Latest analysis (Page 33 of 49) | HN Digest

Latest analysis

Researcher Alleges Xray-core Mishandled a Certificate-Pinning Bypass

A vulnerability reporter's GitHub issue alleges that Xray-core fixed an earlier certificate-pinning bypass without a security notice. The project's July 2026 advisory separately confirms that some pinnedPeerCertSha256 configurations could permit man-in-the-middle attacks and lists v26.7.11 as patched. The advisory does not independently establish the reporter's account of the earlier bug or intent to conceal it.

Read full article →

github.com2026-10-05

A 40ms Go Garbage Collector Pause Traced to Swap-Paged Metadata

A Go developer discovered that swap usage can cause 40ms stop-the-world garbage collector pauses when GC metadata gets paged out, revealing a hidden latency risk in production systems.

Read full article →

frn.sh2026-10-05

ArtCraft Launches Seven Open‑Source Creative Apps Built in Rust

ArtCraft introduces a suite of seven native desktop applications for image editing, vector illustration, video, photo library, PDF workbench, motion graphics, and page layout, all written in Rust and released under permissive open‑source licenses. The apps emphasize local file handling, familiar professional workflows, agent‑ready CLI/MCP interfaces, and WebAssembly builds for browser use.

Read full article →

getartcraft.com2026-10-05

Nearly 200 People Under Observation After Irkutsk Lab Worker Dies From Plague

Health authorities in Russia's Irkutsk region placed nearly 200 people under medical observation after a laboratory worker at the Irkutsk anti-plague institute died from plague, according to reports from The Moscow Times.

Read full article →

themoscowtimes.com2026-10-05

Digital Archive Preserves Tippett Studios' Animation Legacy After Closure

Following the August 2026 closure of Berkeley-based Tippett Studios, an anonymous donor has preserved the animation house's extensive archival materials by uploading disc images to the Internet Archive, making decades of behind-the-scenes work from films like Star Wars, RoboCop, and Starship Troopers freely accessible to the public.

Read full article →

filmstories.co.uk2026-10-05

AI-Assisted Research Uncovers a 1615 Dutch Log Entry Describing Dodo Hunting on Mauritius

Historian Benjamin Breen reports that Anthropic's Opus 5.5 identified a previously overlooked 1615 Dutch East India Company ship's log mentioning the hunting of dodos on Mauritius, found through semantic search of the GLOBALISE archive. The same search yielded a probable new reference to the extinct red rail, correcting an 1890 mistranslation. Breen frames the findings as publishable but modest, and uses them to illustrate both the promise and the epistemological limits of frontier AI models as historical research tools.

Read full article →

resobscura.substack.com2026-10-05

AI Finally Masters Stratego, Beating Top Human Player on Modest Hardware

Researchers from Carnegie Mellon, MIT, NYU, and Stanford developed Ataraxos, an AI that defeated world‑class Stratego player Pim Niemeijer 15 games to one with four draws, using only 16 GPUs and a few thousand dollars. The system combines self‑play reinforcement learning with a belief‑model lookahead to cope with the game’s immense hidden information and long horizons, marking the first time AI has surpassed human experts in the classic board game.

Read full article →

arstechnica.com2026-10-05

Apple Releases Pass Designer Beta for Building Apple Wallet Passes

Apple has launched Pass Designer, a macOS application that streamlines the creation of passes for Apple Wallet. The tool provides real-time, device-faithful previews, customizable templates, validation, and semantic tag support to enable features such as Siri Suggestions, Calendar integration, and Maps directions.

Read full article →

developer.apple.com2026-10-05

Court Blocks Utah's VPN Law, Ruling It Demands Technical Impossibility

A federal judge issued a preliminary injunction against Utah SB 73, finding that the law's VPN-enforcement mechanism requires geolocation perfection that does not exist. The ruling pauses enforcement of provisions that would have forced adult websites to detect and block VPN users nationwide or withdraw access from Utah entirely.

Read full article →

eff.org2026-10-05

Understanding Page Table Memory Consumption

Page tables, while essential for virtual memory management, can consume significant physical memory - sometimes exceeding the actual data memory usage - particularly when many processes map the same shared memory regions. This article examines how page table overhead scales with process count, real-world cases where it becomes problematic, and mitigation approaches.

Read full article →

frn.sh2026-10-05

Homa: A New Transport Protocol Designed to Eliminate TCP’s Short‑Message Latency in AI Clusters

John Ousterhout’s Homa protocol replaces TCP in AI clusters by exposing message lengths, using receiver‑driven grants and hardware priority queues, cutting short‑message P99 latency by roughly 13× while also improving latency for long messages.

Read full article →

ai.engineer2026-10-05

What Meta Got Right With Muse: Design, Business Model, and the Single-Chat Interface

Muse, Meta's consumer AI agent, has topped the US App Store free-chart by embracing a simplified single-chat interface, an ad-funded permissive free tier, and an anthropomorphized personality. A product designer's essay explains how these choices differentiate Muse from token-selling competitors like ChatGPT and Claude.

Read full article →

metedata.substack.com2026-10-05

How to Hack Time with C2PA: Exploiting the Exclusion Feature for Undetectable Tampering

A security researcher demonstrates how the C2PA standard’s “exclusion” feature can be abused to sign an empty string, allowing any later modifications to an image while preserving a trusted timestamp. By excluding the entire file from the signature calculation, the author created a C2PA‑signed photograph that appears to show a lottery ticket with winning numbers hours before the draw, even though the numbers were altered after the result was known.

Read full article →

da.vidbuchanan.co.uk2026-10-05

Cloudflare Launches Competition to Build Next-Generation Git Platform for AI Agents

Cloudflare invites developers to create the future of source control for AI agent collaboration using its Artifacts versioned filesystem, offering $25,000 in credits and a trip to Cloudflare Connect for winning submissions.

Read full article →

blog.cloudflare.com2026-10-05

Yann LeCun Says He Has 'Zero Concerns' About AI Causing Human Extinction, Blames Rogue Incidents on Design Flaws

The Turing Award‑winning AI researcher Yann LeCun told Fortune he is not worried about AI wiping out humanity, describing recent rogue agent incidents as preventable failures of oversight and sandbox design rather than signs of inherent AI danger.

Read full article →

fortune.com2026-10-05

OpenAI safety leader quits, warning company culture is 'broken'

David Robinson, who led the writing of safety reports behind OpenAI's product releases, resigned and published an essay arguing that the company's culture — not just its rules — is the root of the problem. He points to autonomous-agent incidents and a launch-driven pace, and calls for safety practices modeled on nuclear power and aviation. OpenAI points to recent model pauses and scrappings in response.

Read full article →

theguardian.com2026-10-05

Why a Software Engineer Delayed Becoming an EMT: Time, Culture, and Fear

Ben Stolovitz, a software engineer, details the 21 reasons he postponed getting his Emergency Medical Technician certification for years, revealing that fear and self-invented excuses were the core barriers despite his genuine interest in medicine and eventual enjoyment of the work.

Read full article →

ben.stolovitz.com2026-10-05

Jane Street Reveals Solution to Its ASIC Reverse-Engineering Puzzle

Jane Street published the results of its ASIC puzzle, a custom silicon chip that implements an 11×11 Star Battle puzzle, detailing how hundreds of participants reverse‑engineered the design, the solving techniques they used, and the hidden Easter‑egg messages encoded in the layout.

Read full article →

blog.janestreet.com2026-10-05

The Heilbronn Problem: Amateur Mathematicians Push New Records in a Classic Geometry Puzzle

A dedicated website tracking the Heilbronn problem—placing n points in a unit-area shape to maximize the smallest triangle formed by any three points—has logged a wave of new records since September 2026. Contributors including Rob Gardiner and Alexandar Lackovic have improved best-known values for squares, triangles, and convex regions, with gains up to 3.7%. The site provides exact coordinates, symmetry analysis, and an in-browser rational arithmetic verifier for each configuration.

Read full article →

math.tejstead.com2026-10-05

Distributed Renewables and Ukrainian Energy Resilience

A report from EnergyTransition.org describes how distributed solar installations in Ukraine—particularly in the frontline city of Mykolaiv—have kept critical services running despite Russian strikes on centralized power infrastructure. The article frames Ukraine's rapid renewable rollout as a security-driven transformation, not a climate policy, and cites experts who argue that scattered generation with storage is harder to destroy than large thermal plants.

Read full article →

energytransition.org2026-10-05