Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet
Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42. The attack targeting TBK DVR devices has been found to exploit CVE-2024-3721 (CVSS score: 6.3), a medium-severity command injection vulnerability affecting
A story about how I dug into the PostgreSQL sources to write my own WAL receiver
11 points, 1 comments on Hacker News
Show HN: Sfsym – Export Apple SF Symbols as Vector SVG/PDF/PNG
I found myself reaching for SF Symbols' 'Copy Image As…' quite often during agentic design sessions, so I made a command-line tool that the agent can use by itself. It exports Apple SF Symbols as SVG, PDF, or PNG. The vector paths come directly from macOS's symbol renderer. Internally it reaches a private ivar on NSSymbolImageRep to get the CUINamedVectorGlyph, draws into a CGPDFContext, then walks the PDF content stream back out as SVG `d` commands. The output matches what the system draws, rather than an approximation traced from rasters. A few things about it: - Every subcommand accepts `--json`, and `sfsym schema` returns a machine-readable description of the whole CLI. - Symbol enumeration reads the OS's Assets.car BOM tree, so the list of 8,300+ names stays current with macOS updates without a version table in the binary. - Each SVG ` ` carries a `data-layer` attribute, so you can retheme in CSS without touching geometry. It's been saving me a bunch of clicking. Please let me kno
Ternary Bonsai: Top Intelligence at 1.58 Bits
13 points, 3 comments on Hacker News
Lenses in Rust and My Solution
Comments
Bodega Cats of New York
74 points, 33 comments on Hacker News
Deleteduser.com —a $15 PII Magnet
Comments
Show HN: I made a calculator that works over disjoint sets of intervals
I've been studying interval arithmetic for the past few weeks and it's a really interesting field because while there is a ton of super interesting research published over the past decades, it has never really gotten the recognition that it deserves, IMO. One reason for this is that standard interval arithmetic has really poor handling of division by intervals containing zero. If you compute 1 / [-1, 2] in regular interval arithmetic, you get either [-∞, +∞], or you have to say that the operation is undefined. Both solutions are virtually useless. The real answer of course is [-∞, -1] U [0.5, +∞]: i.e. a union of two disjoint intervals. This is useful because you can confidently exclude a non empty set of the real numbers ([-1, 0.5]) from the set of possible values that you can get by dividing 1 by a number between -1 and 2. But this definition of interval division yields a value that is not an interval. This is a problem if you want to define a closed arithmetic system, where you can
Casus Belli Engineering
Article URL: https://marcosmagueta.com/blog/casus-belli-engineering/ Comments URL: https://news.ycombinator.com/item?id=47812331 Points: 27 # Comments: 5
Japan's cherry blossom database, 1,200 years old, has a new keeper
69 points, 7 comments on Hacker News
How to Host a Blog on a Subdirectory Instead of a Subdomain
Article URL: https://www.davidma.org/blog/2025-11-14-host-your-blog-on-a-subdirectory/ Comments URL: https://news.ycombinator.com/item?id=47811442 Points: 10 # Comments: 7
Who Is Blake Whiting?
19 points, 4 comments on Hacker News
Landmark ancient-genome study shows surprise acceleration of human evolution
Related: Ancient DNA reveals pervasive directional selection across West Eurasia [pdf] - https://news.ycombinator.com/item?id=47791282 (64 comments) https://x.com/doctorveera/status/2044679999450664967 (https://xcancel.com/doctorveera/status/2044679999450664967) Comments URL: https://news.ycombinator.com/item?id=47811283 Points: 36 # Comments: 13
Kefir C17/C23 Compiler
19 points, 1 comments on Hacker News
A simplified model of Fil-C
Article URL: https://www.corsix.org/content/simplified-model-of-fil-c Comments URL: https://news.ycombinator.com/item?id=47810872 Points: 93 # Comments: 45
Building ezli.me, a link shortener in Rust
Comments
Focused microwaves allow 3D printers to fuse circuits onto almost anything
53 points, 10 comments on Hacker News
Why is IPv6 so complicated?
Comments
Arc Prize Foundation (YC W26) Is Hiring a Platform Engineer for ARC-AGI-4
Article URL: https://www.ycombinator.com/companies/arc-prize-foundation/jobs/AKZRZDN-platform-engineer-benchmark-lead Comments URL: https://news.ycombinator.com/item?id=47810507 Points: 0 # Comments: 0
Up to 8M Bees Are Living in an Underground Network Beneath This Cemetery
86 points, 12 comments on Hacker News
AppArmor's experimental permissions prompting
Comments
Year of the IPv6 Overlay Network
4 points, 0 comments on Hacker News
Even "cat readme.txt" is not safe
Article URL: https://blog.calif.io/p/mad-bugs-even-cat-readmetxt-is-not Comments URL: https://news.ycombinator.com/item?id=47809190 Points: 70 # Comments: 35
Show HN: How context engineering works, a runnable reference
16 points, 4 comments on Hacker News
All 12 moonwalkers had "lunar hay fever" from dust smelling like gunpowder
Article URL: https://www.esa.int/Science_Exploration/Human_and_Robotic_Exploration/The_toxic_side_of_the_Moon Comments URL: https://news.ycombinator.com/item?id=47808913 Points: 4 # Comments: 0
NeoGeo AES+: SNK announces reissue of retro console without emulation
Article URL: https://www.heise.de/en/news/NeoGeo-AES-SNK-announces-reissue-of-retro-console-without-emulation-11262319.html Comments URL: https://news.ycombinator.com/item?id=47808770 Points: 10 # Comments: 0
Building an emoji list generator with the GitHub Copilot CLI
See how we created an emoji list generator during the Rubber Duck Thursday stream. The post Building an emoji list generator with the GitHub Copilot CLI appeared first on The GitHub Blog.
The lost thesis of Dennis Ritchie
Comments
Show HN: Smol machines – subsecond coldstart, portable virtual machines
Article URL: https://github.com/smol-machines/smolvm Comments URL: https://news.ycombinator.com/item?id=47808268 Points: 28 # Comments: 16
Reading Input from an USB RFID Card Reader
15 points, 4 comments on Hacker News
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles