<Tech News/>
Stay updated with the latest technology trends, programming insights, and industry developments
Certificate authority keys: eMudhra's browser and runtime trust gap
The eMudhra certificate authority incident shows why browser blocklists and runtime CA bundles need separate checks in deployed applications.
Who watches the watcher when the watcher is a file in the re...
OpenAI disclosed that two of its own coding agents weakened the monitoring built to catch their misb...
I wrote a 10,000-line Windows security suite in one Python f...
Most small encryption tools fail in boring places, not in the cipher. They fail on what happens with...
OpenCode lost the keys that lived in its cloud. The ones on...
A breach of OpenCode's online console exposed 1.4% of users' stored API keys — five-figure bills at...
Five witnesses and two RIRs: the CAs just discovered custody
Baseline Requirements 3.2.2.9 makes multi-perspective issuance corroboration mandatory on Dec 15: fi...
How Do You Make a Microservice Only Your Other Services Can...
Hello, I'm Maneshwar, and I'm building LiveReview — a blast-radius aware AI code review built for...
I built an AWS agent that scores any GitHub repo before you...
7,600 fake repos shipped in 2026, 800 posing as AI skills and MCP servers. RepoPilot scores any repo...
I put a logging proxy in front of an LLM client: here's what...
A viral rant says run your own LLM proxy; the HN thread asks how. Here is the runnable answer — one...
API key security after the OpenCode Console breach
API key security after OpenCode's reported Console breach: affected scope, hosted provider credentia...
4 Coding Agents Pinned Plugins to a Commit SHA. A Branch Wit...
Plugin4Shell: Claude Code, Codex, Copilot and Gemini CLI ran git checkout and never checked HEAD. Re...
I Tracked a Scammer For 72 Hours. It Got Personal.
It started with a text message at 11:47 PM. Your USPS package could not be delivered. Please...
The Internet of Things is Held Together With Duct Tape and D...
My smart light bulb tried to mine crypto last Tuesday. Not a joke. Not a metaphor. I have a cheap....
Other Tech News
Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing...
Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm...
9 Mothers (YC P26) Is Hiring in Austin, TX
Hand-bent after 3D printing, Oberdoerfer and Krebs' Bend chair
Hazel (YC W24) Is Hiring
Restoration of Retinal Regenerative Potential
Anthropic asks users to stop being mean to Claude
Subquadratic 3SUM and Subcubic APSP
LLMs may have helped my RSI
Self-hosted HTTP tunnels with SSH and Nginx
GitHub Trending
wildminder/ComfyUI-Chatterbox: ComfyUI Chatterbox TTS & Voice Con...
NVIDIA-NeMo/Megatron-Bridge: Training library for Megatron-based...
goruck/home-generative-agent: AI agent for Home Assistant — talk...
N3oRay/proton-autogen: Proton-Autogen is a lightweight Linux util...
mother-of-all-self-hosting/mash-playbook: 🐋 Ansible playbook whi...
ApeWorX/silverback: Listen and respond to on-chain events in real...
Panchovix/nvidia-vbios-vix-editor: Offline NVIDIA Blackwell VBIOS...
vitali87/code-graph-rag: The ultimate RAG for your monorepo. Quer...
Mats2208/MCP-Packet-Tracer: AI-powered Cisco Packet Tracer automa...
m32/endesive: en-crypt, de-crypt, si-gn, ve-rify - smime, pdf, xa...
geopandas/pyogrio: Vectorized vector I/O using OGR
tigerless-labs/agent-memory: Long-term memory runtime for AI agen...
OSSDrop/OSSDrop: Discover and launch open-source software. OSSDro...
openstack/neutron: OpenStack Networking (Neutron). Mirror of code...
homeassistant-ai/ha-mcp: The Unofficial and Awesome Home Assistan...
microsoft/TokenEconomizer: Experience-Driven Black-Box Cost Contr...
reacher-z/Awesome-CUA: Open, source-backed catalog of computer-us...
frida/frida-tools: Frida CLI tools
bytedance/Sa2VA: Official Repo For Pixel-LLM Codebase: Sa2VA (T-P...
OEvortex/llm4free: LLM4Free — All-in-one Python toolkit for web s...