Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Advancing voice intelligence with new models in the API
Explore new realtime voice models in the OpenAI API that can reason, translate, and transcribe speech, enabling more natural and intelligent voice experiences.
AI Slop is Killing Online Communities
Comments
Removing fsync from our local storage engine
36 points, 14 comments on Hacker News
PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux
Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems. "While these wheel packages do implement the features described on their PyPI web pages, their true purpose is to covertly deliver malicious files," Kaspersky
ZAYA1-8B: An 8B Moe Model with 760M Active Params Matching DeepSeek-R1 on Math
4 points, 0 comments on Hacker News
Show HN: Social Network for Corporate Cringe
16 points, 14 comments on Hacker News
Mythical Man Month
49 points, 39 comments on Hacker News
Making LLM Training Faster with Unsloth and NVIDIA
40 points, 2 comments on Hacker News
Leading Open Source Author Calls for Verification over Trust in Software Supply Chains
In a blog post published in March 2026, Daniel Stenberg, creator and lead developer of curl, makes the case that the software industry's default position of trusting well-known components is no longer adequate. Stenberg argues that users and organisations should actively verify the software they consume, and he uses curl's own practices as a concrete example of how that can be done. By Matt Saunders
Show HN: Agent-skills-eval – Test whether Agent Skills improve outputs
20 points, 3 comments on Hacker News
Show HN: Trust – Coding Rust like it's 1989
20 points, 5 comments on Hacker News
The surprisingly complex journey to text-selectable client-side generated PDFs
15 points, 2 comments on Hacker News
Making your own programming language is easier than you think (but also harder)
Comments
Show HN: Kstack – Skill pack for monitoring/troubleshooting K8s in Claude Code
11 points, 3 comments on Hacker News
aube, a fast Node.js package manager
Comments
Building the TD4 4-Bit CPU
Article URL: https://jayakody2000lk.blogspot.com/2026/05/building-td4-4-bit-cpu.html Comments URL: https://news.ycombinator.com/item?id=48045384 Points: 19 # Comments: 6
vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the sandbox and execute arbitrary code on susceptible systems. vm2 is an open-source library used to run untrusted JavaScript code inside a secure sandbox by intercepting and proxying JavaScript objects to prevent sandboxed code from accessing the host
ProgramBench: Can Language Models Rebuild Programs from Scratch?
49 points, 29 comments on Hacker News
Diskless Linux boot using ZFS, iSCSI and PXE
95 points, 47 comments on Hacker News
Permacomputing Principles
Article URL: https://permacomputing.net/principles/ Comments URL: https://news.ycombinator.com/item?id=48044638 Points: 24 # Comments: 0
The Vatican's Website in Latin
Article URL: https://www.vatican.va/latin/latin_index.html Comments URL: https://news.ycombinator.com/item?id=48044311 Points: 68 # Comments: 43
A new hash table for the Lwan web server
Comments
Testing ads in ChatGPT
OpenAI begins testing ads in ChatGPT to support free access, with clear labeling, answer independence, strong privacy protections, and user control.
Simplex rethinks software development with Codex
Simplex boosts software development with ChatGPT Enterprise and Codex, reducing design, build, and testing time while scaling AI-driven workflows.
Introducing Trusted Contact in ChatGPT
Introducing Trusted Contact in ChatGPT, an optional safety feature that notifies someone you trust if serious self-harm concerns are detected.
Google’s Prompt API
Comments
What British people mean when they say 'sorry'
Article URL: https://www.bbc.com/travel/article/20260506-what-british-people-really-mean-when-they-say-sorry Comments URL: https://news.ycombinator.com/item?id=48043184 Points: 24 # Comments: 12
A Path Not Taken for OxCaml
Comments
cursed_browser: A web browser with no rendering engine — the VLM reads the HTML and hallucinates the page
Comments
SQLite Is a Library of Congress Recommended Storage Format
Article URL: https://sqlite.org/locrsf.html Comments URL: https://news.ycombinator.com/item?id=48042434 Points: 55 # Comments: 18
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles