First screen, captured .
370 points by avsm | 117 comments
Blog post by Anil Madhavapeddy on how AI agents can find exploits from just the rumour of a bug, after a cohttp path traversal fix, and how OSS security disclosure must change.
227 points by cubefox | 98 comments
AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.
144 points by jhap | 49 comments
702 points by dvrp | 223 comments
A personal blog essay by Andreas Kling arguing that small incremental neglect and poor choices accumulate into failure just as small improvements build excellence.
355 points by youngbrioche | 234 comments
Robert Glaser's blog essay on why companies fail to turn individual AI tool use into organizational learning and team capabilities.
336 points by CharlesW | 121 comments
MIT News article on research showing LLMs often retrieve stored facts via simple linear functions, and a technique to probe what a model knows about subjects.
609 points by emmorts | 147 comments
A personal blog essay on the ByteDrum blog about a developer's pile of unfinished side projects and the challenge of actually finishing them.
676 points by ethanhawksley | 665 comments
A personal blog post by Ethan Hawksley explaining why he dislikes passkeys and the tech industry's push to make users adopt them.
637 points by __rito__ | 261 comments
Andrej Karpathy blog post about using LLMs to grade decade-old Hacker News discussions and commenters' predictions with hindsight, presented as an "HN Time Capsule" site.