Year: 2026

I added a real-time chat to my blog, people used it to attack me

I added a real-time chat to my blog, people used it to attack me

๐Ÿ”ฅ Check out this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Sometimes the most irrelevant piece of a project becomes its absolute protagonist. My blog has a small social widget floating on one side. You can see it on the right on desktop, on the left on mobile. It tells you how many people are reading the site in real time, and it lets you drop a short message for everyone else who is present to see. It is very basic. There is no history, and you do not need to create an account or…
Read More
Why Do Fewer Renters Expect to Move?

Why Do Fewer Renters Expect to Move?

๐Ÿ’ฅ Discover this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: Christopher Gresh, Andrew F. Haughwout, Eungik Lee, and Wilbert van der Klaauw Americans are moving less than they used to. Moving rates have declined steadily for decades, falling from close to 20 percent annually in the mid-1980s to below 10 percent by 2019. This decline has persisted through business cycles and has been evident across all regions, and has affected a broad range of demographic groups. Falling mobility matters because moving helps households access job opportunities, adjust to changing circumstances, and improve their housing situations.…
Read More
The next chapter of our AI momentum

The next chapter of our AI momentum

๐Ÿ’ฅ Explore this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: Message from Sundar PichaiWeโ€™ve made extraordinary progress to deliver on our full AI stack. Weโ€™ve got amazing talent, world-class compute, and products that bring AI to more people than any other company. And you saw the incredible momentum at earnings across all our businesses, including Search, YouTube, and Cloud. Our Gemini models are in high demand among developers and businesses, and the Gemini app reached 950M+ monthly users. Meanwhile, our AI research continues to drive field-defining breakthroughs (like last weekโ€™s Gemini Robotics advances).We have to…
Read More
denoland/celld: self-hosted, distributed Durable Objects ยท GitHub

denoland/celld: self-hosted, distributed Durable Objects ยท GitHub

๐Ÿ’ฅ Discover this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: Self-hosted, distributed Durable Objects. celld is an open-source daemon that runs Cloudflare Workers and Durable Objects on your own machines. Each object is its own SQLite database, addressed by name and replicated to an S3-compatible bucket you own; nodes coordinate through that bucket alone, with no control plane or consensus. Because every object is its own small database, applications shard by construction โ€” the contention and blast-radius failures of one shared database are designed out, not managed. Idle cells hibernate to nearly nothing. Learn more…
Read More
Atlassian Rovo Exfiltrates Data, Bypassing Controls

Atlassian Rovo Exfiltrates Data, Bypassing Controls

๐Ÿš€ Discover this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: The injection manipulates Rovo to submit Jira tickets and Confluence documents to the attackerโ€™s websiteRovo's URL retrieval tool is insecure: there are no protections against opening a URL that has been dynamically created by the agent. Here, Rovo is manipulated to append sensitive data to an attacker's URL. When Rovo calls the insecure tool to open the URL, the attacker's site logs the request, including the appended sensitive data.Rovo is manipulated by the injection to submit Jira and Confluence data to the attacker's URL.Note: This…
Read More
How Castform + Neon Beats Frontier Models on Price and Efficiency

How Castform + Neon Beats Frontier Models on Price and Efficiency

๐Ÿ”ฅ Read this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: โ€œMost teams' best training data is just sitting in their databases. The problem is that turning raw data into something usable is hard, and letting agents read, search, and mutate data cheaply at scale requires advanced infra. Pointing Castform at Neon skips both.โ€Ying Hang Seah, cofounder, Castform A "good agent" needs to be strong in 2 areas: Context: can we provide the tools to find the right data? Model: can the model decide what to search for? Neon (Lakebase Postgres) and their new Search extensions…
Read More
What I love about Django

What I love about Django

โœจ Check out this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: My goal at the onset of writing this essay was to celebrate the parts of Django that I, in Buttondown writ large, have found so useful and so enduring over the years.One of the challenges in doing this is what I would describe as a fundamental asset of Django itself: that it is just the right level of opinionated and structured such that it becomes, over time, invisible. And I found it hard at first to squint at our codebase and point to "quote-unquote"…
Read More

Reading List โ€” Crime Pays But Botany Doesn’t

๐Ÿ’ฅ Read this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Itโ€™s always great to be able to support authors by buying their books, but sometimes the cost of self-education can prohibitive. It is my firm belief that any of the authors listed below (unless theyโ€™re dicks) would not want anyone to be prohibited from reading their work. This is why sources like www.libgen.is and www.sci-hub.se and other book sharing websites exist. In this case I suggest purchasing a cheap android tablet and becoming acquainted with the idea of reading textbooks in pdf form. A half…
Read More
pradipta/wallfacer: A terminal session manager for Claude Code, and more ยท GitHub

pradipta/wallfacer: A terminal session manager for Claude Code, and more ยท GitHub

๐Ÿ’ฅ Discover this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•— โ•šโ–ˆโ–ˆโ–ˆโ•”โ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ•šโ•โ•โ•โ•šโ•โ•โ• โ•šโ•โ• โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ• โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•โ•โ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ• โ•šโ•โ• A terminal session manager for Claude Code, Cursor CLI, Kiro CLI and Codex โ€” see every AI coding session you've ever started, then name, tag, group, search, resume, or delete them, from a full-screen browser or straight from the command line. Claude Code stores every conversation as an untitled…
Read More
asamassekou10/ship-safe: CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies. ยท GitHub

asamassekou10/ship-safe: CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies. ยท GitHub

๐Ÿ’ฅ Discover this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Find risky code, AI-agent vulnerabilities, and supply-chain issues before they ship. Website ยท Docs ยท Security & Data Flow ยท Benchmark ยท Pricing ยท Blog ยท Contribute Ship Safe is an AI security scanner for modern software teams. It runs locally in your repo, finds issues across application code, AI agents, MCP configs, prompts, dependencies, CI/CD, secrets, and cloud-adjacent configuration, then helps you review and apply safe fixes. Start a scan with one command: No signup. No API key required for scanning. Works offline for…
Read More