Popular：
Virtualization DNS security formal verification reachability analysis compiler errors macro conflict web extension development framework Bitmap Graphics API inconsistencies All Tags

16 Billion Passwords Exposed: Largest Data Breach Ever?

2025-06-19
16 Billion Passwords Exposed: Largest Data Breach Ever?

Cybersecurity researchers have uncovered a record-breaking data breach exposing 16 billion passwords—the largest confirmed dump of stolen access data ever. These credentials are not recycled from old hacks; they're new, undocumented, and highly dangerous, impacting major platforms like Apple, Google, Facebook, and more. The data's structured format suggests active exfiltration, likely via infostealer malware, optimized for sale or deployment. Researchers warn of imminent large-scale phishing, credential stuffing, and account hijacking. The breach highlights ongoing vulnerabilities in corporate data security, including misconfigured cloud setups and poor password management practices.

Read more
(cryptorank.io)
Tech

Infernal Views: Reconstructing the Venera Images of Venus

2025-04-12
Infernal Views: Reconstructing the Venera Images of Venus

Only four spacecraft have ever returned images from Venus's surface. The planet's extreme heat and pressure quickly destroy landers, making exploration incredibly challenging. In 1975 and 1982, the Soviet Union's Venera probes captured the only images we have of Venus's surface. These images, painstakingly reconstructed by Ted Stryk using data from the Russian Academy of Sciences, reveal a desolate landscape of cracked ground under yellow skies—a world that may once have resembled Earth before a catastrophic climate shift.

Read more
(www.planetary.org)
Tech Venus Venera probes Space exploration

arXivLabs: Experimenting with Community Collaboration

2025-04-21
arXivLabs: Experimenting with Community Collaboration

arXivLabs is a framework enabling collaborators to develop and share new arXiv features directly on the website. Individuals and organizations involved share arXiv's values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only partners with those who adhere to them. Got an idea for a project that will benefit the arXiv community? Learn more about arXivLabs.

Read more
(arxiv.org)
Development

Anduril and Meta Team Up on XR for the US Military

2025-05-31
Anduril and Meta Team Up on XR for the US Military

Anduril and Meta are partnering to build extended reality (XR) devices for the U.S. military, a fairy tale ending of sorts for Anduril co-founder Palmer Luckey. The collaboration stems from the Soldier Borne Mission Command (SBMC) Next program, a $22 billion contract originally awarded to Microsoft before being transferred to Anduril due to development issues. Anduril will leverage Meta's Reality Labs technology and Llama AI model, along with its own Lattice command and control software, to provide soldiers with real-time battlefield intelligence. This partnership marks a reconciliation between Luckey and Meta, after he was fired for supporting Donald Trump. To show good faith, Anduril has even launched a Facebook page, highlighting the surprisingly amicable collaboration.

Read more
(techcrunch.com)
Tech

Why the Take9 Cybersecurity Campaign is Doomed to Fail

2025-05-30

The new Take9 cybersecurity awareness campaign encourages pausing for nine seconds before clicking links or downloading files. However, this article argues it's ineffective. The nine-second pause is unrealistic in daily life, similar past campaigns have failed, and it wrongly blames users, ignoring systemic design flaws. A successful campaign would guide users through a two-step process: triggering suspicion and then directing their attention to what to look for and how to evaluate it. Simply pausing isn't enough; cognitive scaffolding and system designs accounting for dynamic interactions are necessary. The author concludes that fixing the system, not the user, is key.

Read more
(www.schneier.com)
Tech user education

Hainan Island Pilots Global Internet Access, Bypassing the Great Firewall

2025-06-05
Hainan Island Pilots Global Internet Access, Bypassing the Great Firewall

China's Hainan province is piloting a program granting select corporate users broad access to the global internet, a rare move given China's strict online censorship. This initiative aims to attract international businesses as Hainan develops into a global free-trade port. Employees of registered Hainan companies can apply for the "Global Connect" mobile service through the Hainan International Data Comprehensive Service Centre, bypassing the Great Firewall to access sites like Google and Wikipedia. Applicants need a 5G plan with a major carrier and must submit company information; approval can take up to five months. Approved users get global internet access at no extra cost. Currently, there are no restrictions on company size or business scope, and the program has generated significant interest.

Read more
(www.scmp.com)
Tech global internet access Hainan free trade port

Three Steps to Zero-Downtime Deployments on AWS EKS

2025-03-10
Three Steps to Zero-Downtime Deployments on AWS EKS

Glasskube engineer Jakob shares his experience achieving zero-downtime deployments on AWS EKS. The article delves into the workings of the AWS Load Balancer Controller, highlighting two potential downtime issues during rolling updates: health check delays and pod termination delays. Three solutions are presented: enabling Pod Readiness Gates, implementing graceful application shutdown, and using a sidecar container or adding a termination delay within the application. These three steps effectively prevent 502/504 errors during rolling updates, resulting in 100% zero-downtime deployments.

Read more
(glasskube.dev)
Development Zero-Downtime Deployments

Columbia Student Arrested by ICE During Citizenship Interview

2025-04-15
Columbia Student Arrested by ICE During Citizenship Interview

Mohsen Mahdawi, a Columbia University philosophy student, was abducted by ICE agents during a US citizenship interview in Vermont. The agents, masked and hooded, took him away in an unmarked car. Mahdawi, a green card holder and outspoken advocate for Palestinians, was reportedly arrested in retaliation for his activism. A judge has issued a temporary restraining order preventing his removal from Vermont or deportation. Mahdawi, a committed Buddhist, previously appeared on 60 Minutes discussing student protests against Israel's response to Hamas's October 7th attack, stating that fighting for Palestinian freedom and against antisemitism must go hand-in-hand.

Read more
(dailynous.com)
Misc

Post-Startup Blues: Four Paths Forward After a Failed Venture

2025-06-04

A co-founder reflects on the successes and failures of their startup, Cord, after four years and two near-acquisition attempts. Despite a strong engineering team and impressive technology, Cord faltered due to shortcomings in go-to-market strategy and sales. Now facing uncertainty, the author weighs four options: founding another startup, joining an early-stage company, returning to big tech, or bootstrapping a solo project. Each path presents unique advantages and challenges, leaving the future unwritten.

Read more
(jg.gg)
Startup

Human Body Exhibit May Feature Executed Chinese Political Prisoners

2025-07-10
Human Body Exhibit May Feature Executed Chinese Political Prisoners

A touring exhibition of plastinated human bodies, 'Real Bodies,' displayed in Birmingham, UK, is suspected of using corpses of executed Chinese political prisoners. British parliamentarians raised concerns, citing evidence that the bodies originated from a Dalian, China firm previously investigated for using bodies obtained from Chinese police. The exhibition's organizer, Imagine Exhibitions, failed to provide documentation proving consent or origin of the cadavers. This raises serious ethical concerns and echoes findings of the China Tribunal's investigation into forced organ harvesting. The incident highlights the need for international cooperation to address such atrocities.

Read more
(www.theartnewspaper.com)
Misc Body Exhibit Organ Harvesting

Slate AI Agent: Automating the Port of a Python Project to TypeScript

2025-09-25

Slate is a highly autonomous AI agent designed to handle long and complex tasks. This post details how Slate successfully ported the open-source Python project Browser Use (70.3k stars), a browser automation library for LLMs, to TypeScript in under two hours for less than $60. Slate automated the majority of the process requiring minimal user input. The process showcased Slate's powerful planning and execution capabilities, as well as its ability to autonomously troubleshoot problems, ultimately resulting in a fully functional TypeScript version.

Read more
(randomlabs.ai)
Development code conversion automated programming

OneSignal Embraces Flexible Work

2025-04-16
OneSignal Embraces Flexible Work

OneSignal prioritizes workplace flexibility to foster productivity and employee happiness. Recognizing diverse needs across roles, teams, and individuals, they support both fully remote and hybrid work models. Headquartered in San Mateo, CA, they also offer shared workspaces in various locations (CA, NY, UT, PA, WA, and TX) to facilitate collaboration. Globally, they maintain an office in London and a shared workspace in Singapore in partnership with Piloto Asia.

Read more
(onesignal.com)
Startup

CocoIndex: Open-Source Data Indexing Engine Simplifies Data Processing

2025-04-24
CocoIndex: Open-Source Data Indexing Engine Simplifies Data Processing

CocoIndex is the world's first open-source engine supporting custom transformation logic and incremental updates, specialized for data indexing. Users declare transformations; CocoIndex creates and maintains an index, keeping the derived index up-to-date with minimal computation upon source updates. Documentation, a quick start guide, and video tutorials are available. It supports Python library installation and launching a Postgres database using Docker Compose. Users easily index data by defining indexing flows, such as splitting text into chunks, embedding them into vectors, and exporting to a vector index. Examples and demos are provided, and community contributions—code improvements, documentation updates, issue reports, feature requests, and Discord discussions—are welcome.

Read more
(github.com)
Development data indexing open-source engine

Microsoft's Secret Free Office: Ads for Access

2025-02-24
Microsoft's Secret Free Office: Ads for Access

Microsoft has quietly released a free version of Microsoft Office for Windows, allowing document editing without a Microsoft 365 subscription or license key. This free version, based on the full desktop apps, locks most features behind a Microsoft 365 paywall. It includes persistent in-document ads in Word, PowerPoint, and Excel, and only saves files to OneDrive. To access it, skip the sign-in prompt. While you can open, view, and edit documents, advanced features like add-ins, dictation, and advanced formatting are unavailable. This free Office appears to be in limited testing.

Read more
(www.windowscentral.com)
Tech Microsoft Office Free Version

Microsoft's Copilot: Integrating AI into Edge, Leading the AI Browser Wars

2025-09-24
Microsoft's Copilot: Integrating AI into Edge, Leading the AI Browser Wars

Microsoft is aggressively integrating its AI assistant, Copilot, into its Edge browser, enabling it to directly control browser tabs and automate tasks like restaurant reservations and price comparisons. Instead of building a new AI browser, Microsoft is enhancing its existing browser with AI capabilities for a more seamless experience. Copilot will perform tasks in real-time with transparency, ensuring user control. This move aims to compete with rivals like Google's Gemini and Perplexity's Comet, with Microsoft claiming a leading position in the AI browser race.

Read more
(www.theverge.com)
Tech Edge browser

Malai 0.2.5 Released: Easily Share Your Local TCP Services

2025-05-27

Malai 0.2.5 introduces the ability to share your local TCP services, allowing you to securely expose any locally running TCP service (e.g., SSH, Postgres, Redis, etc.) to the outside world. Simply use a simple command to share a port and connect from other machines using the `malai tcp-bridge` command. Additionally, Malai now includes a `malai folder` command for sharing local folders. This update provides a more convenient and secure way for developers and teams to collaborate, such as for remote debugging, sharing databases, or game servers.

Read more
(malai.sh)
Development Network Sharing

Critical Erlang/OTP SSH Vulnerability Allows Unauthenticated Remote Code Execution

2025-04-17

A critical vulnerability (CVE-2025-32433) has been discovered in the Erlang/OTP SSH server, allowing unauthenticated remote code execution (RCE). Versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20 are affected. Attackers can exploit a flaw in SSH protocol message handling to gain unauthorized access and execute arbitrary commands without credentials. Patches are available; update to OTP-27.3.3, OTP-26.2.5.11, or OTP-25.3.2.20 or later.

Read more
(nvd.nist.gov)
Development

C String Functions: A Quick Overview

2025-04-21
C String Functions: A Quick Overview

This article provides a quick overview of several commonly used C string manipulation functions: `strlen()` gets the length of a string; `strcpy()` copies strings; `strcat()` concatenates strings; `strncat()` safely concatenates a specified number of characters; `strcmp()` compares strings; `strcspn()` finds the first character not in a specified set; `strerror()` gets the error message for an error code; `memchr()` finds a value in a memory block; and `strrev()` (non-standard) reverses a string. Mastering these functions is crucial for efficient C programming.

Read more
(github.com)
Development string functions

Servo vs. Ladybird: A Battle of New Browser Engines

2025-03-26
Servo vs. Ladybird: A Battle of New Browser Engines

This article compares Servo and Ladybird, two projects aiming to revolutionize the browser engine landscape. Servo, initially backed by Mozilla, transitioned to the Linux Foundation due to funding issues and is now developed by Igalia with an undisclosed but significant funding source. Ladybird, started by Andreas Kling, relies on Patreon, GitHub sponsorships, and ad revenue, and has grown into an independent project with 7 full-time engineers, boasting substantial donations. In web standards compliance tests, Ladybird slightly edges out Servo, although Servo excels in CSS tests. Performance-wise, Servo significantly outperforms Ladybird, but both lag behind mainstream browsers. Both are open-source, but target different audiences and development models; Servo emphasizes embeddability, while Ladybird focuses on the browser itself.

Read more
(thelibre.news)
Development browser engine performance comparison

Reverse Engineering a VTech Socrates: An 80s Hybrid Game Console/Computer Adventure

2025-04-25
Reverse Engineering a VTech Socrates: An 80s Hybrid Game Console/Computer Adventure

This blog post details the author's reverse engineering journey of a late-80s VTech Socrates hybrid game console/computer. Starting with a poorly-conditioned eBay purchase, the author cleans, disassembles, and discovers its Toshiba-heavy internals, including a Z80 CPU and an expansion edge connector. An AV mod is designed and built to overcome dim video output. Gameplay ensues, leading to ROM analysis within the MAME emulator to understand cartridge loading and memory mapping. While encountering quirks in creating a simple 'Hello World' program, the author successfully draws pixels to the screen, laying the groundwork for further reverse engineering and development.

Read more
(www.leadedsolder.com)
Hardware

DeepSeek's Rise: Are US AI Chip Export Controls Working?

2025-01-30
DeepSeek's Rise: Are US AI Chip Export Controls Working?

Anthropic CEO Dario Amodei commented on the implications of Chinese AI company DeepSeek's success on US AI chip export controls. He argues that while DeepSeek has made strides in cost-effectiveness, it still lags behind US models, suggesting the controls are working. He predicts the future hinges on the Trump administration's export policies: strengthening controls could maintain US leadership, while easing them could let China gain an advantage in military AI applications.

Read more
(techcrunch.com)
AI AI chip export controls US-China AI competition

The Toxic Lady: A Medical Mystery That Baffles Experts

2025-04-15

In 1994, the death of Gloria Ramirez, a cancer patient, led to a bizarre incident where multiple healthcare workers fell ill after exposure to her body and blood. Initially dismissed as mass hysteria, investigations suggested that Ramirez's self-administered DMSO pain relief, combined with oxygen, may have formed toxic dimethyl sulfate (DMS). This theory, while published in Forensic Science International, remains debated, leaving the incident shrouded in mystery.

Read more
(en.wikipedia.org)
Misc toxic incident

Beyond Stochastic Parrots: The Circuits of Large Language Models

2025-04-13
Beyond Stochastic Parrots: The Circuits of Large Language Models

Large language models (LLMs) have been dismissed by some as mere "stochastic parrots," simply memorizing and regurgitating statistical patterns from their training data. However, recent research reveals a more nuanced reality. Researchers have discovered complex internal "circuits"—self-learned algorithms that solve specific problem classes—within these models. These circuits enable generalization to unseen situations, such as generating rhyming couplets and even proactively planning the structure of these couplets. While limitations remain, these findings challenge the "stochastic parrot" narrative and raise deeper questions about the nature of model intelligence: can LLMs independently generate new circuits to solve entirely novel problems?

Read more
(inferencemagazine.substack.com)
AI AI Intelligence Model Generalization

Hardware Hacking: Extracting Firmware from an Electric Toothbrush with Raspberry Pi and PiFex

2025-04-06

This article details a hardware reverse engineering project targeting an electric toothbrush, using a Raspberry Pi and PiFex board. The author meticulously explains how to create a Raspberry Pi image with PiGen, pre-loaded with necessary software and configured for peripherals like UART, SPI, and I2C. OpenOCD WebUI and Jupyter Notebooks are leveraged for firmware extraction and hardware-level debugging. The process involves modifying configuration files, installing dependencies, and accessing the Pi via USB-to-Serial and USB-to-Ethernet gadgets. The ultimate goal is to extract the toothbrush's firmware and achieve hardware-level debugging.

Read more
(voidstarsec.com)
Hardware Hardware Reverse Engineering

IRS Open-Sources Direct File: A Free, Interview-Based Tax Filing System

2025-05-30
IRS Open-Sources Direct File: A Free, Interview-Based Tax Filing System

The IRS has open-sourced Direct File, a free online tax filing service. It uses an interview-based approach, works on various devices (mobile, desktop, etc.), and supports English and Spanish. Direct File translates tax law into plain-language questions, generating standard tax forms that are submitted to the IRS. At its core is the Fact Graph, a Scala-based knowledge graph handling incomplete information. Direct File also facilitates state and local tax filing by allowing users to import their federal return data into third-party tools. Developed in-house by the IRS with support from USDS, GSA, and other partners, some code was excluded due to privacy and security concerns.

Read more
(github.com)
Development

Making Friends Like an r-Strategist

2025-04-11

This post details the author's journey in intentionally building close friendships. Previously lacking in emotional connection skills, he discovered the power of proactive effort. Through experiments like designing vulnerability-inducing questions and initiating deep, one-on-one conversations, he successfully formed close bonds. The author shares tactics for finding exciting conversation topics, embracing vulnerability, taking initiative, and maintaining friendships, emphasizing the importance of agency and consistent effort.

Read more
(www.neelnanda.io)
Misc

Hexagonal Grid Spiral Coordinates Guide Updated

2025-03-15

The author updated their popular hexagonal grid guide with a new section on spiral coordinate systems. Despite not yet using them in a real project, they decided to stop waiting and share their current understanding, including unoptimized sample code. More variants will be added in the future. Additionally, they discovered a simplified angle sorting method using axial coordinates, which is detailed on a separate page.

Read more
(www.redblobgames.com)
Development spiral coordinates

Soviet Venus Probe's 53-Year Odyssey Ends in Ocean Plunge

2025-05-13
Soviet Venus Probe's 53-Year Odyssey Ends in Ocean Plunge

Kosmos 482, a Soviet Venus probe launched in 1972, ended its 53-year journey around Earth with a plunge into the Indian Ocean on May 10th. A rocket malfunction prevented it from reaching Venus, leaving it in Earth orbit. Atmospheric drag eventually brought it down, with the exact location still uncertain but estimated near Indonesia. The event highlights the growing space junk problem; the increasing number of satellites and debris increases the risk of future re-entries and potential damage.

Read more
(www.space.com)
Tech Space Junk Kosmos 482 Satellite Re-entry
1 2 … 21 22 23 25 27 28 29 … 596 597