Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
AI Agent Guidelines for CS336 at Stanford
242 points, 98 comments on Hacker News
The newest Instagram “exploit” is the goofiest I've seen
1035 points, 253 comments on Hacker News
Exploring the Japanese XD FirstClass Network BBS
Comments
Florida sues OpenAI and Sam Altman over AI risks
140 points, 102 comments on Hacker News
Anthropic confidentially submits draft S-1 to the SEC
376 points, 301 comments on Hacker News
Are You Enjoying Our Linguine? (2025)
4 points, 0 comments on Hacker News
The Dirt That Refused to Die
Article URL: https://www.quantamagazine.org/the-dirt-that-refused-to-die-20260601/ Comments URL: https://news.ycombinator.com/item?id=48357905 Points: 7 # Comments: 0
Ask HN: Who is hiring? (June 2026)
Please state the location and include REMOTE for remote work, REMOTE (US) or similar if the country is restricted, and ONSITE when remote work is not an option. Please only post if you personally are part of the hiring company—no recruiting firms or job boards. One post per company. If it isn't a household name, explain what your company does. Please only post if you are actively filling a position and are committed to replying to applicants. Commenters: please don't reply to job posts to complain about something. It's off topic here. Readers: please only email if you are personally interested in the job. Searchers: try https://nthesis.ai/public/hn-who-is-hiring, https://dheerajck.github.io/hnwhoishiring/, http://nchelluri.github.io/hnjobs/, https://hnjobs.emilburzo.com, or this (unofficial) Chrome extension: https://chromewebstore.google.com/detail/hn-hiring-pro/mpfal.... Don't miss this other fine thread: Who wants to be hired? https://news.ycombinator.com/item?id=48357724 Comments U
Ask HN: Who wants to be hired? (June 2026)
Share your information if you are looking for work. Please use this format: Location: Remote: Willing to relocate: Technologies: Résumé/CV: Email: Readers: please only email these addresses to discuss work opportunities. Searchers: try https://nthesis.ai/public/hn-wants-to-be-hired, https://www.wantstobehired.com. Comments URL: https://news.ycombinator.com/item?id=48357724 Points: 66 # Comments: 222
Shopify Reports 15X Faster Graphql Execution with Breadth First Engine
Shopify introduced GraphQL Cardinal, a new execution engine replacing depth-first traversal with breadth-first execution. The redesign improves large-scale GraphQL performance with up to 15x faster field execution, 6x lower GC overhead, and +4s P50 latency gains. It focuses on execution-layer efficiency and batched resolver processing for high-cardinality commerce queries. By Leela Kumili
The Pirate Bay Remains Resilient, 20 Years After the Raid
Article URL: https://torrentfreak.com/the-pirate-bay-remains-resilient-20-years-after-the-raid/ Comments URL: https://news.ycombinator.com/item?id=48357154 Points: 126 # Comments: 33
CS336: Language Modeling from Scratch
Article URL: https://cs336.stanford.edu/ Comments URL: https://news.ycombinator.com/item?id=48357075 Points: 72 # Comments: 6
No Raise, No Promotion: 1 in 4 White-Collar Workers Are Stalling Out
Article URL: https://www.wsj.com/lifestyle/careers/white-collar-workers-career-nyu-study-a81a7d9c Comments URL: https://news.ycombinator.com/item?id=48357063 Points: 117 # Comments: 99
BadHost Vulnerability Exposes AI Agents, Evaluators, and LLM Gateways
BadHost is a high-severity authentication bypass vulnerability in the widely used Python web framework Starlette, with 325 million weekly downloads. The flaw allows attackers to use malformed HTTP Host headers to bypass path-based access controls and access sensitive AI agent infrastructure, among other systems. By Sergio De Simone
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
Monday hit like a cron job with anger issues. A busted auth path here, a repo-side faceplant there, some "patched-ish" thing already getting chewed on in the wild, and then the usual bonus round: poisoned dev tools, sketchy forum chatter, phishing kits pretending to be productivity, and AI lowering the bar for people who already thought 'curl | sh' had a personality. The vibe is simple: old
Show HN: A CSS 3D Engine (no WebGL)
Article URL: https://github.com/LayoutitStudio/polycss Comments URL: https://news.ycombinator.com/item?id=48356946 Points: 10 # Comments: 2
Are blue zones real? Answering that question is harder then ever
41 points, 31 comments on Hacker News
Radxa Dragon Q8B: A Laptop Cosplaying as an SBC?
Article URL: https://bret.dk/radxa-dragon-q8b-a-laptop-cosplaying-as-an-sbc/ Comments URL: https://news.ycombinator.com/item?id=48356741 Points: 15 # Comments: 9
Nvidia Cosmos 3
Article URL: https://developer.nvidia.com/blog/develop-physical-ai-reasoning-world-and-action-models-with-nvidia-cosmos-3/ Comments URL: https://news.ycombinator.com/item?id=48356654 Points: 74 # Comments: 10
NPM packages from Red Hat have been compromised
Article URL: https://github.com/RedHatInsights/javascript-clients/issues/492 Comments URL: https://news.ycombinator.com/item?id=48356625 Points: 491 # Comments: 246
Should you normalize RGB values by 255 or 256?
Comments
Windows GOG DOS Games on M-Series Macs
Article URL: https://f055.net/technology/windows-gog-dos-games-on-m-series-macs/ Comments URL: https://news.ycombinator.com/item?id=48356603 Points: 53 # Comments: 36
Flipper Zero Zig Template
Article URL: https://github.com/NishantJoshi00/flipper-template Comments URL: https://news.ycombinator.com/item?id=48356490 Points: 51 # Comments: 3
Linux Basics for Hackers
Article URL: https://github.com/ahegazy0/linux-basics-for-hackers-notes Comments URL: https://news.ycombinator.com/item?id=48356468 Points: 31 # Comments: 9
Stop Killing Games
136 points, 136 comments on Hacker News
Announcing Zstandard in Rust
Comments
Launch HN: Expanse (YC P26) – Unlock Wasted GPU Capacity
Hey HN, we’re Ismaeel, Eren, Yafet and Nikodem. We built Expanse (https://expanse.sh/) to increase the effective capacity of your HPC/GPU clusters running schedulers/orchestrators like Kubernetes and SLURM. We read the source code, job submission script, and the hardware a workload is about to run on to predict what the job actually needs before the cluster sees it. We also flag failures we think are about to happen and surface line-level optimisations the researcher can apply themselves. The problem: Datacenters run at roughly 30% to 40% effective utilisation. Users request more resources than what they actually need, because of asymmetric risk: while over-requesting is bad because it’s expensive and wastes capacity that someone else could have used, under-requesting kills your job mid-run and you lose days of work. So everyone over-requests by two to three times. We measured one national-scale HPC cluster for a month and from 122k jobs, 59% of the compute was wasted. At on-demand clo
H2JVM - A Haskell Library for writing JVM Bytecode
Comments
Microsoft builds MacBook Pro rival with NVIDIA-powered Surface Laptop Ultra
84 points, 250 comments on Hacker News
Building the infrastructure for the Intelligence Age in Michigan
OpenAI breaks ground on a 1GW data center project in Michigan as part of Stargate, building AI infrastructure to expand access, create jobs, and support communities.
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles