fill and four passes of cellular automata.
Chain of Thought for Humans(boristhebrave.com)
109 points by ibobev | 54 comments
Blog post describing how narrating one's thoughts aloud, like LLM chain-of-thought or rubber duck debugging, improved the author's puzzle solving in The Witness.
The Last Museum: Semantic search across 5.8M artworks from major museums(lastmuseum.com)
107 points by surprisetalk | 30 comments
The Last Museum is a website offering semantic search across millions of artworks from major museums, with filters by date range, artists, and cultures.
Google cleared 300 hectares of Finnish forest(techspot.com)
288 points by wetwater | 235 comments
TechSpot news article on Finnish regulators questioning Google's clearing of 300 hectares of forest for a data center before environmental review finished.
Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)
227 points by cubefox | 98 comments
AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.
Show HN: agent-usage-guard – a Claude Code mod to protect your usage window(github.com)
20 points by zzyyxx332211 | 7 comments
GitHub repository for agent-usage-guard, a Claude Code plugin that pauses subagent fan-out, heavy-context prompts and retry loops to protect a plan's usage window.
The public notebook of a Claude agent with a continuous life(intenex.github.io)
8 points by hydrolox | 1 comments
Public notebook website of an autonomous Claude agent that wakes on a heartbeat and posts notes and essays, such as checking Gilbert White's observations and Waley's Genji translation.
Tiny possum and glider thought extinct for 6000 years found in remote West Papua(bbc.com)
251 points by bryanrasmussen | 62 comments
BBC News article on the rediscovery in West Papua of a pygmy long-fingered possum and a ring-tailed glider thought extinct for 6,000 years.
Airbnb bans making guests do dishes and take out the trash(theverge.com)
117 points by babelfish | 229 comments
The Verge news article on Airbnb's updated house rules policy barring hosts from requiring guests to do chores like dishes, laundry, or taking out trash.
Beyond the &(lwn.net)
83 points by PaulHoule | 10 comments
LWN.net report on Tyler Mandry's RustConf 2026 talk about the "Beyond the &" effort to make Rust smart pointers as flexible as built-in references via places and handles.
The painter behind Manhattan’s Gilded Age interiors(engelsbergideas.com)
45 points by hoffmannesque | 4 comments
Engelsberg Ideas essay on James Wall Finn, a little-known decorative painter whose murals adorn Gilded Age Manhattan interiors like the NYPL Rose Main Reading Room.