Curated Hacker News

noyb.eu

US Supreme Court just blew up EU-US Data Transfers

The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore – with major implications for EU-US Data Transfers.

SQLite Is All You Need - DB Pro Blog

We built a social network on SQLite, put it behind a Node API, and hit it until something broke. One file, one process, 315 million requests a day on the heaviest endpoint. Here are the numbers, the config, and the honest limits.

boringSQL | Supercharge your SQL & PostgreSQL powers

PostgreSQL's MVCC is bad. So is everyone else's.

The critics are right: PostgreSQL's MVCC bloats tables and amplifies writes. Oracle, InnoDB, SQL Server, MongoDB, LSM stores, and etcd answer the same four design questions differently, and each pays for it somewhere else.

An Honest Review of AI Programming · Mathieu Ropert

They gave me a Claude subscription and told me to get tokenmaxxing, so I tried to give it a fair shot.

California moves to exempt Linux from its upcoming age-verification law after backlash over forcing operating systems to collect users’ ages — amendment proposed by the same lawmaker who wrote the original law

SteamOS could still be affected

Windows 98 Disk Defrag Simulator

The classic Windows 98 Disk Defragmenter, free in your browser. Pick a drive, cue the HDD sounds, and relive 1998.

P. Galeone's blog

LLMs are making me lose my savviness

Things are getting boring - using LLMs is making software development not fun anymore

the Guardian

Trump’s DHS is using an obscure law to secretly snoop on journalists, non-profits and unions: ‘It’s outrageous’

Even after judges rejected the same ploy, the Trump administration is going directly to social media and telecommunications companies

text/plain

Web Security is Too Hard

It started innocently enough. I saw a tweet about a new product offering from one of my favorite companies, Cloudflare. Neat! I clicked through to the site and there it is: And huzzah!, my preferre…

Novara Media

Europe’s Largest Unions Demand Right to Cancel Work on Days Above 30C

Unions across Europe are calling on governments to introduce legislation to safeguard workers from rising temperatures, after western Europe recorded its hottest June on record.

GitHub - malisper/pgrust: Postgres rewritten in Rust, now faster than Postgres and Clickhouse

Postgres rewritten in Rust, now faster than Postgres and Clickhouse - malisper/pgrust

The Mac Observer

Ex-Apple Software Engineer Claims Apple Deliberately Slows Down Old iPhone Models

A viral video from an alleged former software engineer claims older iPhones are slowed down on purpose to force upgrades, sparking fresh debate online.

Gary Linscott

The Beam Engine — An Interactive Guide

See how a beam engine works through interactive 3D figures exploring steam, pressure, Watt's condenser, valves, linkages, and the governor.

'VPNs are lawful technical tools,' says EU Court in landmark Anne Frank copyright ruling

The Court of Justice of the European Union has ruled that publishers and VPN providers aren't liable for copyright infringement

AI Mania Is Eviscerating Global Decision-Making — Ludicity

Reviving a 15-year-old netbook with Arch Linux

NebuSec

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.

NebuSec

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.

f-droid.org

What We Talk About When We Talk About Malware | F-Droid - Free and Open Source Android App Repository

If you are running Android 8 or higher, a virus has been installed on your device and is silently awaiting remote activation. Over the past few months, devic...

GitHub - LinuxMD/linuxmd: Linux for the Sega MegaDrive

Linux for the Sega MegaDrive. Contribute to LinuxMD/linuxmd development by creating an account on GitHub.

htmx.org

</> htmx ~ Working With AI: A Concrete Example

In this essay, Carson Gross walks through a concrete bug fix in hyperscript to show where AI helped, where it fell short, and why keeping a knowledgeable human in the loop is what kept complexity in check.

AAAS

Science | AAAS

Ben Werdmuller

American AI is locked down and proprietary. It's losing.

China's open-weights AI strategy is winning: its companies are taking the lead. America's closed-first, locked-down strategy is doomed to failure - and it could take the US economy down with it.

Micro Instrumentation and Telemetry Systems

Rockets, calculators, and personal computers at MITS

The elementary school pickup incident and the road ahead

Findings from the August 19 pickup incident: reward hacking via the snooze button, an unauthorized WhatsApp channel, and the safeguards we are deploying so it does not recur.

Release v0.28.0 · vllm-project/vllm

v0.28.0 Highlights This release features 584 commits from 270 contributors (76 new)! Kimi-K3 performance push: a major optimization effort for Kimi-K3 across the stack — Decode Context Parallel (D...

Techdirt

Judge Rejects Google’s Attempt To DMCA Its Way Out Of Being Scraped

Back in December we called out Google for filing a DMCA 1201 lawsuit over companies scraping Google’s results. Almost everything about the lawsuit seemed problematic, not the least of which i…

'Re: About Xen: maybe a reiterative question but ..' - MARC

css-web-ui-demos/html-in-canvas/awesome-html-in-canvas.md at main · GoogleChromeLabs/css-web-ui-demos

Collection of demos from the CSS and Web UI Chrome DevRel team. - GoogleChromeLabs/css-web-ui-demos

Harness Engineering for Self-Improvement

The concept of recursive self-improvement (RSI) dates back to I. J. Good (1965), where he defined an “ultraintelligent machine” as a system that can surpass humans in all intellectual activities and design better machines to improve itself. Yudkowsky (2008) used the phrase “recursive self-improvement” for a specific feedback loop: an AI uses its current intelligence to improve the cognitive machinery that produces its intelligence. This feedback loop in modern AI may indicate the model rewriting

Jack Dorsey launches Buzz to combine team chat, AI agents and Git hosting

Block's Buzz combines team chat, AI agents, workflows and Git hosting in a self-hostable workspace built on signed Nostr events.

NVD - Home

Railway Status

Current status and incident history for Railway services.

Google

Opening up ‘Zero-Knowledge Proof’ technology to promote privacy in age assurance

Today, we open sourced our Zero-Knowledge Proof (ZKP) libraries, fulfilling a promise and building on our partnership with Sparkasse to support EU age assurance.

BBC Sport

Fifa World Cup: Uefa to boycott tournament if Gianni Infantino's investment plans go through

Uefa says "the World Cup is not for sale" after its 55 member associations vote to boycott future tournaments if Fifa and its president, Gianni Infantino, do not back down on their investment proposals.

Your Evals Will Break and You Won't See It Coming - Lun Wang

bbc.com

Japan is gripped by mass allergies. A 1950s project is to blame

A decision made 70 years ago to reforest vast swathes of Japan with just two kinds of tree has come back to haunt the country.

Unusual uses of OEIS sequences on GitHub

I went hunting for references to the OEIS in open source code, and found some weird ones. There are not one, but two live-coding music frameworks that use OEIS sequences as a source for “anything that can be sequenced” in music. I’m guessing that’s used for choosing pseudorandom melodies, interesting rhythyms, or how to overlap tracks in different ways. The first project is called mercury, which is advertised as having “an extensive library of algorithms to generate or transform numbersequences

Tencent

Tencent Releases and Open-Sources Tencent Hy4 preview

Tencent has released and open-sourced Tencent Hy4 preview, a next-generation large language model with 770B total parameters and 49B active parameters, and a context window exceeding 1M tokens.

iafisher.com

Is it safe to call `print` in a Python signal handler?

GitHub - zozo123/peter-gt-your-org: Rank your GitHub R&D org against @steipete in the absurd unit of one Peter. Next.js 15 + React 19.

Rank your GitHub R&D org against @steipete in the absurd unit of one Peter. Next.js 15 + React 19. - zozo123/peter-gt-your-org

Great News from Saturn’s Moon Enceladus in the Search for Life in Space • Information for Media and Journalists • Freie Universität Berlin

Why I Hate LLM Confidence Scores

Hello, Reader

My security camera shipped a GitHub admin token in its login page

i dissected some firmware for a Hanwha Wisenet XNP-9300RW and found that it had github admin tokens in it, also miltech is weird

GitHub - Lakr233/vphone-cli

Contribute to Lakr233/vphone-cli development by creating an account on GitHub.

GitHub - Mercury-Language/mercury: The Mercury logic programming system.

The Mercury logic programming system. Contribute to Mercury-Language/mercury development by creating an account on GitHub.

GitHub - YuriKovalov22/the-finn: A grumpy Gibson construct living in an office router. It only knows what the router can see.

A grumpy Gibson construct living in an office router. It only knows what the router can see. - YuriKovalov22/the-finn