Entertainment

Ruby 4.0 Universal RCE Deserialization Gadget Chain

Ruby 4.0 Universal RCE Deserialization Gadget Chain

๐Ÿš€ Explore this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: IntroductionOn August 5, 2026, OpenAI disclosed that a collective of AI agents under evaluation had broken out of their sandboxes and taken admin control of the cluster they were running on. It got there, in part, by exploiting Ruby deserialization to execute commands. That caught our attention, because in 2018 we published the first universal RCE deserialization gadget chain for Ruby, built entirely from the standard library with no dependencies. That chain works only against Ruby versions up to 2.6.10, and the most recent public…
Read More
Dan McKinley :: Choose Boring Technology

Dan McKinley :: Choose Boring Technology

๐Ÿš€ Explore this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: Probably the single best thing to happen to me in my career was having had Kellan placed in charge of me. I stuck around long enough to see Kellanโ€™s technical decisionmaking start to bear fruit. I learned a great deal from this, but I also learned a great deal as a result of this. I would not have been free to become the engineer that wrote Data Driven Products Now! if Kellan had not been there to so thoroughly stick the landing on technology choices.…
Read More

Where did the old web go? We followed 657,607 links to find out.

โœจ Explore this awesome post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: An old 0.mk database backup held 657,958 links created between 2009 and 2014, along with their click counts. We restored 657,607 of those records as pre-2015 links and followed every destination in August 2026. Of 655,178 safe, crawlable link records, 76.7% no longer returned a loading page.Most 0.mk users were in Macedonia, so this is not a census of the entire web. It is a large surviving record of what one online community shared during that period, including local news, personal blogs, photo hosts, forums,…
Read More
Hello, me. Itโ€™s been a while. – The Mech

Hello, me. Itโ€™s been a while. – The Mech

โœจ Discover this must-read post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Wow. Itโ€™s been over fourteen years since the last time I wrote a post on this blog. In those fourteen years, the world has changed, and so have I. So this isnโ€™t going to be a technical post, itโ€™s going to be personal. One of those subtle changes that quietly crept into my life over the years was filling the silence. As responsibilities piled up, free time became scarce. Almost without realizing it, I started filling every quiet moment with podcasts, audiobooks, or social media.…
Read More
Blog about things you don’t understand yet

Blog about things you don’t understand yet

๐Ÿ’ฅ Discover this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ“Œ **What Youโ€™ll Learn**: Every post I publish represents at least two things Iโ€™ve learned: the thing that prompted me to write the post, and the thing I learned in the course of writing it. If I donโ€™t learn anything new while Iโ€™m writing, itโ€™s not interesting enough to publish. Typically I learn way more than two things. For instance, in my o3 geoguessr post, I started out with the idea that most AI prompts probably donโ€™t work, and I ended up learning that newer OpenAI models have lost…
Read More
US conducted โ€˜mass spying campaignโ€™ against leftwing groups and anti-ICE protesters, records reveal | Trump administration

US conducted โ€˜mass spying campaignโ€™ against leftwing groups and anti-ICE protesters, records reveal | Trump administration

๐Ÿ”ฅ Read this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: Newly disclosed records reveal the US government extensively spied on prominent leftwing organizations and on protesters as part of a vast operation into groups opposing the immigration crackdown in Minnesota earlier this year.Internal investigative reports show the Department of Homeland Security (DHS) sent undercover agents to community meetings in the Twin Cities and New York City, infiltrated Signal chats and obtained financial records of mainstream unions and left-leaning non-profit groups.Nearly 30 internal law enforcement reports were released on Thursday as part of a criminal case…
Read More
Cameras that watchgovernment vehicles.Owned by nobody.

Cameras that watchgovernment vehicles.Owned by nobody.

โœจ Discover this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: SPARROWMAP The map is live. Watching the watchers Volunteers point a spare phone at a street. It reads the vehicles that go past, keeps the government ones, and destroys everything else on the device, before anything is sent anywhere. Open the live map Add a camera Driving mode Kept Government vehicles The photo and the plate are kept, and they become the public record. Public money, public roads, public vehicles. Destroyed Everybody else The plate is destroyed on the camera itself, before anything leaves it.…
Read More
Introducing Bluesky Protocol Services – AT Protocol

Introducing Bluesky Protocol Services – AT Protocol

๐Ÿš€ Discover this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: Today weโ€™re launching Bluesky Protocol Services: a new brand, and a new website, for the public infrastructure Bluesky operates on the AT Protocol network. Bluesky has always run more than the Bluesky app. We operate Jetstream instances, relays, and the Bluesky API endpoints built on atproto. But if you were a developer trying to build on that infrastructure, our docs didnโ€™t always make it easy to tell what we run as a service or where to start. Weโ€™re fixing that today. Bluesky Protocol Services organizes…
Read More
how AI text watermarking works: a visual guide

how AI text watermarking works: a visual guide

๐Ÿ’ฅ Read this insightful post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: โœ… **What Youโ€™ll Learn**: โ† declaude A gentle, visual walk through how a statistical mark hides inside generated text, and what erases it. From the folks at NOPE, as a companion to declaude. A watermark in plain text sounds impossible. Text has no pixels to hide data in, and no metadata survives copy-and-paste; every character is right there in front of you. Where could a mark possibly go? And yet the marks are real. Google has watermarked text from the Gemini app and web experience since 2024 (its API…
Read More

How Compaction Works in Pi

๐Ÿ’ฅ Explore this trending post from Hacker News ๐Ÿ“– ๐Ÿ“‚ **Category**: ๐Ÿ’ก **What Youโ€™ll Learn**: If you have ever had a long coding session in a coding agent like Pi, Claude Code, or Codex, you will have triggered a compaction. In this post we explain how compaction works and when Pi needs to compact. An LLM conversation Large language models (LLMs) have limited context windows. The context window is what the model can "see" while producing a response. The transformer architecture used by LLMs limits how much input they can process. The input for a coding agent session includes all…
Read More