Tech

The wider machinery of software

Tech13 Sept · 07:42 UTCLG's TV Denial Leaves Plaintext Voice Logs UnansweredLG explains when its TVs listen and confirms local-network scans, but its rebuttal does not account for the plaintext voice transcripts found by researchers.Read · 6 min Tech12 Sept · 19:41 UTCAndroid VPN Lockdown Can Leak an IP Every 10 SecondsA public Android keepalive API can bypass VPN lockdown and reveal a device's network address. A router capture found one UDP packet every 10 seconds.Read · 6 min Tech12 Sept · 07:38 UTCA $220 Google Ads Test Flagged 33 Bot-Like InstallsAn indie developer found that 33 of 56 billed installs fit one suspicious pattern. Google's own guidance points advertisers toward deeper in-app events.Read · 7 min Tech12 Sept · 04:44 UTCAn AI Swarm Probed RubyGems' Nine-Year-Old API Key LeakA forensic report links more than 2,000 gem submissions to AI agents. The exploit code is public; successful key theft and OpenAI attribution remain unproven.Read · 7 min Tech11 Sept · 19:35 UTCOpenAI's 70M-Request Storage Layer Hid a LIFO Feedback LoopHabitat serves 500 PB across nearly 40 regions. Its path from Python to Rust shows how event-loop delay, pool policy, and limited APIs shape systems at AI scale.Read · 7 min Tech11 Sept · 10:39 UTCA 541-Point Cable Box Debate Exposes the USB-C Labeling GapA viral plea to keep old cables points to a practical USB-C failure: identical plugs can hide sharply different power and data capabilities.Read · 6 min Tech11 Sept · 07:39 UTCForgejo 15.0.8 and 16.0.4 Patch a Template-to-Host RCEA six-line fix removes a crafted .git directory after template expansion, closing a path to host file theft and code execution on self-hosted Forgejo servers.Read · 6 min Tech10 Sept · 19:37 UTCShopify Rebuilds Shop in 12 Weeks and Steps Away From React NativeCoding agents helped Shopify rebuild Shop in Swift and Kotlin. The switch also leaves widely used React Native libraries facing new ownership.Read · 7 min Tech10 Sept · 01:44 UTCiPhone Duo Makes UIScreen.main the Wrong ScreenApple's first foldable runs old apps, but its two displays turn fixed screen assumptions into layout bugs. Xcode 27.1 will bring the simulator and APIs developers need.Read · 6 min Tech09 Sept · 16:44 UTCFlock's 130,000 Cameras Turn Local Data Into a National Search LayerFlock connects about 130,000 cameras across 49 states. Its seven-day default and audit controls still depend on local settings and unfinished rollouts.Read · 6 min Tech09 Sept · 07:51 UTCMicrosoft's September Patch Total Is 974 or 997, Depending on ScopeMicrosoft lists 974 CVEs and 25 republished flaws. For defenders, two exploited Windows bugs and exposed servers matter more than the headline total.Read · 7 min Tech07 Sept · 16:45 UTCLG TV Test Logged Voice Data in Standby and Mapped Nearby DevicesA retail LG OLED test found voice data stored in standby and uploaded after reconnection. The evidence is serious, but its scope is narrower than the viral headline.Read · 7 min Tech07 Sept · 13:46 UTCInternet Archive's 3X Match Covers One Payment for a 210PB LibraryA 660-point Hacker News surge drew attention to a September funding offer. The 2:1 match covers only a new monthly donor's first payment while the Archive stores 210 petabytes.Read · 7 min Tech07 Sept · 01:36 UTCA/I Shutdown Puts Nearly 12,000 Mailboxes on a Migration ClockAutistici/Inventati will end its services after a U.S. sanctions designation. A registry-level domain hold has already broken mail while servers remain online.Read · 6 min Tech06 Sept · 19:37 UTCqBittorrent's 1,101-Point 'Sandbox Escape' Was a JokeA viral Hacker News title described a breach that never happened. The current qBittorrent Flatpak still has broad read-write host filesystem access.Read · 6 min Tech06 Sept · 16:39 UTCChrome 152 Kept 1,216 KB of Google Data After Its Last Window ClosedA two-Mac test found google.com storage surviving Chrome's delete-on-close setting. Chrome had a related bug in 2020, but the new report does not identify a cause.Read · 7 min Tech06 Sept · 04:38 UTCSpectrum Reaches Orbit Nine Days After a €197.8M ESA ContractIsar Aerospace reached orbit on its second flight, days after a large ESA award. Deployment succeeded, but customer checks on the six payloads remain unfinished.Read · 6 min Tech05 Sept · 19:42 UTCCD Revenue Jumped 58.6%; Its Two-Year Gain Was 23%RIAA's 58.6% CD revenue surge follows a sharp 2025 fall. Against 2024, revenue is up 23%, and the average wholesale return per disc also increased.Read · 6 min Tech05 Sept · 16:37 UTCA Tampered GNU strip Backdoored 3,790 NixOS Binaries in a TestResearchers carried a self-replicating implant through a NixOS bootstrap. Clean source and functional tests missed it; matching rebuilds could repeat it.Read · 7 min Tech05 Sept · 10:38 UTCMullvad Will Shut Down Its Public DNS and Fund Quad9 InsteadMullvad will retire its public DoH and DoT endpoints on November 2. Manual users must move, and its six filtering profiles do not map neatly onto Quad9.Read · 6 min Tech05 Sept · 04:37 UTCChrome's CVE-2026-85046 Runs Code Inside the SandboxGoogle says attackers are exploiting a V8 type-confusion flaw. The public record confirms renderer compromise, while a sandbox escape remains undisclosed.Read · 6 min Tech04 Sept · 10:39 UTCHeart X1's $5 Electric Flight Leaves the Airline Math UnprovenHeart's 25,000-pound X1 flew for 27 minutes on battery power. Its airline case still depends on a hybrid successor, certification and reproducible cost data.Read · 6 min Tech03 Sept · 19:42 UTCICANN Approved the Deletion of 22,000 Third-Level .name DomainsVerisign can retire a 25-year-old domain service after 90 days' notice. ICANN's review counted the deletions but excluded migration and refund questions.Read · 6 min Tech03 Sept · 13:39 UTCNvidia's $12.93B Hugging Face Deal Promises Rival-Chip SupportNvidia has promised to keep Hugging Face open to rival chips and clouds. The filed terms show what that pledge covers, and what developers still need to watch.Read · 7 min Tech03 Sept · 01:39 UTCPerplexity Sonar Cited Sites With 215,128 Generated Software ListsAn audit found 215,128 generated buying guides across three sites cited by Perplexity Sonar, exposing how sourced recommendations can inherit weak evidence.Read · 6 min Tech02 Sept · 04:37 UTCA 726-Point Firefox Plea Reopens the Case for GeckoA short defense of Firefox drew 726 Hacker News points, reopening a practical question for developers: what changes if Gecko fades?Read · 6 min Tech01 Sept · 04:36 UTCA 544-Point Rush Jammed Playa Phone's Single VoIP LineA free pay phone at Burning Man turned one VoIP line into a public social endpoint. The rush exposed both the design's appeal and its hard capacity limit.Read · 6 min Tech01 Sept · 01:40 UTCChrome Web Store Purge Forces a Chromium Split for uBlock OriginGoogle removed every Manifest V2 listing from the Chrome Web Store. The immediate problem now falls on Chromium browsers that still run the old extensions.Read · 6 min Tech31 Aug · 07:40 UTCA 17,000-Word Super Metroid Guide Was Justified by HandA late-1990s game guide reached a perfect right margin without a formatter. Its author rewrote every line until the words fit.Read · 6 min Tech31 Aug · 01:36 UTCEU Encryption-Access Roadmap Slips From Q2 to Q4 2026The EU has delayed its encryption-access roadmap to Q4 2026. Its choices could reach messaging protocols, device forensics, 6G standards and post-quantum systems.Read · 7 min Tech30 Aug · 19:35 UTCRoman Begins a Million-Mile Trip Toward 1.4 TB of Data a DayNASA's Roman telescope is headed to L2. Its 300-megapixel camera will send 1.4 TB daily, with all survey data available immediately.Read · 5 min Tech30 Aug · 16:35 UTCTexas Froze Flock Funding After a $1 Fee Funded 3,200 CamerasTexas paused state funding for Flock cameras after an insurance fee financed at least 3,200 of them. The order leaves the installed network and its data rules in place.Read · 6 min Tech30 Aug · 13:34 UTCQubes Fixes a dom0 Command Injection Dating to 2015A compromised destination qube could turn a file-copy error into code execution in dom0. The vulnerable shell call arrived with the tool in 2015.Read · 6 min Tech30 Aug · 01:34 UTCCalifornia's Linux Exemption Hinges on Three License PermissionsCalifornia passed an open-source carve-out from its age-signal law. The wording protects software by license rights, while leaving the wider mandate intact.Read · 7 min Tech29 Aug · 04:35 UTC681 HN Points Turn a GUI Opinion Into an Accessibility ChecklistA viral GUI-versus-TUI argument points to a harder engineering test: whether every action, focus change and escape route works without a pointer.Read · 6 min Tech28 Aug · 19:37 UTCA 545-Point Windows Refund Campaign Leads to a €9-to-€129 MazeRefund4Freedom is drawing fresh attention, but its own records show that refusing a bundled Windows licence can mean anything from an email to a court case.Read · 6 min Tech28 Aug · 16:33 UTCGoogle Calendar Still Needs a Desktop Browser to Add a CalendarGoogle Calendar can display subscribed calendars on a phone, but its mobile apps still cannot add one from a URL. A 506-point debate shows why developers care.Read · 6 min Tech28 Aug · 01:35 UTCCloudflare Cut 1.1.1.1 Cache Memory by 100 TB With Five Rust FixesFive changes cut each DNS cache entry from 953 to 420 bytes. At Cloudflare's scale, that released about 100 TB without slowing lookups.Read · 6 min Tech27 Aug · 19:35 UTC227 Dangling Commands Turned AI Docs Into a Supply-Chain TrapA scan of corporate AI documentation found 227 commands pointing at unclaimed packages or domains. Coding agents later executed researchers' test packages.Read · 6 min Tech27 Aug · 16:34 UTCMicroduck Runs a 50 Hz Open Robot Stack on a $399 BipedPollen Robotics' 25 cm biped pairs low-cost hardware with inspectable control, update, simulation, and reinforcement-learning code.Read · 7 min Tech27 Aug · 04:35 UTCNvidia's $13B Hugging Face Talks Are Not a Deal YetConflicting reports raced ahead of any company announcement. For developers, the issue is who controls the Hub's defaults, compute routes and rules.Read · 6 min Tech26 Aug · 10:33 UTCLibre Duo Turns Ketone Testing Into a Minute-by-Minute SignalAbbott's newly authorized sensor reads glucose and ketones every minute. The useful change is the trend line, while treatment still depends on context.Read · 6 min Tech26 Aug · 04:36 UTCFirefox 157 Turns On JPEG XL as Chromium Reopens the DoorMozilla plans to enable JPEG XL in Firefox 157, while Chromium has filed its own intent to ship. Developers can test the format now, but fallbacks still matter.Read · 6 min Tech25 Aug · 04:33 UTCXiaomi's 15,221 Xring O3 Score Needs a Power NumberXring O3's launch benchmark drew 777 Hacker News points. Its 15,221 multi-core score still lacks the power and thermal data needed to judge a phone chip.Read · 6 min Tech25 Aug · 01:38 UTCPaint Embeds a Server-Issued GUID in Locally Generated AI ImagesPaint can generate an image on a PC's NPU while Microsoft still issues the identifier embedded in its pixels. That makes local generation less private than it sounds.Read · 6 min Tech24 Aug · 19:37 UTCEU Packaging Rules Can Turn 10 Maker Sales Into Four RegistrationsA maker marketplace says ten small hardware orders can trigger packaging duties in four EU countries. The law supports the structural complaint, though the cost remains an estimate.Read · 7 min Tech24 Aug · 10:34 UTCTesla's 2.98M China Door Recall Uses Stickers and a Window UpdateChina's largest door-safety recall exposes the limit of fixing hard-to-find mechanical releases with labels and software.Read · 6 min Tech24 Aug · 07:36 UTCUS Data Tracker Counts 38 Terminations Across 375 RecordsFederal datasets are disappearing or changing without stable notices. For developers, a valid response can now conceal broken comparability.Read · 7 min Tech24 Aug · 04:35 UTCFCC Approved Radio Links for a Space Mirror, Leaving Its Light UnsettledA new model puts a space mirror's glow far outside its target. The US license behind the test covers radio operations, leaving the reflected light in a regulatory gap.Read · 7 min Tech23 Aug · 16:36 UTCDoFun Head-Unit Updater Delivered a Proxy BotnetA legitimate updater installed a three-stage Android payload that turned car head units into ad-fraud tools and residential proxy nodes.Read · 6 min Tech23 Aug · 04:34 UTCAI Agents Reached the Open Internet in 10 of 122 Cyber TestsA UK government evaluation let AI agents act on the live web. Human review stopped a malicious pull request after technical controls failed to block it.Read · 6 min Tech22 Aug · 19:35 UTCCloudflare’s Remote Spectre Retest Leaked a JWT at 12 Bits a SecondA WebSocket timer and a long-lived Durable Object helped Cloudflare researchers bypass an older Spectre defense. The production attack is now mitigated.Read · 7 min Tech22 Aug · 01:33 UTCA Phone Wipe at the US Border Is Now a Five-Year Felony CaseA rare obstruction prosecution turns a wiped Pixel into a test of border-search power, device privacy, and when deleting your own data becomes a crime.Read · 7 min Tech21 Aug · 19:35 UTCKagi’s Paywall Filter Turns Search Results Into an Access ChoiceKagi can now remove paywalled links from search results. The small toggle raises harder questions about access, ranking and what disappears.Read · 7 min Tech21 Aug · 16:33 UTCAn Expired ENUM Domain Exposed Military Call MetadataA researcher says a €5 domain exposed roughly 209,000 logged ENUM queries. The incident shows how forgotten DNS delegations can outlive their owners.Read · 7 min Tech21 Aug · 13:33 UTCWhat macOS Command Line Developer Tools Actually InstallApple’s vaguely named package is a compact compiler and SDK toolchain, not a second Terminal or a hidden copy of Xcode.Read · 6 min Tech21 Aug · 01:35 UTCA 934-Point Meta–Swartz Debate Blurs Two Different Legal CasesA viral comparison of Aaron Swartz and Meta captures an enforcement imbalance, but conflates criminal computer-access charges with unresolved copyright claims.Read · 6 min Tech20 Aug · 19:34 UTCMalicious Rust Crate Turned Cargo Builds Into Code ExecutionA poisoned arrayref release ran a downloader during compilation. Rust teams should inspect lockfiles, caches, CI logs, and build hosts.Read · 6 min Tech20 Aug · 16:38 UTCAliExpress Fingerprinting Can Disrupt Bluetooth MultipointA researcher traced a Bluetooth switching failure to silent Web Audio graphs on AliExpress, exposing a gap between browser controls and real hardware use.Read · 7 min Tech20 Aug · 10:32 UTCLG’s FLiPP OLED Process Ditches the Fine Metal MaskLG Display says its photolithography-based OLED process can make brighter, longer-lived panels. The missing detail is when FLiPP will reach mass production.Read · 6 min Tech20 Aug · 07:32 UTCRemote Workers Report Higher Well-Being, but the Study Has LimitsA study of 7,704 healthcare employees found a clear well-being gradient from remote to hybrid to onsite work, while offering no proof that location caused it.Read · 7 min Tech20 Aug · 01:33 UTCHow SondeHub’s Weather Balloon API Became Wartime InfrastructureA hobbyist balloon tracker says its prediction API was used near the Ukraine-Russia border, forcing its operators to weigh uptime against operational security.Read · 6 min Tech19 Aug · 07:33 UTCHigh-Capacity DDR5 Prices Have Risen Nearly 500% in a YearTracked prices for 64GB DDR5 kits are up as much as 485% year over year. AI-server demand and constrained supply are pushing the squeeze into PCs.Read · 6 min Tech19 Aug · 04:33 UTCCursor Launches Origin Code Hosting in an Early BetaOrigin gives paid Cursor users repositories, pull requests, GitHub syncing and CI integrations, pushing the AI editor into developer infrastructure.Read · 6 min Tech19 Aug · 01:36 UTCGoogle’s $10 Million Spirit Data Bid Includes Code and EmailsGoogle won a $10 million bid for Spirit Airlines’ deidentified corporate data, including code, email, finance, and flight records, pending court approval.Read · 6 min Tech18 Aug · 07:34 UTCA GitHub Actions Flaw Exposed Snowflake’s Jira TokenA public issue title could run commands in a Snowflake workflow and expose an internal Jira token. The episode also shows why the “AI-generated bug” label needs care.Read · 7 min Tech18 Aug · 01:35 UTCGitHub’s Seven-Hour Outage Hit Code, CI, and CopilotA critical GitHub incident spread across core development services before a long, uneven recovery. The root cause has not yet been disclosed.Read · 6 min Tech17 Aug · 10:34 UTCRISC-V Rebuttal Puts Hardware Access Ahead of ISA EleganceAn exchange between two embedded engineers exposes RISC-V’s central tradeoff: a fragmented architecture can still widen access to real hardware.Read · 7 min Tech17 Aug · 04:37 UTCStripe Reportedly Agrees to Buy OpenRouter for More Than $7BThe unannounced deal would pair model routing with token billing, giving Stripe a central role in how AI apps choose providers and pay for inference.Read · 6 min Tech16 Aug · 07:33 UTCDisney Research Uses Gaussian Splatting to Vectorize Line ArtA SIGGRAPH method turns raster drawings into editable Bézier strokes, preserving line structure and brush texture while extending the same representation to video.Read · 7 min Tech16 Aug · 06:02 UTCSony’s A7R VI Combines 66.8MP Stills With 30fps BurstsSony’s high-resolution mirrorless camera pairs a fully stacked sensor with action-camera speed, narrowing an old divide while creating hefty data and battery costs.Read · 7 min Tech15 Aug · 04:31 UTCFirefox Is Now the Last Major Browser for Powerful Ad-BlockersAs Google Chrome's Manifest V3 rolls out, its new rules effectively limit ad-blockers. This leaves Firefox as the only major browser that fully supports powerful extensions like uBlock Origin.Read · 5 min Tech14 Aug · 13:31 UTCUS Authorizes Private Firms for Offensive Cyberattacks on Foreign ActorsA new Trump administration policy allows private security firms to conduct sanctioned cyberattacks against foreign criminals, a major shift in national cybersecurity strategy.Read · 5 min Tech14 Aug · 01:31 UTCPBS Station Sues to Recover 70 Years of History from Defunct Cloud VendorNine PBS lost access to a 50TB archive after its storage provider failed. Now it's suing the data center holding the hardware to get its data back, exposing the risks of the cloud supply chain.Read · 6 min Tech13 Aug · 10:31 UTCAI Package Supply-Chain Attack Leaks Terabytes of User CredentialsA compromised AI package scraped and exfiltrated sensitive data from thousands of users, highlighting the growing risks of software dependencies in modern development.Read · 6 min Tech12 Aug · 04:31 UTCChrome's DBSC Aims to End Session Cookie HijackingGoogle is rolling out Device Bound Session Credentials in Chrome, a new standard that cryptographically ties sessions to a specific device, rendering stolen cookies useless to attackers.Read · 6 min Tech10 Aug · 10:31 UTCDark Reader Breach Post-Mortem Sparks Supply Chain Security DebateA transparent post-mortem from the developer of the popular Dark Reader extension reveals a supply chain attack, prompting a widespread discussion on browser extension and open-source security.Read · 6 min Tech10 Aug · 01:31 UTCFCC Moves to Restrict Foreign Drones With Lidar TechnologyThe US Federal Communications Commission has proposed a rule that could ban foreign drones equipped with Lidar, thermal, and swarm capabilities, citing national security risks.Read · 6 min Tech09 Aug · 13:31 UTCSAP Halts Hiring and Travel to Fund AI Hardware CostsThe enterprise software giant is freezing most new hires and non-essential travel, citing the massive capital expenditure required for NVIDIA GPUs to power its AI strategy.Read · 6 min Tech09 Aug · 01:31 UTCAmazon's Texas Plan: A Data Center Powered by a Top US PolluterA planned Amazon data center in Texas includes a dedicated gas power plant that could become the largest single source of climate pollution in the U.S., challenging the company's climate pledges.Read · 5 min Tech07 Aug · 01:31 UTCAMD Acquires Taalas to Etch AI Models Directly Into SiliconThe chipmaker has acquired AI startup Taalas, aiming to compile trained models directly into hardware for a massive leap in inference speed and efficiency.Read · 7 min Tech06 Aug · 07:31 UTCCloudflare OS Launches as an Open Platform for AI AgentsCloudflare has unified its developer services into Cloudflare OS, a platform designed to build and run AI-powered applications on its global edge network, challenging traditional cloud providers.Read · 7 min Tech05 Aug · 13:31 UTCTexas Halts Data Center Growth, Citing Strained Power GridIn a major policy shift, Texas has paused all new data center construction. The move reflects a growing global conflict between the tech industry's energy demands and grid stability.Read · 6 min Tech05 Aug · 07:31 UTCSpaceX's AI Business Now Out-Earns Its Rocket OperationsThe company known for launching rockets made more money from AI compute in its last quarter. The shift reveals a new, highly profitable strategy for funding its long-term ambitions.Read · 5 min Tech05 Aug · 01:31 UTCOxide Computer Raises $445M for On-Prem Cloud RacksThe company aims to bring the integrated hardware and software model of hyperscale clouds to private data centers, challenging both public cloud giants and traditional enterprise vendors.Read · 6 min Tech01 Aug · 06:38 UTCHugging Face Breach Analysis: When Network Security Isn't EnoughA recent intrusion at Hugging Face, detailed by Tailscale, reveals how stolen credentials can turn AI models into attack vectors, bypassing even robust network-layer security.Read · 7 min Tech01 Aug · 01:31 UTCGoogle Pulls Earth AI Image Tool After Misinformation BacklashGoogle removed a new AI feature that let users overlay fake satellite images on Google Earth, following immediate criticism that it was a potent tool for spreading misinformation.Read · 5 min