Timeline
Every post and feed across this instance
-
Green Noise LLC Update Saucillator – A FREE Download
Green Noise LLC have updated Saucillator, available as....
The post Green Noise LLC Update Saucillator – A FREE Download appeared first on The Beat Community.
-
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to in ... Read more
Published Date: Oct 01, 2026 (4 days, 3 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-1581 -
Samsung reportedly confirms November launch for first Android XR glasses
Samsung has apparently confirmed a November 2026 launch for its first Android XR smart glasses.
more… -
Google stands by Gemini 4 performance as some claim it ‘struggles’ in real-world use
Google yesterday unveiled its new flagship Gemini 4 model with some impressive scores, but a report suggests that it might “struggle” in some cases.
more… -
Git Merge 2026 talks are up
Article URL: https://blog.gitbutler.com/git-merge-2026-talks
Comments URL: https://news.ycombinator.com/item?id=49921502
Points: 3
# Comments: 0
-
We want you to build the next Git platform on Cloudflare
Article URL: https://blog.cloudflare.com/next-git-platform-on-cloudflare/
Comments URL: https://news.ycombinator.com/item?id=49921168
Points: 2
# Comments: 0
-
What has been the best Google Pixel to date? [Poll]
On 4 October 2016, Google introduced the original Pixel and Pixel XL, marking a major pivot away from the developer-focused Nexus line and ushering in what is now a decade of “Made by Google” hardware – but which is best and why?
more… -
Show HN: Git Lineage, a Perforce-style time-lapse view for Git blame
Article URL: https://gitlineage.com
Comments URL: https://news.ycombinator.com/item?id=49920748
Points: 1
# Comments: 1
-
Trump’s ‘Morally Binding’ New AI Guardrails Are Meaningless Pudding
Corporations have long enjoyed creating toothless “self-regulatory” regimes that exist primarily to pre-empt real government oversight. While the quality of these orgs can vary somewhat, generally they’re just a toothless pantomime designed to pretend that corporate power can effectively police itself for ethical and competitive breaches. U.S. history has a thing or two to say […] -
Samsung has updated these Galaxy devices to Android 17
Samsung is now rolling out its Android 17-based update, One UI 9, to its collection of supported Galaxy smartphones and tablets. Here’s the full list of devices that have been updated so far, and what you should know about the update.
more… -
Gemini 4 Argon must reverse Google’s AI inertia
Good morning and happy October. Today, I’m cringing at this gaggle of billionaires pretending to be human, vibing to the new Tinashe album, Popstar, and heartily dining on all the brutal ‘Digger’ reviews.
As a reminder, Inbox is the tech newsletter that goes beyond the news cycle. We cover the most important 9to5Google stories from the last couple of days along with a few highlights from around the web. We publish every Tuesday and Thursday, and if you like what you read, please subscribe.
more… -
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities ... Read more
Published Date: Oct 01, 2026 (4 days, 5 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-76504 -
To grieve, or not to grieve?
Article URL: https://xenaproject.wordpress.com/2026/10/01/to-grieve-or-not-to-grieve/
Comments URL: https://news.ycombinator.com/item?id=49919676
Points: 168
# Comments: 156
-
On Reddit ending RSS feeds, this stuff about “large-scale scraping and automated abuse” is an excuse, right? Presumably they just want to keep all their (or their users) content for their AI licensing deals?
-
Zerodaylekken in ticketsysteem Zammad gebruikt bij hack van DIVD
Zerodaylekken in ticketsysteem Zammad gebruikt bij hack van DIVD
Het Dutch Institute for Vulnerability Disclosure (DIVD) is onlangs gehackt via twee zerodaylekken in helpdesksoftware en ticketsysteem Zammad, zo heeft het zelf bekendgemaakt. Het Nationaal Cyber Secu ... Read more
Published Date: Oct 01, 2026 (4 days, 8 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102490 CVE-2026-102489 -
Reddit is putting more limits on Old.Reddit.com
submitted by Powderhorn to technology
100 points | 26 comments
https://arstechnica.com/gadgets/2026/09/reddit-will-block-old-reddit-com-from-people-who-havent-used-it-in-6-months/Soon, Reddit won’t let people use Old.Reddit.com unless they have used the site while logged in within the previous six months.
In July, Reddit started requiring that users be logged in to access Old Reddit. This new requirement is an effort to reduce Reddit’s biggest source of scraping and automated traffic, the company says.
Today, the social media platform announced additional upcoming restrictions on Old Reddit. A Reddit post from an employee, known as “judy-funnie” on the platform, says that “in the next few months, we’ll further limit access for logged-in users to only those who have used Old Reddit in the last six months (which covers the vast majority of all Old Reddit users).”
There is an exception for moderators, who will still be able to view Old Reddit regardless of when they last used it, as long as they are logged in.
“This helps keep Old Reddit available for the people who rely on it while reducing automated abuse,” the post says.
I’m sure it has nothing to do with old.reddit.com not having (as many? any? hard to say with uBO) ways to insert ads and manipulate the feed.
Alienating the people most likely to post and comment in a substantive way isn’t going to work out as well as they hope.
-
A Near-Disaster on Flydubai
submitted by Powderhorn to news
3 points | 1 comments
https://www.theatlantic.com/ideas/2026/09/flydubai-plane-attack-israel/688848/I’m sure everyone has heard about this, but as nothing has been posted, I thought I’d provide this take. It’s a great analysis, and the writing is chef’s kiss.
Today, somewhere over Saudi Arabia, the co-pilot of an Israel-bound Flydubai Boeing 737 stabbed the other pilot and pitched the nose of the plane toward the desert below. The jet descended 17,000 feet in two minutes, at an acceleration violent enough to make your phone and in-flight snack jump off your tray and be pinned to the ceiling. Other crew members and at least one Israeli passenger broke into the cockpit and subdued the assailant. Relief pilots then took over and landed the plane in Tabuk, Saudi Arabia. After a second Flydubai plane took the 174 passengers to Tel Aviv, one of the passengers who’d stormed the cockpit told Israeli Prime Minister Benjamin Netanyahu that his actions had been effective in part because he had watched the disaster-porn documentary series Mayday, about aviation catastrophes, and had known to pull back on the yoke.
Whether today’s near-disaster was terrorism or merely attempted mass murder depends on the attacker’s motive. Either way, it is a public-relations catastrophe for Flydubai, the budget cousin of the airline Emirates. Since the United Arab Emirates opened diplomatic relations with Israel in 2020, the airline has connected the two countries with few interruptions, even for acts of war and terror. Keeping that air route open and safe has taken a great deal of effort. Last year, I witnessed clever security engineering at Dubai’s Terminal 1: placement of the check-in desk for El Al, the Israeli carrier, adjacent to the desk for Iran’s Mahan Air. Anyone tempted to attack Israeli passengers would hit Iranian ones, and vice versa. Checked baggage costs extra, but the experience of being a human shield while waiting in line is complimentary.
-
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The ... Read more
Published Date: Oct 01, 2026 (4 days, 8 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-86950 -
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configur ... Read more
Published Date: Oct 01, 2026 (4 days, 9 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2026-88771 -
New Head Of D&D Saying All The Right Things About Mending Burnt Bridges
It’s been a bit tough to watch how Wizards of the Coast (WotC) has behaved regarding its beloved TTRPG Dungeons & Dragons the past couple of years. A game that was built from its inception on encouraging fans and creators to use the game to do new and interesting things suddenly saw its shepherd turn […] -
Git-Dedup: faster checkouts, less disk space, Git-compatible
Article URL: https://git-dedup.ben3d.ca/
Comments URL: https://news.ycombinator.com/item?id=49916728
Points: 1
# Comments: 0
-
Turbo Haskell
Article URL: https://www.reddit.com/r/haskell/comments/1wu24oe/turbo_haskell/
Comments URL: https://news.ycombinator.com/item?id=49915157
Points: 20
# Comments: 0
-
Texas Officials Disband Local Cop Shop For Failing To ‘Provide Any Benefit To The Community’
“Defund the police” has come for at least one local law enforcement agency in one of the reddest states in the nation. This police department could have avoided this ignominious fate simply by not being generally awful. But the person leading the now-defunct department couldn’t seem to do his job without violating rights on the […] -
Google Antigravity Googlebook app hits the Play Store
-
Google Home now lets you preview Nest Doorbell ringtones, just in time for the holidays
Smart doorbells usually center their features around their security features — person alerts, motion tracking, the works — but they also go a long way in making your front door a little more fun. Google is no stranger to seasonal doorbell chimes, and ahead of a few months packed with holidays, the company is making a big improvement to how you setup your doorbell ringtones.
more… -
Google Home update rolling out with better ‘Find My Phone’ voice commands, smart home improvements
A new Google Home update has arrived with various improvements including better support for the “Find My Phone” voice command on Gemini speakers.
more… -
Blender, the 3D modeling app, is launching for Android next year; iPad app still on pause
One of the biggest headaches facing Google’s push to make Android more of a desktop platform is the professional sector of apps and programs, but one big name is making the effort, as Blender is working to bring its app to Android.
more… -
Attackers have been exploiting critical Zimbra flaw to steal emails
Attackers have been exploiting critical Zimbra flaw to steal emails
Hackers have been exploiting a critical vulnerability in the Zimbra Collaboration Suite in an attempt to obtain email backups and authentication credentials of vulnerable organzations, Microsoft has w ... Read more
Published Date: Sep 30, 2026 (4 days, 15 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-73570 -
Here’s how much Google is testing paying web publishers for AI Overview usage
A new report details how Google is testing paying web publishers for content used in its AI Overviews, including how much they’re making and how much that varies.
more… -
Reddit is putting more limits on old.reddit.com
Article URL: https://arstechnica.com/gadgets/2026/09/reddit-will-block-old-reddit-com-from-people-who-havent-used-it-in-6-months/
Comments URL: https://news.ycombinator.com/item?id=49913588
Points: 62
# Comments: 29
-
In The Wake Of The Latest Unprecedented AI Proofs, What Now For Mathematics And Mathematicians?
As arguments rage about the possible or real threats of AI, there is one domain that AI has already turned on its head, and in the space of just the last few weeks: mathematics. The first hint of what was coming arrived in May, when OpenAI announced that one of its models had disproved a […] -
Google announces Gemini 4 Argon as its new frontier model
Gemini 4 Argon is Google’s “next era of frontier intelligence” and built for “deep reasoning across complex, long-horizon workflows.” It follows the cancellation of Gemini 3.5 Pro and focus on 3.8 Flash.
more… -
Discord gives more advertisers more tools to target its users
submitted by Powderhorn to technology
39 points | 5 comments
https://arstechnica.com/gadgets/2026/09/discord-gives-advertisers-more-tools-to-target-its-users/Discord has announced tools aimed at expanding the number and types of companies that advertise on the platform.
This week, the social media firm announced Discord Ads Manager, an ad campaign management platform that lets companies manage ads shown on Discord in one place. The tool can be used to perform forecasting, build “a campaign with objective-based bidding,” and monitor an ad campaign’s performance, according to the announcement.
“Self-service access extends Discord advertising to smaller studios and marketers that previously needed a direct sales relationship to run campaigns, opening the platform to advertisers, regardless of their budget,” Discord said.
The ads manager is currently available to select advertisers, but self-service access won’t come until “early 2027,” Discord said.
The company is also expanding Video Quests, video ads Discord users can watch to get in-game rewards. Discord has been showing these ads to browsers in a beta format, with limited testing on Discord’s mobile apps. The company announced that the ad format is now called Video Quests Reserve and will serve as “a premium, reservation-based offering designed for high-impact brand moments.” The ads will give “advertisers a scalable, always-on way to drive outcomes, such as impressions and clicks.” Discord will offer advertisers additional objectives to track “soon.”
Just what I need. Ads for games on servers not at all about games.
-
Continuing our infrastructure updates: What's changing in the coming months
Article URL: https://www.reddit.com/r/modnews/comments/1wubgvt/continuing_our_infrastructure_updates_whats/
Comments URL: https://news.ycombinator.com/item?id=49912903
Points: 4
# Comments: 1
-
Git-dedup – faster and smaller checkouts for agentic workflows
Article URL: https://ben3d.ca/blog/git-dedup-faster-smaller-checkouts
Comments URL: https://news.ycombinator.com/item?id=49912740
Points: 2
# Comments: 0
-
Show HN: Got tired of relaying context between Slack and my Claude Code CLI
Article URL: https://www.reddit.com/r/ClaudeAI/comments/1wuc5vu/i_was_tired_of_relaying_context_between_slack_and/
Comments URL: https://news.ycombinator.com/item?id=49912656
Points: 3
# Comments: 0
-
Reddit is killing RSS feeds and ending public API access because of AI bots
Article URL: https://techcrunch.com/2026/09/30/reddit-is-killing-rss-feeds-ending-public-api-access-because-of-ai-bots/
Comments URL: https://news.ycombinator.com/item?id=49912499
Points: 41
# Comments: 30
-
Google Store Referral Program back for Pixel 11: 10% off phones, $50 Store credit
Following the Pixel 11 launch last month, the Pixel Referral Program is now back and refreshed on the Google Store.
more… -
Ban Kids From Social Media And They’ll Just Chat In Public Radio Podcast Comments
Eleven months ago, I wrote about what I thought was a truly fascinating find: that some kids appeared to be using some random old NPR podcasts on Spotify as a personal chat room to get around various restrictions. It was mentioned, somewhat in passing, on the “How to do Everything” podcast last October, where someone […] -
Reddit will stop supporting RSS feeds on November 13th
Article URL: https://www.theverge.com/tech/1002788/old-reddit-ai-scraping
Comments URL: https://news.ycombinator.com/item?id=49912288
Points: 12
# Comments: 6
-
Daily Deal: Microsoft Access Complete Course
The Microsoft Access Complete Course combines four different courses in one. Jump in, and you’ll walk through everything from the absolute Access basics to more advanced concepts, like building dynamic user data forms and effective reports. By the end of the course, you’ll have the know-how required to create effective database tables, automate tasks, and […] -
Mid-week Android game and app deals: Methods, Cyberlords, TABS, Kingdom Rush, more
Today’s best Google Play app and game deals are now up for grabs alongside the thousands of price drops in Amazon’s early fall Prime Day sale. Highlights include Methods: Detective Competition, TABS Pocket Edition, Cyberlords – Arcology PREMIUM, Laser Tanks: Pixel RPG, Kingdom Rush Frontiers TD, Screw Puzzle Premium, and more. Just be sure to dive into this giant $650 price drop hits Galaxy Z Fold 7 at Amazon ($750 less than Fold 8) and the brand new Fire TV Stick 4K that launched today at 50% off. The apps await below.
more… -
Three years migrating latency-sensitive services to Rust and one Tokio failure
Article URL: https://www.reddit.com/r/rust/comments/1wuask9/three_years_migrating_latencysensitive_services/
Comments URL: https://news.ycombinator.com/item?id=49912150
Points: 2
# Comments: 0
-
Apple Music 7.0 beta brings Liquid Glass redesign to Android
Apple Music for Android is getting a big Liquid Glass-inspired redesign with the latest 7.0 beta.
more… -
Facer revamps Wear OS watch face library, adding new styles from Timex and more
Facer provides a huge library of watch faces for Wear OS and, with a new update, it’s adding even more styles while also redesigning the app entirely.
more… -
Show HN: Open-source model routing for coding agents at Astra-level performance
A few months ago we started building a model router for coding agents because we thought we could outperform any single model with an ensemble approach. Recently we’ve achieved that milestone and I want to talk about how we did it.
First of all, a quick explanation: the Weave Router (https://github.com/weave-os/router) plugs into any coding agent (e.g. Claude Code or Codex) and intelligently switches between LLMs. So, for example, Astra handles tricky debugging or complex system design tasks, and Deepseek v4 Flash handles simple frontend updates.
What we’re announcing today is our new routing model, which we’re calling Weave Router 2.0. We benchmarked 2.0 against GPT-6 Astra on Terminal Bench 4.0 and SWE Atlas. On both benchmarks, the router had equivalent pass rates. On Terminal Bench, the router hit 52% of Astra’s cost, and completed tasks 2.2x faster. On SWE Atlas, the router cost 54% as much as Astra and ran 2.5x faster. (Full results on our website at https://weaveos.com/router!)
It turns out training a model to route effectively - taking into consideration model capabilities, costs, cache awareness, and more - is a really hard problem! I want to talk about three ways we were able to improve so much over the last few months: 1) a new architecture, 2) larger training data set size, and 3) smarter cache-eviction impact calculation.
1) a new architecture. Our initial approach used an RL model without many priors. While RL is still an important part of the story, the cost of fully exploring the space of routing decisions is very high, so we’ve taken some shortcuts that have significantly improved performance.
Consider how large the search space for the routing problem is. Take a typical coding agent session, with ~100 agent turns (i.e. 100 LLM API calls). Technically there are 100 chances to select a model. If we assume a roster of ~10 models (of course there are lots more but we can remove any that are Pareto dominated), then there are 10^100 possible paths through that session. We simply cannot explore all of them! So that's why clever tricks to shrink this space are so important.
In particular: we trained a hidden Markov model to trace the session state, then a classifier maps the session to one of a few buckets of similar models. Using the HMM allows us to evaluate not just where a session is currently, but how it got there. We've gotten significantly better performance on bucket selection by incorporating that information - we believe this is because two sessions that might look quite similar to a naive classifier are much better distinguished by this HMM approach.
Using this HMM + classifier to select a bucket first significantly shrinks the space to explore, by throwing out most models that could not reasonably serve the given session. This rearchitecture was the single biggest performance unlock!
2) larger training data set size (much less technically interesting but still an important part of the story). By using frontier LLMs to help us label a larger and more diverse set of coding agent sessions, we were able to bootstrap the two models discussed in 1) to a better state, while also providing even richer reward signals for RL.
3) smarter cache-eviction impact calculation. One of the hardest parts of routing well (if you care about saving money) is using the model caches intelligently. We built a subsystem that can calculate the expected value of switching models (and thus paying a high one-time cost to fill up a different cache) much more accurately, helping us avoid costly and unnecessary switches in more cases, while still switching when the benefit outweighs the cost. This is where most of our improvement on cost has come from.
We still have a lot of room to continue to improve (we won’t rest until we’re consistently beating Astra/Fable, not just tying!) but matching frontier model performance was a huge milestone for our routing model, and in my opinion validates our initial hypothesis that an ensemble of models can do better than any single model ever could.
Our router is open source (https://github.com/weave-os/router) so anyone can try it out. Or if you prefer you can use our hosted version (https://weaveos.com/router).
Comments URL: https://news.ycombinator.com/item?id=49911500
Points: 123
# Comments: 42
-
How the Citrix NetScaler Zero-Days Are Actually Being Exploited
How the Citrix NetScaler Zero-Days Are Actually Being Exploited
The story around the Citrix NetScaler zero-days has become much clearer over the last few days.Threat Intelligence PlatformInitially, we knew that CVE-2026-88771 and CVE-2026-88772 were being exploite ... Read more
Published Date: Sep 30, 2026 (4 days, 17 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-86950 CVE-2026-88772 CVE-2026-88771 -
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research t ... Read more
Published Date: Sep 30, 2026 (3 days, 23 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-73570 -
SCOTUS Once Again Allows Trump Administration To Keep Deporting Migrants To Random Countries
The Supreme Court just keeps giving Trump a free pass to engage in what Mike Masnick correctly called “human trafficking.” It’s stuff this nation has never done before because it’s never been run by someone quite like Trump before. To maximize the cruelty inflicted on immigrants, the Trump administration (steered directly by its chief ghoul, […] -
Samsung’s Galaxy Z Fold 7 is down to the price of a normal smartphone, today-only
Nearly a decade in, foldables have come a long way. Even Apple has noticed all of the fun Android users are having with their bendable smartphones, jumping into the crowd with next month’s iPhone Duo. Unfortunately, you usually need to break an arm and a leg to afford one, but with this one-day-only deal on the last-gen Galaxy Z Fold 7 at Amazon, your entry fee to the foldable club is down to the price of modern slab flagships. You’ll need to hurry though, as this deal is already halfway to selling out.
more…
