Stop Writing useMemo. Vite Handles It Now.

The React Compiler's Rust rewrite is now built into Vite. Automatic memoization with zero Babel overhead — here's how to turn it on.

The .name Termination: Domains Are Rentals

The #1 story on HN is the death of an entire TLD. Every domain is a revocable lease — and your account recovery hangs off it.

ImHex Turns Mystery Bytes Into Structs

Stop squinting at hex dumps. ImHex's C-like pattern language paints fields directly onto the bytes as you describe them.

Why the Codex App Ships All of LibreOffice

An AI app bundling a full office suite sounds absurd — until you learn what soffice --headless can do for any pipeline touching documents.

Chrome Killed MV2. Your Extension Needs This

uBlock Origin is gone from the Chrome Web Store. If you still ship an MV2 extension, here's what breaks and how to fix it.

Zig's ArrayList Just Stopped Breaking Your Pointers

Every growable array invalidates pointers on grow. Zig found a way out — and it's an old Linux syscall doing the heavy lifting.

You Can Now Boot a Real iPhone on Your Mac

Apple's Virtualization.framework is quietly booting full iOS on Apple Silicon. Here's why that changes iOS testing and security research.

A Bug Rumour Is Now a Working Exploit

Patch diffs, fuzzers, and LLMs turn a vague bug rumour into a working exploit in hours. Your deploy speed is the real patch window.

Cloudflare Cut 100TB From a DNS Cache. Here's the Playbook

Cloudflare shaved 100TB off 1.1.1.1's DNS cache. The trick: attack per-entry overhead. Measure your own cache's multiplier in 60 seconds.

Tailcat: netcat Without the Network Plumbing

Tailscale shipped a netcat over its data plane. Instant TCP pipes between machines — no open ports, no certs, no IP archaeology.

Firefox 157 Makes JPEG XL Impossible to Ignore

Firefox 157 ships JPEG XL enabled by default. The sleeper feature: losslessly shrink existing JPEGs ~20% — and reverse it bit-exact.

MS Paint Tags Your Images With a Hidden GUID

Paint and Photos stamp an invisible watermark into every saved image — even fully offline ones. Here's how to spot pixel steganography.

MCP Servers Can Borrow Your LLM

Sampling is the half of MCP nobody uses: your server asks the client's model for help — no API key, no billing, no lock-in.

Your Local LLM Isn't Dumb. Your Config Is.

Chat template mismatches, silent context truncation, and inherited sampling defaults quietly tank local model output. Most of it is fixable.

How Phone Calls Leak Into Public DNS

A researcher took over a slice of e164.arpa and began receiving call metadata — including hundreds of thousands of calls to military bases.

cargo build Executes Code You Never Read

A malicious Rust crate fired its payload during compilation. Thanks to build.rs and proc macros, cargo build runs code you never read.

Your Postgres UPDATE Rewrites Every Index

Most UPDATEs don't touch indexed columns, yet Postgres rewrites every index entry — unless a HOT update fires. One table setting decides.

The 'RAM Is Cheap' Era Just Ended

DRAM climbed 500% in a year — 128GB of DDR5 now runs $3,399. Time to learn what your services actually need.

flock: The Cron Mutex You're Not Using

Cron will start your job again while the last run is still going. Two lines with flock stop the overlap — and the lock can't go stale.

What Cloudflare Injects Into Your HTML

A nameserver switch quietly turns on response rewriting. One curl command shows every script Cloudflare added to your pages.

The Overnight Agent Loop That Got a 232x Speedup

A dev let Codex run its own benchmark loop and got a 232x kernel speedup. Here's the loop, rebuilt in plain bash.

Don't Train a Classifier. Hallucinate One.

Skip the labeled dataset: have an LLM hallucinate documents for each class, embed them, and classify by similarity. Works shockingly well.

One Log Line Costs 110KB of Disk Writes

A single systemd-journald log line causes 49KB+ of disk writes on ext4 and 110KB+ on btrfs. Here's why that's burning your SSD.

The SQLite Bug That Silently Corrupts Data

Tailscale just found a 16-year-old race condition in SQLite's WAL reset. Here is how it destroys databases and how to verify yours.