top 50% hacker news stories for 2024-03-30

XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b

2 years ago

1323 upvotes – 810 comments

Xz: Can you spot the single character that disabled Linux landlock?

https://git.tukaani.org/?p=xz.git;a=blobdiff;f=CMakeLists.txt;h=d2b1af7ab0ab759b6805ced3dff2555e2a4b3f8e;hp=76700591059711e3a4da5b45cf58474dac4e12a7;hb=328c52da8a2bbb81307644efdb58db2c422d9ba7;hpb=eb8ad59e9bab32a8d655796afd39597ea6dcc64d

2 years ago

538 upvotes – 313 comments

Xz/liblzma: Bash-stage Obfuscation Explained

https://gynvael.coldwind.pl/?lang=en&id=782

2 years ago

535 upvotes – 128 comments

Xz: A microcosm of the interactions in open source projects

https://robmensching.com/blog/posts/2024/03/30/a-microcosm-of-the-interactions-in-open-source-projects/

2 years ago

526 upvotes – 341 comments

IrfanView

https://www.irfanview.com/

2 years ago

520 upvotes – 330 comments

Roll-Invert-Unroll: An easier way to replace a duvet cover

https://danverbraganza.com/writings/an-easier-way-to-replace-a-duvet-cover

2 years ago

467 upvotes – 256 comments

Garbage collection for systems programmers (2023)

https://bitbashing.io/gc-for-systems-programmers.html

2 years ago

396 upvotes – 267 comments

Someone has been attempting to DDoS us for weeks and we do nothing

https://tableplus.com/blog/2024/03/how-we-deal-with-ddos.html

2 years ago

320 upvotes – 192 comments

Running OCR against PDFs and images directly in the browser

https://simonwillison.net/2024/Mar/30/ocr-pdfs-images/

2 years ago

301 upvotes – 58 comments

Notes on El Salvador

https://mattlakeman.org/2024/03/30/notes-on-el-salvador/

2 years ago

281 upvotes – 202 comments

About the Tailscale.com outage on March 7, 2024

https://tailscale.com/blog/tls-outage-20240307

2 years ago

245 upvotes – 123 comments

Paint.net

https://www.getpaint.net/

2 years ago

221 upvotes – 107 comments

Prolog language for PostgreSQL proof of concept

https://github.com/tatut/pgprolog

2 years ago

214 upvotes – 77 comments

Git as a debugging tool

https://lucasoshiro.github.io/posts-en/2023-02-13-git-debug/

2 years ago

211 upvotes – 76 comments

Mamba Explained

https://thegradient.pub/mamba-explained/

2 years ago

201 upvotes – 44 comments

Veloren, an open source game, release 0.16

https://veloren.net/blog/release-0-16/

2 years ago

191 upvotes – 17 comments

How GitHub replaced SourceForge as the dominant code hosting platform

https://graphite.dev/blog/github-monopoly-on-code-hosting

2 years ago

176 upvotes – 152 comments

Toni Morrison's Rejection Letters

https://lareviewofbooks.org/article/there-is-no-point-in-my-being-other-than-honest-with-you-on-toni-morrisons-rejection-letters/

2 years ago

170 upvotes – 73 comments

Iowa fertilizer spill kills nearly all fish across 60-mile stretch of rivers

https://www.nytimes.com/2024/03/29/us/iowa-spill-fish-kill.html

2 years ago

170 upvotes – 24 comments

Why Has Figma Reinvented the Wheel with PostgreSQL?

https://medium.com/@magda7817/why-has-figma-reinveted-the-wheel-with-postgresql-3a1cb2e9297c

2 years ago

169 upvotes – 91 comments

The Mongolian Meta

https://docs.google.com/document/d/1W_QK69BXMHUZXI5VdNH93_aLhTd9SQzNYhRLrh_-ZVA/edit?usp=sharing&ref=thebrowser.com

2 years ago

161 upvotes – 40 comments

An unusual 7400-series chip implemented with a gate array

https://www.righto.com/2024/03/idt-gate-array.html

2 years ago

150 upvotes – 31 comments

Kolmogorov Complexity and Compression Distance (2023)

https://smunshi.net/kolmogorov-complexity-and-compression-distance.html

2 years ago

149 upvotes – 99 comments

Debian on xz-utils: revert to version that does not contain changes by bad actor

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024

2 years ago

148 upvotes – 149 comments

The jobs being replaced by AI – an analysis of 5M freelancing jobs

https://bloomberry.com/i-analyzed-5m-freelancing-jobs-to-see-what-jobs-are-being-replaced-by-ai/

2 years ago

148 upvotes – 95 comments

Full-scale file system acceleration on GPU [pdf]

https://dl.gi.de/server/api/core/bitstreams/7c7a8830-fd81-4e56-8507-cd4809020660/content

2 years ago

148 upvotes – 45 comments

When will the eclipse happen? A multimillennium tale of computation

https://writings.stephenwolfram.com/2024/03/when-exactly-will-the-eclipse-happen-a-multimillennium-tale-of-computation/

2 years ago

140 upvotes – 26 comments

Mathematician who made sense of the universe's randomness wins Abel Prize

https://www.smithsonianmag.com/smart-news/mathematician-who-made-sense-of-the-universes-randomness-wins-maths-top-prize-180984020/

2 years ago

133 upvotes – 78 comments

DeWitt and Stonebraker's "MapReduce: A major step backwards" (2009)

http://craig-henderson.blogspot.com/2009/11/dewitt-and-stonebrakers-mapreduce-major.html

2 years ago

131 upvotes – 111 comments

NetBSD 10.0 Released

https://www.netbsd.org/releases/formal-10/NetBSD-10.0.html

2 years ago

131 upvotes – 61 comments

The Ken Thompson Hack

https://wiki.c2.com/?TheKenThompsonHack

2 years ago

127 upvotes – 43 comments

Significant performance and correctness improvements to the kernel

https://www.redox-os.org/news/kernel-10/

2 years ago

126 upvotes – 22 comments

Novo Nordisk facing pressure as study finds $1k drug can be made for $5

https://fortune.com/europe/2024/03/28/ozempic-maker-novo-nordisk-facing-pressure-as-study-finds-1000-appetite-suppressant-can-be-made-for-just-5/

2 years ago

126 upvotes – 206 comments

Some notes on Firefox’s media autoplay settings in practice as of Firefox 124

https://utcc.utoronto.ca/~cks/space/blog/web/FirefoxMediaAutoplaySettingsIV

2 years ago

124 upvotes – 117 comments

The Canadian government's plan to plant two billion trees

https://www.cbc.ca/newsinteractives/features/two-billion-trees

2 years ago

122 upvotes – 107 comments

Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library

https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094

2 years ago

119 upvotes – 21 comments

US appeals court kills ban on plastic containers contaminated with PFAS

https://www.theguardian.com/us-news/2024/mar/30/pfas-ban-plastic-containers-court

2 years ago

116 upvotes – 96 comments

Linear Algebra of Types (2019)

https://www.philipzucker.com/linear-algebra-of-types/

2 years ago

115 upvotes – 8 comments

XZ Utils Backdoor

https://tukaani.org/xz-backdoor/

2 years ago

114 upvotes – 16 comments

Proteins let cells remember how well their last division went

https://arstechnica.com/science/2024/03/proteins-let-cells-remember-how-well-their-last-division-went/

2 years ago

114 upvotes – 11 comments

Models all the way down

https://knowingmachines.org/models-all-the-way

2 years ago

114 upvotes – 34 comments

The roller ship was not an effective way to cross the high seas

https://hackaday.com/2024/03/27/the-roller-ship-was-not-an-effective-way-to-cross-the-high-seas/

2 years ago

109 upvotes – 30 comments

Jails banned visits in "quid pro quo" with prison phone companies, lawsuits say

https://arstechnica.com/tech-policy/2024/03/jails-banned-family-visits-to-make-more-money-on-video-calls-lawsuits-claim/

2 years ago

107 upvotes – 21 comments

How well can LLMs write COBOL?

https://bloop.ai/blog/evaluating-llms-on-cobol

2 years ago

106 upvotes – 61 comments

America's Drivers Agree: LED Headlights Are Just Too Bright

https://www.wsj.com/lifestyle/car-led-headlights-too-bright-safety-driving-df0dd05e

2 years ago

101 upvotes – 91 comments

Xz format inadequate for long-term archiving (2016)

https://www.nongnu.org/lzip/xz_inadequate.html

2 years ago

101 upvotes – 25 comments

From scratch OpenGL and shaders with raw Xlib

https://hereket.com/posts/x11_window_with_shaders/

2 years ago

97 upvotes – 42 comments

Popular songs are simpler and more repetitive than they used to be

https://www.science.org/content/article/popular-songs-are-simpler-and-more-repetitive-they-used-be

2 years ago

95 upvotes – 3 comments

Ask HN: Anybody Using Htmx on the Job?

https://news.ycombinator.com/item?id=39875374

2 years ago

94 upvotes – 62 comments

Ask HN: How to secure website for public launch

https://news.ycombinator.com/item?id=39874201

2 years ago

94 upvotes – 58 comments

Return-to-Office Mandates: How to Lose Your Best Performers

https://sloanreview.mit.edu/article/return-to-office-mandates-how-to-lose-your-best-performers/

2 years ago

93 upvotes – 96 comments

Why Ireland's housing bubble burst

https://worksinprogress.co/issue/why-irelands-housing-bubble-burst/

2 years ago

92 upvotes – 162 comments

The Set-Up-to-Fail Syndrome (1998)

https://hbr.org/1998/03/the-set-up-to-fail-syndrome

2 years ago

90 upvotes – 51 comments

TSMC was founded by Morris Chang when he was 55 years old

https://www.wsj.com/tech/tsmc-morris-chang-taiwan-semiconductor-chips-entrepreneurship-506fcbc4

2 years ago

89 upvotes – 57 comments

Anakin – Automatically Kill Orphans

https://github.com/Timmmm/anakin

2 years ago

89 upvotes – 23 comments

Tom's Essay (2008)

https://archive.nytimes.com/opinionator.blogs.nytimes.com/2008/09/23/toms-essay/

2 years ago

87 upvotes – 12 comments

Type Inference Was a Mistake

https://borretti.me/article/type-inference-was-a-mistake

2 years ago

83 upvotes – 128 comments

British water company dumps sewage, claims "no right to swim in the sea"

https://inews.co.uk/news/environment/public-no-right-swim-sea-firm-dumped-sewage-2981778

2 years ago

81 upvotes – 63 comments

Playboy image from 1972 gets ban from IEEE computer journals

https://arstechnica.com/information-technology/2024/03/playboy-image-from-1972-gets-ban-from-ieee-computer-journals/

2 years ago

80 upvotes – 135 comments

Bpfman: An eBPF Manager

https://bpfman.io/main/

2 years ago

78 upvotes – 3 comments

Personal 'invisibility shield' goes on sale, starting under $70

https://newatlas.com/good-thinking/invisibility-shield-2/

2 years ago

77 upvotes – 67 comments

Last year, an unknown person took nominal control over OpenAI's startup fund

https://www.businessinsider.com/who-is-running-openais-startup-fund-2024-3

2 years ago

77 upvotes – 29 comments

Disillusioned Businesses Discovering That AI Kind of Sucks

https://futurism.com/the-byte/businesses-discovering-ai-sucks

2 years ago

73 upvotes – 44 comments
show: top 10top 20top 50%
go to date: prev next
sort by: datescorecomments