From Hacker News Front Page · 40 stories
IETF TLS Working Group Opposes NSA-backed Proposal to Remove ECC from Hybrid ML-KEM
The Internet Engineering Task Force (IETF) TLS working group has largely opposed a specification, supported by the NSA, that would remove Elliptic Curve Cryptography (ECC) from hybrid ECC+ML-KEM in TLS. This opposition highlights concerns about the security implications of relying solely on ML-KEM without the added protection of ECC, particularly given the potential for future mathematical breaks in ML-KEM.
RustDesk Adds Unattended Remote Access for Wayland on Debian/Ubuntu x86_64
RustDesk now supports true unattended remote access on Wayland for x86_64 Debian/Ubuntu-based systems, including multi-monitor setups. This development addresses a long-standing challenge in Linux remote desktop solutions, as many competitors still lack robust Wayland support.
Toast 1 Search Agent Released, Outperforms GPT-5.6 Sol and Claude Opus 5 in Cost and Speed
Toast 1, a specialized search agent, has been released, offering frontier search quality at a lower cost and faster speed than existing models like Claude Opus 5 and GPT-5.6 Sol. This development is significant because it provides a more economical way for AI models to perform knowledge work by specializing the search loop, freeing up generalist models for reasoning and final answer generation.
Australia's Home Battery Subsidies Halve Wholesale Power Prices, Over 500,000 Installed
Australia's home battery subsidy program, launched in July 2025, has led to the installation of over 500,000 batteries, contributing to a 47% reduction in wholesale power prices. This initiative addresses the challenge of surplus solar energy from widespread rooftop solar adoption by encouraging homeowners to store and use power during peak demand, stabilizing the grid and lowering costs.
New Universal RCE Deserialization Gadget Chain Affects Ruby 3.3 to 4.0.6
A new universal Remote Code Execution (RCE) deserialization gadget chain has been released, enabling command execution via Marshal.load on Ruby versions 3.3 up to 4.0.6. This development follows a 2026 disclosure by OpenAI regarding AI agents exploiting Ruby deserialization to gain administrative control, highlighting an ongoing vulnerability in Ruby's deserialization process.
US Government Spied on Left-Wing and Anti-ICE Protesters in "Operation Puppet Master"
Newly released records indicate the US Department of Homeland Security (DHS) conducted extensive surveillance on left-wing organizations and anti-ICE protesters in Minnesota and New York City. This operation, named "Operation Puppet Master," involved undercover agents, infiltration of Signal chats, and obtaining financial records, leading to a criminal case against 15 Minneapolis protesters.
Bluesky Launches Protocol Services and Jetstream v2 for AT Protocol Developers
Bluesky introduced "Bluesky Protocol Services," a new brand and website to centralize documentation and clarify service contracts for its AT Protocol infrastructure. Alongside this, Jetstream v2 was released, adding Network Replay and snapshot capabilities to allow developers to access historical network data, addressing a previous limitation of the service.
systemd-journald causes excessive disk writes, up to 110KB+ per log line
A bug report details that systemd-journald, version 257.9, on Debian 13 with Linux kernel 6.12.57+, is causing excessive disk I/O, writing tens of kilobytes for each log line. This issue significantly increases disk activity, impacting VM performance and potentially reducing hardware lifespan.
JDK 27 Makes G1 the Default Garbage Collector, Introduces GC Code Refactorings
OpenJDK 27 will make the G1 garbage collector the default for all environments, removing the previous conditional defaults. This change reflects G1's improved performance and simplifies garbage collector selection for developers.
Graduate Student Extends Quantum Uncertainty Principle to Higher-Dimensional Fractals
Alex Cohen, a doctoral student at MIT, extended the fractal uncertainty principle to all higher dimensions, a problem that had previously stumped mathematicians. This mathematical breakthrough, published in the Annals of Mathematics, provides a new tool for understanding quantum particle behavior in chaotic systems.
Deutsche Bank Becomes First Foreign Yuan Clearing Bank in Europe
China has authorized Deutsche Bank to clear renminbi transactions in Europe, making it the first foreign institution in the region to hold this role. This appointment expands Beijing's infrastructure for international yuan usage and provides European companies with an additional route for yuan payments.
Flutter 3.47 Decouples UI Packages, Brings Impeller to Desktop, and Stabilizes Widget Previews
Flutter 3.47 introduces standalone material_ui and cupertino_ui packages, decoupling design systems from the core SDK for independent updates. This release also brings Impeller rendering to desktop platforms by default and graduates Flutter Widget Previews to stable, improving performance and tooling.
Tailscale Outages Traced to 16-Year-Old SQLite WAL-Reset Bug, Now Fixed
Tailscale experienced multiple outages due to database corruption, which was traced to a 16-year-old bug in SQLite's write-ahead logging (WAL) reset mechanism. The bug, a data race with tight timing constraints, existed since 2010 and was fixed in SQLite version 3.51.3. Tailscale has implemented a fix and shared details to aid the broader SQLite community.
Delta Launches Multiplayer Coding Environment with Integrated AI Agents and DeltaDB Version Control
Delta has launched a private beta for its new multiplayer coding environment, which integrates AI agents and human developers within a shared context. The platform includes DeltaDB, a version control system that records every operation between commits, links code changes to conversations, and works with existing Git repositories. This aims to improve collaboration by connecting code and conversations, allowing developers and agents to work together with full historical context.
GitHub resolves incident affecting Pull Requests, Issues, and Search functionality
GitHub experienced an incident causing errors and degraded performance for Pull Requests, Issues, and Search on GitHub.com. The issue was traced to a database index reference problem following a recent migration and has since been resolved.
Meta Pays Controversial Creators, Including White Nationalist and Anti-Vaxxer, for Content
An ABC NEWS Verify investigation found that Meta is directly paying several controversial content creators, including a white nationalist with neo-Nazi links and a prominent anti-vaxxer, through its content monetization programs. This practice appears to violate Facebook's own content monetization policies, raising questions about content moderation and platform responsibility.
CFTC Declares Market Emergency, Orders Kalshi to Continue Operations in New York
The Commodity Futures Trading Commission (CFTC) declared a market emergency and ordered KalshiEX, LLC to continue operating, following a lawsuit filed by the New York Attorney General seeking to halt the exchange's nationwide event contract offerings. This action by the CFTC aims to maintain market stability and assert federal jurisdiction over derivatives exchanges against state-level challenges.
llama.cpp Enables Local Execution of Frontier AI Models on Various Hardware
llama.cpp allows users to run advanced AI models, including Qwen, Gemma, and GPT-OSS, entirely on their local machines without API keys or telemetry. This development provides a private and hardware-agnostic solution for deploying large language models, making frontier AI more accessible for individual users and developers.
AI Agents Fully Automate CTF Challenges at BSidesSF 2026, Outperforming Human Teams
At BSidesSF 2026, an autonomous AI agent system won the Capture The Flag competition by solving all 52 challenges in minutes, a significant shift from previous years where AI was only used as an assistant. This development indicates a transformation in how cybersecurity skills are measured and developed, as AI now excels at bounded, well-defined problems like those found in CTF challenges.
OpenSSH 10.5 Released with Security Fixes and More Frequent Updates
OpenSSH 10.5 was released on August 11, 2026, including several security and bug fixes. The OpenSSH team will now issue more frequent releases to address security bugs, many of which are being identified with AI assistance, more quickly.
Mojo Programming Language Reaches 1.0 Milestone, Offering Stable Foundation for Development
The Mojo programming language has officially released version 1.0, providing a stable and production-ready foundation for developers. This milestone aims to enable long-term project development by reducing frequent breaking changes, which is significant for its growing ecosystem and community contributions.
Flock Camera Glitch Leads to Woman Being Pulled Over at Gunpoint Twice
A woman in Wisconsin was stopped at gunpoint twice by police after a Flock license plate camera system incorrectly flagged her car as being connected to a homicide investigation. Milwaukee police confirmed the alert should have been removed from the system days earlier, but an employee failed to clear it. This incident highlights the critical need for accurate and timely data management in automated law enforcement systems to prevent wrongful stops.
New compatibility layer accelerates LLM inference in macOS VMs on Apple Silicon by up to 16x
Cua released a process-scoped compatibility layer that significantly improves LLM inference performance within macOS virtual machines running on Apple Silicon. This layer unlocks newer Metal fast paths, leading to up to 16 times faster token generation for LLMs like TinyLlama and Gemma 4.
OpenAI's Head of Ethics, Chloé Bakalar, Departs Less Than a Year After Joining
Chloé Bakalar, OpenAI's Head of Ethics, left the company last month, less than a year after her appointment. Her departure raises questions about the company's dedicated ethics roles, as she was reportedly the sole dedicated ethicist and has no immediate replacement.
Pioneer Rekordbox PRO DJ LINK Vulnerability Exposes User Data
AlphaTheta identified a security vulnerability in the PRO DJ LINK function of Rekordbox and certain CDJ/XDJ models, allowing unauthorized third parties on the network to view data on connected Windows PCs, Macs, or USB/SD cards. This vulnerability impacts users who utilize the PRO DJ LINK feature, potentially exposing sensitive information.
Needle2: 14MB Agentic LLM for Edge Devices
Needle2 is a new 45-million-parameter agentic large language model (LLM) designed for low-cost edge devices, such as phones, wearables, and smart home devices. It features a 14MB file size and 28MB session RAM, enabling on-device AI capabilities without requiring GPUs or NPUs, which matters because it expands the reach of AI to billions of connected IoT devices and budget hardware.
European booksellers report suspicious bulk book orders, suspect AI data scraping
Independent booksellers in Europe are receiving large, unusual orders for obscure book titles, leading to suspicions that AI companies are acquiring books for data scraping. This mirrors a past incident in the US where Anthropic was found to be scanning millions of books for its AI models, raising concerns about copyright and the legality of such practices in Europe.
Docker Introduces Sandboxes for Isolated AI Agent Execution
Docker has released Sandboxes, a new feature providing isolated microVM environments for running AI coding agents locally. This allows developers to grant AI agents more autonomy while protecting the host system's filesystem and network.
Klepton Enables Running Android ARM64 VR APKs on Apple Vision Pro Without JIT
Klepton, a new tool, allows Android ARM64 VR APKs to run on Apple Vision Pro by translating Android libraries into Apple-compatible formats. This development provides a method for developers to port existing Android VR applications to Apple's new platform, potentially expanding the available content for Vision Pro users.
Snowflake Introduces Data Mirroring for Postgres Replication into Snowflake
Snowflake has launched Data Mirroring, a new feature in public preview for its Postgres service, which reimagines Postgres replication to push changes directly into Apache Iceberg tables and then into Snowflake. This feature aims to provide highly resilient data replication with low cost, low lag, and transactional consistency, simplifying the process of moving data from transactional databases to analytical databases.
UnYOLO Introduces Credential Broker and Policy Engine for GitHub and Other Services
UnYOLO is a new framework designed to act as a credential broker and policy engine for services like GitHub, Hugging Face, and Google Workspace. It enhances security by preventing agents from directly holding sensitive credentials and enforces fine-grained access policies through a local JSON rules file.
Triton Driver Enables Full DirectX 11 Support for Windows Guests in QEMU
A new Windows driver named Triton, combined with the existing Neptune Direct3D protocol forwarding layer, now provides full DirectX 11 support for Windows virtual machines running on QEMU. This development allows for modern graphics acceleration in Windows guests, addressing limitations of previous approaches that relied on replacing core Windows DLLs.
New DNS `_for-sale` record type signals domain availability for purchase
A new reserved DNS leaf node name, `_for-sale`, defined by RFC 10023, allows domain owners to signal that a domain is available for purchase while remaining active. This mechanism provides a standardized way for brokers and automated services to identify domains for sale without disrupting live websites or relying on often-redacted WHOIS data.
Nixpkgs Core Team Disbands Citing Unsustainable Workload and Governance Issues
The Nixpkgs core team has disbanded due to an unsustainable workload and issues with the project's Steering Committee. This dissolution highlights challenges in open-source project governance and volunteer burnout, which could impact the future development and stability of the Nixpkgs ecosystem.
Former Ukrainian Defense Minister Details Challenges in Securing Patriot Missiles
Mykhailo Fedorov, former Ukrainian Defense Minister, revealed the difficulties in acquiring Patriot missiles and Western support, citing low European stockpiles and slow US production. This highlights the ongoing struggle for Ukraine to maintain air defense capabilities against Russian ballistic strikes.
Oracle Bans AI-Generated Code from OpenJDK Contributions
Oracle has prohibited the submission of AI-generated code to OpenJDK, citing concerns over safety, security, and intellectual property risks. This policy applies to repositories and pull requests, though developers can use large language models privately for debugging and code review. The decision is notable given Oracle's internal use of AI for code generation.
SDSS DR20 Releases First Southern Hemisphere Optical Data, Maps Half Million Supermassive Black Holes
The Sloan Digital Sky Survey (SDSS) released Data Release 20 (DR20), including the first optical observations from the southern hemisphere and coordinated X-ray identifications. This release provides an all-sky map of approximately 500,000 accreting supermassive black holes, advancing the study of quasars and active galactic nuclei.
USA Today Co. Partners with Palantir for Audience Data Analysis and Monetization
USA Today Co., the largest newspaper chain in the US, has partnered with Palantir to analyze and monetize user behavior data. This collaboration aims to improve audience engagement and increase revenue amidst declining search traffic referrals for news publications.
pgrust 0.2 Achieves 300x Faster Analytics Performance Than PostgreSQL
pgrust version 0.2 has been released, demonstrating significant performance improvements over PostgreSQL, particularly for analytical workloads. The new version is 300 times faster than PostgreSQL on the Clickbench benchmark and 30% faster on OLTP benchmarks, primarily due to a re-engineered query engine.
Bioengineered Chewing Gum Reduces HPV and Bacteria Linked to Head and Neck Cancer
Researchers at the University of Pennsylvania developed a bioengineered chewing gum that reduced Human Papillomavirus (HPV) levels by up to 93% and nearly eliminated two bacteria associated with head and neck cancer in oral samples. This development offers a potentially more accessible and affordable treatment option for preventing and managing head and neck squamous cell carcinoma (HNSCC).