▸ MIT President Sally Kornbluth disclosed a 20% decline in incoming graduate students, driven by federal funding cuts and chilling effects on internatio...
▸ Security researcher arkadiyt published a step-by-step guide to physically removing the cellular modem (DCM) and GPS module from a 2024 Toyota RAV4 Hyb...
▸ Meta is removing end-to-end encryption from Instagram direct messages, reversing a feature it spent years building and rolling out.
▸ The Internet Cleanup Foundation scanned European government domains and found ~3,000 sites with third-party trackers, ~1,000 exposed phpMyAdmin panels...
▸ CERT/CC is coordinating disclosure of six CVEs targeting dnsmasq, the lightweight DNS/DHCP server embedded in millions of routers, containers, and Lin...
▸ Fields Medalist Timothy Gowers published a detailed account of testing ChatGPT 5.5 Pro on mathematical problems, finding the model impressive on surfa...
▸ A grassroots campaign at savethearchive.com is pressuring the NYT, The Atlantic, and USA Today to stop legal actions that threaten the Wayback Machine...
▸ Mythos, an AI vulnerability-hunting tool, found a legitimate security flaw in curl — notable because curl maintainer Daniel Stenberg has been one of t...
▸ Google Project Zero published a full 0-click exploit chain targeting Pixel 10 devices — no user interaction required for complete device compromise.
▸ Bun's experimental Rust rewrite passes 99.8% of the existing test suite on Linux x64 glibc, signaling the Zig-to-Rust migration is far more than a pro...
▸ A California bill would require publishers to release patches enabling offline play — or issue refunds — when shutting down online game servers.
▸ Android leaks traffic outside VPN tunnels even with 'Always-on VPN' and 'Block connections without VPN' enabled — including connectivity checks and DN...
▸ Anthropic's Agent Skills spec — a folder with a SKILL.md file — has been adopted by Cursor, GitHub Copilot, OpenAI Codex, Gemini CLI, and 30+ other ag...
▸ Meta's all-in AI reorg is reportedly demoralizing employees across non-AI teams as headcount, prestige, and resources shift to generative AI projects.
▸ Mullvad's small pool of exit IPs combined with its tiny user base means websites can narrow 'anonymous' VPN users to a remarkably small anonymity set.
▸ Simon Willison argues that agentic engineering workflows are exhibiting the same 'trust the AI, skip the review' patterns that define vibe coding — ju...
▸ GitLab is retiring its CREDIT values (Collaboration, Results, Efficiency, Diversity Inclusion & Belonging, Iteration, Transparency) — the cultural fra...
▸ Turso, the libSQL edge database company, is shutting down its bug bounty program because AI-generated vulnerability reports have made it unsustainable...
▸ An attacker exploited pull_request_target, GitHub Actions cache poisoning, and OIDC token extraction to publish 84 malicious versions across 42 @tanst...
▸ A unix.foo post arguing local AI should be the default — not the exception — hit 1,200+ points on HN, the highest signal we've seen on this topic in m...