> A security researcher has found over a thousand publicly exposed hobby servers run by Tesla vehicle owners that are spilling sensitive data about their vehicles, including their granular location histories.

This is not a Tesla security flaw, but rather people misconfiguring open source software.

Google will allow only apps from verified developers to be installed on Android (9to5google.com)

Gemini 2.5 Flash Image (developers.googleblog.com)

FFmpeg 8.0 (ffmpeg.org)

What are OKLCH colors? (jakub.kr)

Dissecting the Apple M1 GPU, the end (rosenzweig.io)

A German ISP changed their DNS to block my website (lina.sh)

Claude for Chrome (anthropic.com)

DeepSeek-v3.1 (api-docs.deepseek.com)

AI tooling must be disclosed for contributions (github.com)

Show HN: Base, an SQLite database editor for macOS (menial.co.uk)

A visual introduction to big O notation (samwho.dev)

Go is still not good (blog.habets.se)

Comet AI browser can get prompt injected from any site, drain your bank account (twitter.com)

We regret but have to temporary suspend the shipments to USA (olimex.wordpress.com)

U.S. government takes 10% stake in Intel (cnbc.com)

Waymo granted permit to begin testing in New York City (cnbc.com)

Ban me at the IP level if you don't like me (boston.conman.org)

Monodraw (monodraw.helftone.com)

Michigan Supreme Court: Unrestricted phone searches violate Fourth Amendment (reclaimthenet.org)

US Intel (stratechery.com)

Scientist exposes anti-wind groups as oil-funded, now they want to silence him (electrek.co)

Io_uring, kTLS and Rust for zero syscall HTTPS server (blog.habets.se)

Nx compromised: malware uses Claude code CLI to explore the filesystem (semgrep.dev)

How to build a coding agent (ghuntley.com)

What makes Claude Code so damn good (minusx.ai)

Framework Laptop 16 (frame.work)

Line scan camera image processing for train photography (daniel.lawrence.lu)

Building the mouse Logitech won't make (samwilkinson.io)

Proposal to Ban Ghost Jobs (cnbc.com)

Manim: Animation engine for explanatory math videos (github.com)

Google has eliminated 35% of managers overseeing small teams in past year (cnbc.com)

The Therac-25 Incident (2021) (thedailywtf.com)

A teen was suicidal. ChatGPT was the friend he confided in (nytimes.com)

Ask HN: Why hasn't x86 caught up with Apple M series?

Everything I know about good API design (seangoedecke.com)

We put a coding agent in a while loop (github.com)

95% of Companies See 'Zero Return' on $30B Generative AI Spend (thedailyadda.com)

4chan will refuse to pay daily online safety fines, lawyer tells BBC (bbc.co.uk)

Ghrc.io appears to be malicious (bmitch.net)

Show HN: A zoomable, searchable archive of BYTE magazine (byte.tsundoku.io)

macOS 26 Tahoe's Dead Canary Utility App Icons (daringfireball.net)

Google's Liquid Cooling (chipsandcheese.com)

Unexpected productivity boost of Rust (lubeno.dev)

Uncomfortable Questions About Android Developer Verification (commonsware.com)

A bug saved the company (weblog.rogueamoeba.com)

FCC bars providers for non-compliance with robocall protections (docs.fcc.gov)

What is going on right now? (catskull.net)

Malicious versions of Nx and some supporting plugins were published (github.com)

Code formatting comes to uv experimentally (pydevtools.com)

I Am An AI Hater (anthonymoser.github.io)

Security researcher maps TeslaMate servers spilling Tesla vehicle data

Comments (2)