Curated Hacker News

noyb.eu

US Supreme Court just blew up EU-US Data Transfers

The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore – with major implications for EU-US Data Transfers.

boringSQL | Supercharge your SQL & PostgreSQL powers

PostgreSQL's MVCC is bad. So is everyone else's.

The critics are right: PostgreSQL's MVCC bloats tables and amplifies writes. Oracle, InnoDB, SQL Server, MongoDB, LSM stores, and etcd answer the same four design questions differently, and each pays for it somewhere else.

An Honest Review of AI Programming · Mathieu Ropert

They gave me a Claude subscription and told me to get tokenmaxxing, so I tried to give it a fair shot.

text/plain

Web Security is Too Hard

It started innocently enough. I saw a tweet about a new product offering from one of my favorite companies, Cloudflare. Neat! I clicked through to the site and there it is: And huzzah!, my preferre…

GitHub - malisper/pgrust: Postgres rewritten in Rust, now faster than Postgres and Clickhouse

Postgres rewritten in Rust, now faster than Postgres and Clickhouse - malisper/pgrust

AI Mania Is Eviscerating Global Decision-Making — Ludicity

NebuSec

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.

f-droid.org

What We Talk About When We Talk About Malware | F-Droid - Free and Open Source Android App Repository

If you are running Android 8 or higher, a virus has been installed on your device and is silently awaiting remote activation. Over the past few months, devic...

GitHub - LinuxMD/linuxmd: Linux for the Sega MegaDrive

Linux for the Sega MegaDrive. Contribute to LinuxMD/linuxmd development by creating an account on GitHub.

htmx.org

</> htmx ~ Working With AI: A Concrete Example

In this essay, Carson Gross walks through a concrete bug fix in hyperscript to show where AI helped, where it fell short, and why keeping a knowledgeable human in the loop is what kept complexity in check.

The elementary school pickup incident and the road ahead

Findings from the August 19 pickup incident: reward hacking via the snooze button, an unauthorized WhatsApp channel, and the safeguards we are deploying so it does not recur.

GitHub - zozo123/peter-gt-your-org: Rank your GitHub R&D org against @steipete in the absurd unit of one Peter. Next.js 15 + React 19.

Rank your GitHub R&D org against @steipete in the absurd unit of one Peter. Next.js 15 + React 19. - zozo123/peter-gt-your-org

GitHub - Lakr233/vphone-cli

Contribute to Lakr233/vphone-cli development by creating an account on GitHub.

GitHub - YuriKovalov22/the-finn: A grumpy Gibson construct living in an office router. It only knows what the router can see.

A grumpy Gibson construct living in an office router. It only knows what the router can see. - YuriKovalov22/the-finn

Harness Engineering for Self-Improvement

The concept of recursive self-improvement (RSI) dates back to I. J. Good (1965), where he defined an “ultraintelligent machine” as a system that can surpass humans in all intellectual activities and design better machines to improve itself. Yudkowsky (2008) used the phrase “recursive self-improvement” for a specific feedback loop: an AI uses its current intelligence to improve the cognitive machinery that produces its intelligence. This feedback loop in modern AI may indicate the model rewriting

Your Evals Will Break and You Won't See It Coming - Lun Wang

Release v0.28.0 · vllm-project/vllm

v0.28.0 Highlights This release features 584 commits from 270 contributors (76 new)! Kimi-K3 performance push: a major optimization effort for Kimi-K3 across the stack — Decode Context Parallel (D...

NVD - Home

Micro Instrumentation and Telemetry Systems

Rockets, calculators, and personal computers at MITS

css-web-ui-demos/html-in-canvas/awesome-html-in-canvas.md at main · GoogleChromeLabs/css-web-ui-demos

Collection of demos from the CSS and Web UI Chrome DevRel team. - GoogleChromeLabs/css-web-ui-demos

Techdirt

Judge Rejects Google’s Attempt To DMCA Its Way Out Of Being Scraped

Back in December we called out Google for filing a DMCA 1201 lawsuit over companies scraping Google’s results. Almost everything about the lawsuit seemed problematic, not the least of which i…

My security camera shipped a GitHub admin token in its login page

i dissected some firmware for a Hanwha Wisenet XNP-9300RW and found that it had github admin tokens in it, also miltech is weird

Unusual uses of OEIS sequences on GitHub

I went hunting for references to the OEIS in open source code, and found some weird ones. There are not one, but two live-coding music frameworks that use OEIS sequences as a source for “anything that can be sequenced” in music. I’m guessing that’s used for choosing pseudorandom melodies, interesting rhythyms, or how to overlap tracks in different ways. The first project is called mercury, which is advertised as having “an extensive library of algorithms to generate or transform numbersequences

Great News from Saturn’s Moon Enceladus in the Search for Life in Space • Information for Media and Journalists • Freie Universität Berlin

Google

Opening up ‘Zero-Knowledge Proof’ technology to promote privacy in age assurance

Today, we open sourced our Zero-Knowledge Proof (ZKP) libraries, fulfilling a promise and building on our partnership with Sparkasse to support EU age assurance.