Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
OpenSSH 10.4/10.4p1 Released
Article URL: https://www.openssh.org/txt/release-10.4 Comments URL: https://news.ycombinator.com/item?id=48811373 Points: 42 # Comments: 11
Acronym Fatigue Series Introduction: why I'm wary of acronyms
Article URL: https://devz.cl/posts/acryonym-fatigue-series-why-i-m-wary-of-engineering-acronyms/ Comments URL: https://news.ycombinator.com/item?id=48811339 Points: 31 # Comments: 17
Poly/ML – A Standard ML Implementation
Article URL: https://github.com/polyml/polyml Comments URL: https://news.ycombinator.com/item?id=48811317 Points: 31 # Comments: 6
Full Writeup of the Windows GDID
Article URL: https://github.com/SmtimesIWndr/gdid-reversal Comments URL: https://news.ycombinator.com/item?id=48811081 Points: 46 # Comments: 22
Titan's Resources and Their Utilization
3 points, 0 comments on Hacker News
Alternate Clock Designs and Time Systems
10 points, 3 comments on Hacker News
Learning to code is still worthwhile
Article URL: https://stevekrouse.com/learn-to-code Comments URL: https://news.ycombinator.com/item?id=48810439 Points: 47 # Comments: 24
Common prefix skipping, adaptive sort
24 points, 1 comments on Hacker News
Ditching Zotero for a Text File
32 points, 23 comments on Hacker News
GLM 5.2 and the coming AI margin collapse
Comments
M/PC – A Concatenative OS
Article URL: https://wiki.xxiivv.com/site/m_pc.html Comments URL: https://news.ycombinator.com/item?id=48809810 Points: 45 # Comments: 5
ReactOS "Open-Source Windows" Project Now Capable Of Running Half-Life 2
Comments
Girls just wanna have fast MPMC queues with bounded waiting
99 points, 19 comments on Hacker News
Price per 1M tokens is meaningless
Article URL: https://janilowski.pl/en/blog/2026/price-per-m-tokens/ Comments URL: https://news.ycombinator.com/item?id=48809542 Points: 96 # Comments: 50
Python 3.14 compiled to metal – no interpreter
Article URL: https://github.com/can1357/pon Comments URL: https://news.ycombinator.com/item?id=48809496 Points: 66 # Comments: 39
Pruning RAG context down to what the answer actually needs
6 points, 0 comments on Hacker News
CoMaps – FOSS Offline Maps
Article URL: https://www.comaps.app/ Comments URL: https://news.ycombinator.com/item?id=48808928 Points: 161 # Comments: 32
Linux on the Atari Jaguar
Article URL: https://cakehonolulu.github.io/linux-for-jaguar/ Comments URL: https://news.ycombinator.com/item?id=48808663 Points: 77 # Comments: 11
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and government sectors, has been attributed to a threat cluster tracked by Check Point Research
Pros and Cons of Solo Development
Article URL: https://johnjeffers.com/pros-and-cons-of-solo-development/ Comments URL: https://news.ycombinator.com/item?id=48808508 Points: 89 # Comments: 47
OpenWrt One – Open Hardware Router
Article URL: https://openwrt.org/toh/openwrt/one Comments URL: https://news.ycombinator.com/item?id=48808482 Points: 270 # Comments: 122
A global workspace in language models
Article URL: https://www.anthropic.com/research/global-workspace Comments URL: https://news.ycombinator.com/item?id=48808002 Points: 173 # Comments: 52
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit
Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
Article URL: https://github.com/V4bel/Januscape Comments URL: https://news.ycombinator.com/item?id=48807908 Points: 57 # Comments: 14
Damaged Earth Catalog
12 points, 1 comments on Hacker News
OfficeCLI: Office suite for AI agents to read and edit Microsoft Office files
Article URL: https://github.com/iOfficeAI/OfficeCLI Comments URL: https://news.ycombinator.com/item?id=48807225 Points: 79 # Comments: 23
Stealth robotics startup (YC S26) is hiring principal engineers (Palo Alto)
Comments URL: https://news.ycombinator.com/item?id=48806976 Points: 0 # Comments: 0
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is CVE-2026-20896 (CVSS score: 9.8), a vulnerability that stems from the DevOps platform trusting the "X-WEBAUTH-USER" header from any source IP address, effectively allowing an unauthenticated internet client to get elevated
Show HN: Pulpie – Models for Cleaning the Web
Hey HN, I'm Shreyash, founder of Feyn. We built Pulpie, a family of Pareto optimal models for cleaning the web. Pulpie strips boilerplate (ads, footers, sidebars) from raw HTML and returns just the main content as HTML or Markdown. We match SOTA extraction quality while being 20x cheaper. Cleaning 1 billion webpages costs $7,900 with Pulpie versus $159,000 with Dripper, the current leading extractor. The gains come from architecture. Today's leading extractors are decoders that generate output one token at a time. Each step reads the full model from memory to produce a single token. Conversely, Pulpie models are encoders. They run one forward pass over the full input HTML and label each block as boilerplate or content. As a result, Pulpie is compute-bound while decoders are memory-bound. Cheaper GPUs have relatively more compute than memory bandwidth. This makes Pulpie easy to run optimally. Here's Pulpie and Dripper cleaning the same pages side by side: https://www.youtube.com/watch?v
Kani: A Model Checker for Rust
Article URL: https://arxiv.org/abs/2607.01504 Comments URL: https://news.ycombinator.com/item?id=48806410 Points: 111 # Comments: 6
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles