Why Anubis Rewrote Its Bot Check in WebAssembly
Anubis now runs its proof-of-work bot check in WebAssembly. It took a year — and the reason is a lesson for anyone shipping WASM.
Dafallah Ibrahim
Chromium Hides in More Than Your Browser
An actively exploited Chromium sandbox escape is in the wild. Updating Chrome isn't enough — here's every place Chromium secretly lives.
Stop Writing useMemo. Vite Handles It Now.
The React Compiler's Rust rewrite is now built into Vite. Automatic memoization with zero Babel overhead — here's how to turn it on.
The .name Termination: Domains Are Rentals
The #1 story on HN is the death of an entire TLD. Every domain is a revocable lease — and your account recovery hangs off it.
ImHex Turns Mystery Bytes Into Structs
Stop squinting at hex dumps. ImHex's C-like pattern language paints fields directly onto the bytes as you describe them.
Why the Codex App Ships All of LibreOffice
An AI app bundling a full office suite sounds absurd — until you learn what soffice --headless can do for any pipeline touching documents.
Chrome Killed MV2. Your Extension Needs This
uBlock Origin is gone from the Chrome Web Store. If you still ship an MV2 extension, here's what breaks and how to fix it.
Zig's ArrayList Just Stopped Breaking Your Pointers
Every growable array invalidates pointers on grow. Zig found a way out — and it's an old Linux syscall doing the heavy lifting.
You Can Now Boot a Real iPhone on Your Mac
Apple's Virtualization.framework is quietly booting full iOS on Apple Silicon. Here's why that changes iOS testing and security research.
A Bug Rumour Is Now a Working Exploit
Patch diffs, fuzzers, and LLMs turn a vague bug rumour into a working exploit in hours. Your deploy speed is the real patch window.
Cloudflare Cut 100TB From a DNS Cache. Here's the Playbook
Cloudflare shaved 100TB off 1.1.1.1's DNS cache. The trick: attack per-entry overhead. Measure your own cache's multiplier in 60 seconds.
Tailcat: netcat Without the Network Plumbing
Tailscale shipped a netcat over its data plane. Instant TCP pipes between machines — no open ports, no certs, no IP archaeology.