A NuGet package mimics the famous Newtonsoft.Json by one "t" and hides, in a library that actually works, code intended to rig live betting results on Digitain.
3 h ago 23 3
Hijacking the agenda as a clandestine mailbox: HollowGraph uses Microsoft 365 events - backdated by twenty-four years - to exfiltrate files and receive its orders without raising any alerts.
yesterday 8 2
Spotted on Hacker News (July 18, 2026), Topcoat is presented as "the full full-stack framework for Rust". Decoding: who is it for, and should we abandon Axum?
Jul 19, 2026 23 3
A sanitation flaw in the WordPress core allows an unauthenticated attacker to run arbitrary code on the server. Patch immediately.
Jul 18, 2026 3 1
On Hacker News, a SRE who bought an abandoned 8-lane bowling alley with his family in the Midwest shares how he replaced the proprietary system with ESP32s costing $5 each. The BOM drops from $120k to ~$1,600. A lesson on software lock-in.
Jul 19, 2026 22 3
A post promoted to the front page of Hacker News reminds us of a truth that many C++ developers prefer to ignore: neither GCC nor Clang implement 100% of the standard. Practical breakdown.
Jul 19, 2026 23 3
An article from 2024, which topped Hacker News today, shows how a better-designed memory layout makes a static structure 40× faster than a binary search. The real lesson isn't the number—it's the reasoning.
Jul 19, 2026 4 1
Anime News Network publishes a review of the film "To You in the Beyond". We support it - it's a rare object: a mourning anime that never tips into sentimentalism.
Jul 18, 2026 7 2
An independent researcher publishes the analysis of a Kasa camera that, since 2019, has been responding to unsigned UDP requests and disclosing the GPS coordinates of the home. A class of bug that should have disappeared.
Jul 18, 2026 13 3
A post on Goto10Retro, brought to the top of Hacker News today, tells the story of how a 1980s Commodore 64 served as a refuge for a troubled teenager. It's also a gateway to discussing a machine that shaped an entire generation.
Jul 17, 2026 15 3
The thesis: the quality of an AI code assistant lies less in its model than in its "harness" - the layer that decides which parts of the codebase to put in front of its eyes. Decrypting a post that puts context engineering at the center.
23 h ago 23 3
A critical authentication bypass vulnerability in PAN-OS on the GlobalProtect portal (Palo Alto Networks' VPN firewall) is now being exploited in the real world by the Qilin ransomware gang. Arctic Wolf, relayed by BleepingComputer, confirms active intrusions: the patch can no longer wait.
23 h ago 24 3
