Software Tech News

F-Droid has launched version 2.0 of its official app following more than a year of development. This release represents the largest update in the platform's history and features a complete redesign of the application.

A new project showcased on Hacker News introduces a specialized type foundry for generating cursed web fonts, featuring playful creations like Times New Bastard. The tool provides a unique resource for designers and developers looking to incorporate intentionally chaotic typography into their digital projects.

YC W26 startup Whiteboard has launched an open-source IDE and digital canvas designed to help developers visually plan their projects. The platform focuses on thoughtful software design by allowing teams to architect applications before writing code. The project is now open for public use and community contribution on GitHub.

The Fearless SIMD library has officially reached its 1.0 release, providing a stable toolset for developers working with vectorized instructions. This major milestone aims to make high-performance SIMD programming safer and significantly more accessible for software engineers.

During the opening keynote at Rails World 2026 in Austin, DHH focused his presentation on the rapid rise of AI agents in software development. He revealed that 37signals has ceased handwritten coding to transition toward AI-driven workflows. Additionally, he explained how the foundational conventions of the Rails framework continue to provide essential structure in this new landscape.

While exploring Google Maps Street View in Tokyo, a user discovered a 350Z parked in the exact same location across every available image. The sports car has remained untouched in that specific spot in every Street View capture dating back to 2009.

The DataHaskell/Dataframe library has introduced a new Parquet writer for Haskell developers. Users can easily export their data by simply passing their dataframe into the newly implemented writeParquet function.

Apple is implementing a two-tier encryption system in the UK that restricts access to its strongest iCloud protection. Consequently, users with identical devices are experiencing unequal levels of data security and privacy.

A developer has released an open-source tool that encrypts files into self-decrypting HTML pages, enabling secure offline sharing without requiring any software installation. By embedding OpenPGP signatures and manipulating the HTML structure, the project ensures the files remain fully auditable and can be decrypted using just a standard web browser or bare OpenSSL. While self-decrypting files are not a new concept, this implementation specifically focuses on zero dependencies and reproducible builds.

A recent blog post reviews Paul E. McKenney's free online textbook on parallel programming, authored by the creator of the Linux kernel's RCU synchronization mechanism. The reviewer shares their initial impressions and personal context after reading a substantial portion of the comprehensive guide.

A new minimalist web project featured on Hacker News provides a virtual koi pond for users to relax and unwind. The site, called Koi.rest, is designed as a digital space to do absolutely nothing and help people regain their mental balance.

A wormable Cross-Site Scripting vulnerability in the ansi2html component of Sourcehut allowed attackers to hijack user accounts through malicious build logs. The exploit automatically compromised the accounts of anyone who viewed an infected log on the Sourcehut build service or other platform instances.

Developers are leveraging AI agents to enhance security auditing by building custom tooling and formal models before traditional code review begins. Over a six-month period, this AI-driven approach successfully identified critical vulnerabilities within the Miden zkVM, demonstrating the practical value of integrating AI into early security assessments.

A new research paper demonstrates a situational method for forging 1024-bit RSA signatures in nearly Special Number Field Sieve (SNFS) time by exploiting temporary access to a raw, unpadded RSA signing oracle. Rather than breaking RSA-1024 universally, the technique allows attackers to extract enough information during a session to generate future forgeries even after the private key becomes inaccessible. The researchers outline practical real-world scenarios where this vulnerability could be exploited, highlighting the ongoing risks of legacy textbook RSA implementations.

WaveDigger is a new open-source tool that discovers the physical locations of wireless signals by leveraging Apple's public Wi-Fi Positioning System. Available on GitHub, the project utilizes BSSID searches to help users accurately map and track specific network locations.

Discussions surrounding the Nokia Design Archive highlight that Nokia's pivot toward treating mobile phones as fashion accessories was a logical market evolution rather than a fatal misstep. Ultimately, the company's decline was driven not by poor industrial design, but by Apple and Android's successful shift toward lucrative, walled-garden app store ecosystems.

At Snapdragon Summit 2026, Qualcomm announced that the upcoming Snapdragon X2 Series will officially feature Linux support. The event also showcased a broader lineup of new hardware, including agentic AI PCs, Googlebook laptops, and various partner devices powered by Snapdragon processors.

Fly.io has published a detailed 2025 guide exploring the complex and often unpredictable behavior of Visual Studio Code's SSH agent. The documentation provides developers with essential troubleshooting tips and best practices to master remote SSH workflows and streamline their development environments.

Nestrilabs has released an experimental virtio device called virtio-nvgpu to provide near-native NVIDIA GPU access inside KVM virtual machines. This new tool aims to significantly improve hardware acceleration and graphics performance for virtualized workloads. By bridging the gap between host and guest environments, it offers a promising solution for developers requiring high-end GPU capabilities in VMs.

Support for the HTTP Vary header is now available in Cache Rules across all subscription plans. This new functionality enables users to normalize negotiation headers, pass exact values to the origin, or bypass the cache when variations are too unpredictable.

Tailscale has released major performance updates that reduce memory usage and increase overall network throughput. By implementing multi-queue processing, writev, and netmap caching, the platform now delivers significantly faster startup times.

A new Hacker News post introduces fixed-point combinators, including the Y combinator, to array languages through a live interactive demo. The accompanying educational materials explore these programming concepts using the famous combinator bird puzzles from Raymond Smullyan's book To Mock a Mockingbird.

This retrospective explores the historical evolution of Windows scroll bar shortcuts, highlighting forgotten navigation methods like right-clicking and shift-clicking. The article details how these early interaction techniques shaped the user experience in older versions of the operating system before modern scrolling gestures became the standard.

LensVLM is a new model that compresses long contexts into images and expands only the most relevant pages for efficient processing. This open source innovation supports the broader mission to advance and democratize artificial intelligence through open science.

Carbon is a newly launched open-source manufacturing ERP, MRP, MES, and QMS platform released under an AGPL-3.0 license. The software allows organizations to maintain complete control over their technology stack by supporting on-premises, VPC, and fully air-gapped deployments. Additionally, it is built on a self-hosted Postgres database to ensure users fully own their underlying data infrastructure.

Radicle, an open source peer-to-peer code collaboration stack built on Git, has disclosed a security vulnerability within its network protocol. The flaw affects the underlying communication system of the decentralized platform. Developers using the forge are encouraged to review the disclosure details and take appropriate security measures.

Configuring hibernation on NixOS requires dedicated swap space, which complicates the use of memory compression tools like ZRAM and Zswap. A new article breaks down the author's trial-and-error process to help users avoid common pitfalls and find the correct configuration.

Microsoft discontinued Visual FoxPro in 2007, but developers have now revived the legacy programming environment. The new project provides a 64-bit runtime and modern IDE for existing Visual FoxPro 9 applications. This rebuild reconstructs the original language using contemporary technologies, including Electron, React, and a Rust-based WebAssembly virtual machine.

A new open-source project called ReBarUEFI has been launched to bring Resizable BAR support to almost any UEFI-based system. The tool is hosted on GitHub, where users can create an account to contribute to its ongoing development.

The XML-based SAML authentication protocol suffers from fundamental design flaws that leave it vulnerable to persistent security exploits like signature wrapping attacks. These vulnerabilities stem from inherent XML complexity and design ossification that have persisted for decades. To mitigate these ongoing risks, organizations are advised to migrate to the simpler, JSON-based OpenID Connect protocol.