HackerNews

An educational essay explaining the Birthday Paradox math and its application to hash collisions in cryptography, covering probability calculations for matching birthdays and the historical context of Richard von Mises' contributions.

Discord is experiencing a major incident with increased API errors, causing many users to be unable to start sessions or send messages. Recovery operations are ongoing, with systems gradually recovering.

A local privilege escalation exploit in the Linux kernel's io_uring subsystem via a zero-copy receive freelist bug.

Google's next-generation reCAPTCHA now requires Play Services on Android, breaking verification for de-Googled users and raising privacy concerns about ecosystem control.

AI is disrupting traditional vulnerability disclosure cultures (coordinated disclosure vs. bugs-are-bugs) by accelerating the detection and exploitation of security flaws, making long embargoes less effective and forcing a need for faster, AI-assisted responses.

Apple and Intel have reached a preliminary deal for Intel to manufacture chips for Apple, marking a significant partnership in the semiconductor industry.

Bjarne Stroustrup answers common questions about memory leaks in C++, providing guidance on modern C++ memory management techniques.

Security researcher Lachlan discovered and reported a critical remote code execution vulnerability dubbed "React2Shell" in React's Server Components protocol to Meta on November 30, 2025. Meta released a fix and public advisory (CVE-2025-55182) on December 3, urging developers to update immediately as the vulnerability affected millions of websites built with React/Next.js.

An article discussing the legacy of Cartoon Network Flash games and their impact on early web gaming.

Researchers from the Specula team created SysMoBench, a benchmark evaluating whether LLMs can faithfully model real-world computing systems in TLA+ or merely recite textbook specifications. The benchmark tests 11 systems across four phases and reveals systematic gaps in current LLMs' ability to accurately model system implementations versus reference papers.

GETadb.com offers an instant backend with a relational database, sync engine, and auth, accessible via a simple GET request without sign-up, allowing AI agents like Claude or Codex to build full-stack apps seamlessly.

re_gent is an open-source version control system for AI agent activity, tracking every tool call and associated prompt so developers can audit and roll back agent changes.

A detailed technical overview of the PC Engine (TurboGrafx-16) CPU, the HuC6280, a fast 8-bit processor based on the 65C02, covering its architecture, clock speeds, and differences from the NES and SNES CPUs.

Tesla is recalling its cheaper RWD Cybertruck Long Range over faulty brake rotors that could cause wheels to fall off, affecting all 173 units sold; the company will replace the parts free of charge.

The article argues that Google's newly announced Cloud Fraud Defense is essentially a rebranded version of the controversial Web Environment Integrity proposal that Google withdrew in 2023 after widespread criticism, raising concerns about device attestation and user privacy.

The article discusses the Copy Fail exploit, a security vulnerability that affects Podman rootless containers.

A blog post exploring how human typing habits like typos, shorthand, filler words, and whitespace affect token counts in OpenAI and Claude tokenizers, noting that common misspellings can inflate token usage and costs without changing meaning.

A web page that reveals the information your browser shares without your explicit consent, demonstrating browser fingerprinting and data leakage.

Poland's economy has grown to become the world's 20th largest, driven by strong institutions and EU membership, with notable advances in AI and quantum computing.

Hackers compromised the JDownloader website to distribute malware-infected versions of the popular open-source download manager.