hngrok

A backdoor in a LinkedIn job offer from roman.pt
1479 by lwhsiao 21h ago | | |

Article: 6 min

An article detailing a cybersecurity incident where the author received a LinkedIn message from a recruiter at a small crypto startup, leading them to discover a backdoor in an open-source GitHub repository.

This incident highlights the importance of security practices in open-source collaboration and the potential risks associated with accepting unsolicited code reviews or project invitations from unknown sources.

Used paranoia and security measures to identify the issue

Quality:
The article presents factual information without bias.

Discussion (278): 58 min

The comment thread discusses the rampant scams and spam on LinkedIn, exploiting job seekers' desperation. Users report being targeted by scammers, often through malicious repositories or fake job offers, and express frustration with LinkedIn's lack of effective redressal mechanisms. The conversation highlights concerns over cybersecurity in online recruitment platforms.

LinkedIn is flooded with scams and spam, making it a cesspool
Scammers are exploiting the desperation of job seekers by targeting them on LinkedIn
There's a lack of redressal mechanisms for scams on LinkedIn

Cybersecurity Security Hygiene, Open Source Software

Iroh 1.0 from iroh.computer
1325 by chadfowler 1d ago | | |

Article: 10 min

Iroh 1.0 is a networking library that enables secure and direct connections through device keys instead of IP addresses, aiming for a more efficient and resilient internet infrastructure.

Shifts from IP addresses to device keys for more secure and resilient connections
Supports multiple programming languages including Python, Node.js, Kotlin, and Swift
Ensures stability in wire protocol and language APIs
Offers public relays with support until specific end dates

Discussion (410): 1 hr 43 min

The discussion revolves around Iroh, a networking library that uses keys for secure peer-to-peer connections. Opinions are mixed on its novelty and potential use cases, with concerns raised about unclear documentation, vendor lock-in, and the pricing model. The community shows moderate agreement but has varying levels of debate intensity.

Iroh offers a novel networking solution
The concept could be better explained
Potential use cases exist

Counterarguments:

Concerns about vendor lock-in, pricing model, and scalability issues

Software Development Networking Libraries, Open Source Software

TinyWind: A pixel pirate sailing game with real wind physics (380k+ kms sailed) from tinywind.io
956 by tinywind 1d ago | | |

Article:

TinyWind: A pixel pirate sailing game that incorporates real wind physics, allowing players to sail over 380k kms.

Gameplay involving sailing and wind physics
Achieved over 380k kms sailed by players

Quality:
The article provides factual information about the game without any promotional or biased content.

Discussion (169): 21 min

The comment thread discusses a browser-based sailing game, focusing on control improvements, realism in sailing mechanics, and the desire for multiplayer functionality. Users provide feedback on controls, aesthetics, and nostalgia, while developers respond with updates and suggestions for future enhancements.

The game offers free browser play and encourages user feedback
Controls need improvement to enhance player experience
There's a nostalgia factor with comparisons to classic sailing games
Players desire more realistic mechanics, such as wind physics and sail trim
Suggestions for multiplayer modes or educational features

Counterarguments:

The game is not yet fully realized in terms of realism
Some users find the controls too complex or counterintuitive
There's a lack of consensus on the ideal level of realism

Games Video Games, Gaming

Curl will not accept vulnerability reports during July 2026 from daniel.haxx.se
773 by secret-noun 1d ago | | |

Article: 4 min

Curl project announces it won't accept vulnerability reports or handle security issues during the month of July 2026. The submission form on HackerOne will be paused, and the security email address will not process any reports. This is part of a 'summer of bliss' initiative for the maintainers to take a break and enjoy summer while also addressing backlogged issues. The release date for version 8.22.0 has been pushed two weeks later.

Backlogged issues addressed in August

Quality:
The article provides clear and factual information without any bias or subjective opinions.

Discussion (312): 52 min

The comment thread discusses various aspects of open-source development, including vacation policies, funding for projects like curl, and the value of AI-generated software. Opinions range from support for maintainers taking time off to concerns about project availability during vacations. There is also debate on how resources should be allocated among different open-source initiatives.

Maintainers should take time off to rest and recharge
AI-generated software is not as valuable or necessary as hand-coded software

Counterarguments:

Concerns about the availability and support for open-source projects during vacation periods
Arguments against increasing funding for specific projects without considering economic principles

Software Development Security, Open Source

What happened to nerds? from mrmarket.lol
736 by vrnvu 1d ago | | |

Article: 21 min

The article discusses how the perception of tech industry leaders has changed from being seen as helpful, obsessive nerds to becoming perceived as over-the-top self-promoters seeking power, money, and fame.

Tech industry leaders may face increased scrutiny and criticism for their behavior, potentially affecting consumer trust and company reputations.

Founder as Charismatic Product byproduct (Phase 1)
Founder as Parable (Phase 2)
Tech Industry as Grift-adjacent (Phase 3)
Founders Fund Mafia Game Video Incident

Quality:
The article presents a critical analysis of the evolution of tech leaders' public image, focusing on the shift from being seen as nerds to becoming perceived as self-promoters.

Discussion (498): 2 hr 22 min

The discussion revolves around observations and opinions on how the culture surrounding technology and innovation has evolved over time, with a focus on changes in motivations and values. There is nostalgia for an era when 'nerds' were driven by intrinsic passion rather than external rewards like money and status. The conversation includes comparisons between past figures (like Steve Wozniak) and current ones (such as Elon Musk), discussing the impact of profit motives on career choices within the tech industry.

The internet has changed, leading to a shift in focus from intrinsic motivations to external rewards

Counterarguments:

Counterpoints to nostalgia, suggesting that 'nerds' have always been motivated by a mix of passion and practicality
Arguments against the idea that all tech figures are solely motivated by profit (mentioning examples like Bill Gates)

Technology Tech Industry Analysis

CrankGPT from crankgpt.com
590 by rishikeshs 1d ago | | |

Article: 3 min

CrankGPT is a human-powered, fully local and private AI solution designed for everyday home use with options for power users and small companies. It offers different tiers of capabilities including question answering, simple conversation, agentic coding, video generation, and agent swarms training. CrankGPT emphasizes privacy, sustainability, and cost-efficiency compared to mega-corps' AI solutions.

Privacy concerns may arise from the promotion of local AI solutions, potentially leading to increased interest in privacy-focused technologies.

Offers different tiers for various needs
Emphasizes privacy over mega-corps' AI solutions
Promotes sustainability by avoiding gas-burning power plants

Quality:
The article presents a promotional tone but maintains objectivity in its technical descriptions and factual claims.

Discussion (229): 35 min

The comment thread discusses the concept of using human power to run AI models, with a focus on sustainability and innovation. There is a mix of skepticism, interest, and technical discussion about feasibility and efficiency.

Counterarguments:

Some users are skeptical or dismissive of the idea, considering it as satire or a joke.
There's a concern about the efficiency of humans compared to machines in certain tasks.

Technology AI/Artificial Intelligence, Privacy, Sustainability

Banned book library in a wi-fi smart light bulb from richardosgood.com
528 by sohkamyung 18h ago | | |

Article: 1 hr 17 min

The article discusses a project to repurpose WiFi smart light bulbs as 'Banned Book Libraries' by hacking them to host open WiFi access points and web servers for digital copies of banned books, aiming to provide access in communities where physical books are restricted.

Project idea inspired by the concept of a digital 'library' in Ben Brown's short story.
Use of Tasmota firmware for local control over smart light bulbs, avoiding reliance on cloud services.
Hardware teardown to understand internal components and potential modifications.
Challenges with storage limitations due to the small flash size of the ESP32 chip.
Development process including Arduino IDE usage, partition table modification, and custom firmware creation.

Quality:
The article provides detailed technical information and personal insights without overly sensationalizing the project.

Discussion (315): 1 hr 17 min

The discussion revolves around a creative project utilizing light bulbs as WiFi access points to share information, with debates on censorship, freedom of speech, and the inclusion of potentially controversial content. The community shows varying levels of agreement and intensity in their discussions, highlighting concerns over ethical implications and effectiveness of various approaches.

The project is a creative use of technology for sharing information.
There are differing opinions on what constitutes censorship and how it should be addressed.

Counterarguments:

Criticism over potential misuse of the technology for spreading controversial material.
Discussion on the effectiveness and ethics of censorship versus promoting free flow of information.

Technology Internet of Things (IoT), Hardware Hacking, Digital Privacy

Hetzner Price Adjustment from docs.hetzner.com
520 by tuhtah 1d ago | | |

Article: 11 min

Hetzner's price adjustment announcement for new orders and cloud instance rescales starting on June 15th, 2026 at 8 AM CEST.

Old prices are listed alongside the new ones for comparison
Limited offerings with reduced pricing tier based on hardware cost reduction

Quality:
The article provides clear and detailed information about the price adjustment, making it easy for users to understand their future costs.

Discussion (708): 2 hr 42 min

Comment analysis in progress.

Cloud Computing Cloud Servers, Dedicated Servers

Apple Foundation Models from platform.claude.com
476 by MehrdadKhnzd 1d ago | | |

Article: 14 min

Apple Foundation Models introduces a Swift package that enables developers to use Claude, an AI language model from Anthropic, within Apple's Foundation Models framework. This allows for seamless integration of Claude into applications using the same API as Apple's on-device models.

This integration allows developers to leverage AI language models in their applications, potentially enhancing user experience and productivity.

Apple Foundation Models server-side language model API introduced in OS 27 betas
Requests go directly from app to the Claude API, bypassing Apple's infrastructure
Usage is billed separately on Anthropic account at standard pricing

Discussion (220): 41 min

The comment thread discusses Apple's Foundation Models framework, which allows developers to easily swap between on-device and remote AI models using a unified API. Opinions vary regarding the commoditization of AI models by Apple while maintaining control over user experience. The thread also touches upon ClaudeForFoundationModels package, billing mechanisms for AI services, and the integration with existing Apple frameworks.

Software Development APIs, Frameworks & Libraries

Even more batteries included with Emacs from karthinks.com
351 by signa11 1d ago | | |

Article: 1 hr 14 min

This article highlights lesser-known features of Emacs, focusing on tools for enhancing discoverability, productivity, and customization within the text editor. It covers various utilities such as dictionary lookup, wildcard usage in find-file and Dired commands, listing URIs with ffap-menu, comparing windows and directories, highlighting buffer changes, useful file backups, apropos family commands, find-function-on-key, copy-from-above-command, duplicate-dwim, kmacro-edit-lossage for macros, subword-mode and superword-mode for word navigation, image manipulation bindings, visible-mode for text visibility, isearch-toggle-invisible for searching invisible text, ruler-mode for display margins, refill-mode for automatic text wrapping, scroll-all-mode for synchronizing window scrolling, emacs-lock-mode to prevent quitting with unsaved files, undelete-frame-mode and undelete-frame for restoring deleted frames, and a collection of miscellaneous Emacs libraries.

Dictionary lookup with dictionary-tooltip-mode
compare-windows and dired-compare-directories for comparing files or directories
highlight-changes-mode for visualizing unsaved changes
vc-diff variants for inspecting backups of version-controlled files
apropos family commands for exploring Emacs functions
find-function-on-key for jumping to function definitions directly from key bindings
copy-from-above-command and duplicate-dwim for text manipulation
kmacro-edit-lossage for creating macros without foresight
visible-mode for showing all buffer text
isearch-toggle-invisible for searching visible text only
ruler-mode for adjusting display margins
refill-mode for automatic line wrapping

Quality:
The article provides detailed explanations and demonstrations of Emacs features, avoiding clickbait tactics.

Discussion (133): 31 min

The comment thread discusses various opinions on Emacs, Neovim, and other text editors. Users share their experiences with both editors, highlighting the customization capabilities of Emacs but noting its steep learning curve. They also discuss issues with Neovim's ecosystem, particularly around package management and stability. The conversation touches on the importance of documentation and help resources for new users to navigate these tools effectively.

Emacs offers a powerful and customizable experience for experienced users
Neovim has issues with package management and stability
Distro-based editors provide an easier onboarding process

Counterarguments:

Emacs is not just an editor; it's a platform for developing tooling
Neovim has improved over time, reducing churn and improving core functionality

Software Development Development Tools, Text Editors