Entertainment

Postmortem: TanStack npm supply-chain compromise

Postmortem: TanStack npm supply-chain compromise

🚀 Explore this insightful post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: by Tanner Linsley on May 11, 2026. Last updated: 2026-05-11 On 2026-05-11 between 19:20 and 19:26 UTC, an attacker published 84 malicious versions across 42 @tanstack/* npm packages by combining: the pull_request_target "Pwn Request" pattern, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of an OIDC token from the GitHub Actions runner process. No npm tokens were stolen and the npm publish workflow itself was not compromised. The malicious versions were detected publicly within 20 minutes by an external researcher…
Read More
Can we code our way out of gentrification?

Can we code our way out of gentrification?

✨ Discover this must-read post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: My neighborhood in Denver is experiencing a kind of slow strangulation. Today, the neighborhood is mixed-income with a range of families from different backgrounds. A decade ago, it was lower income than it is today, and two decades ago, lower still. Aka, we’re gentrifying.But the gap between new and old residents is becoming extreme. People who have lived in the neighborhood for 10 years are often in homes that cost $300k and have a mortgage of around $1000/mo. Those houses now typically sell for $600-700k.…
Read More
Interaction Models: A Scalable Approach to Human-AI Collaboration

Interaction Models: A Scalable Approach to Human-AI Collaboration

🚀 Explore this awesome post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: Today, we’re announcing a research preview of interaction models: models that handle interaction natively rather than through external scaffolding. We think interactivity should scale alongside intelligence; the way we work with AI should not be treated as an afterthought. Interaction models let people collaborate with AI the way we naturally collaborate with each other—they continuously take in audio, video, and text, and think, respond, and act in real time. We train an interaction model from scratch. To ensure real-time responsiveness, we adopt a multi-stream, micro-turn…
Read More
GitHub – jameslockman/Griffin-PowerMate-Driver · GitHub

GitHub – jameslockman/Griffin-PowerMate-Driver · GitHub

✨ Check out this awesome post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: This small driver enables the Griffin PowerMate, a nifty little device from days gone by. What does the PowerMate do? It is a knob that you can twist or that you can press. That's it. It also has a blue LED in the base that can change intensity based on what you're doing. When it was released, it was intended to assist video and audio production by adding a scrollable knob to your desktop. Of course, modern controllers exist that offer many more literal…
Read More
I Let AI Build a Tool to Help Me Figure Out What Was Waking Me Up at Night

I Let AI Build a Tool to Help Me Figure Out What Was Waking Me Up at Night

🚀 Check out this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: I try to pay attention to the small things that affect my quality of life. When something keeps bothering me, I want to investigate, find a likely cause, and act on it.What changed recently is what I'm willing to build to support that. With AI tooling, projects I would have dismissed a few years ago as "too much effort for the payoff" now fit into a weekend. So whenever I bump into a problem in my daily life, I catch myself thinking, "actually, I…
Read More

Vos paramètres de confidentialité

✨ Discover this must-read post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Votre vie privée est importante pour nous Yahoo fait partie de la famille de marques Yahoo. Lorsque vous utilisez nos sites et applications, nous utilisons des politique relative aux cookies pour en savoir plus.">cookies pour : vous fournir nos sites et applications ; authentifier les utilisateurs, appliquer des mesures de sécurité, empêcher les spams et les abus ; et mesurer votre utilisation de nos sites et applications Vos paramètres de confidentialité Si vous cliquez sur Accepter tout, nos partenaires, dont 249, font partie du Cadre de transparence de…
Read More
mamba-studio/TypedMemory: A Java 25 library for mapping records to strongly typed off-heap memory using the FFM API. · GitHub

mamba-studio/TypedMemory: A Java 25 library for mapping records to strongly typed off-heap memory using the FFM API. · GitHub

✨ Explore this insightful post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: Typed off-heap memory for Java 25 and greater. TypedMemory is a Java library for working with contiguous off-heap memory through strongly typed views. It builds on the Java Foreign Function & Memory (FFM) API and lets you map Java record types onto native memory with a simple, expressive API. Instead of manually managing layouts, offsets, and low-level access patterns for every structure, TypedMemory gives you a type-safe abstraction over memory while still preserving the low-level control needed for systems, interop, graphics, simulation, and data-oriented programming.…
Read More
Can Someone Please Explain Whether Cloudflare Blackmailed Canonical?

Can Someone Please Explain Whether Cloudflare Blackmailed Canonical?

✨ Discover this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: 30 April 2026, 16:33:37 UTC. Canonical’s incident monitoring system marks blog.ubuntu.com as Service Down. Within ten minutes the rest of the company’s public web was down as well: the main site ubuntu.com, the security advisory APIs that downstream package management depends on, the developer portal, the corporate site, the training platform. These disruptions ran for roughly twenty hours. 1 May 2026, 12:44 UTC. Service Restored. The group claiming responsibility for the attack said it used a paid service. They named one tool they had rented:…
Read More
Microsoft Israel chief leaves amid ethical controversy

Microsoft Israel chief leaves amid ethical controversy

💥 Discover this trending post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Last week Microsoft Israel, the local marketing and sales office of the US software giant, announced the departure of Country General Manager Alon Haimovich after four years in the job. Behind the dry announcement is major controversy. Haimovich left his position after an investigation by Microsoft's global management into Microsoft Israel’s work with the Ministry of Defense, amid concern that the company's code of ethics had been violated. Several managers in Microsoft Israel’s governance department have also left their positions. Microsoft Israel has been…
Read More
Why We Lose Our Friends as We Age

Why We Lose Our Friends as We Age

🔥 Check out this awesome post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: This is an edition of The Wonder Reader, a newsletter in which our editors recommend a set of stories to spark your curiosity and fill you with delight. Sign up here to get it every Saturday morning.When I was in college, an acquaintance who had graduated a few years prior came back to visit for the weekend. As we walked around campus on Saturday night, he flung his hands into the cold Connecticut air and exclaimed, “You guys are so lucky; you live a…
Read More