Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Systems optimization should be part of CI/CD
Article URL: https://ucbskyadrs.github.io/blog/levi/ Comments URL: https://news.ycombinator.com/item?id=48659040 Points: 6 # Comments: 1
GTA 6 will cost $80
Article URL: https://www.bbc.com/news/articles/cjrg52egw1ro Comments URL: https://news.ycombinator.com/item?id=48658971 Points: 22 # Comments: 16
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains. The "critical exploitable pattern" has been codenamed Cordyceps by Novee Security. The issue can allow full attacker control of repositories at dozens of the largest organizations worldwide, including Microsoft, Google, Apache, and
Founding a company in Germany: €9600, 152 days and I still can't send an invoice
372 points, 428 comments on Hacker News
Let's Decode the Mystery Bytes [video]
4 points, 0 comments on Hacker News
Minimus container images are now free
Article URL: https://images.minimus.io/ Comments URL: https://news.ycombinator.com/item?id=48658361 Points: 93 # Comments: 54
Dawn of the Apex Agentic Adversary
We are standing at the end of an era we never thought to mourn: the era of human-speed threats. For years, cybersecurity moved to a rhythm organizations could follow. A researcher found a bug, a CVE was cataloged, a vendor navigated a patch cycle, and weeks or even months later, a fix was deployed. In this era, dwell time was measured in days, sometimes weeks. We are now approaching an
Fusion Programming Language
5 points, 3 comments on Hacker News
Presentation: Rules for Understanding Language Models
Naomi Saphra discusses 5 rules governing language model behavior, breaking down why LLMs act like populations rather than individuals. She explains how tokenization creates strange semantic blind spots and highlights the mechanics of sycophancy, showing how models leverage subtle data associations to match user biases and demographics - even guessing political views based on favorite sports teams. By Naomi Saphra
Haystack: Open-Source AI Framework for Production Ready Agents, RAG
50 points, 16 comments on Hacker News
The Joy and Power of Understanding
Comments
Puzzling Success of Overparameterization: Lottery Tickets or Escape Dimensions?
35 points, 6 comments on Hacker News
Flatpak package for GIMP 0.54.1 (1996)
Comments
Deciphering Basmala
21 points, 6 comments on Hacker News
Article: Beyond CLEAN and MVP: Architecting an Offline-first Reactive Data Layer in Android
With the Reactive Data Layer Architecture (RDLA), you establish a clear boundary between public data APIs and private, framework-specific data-source implementations. Your presentation layer operates in a purely reactive manner, observing data changes rather than procedurally querying them. RDLA also simplifies testing by encouraging you to program to interfaces and use clean seeding patterns. By Mervyn Anthony
DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate conglomerate HuiOne Group, as the Treasury unveiled fresh sanctions against nine individuals and 26 entities linked to Prince Group. "These subsidiaries are alleged to have assisted individuals and organizations in transferring proceeds of
You can't unit test for taste
146 points, 56 comments on Hacker News
We're making Bunny DNS free: because a faster internet won't build itself
50 points, 16 comments on Hacker News
Show HN: WebBase-III – dBASE III rebuilt in the browser with its own interpreter
43 points, 11 comments on Hacker News
SCC Technical Assistance Program
19 points, 1 comments on Hacker News
Grok Build 0.1: Intelligence, Performance and Price Analysis
7 points, 2 comments on Hacker News
GloriousEggroll's Proton has been rebased on Proton 11
27 points, 3 comments on Hacker News
Ashby (YC W19) Is Hiring EMEA Engineers Who Can Design
1 points, 0 comments on Hacker News
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME). The vulnerability, tracked as CVE-2026-20230 (CVSS score: 8.6), is a case of improper input validation for specific HTTP requests that could allow an unauthenticated, remote
Making Rust supply chain attacks harder with Cackle (2023)
Comments
OpenAI and Broadcom unveil LLM-optimized inference chip
OpenAI and Broadcom introduce Jalapeño, a custom AI chip built for LLM inference to improve performance, efficiency, and scale across AI systems.
Lianda and the Long March
8 points, 0 comments on Hacker News
Raspberry Pi Pico W as USB Wi-Fi Adapter
138 points, 45 comments on Hacker News
RRB-Trees: Efficient Immutable Vectors
Comments
"Fix" MacBook Neo Cursor Lag: Record 1 Pixel of the Screen Every 10 Seconds
99 points, 37 comments on Hacker News
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles