Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
The Day I Logged 1 In Every 2000 Public IPv4: Visualizing The AI Scraper DDoS
Comments
GitHub Targets Large Merge Problem with Stacked PRs
GitHub has launched a native stacked pull request workflow through a new CLI extension called gh-stack, closing a gap that third-party tools have filled for several years. It aims to resolve the problem where large pull requests are hard to review, slow to merge and prone to conflicts, with GitHub stating that reviewers lose context, feedback quality drops, and the whole team slows down. By Matt Saunders
Amazon CloudWatch Introduces OpenTelemetry Metrics Support in Preview
AWS has introduced the public preview of OpenTelemetry metrics support in Amazon CloudWatch. This update allows developers to send metrics directly to CloudWatch using the OpenTelemetry protocol and view them alongside existing AWS service metrics. By Renato Losio
Low-Compilation-Cost Register Allocation in LLVM-Based Binary Translation
Article URL: https://dl.acm.org/doi/abs/10.1145/3767295.3803591 Comments URL: https://news.ycombinator.com/item?id=47944931 Points: 39 # Comments: 0
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as CVE-2026-42208 (CVSS score: 9.3), is an SQL injection that could be exploited to modify the underlying
Cybersecurity in the Intelligence Age
OpenAI outlines a five-part action plan for strengthening cybersecurity in the Intelligence Age, focused on democratizing AI-powered cyber defense and protecting critical systems.
Apple wants to kill your Time Capsule, but they run NetBSD so they can’t
Comments
Bugs Rust won't catch
146 points, 49 comments on Hacker News
When the Internet Was a Place
30 points, 4 comments on Hacker News
Code-golfing riki's HTML templating engine in Julia
Comments
We decreased our LLM costs with Opus
80 points, 26 comments on Hacker News
Maladaptive Frugality
43 points, 23 comments on Hacker News
Claude system prompt bug wastes user money and bricks managed agents
Article URL: https://github.com/anthropics/claude-code/issues/49363 Comments URL: https://news.ycombinator.com/item?id=47942492 Points: 7 # Comments: 1
ChatGPT serves ads. Here's the full attribution loop
Article URL: https://www.buchodi.com/how-chatgpt-serves-ads-heres-the-full-attribution-loop/ Comments URL: https://news.ycombinator.com/item?id=47942437 Points: 60 # Comments: 15
Claude for Creative Work
Article URL: https://www.anthropic.com/news/claude-for-creative-work Comments URL: https://news.ycombinator.com/item?id=47942386 Points: 6 # Comments: 3
Apple CMF (Color-Matching Functions) 2026
43 points, 1 comments on Hacker News
London to Calcutta by Bus (2022)
67 points, 25 comments on Hacker News
Carrot Disclosure: Forgejo
Article URL: https://dustri.org/b/carrot-disclosure-forgejo.html Comments URL: https://news.ycombinator.com/item?id=47941590 Points: 77 # Comments: 18
From GitHub to Codeberg/Forgejo
Comments
I Built My Own Hair Electrolysis Machine
Comments
Before GitHub
Article URL: https://lucumr.pocoo.org/2026/4/28/before-github/ Comments URL: https://news.ycombinator.com/item?id=47940921 Points: 224 # Comments: 59
Ditching GitHub
Comments
Denuvo has been cracked in all single-player games it previously protected
351 points, 206 comments on Hacker News
How Slack Manages Context in Long-Running Multi-agent Systems
To sustain productivity in long-running agent systems, Slack engineers moved away from accumulating chat logs and started using structured memory, validation, and distilled truth to maintain coherence and accuracy of long-running agent systems. By Sergio De Simone
I won a championship that doesn't exist
Article URL: https://ron.stoner.com/How_I_Won_a_Championship_That_Doesnt_Exist/ Comments URL: https://news.ycombinator.com/item?id=47940389 Points: 69 # Comments: 49
Drone pilot makes US rescind no-fly zones around unmarked, moving ICE vehicles
Article URL: https://arstechnica.com/gadgets/2026/04/no-fly-zones-around-moving-ice-vehicles-this-drone-pilot-fought-back-and-won/ Comments URL: https://news.ycombinator.com/item?id=47940271 Points: 161 # Comments: 54
200 Journalists Applaud the Internet Archive's Role in Preserving Public Record
Article URL: https://www.savethearchive.com/journalists/ Comments URL: https://news.ycombinator.com/item?id=47939695 Points: 52 # Comments: 0
Ghostty is leaving GitHub
Article URL: https://mitchellh.com/writing/ghostty-leaving-github Comments URL: https://news.ycombinator.com/item?id=47939579 Points: 1511 # Comments: 471
OpenAI models coming to Amazon Bedrock: Interview with OpenAI and AWS CEOs
https://aws.amazon.com/bedrock/openai/ https://www.aboutamazon.com/news/aws/bedrock-openai-models https://openai.com/index/openai-on-aws/ https://x.com/amazon/status/2049178618639839427 Comments URL: https://news.ycombinator.com/item?id=47939320 Points: 167 # Comments: 62
Using a 1978 terminal in 2026 (DEC VT-100)
Comments
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles