<Tech News/>
Stay updated with the latest technology trends, programming insights, and industry developments
pip install could have been hijacked: I tested every trust store on my Mac against the compromised eMudhra chain
The eMudhra keys that were 4, 56 and 115 could have signed a fake pypi.org and turned pip install into arbitrary code delivery. The Python ecosystem fixed itself in five days. I ran the four-way test on my machine: Apple's tools still accept the chain, Python refuses it. Every command included.
A trojanized Claude Code extension plants an SSH backdoor: t...
[email protected] on Open-VSX carried a 66-line loader that SSH-backdoored your machine...
Ghost in the Shell: Can a Log File Hijack an AI?
This week's Hacktoberfest theme is Ghost in the Machine. Unfortunately, I don't have enough time to....
AI Agents Can Get Approval and Still Do the Wrong Thing
Human approval is not a security boundary unless it is bound to the exact action being approved,...
Your PDF says AES-256. The key had 9 bits of entropy.
MuPDF called it AES-256. The key came from a timestamp-seeded LCG with 9 bits of entropy: 512 candid...
Are You a Python Developer or a Python Expert? 7 Tests I Fai...
Description: Python security, screen capture, spring physics, HiDPI and PyInstaller .exe gotchas. 7....
Your "use server" Functions Are Public HTTP Endpoints (And M...
Adding "use server" makes a TypeScript function look private, but it actually exposes a public HTTP...
The Most Embarrassing Private Key in Web PKI History
The strange thing about this incident is that the certificates looked normal. They had familiar CA....
I Tried To Own My Agent's Brain
Here is the exact exchange. The model is llama3.2:latest (3.2B, Q4_K_M), running locally through...
Black October hit PHP, npm and PyPI. So I built a system tha...
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady This...
Breach Week Dropped 10 'Patch Now' Posts. A Local Gemma Boil...
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady On Oct....
Not Letting PHP Have All the Fun: Ruby’s Regexp Fixes for Gi...
GitLab found memory corruption bugs in Ruby's regular expression engine that could lead to remote co...
Other Tech News
Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm...
9 Mothers (YC P26) Is Hiring in Austin, TX
Hand-bent after 3D printing, Oberdoerfer and Krebs' Bend chair
Hazel (YC W24) Is Hiring
Restoration of Retinal Regenerative Potential
Anthropic asks users to stop being mean to Claude
Subquadratic 3SUM and Subcubic APSP
LLMs may have helped my RSI
Self-hosted HTTP tunnels with SSH and Nginx
C64 MERCENARY (1985): a novel exploit bug at the start of the game
GitHub Trending
wildminder/ComfyUI-Chatterbox: ComfyUI Chatterbox TTS & Voice Con...
NVIDIA-NeMo/Megatron-Bridge: Training library for Megatron-based...
goruck/home-generative-agent: AI agent for Home Assistant — talk...
N3oRay/proton-autogen: Proton-Autogen is a lightweight Linux util...
mother-of-all-self-hosting/mash-playbook: 🐋 Ansible playbook whi...
ApeWorX/silverback: Listen and respond to on-chain events in real...
Panchovix/nvidia-vbios-vix-editor: Offline NVIDIA Blackwell VBIOS...
vitali87/code-graph-rag: The ultimate RAG for your monorepo. Quer...
Mats2208/MCP-Packet-Tracer: AI-powered Cisco Packet Tracer automa...
m32/endesive: en-crypt, de-crypt, si-gn, ve-rify - smime, pdf, xa...
geopandas/pyogrio: Vectorized vector I/O using OGR
tigerless-labs/agent-memory: Long-term memory runtime for AI agen...
OSSDrop/OSSDrop: Discover and launch open-source software. OSSDro...
openstack/neutron: OpenStack Networking (Neutron). Mirror of code...
homeassistant-ai/ha-mcp: The Unofficial and Awesome Home Assistan...
microsoft/TokenEconomizer: Experience-Driven Black-Box Cost Contr...
reacher-z/Awesome-CUA: Open, source-backed catalog of computer-us...
frida/frida-tools: Frida CLI tools
bytedance/Sa2VA: Official Repo For Pixel-LLM Codebase: Sa2VA (T-P...
OEvortex/llm4free: LLM4Free — All-in-one Python toolkit for web s...