F-Droid 2.0

https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png
F-Droid 2.0 is a redesigned app that offers a modern interface, improved search, and better app discovery for free and open-source Android apps. The new version simplifies the user experience while integrating with current Android patterns like Material Design.

CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

https://www.safateam.com/_next/image?url=https%3A%2F%2Fimages.ctfassets.net%2Fg83bdkwoho6w%2F7dPJuuDzRaEOvzFwAeudGk%2F5ad1c6b31404f381268bcc920ac9b907%2FCVE-2025-13032.jpeg&w=3840&q=75
This post is the second and final part of our Avast Antivirus research, detailing the full exploitation of CVE-2025-13032 on an up-to-date Windows 11 system. Starting from the double-fetch vulnerability introduced in Part 1, we walk through how the controlled paged pool overflow was turned into an arbitrary kernel read/write primitive by corrupting the RegBuffers array of the IORing object. ...

Show HN: Make cursed fonts like Times New Bastard

https://bastardica.mitpit.com/meme.jpg
Bastardica is a font generator that creates contextual ligatures, improving OpenType fonts. It can be used with various tools and websites to create unique, richer-looking fonts without affecting the original licenses.

Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design

https://raw.githubusercontent.com/devdotfast/whiteboard/main/docs/assets/whiteboard-demo.gif
Whiteboard is an open-source desktop app for humans and agents to collaborate on software architecture. It integrates with existing tools, allowing agents to draw diagrams and describe their work in a shared workspace.

Why is the liver so weirdly regenerative?

2DWillNeverDie

https://2dwillneverdie.com/wp-content/themes/2DWillNeverDie/images/punchout.gif?nocache
Tutorials, articles, gallery and website design © 2009-2019 Kiwi @ 2DWillNeverDie.com All depicted characters, games and IPs are copyright their respective owners, bla bla bla. Here's your privacy policy, EuropeThank you for playing

Fearless SIMD v1.0

Fearless SIMD is a portable and performant SIMD abstraction that aims to serve users well with various features. It achieves its goals by providing both precise and fast variants for operations, easy expression of algorithms in native vector size, and safe access to intrinsics.

Rails World 2026 Opening Keynote [video]

Toyota is taking the Corolla electric

https://electrek.co/wp-content/uploads/sites/3/2026/09/Toyota-Corolla-EV-launch.jpeg?quality=82&strip=all&w=1400
Toyota is preparing to introduce an electric version of its best-selling Corolla car, with a sleek new design and updated platform. The new model will be available in various powertrains, including battery electric, plug-in hybrid, and hybrid options.

My weird new hobby: Wandering around Tokyo on Google Maps

https://ahmedhossamdev.com/images/tokyo-350z-street-view.jpg
The writer enjoys exploring Street View, zooming in on random objects and streets, finding interesting details and stories. They find satisfaction in seeing how places change over time, especially when a specific object or location remains constant despite the passage of years.

Using LLMs to trace alchemical knowledge and decode 17th century letters

Google’s Project Suncatcher to put ML infrastructure in space

https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Google_Beam_hero.2e16d0ba.fill-300x300.format-webp.webp
Google's Project Suncatcher is launching a prototype satellite to test its Tensor Processing Units (TPUs) in space, aiming to create scalable machine learning infrastructure. The mission will gather data on how TPUs handle spaceflight and radiation, paving the way for future AI workloads in orbit.

Two-tier encryption in the UK

https://macanorak.com/content/images/2026/09/MA-Staff-Badge-New-1.png
The UK government ordered Apple to create a way to access encrypted iCloud data, but Apple refused, citing concerns about weakening end-to-end encryption. The UK's Investigatory Powers Act allows for such requests, but the secrecy surrounding these orders undermines democratic governance and cybersecurity.

Writing Parquet files using Haskell

The DataHaskell/Dataframe library provides a Parquet writer that efficiently stores and queries data, using techniques like compression and sub-batching to minimize memory usage. The writer's design allows for fine-grained control over file settings, supports multiple encodings and metadata fields, and can be optimized for performance with concurrency or parallelism.

Opus 5.5 is good at explainer videos

https://gzvxcspoxhhgoeog.public.blob.vercel-storage.com/examples/nvidia-ZsqaElE6aA9nnruylvlkhKtiYVdT9s.jpg
The OpenComputer agent is a single TypeScript file that runs on an Amazon Linux 2023 microVM, using Playwright and ffmpeg to render video. It fetches input from a Vercel Blob upload token and returns the rendered MP4 as a public Blob URL after processing.

Book review: Is parallel programming hard, and, if so, what can you do about it?

https://ahelwer.ca/post/2026-09-21-concurrency-textbook/mosquitos.jpg
The author read "Is Parallel Programming Hard, And, If So, What Can You Do About It?" while on vacation and found it to be a perfect introduction to concurrency for their level of knowledge. The book provided a thorough explanation of CPU architecture and the challenges of writing concurrent programs without mutexes or message-passing patterns.

The Board Game of the Alpha Nerds (2014)

https://grantland.com/wp-content/uploads/2014/06/diplomacy-board-and-box-e1403044851233.jpg
A Diplomacy game at Dixiecon was marred by intense negotiations, alliances, and betrayals among players. The game's unique mechanics of negotiation and cooperation led to emotional conflicts and hurt feelings among the players.

California is chasing wealth that has feet

https://substackcdn.com/image/fetch/$s_!ovpK!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fda142ad2-65f1-4aa0-afd8-7ddd723ee082_1276x1178.png
The author argues that California's proposed billionaire wealth tax will fail due to billionaires' ability to move their wealth out of the state. The author suggests a land value tax as an alternative, which would be more stable and effective in raising revenue for public services.

Security auditing in the age of (good enough) AI

https://blog.trailofbits.com/2026/09/18/auditing-in-the-age-of-good-enough-ai/auditing-ai-figure-1_hu_e9e13470729ab3cb.webp
Security firms used AI to review a new zero-knowledge VM's codebase, finding dozens of bugs and improving quality. They built custom tooling and formal models to support manual and agent-driven reviews.

Goodbye Google

The author is leaving Google to work on projects that align with their Christian values and are pro-human, after feeling conflicted about the rapid progress of AI. They plan to continue working on tools like Pernosco and rr, focusing on debugging code for AI agents.

Sourcehut account takeover via build logs (XSS in ansi2html)

The author worked on improving the security of sr.ht, a platform for hosting projects, by identifying and fixing vulnerabilities in its ansi2html tool. They reported their findings to the project maintainers and helped resolve issues with XSS attacks.

The forgotten battle of East Lansing

https://eastlansinginfo.news/wp-content/uploads/2026/09/Nevah-and-Lester-Washburn-courtesy-family.png
Students at Michigan State College clashed with labor union members in East Lansing, leading to a one-day strike and protests. The conflict began when the UAW Local 182 was recognized as the chief collective bargaining representative for autoworkers, prompting Capital City Wrecking Company to fire its newly elected officers and refuse recognition.

Show HN: Air-gapped file encryption as self-decrypting HTML page

The website is blocking your action due to security measures, possibly triggered by submitting a certain word or phrase. You can report the issue to the site owner and provide details of what you were doing when blocked, including Cloudflare Ray ID.

Nokia Design Archive (2025)

https://repo.aalto.fi/download/thumbnail/SO_28b35c93-a577-4d12-b2ac-adec744aa9e4?fallback-thumbnail=1

WaveDigger: Dig into wireless signals to discover their physical locations

https://raw.githubusercontent.com/christianrowlands/wavedigger/main/wavedigger.jpg
WaveDigger is a tool that helps find Wi-Fi access points and cell towers by their MAC addresses or network parameters. It uses Apple's location services API to query BSSID locations, built on research from the apple-corelocation-experiments project.

Geothermal heat map of US hot springs

https://www.soakingsprings.com/assets/space/excelsior-geyser-crater-cb099581.jpg
Hot springs are plotted on a map showing heat flow from the earth, with warmer colors indicating faster surface heating. Heat flow varies by region, with most of the West having higher values due to faulted crust allowing hot rock to reach the surface.

Show HN: Koi.rest – watch some fish and regain your balance

https://koi.rest/img/koi-pond-optimized.png
Paul, a developer and explorer with ADHD, created a virtual zen garden after feeling stressed about being unemployed. He used AI to bring his idea to life instead of learning JavaScript, embracing "good enough" over perfection.

The Bayeux Tapestry: Woven by the Victors

Establishing a secure connection... Request ID: 87d5cec4c3002803536bbaac71a04cba

Stable (YC W20) Is Hiring Product Engineers

Stable is a startup that simplifies business operations for companies, providing a dashboard and mail management tools. They're hiring a product engineer to build the software backbone of their modern business infrastructure.

Forging 1024-bit RSA signatures in nearly SNFS time [pdf]

Researchers have demonstrated an attack on RSA digital signatures, known as e√NFS, which can forge arbitrary signatures using temporary access to a raw RSA signing oracle and modest computational resources. The attack reduces the security of 1024-bit to 4096-bit RSA by up to 15-30 bits, highlighting a gap in current RSA-type security assumptions and suggesting that post-quantum algorithms may ...