A GTK4 SSH-askpass in Zig(xn--gckvb8fzb.com)

58 points by surprisetalk 2 months ago | 18 comments

Show HN: Kysely, a type-safe SQL query builder for TypeScript(kysely.dev)

80 points by fernandohur 3 years ago | 41 comments

The TEMU-Fication of Software, Digital Goods and Services(xn--gckvb8fzb.com)

152 points by surprisetalk 2 months ago | 103 comments

Show HN: Aberdeen – An elegant approach to reactive UIs(aberdeenjs.org)

204 points by vanviegen 1 year ago | 117 comments

Neutralinojs – Build lightweight cross-platform desktop apps with JavaScript(neutralino.js.org)

106 points by thekode 3 years ago | 69 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

MVCC – the part of PostgreSQL we hate the most (2023)(cs.cmu.edu)

341 points by virtualwhys 2 years ago | 109 comments

Andy Pavlo blog post from April 2023 criticizing PostgreSQL's multi-version concurrency control (MVCC) implementation and its drawbacks.

PaperPilot – Zero-Cloud, Pure-Rust PDF Engine with WASM and MCP(github.com)

221 points by vardhan1237 17 hours ago | 77 comments

GitHub repository for PaperPilot, a local, zero-cloud pure-Rust PDF engine and AI document copilot with WASM builds and an MCP server.

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD(crocidb.com)

353 points by speckx 5 months ago | 214 comments

Personal blog post describing migrating a blog from a decade-old Ubuntu 16.04 DigitalOcean VPS to a cheaper FreeBSD virtual machine on Hetzner.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

PyTorch Internals: Ezyang's Blog(blog.ezyang.com)

418 points by Anon84 1 year ago | 24 comments

Edward Yang's long-form blog essay on PyTorch internals, based on his talk at the PyTorch NYC meetup on May 14, 2019.