I've factored the RSA keys of a Certificate Authority from the 90s

https://mcpherrin.ca/assets/rsa/netscape-cert-viewer.png
The author explores the security of RSA cryptography, noting that small keys can be factored on a modest desktop computer and some old root certificates are still vulnerable.

We have a year to fix security everywhere

https://jyn.dev/assets/pipebomb.png
The GLM 5.3-flash model, a powerful AI capable of finding and exploiting vulnerabilities, is now accessible to anyone with the necessary hardware, posing an imminent threat to security across various industries. The need for urgent action is emphasized as organizations struggle to deploy patches in time.

How well do agents use test/verification techniques?

Agents were given various instructions to test code, but most failed to use the techniques effectively. Default performed better than most conditions due to agents not doing useless work when not instructed.

TALA Is Open-Source

https://d2lang.com/blog/tala-layouts/fulcro_rad/tala.svg
TALA, an auto-layout algorithm, is now open-source under the same license as D2. It offers a novel orthogonal layout engine with customizable node positions and sizes for various use cases.

Arm Mali G2-Ultra NX GPU: desktop-class mobile gameplay with AI-native graphics

https://newsroom.arm.com/wp-content/uploads/2026/09/Arm-Newsroom-AI-native-graphics-image-1600x900-1-1400x788.jpg
The Arm Mali G2-Ultra NX GPU brings dedicated neural accelerators and a new execution engine to create desktop-class gaming experiences on mobile devices. It integrates neural graphics capabilities, such as Neural Super Sampling and Denoising, into the graphics pipeline for improved efficiency and image quality.

Jellyfin 12.0

https://jellyfin.org/assets/images/modern-ui-84f59788e646314ddda43d79c11c4b31.png
Jellyfin 12.0 is a stable release with major features and improvements, including performance work, support for books and comics, and security fixes. The new version drops the major version from its naming scheme to reflect significant changes in the library database.

Watch Los Angeles get built, one building at a time (1880–2026)

One box per building standing today, appearing in the year it was built. What was torn down along the way isn't here, so this is the surviving county, not the county as it was.

I tested 10 model/harness combinations on the same Three.js task

Testing different model and harness combinations to find the best results for a Three.js sci-fi hangar project. The goal is to generate a self-contained HTML file with inline JavaScript, including drone formation toggle and cinematic camera path.

Leaving VMware just got harder after Broadcom pulled VDDK downloads

https://www.virtualizationhowto.com/wp-content/smush-webp/2026/09/vmware-vddk-downloads.png.webp
Broadcom has removed the public download of VMware's Virtual Disk Development Kit (VDDK), a crucial library for many migration tools, causing concern among customers and vendors. This move may hinder their exit from vSphere to other platforms.

Extinct Tasmanian tiger's 'snap' unlike any living mammal's bite

https://media.cnn.com/api/v1/images/stellar/prod/gettyimages-141101424.jpg?c=original&q=w_1041,c_fill
Researchers found that Tasmanian tigers, also known as thylacines, were not the large predators initially thought to be. They had specialized feeding adaptations that likely prevented them from hunting livestock.

John Margolies' photographs of roadside America

https://pdr-assets.b-cdn.net/collections/john-margolies-photographs-of-roadside-america/48635803258_e09b8cc08f_b.jpg?width=1024&height=765
Lawrence Ferlinghetti and John Margolies documented the American roadside, with Margolies focusing on quirky buildings and signs. His archive of 11,710 photographs is now available online for free at the Library of Congress.

WeatherNext 3

https://deepmind.google/static/images/fallback/video_poster_fallback_light.57b61d57842a.jpg
WeatherNext 3 can predict all surface variables – including weather station targeted temperature and humidity at 5km resolution, and other surface variables like wind at 10km. This results in significantly more accurate forecasts – even in locations the model hasn’t encountered in training.

Scientists observe Einstein's gravity in the quantum world

The VMs Powering Mobile Agents (Instinct, Claude Code)

One awesome product evolution is that agents (Claude Code, Instinct, Poke, etc) are moving off our local computers so that we can use them on our phones. Ultimately this is great for the customer because that means the agent companies provide us with VMs for them to run on! Here's some notes on how the major platforms work based on looking around on ws-term. Claude Code's box is its ...

Trusting-Trust Attack against an Entire Linux Distribution

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
A trusting-trust attack can be performed on GNU strip, a build utility, by tampering with its binary seed in the NixOS Linux distribution. This allows for propagation of malicious code into subsequent builds and final standard environment.

216M Spy TVs – The LG Smart TV Problem [video]

https://blog.yosyshq.com/static-2022/colorlight_5a75b.jpg
The Colorlight 5A-75B is a low-cost FPGA development board featuring an Lattice ECP5 FPGA, priced around $20-$25. It's a receiver card for LED displays and offers features like Gigabit Ethernet, SDRAM, and on-board peripherals.

Some more thoughts on random_page_cost

https://vondra.me/posts/some-more-thoughts-on-random-page-cost/random-page-cost.png
The author revisits the concept of random_page_cost, which they initially discussed two years ago, and shares new insights from analyzing rotational SATA drives. They conclude that random_page_cost is not a raw I/O cost but rather an approximation that compensates for caching effects and resource usage.

Show HN: Jigsaw Haiku

Everything is free now, so why not a floating orb in my IDE

A custom IDE has a static left and right lane, but the middle is where action happens with visual noise to help users relax. This adds an engaging element to the UI despite being useless for parsing letters.

Show HN: Stuxnet – A reconstructed source code of the infamous cyber-weapon

https://opengraph.githubassets.com/847b61b43699e80cb4febc6329096a40e543bbe154901544beacc96408e5fc6b/Sadpainy/Stuxnet
This repository contains a reconstructed source code of the Stuxnet worm for educational and research purposes. It is not intended for malicious use and preserves the original logic while structuring the codebase for readability and analysis.

Show HN: NYC MapTap – Learn NYC neighborhoods

Caltech Mathathon – first hackathon ever devoted to research level mathematics

https://mathathonchallenge.com/img/openai.png
A complex structure was shown in a six-sphere, raising questions about AI's role in math. A global competition will be held to solve open conjectures and build new theories using frontier models, with prizes awarded for promising results.

Emacs Bedrock 2.0

Bedrock version 2.0 is available for Emacs, requiring version 31, and offers improved defaults with sample configurations for popular packages. The new release includes incremental improvements over the previous version without breaking compatibility with older versions of Emacs.

Show HN: Interactive Tree of Life

https://ptree.org/icon/ptree-card.png
Explore life across 11 scientific trees, comparing ancestry, traits, fossils, habitats, and sources.

This Month in Ladybird – August 2026

https://ladybird.org/assets/img/newsletter-aug-2026-debugger.png
Ladybird browser has improved with new features like video playback on Twitch, JavaScript debugging in DevTools, and downloads that can be paused and resumed. The engine performance has also been enhanced with a new style engine, layout caching, and CSS animations running off the main thread.

GamersNexus and LG: Or why rooting your TV is a bad idea

https://bdefzwcumgzjwllsnaej.supabase.co/storage/v1/object/public/url-previews/post-cover/resized/w1200-h0/bafkreic23ssfncqpppddykvvpndibgi2dapz6r5tmgs7jencb5xa2vrzrq
Whenever I get to see companies eat shit over bad security, shady business practices, and both, I’m excited. And GamersNexus is here to deliver the goods about LG and their smart TVs. https://www.youtube.com/watch?v=6IFVTcM28KA “LG TVs are able to be utilized as eavesdropping listening devices, in part because of the advertising functionality.” Now that’s a claim! I’m pumped. On screen, we ...

Icy Moons Are Ocean Worlds

Finding a bug in Dummit and Foote's Abstract Algebra

The author struggled with a proof exercise in Dummit and Foote's abstract algebra textbook, which claimed that a function is injective if and only if it has a left inverse. The author found this statement to be false after testing it with an empty set A and a singleton set B.

Simple Is Not Small

https://jyn.dev/assets/rope.png
The author discusses the importance of simplicity in programming, contrasting it with coupling and complexity. They argue that small programs can be coupled, while simple ones are decoupled and easy to maintain.