CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

40 safateam 2026-09-25 08:01:29 UTC safateam.com Llama Share 5

Researchers successfully exploited a double-fetch vulnerability in Avast's kernel driver on an up-to-date Windows 11 system, gaining arbitrary kernel read/write access and escalating privileges to SYSTEM. They achieved this by corrupting the RegBuffers array of an IORing object, leaking an _EPROCESS pointer via a Memory Descriptor List (MDL), repairing corrupted pool allocation headers, and ...

F-Droid 2.0

1222 daveoc64 2026-09-24 16:01:29 UTC f-droid.org Llama Share 338

F-Droid 2.0 is a redesigned app that offers a modern interface, improved search, and better app discovery for free and open-source Android apps. The new version simplifies the user experience while integrating with current Android patterns like Material Design.

Pentium II at 600Mhz with Voodoo 3 Emulated on 86Box with M6 Mac Mini

21 hugh4life 2026-09-25 08:01:29 UTC nyaa.sh Llama Share 4

The 86Box emulator on Apple Silicon's M6 chip achieves impressive performance, surpassing the original Pentium II hardware in some cases. The M6's single-core lead translates into a tangible difference in real-world usage, making it an outstanding result for a small and silent box under €1,600.

Show HN: Make cursed fonts like Times New Bastard

681 MitPitt 2026-09-24 18:01:29 UTC bastardica.mitpit.com Llama Share 93

Bastardica is a font generator that creates contextual ligatures, improving OpenType fonts. It can be used with various tools and websites to create unique, richer-looking fonts without affecting the original licenses.

Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design

299 sidharthkmenon 2026-09-24 18:01:29 UTC github.com/devdotfast Llama Share 114

Whiteboard is an open-source desktop app for humans and agents to collaborate on software architecture. It integrates with existing tools, allowing agents to draw diagrams and describe their work in a shared workspace.

Why is the liver so weirdly regenerative?

400 jbotz 2026-09-24 18:01:29 UTC dynomight.substack.com Full Share 201

2DWillNeverDie

226 surprisetalk 2026-09-24 20:01:29 UTC 2dwillneverdie.com Full Share 46

Tutorials, articles, gallery and website design © 2009-2019 Kiwi @ 2DWillNeverDie.com All depicted characters, games and IPs are copyright their respective owners, bla bla bla. Here's your privacy policy, EuropeThank you for playing

Fearless SIMD v1.0

257 verdagon 2026-09-24 18:01:29 UTC linebender.org Llama Share 36

Fearless SIMD is a portable and performant SIMD abstraction that aims to serve users well with various features. It achieves its goals by providing both precise and fast variants for operations, easy expression of algorithms in native vector size, and safe access to intrinsics.

Rails World 2026 Opening Keynote [video]

330 an0malous 2026-09-24 18:01:29 UTC youtube.com Embed Share 365

Toyota is taking the Corolla electric

325 cisc 2026-09-24 15:01:29 UTC electrek.co Llama Share 563

Toyota is preparing to introduce an electric version of its best-selling Corolla car, with a sleek new design and updated platform. The new model will be available in various powertrains, including battery electric, plug-in hybrid, and hybrid options.

My weird new hobby: Wandering around Tokyo on Google Maps

328 ahmedhossamdev 2026-09-24 17:01:29 UTC ahmedhossamdev.com Llama Share 145

The writer enjoys exploring Street View, zooming in on random objects and streets, finding interesting details and stories. They find satisfaction in seeing how places change over time, especially when a specific object or location remains constant despite the passage of years.

Using LLMs to trace alchemical knowledge and decode 17th century letters

131 benbreen 2026-09-24 20:01:29 UTC resobscura.substack.com Full Share 26

Jev Based Code Review

24 namanbhulawat 2026-09-25 05:01:29 UTC github.com/egma-ai Llama Share 11

A tool called Jev-Reviewer helps reduce the mental burden of reviewing PRs by classifying changes into P0, P1, and P2 priorities. It runs on a local computer, analyzes code changes using TypeSafe and OpenAI, and posts no data to GitHub.

Google’s Project Suncatcher to put ML infrastructure in space

178 xnx 2026-09-24 17:01:29 UTC blog.google Llama Share 358

Google's Project Suncatcher is launching a prototype satellite to test its Tensor Processing Units (TPUs) in space, aiming to create scalable machine learning infrastructure. The mission will gather data on how TPUs handle spaceflight and radiation, paving the way for future AI workloads in orbit.

Two-tier encryption in the UK

446 ReturnoftheHack 2026-09-24 11:01:29 UTC macanorak.com Llama Share 398

The UK government ordered Apple to create a way to access encrypted iCloud data, but Apple refused, citing concerns about weakening end-to-end encryption. The UK's Investigatory Powers Act allows for such requests, but the secrecy surrounding these orders undermines democratic governance and cybersecurity.

Opus 5.5 is good at explainer videos

247 iacguy 2026-09-24 21:01:29 UTC launchvideo.io Llama Share 129

The OpenComputer agent is a single TypeScript file that runs on an Amazon Linux 2023 microVM, using Playwright and ffmpeg to render video. It fetches input from a Vercel Blob upload token and returns the rendered MP4 as a public Blob URL after processing.

Writing Parquet files using Haskell

59 cosmic_quanta 2026-09-25 00:01:29 UTC datahaskell.org Llama Share 14

The DataHaskell/Dataframe library provides a Parquet writer that efficiently stores and queries data, using techniques like compression and sub-batching to minimize memory usage. The writer's design allows for fine-grained control over file settings, supports multiple encodings and metadata fields, and can be optimized for performance with concurrency or parallelism.

What About Rails?

25 jrochkind1 2026-09-25 03:01:29 UTC jardo.dev Llama Share 4

David Heinemeier Hansson, creator of Ruby on Rails, gave a keynote at Rails World 2026 where he discussed his vision for the future of Rails and shifted focus to AI-powered code generation. He claims that humans will no longer need to read code and instead rely on LLMs for development.

Book review: Is parallel programming hard, and, if so, what can you do about it?

119 ahelwer 2026-09-24 17:01:29 UTC ahelwer.ca Llama Share 52

The author read "Is Parallel Programming Hard, And, If So, What Can You Do About It?" while on vacation and found it to be a perfect introduction to concurrency for their level of knowledge. The book provided a thorough explanation of CPU architecture and the challenges of writing concurrent programs without mutexes or message-passing patterns.

The Board Game of the Alpha Nerds (2014)

87 neonate 2026-09-24 21:01:29 UTC grantland.com Llama Share 37

A Diplomacy game at Dixiecon was marred by intense negotiations, alliances, and betrayals among players. The game's unique mechanics of negotiation and cooperation led to emotional conflicts and hurt feelings among the players.

Sourcehut account takeover via build logs (XSS in ansi2html)

109 arusekk 2026-09-24 20:01:29 UTC blog.arusekk.pl Llama Share 22

The author worked on improving the security of sr.ht, a platform for hosting projects, by identifying and fixing vulnerabilities in its ansi2html tool. They reported their findings to the project maintainers and helped resolve issues with XSS attacks.

California is chasing wealth that has feet

231 idbnstra 2026-09-24 21:01:29 UTC blog.landeconomics.org Llama Share 624

The author argues that California's proposed billionaire wealth tax will fail due to billionaires' ability to move their wealth out of the state. The author suggests a land value tax as an alternative, which would be more stable and effective in raising revenue for public services.

Show HN: Air-gapped file encryption as self-decrypting HTML page

68 emurlin 2026-09-24 23:01:29 UTC cms-sfx-demo.apeleg.com Llama Share 22

The website is blocking your action due to security measures, possibly triggered by submitting a certain word or phrase. You can report the issue to the site owner and provide details of what you were doing when blocked, including Cloudflare Ray ID.

Nokia Design Archive (2025)

232 pillars 2026-09-24 10:01:29 UTC repo.aalto.fi Full Share 127

The forgotten battle of East Lansing

98 rmason 2026-09-24 17:01:29 UTC eastlansinginfo.news Llama Share 17

Students at Michigan State College clashed with labor union members in East Lansing, leading to a one-day strike and protests. The conflict began when the UAW Local 182 was recognized as the chief collective bargaining representative for autoworkers, prompting Capital City Wrecking Company to fire its newly elected officers and refuse recognition.

The Bayeux Tapestry: Woven by the Victors

27 prismatic 2026-09-25 01:01:29 UTC historytoday.com Full Share 12

Establishing a secure connection... Request ID: 7b3cdb527fb6281010a74fac8b274dd0

WaveDigger: Dig into wireless signals to discover their physical locations

109 882542F3884314B 2026-09-24 15:01:29 UTC github.com/christianrowlands Llama Share 21

WaveDigger is a tool that helps find Wi-Fi access points and cell towers by their MAC addresses or network parameters. It uses Apple's location services API to query BSSID locations, built on research from the apple-corelocation-experiments project.

Geothermal heat map of US hot springs

101 armenarmen 2026-09-24 17:01:29 UTC soakingsprings.com Llama Share 39

Hot springs are plotted on a map showing heat flow from the earth, with warmer colors indicating faster surface heating. Heat flow varies by region, with most of the West having higher values due to faulted crust allowing hot rock to reach the surface.

Forging 1024-bit RSA signatures in nearly SNFS time [pdf]

63 int0x29 2026-09-24 18:01:29 UTC eprint.iacr.org Llama Share 11

Researchers have demonstrated an attack on RSA digital signatures, known as e√NFS, which can forge arbitrary signatures using temporary access to a raw RSA signing oracle and modest computational resources. The attack reduces the security of 1024-bit to 4096-bit RSA by up to 15-30 bits, highlighting a gap in current RSA-type security assumptions and suggesting that post-quantum algorithms may ...

Show HN: Koi.rest – watch some fish and regain your balance

181 hxii 2026-09-24 22:01:29 UTC koi.rest Llama Share 50

Paul, a developer and explorer with ADHD, created a virtual zen garden after feeling stressed about being unemployed. He used AI to bring his idea to life instead of learning JavaScript, embracing "good enough" over perfection.