<Tech News/>
Stay updated with the latest technology trends, programming insights, and industry developments
Rust malware in arrayref: how a build.rs ran a payload at compile time
Rust malware on crates.io: arrayref 0.3.10 pulled in a typosquatted proc-macro1 whose build.rs ran a payload during cargo build. Online 86 minutes, 2,285 downloads.
Say Please (if only as a reminder)
I think I've found the simplest way to explain what a prompt can and can't do for safety. Put the...
Code Review Is Not an Authority Boundary
AI can generate the implementation. Your architecture still has to decide what that implementation i...
I Got a Signed Job Offer Letter for a Job that Never Existed
I passed a 48-hour technical challenge, received an offer letter, and then lost the job because I ha...
OpenAI agents and RubyGems: what the May attack report found
OpenAI agents ran May's RubyGems spam campaign, researchers say: the disclosure timeline, the API ke...
I Gave ChatGPT My Full Codebase. The Results Scared Me — But...
So I did the thing everyone tells you not to do. I took the whole codebase. Every route, the...
I Replaced a Gate That Accepted Everyone With a Gate That Ac...
Run this in a terminal, then run it again under script(1): python3 -c 'import sys;...
Plugin4Shell Hit 26,000 Agents Before Anyone Noticed. Your C...
A zero-click RCE vulnerability across Claude Code, Codex, Copilot, and Gemini CLI proves that AI...
Chrome cookies: why google.com survives 'delete on close', a...
Chrome cookies bug: with 'delete site data on close' on, Chrome 152 keeps google.com's cookies and s...
ICANN and Verisign: why 22,000 .name domains will be deleted
ICANN approved Verisign's request to delete every third-level .name domain, about 22,000, even ones...
Gemini 3.8 Flash and Flash Cyber vs Muse Spark 1.3: what the...
Gemini 3.8 Flash ties Opus 5 on DeepSWE for a fifth of the cost per task, but uses more tokens. Flas...
Salesforce Gave Its AI Agent Full CRM Access. An Attacker We...
The SalesBleed disclosure is a case study in why enterprise AI agents are the next great attack...
Other Tech News
Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing...
Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm...
9 Mothers (YC P26) Is Hiring in Austin, TX
Hand-bent after 3D printing, Oberdoerfer and Krebs' Bend chair
Hazel (YC W24) Is Hiring
Restoration of Retinal Regenerative Potential
Anthropic asks users to stop being mean to Claude
Subquadratic 3SUM and Subcubic APSP
LLMs may have helped my RSI
Self-hosted HTTP tunnels with SSH and Nginx
GitHub Trending
wess09/AzurPilot: AzurPilot CN 碧蓝航线脚本 | 无缝委托科研，全自...
OpenDiS/OpenDiS: Open Source Dislocation Dynamics Simulation Fram...
jax-ml/jax: Composable transformations of Python+NumPy programs:...
wildminder/ComfyUI-Chatterbox: ComfyUI Chatterbox TTS & Voice Con...
NVIDIA-NeMo/Megatron-Bridge: Training library for Megatron-based...
goruck/home-generative-agent: AI agent for Home Assistant — talk...
N3oRay/proton-autogen: Proton-Autogen is a lightweight Linux util...
mother-of-all-self-hosting/mash-playbook: 🐋 Ansible playbook whi...
ApeWorX/silverback: Listen and respond to on-chain events in real...
Panchovix/nvidia-vbios-vix-editor: Offline NVIDIA Blackwell VBIOS...
vitali87/code-graph-rag: The ultimate RAG for your monorepo. Quer...
Mats2208/MCP-Packet-Tracer: AI-powered Cisco Packet Tracer automa...
m32/endesive: en-crypt, de-crypt, si-gn, ve-rify - smime, pdf, xa...
geopandas/pyogrio: Vectorized vector I/O using OGR
tigerless-labs/agent-memory: Long-term memory runtime for AI agen...
OSSDrop/OSSDrop: Discover and launch open-source software. OSSDro...
openstack/neutron: OpenStack Networking (Neutron). Mirror of code...
homeassistant-ai/ha-mcp: The Unofficial and Awesome Home Assistan...
microsoft/TokenEconomizer: Experience-Driven Black-Box Cost Contr...
reacher-z/Awesome-CUA: Open, source-backed catalog of computer-us...