LiteLLM Python package compromised by supply-chain attack

https://opengraph.githubassets.com/b08f0d4bd81d3bfed53bb4a30b44b510d36a01972535db490c3a4839d3d6b313/BerriAI/litellm/issues/24512
A malicious litellm package on PyPI contains a .pth file that steals credentials. Users who installed it via pip should rotate all credentials.

No Terms. No Conditions

You acknowledge and accept the terms of this site, which are complete and proportionate to its nature. You are responsible for your actions and creations based on this site.

Hypothesis, Antithesis, Synthesis

https://antithesis.com/blog/2026/hegel/images/david.jpg
Hegel is a new family of property-based testing libraries that brings Hypothesis quality to every language, making it easy to integrate with Antithesis for increased bug-finding power. Hegel is still in early days but has the potential to be a huge part of the future of software development, especially with AI-based workflows.

Run a 1T parameter model on a 32gb Mac by streaming tensors from NVMe

https://opengraph.githubassets.com/c3c48e298fb78d11bf1ba304d15f6ca0a355e1bff49ff24490a3d71adcd70fd8/t8/hypura
Hypura is a storage-tier-aware LLM inference scheduler for Apple Silicon that enables large models to run without crashing systems. It optimizes model placement across GPU, RAM, and NVMe tiers for efficient inference.

WolfGuard: WireGuard with FIPS 140-3 cryptography

https://opengraph.githubassets.com/b6554df00e973bbdda8680a37f841d96e71709fd6315c937254337779a5179cc/wolfSSL/wolfGuard
WolfGuard is a FIPS-compliant refactor of WireGuard with identical usage. It consists of a kernel module and a configuration tool.
https://opengraph.githubassets.com/89199e453128d104b546a4066272c40327435c7337082d2e5fa75891dfd301c6/ssrajadh/sentrysearch
SentrySearch indexes dashcam videos using Google's Gemini Embedding model and stores video embeddings in a local database. It allows sub-second semantic search over hours of footage by directly comparing text queries to video embeddings.

Show HN: Email.md – Markdown to responsive, email-safe HTML

https://www.emailmd.dev/_next/image?url=https%3A%2F%2Fimgs.emailmd.dev%2Fss%2Fconfirm_email.png&w=1200&q=75
Turn markdown into responsive, email-safe HTML that renders perfectly across every client.

Tony Hoare and His Imprint on Computer Science

The website is temporarily blocked due to security reasons after a suspicious action was detected. Please email the site owner with the Cloudflare Ray ID and details of the action that triggered the block.

Nanobrew: The fastest macOS package manager compatible with brew

Install macOS packages 7,000x faster than Homebrew. APFS clonefile, parallel deps, native Mach-O parsing. Written in Zig.

Testing the Swift C compatibility with Raylib (+WASM)

https://carette.xyz/images/swift_c_raylib_native_window.png#small
The user demonstrates how to build a basic Raylib game using Swift without manual FFI bindings, leveraging the Clang Importer and Swift Package Manager for a seamless integration with C code. They successfully built the game for macOS and web using WASM, highlighting the ease of use and power of Swift in wrapping C/C++ libraries.

Microsoft's "Fix" for Windows 11: Flowers After the Beating

https://www.sambent.com/content/images/size/w160/2025/07/370-----Photos-1.png
Microsoft changed the red X button during the GWX campaign in May 2016 to schedule Windows 10 upgrades instead of closing the dialog. The article does not mention how long it took to restore the ability to move the taskbar after it was removed.

LaGuardia pilots raised safety alarms months before deadly runway crash

https://i.guim.co.uk/img/media/686cb0ec7d3fc230984fff7e321015a5227ea454/0_0_1920_1080/1920.jpg?width=465&dpr=1&s=none&crop=none
Pilot safety concerns were filed months before a collision at New York's LaGuardia airport left two pilots dead and 41 injured. The concerns included air traffic controllers' failure to provide guidance on nearby aircraft and a shortage of air traffic controllers.

Apple Business

https://www.apple.com/newsroom/images/2026/03/introducing-apple-business-a-new-all-in-one-platform-for-businesses-of-all-sizes/article/Apple-Business-hero_big.jpg.large.jpg
Apple Business is a new platform that offers all-in-one services for companies to manage devices, reach customers, and get support. It features built-in mobile device management, email, calendar, and directory services, and will be available in over 200 countries starting April 14.

Ripgrep is faster than grep, ag, git grep, ucg, pt, sift (2016)

https://burntsushi.net/stuff/ripgrep1.png
Ripgrep is a fast, cross-platform command line search tool that combines the usability of The Silver Searcher with the raw performance of GNU grep, offering features like Unicode support, regex engine options, and file type filtering. It is designed to be a hybrid of grep-like and ack-like tools, providing both speed and smart default searching capabilities, making it a suitable replacement ...

Debunking Zswap and Zram Myths

https://chrisdown.name/images/hnr.jpg
Use zswap for most people as it provides automatic tiering between compressed RAM and disk swap, gracefully degrading as memory pressure increases. zram is better suited for embedded systems or specific security requirements, but its block device architecture creates constraints and requires manual setup and management to achieve similar behavior to zswap.

Secure Domain Name System (DNS) Deployment 2026 Guide [pdf]

This document provides guidelines for securing the Domain Name System (DNS) infrastructure to protect against malicious activities and misuse, and to utilize DNS as a foundational layer of security control across the organization. The guidelines include recommendations for blocking harmful traffic, filtering out malicious categories of traffic, and using DNS as an information source to ...

curl > /dev/sda: How I made a Linux distro that runs wget | dd

To replace a Linux installation with a new OS, you can pipe a pre-prepared disk image directly to the disk using a command like dd. This works by treating the disk as a file and writing to it directly.

Opera: Rewind The Web to 1996 (Opera at 30)

https://www.web-rewind.com/logos/rewind_logo.webp
An interactive journey through 30 years of the web

io_uring, libaio performance across Linux kernels and an unexpected IOMMU trap

https://miro.medium.com/v2/resize:fit:700/1*_63cjeOMFI3IiRjWdVflow.png
The performance of io_uring improves significantly on newer Linux kernels, with the fastest configuration being 1.4x faster on newer kernels compared to older kernels. However, a performance regression was observed between kernels 5.4 and 5.15 for both libaio and non-polled io_uring, which was caused by Intel IOMMU being enabled by default between releases.

Box of Secrets: Discreetly modding an apartment intercom to work with Apple Home

https://www.jackhogan.me/_vercel/image?url=_astro%2Fintercom.qcq0z6vp.jpg&w=750&q=100
The user and their friend Hazel hacked into their friend Frank's apartment complex's intercom system to unlock the gate using Apple Home. They used an ESP32 relay board, a Matter library in Rust, and a rectifying regulator to create a discreet device that could unlock the gate with a tap on Frank's phone.

Log File Viewer for the Terminal

https://lnav.org/assets/images/lnav-front-page.png
lnav automatically detects and processes log files, including compressed ones, with online help and previews. It outperforms standard terminal tools in processing large log files like a 3.3GB access log.

The Jellies That Evolved a Different Way to Keep Time

https://www.quantamagazine.org/wp-content/uploads/2026/03/JellyfishClock-crKristinaArmitage-Lede-scaled.webp
Scientists discovered a new jellyfish species with a 20-hour circadian rhythm that tracks periods instead of Earth's 24-hour day. This unusual mechanism suggests that unconventional clocks may be widespread across the tree of life and could be driven by different molecular mechanisms.

So where are all the AI apps?

https://www.answer.ai/posts/so-where-are-all-the-ai-apps/chart_01_pypi_package_creation.png
The AI effect on software productivity is not as significant as expected, with no overall increase in package creation or updates. Instead, a concentrated burst of updates occurred in popular AI packages, possibly due to increased funding and enthusiasm for AI.

LLM Neuroanatomy II: Modern LLM Hacking and Hints of a Universal Language?

https://dnhkng.github.io/assets/img/qwen_comparison.webp
The user discovered a method called RYS (Repeat Your Self) that improves model performance by duplicating middle layers in a transformer model, and found that this method works on multiple models, including Qwen3.5-27B, confirming that transformer reasoning is organized into discrete functional circuits. The user also found that a single contiguous block in the mid-stack is the best first ...

MSA: Memory Sparse Attention

https://raw.githubusercontent.com/EverMind-AI/MSA/main/assets/fig1_scaling.png
Researchers present Memory Sparse Attention (MSA), a scalable sparse latent-state memory framework for efficient end-to-end memory model scaling. MSA achieves near-linear complexity and <9% degradation from 16K to 100M tokens.

iPhone 17 Pro Demonstrated Running a 400B LLM

Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.

Autoresearch on an old research idea

https://ykumar.me/blog-images/eclip/agent_loop_light.webp
User tried Autoresearch on a research problem with Claude Code, an LLM agent. The agent improved a Mean Rank metric by modifying a single file, train.py, and reduced the metric by 54% in 42 experiments.

NanoClaw Adopts OneCLI Agent Vault

https://nanoclaw.dev/nanoclaw-flow-dark.gif
NanoClaw adopted OneCLI as its default credential and proxying layer for secure agent access. OneCLI's Agent Vault provides fine-grained controls and policies to limit agent access and prevent potential damage.

BIO – The Bao I/O Co-Processor

https://www.crowdsupply.com/img/b45c/541def27-116b-49ef-8b91-8428ab5ab45c/pio-utilization_png_md-xl.jpg
The author created an I/O co-processor called BIO, which is a more efficient and flexible alternative to the Raspberry Pi's PIO, consuming about half the area of the PIO and achieving over 4x the clock rate when ported to an ASIC flow. The BIO uses a RISC-V 32-bit core and has a spacious 4 kiB of RAM, allowing for more complex code and higher-level features such as fixed-point math and ...

FCC updates covered list to include foreign-made consumer routers