Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Top researchers leave USA for the Netherlands (in Dutch)
244 points, 188 comments on Hacker News
Waterfall CAD Playground - A Haskell powered programmable-CAD environment, in the browser with WASM
Comments
Together for a healthier Clippy
Comments
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source email solution, such as CVE-2024-42009 (CVSS score: 9.3), to siphon credentials,
Microsoft Can Track Users via a Windows Device ID
Article URL: https://www.pcmag.com/news/a-hackers-arrest-reveals-microsoft-can-track-users-via-a-windows-device Comments URL: https://news.ycombinator.com/item?id=48815196 Points: 45 # Comments: 8
YC CEO says he ships 37K LoC AI code per day. A developer looked under the hood
Article URL: https://www.fastcompany.com/91520702/y-combinator-garry-tan-agentic-ai-social-media Comments URL: https://news.ycombinator.com/item?id=48815117 Points: 45 # Comments: 31
Why false sharing alignment should be 128 bytes on x64
Comments
Presentation: Designing AI Platforms for Reliability: Tools for Certainty, Agents for Discovery
Aaron Erickson explains how NVIDIA designs and tests purpose-built AI agent hierarchies. For senior developers and architects, he outlines why balancing deterministic tools with agentic discovery is crucial. Discover how to leverage rare context, implement LLM-as-a-judge test pyramids, and avoid the paradox of choice to build highly reliable, production-grade AI systems at scale. By Aaron Erickson
How HubSpot Scaled Semantic Search to 20 Billion Vectors
SaaS software vendor HubSpot has described how its semantic search platform grew from a proof of concept into an internal service that now manages more than 20 billion vectors across 38-plus teams. The company says the system now supports agents, RAG, and contact deduplication, and that the increase in agent usage has made retrieval quality and latency more important than before. By Matt Saunders
Google’s exponential path to climate-wrecking digital bloat
Comments
Lago (YC S21) Is Hiring for Our GTM Team
Article URL: https://jobs.ashbyhq.com/lago Comments URL: https://news.ycombinator.com/item?id=48814509 Points: 0 # Comments: 0
Why We Don't Trust the Database with Authentication
14 points, 4 comments on Hacker News
Node.js 26: Temporal API Enabled by Default, V8 14.6, and a Round of Deprecations
Node.js 26 has been released, featuring the Temporal API enabled by default, an updated V8 engine to version 14.6, and the Undici HTTP client upgraded to 8.0. The release also removes deprecated legacy APIs. Developers should note migration points related to NODE_MODULE_VERSION changes. Node.js 26 is current for six months before entering long-term support. By Daniel Curtis
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday. "An attacker can exploit this vulnerability, tracked as CVE-2026-11405, to bypass the password verification process
Eliminating Go bound checks with unsafe
Comments
Odin 1.0 Announcement
Comments
Inference Optimization for MiMo v2.5: Pushing Hybrid SWA Efficiency to the Limit
55 points, 21 comments on Hacker News
I Built the Only 2026 WWII Jeep
43 points, 9 comments on Hacker News
The Art of Computer Programming by Donald E. Knuth
Article URL: https://www-cs-faculty.stanford.edu/~knuth/taocp.html Comments URL: https://news.ycombinator.com/item?id=48813929 Points: 16 # Comments: 3
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below - CVE-2026-40138 (CVSS score: 9.2) - A pre-authentication vulnerability exists in the
Xbox 'OG' Adventures
32 points, 5 comments on Hacker News
Compiling a Go program into a native binary for Nintendo Switch (2022)
Comments
OpenSSH 10.4
Comments
How to sequence your own DNA at home
Article URL: https://bradleywoolf.com/links-1/sequencing-my-own-dna-at-home Comments URL: https://news.ycombinator.com/item?id=48812156 Points: 94 # Comments: 23
Australian Payments Plus moves faster with ChatGPT and Codex
See how Australian Payments Plus uses ChatGPT Enterprise and Codex to move faster through payments complexity. AP+ saves time, improves quality, and keeps human judgment central.
Small AI Models Gain Traction In places with unreliable networks
Article URL: https://spectrum.ieee.org/small-language-models-ai-pharmaceuticals Comments URL: https://news.ycombinator.com/item?id=48812055 Points: 44 # Comments: 10
NSA and IETF: Fairness
Article URL: https://blog.cr.yp.to/20260706-fairness.html Comments URL: https://news.ycombinator.com/item?id=48811887 Points: 110 # Comments: 90
Java News Roundup: Strict Field Initialization, GlassFish, GraalVM, JReleaser, RefactorFirst
This week's Java roundup for June 29th, 2026, features news highlighting: a new JEP candidate, Strict Field Initialization; point releases of GraalVM, JReleaser, RefactorFirst and Java Operator SDK; maintenance releases of GlassFish and Micronaut; the second milestone release of Grails 8.0; and the beta release of Open Liberty 26.0.0.7. By Michael Redlich
Ternlight – 7 MB embedding model that runs in browser (WASM)
Article URL: https://ternlight-demo.vercel.app/ Comments URL: https://news.ycombinator.com/item?id=48811644 Points: 120 # Comments: 34
Fable turned reMarkable into Tom Riddle's diary from Harry Potter
Article URL: https://github.com/MaximeRivest/Riddle Comments URL: https://news.ycombinator.com/item?id=48811591 Points: 218 # Comments: 134
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles