Linux GhostLock flaw, Grok data leaks, Samsung AI threats
GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
VEGA researchers have uncovered GhostLock (CVE-2026-43499), a severe Linux kernel vulnerability that has existed in all major distributions for 15 years. The stack-use-after-free flaw enables highly stable privilege escalation and container escapes without requiring special kernel configurations or privileges. Google awarded the team a $92,337 bug bounty for discovering and exploiting the flaw through its kernelCTF program.
CommentsAsk HN: Add flag for AI-generated articles
In response to community pushback against machine-written content, Hacker News is considering a new flagging option specifically for AI-generated articles. Although direct tagging is not currently planned, adding a specific flagging reason for AI-generated content would address the platform's growing aversion to such text. Additionally, users argue that AI-written articles and AI-assisted projects severely limit meaningful technical discussion because the human authors often lack a deep understanding of the material they share.
CommentsZig Creator Calls Spade a Spade, Anthropic Blows Smoke
Sparked by Bun's rewrite from Zig to Rust, developers are pushing back against AI hype to emphasize the value of battle-tested code. They argue that the true merit of a project lies in its maturity rather than being a fresh rewrite or a quickly generated proof-of-concept. Ultimately, the community agrees that while artificial intelligence makes coding effortless, the necessary friction and time spent refining ideas remain crucial for building lasting software.
CommentsBuilding and shipping Mac and iOS apps without opening Xcode
iOS and Mac developers can explore alternative build systems to compile and ship applications without ever opening Xcode. This workflow offers a streamlined approach for those who find the traditional integrated development environment tedious. However, the standard Xcode interface remains a fully viable option for engineers who actually enjoy using it.
CommentsApple's new SpeechAnalyzer API, benchmarked against Whisper and its predecessor
Researchers have benchmarked Apple's new SpeechAnalyzer API against its predecessor, SFSpeechRecognizer, and Whisper using 5,559 LibriSpeech utterances. Because Apple did not publish official performance metrics, the study provides the first comprehensive accuracy numbers alongside raw transcripts for independent verification.
CommentsCyberpunk Comics, Manga and Graphic Novels
A recent article highlighting cyberpunk comics, manga, and graphic novels excludes major anime franchises like Ghost in the Shell and Cowboy Bebop, prompting readers to discuss the extensive multimedia adaptations of these properties. Fans heavily debated creator Shirow Masamune's legacy and personal controversies, specifically arguing over the sexualization in his original manga versus the clinical tone of the animated films. Additionally, readers recommended newer cyberpunk graphic novels like Human Algorithm that explore the genre's evolving themes, including modern artificial intelligence and economic upheavals.
CommentsA graph that should be front-page news
Gregory Andrews argues that the latest El Niño 3.4 sea surface temperature data represents a critical climate milestone deserving prominent front-page news coverage. Despite the significance of these environmental metrics, he highlights a concerning lack of mainstream media attention regarding the current readings.
CommentsA voxel Tokyo in real Japan time – ride the Yamanote line and study Japanese
A new virtual experience simulates a train ride on the Yamanote line through a voxel-rendered Tokyo that syncs with Japan's actual time and weather. Accompanied by relaxing lofi music, the ambient environment displays and reads aloud basic Japanese sentences to serve as an immersive, passive language learning tool.
CommentsThe art and engineering of Sega CD Silpheed
Retro gaming enthusiasts are discussing the technical ingenuity behind the Sega CD release of Silpheed, which cleverly combined pre-rendered FMV and 2D sprite overlays to simulate real-time 3D graphics on limited hardware. By designing the title around the optical drive's strengths rather than the console's graphical limitations, the developers delivered a visually spectacular and memorable arcade shooter despite its simple core gameplay.
CommentsDesigning and assembling my first PCB
A recent article on designing and assembling a first PCB has sparked a community discussion about the accessibility and affordability of modern custom PCB manufacturing. Readers debated the trade-offs between budget-friendly overseas fabs like JLC and domestic alternatives like OSH Park, weighing factors such as production quality, customer support, and international shipping costs. While cheap overseas manufacturers dominate the hobbyist market for their low prices, many advocates still champion local companies to avoid customs hurdles and ensure reliable board quality.
CommentsFormer NOAA employees built Climate.us to preserve climate data and resources
Former NOAA employees have launched the Climate.us website, a donation-funded platform designed to preserve climate data and provide expert analysis through contextual articles. While raw datasets remain accessible through various government portals, this independent initiative focuses on translating that data into continuous, science-backed content for the public. By relying on public funding, the team of former government experts aims to maintain ongoing climate education and resources outside the federal system.
CommentsSam Neill has died
New Zealand actor Sam Neill has died. He built a prolific career portraying both dashing romantic leads and charismatic villains across film and television.
CommentsLinux on the Sega 32X. Who needs hardware synchronization primitives anyway?
A developer recently ported Linux to the legacy Sega 32X console add-on, relying entirely on software-based synchronization to overcome the hardware's lack of native primitives. This ambitious project serves as a cautionary tale in retro computing, illustrating how pushing outdated technology beyond its limits can create more problems than it solves.
CommentsLAPD lets contract with surveillance giant Flock expire
The Los Angeles Police Department is allowing its contract to expire with surveillance giant Flock. As one of the company's largest government clients, the LAPD cited civil liberties concerns as the primary reason for ending the partnership.
CommentsBacktrack-Free Cursive
A new approach to handwriting called Backtrack-Free Cursive aims to streamline how we write English by eliminating the need to lift the pen or retrace complex strokes. By focusing on continuous, fluid letter connections, this innovation seeks to remove the friction of traditional cursive and make everyday writing a more enjoyable experience.
CommentsAncient Roman Board Game
Artificial intelligence has been used to reconstruct Ludus Coriovalli, an 1,800-year-old Roman strategy board game lost to history, from a mysterious carved stone. The findings, published in the journal Antiquity, detail a strategy game that pits four hounds against two hares. This ancient pastime is now available to play for free online against friends or an AI opponent.
CommentsThe social physics of conversation: Communication patterns matter
Recent research into the social physics of conversation reveals that team communication patterns directly dictate overall performance and innovation. The findings show that a seamless flow of ideas among members is the primary driver of collective intelligence. Ultimately, these conversational dynamics prove to be much more crucial for group success than the raw talent of the individuals involved.
CommentsTelegram's t.me domain has been suspended
Telegram's primary URL shortening domain has been suspended, disrupting access to shared links across the platform. A recent WHOIS lookup confirms the inactive registration status of the affected t.me domain.
CommentsBeavis Ultrasound PnP ISA Sound Card Replica
A new open-source project named Beavis Ultrasound provides a modern hardware replica of the classic Gravis Ultrasound PnP ISA sound card. Developers and retro computing enthusiasts can access the design files and contribute to the project's ongoing development through its GitHub repository.
CommentsTFTP Honey Pot Results
Researchers deployed a TFTP honeypot to analyze internet background radiation, capturing automated requests for specific Cisco and Polycom IP phone configuration files. The results help differentiate between widespread credential-harvesting bots and more targeted network reconnaissance originating from distinct IP sources.
CommentsShow HN: I implemented a neural network in SQL
A developer has introduced an experimental open-source project that enables querying Xarray datasets using standard SQL. Pushing the boundaries of the query language, the creator also successfully implemented a complete neural network entirely within SQL. The codebase is currently available on GitHub for community testing and contributions.
CommentsSamsung Health app threatens data deletion if users opt out AI training
Samsung is facing backlash over plans to collect sensitive user data, including medical records and cycle tracking details, to train its AI models through the Samsung Health app. Users who opt out of this data collection reportedly face the deletion of their stored information or lose access to essential app features. The controversial update has sparked widespread consumer outrage, prompting calls for regulatory intervention and boycotts against the company's aggressive data harvesting practices.
CommentsShow HN: DOM-docx – HTML to native, editable Word docs (MIT)
A new open-source project called DOM-docx allows developers to convert semantic HTML fragments directly into native, editable Word documents. Released under the MIT license, the tool generates standard OOXML files that can be seamlessly opened and modified within Microsoft Word.
CommentsGrok uploaded my user directory to xAI's servers
A user discovered that xAI's Grok AI uploaded their entire local directory to the company's servers. The exposed files included highly sensitive data such as SSH keys, a password manager database, and personal media. This incident highlights severe privacy and security risks regarding AI assistants with deep access to local file systems.
CommentsInterrail: 6,379Km and 13 Countries over 7 weeks
After finding a previous month-long trip too intense, the author and his wife completed a more relaxed seven-week Interrail journey across Europe. Utilizing a 15-day travel pass, the couple covered 6,379 kilometers and visited 13 countries at a comfortable pace. The comprehensive trip also included two ferry crossings, allowing them to fully enjoy the continent without the rush of their last adventure.
CommentsShow HN: YouTube Guitar Tab Parser
A new command-line tool announced on Hacker News automatically converts YouTube guitar lesson videos into PDF tablature. The utility enables musicians to easily extract and read guitar tabs directly from online video tutorials without manual transcription.
CommentsGrok CLI uploaded the whole home directory to GCS
A user discovered that the Grok CLI inadvertently uploaded their entire home directory to xAI's Google Cloud Storage. The exposed data contained highly sensitive information such as SSH keys, password manager databases, and personal media files.
CommentsGhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
Security researchers have identified GhostLock, a critical Linux kernel stack-use-after-free vulnerability that has existed in all major distributions for 15 years. The flaw requires no special configurations or privileges to trigger and can be exploited for highly stable privilege escalation and container escapes. Google awarded a $92,337 bounty through its kernelCTF program for the successful proof-of-concept exploit.
CommentsAre you telling me a readonly property is wrecking my performance?
A developer shares a recent debugging story revealing how a seemingly innocuous readonly property unexpectedly caused severe performance bottlenecks in their application. The article explores the hidden computational costs of property getters and provides insights for engineers looking to identify and resolve similar performance degradation issues.
CommentsBenchmarking 15 “E-Waste” GPUs with Modern Workloads
A recent post benchmarks 15 decommissioned enterprise Tesla GPUs to determine if they remain viable for modern computing workloads. Despite being widely available at extremely low prices as e-waste, the testing evaluates whether these older graphics cards still offer practical utility for today's tasks.
Comments







