@admin — following
Follow buttons here act as you, not as @admin.
@admin follows
| Label | Kind | State | Action |
|---|---|---|---|
| indiekit-demo.rmendes.net | source | — | — |
| fediversereport.com | source | — | — |
| wedistribute.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| 9to5google.com | source | — | — |
| hnrss.org | source | — | — |
| hnrss.org | source | — | — |
| cvefeed.io | source | — | — |
| thebeatcommunity.com | source | — | — |
| contabo-status.com | source | — | — |
| www.techdirt.com | source | — | — |
| beehaw.org | source | — | — |
| beehaw.org | source | — | — |
Timeline
-
📝 2d43d60 — fix(indiekit): send the token to introspect in the request body
Reply source -
📝 d84b207 — build: add an official runtime container image
Reply source -
💬 @paulrobertlloyd — PR #1016 : feat: filter the list of posts by post type and text
Reply sourceCommentaire de pull request · PR #1016 feat: filter the list of posts by post type and text · @paulrobertlloyd
Nice! Couple of things…
- Let’s put the filters inside a details component so that they are hidden/collapsed by default. That way they don’t take up too much screen space when not in use. The
openattribute should be added if a post type or search filter is being used. - Thinking about the accessibility of showing a subset of filtered items:
- There should be a
h2above the items indicating what’s being shown - The page title should be updated to play back this same information
- There should be a
- Adding localisations is a bit more involved than updating the JSON files (at least for them to be managed via Localazy). New keys are added thus:
- Add/update
en.json localazy upload(adds any new keys to locale dictionary)- Add localisations in the Localazy UI
localazy download(downloads updated localisation files)
- Add/update
I can add you as a contributor to Localazy if you’d like? Otherwise I can do the above once we’ve agreed on the localisations needed and their respective keys.
Playing back search results
Here’s an initial suggestion for the heading/page title. I realise this is possibly a bit much (would also need to think how this would need to adapt should further filters be added). Open to suggestions!
No filters applied
- No posts
- 1 post
- 2 posts
- 41 posts (showing posts 1 to 40)
Post type filter applied
- No [TYPE] posts
- 1 [TYPE] post
- 2 [TYPE] posts
- 41 [TYPE] posts (showing posts 1 to 40)
Search filter applied
- No posts found matching ‘[QUERY]’
- 1 post found matching ‘[QUERY]’
- 2 posts found matching ‘[QUERY]’
- 41 posts found matching ‘[QUERY]’ (showing posts 1 to 40)
Post type and search filter applied
- No [TYPE] posts found matching ‘[QUERY]’
- 1 [TYPE] post found matching ‘[QUERY]’
- 2 [TYPE] posts found matching ‘[QUERY]’
- 41 [TYPE] posts found matching ‘[QUERY]’ (showing posts 1 to 40)
The page title should use this same text, prefixed with ‘Published posts: ’
- Let’s put the filters inside a details component so that they are hidden/collapsed by default. That way they don’t take up too much screen space when not in use. The
-
Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain
Reply sourceArticle URL: https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain
Comments URL: https://news.ycombinator.com/item?id=50076503
Points: 20
# Comments: 7
-
Gemini 4 Argon has January 2025 knowledge cutoff
Reply sourceArticle URL: https://www.reddit.com/r/Bard/comments/1x53utv/argon_has_january_2025_knowledge_cutoff_this_is/
Comments URL: https://news.ycombinator.com/item?id=50076458
Points: 4
# Comments: 0
-
🟢 PR #1019 — ci: move Docker files to sub-folder
Reply sourcePull request (OPEN) · PR #1019 ci: move Docker files to sub-folder · @paulrobertlloyd
This is to prevent Railway using Docker to deploy the development environment. This is important because Railway always picks Docker as builder.
-
📝 b791821 — style: enable (mostly) strict type checking
Reply sourceCommit sur main · b791821 · @paulrobertlloyd
Disable noImplicitAny checks as these are many and various and need addressing separately
-
📝 11335b9 — docs: run Indiekit in a container
Reply source -
Scaledown.ai Launches Constrained Decoding Models
Reply sourceArticle URL: https://twitter.com/neal_k_patel/status/2109978626124898587
Comments URL: https://news.ycombinator.com/item?id=50076101
Points: 2
# Comments: 0
-
AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo - 404 Media
submitted by Kissaki to technologyReply source
84 points | 19 comments
https://www.404media.co/ai-company-lets-cops-pinpoint-specific-houses-based-on-a-single-interior-photo/Raven, previously called GeoSpy, lets cops figure out what specific Airbnb or Zillow property a photo was taken in.
An AI company now lets cops take a photo and nearly instantly figure out what specific home it was taken in, using only clues in the photo itself, and is clearly pulling data from sites like Zillow and Airbnb.
-
A plea not to use uv-build
Reply sourceArticle URL: https://blogs.gentoo.org/mgorny/2026/10/12/a-plea-not-to-use-uv-build/
Comments URL: https://news.ycombinator.com/item?id=50076048
Points: 65
# Comments: 70
-
📝 2f22f32 — style: enable (mostly) strict type checking
Reply sourceCommit sur main · 2f22f32 · @paulrobertlloyd
Disable noImplicitAny checks as these are many and various and need addressing separately
-
📝 29ceaa9 — docs: run Indiekit in a container
Reply source -
📝 ebbc9b4 — ci: publish the container image on release and preview channels
Reply source -
📝 cb22077 — build: add an official runtime container image
Reply source -
Trump Bans CNN, Then Has DOJ Investigate CNN For Not Covering Him
Remember when Elon Musk told advertisers to go fuck themselves… and then sued them (unsuccessfully) for not advertising on his personal propaganda and manipulation site? Well, it appears that Donald Trump is trying a government-backed variation on that abusive power play: claiming that news networks choosing not to cover him after he announced he was […]Reply source -
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
Reply sourceDocker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it fou ... Read more
Published Date: Oct 13, 2026 (18 hours, 58 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-105445 -
Daily Deal: The Complete CompTIA And IT Exam Training Bundle
The Complete CompTIA and IT Exam Training Bundle offers access to multi-platform IT training courses, practice exam simulators, and hands-on labs such as CramWise, LinuxPath, DojoLab, CodeDirect, and ExamsDigest. These help prepare you for exams like CompTIA A+, Network+, Security+, Cloud+, Server+, and PenTest+, alongside cloud and networking credentials. It’s on sale for $40. Note: […]Reply source -
YouTube bringing automatic background play to Android Automotive cars
Reply source
Google is launching some app updates for Android Automotive, “Google built-in,” which bring more video apps and increased flexbility for the platform such as allowing YouTube to run in the background while driving.
more… -
Show HN: Deslop – Oxlint rules for AI-generated TypeScript
Reply sourceCatches unsafe types, duplicate code, and low-value tests.
Comments URL: https://news.ycombinator.com/item?id=50075809
Points: 7
# Comments: 1
-
Ledger supply chain is compromised
Reply sourceArticle URL: https://twitter.com/0xJohannes_/status/2109634513957527974
Comments URL: https://news.ycombinator.com/item?id=50075787
Points: 3
# Comments: 2
-
Show HN: XY Music Notation
Reply sourceI've been playing around with a new kind of isomorphic music keyboard that uses a base-12 notation, and wanted some sheet music to learn some new music for it.
The idea is to represent each note in 12-TET as a number, so N ∈ (0,1,2,3,4,5,6,7,8,9,X,Y).
I used codex to build a music score rendering backend based on MuseScore with custom note heads that display the pitch class of each note.
I've found it pretty helpful for learning how to play my own instrument, so wanted to share in case anyone else was interested.
Comments URL: https://news.ycombinator.com/item?id=50075665
Points: 72
# Comments: 62
-
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
Reply sourceAttacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for ... Read more
Published Date: Oct 13, 2026 (19 hours, 28 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-109412 CVE-2026-106042 CVE-2026-104935 -
💬 @rmdes — PR #960 : build: official container image with release and manual preview channels
Reply sourceCommentaire de pull request · PR #960 build: official container image with release and manual preview channels · @rmdes
I wanted to test the workflow, so I ran
docker-previewby hand frommainto confirm it works: it did (run 38438316241), and pushedpreview-31andpreview-31-7563895. So theindiekitpackage exists now; it just needs switching to public in its package settings. (docker-releasecan’t buildv1.0.0-beta.31itself, as that tag predates the Dockerfile, so release images start with beta.32.) -
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
Reply sourceSAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant ... Read more
Published Date: Oct 13, 2026 (19 hours, 32 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-89111 -
💬 @rmdes — PR #960 : build: official container image with release and manual preview channels
Reply sourceCommentaire de pull request · PR #960 build: official container image with release and manual preview channels · @rmdes
Thanks for merging! No image has been published yet, since
docker-releaseonly runs on a published release and beta.31 came out before the merge. Could you start the workflow by hand forv1.0.0-beta.31, or would you rather wait for beta.32? Once theindiekitpackage exists, it’ll need setting to public in its package settings (org admin) fordocker pull ghcr.io/getindiekit/indiekit:betato work for everyone; the quickstart is waiting on that tag. -
Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack
submitted by alyaza to newsReply source
36 points | 16 comments
https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-uHackers have forced the temperature of many French supermarket fridges up to 50C overnight, in an “unprecedented” cyber-attack affecting several hundred stores across the country, with fires and food losses reported.
The Paris prosecutor’s office said on Monday the large-scale attack was “affecting connected refrigerators in several major food retailers across France”. Reported damage included “food losses and fires”, it added.
The prime minister, Sébastien Lecornu, instructed France’s national cybersecurity agency ANSSI to investigate, a person in his office said.
France “was coordinating with its European counterparts, as other countries may also be affected”, while also investigating whether any other French firms were at risk, they said.
-
The people holding up the internet
submitted by alyaza to technologyReply source
28 points | 1 comments
https://sheets.works/data-viz/holding-up-the-internet/read -
🟢 PR #1018 — fix(indiekit): send the token to introspect in the request body
Reply sourcePull request (OPEN) · PR #1018 fix(indiekit): send the token to introspect in the request body · @rmdes
Fixes #1017
introspectTokensends the token as a form-encodedtokenparameter in the POST body (RFC 7662 §2.1) instead of in the URL. TheAuthorizationheader is unchanged.The introspection mocks now match that request (no query string, token in the body), so the existing
introspectTokentests fail onmainwithMock dispatch not matched for path '/introspect?token=JWT'. An endpoint-auth test covers the other side: a token sent only in the body is accepted. -
🐛 Issue #1017 — Access tokens are sent in the introspection URL, so they end up in access logs
Reply sourceIssue ouverte · Issue #1017 Access tokens are sent in the introspection URL, so they end up in access logs · @rmdes
introspectTokeninpackages/indiekit/lib/token.jssends the token being checked in the URL as well as in theAuthorizationheader:introspectionUrl.searchParams.append(“token”, bearerToken);
The introspection endpoint never reads it from there (it reads
request.body.token, then the header), so the URL copy does nothing but leak a long-lived access token into access logs, and into any proxy or external IndieAuth server’s logs on the way. On a deployment every Micropub request without a session leaves a line like:POST /auth/introspect?token=eyJhbGciOiJIUzI1NiIs… HTTP/1.1RFC 7662 §2.1 has the client send the token as a form-encoded
tokenparameter in the POST body.Related to #1006.
-
Smartphone shipments dropped by 20%, lowest point in 14 years amid memory crisis
Reply source
RAMageddon continues to have wide effects throughout the tech industry, with a new report revealing that the smartphone market has just hit its lowest point in well over a decade.
more… -
YouTube’s contextual AI search rolls out to all users on Android and iOS in US
Reply source
“Ask YouTube” is no longer a YouTube Premium feature as the conversational AI search becomes available on mobile Android and iOS devices.
more… -
Coris (YC S22) Is Hiring Back End Engineer
Reply sourceArticle URL: https://www.ycombinator.com/companies/coris/jobs/h0nDly8-backend-engineer-ai-native-risk-infrastructure-integrations
Comments URL: https://news.ycombinator.com/item?id=50074969
Points: 0
# Comments: 0
-
Google Play adding ‘personal library’ to access your vibe-coded Android apps
Reply source
Google today announced a slew of Play Store updates across vibe-coding, game discovery, social features, and more.
more… -
Show HN: How random are you?
Reply sourceArticle URL: https://lab.specr.net/rigged-draw/
Comments URL: https://news.ycombinator.com/item?id=50074909
Points: 169
# Comments: 87
-
Gemini 4 Argon for Robotics
Reply sourceMain thread: Gemini 4 Argon - https://news.ycombinator.com/item?id=50073879
Comments URL: https://news.ycombinator.com/item?id=50074869
Points: 174
# Comments: 41
-
Nothing’s CMF launches new wireless speakers that look like milk cartons
Reply source
Nothing’s CMF brand has launched new wireless speakers, the first in the lineup, and they look like milk cartons.
more… -
Isocast, OBS Rewrite in Rust
Reply sourceArticle URL: https://twitter.com/ryanvogel/status/2110047677866017087
Comments URL: https://news.ycombinator.com/item?id=50074687
Points: 1
# Comments: 0
-
Jury Convicts Ohio Blogger Of Harassment For Sending A Naked Shrek Pic To A Local Politician
In today’s episode of “wtf,” we have a jury deciding a local blogger is a criminal because a local politician didn’t appreciate being sent a Shrek bereft of clothes to his cell phone. Morgan Trau of the Ohio Capital Journal has the (pathetic) details on this particular miscarriage of justice. An Ohio political blogger let […]Reply source -
Cyberattack halts construction of tunnel between Denmark and Germany
Reply sourceArticle URL: https://ua.news/en/world/kiberataka-zupinila-budivnitstvo-tuneliu-mizh-daniieiu-ta-nimechchinoiu-rmf24
Comments URL: https://news.ycombinator.com/item?id=50074289
Points: 130
# Comments: 108
-
Google Antigravity is now built into Gemini app for macOS
Reply source
As part of today’s Gemini 4 Argon rollout, Google is making a big update to the Gemini app for macOS by integrating Antigravity.
more… -
Today we are rolling out Gemini 4 Argon globally (API, App, Antigravity)
Reply sourceArticle URL: https://twitter.com/OfficialLoganK/status/2110038940841545827
Comments URL: https://news.ycombinator.com/item?id=50073947
Points: 1
# Comments: 1
-
Gemini 4 Argon
Reply sourceSee also: Gemini 4 Argon for Robotics - https://news.ycombinator.com/item?id=50074869
Comments URL: https://news.ycombinator.com/item?id=50073879
Points: 1357
# Comments: 956
-
Gemini app rolling out Gemini 4 Argon to AI Pro and AI Ultra
Reply source
Following the announcement at the end of September, Gemini 4 Argon is starting to roll out to the Gemini app, Google Antigravity, and more.
more… -
Redesigning source control at Anthropic
Reply sourceArticle URL: https://www.anthropic.com/engineering/redesigning-source-control
Comments URL: https://news.ycombinator.com/item?id=50073633
Points: 817
# Comments: 874
-
Deals: Nothing Phone (3) $280 off, Headphone (a) 40% off, Pixel 11 devices up to $365 off, Lenovo Idea Tab $142, more
Reply source
Today’s 9to5Toys Lunch Break is headlined by Nothing Phone (3) at up to $280 off its original price alongside its 2026 Headphone (a) at one of the lowest prices ever (40% off). We also have Google Pixel 11 deals back today at up to $365 off the lists, Lenovo’s budget-friendly 11-inch 2.5K Android Idea Tab at the $142 all-time low, and Anker’s new Nano Neo 45W/60W dynamic charger at just $20. Head below for a closer look at the details.
more… -
Launch HN: Consus (YC F24) – LLM gateway for companies handling sensitive data
Reply sourceHey Hacker News! I'm Eric, the founder of Consus. We route all AI requests to ITAR restricted and controlled unclassified information (CUI) compliant infrastructure. Consus itself satisfies ITAR restrictions, and we recently completed our FedRAMP equivalency audit against the 410 FedRAMP High controls. FedRAMP High is the U.S. government’s strictest security baseline for cloud services handling sensitive unclassified data. A breach of this data could cause severe or catastrophic harm. Achieving FedRAMP equivalency, or authorization, is required before processing CUI information.
Demo: https://youtu.be/6MYxJe6P4oY
Aerospace and defense is experiencing rapid growth. Unfortunately, most companies are struggling to use AI because of necessary data protections & compliance risk. These companies can move even faster if they could use the AI tools that most other industries take for granted.
I spent most of my career prior to Consus in aerospace & defense. I launched national security payloads at SpaceX, and was an early employee at Castelion. I’ve watched first hand how compliance red-tape makes it difficult for companies to adopt new technologies and trust vendors that touch their sensitive data. For example, I worked with a satellite manufacturer that doesn’t allow any AI tools, even for non-sensitive work.
Even as AI has become extremely useful over the past 9-12 months, I was surprised by how many aerospace & defense companies refused to touch it. They could see how it could be helpful, but they were scared about model providers training on their data, violating an ITAR rule, or risk losing new business because of a failed cyber assessment. These are all rational fears.
There were a lot of ways to solve some/all of these problems, but we focused on building a compliant AI inference layer that can "plug" into any AI tool or workflow. Just as OpenRouter integrates with most tools, Consus can connect to tools like ChatGPT or Claude, open source tools including the Pi coding agent or Open WebUI, or integrate with applications built and maintained by individual organizations.
Almost no aerospace & defense company lives in all three major GovClouds (AWS, Azure, Google). When I mapped where frontier models can legally run for ITAR and CUI work, each provider had some subset of models, and each model achieved varying levels of compliance. Our customers don’t think in terms of cloud providers. They think about the data controls they require, and the model they want to use. That is why we built the compliance suffix. Under the hood, every request hits a single OpenAI-compatible endpoint, where keys are verified and policy is enforced before anything touches inference. Every model name must carry a compliance suffix, such as gpt-5.6-sol:fedramp-high or claude-opus-5-5:itar, and any bare model name is rejected. We never proxy to the standard commercial endpoints.
Our customers are also able to build an allowlist of models, and assign spend & model restrictions to individual users in the organization. This is all handled through our Consus Portal where teams can manage spend, keys, and policies.
A typical question we hear is why not just use Bedrock in AWS GovCloud or Azure Government directly. For small teams, just getting access to these platforms is difficult. For larger organizations, GovCloud lets you inherit some but not all of the controls needed to handle sensitive data. Also, models are split across providers: GPT-5.6 Sol is only available in Azure Government, while Claude Opus 5.5 is served through Bedrock in AWS GovCloud. If you want both, you are standing up and securing two separate government cloud environments. We run all of them behind one endpoint so customers don’t have to pick a cloud, and we handle the compliance work for each one.
Given the data sensitivities, Consus does not store any customer data at rest. All prompts and completions stay in memory only for the length of the request and are never logged or written to disk. Zero data retention is strictly enforced both on ourselves and the infrastructure/model providers. We do keep metadata on each request and response for billing and audit purposes.
Consus is not self-serve by design. ITAR requires us to know exactly who is on the other end of every key, so we verify every organization and put a contract in place before issuing API keys. We charge our customers a compliance fee starting at $40/mo/seat plus AI tokens at cost.
We are actively serving customers, and would love any feedback from security experts, or developers/engineers working in highly regulated industries!
References: API Documentation: https://gateway.consus.io/overview Security & Architecture: https://gateway.consus.io/security Compliance Details: https://consus.io/compliance
Comments URL: https://news.ycombinator.com/item?id=50073471
Points: 29
# Comments: 15
-
Now That Information Is Free, What's a College Campus For?
Reply sourceArticle URL: https://commonedge.org/now-that-information-is-free-whats-a-college-campus-for/
Comments URL: https://news.ycombinator.com/item?id=50073455
Points: 10
# Comments: 10
-
Googlebook will improve support for Linux apps eventually, but it’s all about AI for now
Reply source
Googlebook was always going to run into problems with app availability, but few expected the platform to regress its support for Linux apps from Chromebook’s fairly robust solution. In a blog post, Google reiterates that the “Linux Terminal Preview” on Googlebook isn’t for using Linux apps, but for building with AI.
more… -
Look, just fucking use Mastodon
Reply sourceArticle URL: https://giants-club.net/articles/just-use-mastodon/
Comments URL: https://news.ycombinator.com/item?id=50073232
Points: 8
# Comments: 3