500k Crypto Heist Highlights Growing Threat of Malicious Open-Source Packages

2025-07-15
500k Crypto Heist Highlights Growing Threat of Malicious Open-Source Packages

A Russian blockchain developer lost $500,000 in cryptocurrency due to a cyberattack. The attack originated from a fake Solidity language extension that ranked highly in the Open VSX registry, accumulating 54,000 downloads. This malicious extension downloaded and executed malicious code, ultimately installing ScreenConnect remote management software, enabling attackers to steal data. Attackers also released another malicious package named "solidity", mimicking the legitimate extension's name, with a staggering 2 million downloads. This incident underscores the growing threat of malicious open-source packages and how search ranking algorithms can be exploited.

Read more
Development

Americans More Concerned Than Excited About AI's Rise

2025-09-19
Americans More Concerned Than Excited About AI's Rise

A Pew Research Center survey of 5,023 U.S. adults reveals widespread concern over the increasing use of AI in daily life. While many are open to AI assisting with everyday tasks, a majority fear its negative impact on creative thinking and meaningful relationships. Americans are largely against AI involvement in personal matters like religion and matchmaking, but more accepting of its use in data-heavy fields such as medicine and finance. The study highlights a significant gap between the perceived importance of detecting AI-generated content and the public's confidence in their ability to do so, revealing a complex and cautious attitude towards AI's societal impact.

Read more
AI

Remotely Unlocking macOS FileVault via SSH

2025-09-19

With FileVault enabled in macOS, the data volume is locked and inaccessible during and after boot until password authentication. Since OpenSSH configuration files reside on the data volume, standard SSH authentication is unavailable. However, with Remote Login enabled, SSH password authentication can unlock the data volume remotely. After unlocking, macOS briefly disconnects SSH to mount the volume and start dependent services, then SSH resumes fully. This capability appeared in macOS 26 Tahoe.

Read more
Development

Tattoy: Level Up Your Terminal with GPU-Powered Effects

2025-06-13
Tattoy: Level Up Your Terminal with GPU-Powered Effects

Tattoy is a terminal enhancement framework that renders graphics using UTF8 half-blocks, supporting GPU shaders and ShaderToy shaders, and provides a live-updating minimap of the terminal scrollback. It automatically adjusts text contrast, is compatible with existing shells and themes, and allows running commands in the background, such as audio visualizations or system monitors. Plus, Tattoy features a plugin system enabling developers to extend functionality using any language.

Read more

Triforce: A Beamformer for Apple Silicon Laptops

2025-03-25
Triforce: A Beamformer for Apple Silicon Laptops

Triforce implements a Minimum Variance Distortionless Response adaptive beamformer for Apple Silicon MacBook microphones. Apple's microphone arrays (triangle or linear) are overly sensitive and omnidirectional, requiring beamforming to isolate desired signals and reduce background noise. This project aims to provide an accessible beamformer, potentially less performant than Apple's implementation, but with minimal dependencies and open to community contributions.

Read more
Development beamforming

UK's Age-Verification Loophole: VPNs Enable Minors to Bypass Porn Filters

2025-08-19
UK's Age-Verification Loophole: VPNs Enable Minors to Bypass Porn Filters

England's children's commissioner is urging the government to address a significant loophole in its new online safety regulations: the use of VPNs by minors to circumvent age restrictions. A recent report reveals a concerning number of young people accessing pornography before age 18, despite the implementation of mandatory age checks for commercial porn sites. The surge in VPN usage post-regulation highlights the ineffectiveness of current measures. While the government claims no plans to ban VPNs, it intends to collaborate with providers to implement robust age verification, potentially impacting the privacy and security of legitimate users, including schools relying on VPNs for secure access to internal systems. This move represents a significant challenge in balancing child safety with online freedoms.

Read more
Tech

Bouncing Balls in a Spinning Hexagon: A Pygame Implementation

2025-05-12

This is a Pygame program simulating multiple balls bouncing inside a rotating hexagon. The program creates several balls with random initial velocities and positions, simulating gravity and friction. Balls bounce off the rotating hexagon using reflection laws. Vector calculations are used to handle collisions and reflections. The game updates and renders at 60 frames per second, resulting in a smooth visual experience.

Read more

US Halts Global Air Quality Data Sharing: A Public Health Crisis Looms

2025-03-06
US Halts Global Air Quality Data Sharing: A Public Health Crisis Looms

The US government has stopped sharing air quality data collected from its embassies and consulates due to funding cuts, raising concerns among scientists worldwide. This data was crucial for monitoring global air quality and improving public health, particularly in developing countries. The loss of this reliable, independent data source will leave many vulnerable populations, especially in heavily polluted areas like Pakistan and India, at greater risk. While some nations plan to bolster their own monitoring efforts, this won't fully compensate for the significant gap left by the US's decision. The move, seen as part of the Trump administration's deprioritization of environmental initiatives, highlights the importance of international collaboration in tackling global environmental challenges.

Read more
Tech

Hacker News Desktop Client Built with Rust

2025-05-19
Hacker News Desktop Client Built with Rust

A sleek Hacker News desktop application built with Rust and egui is now available! Enjoy a clean, modern interface for browsing top stories from various sections: Hot, New, Show HN, Ask HN, Jobs, and Best. Comments are displayed in a threaded, Reddit-style format with auto-folding and adjustable font size. Offline caching, favorites, and powerful search/filtering capabilities enhance the user experience, providing seamless access to Hacker News anytime, anywhere.

Read more
Development Desktop App

Ryzen 7 9800X3D Teardown Reveals Mostly Dummy Silicon

2024-12-18
Ryzen 7 9800X3D Teardown Reveals Mostly Dummy Silicon

A teardown of AMD's Ryzen 7 9800X3D processor reveals a surprising finding: the majority of its volume is comprised of dummy silicon for structural integrity. While the SRAM cache die is significantly smaller than the compute die, AMD has added a substantial layer of dummy silicon above and below to protect the thin, fragile components. This results in a total package thickness of roughly 800µm, with dummy silicon accounting for a staggering 93%. Despite the seemingly wasteful design, it ensures stability and thermal performance. AMD is expected to announce 12-core and 16-core Ryzen 9 X3D processors soon.

Read more
Hardware

GitHub Code Suggestion Application Restrictions

2025-03-22
GitHub Code Suggestion Application Restrictions

This text lists various limitations encountered when applying code suggestions in GitHub's code review process. These include: no code changes made, pull request closed or merged, viewing a subset of changes, only one suggestion per line applicable, applying suggestions on deleted lines is unsupported, suggestion already applied or marked resolved, suggestions from pending reviews cannot be applied, and suggestions on multi-line comments are not allowed. These restrictions ensure the integrity and accuracy of the code review process.

Read more
Development Code Suggestions

Germany's Isar Aerospace Launches Spectrum Rocket, Marking a Pivotal Step Towards European Space Independence

2025-04-01
Germany's Isar Aerospace Launches Spectrum Rocket, Marking a Pivotal Step Towards European Space Independence

Germany's Vice Chancellor and Economy Minister, Robert Habeck, lauded the successful launch of Isar Aerospace's Spectrum rocket, highlighting Germany's advancements in innovative space technology and its crucial role in securing Europe's independent access to space. Spectrum, Germany's largest domestically built launch vehicle since WWII, represents a significant leap. The launch employed SpaceX's iterative development model, contrasting sharply with Europe's traditional approach. This marks a shift in European space ambitions, aiming to break free from reliance on other nations for space technology.

Read more

Sparrow: A Lightweight C++ Implementation of Apache Arrow

2025-02-01
Sparrow: A Lightweight C++ Implementation of Apache Arrow

Sparrow is a new C++ library designed to simplify the integration of Apache Arrow's columnar format. Born from the needs of projects like ArcticDB, it provides a lightweight, modern C++ API focused on reading and writing Arrow data. Leveraging C++ standard library iterators, ranges, and concepts, Sparrow offers a clean and easy-to-use interface, facilitating integration with existing C++ projects. It supports various data types, including null value handling, and provides builders to simplify the creation of complex data structures.

Read more
Development Columnar Storage

Librebox: An Open-Source Roblox-Compatible Game Engine Emerges

2025-08-23
Librebox: An Open-Source Roblox-Compatible Game Engine Emerges

Librebox is a new open-source game engine running Luau, aiming to replicate the Roblox Public API for seamless code compatibility. Developers gain complete control, building immersive games with a familiar interface while owning their platform. Currently in a demo stage, it boasts basic scene rendering, lighting, and shadows, with future plans including physics, networking, and a full feature set. Librebox is completely free and open-source, independent of Roblox's code or assets, offering a compelling alternative for game developers seeking freedom and ownership.

Read more
Game

New Horizons' Pluto Flyby: A Journey Across an Icy World

2025-05-18

The New Horizons spacecraft flew past Pluto in July 2015 at a speed of about 80,000 kilometers per hour, capturing stunning images. This two-minute time-lapse video, created by enhancing and combining these images, simulates a flyover of Pluto's surface. The video reveals mountains composed of water ice, plains of solid nitrogen, and strange polygonal nitrogen ice formations, possibly originating from Pluto's relatively warm interior. The video concludes over terrain dubbed 'bladed' due to its 500-meter-high ridges separated by kilometer-sized gaps. Due to its momentum, New Horizons cannot return and is now heading out of our Solar System.

Read more

DIY Perks: Hacking an LCD Screen for OLED-Level Blacks

2025-03-08
DIY Perks: Hacking an LCD Screen for OLED-Level Blacks

Remember the rich blacks and vibrant colors of CRT TVs? DIY Perks shows how to achieve similar results with an LCD screen. By removing the backlight from an older LCD and using a de-wheeled DLP projector to project a high-res luminance map onto the back of the screen, they dramatically improve black levels and contrast. This clever hack bypasses the limitations of traditional LCD backlighting, producing an image comparable to OLED displays. A must-see for retro enthusiasts and anyone seeking superior image quality.

Read more

W3C Calls for Immediate Deprecation of Third-Party Cookies

2025-05-02

The World Wide Web Consortium's Technical Architecture Group (TAG) has issued a statement urging all browsers to immediately drop support for third-party cookies. These cookies pose a significant threat to user privacy, enabling widespread cross-site tracking. While removing them impacts some existing functionalities (like single sign-on and ad targeting), the TAG argues that developing privacy-preserving alternatives is paramount. They stress that any replacements must undergo rigorous scrutiny to ensure they don't recreate the same problems and call for browsers to establish clear timelines for the complete removal of third-party cookies.

Read more
Tech

YouTube Ads on TikTok: A Bold Play for Creators Amidst Uncertainty

2025-02-09
YouTube Ads on TikTok: A Bold Play for Creators Amidst Uncertainty

As TikTok faces a potential US ban, YouTube is cleverly using TikTok itself to advertise and lure its creators to its platform. Ads showcasing YouTube's resources and community support highlight TikTok's uncertain future. This strategic move underscores YouTube's competitive advantage and the challenges facing TikTok. Even MrBeast, TikTok's top creator, is reportedly in talks with bidders aiming to acquire TikTok's US operations, further highlighting the intense competition.

Read more

The 1700 Orphan Tsunami: A Transpacific Scientific Detective Story

2025-03-31

A mysterious tsunami struck Japan in January 1700, its origin initially a puzzle. Only in the mid-1990s, through a series of discoveries investigated in both North America and Japan, did scientists uncover the truth: the tsunami stemmed from an earthquake along the coast of northwestern North America. The book, "The Orphan Tsunami of 1700," recounts this transpacific scientific detective story. Its discoveries underpin many of today's precautions against earthquakes and tsunamis in the Cascadia region, and provides a stark contrast and warning when compared to the 2011 Japanese tsunami.

Read more
Tech earthquake

Landmark Alzheimer's Study Possibly Faked: 16 Years of Research Misdirected?

2025-06-13
Landmark Alzheimer's Study Possibly Faked: 16 Years of Research Misdirected?

A landmark 2006 Nature study on Alzheimer's disease, which proposed the amyloid hypothesis (that amyloid-beta protein is the cause), may have been based on fabricated images. This has cast doubt on 16 years of research and funding allocation. A whistleblower revealed potential image manipulation, prompting an investigation. Millions of dollars in research funding may have been wasted, and more importantly, millions of Alzheimer's patients may have missed out on effective treatments. The investigation is ongoing, and the research community is reevaluating its approach to Alzheimer's research, advocating for broader funding distribution to prevent similar incidents.

Read more

Google Tightens Android Sideloading, Sparking Debate on Privacy vs. Freedom

2025-06-05
Google Tightens Android Sideloading, Sparking Debate on Privacy vs. Freedom

Google has implemented new restrictions on sideloading Android apps in Singapore, citing security concerns. This blocks the installation of apps requesting sensitive permissions if downloaded outside the Play Store. While aimed at preventing fraud and malware, critics argue it strengthens Google's app distribution monopoly, limiting user freedom and innovation. In contrast, Purism offers Librem phones running PureOS, a privacy-focused OS emphasizing user autonomy and data sovereignty, providing an alternative to Big Tech's surveillance capitalism.

Read more

Instant Graphics and Sound on Atari ST BBS: A Retro Tech History

2025-01-06

This multi-part series chronicles the rise and impact of the "Instant Graphics and Sound" (IGS) format on Atari ST bulletin board systems (BBSs). From its beginnings in 1988 within an Atari user group in Florida to the psychedelic animations by artist Steve Turnbull on CrossNet in 1991, the series explores how IGS transformed the Atari BBS scene. It features stories of developers like Larry Mears and Steve Turnbull, and highlights the vibrant community interaction and contributions.

Read more

Critical: Local Privilege Escalation Vulnerabilities Found in Linux

2025-06-23
Critical: Local Privilege Escalation Vulnerabilities Found in Linux

Two newly discovered local privilege escalation (LPE) vulnerabilities allow attackers to gain root privileges on systems running major Linux distributions. The first flaw (CVE-2025-6018) resides in the PAM framework configuration on openSUSE Leap 15 and SUSE Linux Enterprise 15, granting local attackers 'allow_active' user privileges. The second (CVE-2025-6019), found in libblockdev, allows an 'allow_active' user to gain root via the udisks daemon. Qualys TRU has developed proof-of-concept exploits, successfully achieving root on Ubuntu, Debian, Fedora, and openSUSE Leap 15. Immediate patching is crucial.

Read more

Shader Minifier: The Secret Weapon Behind Tiny, Stunning Demoscene Animations

2025-05-13
Shader Minifier: The Secret Weapon Behind Tiny, Stunning Demoscene Animations

Shader Minifier is a tool that minifies GLSL code, enabling demoscene artists to create complex computer animations in incredibly small file sizes. This blog post details its evolution, from simple space and comment removal to advanced optimizations like static analysis and function inlining. The author recounts how Shader Minifier shrunk a 47KB shader to 5.2KB after compression, dramatically improving development efficiency. The core principle involves leveraging compression algorithms by cleverly reusing variable names and optimizing functions to reduce code size and boost compression rates. While already successful, the author explores further improvements to tackle the challenges of even larger 64KB animations.

Read more
Development code compression

LL3M: Revolutionizing 3D Modeling with Large Language Models

2025-08-17

LL3M is a groundbreaking 3D modeling system that uses a team of large language models to write Python code for creating and editing 3D assets in Blender. From simple text instructions, it generates expressive shapes from scratch and performs complex, precise geometric manipulations. Unlike previous methods focused on specific subtasks or constrained procedures, LL3M creates unconstrained assets with geometry, layout, and appearance. Its iterative refinement and co-creation pipeline allows for continuous high-level user feedback and further editing via clear code and parameters.

Read more
AI

RubyLLM: An Elegant Ruby Library for AI Interaction

2025-03-15
RubyLLM: An Elegant Ruby Library for AI Interaction

RubyLLM is a clean and easy-to-use Ruby library that simplifies interaction with various AI models, including OpenAI, Anthropic, Gemini, and DeepSeek. It provides a unified API and data format, eliminating the headaches of juggling incompatible APIs from different AI providers. RubyLLM supports a wide range of AI functionalities, such as chat, image and audio analysis, PDF processing, image generation, vector embeddings, and custom tool integration. Seamless integration with Rails allows for easy persistence of chat history. Its design philosophy prioritizes elegant Ruby code over complex configurations and callbacks, making AI interaction a joy.

Read more
Development

Debouncing in Programming: Efficiently Handling User Input

2025-08-07
Debouncing in Programming: Efficiently Handling User Input

In programming, debouncing is a technique used to handle frequent events, such as continuous user input. It discards operations that occur too closely together within a specified time interval, consolidating them into a single invocation to prevent UI lag. For example, when a user types a search query, debouncing waits for a pause before executing the search, improving efficiency and user experience. Similar to throttling, but unlike throttling which limits the frequency of continuous operations, debouncing waits for a period of inactivity before acting.

Read more

Hacking UX Design: Building Great Experiences Without a Designer

2025-03-12
Hacking UX Design:  Building Great Experiences Without a Designer

In startups, speed is key. This article provides a pragmatic approach to UX design for non-designers. The author advocates leveraging existing design patterns from competitors and UI libraries for common functionalities like account creation and password resets. The focus is on usability over novelty, using tools like ChatGPT to identify and address potential pain points in the user flow. By prioritizing established conventions and iterating quickly, startups can achieve a great user experience without the time and resource commitment of hiring a dedicated designer. Innovation should be focused on core value propositions, while leveraging existing best practices for everything else.

Read more
Development UX Design

AI's Bottleneck: Data, Not Algorithms?

2025-06-30
AI's Bottleneck: Data, Not Algorithms?

AI has seen incredible progress, but the pace seems to be slowing. This article argues that past major AI breakthroughs (DNNs, Transformers, RLHF, reasoning models) stemmed not from novel algorithms, but from unlocking new data sources (ImageNet, web text, human feedback, verifiers). The author suggests future breakthroughs will likely come not from algorithmic innovation, but from effectively utilizing new data sources like video and robotic sensors, as existing datasets may be approaching their knowledge limits.

Read more

Chrome for Android Finally Gets a Bottom Address Bar

2025-06-25
Chrome for Android Finally Gets a Bottom Address Bar

Google has finally added a much-requested feature to Chrome for Android: a bottom address bar. Users can now move the address bar, tab switcher, and other shortcuts to the bottom of the screen, making one-handed use much easier. The update is optional, allowing users to choose between top and bottom placement in settings. The rollout begins today and will reach all users in the coming weeks. iOS users gained this feature in 2023.

Read more
Development Bottom Address Bar
1 2 308 309 310 312 314 315 316 596 597