How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos (research.kudelskisecurity.com)

I was just about to post this the targeted killing of a Al Jazeera journalist was a hideous war crime by Israel and must be investigated if us based computational resources were used

pinewurst · 5h ago

"The protest ended after about two hours when police told the demonstrators to leave and said they would be arrested for trespassing."

stevenalowe · 4h ago

What software vendor does Hamas prefer?

utdoctor · 4h ago

They prefer vaporware. Big promises, absolutely no delivery.

NomDePlum · 27m ago

The protest is against the use of MS platforms contributing to the killing and maiming of hundreds of thousands of Palestinians civilians and the deliberate ethnic cleansing, war crimes and genocide associated with that.

There was never a time for this sort of rhetoric, it contributed nothing.

newspaper1 · 5h ago

Microsoft needs to divest from Israel. Enough is enough. It’s vile and now it’s brand destruction.

AIorNot · 2h ago

I am amazed how heinous the act of brazenly targeting and then killing brave journalist(s) in front of a hospital is gone without a whimper in the west

To me this is the same as when the Saudi’s killed a journalist which was front page news world wide for weeks

It’s insane

AGENTS.md – Open format for guiding coding agents (agents.md)

Databricks is raising a Series K Investment at >$100B valuation (databricks.com)

How to Think About GPUs (jax-ml.github.io)

Ask HN: Why does the US Visa application website do a port-scan of my network?

How to Draw a Space Invader (muffinman.io)

Copilot broke audit logs, but Microsoft won't tell customers (pistachioapp.com)

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos (research.kudelskisecurity.com)

Type-machine (arthi-chaud.github.io)

Modern CI Is Too Complex and Misdirected (gregoryszorc.com)

The Value of Hitting the HN Front Page (mooreds.com)

Tiny microbe challenges the definition of cellular life (nautil.us)

D2 (text to diagram tool) now supports ASCII renders (d2lang.com)

How I Made Ruby Faster Than Ruby (noteflakes.com)

Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025 (gfw.report)

Calling Their Bluff (anguscheng.com)

Show HN: Hanaco Weather – A poetic weather SNS from the OS Yamato project (github.com)

Emacs as your video-trimming tool (xenodium.com)

Gaussian Processes for Machine Learning [pdf] (gaussianprocess.org)

Rails Charts Using ECharts from Apache (github.com)

Fast and observable background job processing for .NET (github.com)

Without the futex, it's futile (h4x0r.org)

Candle Flame Oscillations as a Clock (cpldcpu.com)

Intel Foundry Demonstrates First Arm-Based Chip on 18A Node (hothardware.com)

Drunken Bishop (2023) (re.factorcode.org)

AnduinOS (anduinos.com)

CRDT: Text Buffer (madebyevan.com)

How Figma’s multiplayer technology works (2019) (figma.com)

We’re Not So Special: A new book challenges human exceptionalism (democracyjournal.org)

Custom telescope mount using harmonic drives and ESP32 (svendewaerhert.com)

Show HN: OpenAI/reflect – Physical AI Assistant that illuminates your life (github.com)

Why Semantic Layers Matter (and how to build one with DuckDB) (motherduck.com)

Monoid-Augmented FIFOs, Deamortised (pvk.ca)

Launch HN: Uplift (YC S25) – Voice models for under-served languages

Physically Based Rendering in Filament (google.github.io)

The joy of recursion, immutable data, & pure functions: Making mazes with JS (jrsinclair.com)

Geotoy – Shadertoy for 3D Geometry (3d.ameo.design)

A renovation project in Turkey led to the discovery of a lost city (2023) (atlasobscura.com)

Passive Microwave Repeaters (computer.rip)

Positron, a New Data Science IDE (posit.co)

PyPI Preventing Domain Resurrection Attacks (blog.pypi.org)

Notion releases offline mode (notion.com)

Skill issues – Dialectical Behavior Therapy and its discontents (2024) (thedriftmag.com)

Perfect Freehand – Draw perfect pressure-sensitive freehand lines (perfectfreehand.com)

The Future of JavaScript: What Awaits Us (jsdev.space)

Critical Cache Poisoning Vulnerability in Dnsmasq (lists.thekelleys.org.uk)

Rough Numbers Between Consecutive Primes (arxiv.org)

Launch HN: Parachute (YC S25) – Guardrails for Clinical AI

Lazy-brush – smooth drawing with mouse or finger (lazybrush.dulnan.net)

Vendors that treat single sign-on as a luxury feature (sso.tax)

Tiny, removable "mini SSD" could eventually be a big deal for gaming handhelds (arstechnica.com)

Microsoft workers occupy HQ in protest against company ties to Israeli military

Comments (7)