| 1. | I found 10k GitHub repositories distributing Trojan malware(orchidfiles.com) |
| 831 points by theorchid 1 day ago | 216 comments | permalink | |
tl;dr: A developer discovered that someone had cloned his GitHub repo, preserving all commits and contributors, but added a link to a zip archive containing a Trojan in the README. By analyzing GitHub event archives for repos updated frequently with only README changes containing zip links, he identified ~10,000 such malware-distributing repositories—about 25% of repos matching his pattern. GitHub only removed the repos he explicitly reported and has made no effort to detect the pattern themselves, despite the scheme running for over a year. | |
HN Discussion:
| |
| 2. | Ubiquiti: Enterprise NAS, Built on ZFS(blog.ui.com) |
| 355 points by ksec 22 hours ago | 302 comments | permalink | |
tl;dr: Ubiquiti's new ENAS is a ZFS-based enterprise NAS powered by an 8-core ARM Neoverse N2 CPU, 64GB ECC RAM, optional NVMe L2ARC caching, 16 drive bays (expandable past 1PB), and dual 25GbE SFP28 ports, with no drive-model firmware lock-in. It integrates with UniFi for license-free centralized management, identity-based access, multi-site backup orchestration (including M365), and supports native iSCSI shared block storage for Proxmox, VMware, and Hyper-V clusters. | |
HN Discussion:
| |
| 3. | CS 6120: Advanced Compilers: The Self-Guided Online Course (2020)(cs.cornell.edu) |
| 384 points by ibobev 1 day ago | 53 comments | permalink | |
tl;dr: Cornell's CS 6120, a PhD-level advanced compilers course taught by Adrian Sampson, is available as a free self-guided online course with video lectures, lecture notes, and open-ended implementation tasks using LLVM and Bril (a custom educational IR). The 14-lesson curriculum covers IRs, data flow, SSA, loop and interprocedural optimization, alias analysis, garbage collection, JITs, and parallelism, interleaved with classic PL research papers. The course is open source on GitHub, though self-guided students miss out on Zulip discussions, deadlines, and the end-of-semester project. | |
HN Discussion:
| |
| 4. | .gitignore Isn't the only way to ignore files in Git(nelson.cloud) |
| 448 points by FergusArgyll 1 day ago | 137 comments | permalink | |
tl;dr: Git supports three levels of ignore files: the usual `.gitignore` (committed to the repo), `.git/info/exclude` (per-repo, not committed, useful for personal files), and `~/.config/git/ignore` (global, machine-wide, ideal for things like `.DS_Store`). The global file location can be customized via `git config --global core.excludesFile`, and `git check-ignore -v <file>` reveals which rule and file is causing a given path to be ignored. | |
HN Discussion:
| |
| 5. | Hospitals and universities repurposing drugs at lower cost(kcl.ac.uk) |
| 318 points by giuliomagnifico 1 day ago | 146 comments | permalink | |
tl;dr: Hospitals and universities are running late-stage clinical trials to repurpose generic drugs at less than 10% of pharma industry costs, operating outside the patent system with lower expertise, risk, and capital barriers. Examples include using a cancer drug to treat blindness and an old anti-inflammatory for Covid. Pharma companies lose interest in repurposing once drugs go generic due to competition, but academic researchers step in, motivated by patient outcomes and publication rather than profit. | |
HN Discussion:
| |
| 6. | I told them forced consent was unlawful. 5 years later it cost Elkjop €1.8M(thatprivacyguy.com) |
| 412 points by speckx 18 hours ago | 252 comments | permalink | |
tl;dr: In 2021, the author told Elkjop's DPO that requiring customer club membership as a condition for receiving marketing emails violated GDPR's "freely given consent" rule, but the company refused to change. Five years later, Norway's Datatilsynet fined Elkjop NOK 20M (~€1.8M) for exactly that violation, plus repurposing club data for ad tracking without a compatibility assessment. The author only learned of the outcome via a volunteer-run wiki, and is now pressuring the Swedish DPA over its Article 77(2) duty to keep complainants informed, while preparing civil litigation. | |
HN Discussion:
| |
| 7. | W Social, public institutions and the theater of European digital sovereignty(blog.elenarossini.com) |
| 226 points by nemoniac 1 day ago | 143 comments | permalink | |
tl;dr: The European Commission, ECB, and their presidents (von der Leyen and Lagarde) have migrated their ATproto accounts from Bluesky to W Social, a Swedish for-profit Bluesky fork that markets itself as Europe's sovereign alternative to X. Around the same time, W Social quietly removed its public GitHub repository, suggesting it has gone closed-source—contradicting the EU's recently announced open-source push and bypassing Eurosky, a transparent non-profit alternative. Critics note W Social's advisory board includes Big Tech figures tied to PayPal and Sam Altman's Tools for Humanity, raising concerns it's another surveillance-capitalism play dressed up as digital sovereignty. | |
HN Discussion:
| |
| 8. | Show HN: Are You in the Weights?(intheweights.com) |
| 373 points by turtlesoup 16 hours ago | 218 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 9. | Modos Color Monitor Pushes E-Paper Displays Further(spectrum.ieee.org) |
| 295 points by Vinnl 1 day ago | 70 comments | permalink | |
tl;dr: Modos is crowdfunding the Flow, a 13.3-inch color e-paper monitor with 3200×2400 resolution, touch input, and 60Hz refresh, powered by their new open-source Enchanter display controller (which uses a Chrontel CH7516 chip to enable DisplayPort 1.1). Co-founders Wenting Zhang and Alexander Soto note pixel response is ~50ms (comparable to the first iPad's IPS panel), and emphasize minimizing input-to-display latency over raw refresh rates. They've stuck with crowdfunding over VC because the e-paper monitor market is too niche for investors but supports a hackable, open-source community. | |
HN Discussion:
| |
| 10. | Noam Shazeer Joins OpenAI(twitter.com) |
| 335 points by lukasgross 1 day ago | 330 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 11. | Midjourney Medical(midjourney.com) |
| 1312 points by ricochet11 1 day ago | 849 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 12. | Emacs 31 is around the corner: The changes I'm daily driving(rahuljuliato.com) |
| 444 points by frou_dh 1 day ago | 258 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 13. | Swiss parliament lifts ban on new nuclear power plants(bluewin.ch) |
| 769 points by leonidasrup 22 hours ago | 749 comments | permalink | |
tl;dr: Switzerland's National Council voted 100-98 to approve a counterproposal to the "Blackout Initiative," lifting the ban on building new nuclear power plants and aligning with prior decisions by the Federal Council and Council of States. The measure, opposed by the SP, GLP, and Greens, will ultimately go to a public referendum, with Greenpeace already protesting and the Greens signaling they may call one regardless. | |
HN Discussion:
| |
| 14. | Microsoft new Outlook takes 10 seconds to do what Outlook Classic does instantly(windowslatest.com) |
| 681 points by Adam-Hincu 1 day ago | 461 comments | permalink | |
tl;dr: Microsoft's new WebView2-based Outlook takes roughly 10 seconds to display an email when clicked from a Windows 11 notification, compared to nearly instant in Outlook Classic—and it's actually faster to ignore the notification and open the app manually. The new Outlook also runs as 10 separate processes and uses 4x the RAM of Classic, limitations inherent to its Chromium-based web wrapper architecture. A real fix likely requires a native WinUI rewrite; until then, Classic (supported until April 2029) remains the better choice for performance. | |
HN Discussion:
| |
| 15. | The founder of Craigslist has given away half a billion dollars(independent.co.uk) |
| 373 points by Tomte 20 hours ago | 280 comments | permalink | |
tl;dr: Craigslist founder Craig Newmark has donated roughly $500 million to causes including journalism, cybersecurity, veterans, and pigeon rescue, and joined The Giving Pledge in 2025 after the program expanded beyond billionaires. He publicly pushed back against Peter Thiel and other tech billionaires who have discouraged wealthy peers from signing the pledge, claiming it funnels money to "left-wing" nonprofits. Newmark, who still doesn't own a car and takes the NYC subway, kept Craigslist free for users rather than take VC money, and credits childhood lessons from Holocaust survivors for his approach to wealth. | |
HN Discussion:
| |
| 16. | A website that lists websites to submit your website to(submission.directory) |
| 415 points by azeemkafridi 21 hours ago | 92 comments | permalink | |
tl;dr: A curated directory cataloging dozens of places to submit websites, startups, and products for backlinks and exposure—ranging from major platforms like Hacker News, Product Hunt, Crunchbase, and G2 to niche AI tool directories, indie web blogrolls, and design galleries. Each entry notes whether links are dofollow/nofollow, free vs. paid placement, and the target audience (developers, founders, buyers, design enthusiasts, etc.). | |
HN Discussion:
| |
| 17. | Lore – Open source version control system designed for scalability(lore.org) |
| 1236 points by regnerba 1 day ago | 670 comments | permalink | |
tl;dr: Lore is an open-source version control system maintained by Epic Games, built for large-scale projects that mix code with hefty binary assets, such as games and entertainment productions. It targets both developers and artists, aiming to scale across massive datasets and team sizes. | |
HN Discussion:
| |
| 18. | How Madrid built its metro cheaply (2024)(worksinprogress.co) |
| 217 points by trymas 1 day ago | 179 comments | permalink | |
tl;dr: Madrid tripled its metro length between 1995-2007 at roughly one-tenth the per-mile cost of London's Jubilee Line, driven by four factors: consolidated regional control that made politicians directly accountable for delivery, aggressive timelines enabled by streamlined environmental reviews and 24/7 tunneling, standardized station designs and proven technology over architectural flourishes, and in-house engineering expertise with contracts evaluated 70% on quality/experience rather than lowest bid. The result was a system now ranking sixth-longest outside China, with higher per-capita ridership than London or NYC. | |
HN Discussion:
| |
| 19. | DeepSeek Introduces Vision(chat.deepseek.com) |
| 474 points by RIshabh235 1 day ago | 194 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 20. | Dutch Railways offers unlimited off-peak train travel nationwide for €49/month(ns.nl) |
| 228 points by felipevb 3 days ago | 124 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |