Sign in to set up offline reading Sign in
12 stories of the day: AI, technology, business and simply interesting discussions — recapped and unpacked.
Eight eMudhra intermediate CA certificates, valid since April 2025, had keys that could be computed from the certificates themselves. A commenter pulled out the scalars: 4, 56, 66, 115, 155, 156, 230, 237.
Firefox shipped a fix in hours via OneCRL; a Mozilla engineer in the thread says everything outside the big browsers is still exposed.
The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.
The release covers one model, DeepSeek-V4.1-Flash, and runs on NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs. It deliberately leaves out the KV cache system and prefill/decode disaggregation.
In the thread, one reader wants to know if the whole release is a bet against US valuations. Another answers that investors don't believe Western firms will run Chinese models.
Dame Melanie Dawes told a Commons committee Ofcom would have to "accept that we won't be able to recover that money" if foreign courts block enforcement. The source is 4chan's own lawyer, so read it as an advocate's account.
A thread commenter adds the footnote: 4chan lost its suit on sovereign immunity, and the court's remarks were obiter dicta.
Teddy Svoronos says iPadOS 26 behaved correctly: with multiple windows open during AirPlay, the audience used to see only the presenting app. In 27, tapping any other app mirrors everything, poll results included.
Keynote exits the presentation, PowerPoint hangs, GoodNotes recovers. The thread argues over whether hardware deadlines excuse it.
Metehan Yesilyurt of Peec AI built about 50,000 pages of invented stats plus 15,000 listicles with GPT-4.1. Google demoted the site after two updates, but ChatGPT kept crawling it, logging over 600,000 bot requests in 30 days.
The fake figures reached an academic paper and investment research from Qatar's largest financial group.
The outage began 19 October at 23:08 PDT; Google called it a power event in a single zone. Per the Neowin headline, HSBC, Revolut, Bank of Scotland, Lloyds and Equifax were hit.
An SRE in the thread says multi-zone setups exist everywhere but zone failure is almost never rehearsed.
A scan that pinned each of ~3,000 exits and compared SSH fingerprints exposed 333 compromised relays. Interception began 2 October; BadExit flags followed on the 4th.
The thread's sharper point: key-based login would have denied the interceptors the passwords, and the fingerprint warning only reaches users who keep a known-hosts file.
The fix, tracked as CVE-2026-111943, filters out chains containing the distrusted intermediates; backports were opened for Go 1.26 and 1.27.
Sources say FBI investigators believe at least one US consulting executive played an active role in Shinywire. No charges and no name have been published.
Cloudflare's experimental Rust port of the TypeScript compiler claims up to 8x speed and about 70% less memory than TypeScript 7.0, with the code written by frontier models in days.
A TypeScript team member says much of the speed is not language choice, and some of it is already landing in TypeScript 7.1.
Mini Transcribe 3 costs $0.0035/min, Small $0.004/min, realtime $0.008/min, TTS $13 per million characters. Benchmark wins over Whisper large-v3 are Mistral's own claims.
Free in the browser: residents have ages, incomes and homes, every build creates new objectors, and a local Gazette reports your scandals.
