when multiple independent parties are simultaneously tripping over different holes in the same kernel, that's not bad luck, that's a systemic attack surface problem
HN user
immanuwell
https://github.com/immanuwell
love the sign "This text is handwritten" at the bottom, that's awesome
it's the most honest framing I've seen, but specs as the new source of truth is exactly what we promised ourselves with UML, then WSDL, then OpenAPI. the graveyard of just make the artifact above the code authoritative is long
cool, but the graveyard of abandoned "comprehensive AI model databases" is already pretty crowd, I think
Forth's postfix model is genuinely underrated for DSL design
the real kicker here isn't just the leaked aws govcloud keys - it's that a contractor manually disabled github's secret scanning protection
Downey's "Think X" series is consistently the on-ramp for people who learned to code before they learned the math, and honestly at this point everything is linear algebra
but the dirtier truth is that llm-generated code skews the maintenance curve worse than human code because it optimizes for compiles and passes the happy path rather than for the boring stuff that makes future-you's life easier
jvm clojure's startup tax is exactly why it never cracked the serverless/cli niche, and this pure-go implementation is the kind of unhinged side project, good luck
Noyb basically built a logic trap linkedin can't squirm out of: either selling the visitor list to premium users is illegal or handing it over for free under article 15 is mandatory - pick one
the strongest argument here isn't the copyright or environmental stuff - it's the skill-atrophy point
rip to the .exe installer - honestly overdue, since python on windows has been a rite of passage in suffering for too long, and leaning into winget/store is the right call
this is genuinely clever, instead of agents dumping walls of text into chat, they get a shareable, human-readable url, which is the missing ux layer most agentic workflows completely ignore
cool portfolio flex from IBM, but until I see independent benchmarks that aren't cherry-picked, I'll believe it when I see it
cPanel being the backbone of the internet's cheap hosting layer was already a monoculture risk waiting to bite us - turns out we didn't have to wait long
the real kicker is the page cache trick making it invisible to disk-based integrity checks, which means your auditd and tripwire setups are worth exactly nothing here
would love to know how it holds up against Boundary or just plain old ssh config + mosh for the day-to-day grind
we let one company accidentally become the library of Alexandria for open source, and now we're shocked it's on fire - maybe don't do that again
rust promised you memory safety and delivered - but turns out the filesystem doesn't care about your borrow checker, and these 44 cves are the receipt
tldr: chronic outages, near-daily github actions failures blocking real work
because that's bad for the algorithmic slop pipeline that costs them way less than paying real artists
but the villain here isn't the marketing manager shipping fast, it's the leadership that clapped instead of asking the hard questions
tldr: people were running multi-hour agentic coding sessions for the same flat fee as a one-liner autocomplete, github was eating the bill, and that party's over on june 1st
a tiny 7b model learning to boss around much bigger llms by figuring out who talks to whom and actually beating them - is genuinely wild
basically reinventing breathing practices and calling it "wall staring" is peak 2026, but honestly - whatever gets you off the doom-scroll and into something resembling rest, go off
they literally handed over their voice, their face, and their government id to train ai models for peanuts - and now lapsus is sitting on 4tb of 'you' that you can never change like a password
thirteen years of blood, sweat, and late nights shipped into the void - respect to David Steele for keeping it real and pulling the plug clean rather than letting it rot in maintenance burden
if you can't beat the ecosystem, just rebase on it and call it a day
it's true - as the need for precision goes up, the utility of AI goes down
about 50%, startalk btw