Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Tesla Wall Connector bootloader bypasses the firmware downgrade ratchet
Article URL: https://www.synacktiv.com/en/publications/exploiting-the-tesla-wall-connector-from-its-charge-port-connector-part-2-bypassing Comments URL: https://news.ycombinator.com/item?id=48140953 Points: 23 # Comments: 0
New arXiv policy: 1-year ban for hallucinated references
Article URL: https://twitter.com/tdietterich/status/2055000956144935055 Comments URL: https://news.ycombinator.com/item?id=48140922 Points: 88 # Comments: 9
Sea's View on the Future of Agentic Software Development with Codex
Sea Limited's CPO explains why the company is deploying Codex across engineering teams to accelerate AI-native software development in Asia.
Core Team Panel - Gleam Gathering 2026
Comments
Amazonbot is finally respecting robots.txt
Article URL: https://xeiaso.net/notes/2026/amazonbot-respecting-robots-txt/ Comments URL: https://news.ycombinator.com/item?id=48140730 Points: 62 # Comments: 11
Hindenburg's Smoking Room
31 points, 10 comments on Hacker News
RISC-V Router
Article URL: https://router.start9.com/ Comments URL: https://news.ycombinator.com/item?id=48140541 Points: 30 # Comments: 13
Work with Codex from Anywhere
Article URL: https://openai.com/index/work-with-codex-from-anywhere/ Comments URL: https://news.ycombinator.com/item?id=48140529 Points: 49 # Comments: 13
Multi-Species Canopy Latrines in Costa Rican Cloud Forests
26 points, 3 comments on Hacker News
Illusions of understanding in the sciences
43 points, 17 comments on Hacker News
PostgreSQL 18.4, 17.10 closing 11 CVEs
Comments
WinUI 3 Performance: A Leap Forward
Article URL: https://github.com/microsoft/microsoft-ui-xaml/discussions/11096 Comments URL: https://news.ycombinator.com/item?id=48139704 Points: 68 # Comments: 49
Why did Clovis toolmakers choose difficult quartz crystal?
26 points, 13 comments on Hacker News
The Power of a Free Popsicle (2018)
Article URL: https://www.gsb.stanford.edu/insights/power-free-popsicle Comments URL: https://news.ycombinator.com/item?id=48139316 Points: 50 # Comments: 16
Understanding the Linux Kernel: The Linux Kernel Startup
Article URL: https://internals-for-interns.com/posts/linux-kernel-startup/ Comments URL: https://news.ycombinator.com/item?id=48139220 Points: 64 # Comments: 10
First public macOS kernel memory corruption exploit on Apple M5
Article URL: https://blog.calif.io/p/first-public-kernel-memory-corruption Comments URL: https://news.ycombinator.com/item?id=48139219 Points: 141 # Comments: 22
AI is making me dumb
Article URL: https://jpain.io/god-damn-ai-is-making-me-dumb/ Comments URL: https://news.ycombinator.com/item?id=48139148 Points: 325 # Comments: 212
Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that it said has been exploited in limited attacks. The vulnerability, tracked as CVE-2026-20182, carries a CVSS score of 10.0. "A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly
Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets
Cybersecurity researchers are sounding the alarm about what has been described as "malicious activity" in newly published versions of node-ipc. According to Socket and StepSecurity, three different versions of the npm package have been confirmed as malicious - [email protected] [email protected] [email protected] "Early analysis indicates that [email protected], [email protected], and [email protected]
What's in a GGUF, besides the weights – and what's still missing?
113 points, 42 comments on Hacker News
New Nginx Exploit
225 points, 53 comments on Hacker News
Removing the modem and GPS from my 2024 RAV4 hybrid
447 points, 251 comments on Hacker News
SQL’s ORDER BY Has Come a Long Way
Comments
"This is written by an LLM" comments should be flagged as off-topic
There've been endless discussions about whether we should ban LLM-generated text, or change the ai/vibecoding tags, or etc. The general consensus seems to be (???) flag low-effort/uninformative stories as spam and move on. My proposal here is that comments on these stories that just say "this is LLM slop" or something equivalent should be flagged as off-topic. Clearly everyone has different thresholds for what triggers their "slop-o-meter" but at least 80% of the reason I read lobsters is for the quality of the commentary here, and it's frustrating to have to wade through arguments about whether the story under discussion is LLM slop or not. It's also frustrating to submit a story that I thought was interesting and (for whatever reasons) didn't trip my slop-o-meter, and then have the only comment be "would have been a nice article if it weren't written by an LLM". It's even more frustrating, and frankly kindof demoralizing, to have an article that I wrote (without an LLM) get submi
Building ML framework with Rust and Category Theory
33 points, 9 comments on Hacker News
HDD Firmware Hacking
97 points, 9 comments on Hacker News
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
Everything is still on fire. This week feels dumb in the worst way — bad links, weak checks, fake help desks, shady forum posts, and people turning supply chain attacks into some cursed little game for clout and cash. Half of it feels new. Half of it feels like crap we should have fixed years ago. The mess keeps getting louder: users get tricked, boxes get popped, tools meant for normal work
From latency to instant: Modernizing GitHub Issues navigation performance
How the GitHub Issues team used client-side caching, smart prefetching, and service workers to make navigation feel instant. The post From latency to instant: Modernizing GitHub Issues navigation performance appeared first on The GitHub Blog.
RTX 5090 and M4 MacBook Air: Can It Game?
3 points, 0 comments on Hacker News
LinkedIn Fanfiction
4 points, 2 comments on Hacker News
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles