Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Michael Keating has died
35 points, 19 comments on Hacker News
Get your passwords out of Bitwarden while you still can
88 points, 46 comments on Hacker News
Book Review: On the Calculation of Volume
22 points, 5 comments on Hacker News
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications provider in the Middle East since at least mid-2022. "Showboat is a modular post-exploitation framework designed for Linux systems, capable of spawning a remote shell, transferring files, and functioning as a SOCKS5 proxy," Lumen
Indexing a year of video locally on a 2021 MacBook with Gemma4-31B (50GB swap)
46 points, 17 comments on Hacker News
Rosalind: A genomics toolkit in Rust running whole-genome pipelines on a laptop
101 points, 25 comments on Hacker News
Google's Antigravity Bait and Switch
220 points, 112 comments on Hacker News
Highest Random Weight in Elixir
21 points, 0 comments on Hacker News
AI is just unauthorised plagiarism at a bigger scale
490 points, 358 comments on Hacker News
Church Encoding, Parametricity, and the Yoneda Lemma
Comments
Micropatching Brings the Abandoned Equation Editor Back to Life (2018)
28 points, 6 comments on Hacker News
Magic the Gathering format: Fun 40 (2025)
39 points, 35 comments on Hacker News
A Bipartisan Amendment Would End Police License Plate Tracking Nationwide
94 points, 15 comments on Hacker News
Show HN: I Dedicated 4 Years to Mastering Offline Password Cracking
Hi everyone, I am Bojta Lepenye, and first of all, I want to thank the core developers of Hashcat. In my experience, it is quite literally the most capable tool available for offline password cracking across a wide range of use cases. I have spent the last 4 years (from age 14 to 18) extensively working with Hashcat and the tools surrounding it, and I have documented what I have learned throughout that time (since January 18, 2022) in my first book. During that period, I also had to continuously update and rewrite major sections as the field evolved. One example was the introduction of GPU support for Argon2 and other memory-hard password hashing algorithms, which significantly changed some cracking workflows. My passion for this book, or its “quick starter,” if you will, came from an ethically conducted penetration test I performed with full authorization at my school. This is something I am both hesitant and quite proud to acknowledge. At the beginning, I simply wrote down everything
Who Wins and Who Loses in Prediction Markets? Evidence from Polymarket
58 points, 42 comments on Hacker News
Presentation: The Ironies of A^2 I^2
J. Paul Reed discusses the "ironies of automation" - a 40 years-old concept now amplified by AI. He explains how advanced systems often make the human operator more crucial, not less, while simultaneously degrading the skills needed to intervene. Sharing real-world stories of "AI-fueled" incidents, he shares why over-reliance on AI can double recovery times and how to maintain resilience. By J. Paul Reed
FatGid: FreeBSD 14.x kernel local privilege escalation
43 points, 11 comments on Hacker News
Cekura (YC F24) Is Hiring
1 points, 0 comments on Hacker News
AdventHealth advances whole-person care with OpenAI
AdventHealth is using ChatGPT for Healthcare to streamline workflows, reduce administrative burden, and return more time to patient care.
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
This week starts small. A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At first, it feels like the usual mess. Then you see the pattern: attackers are not always breaking in. They are using the parts we already trust. That is what makes it worrying. The danger is in normal things now - updates, apps, cloud buttons, support chats, trusted accounts. AI
CPPL: A Circuit Prompt Programming Language
22 points, 6 comments on Hacker News
How Platform Engineering Using Golden Bricks Can Enable Fast and Smooth Delivery
Platform engineering should have a product focus, as developers are customers; they must provide composable, self-service capabilities, golden bricks rather than rigid golden paths, so teams can move quickly while maintaining consistency. Success is measured through adoption, developer experience, and business outcomes such as deployment frequency and change failure rate. By Ben Linders
Python 3.15: features that didn't make the headlines
186 points, 81 comments on Hacker News
Flipper One – we need your help
620 points, 285 comments on Hacker News
Lost Images from the 1945 Trinity Nuclear Test Restored
121 points, 31 comments on Hacker News
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091, is rated 7.8 on the CVSS scoring system. Successful exploitation of the flaw could allow an attacker to gain SYSTEM privileges. "Improper link resolution before file access ('link following') in Microsoft Defender
IBM invented semiconductor manufacturing automation
41 points, 1 comments on Hacker News
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automatically. Standard AWS behavior. No one misconfigured anything or violated a policy. Yet that single key, which was easily accessible to a minor-league attacker, could have opened a path to some 98% of entities in the company's cloud
Kubernetes In Anger
Comments
OpenTofu 1.12 The Feature Terraform Never Shipped
The OpenTofu community released version 1.12.0 on May 14, 2026. This update isn’t a complete rewrite, but it does resolve some issues that infrastructure teams have faced for a while. By Claudio Masolo
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles