The libexpat project has ended its security vacation and the maintainer will be paid to work on it for 6 months. They will prioritize fixing vulnerabilities and appreciate help from the community in finding and reporting further issues.
The website is using Cloudflare security and blocked my action, possibly due to a trigger like a certain word or SQL command. I was trying to perform an action when this page came up, and the Cloudflare Ray ID is needed to report the issue to the site owner.
Pi is a coding harness that chooses minimalism, coming with only 4 tools and a system prompt under 1,000 tokens, making it cheaper and more performant. Its design allows for extensibility and self-editability, producing industry-leading results even before adding extensions, as seen in case studies with Databricks and Shopify.
You’re unable to view this Post because this account owner limits who can view their Posts.
The user needed to center a div on a webpage with a sidebar, but the div was offset due to the sidebar's width. They used JavaScript and pointer events to calculate the correct position, creating a tool called center to automatically center elements on any webpage.
TMD, a column-major data processing platform, can leverage DuckDB's vectorized SQL execution engine for efficient large dataset processing. The integration enables functional data science solutions on laptops, reducing the need for expensive distributed solutions.
Shieldstral is a 3B multimodal safety classifier that adapts to context with a policy-adaptive approach, answering questions like content safety and harm. It matches larger models on text safety and sets a new state of the art on multimodal moderation with a single interface for text and images.
WebKit-based browsers on iOS and macOS can bypass proxy settings through three features: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. These leaks expose users' real network and IP addresses, affecting Apple's iCloud Private Relay and all iOS Tor browsers, including Psylo.
Researchers have discovered three novel attacks, known as Pass-ta-key, that can compromise Google's synced passkey ecosystem and allow attackers to take over passkey-protected accounts without user interaction. The attacks exploit vulnerabilities in the system's architecture, including the storage of sensitive keys in memory and logs, and can be used to bypass user verification requirements ...
FIPS validation only ensures a module implements approved cryptography correctly, but does not guarantee the product's overall security or the keys' management and provenance. Treating a FIPS certificate as a security guarantee can lead to false sense of security and neglect of critical security processes and evidence.
A custom color picker based on a color space was created to represent human skin tones digitally, aiming to identify a broad and inclusive range of colors that correspond to plausible skin tones. The color space was developed using principal component analysis and manual fitting of spherical equations to a dataset of labeled skin tones, resulting in a color picker with three independent ...
Elise Cawley, a brilliant mathematician, was a loving wife and mother who lit up her husband's life with her intellect, love, and energy for 36 years. She was a forceful intellect, kind and sweet, with a deep love for truth, beauty, and her family, and her legacy will be remembered through her remarkable life and work.
Artificial intelligence is powering 55% of reported cybercrime in Africa, allowing criminals to launch faster and more convincing attacks. Cybercrime-related financial losses have risen sharply to $484 million, with online scams and AI-powered fraud being the most common forms.
In 1993, Scott Chasin created Bugtraq as a place for full disclosure - a mailing list where security researchers could publish vulnerabilities openly, without gatekeepers, without politics. For over a decade, it was the heartbeat of vulnerability research. If something mattered in security, it was on Bugtraq first. Then it went quiet. The domain changed hands through a chain of acquisitions, ...
This paper compares Zigbee and Matter over Thread, two IoT protocols, and finds that Zigbee is more responsive in small-scale deployments, while Matter over Thread is more scalable and robust in multi-hop scenarios. The results highlight distinct trade-offs between the two protocols.
The fec crate supports various forward error correction codes including convolutional codes and Reed-Solomon codes. It provides a Rust implementation for decoding and encoding these codes with optional SIMD acceleration.
Flowise is winding down operations due to developers increasingly relying on new coding agents for complex tasks. The Flowise GitHub repository will be moved to Public Archive status, allowing users to fork the code and maintain their own updates.
DeepGrove is an independent AI research lab building efficient language models that run anywhere.
Waymo is now offering fully autonomous rides to everyone in Dallas through its app. The service aims to provide safe and reliable transportation options for locals and tourists alike.
Introducing the Godox Transparent Viewfinder Camera C100—our first camera featuring a built-in light meter, wrapped in a bold transparent design that brings effortless, low-barrier shooting fun to everyday capture. Merging vintage toy-camera charm with smart digital utility, the C100 strips away the complexity of traditional exposure. It is crafted for film enthusiasts and lifestyle creators ...
This repository contains a production configuration for running DeepSeek-V4-Flash-0731 on AMD MI300X with fixes for FP8 format, MoE routing, and other issues. It achieves 6,988-7,019 tok/s on fresh prompts with a 2,048-token scheduler budget.
0
2026-08-04 17:23:12 UTC
ycombinator.com
Llama
truemetrics is a tech-driven company solving last mile delivery issues with smartphone-based mapping technology. They're seeking a commercial leader to drive growth from €1M to €10M+.
We will use the VP8 video codec to simulate combinatorial logic by abusing its prediction mechanisms. We will build up a set of composable "gadgets" to construct arbitrary logic circuits using key-frames and prediction modes.
The SEC limits automated tool requests to prevent equitable access issues and excessive searches. Users can declare their traffic and follow best practices at sec.gov/developer to avoid request limitations.
The user received multiple phishing SMSs claiming to be from FedEx, but after verifying the request on the FedEx website, they found that the link in the SMS was tampered with and could be easily manipulated. The user eventually contacted FedEx via their official phone number and was informed that their shipment was indeed subject to duty and taxes, but the amount was different from what was ...
Attackers compromised the GitHub account of keyv's maintainer, injecting credential-stealing malware into keyv and other caching utilities with 2 billion monthly installs. The malware harvests secrets from the victim's environment and exfiltrates them to a public GitHub repository.
Researchers analyzed 60 language model benchmarks and found nearly half exhibit saturation, with rates increasing with age. Expert-curation, not public test data, impacts resilience to saturation.
To make case folding fast, GitHub engineers removed an optimization and implemented a branchless, vectorizable loop that folds ASCII characters in place, achieving speeds of over 45 GiB/s. They also created a compact, 1776-byte table that uses byte-space arithmetic to fold non-ASCII characters without decoding, outperforming other case folding solutions and a naive hash map.
Rotate your device to landscape mode to play.