▸ A developer reported a duplicate UUID v4 in production, sparking an HN thread with 337+ points — but the math makes a true collision essentially impos...
▸ A debian-devel-announce post formally argues Debian must require all shipped packages to be bit-for-bit reproducible — elevating a decade-long 'should...
▸ Alex Kladov (matklad) argues that software architecture is best learned by studying well-built systems — not by reading architecture books or memorizi...
▸ US healthcare marketplace websites embedded tracking pixels that transmitted applicants' citizenship status, race, and ethnicity data to advertising p...
▸ The biggest bottleneck in AI agent reliability isn't prompt quality — it's the absence of deterministic control flow between LLM calls.
▸ Mercury, the fintech startup handling billions in deposits, runs one of the largest known production Haskell codebases at roughly 2 million lines.
▸ Multiple TanStack packages were published with malicious postinstall scripts that exfiltrated environment variables and secrets to an attacker-control...
▸ A malicious Obsidian community plugin was weaponized to deploy the Phantom Pulse remote access trojan, giving attackers persistent access to developer...
▸ Nvidia's NVLabs has released CUDA-oxide, an official compiler toolchain that compiles Rust code to CUDA — the first time Nvidia has formally backed a ...
▸ Age verification laws now active or pending in 20+ US states and several countries require platforms to confirm user age — but every proposed technica...
▸ Google updated reCAPTCHA to rely on Play Integrity attestation, making de-Googled Android users (GrapheneOS, CalyxOS, LineageOS) fail challenges or ge...
▸ Xe Iaso's viral post argues developers should temporarily stop installing new software packages and tools, treating every new dependency as a potentia...
▸ Mythos, an AI security analysis tool, discovered a legitimate vulnerability in curl — a first after years of Daniel Stenberg publicly fighting AI-gene...
▸ CVE-2026-31431 exploits PostgreSQL's COPY protocol handshake — a CopyFail message during the COPY IN sub-protocol triggers a memory corruption conditi...
▸ RPCS3, the leading PS3 emulator, publicly asked contributors to stop submitting AI-generated pull requests that introduce bugs, break conventions, and...
▸ Val Town migrated their authentication twice — from Supabase Auth to Clerk, then from Clerk to Better Auth — and documented every tradeoff along the w...
▸ Bun's experimental Rust rewrite has hit 99.8% test compatibility on Linux x64 glibc, signaling a serious language migration from Zig.
▸ Modern TUI frameworks like Bubbletea, Textual, and Ratatui use alternate screen buffers and custom rendering that completely bypass screen reader acce...
▸ Google Cloud Fraud Defence uses the same device attestation primitives (Play Integrity API, App Attest) that powered the killed-off Web Environment In...
▸ ShinyHunters, the hacking group behind prior breaches at Ticketmaster and AT&T, claims to have breached Instructure's Canvas LMS and is threatening to...