BitLocker and macOS face exploits, while Bun adopts Rust.
Removing the modem and GPS from my 2024 RAV4 hybrid
A vehicle owner physically removed the modem and GPS from their 2024 RAV4 Hybrid to prevent the car from transmitting continuous personal telemetry. This DIY privacy modification highlights growing consumer pushback against modern vehicles functioning as rolling data trackers.
CommentsRTX 5090 and M4 MacBook Air: Can It Game?
A recent hardware experiment successfully connected an Nvidia RTX 5090 desktop GPU to an M4 MacBook Air using an external enclosure. The extreme setup tests whether Apple's ultraportable laptop can handle high-end gaming when paired with top-tier desktop graphics hardware.
CommentsFirst public macOS kernel memory corruption exploit on Apple M5
Despite Apple spending five years fortifying its systems against memory corruption, security researchers have developed the first public macOS kernel exploit for the new M5 chip. Working alongside Mythos Preview, an engineering team successfully built a functional exploit in just five days.
CommentsNew Nginx Exploit
A newly discovered exploit for the Nginx web server is now available on GitHub, specifically targeting the CVE-2026-42945 vulnerability. Developed by DepthFirstDisclosures, the exploit tool named Nginx-Rift is currently open for community code review and contributions.
CommentsA message from President Kornbluth about funding and the talent pipeline
Following a message from MIT President Kornbluth regarding research funding and the talent pipeline, readers are highlighting the growing disillusionment of graduate students with academia. Commenters argue that grueling, six-year PhD programs offering low stipends compared to industry salaries are driving top talent away from research and deterring undergraduates from pursuing advanced degrees.
CommentsRewrite Bun in Rust has been merged
The popular all-in-one JavaScript runtime and package manager Bun has officially merged its major rewrite in the Rust programming language. Spearheaded by creator Jarred Sumner, this architectural transition leverages Rust's performance and memory safety to further enhance the tool's speed and reliability.
CommentsScorched Earth 2000 – Web
Readers reminisce about bypassing early shareware DRM and payment enforcement in classic games like Scorched Earth and Escape Velocity by editing game files or altering system clocks. The discussion highlights the forgiving attitudes of early software creators toward piracy and local cheating. Additionally, the thread mourns the passing of Escape Velocity co-creator Peter Cartwright, noting that his Kickstarter to remaster the game was successfully funded after his death.
CommentsTwin brothers wipe 96 government databases minutes after being fired
Twin brothers wiped 96 government databases just minutes after being terminated from their jobs. This retaliatory data destruction highlights the critical need for organizations to revoke employee system credentials before conducting staff dismissals.
CommentsClaude for Small Business
The newly launched Claude for Small Business package integrates the AI assistant directly into the everyday tools used by smaller enterprises. This offering includes a suite of connectors and ready-to-run workflows designed to streamline daily operations.
CommentsHDD Firmware Hacking
A new technical deep dive explores the inner workings of storage devices by dumping, reverse engineering, and modifying the firmware of various HDDs and SSDs. This hands-on project provides a comprehensive look at how hard drives function at the lowest software levels.
CommentsUK government replaces Palantir software with internally-built refugee system
The UK government has replaced its use of Palantir software with a newly developed, internally built IT system for managing refugee data. Officials stated that the in-house solution offers greater flexibility while maintaining high security standards.
CommentsTesla Wall Connector bootloader bypasses the firmware downgrade ratchet
A newly discovered vulnerability in Tesla Wall Connectors allows attackers to bypass firmware downgrade protections by exploiting the bootloader through the physical charge port connector. This flaw could enable malicious actors to install older, potentially insecure firmware versions on the electric vehicle charging stations.
CommentsComputer Hobby Movement in Canada
The York University Computer Museum (YUCoM) serves as a historical collection and research center dedicated to the history of computing in Canada. By focusing on the Canadian computer hobby movement, the museum preserves the nation's early technological milestones. It remains a vital resource for understanding the evolution and heritage of domestic computing.
CommentsPorting 3D Movie Maker to Linux
An open-source project is porting Microsoft's nostalgic 1990s animation software, 3D Movie Maker, to the Linux operating system. This effort allows users to experience the classic movie-making features and the iconic dog mascot McZee on open-source platforms.
CommentsWhat's in a GGUF, besides the weights – and what's still missing?
This piece breaks down the GGUF file format to explain the essential metadata and extra components needed to run a language model independently of its raw weights. Additionally, it highlights the current limitations of the format by identifying what crucial information is still missing for seamless deployment.
CommentsA Claude Code and Codex Skill for Deliberate Skill Development
A new open-source project introduces a specialized skill for AI coding assistants like Claude Code and OpenAI Codex to foster deliberate practice. The tool, named learning-opportunities, helps developers actively refine their programming abilities while working alongside AI. By prompting users to engage critically with the code, it prevents over-reliance on automated generation and promotes continuous learning.
CommentsAI is making me dumb
An author reflects on the overwhelming temptation to use artificial intelligence for everyday writing tasks such as drafting articles, documents, and code. They warn that this growing dependency on automated tools is actively diminishing their personal writing skills and cognitive sharpness.
CommentsCisco workforce reductions
Cisco has announced workforce reductions as part of a broader organizational realignment. The company stated that these cuts will help shift resources toward key strategic investment areas. This restructuring is designed to optimize operations and prioritize future growth initiatives.
CommentsAvoiding and reducing microplastic false positives from dry glove contact
An article exploring how dry glove contact can cause false positives in microplastic testing has sparked a debate among readers regarding the methodology and validity of recent environmental studies. While some argue that identifying these contamination flaws proves the microplastic threat is overblown, others counter that demanding rigorous controls is simply standard scientific practice that does not invalidate broader pollution concerns.
CommentsClaude for Legal
Anthropic has released an open-source GitHub repository called Claude for Legal, providing a suite of plugins tailored specifically to streamline legal workflows. Developers are encouraged to contribute to the project's ongoing development to help integrate the company's AI capabilities into specialized legal processes.
CommentsLeaving the Physical World
In a published address for the Conference on HyperNetworking in Japan, cyber pioneer John Perry Barlow reflects on his transition from a traditional cattle rancher to an advocate for the digital frontier. He contrasts his tangible, physical-world background with the emerging virtual landscape of global networking and cyberspace.
CommentsFossils show millipede and centipede ancestors evolved legs underwater
Recent fossil discoveries reveal that the ancestors of modern millipedes and centipedes first evolved their many legs in an underwater environment. This finding clarifies a long-standing mystery regarding how these currently terrestrial arthropods developed their distinct multi-legged bodies before migrating to land.
CommentsThe Power of a Free Popsicle (2018)
A new business book highlights how creating memorable defining moments, such as offering a free popsicle, can dramatically enhance both customer and employee experiences. By engineering these peak interactions, companies can significantly boost engagement, satisfaction, and long-term loyalty across their operations.
CommentsShow HN: Nibble
A new open-source project named Nibble allows developers to generate LLVM IR without using malloc or relying on external dependencies. The lightweight tool is available on GitHub and is designed to be entirely self-contained. This makes it a highly practical solution for low-level code generation in constrained environments.
CommentsUSDA Projects Smallest US Wheat Harvest Since 1972 Due to Plains Drought
Driven by severe drought in the Plains, the USDA predicts the US wheat harvest will drop to its lowest level since 1972 for the 2026/27 season. In contrast, the agency forecasts record soybean production gains as farmers navigate ongoing challenges from trade tensions and rising input costs.
CommentsMicrosoft BitLocker – YellowKey zero-day exploit
A newly discovered zero-day exploit named YellowKey is currently targeting Microsoft BitLocker encryption. Additionally, security teams are tracking a second zero-day vulnerability called GreenPlasma that enables local privilege escalation.
CommentsMeta won't let you block its AI account on Threads
Meta is testing a new Threads feature that allows users to tag a Meta AI account to ask questions and receive answers. However, users do not have the option to block the AI account if they prefer not to interact with it.
CommentsShow HN: Running the second public ODoH relay
Oblivious DNS over HTTPS is a protocol that separates user identity from DNS queries without requiring account sign-ups. A developer has released Numa v0.14, an MIT-licensed tool for deploying clients and relays, alongside the launch of the second public ODoH relay to expand the anonymous DNS ecosystem.
CommentsSaying Goodbye to one line of APL
A discussion surrounding an article about saying goodbye to a classic APL one-liner sparked nostalgia for the dense, vector-oriented language and its chalkboard origins. Readers brainstormed modern ways to interact with the code, suggesting tablet-based stylus apps with live evaluation and exploring modern dialects like BQN. The conversation also featured a detailed technical breakdown of a complex one-liner that uses boolean algebra to efficiently reduce consecutive spaces in a string.
CommentsInt a = 5; a = a++ + ++a; a =? (2011)
Developers are revisiting a notorious C programming interview question involving complex increment operators that triggers undefined behavior and sequence point violations. Commenters recall the frustration of interviewers mistakenly treating specific compiler outputs as the definitive answer rather than acknowledging the language rules. The community consensus emphasizes that the only appropriate response is to recognize such code as unmaintainable and refuse to write it.
Comments















