Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
How I use HTMX with Go
Article URL: https://www.alexedwards.net/blog/how-i-use-htmx-with-go Comments URL: https://news.ycombinator.com/item?id=48912175 Points: 12 # Comments: 0
StubHub's 'marketplace for fans' is run by a mass scalper, SEC filings reveal
Article URL: https://www.cbc.ca/news/world/stubhub-ceo-class-action-scalping-9.7268987 Comments URL: https://news.ycombinator.com/item?id=48912100 Points: 52 # Comments: 19
I also filed the corners off my MacBook
189 points, 79 comments on Hacker News
Speech Recognition and TTS in less than 500kb
103 points, 12 comments on Hacker News
Microsoft Patches a Record 570 Security Flaws
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.
Blender 5.2 LTS
191 points, 76 comments on Hacker News
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data
SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP. The vulnerability in question is CVE-2026-44747 (CVSS score: 9.9), an out-of-bounds write flaw that allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
Article URL: https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left Comments URL: https://news.ycombinator.com/item?id=48910676 Points: 136 # Comments: 52
MoonBASIC: A modern BASIC for building 2D and 3D games
26 points, 7 comments on Hacker News
Bonsai 27B: A 27B-Class model that runs on a phone
Article URL: https://prismml.com/news/bonsai-27b Comments URL: https://news.ycombinator.com/item?id=48910545 Points: 262 # Comments: 90
Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your latest Google Doc and its comments, and your Calendar. Both this and ClaudeBleed need a rogue extension that can already run a script on claude.ai; the difference is scope. Anthropic restricted the arbitrary-prompt path in May as part of its response to the
Kontigo (YC S24) Is Hiring (Head of Security)
Article URL: https://www.ycombinator.com/companies/kontigo/jobs/uNttrlv-head-of-security Comments URL: https://news.ycombinator.com/item?id=48909820 Points: 0 # Comments: 0
The Tower Keeps Rising
Article URL: https://lucumr.pocoo.org/2026/7/13/the-tower-keeps-rising/ Comments URL: https://news.ycombinator.com/item?id=48909785 Points: 263 # Comments: 125
Temper Language
Comments
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments. "LabubaRAT creates a reusable foothold for hands-on activity," Blackpoint Cyber researchers Sam Decker and Nevan Beal said in an analysis published today. "Once deployed, it can profile the host,
Measuring Input Latency on Linux: X11 vs. Wayland, VRR, and DXVK
Article URL: https://marco-nett.de/blog/measuring-input-latency-on-linux-x11-vs-wayland-vrr-dxvk/ Comments URL: https://news.ycombinator.com/item?id=48909424 Points: 325 # Comments: 195
Too many words about DIDs
Comments
Launch HN: Agnost AI (YC S26) – Extract user feedback from agent conversations
Hey HN, we’re Shubham & Parth, childhood friends building Agnost AI (https://agnost.ai), product analytics for teams building chat and voice agents. We read production conversations and find behavioral failures like users rageprompting (cursing at the agent), repeatedly rephrasing the same request, correcting the agent, asking for missing features, or leaving after an answer that was technically successful. We have an interactive demo with no signup here: https://app.agnost.ai?demo=true Here's a demo video: https://www.tella.tv/video/agnost-ai-launch-hn-demo-9haa The core problem is that chat and voice products do not have the same metrics as web apps. When the product interface is language, clicks and funnels become much less useful. Users also rarely give explicit feedback, and when they do it's usually sugarcoated. I barely type /feedback in Claude or Codex myself. Most users just curse, ask again, correct the agent, or leave. So product engineers get technical visibility from laten
Pseudpocalypse
44 points, 19 comments on Hacker News
How my images are dithered
Comments
Show HN: Opening lines of famous literary works
24 points, 11 comments on Hacker News
I'm a USB-C Maximalist
Article URL: https://shkspr.mobi/blog/2026/07/im-a-usb-c-maximalist/ Comments URL: https://news.ycombinator.com/item?id=48908214 Points: 91 # Comments: 160
Are we offloading too much of our thinking to AI?
68 points, 50 comments on Hacker News
Show HN: Low-latency local LLM runner via OpenJDK Panama FFM (Java 22)
16 points, 2 comments on Hacker News
The Agentic Loop: Three loops in a trench coat
Article URL: https://www.bobbytables.io/p/the-agentic-loop-three-loops-in-a Comments URL: https://news.ycombinator.com/item?id=48907672 Points: 60 # Comments: 12
The Zen of Parallel Programming
56 points, 3 comments on Hacker News
New York becomes the first state to impose a data center moratorium
95 points, 61 comments on Hacker News
Agnes Callard’s theory of the uni-context
55 points, 40 comments on Hacker News
Reviving a 15-year-old netbook with Arch Linux
110 points, 69 comments on Hacker News
The Conservationist Who Turned 40 Terabytes of Public Data into a Video Game
34 points, 3 comments on Hacker News
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles