Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Go-flavored concurrency in C
Comments
Show HN: OpenClawMachines – Extending OpenClaw to the Enterprise
Article URL: https://github.com/mathaix/OpenClawMachines Comments URL: https://news.ycombinator.com/item?id=48896179 Points: 17 # Comments: 19
Vāgdhenu: A Sanskrit Chanting TTS System
94 points, 9 comments on Hacker News
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in native C++, according to Jamf Threat Labs. "It validates the victim's login password locally before
Simulating everything, sort of: The promise and limits of world models
16 points, 0 comments on Hacker News
Mathematicians still don't know the fastest way to multiply numbers
30 points, 6 comments on Hacker News
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty allow-list kept it switched off, and no proof has emerged that it ever gathered or sent a single browsing domain. The
A Second-Grade Teacher Revived a Beloved Video Game
57 points, 23 comments on Hacker News
Solod: Go can be a better C
67 points, 16 comments on Hacker News
Human Emacs
LLM-generated contributions free (possible) fork of GNU Emacs. Comments
Designing APIs for Agents
21 points, 5 comments on Hacker News
Apple's new SpeechAnalyzer API, benchmarked against Whisper and its predecessor
370 points, 160 comments on Hacker News
Just Let Me Write Digits
Comments
World GeoHistoGram
6 points, 0 comments on Hacker News
DOGE is done. What happened to its records?
11 points, 0 comments on Hacker News
Show HN: Jacquard, a programming language for AI-written, human-reviewed code
12 points, 5 comments on Hacker News
Don’t Use aria-label on Static Text Elements (2024)
Comments
How early SunOS did diskless workstations before NFS
Comments
LAPD lets contract with surveillance giant Flock expire
Article URL: https://techcrunch.com/2026/07/13/lapd-lets-contract-with-surveillance-giant-flock-expire-citing-serious-concerns-over-civil-liberties-and-privacy/ Comments URL: https://news.ycombinator.com/item?id=48893947 Points: 34 # Comments: 8
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That's supposed to be the good news. The catch is that the attackers have the same tools, pointed the other way, and they don't file tickets. That's the shape of this week. Trusted code turns on the people who installed it. Old bugs from last year are still landing because the fix sat in a queue too
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys -- in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency's initial response provide important lessons that all security teams should absorb.
The art and engineering of Sega CD Silpheed
Article URL: https://fabiensanglard.net/silpheed/index.html Comments URL: https://news.ycombinator.com/item?id=48893639 Points: 51 # Comments: 6
Show HN: Hackney – Compare Uber, Lyft, Waymo, and Robotaxi Prices
37 points, 26 comments on Hacker News
Precursor
Article URL: https://blog.cloudflare.com/introducing-precursor/ Comments URL: https://news.ycombinator.com/item?id=48893446 Points: 76 # Comments: 70
From Muon to Gradient Clipping: Some Thoughts on QK Stability
11 points, 0 comments on Hacker News
The Path to Sovereign Data: Challenges and Priorities in Local-First Computing
A panel on data ownership challenged the definition of "ownership," arguing it must extend beyond simple account control to include structural independence, interoperability, and community governance. Speakers like Zenna Fiscella, Paul Frazee, Boris Mann, and Robin Berjon emphasised the need for shared standards, unbundled platforms, and better tools to support user sovereignty. By Olimpiu Pop
How DoorDash Built an AI Shopping Assistant That Doesn’t Rely on the LLM Alone
DoorDash details the architecture behind Ask DoorDash, its AI-powered conversational shopping assistant, combining LLMs, specialized AI agents, MCP-based tooling, and an intelligence layer with persistent consumer memory and live backend data. Early results show up to 24% higher checkout conversion, 17% larger baskets, and improved intent accuracy using memory-backed sessions. By Leela Kumili
Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
Article URL: https://github.com/clawkwork/clawk Comments URL: https://news.ycombinator.com/item?id=48892859 Points: 83 # Comments: 95
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false "fact" about the user, hide the change, and quietly steer its answers in later sessions. When it works, the person reads an ordinary-looking reply and never learns their assistant was tampered with. The
Grok uploaded my user directory to xAI's servers
Article URL: https://twitter.com/a_green_being/status/2076598897779020159 Comments URL: https://news.ycombinator.com/item?id=48892512 Points: 301 # Comments: 152
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles