Sign in to set up offline reading Sign in
11 stories of the day: AI, technology, business and simply interesting discussions — recapped and unpacked.
The claimed gain is a factor of (log n)^ε with ε = 2^-182, which the thread mocked as microscopic. Harvey calls it "gobsmackingly enormous": the first crack in a bound he had treated as a hard physical limit.
A game developer's reply on HN: "this does not feel like a healthy place to be."
The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.
eMudhra will withdraw from issuing public TLS certificates, keeping revocation services running until every issued certificate has expired or been replaced. Customers get replacements free through partners.
In the thread, a commenter reports that an up-to-date iPhone was still trusting the compromised CAs nearly five days after the report.
beIN says the domains infringe its sports broadcast rights. Quad9 says it has no user database and cannot tell who is in France, and that about 20 other French cases covering hundreds of domains are pending.
Its CTO appears in the thread to explain why leaving beats complying.
A 32-bit integer overflow in SmileBASIC's array REMOVE handling gives memory read and write on the Switch 1, where there is no pointer authentication. A path-normalization overflow then reaches the filesystem service.
The exploit is tethered, runs on firmware 23.0.1, and took about two weeks of real work.
The author fine-tuned Qwen2.5-Coder-0.5B on about 336k synthetic terminal sessions, trimmed the vocabulary to 333 tokens, and shipped a 4-bit 208 MB build that runs in the browser on WebGPU.
It scored 80 on a 106-command benchmark; prompted models of similar size scored 52 and 60.
The Browser Company says keeping a browser secure is growing work with AI, so its engineers move to Dia. On mobile, AI features and tab sync end on November 23.
Dia imports Arc passwords, bookmarks, extensions, history and tabs; Spaces become Profiles and Folders become Tab Groups.
He follows the four-weekly PHP release cycle and compiles from source, so he wanted to warn people like him to update. The disclosure schedule changed after his post.
A commenter's rule: if you got the vulnerability details without the embargo, someone upstream broke it, not you.
The property is modest: no crash or failed assertion for any input under 64 MB. A typical proof is about 600,000 lines for a binary of roughly 18,000 instructions, and the process found hundreds of bugs, including one needing a ~20 MB input.
The proofs cover static musl builds on RISC-V, not the x86 and glibc most people run.
Taler is treated as electronic money, so the issuer needs a bank license or a dedicated EMI license. Investors must be able to put in at least €50,000, and operations start only after BaFin approves.
The protocol and reference implementation stay free software; the company runs the service.
Output defaults to readable text with JSON, JSONL, raw and YAML options, and --transform extracts fields with GJSON syntax. Setting OPENAI_UNTRUSTED_STDIN=1 blocks reading files from piped input.
Install by Homebrew, release binary or Go 1.26.
The author wrote earstrip, a C++ header with a WebAssembly build, adding a convex shortcut, strip output and branch-free counting to ear clipping. Native, it is about 14% faster than earcut.hpp.
Self-touching polygons fall back to Delaunay, as do those with 128 or more holes.
