From Hacker News Front Page · 40 stories
Hardware Backdoor Discovered in Some x86 CPUs, Allowing Kernel-Level Access
Researchers have uncovered a hardware backdoor, dubbed "rosenbridge," in certain desktop, laptop, and embedded x86 processors, specifically VIA C3 CPUs. This backdoor allows userland code to bypass processor protections and freely read and write kernel data, and has been found enabled by default on some systems.
U.S. Department of Energy Launches Genesis Open Models Initiative
The U.S. Department of Energy (DOE) has launched the Genesis Open Models Initiative. This initiative focuses on developing open-source AI models for scientific research.
REpsych Toolset Generates Images from Program Control Flow Graphs
Christopher Domas released REpsych, a proof-of-concept toolset that translates source images into functioning programs where the program's control flow graph (CFG) generates the original image. This project demonstrates a novel method of manipulating program visualization, primarily for reverse engineering tools.
Ancient Library offers 1,060 Greek and Latin texts with interactive parsing
Ancient Library has launched a new online resource providing 1,060 classical Greek and Latin texts with an interactive parsing feature. Users can click any word to view its lemma, morphology, and dictionary entry, utilizing Lewis & Short for Latin and Liddell-Scott-Jones for Greek.
Study Proposes Life on Earth Arose Independently Twice for Bacteria and Archaea
A new study published in Science Advances suggests that the two main lineages of life, bacteria and archaea, may have independently developed metabolism, implying two separate origins of life on Earth. This research challenges the traditional view of a single origin for all life forms by examining the enzymes that catalyze early metabolic reactions.
Wyzer: A new statically typed language for distributed safety with choreographic programming
Wyzer is a new statically typed, compiled programming language that integrates distributed safety through choreographic programming and a Perceus memory model. It addresses challenges like distributed deadlocks and protocol mismatches by applying a single ownership rule across memory, concurrency, and networks.
textlog: A New Open-Source, Text-Only Microblogging Platform Launched Without JavaScript
textlog, a new open-source microblogging platform, has launched, focusing on text-only content with a 280-character limit per note and no JavaScript. This platform aims to provide a quiet social space for short notes, following people and hashtags, and joining conversations.
Certo Launches Open-Source Platform for Open Badges 3.0 and W3C Verifiable Credentials
Certo has released an open-source platform for issuing, managing, and verifying digital credentials based on Open Badges 3.0 and W3C Verifiable Credentials. This platform provides a standardized solution for organizations to create and distribute verifiable digital certificates and badges for various achievements.
Nepal's National Cyber Security Centre Joins Have I Been Pwned Government Service
Nepal has become the 47th government to join Have I Been Pwned's free government service, granting its National Cyber Security Centre access to monitor Nepalese government domains for data breaches. This integration allows Nepal to identify exposed government email addresses and respond to compromised accounts, strengthening its cybersecurity posture.
Pokémon Emerald Ported to Raspberry Pi Pico 2, Running Natively at 60 FPS
Pokémon Emerald has been successfully ported to run natively on a $6 Raspberry Pi Pico 2 (RP2350B) microcontroller, achieving 60 frames per second with HDMI output and persistent saves. This was accomplished by recompiling the game's decompiled ARMv4T code to Cortex-M33 and implementing the Game Boy Advance's video hardware in software on the second core.
Demake Project Enables Cross-Console Retro Game Development with Declarative Language
A new project called Demake allows developers to create games for multiple retro consoles from a single source using a declarative language named Demotic. This tool addresses the challenge of AI-generated retro sprites not adhering to specific hardware constraints, offering a unified development approach for various retro platforms.
Ship Safe: Open-source security scanner for code, AI agents, and supply chains released
Ship Safe, an open-source security scanner, has been released to identify vulnerabilities in application code, AI agents, and supply chain components. This tool operates locally within repositories, offering features like AI-backed red-teaming and automated remediation, which helps developers find and fix security issues before deployment.
Sula: A Gemini Protocol Server Implemented in Scryer Prolog
Sula is a new server implementation for the Gemini protocol, written in Scryer Prolog, requiring a patched version of Scryer Prolog for specific functionalities like non-blocking I/O and efficient binary streaming. This development provides an alternative server option for the Gemini protocol, potentially appealing to developers interested in Prolog-based network services.
SK Hynix Employee Jackets Gain Cachet on Secondhand Market Amidst Company's Financial Success
SK Hynix employee jackets are appearing on secondhand markets in South Korea, with listings marketing them as desirable items due to the company's recent financial performance and high employee bonuses. This trend reflects the increased public perception of SK Hynix as a successful and desirable employer.
Rubin Observatory's LSST Camera releases first image of COSMOS field, showing 500k galaxies
The Rubin Observatory has released its first image from the LSST Camera, capturing over half a million galaxies and 50,000 stars in the COSMOS field. This image provides a deep view into a well-studied cosmic region, offering new data for astronomers to analyze galaxy evolution and sky changes over time.
TSON Introduces JSON Superset with Immutable, Hash-Pinned Schemas
TSON (Typed Schema Object Notation) is a new schema system that extends JSON with immutable, hash-pinned schemas, where schema definitions are themselves data. This system allows documents to name their schema, and the schema to name its meta-schema, with a single hash verifying the entire chain, aiming to provide robust data validation and consistency.
Flowise AI Low-Code Platform Announces Shutdown of Operations
Flowise, a low-code platform for building AI applications, is shutting down its operations. The decision was made due to a shift in how developers build AI applications, with increasing reliance on coding agents for complex tasks.
Rust `fec` Crate Offers SIMD-Accelerated Viterbi and Reed-Solomon Decoders
A new Rust crate named `fec` provides implementations of convolutional codes with Viterbi decoding and Reed-Solomon codes, with SIMD acceleration for Viterbi on nightly Rust. This crate offers forward error correction capabilities for software-defined radio and spacecraft applications, demonstrating faster decoding than `libfec` in benchmarks.
DuckDB now integrated with Clojure for out-of-memory data processing
DuckDB, an in-process SQL OLAP database, has been integrated with Clojure's tech.ml.dataset (TMD) library, allowing Clojure users to process large datasets that exceed available memory. This integration provides a solution for handling large relational data without relying on distributed systems or inefficient row-to-column conversions.
Maple-Preview: Ternary 20B MoE AI model runs at 120 tokens/second on iPhone
A new AI model, Maple-Preview, a ternary 20B Mixture-of-Experts (MoE) model, has demonstrated performance of 120 tokens per second on an iPhone. This development indicates progress in running large language models efficiently on mobile devices.
Oxide Computer Co. raises $445 million, according to SEC Form D filing
Oxide Computer Co. has filed an SEC Form D indicating a capital raise of $445 million. This funding suggests significant investment in the company, which operates in the technology industry.
vlt 1.0 Released with Hosted Package Registries and Ecosystem Mirrors
vlt 1.0 has been released, alongside the general availability of its hosted package registries and ecosystem mirrors. This update positions vlt as an end-to-end platform for package management, offering a security-focused client and npm-compatible registry services.
SIEMatic, a fair-sourced observability and security platform, released as early-access alpha
SIEMatic, a new fair-sourced observability platform for security event analysis, has been released in an early-access alpha state. This platform provides tools for collecting, indexing, searching, and analyzing security events, offering an alternative for security monitoring and incident response.
MariaDB to add GitHub star promotion in client prompt and server logs
MariaDB will include a line in its client prompt and server logs encouraging users to star the project on GitHub. This change aims to increase MariaDB's visibility and community engagement on the platform.
ADLC Team Skills Integrates Team Coding Standards into AI Agents like Claude Code
ADLC Team Skills, an open-source project, enables AI coding agents such as Claude Code and Codex to adhere to team coding standards and shared context. This aims to reduce technical debt and improve code consistency when using AI for software development within teams.
iceoryx2 Introduces ByteAtomic for Safe Lock-Free Primitives in Multithreaded Programming
iceoryx2 has developed ByteAtomic, a byte-wise atomic wrapper, to enable safe and correct lock-free primitives in multithreaded programming, particularly for safety-critical and high-reliability systems. This addresses the problem of undefined behavior that can occur even with sequence locks when copying non-atomic data concurrently in languages like Rust and C++.
Homebench Tool Benchmarks Local LLMs for Speed, Memory, and Quality
Homebench is a new command-line interface tool that benchmarks local large language models (LLMs) for speed, memory usage, and quality. It provides a live terminal leaderboard for comparing models installed via runners like Ollama, LM Studio, and llama.cpp, addressing a gap in local-first, zero-configuration benchmarking solutions.
KisakCOD: Open-Source Reimplementation of Call of Duty 4 Multiplayer Released
KisakCOD, an open-source reimplementation of Call of Duty 4's multiplayer executable, has been released, targeting mod developers and game enthusiasts. This project allows users to build and run a custom version of the game's multiplayer, offering a platform for community-driven development and preservation.
First C-Kermit Release in 15 Years Marks 45th Anniversary of Kermit Protocol
A new version of C-Kermit has been released, marking the first update in 15 years for the data transfer protocol originally designed in 1981. This release continues the protocol's legacy of adaptable file transfer, particularly for diverse and vintage computing environments.
SearXNG-style metadata search engine implemented in Rust
A new open-source project provides a metadata search engine written in Rust, replicating the functionality of SearXNG. This tool concurrently queries multiple search engines, processes their HTML results, and ranks them using Reciprocal Rank Fusion.
Hoplite (YC S26) launches platform for deploying cloud coding agents
Hoplite, a Y Combinator S26 startup, has launched a platform that allows developers to deploy and manage coding agents in the cloud. The service aims to simplify quality assurance by enabling concurrent execution of agents for testing features and user flows.
Utah's Solar Power Exceeds All Other Sources for First Time in May
In May 2026, Utah generated more electricity from solar power than from any other single source, marking a new milestone for the state's energy mix. This development indicates a growing reliance on renewable energy sources in Utah, despite anticipated reductions in federal clean energy incentives.
Nightcrawler: A Local AI Pentesting Agent Running on a Smartphone
Nightcrawler is an autonomous penetration testing agent that operates entirely on a smartphone, using a local AI model to discover hosts, map services, find vulnerabilities, and generate reports without cloud connectivity. This tool automates security assessments directly from a mobile device, offering a stealthier approach compared to traditional vulnerability scanners.
PISIGuard Browser Extension Protects Sensitive Information in AI Chats
PISIGuard, a new browser extension, automatically detects and masks personally identifiable and sensitive information (PISI) before it is sent to AI chat platforms like ChatGPT, Claude, and DeepSeek. This tool addresses privacy concerns by ensuring sensitive data, such as names, emails, and API keys, is replaced with placeholders during AI interaction and restored in the AI's response, with all processing occurring locally in the browser.
ArcBox Labs Addresses UniFi PPPoE Performance Issues with PPPoE Half-Bridge Solution
ArcBox Labs developed a PPPoE Half-Bridge solution to mitigate slow PPPoE performance on UniFi gateways, which often struggle to achieve rated line speeds due to a lack of hardware acceleration for PPPoE and NAT. This solution allows UniFi users to bypass the performance limitations imposed by the gateways' CPUs when using PPPoE-based ISP connections.
Jane Street Releases Bonsai, an OCaml UI Library for Reactive Web Applications
Jane Street has released Bonsai, a UI library for building performant, reactive web applications using OCaml. This library allows developers to use the same language for both frontend and backend, potentially simplifying large web application development.
CP/M-386 Project Initiates Development for 386 Protected Mode
A new project, CP/M-386, is in early development to bring CP/M to 386 protected mode, derived from CP/M-68K. This initiative aims to provide a modern CP/M implementation compatible with 386 and later systems, supporting 32-bit protected mode operations.
ssh.place Launches Collaborative Pixel Art Canvas Accessible via SSH
ssh.place has launched a collaborative pixel art canvas that users can draw on directly through an SSH connection. This platform allows anyone with an SSH key to place colored blocks on a 200x60 cell grid, with a 15-second cooldown between placements, without requiring accounts or installations.
Shitty Terminal Released: A New Memory-Unsafe Terminal Emulator Focused on Speed
A new terminal emulator named Shitty has been released, emphasizing low latency, fast startup, and predictable resource use by keeping terminal state on the CPU and using native compute backends. This release offers an alternative for users prioritizing raw speed in terminal operations, even at the cost of memory safety.
Mu provides 67 internet tools for AI agents via a single MCP endpoint
Mu released a platform that offers 67 internet tools, including news, web search, mail, and calendar, to AI agents through a single MCP endpoint. This allows agents to access various internet functionalities without requiring individual server setups for each tool.