4 stories
A draft Wine port landed on OpenBSD's ports list this weekend. Thomas Frohwein says dozens of 64-bit Windows programs ran, including the Witcher 3 remaster, but WoW64 doesn't work, so 32-bit Windows software won't start.
Simon Willison's first question was about the plumbing: where does the port's development history live, given OpenBSD uses CVS.
The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.
Calif's researchers chained that use-after-free with a separate out-of-bounds write and got a root shell on OpenBSD with KARL, SMAP and SMEP enabled and no information leak. The counter, shm_nattch, was a signed short inherited from roughly 37 years ago.
strncpy was killed for 'counter-intuitive semantics' around NUL termination and wasteful zero-filling. The '360 patches' figure is 360 uses converted to safer calls, not 360 bugs.
The origin: it was written to copy 14-byte, zero-padded-but-not-terminated filenames out of early UNIX directory entries. It was never meant for strings.
The standout pattern isn't 'AI side-project' — it's the backlash to it. A search engine you can download the source of after 12 months as a paying customer. A baby tracker with zero analytics and on-device-only data. A publishing platform with 'strictly human content' and no algorithm.
And the deep cuts: a JVM written entirely in Go, a formally verified motion planner using arbitrary-precision math to fight numeric instability, and Magic: The Gathering played over webcam with whole-frame card detection.