Entertainment

macOS Recovery Mode Safari allowed unrestricted writes to system partitions (and root persistence)

macOS Recovery Mode Safari allowed unrestricted writes to system partitions (and root persistence)

๐Ÿ’ฅ Read this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: TL;DR: I accidentally discovered 2 vulnerabilities in macOS Recovery Mode's Safari: one allowing arbitrary writes to system partitions and root persistence (CVSS 8.5), the other allowing unrestricted file reads (CVSS 4.6). Technical write-ups HERE and HERE.It started like any other day with my M1 Macbook Air dying due to the hundreds if not thousands of Chrome tabs I had open, so I did what every normal human does and long pressed the touch id button to force a force restart (which I personally find to…
Read More
matthartman/ghost-pepper: Hold-to-talk speech-to-text for macOS. 100% local, powered by WhisperKit and local LLM cleanup. Hold Control to record, release to transcribe and paste. ยท GitHub

matthartman/ghost-pepper: Hold-to-talk speech-to-text for macOS. 100% local, powered by WhisperKit and local LLM cleanup. Hold Control to record, release to transcribe and paste. ยท GitHub

โœจ Discover this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: 100% local hold-to-talk speech-to-text for macOS. Hold Control to record, release to transcribe and paste. No cloud APIs, no data leaves your machine. Download the latest release โ€” macOS 14.0+, Apple Silicon (M1+) Hold Control to talk โ€” release to transcribe and paste into any text field Runs entirely on your Mac โ€” models run locally via Apple Silicon, nothing is sent anywhere Smart cleanup โ€” local LLM removes filler words and handles self-corrections Menu bar app โ€” lives in your menu bar, no dock…
Read More
The Cult Of Vibe Coding Is Insane

The Cult Of Vibe Coding Is Insane

๐Ÿš€ Explore this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Claude had a leak of their source code, and people have been having a whole lot of fun laughing at how bad it is. You might wonder how this could happen. The answer is dogfooding run amok.Dogfooding is when you use your own product. Itโ€™s a good idea. But it can turn into a cult activity where it goes beyond any reasonable limits. In this case, the idea is vibe coding, where you make a point of literally making no contribution to whatโ€™s going on…
Read More
Adobe secretly modifies your hosts file for the stupidest reason โ€“ OSnews

Adobe secretly modifies your hosts file for the stupidest reason โ€“ OSnews

โœจ Read this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: ย Homeย >ย Clown carย >ย Adobe secretly modifies your hosts file for the stupidest reason Thom Holwerda 2026-04-05 Clown car If youโ€™re using Windows or macOS and have Adobe Creative Cloud installed, you may want to take a peek at your hosts file. It turns out Adobe adds a bunch of entries into the hosts file, for a very stupid reason.Theyโ€™re using this to detect if you have Creative Cloud already installed when you visit on their website.When you visit https://www.adobe.com/home, they load this image using JavaScript:https://detect-ccd.creativecloud.adobe.com/cc.pngIf the DNS…
Read More
Freestyle – Manage AI-Generated Code

Freestyle – Manage AI-Generated Code

๐Ÿš€ Explore this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: 1// Like Lovable, Bolt, V0 2import ๐Ÿ’ฌ from "freestyle-sandboxes"; 3import ๐Ÿ”ฅ from "@freestyle-sh/with-bun"; 4import โšก from "@freestyle-sh/with-dev-server"; 5 6// Create repo from template 7const ๐Ÿ’ฌ = await freestyle.git.repos.create({ ... }); 8 9const { vm } = await freestyle.vms.create({ 10 with: { 11 devServer: new VmDevServer({ 12 devCommand: "bun run dev", 13 runtime: new VmBun(), 14 repo: repoId 15 }), 16 }, 17});1// Like Devin, Cursor Agent 2import { freestyle, VmSpec } from "freestyle-sandboxes"; 3import { VmBun } from "@freestyle-sh/with-bun"; 4 5const { vm } =…
Read More
The New Age of AI Propaganda

The New Age of AI Propaganda

โœจ Read this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: As propaganda theorist Jacques Ellul argued in the early 1960s, propaganda evolves with the communication systems that carry it. In a social media environment shaped by algorithms, virality, and now generative AI, propaganda increasingly takes the form not of doctrine, nor even of messaging optimized to persuade, but as content made to travel.ย State-run accounts can generate an endless stream of Lego animation, or even deepfaked battle footage, for as long as audiences appear interested in engaging with it. Copycat accountsโ€”some state-linked, others simply chasing revenue…
Read More

No, I Won’t Download Your App. The Web Version is A-OK.

โœจ Explore this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: As someone who prefers using services via their websites, Iโ€™ve gotten terribly jaded lately. Almost everyone wants me, and by extension, you, to use their darn apps to consume content and off their web versions. Whether it's the obvious social media apps or something as basic as parking, the app is the priority and the site the red-headed stepchild. And they aren't too subtle in the push either. It might be a modal covering half the web version with links to the App Store, an…
Read More

PostHog (YC W20) Is Hiring

๐Ÿ’ฅ Check out this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: PostHog equips developers to build successful products by combining product analytics, feature flags, session replay, a data warehouse, CDP and many more. \\* we have a public handbook (posthog.com/handbook) if you want to learn how we work, pay and more in complete detail. \\* we are growing through more autonomy and transparency not through process. \\* we have a ton of scale and a bunch of super interesting technical problems to solve \\* we're building 20 more products over the next couple of years,…
Read More
The Real Intelligence Failure in Iran

The Real Intelligence Failure in Iran

๐Ÿ”ฅ Check out this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: In 2005, a bipartisan commission of lawmakers and security experts concluded that โ€œthe Intelligence Community was dead wrong in almost all of its pre-war judgments about Iraqโ€™s weapons of mass destruction.โ€ Americaโ€™s spies had told President George W. Bush that Saddam Hussein had reconstituted a nuclear-weapons program and that Iraq possessed biological weapons and mobile production facilities, as well as stockpiles of chemical weapons. These supposed facts became the basis for a U.S. invasion and an eight-year occupation. โ€œNot one bit of it could…
Read More
Surveillance Findings: Age Verification as Mass Surveillance Infrastructure

Surveillance Findings: Age Verification as Mass Surveillance Infrastructure

๐Ÿ”ฅ Discover this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Independent decompilation of the Persona Wallet APK v1.14.0 (SDK v2.32.3, built March 11, 2026) and analysis of the web inquiry bundle from cdn.withpersona.com (inquiry-main.js, 1.8MB) reveals the full scope of Persona's surveillance capabilities. The APK was obtained from APKPure and decompiled with jadx 1.5.5. The Roblox APK v2.714.1091 was decompiled separately to confirm the SDK integration. All findings are from publicly available APKs and client-side JavaScript served to every user. New SDKHardcoded AES-256-GCM Telemetry Encryption Key Every copy of the Persona SDK contains a hardcoded…
Read More