F-Droid 2.0 is a redesigned app that offers a modern interface, improved search, and better app discovery for free and open-source Android apps. The new version simplifies the user experience while integrating with current Android patterns like Material Design.
This post is the second and final part of our Avast Antivirus research, detailing the full exploitation of CVE-2025-13032 on an up-to-date Windows 11 system. Starting from the double-fetch vulnerability introduced in Part 1, we walk through how the controlled paged pool overflow was turned into an arbitrary kernel read/write primitive by corrupting the RegBuffers array of the IORing object. ...
Bastardica is a font generator that creates contextual ligatures, improving OpenType fonts. It can be used with various tools and websites to create unique, richer-looking fonts without affecting the original licenses.
Whiteboard is an open-source desktop app for humans and agents to collaborate on software architecture. It integrates with existing tools, allowing agents to draw diagrams and describe their work in a shared workspace.
Fearless SIMD is a portable and performant SIMD abstraction that aims to serve users well with various features. It achieves its goals by providing both precise and fast variants for operations, easy expression of algorithms in native vector size, and safe access to intrinsics.
Toyota is preparing to introduce an electric version of its best-selling Corolla car, with a sleek new design and updated platform. The new model will be available in various powertrains, including battery electric, plug-in hybrid, and hybrid options.
The writer enjoys exploring Street View, zooming in on random objects and streets, finding interesting details and stories. They find satisfaction in seeing how places change over time, especially when a specific object or location remains constant despite the passage of years.
Google's Project Suncatcher is launching a prototype satellite to test its Tensor Processing Units (TPUs) in space, aiming to create scalable machine learning infrastructure. The mission will gather data on how TPUs handle spaceflight and radiation, paving the way for future AI workloads in orbit.
The UK government ordered Apple to create a way to access encrypted iCloud data, but Apple refused, citing concerns about weakening end-to-end encryption. The UK's Investigatory Powers Act allows for such requests, but the secrecy surrounding these orders undermines democratic governance and cybersecurity.
The DataHaskell/Dataframe library provides a Parquet writer that efficiently stores and queries data, using techniques like compression and sub-batching to minimize memory usage. The writer's design allows for fine-grained control over file settings, supports multiple encodings and metadata fields, and can be optimized for performance with concurrency or parallelism.
The OpenComputer agent is a single TypeScript file that runs on an Amazon Linux 2023 microVM, using Playwright and ffmpeg to render video. It fetches input from a Vercel Blob upload token and returns the rendered MP4 as a public Blob URL after processing.
The author read "Is Parallel Programming Hard, And, If So, What Can You Do About It?" while on vacation and found it to be a perfect introduction to concurrency for their level of knowledge. The book provided a thorough explanation of CPU architecture and the challenges of writing concurrent programs without mutexes or message-passing patterns.
A Diplomacy game at Dixiecon was marred by intense negotiations, alliances, and betrayals among players. The game's unique mechanics of negotiation and cooperation led to emotional conflicts and hurt feelings among the players.
The author argues that California's proposed billionaire wealth tax will fail due to billionaires' ability to move their wealth out of the state. The author suggests a land value tax as an alternative, which would be more stable and effective in raising revenue for public services.
Security firms used AI to review a new zero-knowledge VM's codebase, finding dozens of bugs and improving quality. They built custom tooling and formal models to support manual and agent-driven reviews.
The author is leaving Google to work on projects that align with their Christian values and are pro-human, after feeling conflicted about the rapid progress of AI. They plan to continue working on tools like Pernosco and rr, focusing on debugging code for AI agents.
The author worked on improving the security of sr.ht, a platform for hosting projects, by identifying and fixing vulnerabilities in its ansi2html tool. They reported their findings to the project maintainers and helped resolve issues with XSS attacks.
Students at Michigan State College clashed with labor union members in East Lansing, leading to a one-day strike and protests. The conflict began when the UAW Local 182 was recognized as the chief collective bargaining representative for autoworkers, prompting Capital City Wrecking Company to fire its newly elected officers and refuse recognition.
The website is blocking your action due to security measures, possibly triggered by submitting a certain word or phrase. You can report the issue to the site owner and provide details of what you were doing when blocked, including Cloudflare Ray ID.
WaveDigger is a tool that helps find Wi-Fi access points and cell towers by their MAC addresses or network parameters. It uses Apple's location services API to query BSSID locations, built on research from the apple-corelocation-experiments project.
Hot springs are plotted on a map showing heat flow from the earth, with warmer colors indicating faster surface heating. Heat flow varies by region, with most of the West having higher values due to faulted crust allowing hot rock to reach the surface.
Paul, a developer and explorer with ADHD, created a virtual zen garden after feeling stressed about being unemployed. He used AI to bring his idea to life instead of learning JavaScript, embracing "good enough" over perfection.
Stable is a startup that simplifies business operations for companies, providing a dashboard and mail management tools. They're hiring a product engineer to build the software backbone of their modern business infrastructure.
Researchers have demonstrated an attack on RSA digital signatures, known as e√NFS, which can forge arbitrary signatures using temporary access to a raw RSA signing oracle and modest computational resources. The attack reduces the security of 1024-bit to 4096-bit RSA by up to 15-30 bits, highlighting a gap in current RSA-type security assumptions and suggesting that post-quantum algorithms may ...