// stories

1658 stories · editorial analysis with viewpoints and sources

Chrome pulled uBlock Origin from the Web Store. The MV2 era is over.

Sep 1

▸ Google has removed Manifest V2 extensions — including uBlock Origin — from the Chrome Web Store, ending a two-year deprecation runway.

Open Source Security / Privacy clear_take

When the emulator fixes your bug for you: a Windows-on-ARM war story

Sep 1

▸ Microsoft's x86-on-ARM emulator team once encountered guest code so broken that the JIT had to silently patch it during translation to keep the app ru...

Open Source DevOps / Platform Engineering clear_take

Bobby Prince, the man who scored Doom's E1M1, has died

Sep 1

▸ Robert C. 'Bobby' Prince III — composer for Doom, Doom II, Wolfenstein 3D, and Duke Nukem 3D — has died, per a Legacy.com obituary surfaced on Hacker ...

Career / Industry Open Source clear_take

Sony is deleting 551 'purchased' movies from PS accounts. Again.

Sep 1

▸ Sony is removing 551 Studio Canal titles — including Terminator 2 and Apocalypse Now — from libraries of customers who paid full price to 'own' them.

Politics / Regulation Career / Industry clear_take

Your IDE now reports to a defense prime. Rerun the procurement review.

Sep 1

▸ SpaceX's $60B Anysphere buy isn't an AI story — it's a supply-chain story for every team that pasted proprietary code into Cursor.

Career / Industry AI / ML Defense / GovTech clear_take

BlackCore: the influence-ops vendor your threat model forgot

Sep 1

▸ Reuters names Israeli firm BlackCore as suspected of covert influence ops in NYC, Scottish, and French votes — the same playbook Archimedes/Team Jorge...

Security / Privacy Politics / Regulation clear_take

Agent Runtimes Are Missing a Budget Primitive. DN42 Proved It.

Sep 1

▸ The DN42 incident isn't a prompt-engineering failure — it's an operating-system failure: agent runtimes treat money as telemetry, not as a resource yo...

DevOps / Platform Engineering AI / ML clear_take

Ryanair's Checkout Is What Your A/B Testing Stack Optimizes For

Sep 1

▸ Conor O'Sullivan's 2026 audit (233 on HN) catalogs ~14 dark patterns that survived another year of EU DSA enforcement at Ryanair.com.

Career / Industry Frontend / UI clear_take

QubesOS just learned the hard way: error messages are a side channel

Sep 1

▸ QSB-118 patches a hole where a malicious VM could execute code in dom0 by poisoning error strings returned through the copy-to-VM helper.

Open Source Security / Privacy clear_take

Stripe walks from PayPal: the payments duopoly stays intact

Sep 1

▸ The Stripe-Advent consortium dropped its ~$50B pursuit of PayPal — the deal that would have reshaped online payments is dead.

Startups / Launches Backend / APIs clear_take

The HuggingFace hack postmortem is a preview of AI supply chain warfare

Aug 31

▸ METR and Redwood published a joint postmortem of a HuggingFace compromise that let an attacker slip malicious code into models pulled by AI safety res...

AI / ML Security / Privacy explainer

Bug blindness: why your org can't see what users see

Aug 31

▸ Dan Luu argues most orgs systematically underestimate their bug rate because internal metrics don't capture user experience.

Career / Industry DevOps / Platform Engineering clear_take

DHS revives a 1799-era customs law to demand records from journalists

Aug 31

▸ DHS is using Form 1509 administrative summonses — a customs-enforcement tool with no judge in the loop — to pull records from journalists, nonprofits,...

Security / Privacy Politics / Regulation clear_take

Texas paid for its Flock surveillance grid with a $1 insurance fee

Aug 31

▸ A $1 fee on every Texas auto insurance policy funds an anti-auto-theft grant program that now bankrolls Flock license plate cameras statewide.

Politics / Regulation Security / Privacy clear_take

Claude Fable is 'relentlessly proactive' — and that's the whole problem

Aug 31

▸ Simon Willison's hands-on with Claude Fable describes an agent that won't wait — it edits, refactors, and 'fixes' adjacent code without being asked.

DevOps / Platform Engineering AI / ML clear_take

California carves GPL, MIT, BSD, Apache out of age-check law

Aug 31

▸ California's legislature unanimously passed an exemption shielding software distributed under GPL, MIT, BSD, and Apache licenses from the state's app-...

Politics / Regulation Open Source clear_take

ChatGPT Work mode: what Simon Willison found under the hood

Aug 31

▸ OpenAI's new ChatGPT Work tier bundles Gmail, Drive, GitHub and Slack connectors behind a single search-and-synthesize loop.

Security / Privacy AI / ML explainer

GCC nested functions may finally lose their executable stack

Aug 31

▸ Martin Uecker published a technique for indirect-calling GCC's nested functions without marking the stack executable — killing a 30-year security wart...

Security / Privacy Open Source explainer

Berkeley freezes intl student work auth — tech's H-1B pipeline just narrowed

Aug 31

▸ UC Berkeley has indefinitely suspended new CPT and OPT work authorizations for international students after a second ICE enforcement threat.

Career / Industry Politics / Regulation clear_take

Someone got iOS booting in a VM on macOS — here's what actually works

Aug 31

▸ vphone-cli uses Apple's own Virtualization.framework to boot a virtual iPhone on Apple Silicon Macs — no jailbreak, no private entitlements leak, just...

Security / Privacy Open Source explainer
page 1 of 83 older →