Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Google Search lets creators know more about their reach
60 points, 30 comments on Hacker News
Show HN: Free Mermaid Diagram Editor
I've been slowly adding some new free tools to Moxie Docs (partly for SEO, partly to illustrate some of our feature sets before any commitment) for some reason this mermaid editor one blew up on Google rankings so I figured I'd share in case people find it useful! We also have ADR, AGENTS.md, LLMs, and a few other free tools. Comments URL: https://news.ycombinator.com/item?id=48825430 Points: 19 # Comments: 5
Git Hash Chain Malleability
Article URL: https://arxiv.org/abs/2607.02820 Comments URL: https://news.ycombinator.com/item?id=48825356 Points: 9 # Comments: 5
Silent speech with ultrasound
19 points, 4 comments on Hacker News
GAO: DOE Is Prematurely Excluding Less Expensive Options for Nuclear Cleanup
146 points, 58 comments on Hacker News
A Final Return for OpenBSD Anti-Return-Oriented Programming Mitigations
Comments
An agent in 100 lines of Lisp
51 points, 1 comments on Hacker News
Satteri: A Markdown pipeline forged in Rust for the JavaScript world
18 points, 5 comments on Hacker News
Every new car sold in the European Union must include a driver monitoring camera
Article URL: https://allaboutcookies.org/eu-mandatory-distracted-driver-system Comments URL: https://news.ycombinator.com/item?id=48823557 Points: 198 # Comments: 230
Men's average testosterone levels have halved in last 50 years
Article URL: https://www.theguardian.com/society/2026/jul/07/mens-average-testosterone-levels-have-halved-in-last-50-years-say-scientists Comments URL: https://news.ycombinator.com/item?id=48823368 Points: 21 # Comments: 7
Switching from PostgreSQL to ClickHouse for Improved Performance and Scalability
Momentic, the company behind an AI-driven software testing platform, recently rearchitected its caching system to handle over 2 million queries per day across 20 billion total entries, while maintaining an average response latency of around 250 ms. This improvement was made possible by transitioning from PostgreSQL to the column-oriented database ClickHouse. By Sergio De Simone
Amber the programming language compiled to Bash/Ksh/Zsh
59 points, 33 comments on Hacker News
Deir El-Medina Strikes
47 points, 5 comments on Hacker News
Sixteen Failed Attempts to Write a Eulogy for My Father (2024)
4 points, 0 comments on Hacker News
Show HN: Davit, a Apple Containers UI
Mostly vibe-coded Apple Containers front-end that I'd like to use myself. But if others want to use it, here's the source code. Comments URL: https://news.ycombinator.com/item?id=48821848 Points: 91 # Comments: 14
AI Meets Cryptography 1: What AI Found in Cloudflare's Circl
Article URL: https://blog.zksecurity.xyz/posts/circl-bugs/ Comments URL: https://news.ycombinator.com/item?id=48821749 Points: 53 # Comments: 6
Astro 7.0
Article URL: https://astro.build/blog/astro-7/ Comments URL: https://news.ycombinator.com/item?id=48821653 Points: 145 # Comments: 35
Local, CPU-Friendly, High-Quality TTS (Text-to-Speech) with Kokoro
Article URL: https://ariya.io/2026/03/local-cpu-friendly-high-quality-tts-text-to-speech-with-kokoro/ Comments URL: https://news.ycombinator.com/item?id=48821576 Points: 131 # Comments: 24
Show HN: Docx-CLI: agents read/edit Word docs using 1/2 the time and tokens
Article URL: https://github.com/kklimuk/docx-cli Comments URL: https://news.ycombinator.com/item?id=48821500 Points: 36 # Comments: 15
Notes on Software Quality
Article URL: https://anthonyhobday.com/blog/20260410 Comments URL: https://news.ycombinator.com/item?id=48821441 Points: 52 # Comments: 29
l: A new runtime for k and q
https://lv1.sh/blog/why-l/ Comments URL: https://news.ycombinator.com/item?id=48821378 Points: 73 # Comments: 50
Your Rust Service Isn't Leaking — It Could Be the Allocator
Comments
We're extending access to Fable 5 on all paid plans through July 12
98 points, 79 comments on Hacker News
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking logins, and capture the one-time codes that protect their accounts. Zimperium's zLabs, which found the operation, says it looks like a new variant of Oblivion, a $300-a-month rent-a-malware tool
Biff.graph: structure your Clojure codebase as a queryable graph
63 points, 2 comments on Hacker News
China sentences official to death for taking $325M in bribes
Article URL: https://www.bbc.com/news/articles/c33y0n1v1xjo Comments URL: https://news.ycombinator.com/item?id=48820220 Points: 226 # Comments: 249
Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project. From there, they could read live conversations, steal the data users shared, and make the bots send attacker-written messages, including requests to re-enter a password. Security firm Varonis found it
Jim's TrueType QR Code Font
https://qr.jim.sh/ Comments URL: https://news.ycombinator.com/item?id=48820119 Points: 103 # Comments: 13
MacSurf 1.68 – NetSurf on OS 9 Released
Article URL: https://github.com/mplsllc/macsurf/releases/tag/v1.86 Comments URL: https://news.ycombinator.com/item?id=48820022 Points: 58 # Comments: 9
Show HN: Rowboat – Open-source, local-first alternative to Claude Desktop
Claude’s desktop app is brilliant, but for our own daily work we kept wanting it to be less like a chat app and more like a full-fledged work app. Rowboat is our attempt at that, including the ability to build your own work surfaces inside Rowboat (more below). Our repo is https://github.com/rowboatlabs/rowboat, and there’s a demo video here: https://www.youtube.com/watch?v=et5yQABJ3xI In a previous startup, we built a deep-learning product for enterprise support reps, including teams supporting P&G brands. Models took live notes, suggested replies, and recommended actions while support reps were on calls or handling emails. One lesson stuck with us: it's not enough for the AI to be right, the help has to show up where the work is happening. So we added what we came to call “work surfaces”: dedicated areas for email, meetings, notes, browser, and parallel coding, where the assistant can help inside the workflow itself rather than only through chat: - Email client: Rowboat has a simple
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles