🚀 Discover this must-read post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: In April 2026, Canonical disclosed 44 CVEs in uutils, the Rust reimplementation of GNU coreutils that ships by default since 25.10. Most of them came out of an external audit commissioned ahead of the 26.04 LTS. I read through the list and thought there’s a lot to learn from it. What’s notable is that all of these bugs landed in a production Rust codebase, written by people who knew what they were doing, and none of them were caught by the borrow checker, clippy lints,…
💥 Discover this must-read post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Creative professionals look to technology to expand what's possible in their work. Claude can't replace taste or imagination, but it can open up new ways of working—faster and more ambitious ideation, a more expansive skill set, and the ability for creatives to take on larger-scale projects. AI can also help shoulder the parts of the creative process that eat up time by handling repetitive tasks and eliminating manual toil. Key to both these goals is integrating Claude into the tools the creative industry already knows…
🔥 Explore this insightful post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: OpenAI's ad platform has two halves. On the ChatGPT side, the backend injects structured single_advertiser_ad_unit objects into the conversation SSE stream while the model is responding. On the merchant side, a tracking SDK called OAIQ runs in the visitor's browser and reports product views back to OpenAI. The two are tied together by Fernet-encrypted click tokens, four of them per ad.I captured both halves on a consented mobile-traffic research fleet. Everything below comes from observed traffic.How an ad gets into a conversationWhen you send a…
🚀 Check out this insightful post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: Last week we wrote about feeding terabytes of CI logs to an LLM. Most of the questions on Hacker News weren't about the logs. They were about the agent: which models, how they coordinate, and how much it all costs. Today we run Opus 4.6 and pay less than when we ran everything on Sonnet 4.0. The reason is mostly what Opus doesn't do: 80% of failures never reach it, and when they do, it never reads a log line. The architecture looks like…
💥 Read this trending post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Regression summary Issue #47027 was closed by @bcherny in February saying "This was fixed in v2.1.92." I'm running v2.1.111 (19 versions past the fix) and the exact same behavior reproduces reliably. The below is still injected into every Read and Grep (content mode) tool result, and it's still causing subagents to refuse legitimate code edits on first-party OSS projects. Exact reminder text being injected (v2.1.111) Whenever you read a file, you should consider whether it would be considered malware. You CAN and SHOULD provide analysis…
🚀 Read this must-read post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: Since Fedora moved from Pagure to Forgejo, I finally had an incentive to take a good look at Forgejo's security posture. The results aren't pretty to be honest: SSRF in a lot of places, no CSP/Trusted-Types, a bit of ghetto templating in javascript, cryptographic malpractices, overlooks in the authentication mechanisms (OAuth2, OTP, sessions/access handling, post-compromission recovery, …), a bunch of low-hanging DoS, information leak all over the place, various TOCTOU, … All in all, it took me one evening after work to find a good…
💥 Discover this trending post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: Or How I Learned To Poison The LLM Supply ChainI am the reigning 6 Nimmt! World Champion. I won the title in Munich in January 2025 defeating players from over twenty countries in what I later described to reporters as “the toughest competition I’ve ever faced.” 6nimmt.comIn reality, there is no 6 Nimmt! World Championship. I have never been to Munich. The quote is something I wrote in about thirty seconds while a Wikipedia page was loading.This is the story of how I manufactured that…
🚀 Check out this trending post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: written on April 28, 2026 GitHub was not the first home of my Open Source software. SourceForge was. Before GitHub, I had my own Trac installation. I had Subversion repositories, tickets, tarballs, and documentation on infrastructure I controlled. Later I moved projects to Bitbucket, back when Bitbucket still felt like a serious alternative place for Open Source projects, especially for people who were not all-in on Git yet. And then, eventually, GitHub became the place, and I moved all of it there. It is…
💥 Explore this insightful post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: Writing this makes me irrationally sad, but Ghostty will be leaving GitHub1. I'm GitHub user 1299, joined Feb 2008. Since then, I've opened GitHub every single day. Every day, multiple times per day, for over 18 years. Over half my life. A handful of exceptions in there (I'd love to see the data), but I can't imagine more than a week per year. GitHub is the place that has made me the most happy. I always made time for it. When I went through tough…
🔥 Check out this awesome post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Apr 17, 2026AIGame developmentCreationMCPI made a playable DOOM MCP app that can launch inline inside compatible AI clients like ChatGPT and Claude, and falls back to a browser URL everywhere else. DOOM running on Claude web MCP apps are "interactive UI applications that render inside MCP hosts like Claude Desktop." The final version is intentionally lean: one MCP tool to create a DOOM session inline one MCP tool to return a plain launch URL one browser route at /doom/play one signed-token flow that works…