TrendPulse

The cataloguing step is supposed to be the easy win. You have a schema whose tables are called ecm_template_link and v_pmpm , your users ask questions in English, and the gap between those two vocabularies is why retrieval misses. So you point a model at every table, get back a sentence describing each one, index the sentences alongside the names, and now the corpus speaks English too. I did that to a real 1,245-object schema. Recall went down . Not by a little. The table literall...

TL;DR: OpenSea runs an undocumented MCP server at mcp.opensea.io/mcp . One of its tools hands out API keys to anyone who asks, and another lets you resolve any Ethereum address with an OpenSea profile to its owner's username. Reported to Bugcrowd, now sharing the story and a free recon kit. The Setup I was poking around OpenSea's tooling one afternoon — just trying to understand how some of their internal features worked. Nothing fancy, no scanners, no brute force. Just cu...

Comments

Comments

9/12/2026: Trending stories on Hackernoon today!

SPIFFE identity tokens for AI agents can still be replayed if intercepted. The IETF WIMSE group built the fix, and SPIFFE just adopted it.

https://web.archive.org/web/20260911105205/https://www.wired... https://archive.ph/1xTJ3 Comments URL: https://news.ycombinator.com/item?id=49658672 Points: 95 # Comments: 103

Article URL: https://blog.trailofbits.com/2026/08/11/how-trail-of-bits-helps-verify-the-integrity-of-your-signal-chats/ Comments URL: https://news.ycombinator.com/item?id=49671237 Points: 48 # Comments: 24

Article URL: https://lalitm.com/post/buildprof/ Comments URL: https://news.ycombinator.com/item?id=49672842 Points: 87 # Comments: 15

Article URL: https://www.righto.com/2026/09/8087-microcode-reverse-engineering-fscale.html Comments URL: https://news.ycombinator.com/item?id=49673580 Points: 82 # Comments: 23

Article URL: https://high5apps.github.io/josm-plugin-website-wizard/ Comments URL: https://news.ycombinator.com/item?id=49674050 Points: 290 # Comments: 70

Article URL: https://arxiv.org/abs/2609.01877 Comments URL: https://news.ycombinator.com/item?id=49674498 Points: 77 # Comments: 127

Article URL: https://hachyderm.io/@simontatham/117201594980991062 Comments URL: https://news.ycombinator.com/item?id=49675902 Points: 145 # Comments: 44

Article URL: https://www.youtube.com/watch?v=ToP9xfLDSME Comments URL: https://news.ycombinator.com/item?id=49676324 Points: 109 # Comments: 33

Article URL: https://modelrift.com/blog/cadquery-vs-openscad/ Comments URL: https://news.ycombinator.com/item?id=49676577 Points: 32 # Comments: 39

Article URL: https://withspecific.com/benchmarks/real-swe Comments URL: https://news.ycombinator.com/item?id=49676820 Points: 74 # Comments: 50

Article URL: https://www.theverge.com/games/994371/starcraft-returns-in-2030-as-an-open-world-shooter Comments URL: https://news.ycombinator.com/item?id=49677715 Points: 32 # Comments: 30

Article URL: https://maxmautner.com/2026/09/11/liability-coverage.html Comments URL: https://news.ycombinator.com/item?id=49677836 Points: 27 # Comments: 20

Anthropic CEO Dario Amodei says the time has come to slow down AI development and will give third-party evaluators like METR access to its models to help ensure its "adherence to safety practices and commitments." In a winding essay, Amodei proposed a three-step plan to "pace the frontier" - jargon that simply means to slow […]

Amelia Meath and Nick Sanborn, better known as Sylvan Esso, have been bringing their low-key electro-pop to the masses since 2014, bursting onto the scene with their self-titled debut album and the single "Hey Mami." Over the years, they've put out a number of excellent records, dabbling in dustier, more fragile textures on Free Love, […]

Tesla’s halo sports car was first announced in November 2017.

Do you recall Word Art? That rainbow gradient, arched text monster on every 90s school flyer. We are currently experiencing a resurgence of this technology, but this time it is used to create complete websites. ## The tell is already showing Frontend developers argue that when AI generates design, users can immediately tell that design was made with "sloppy" AI. There's no list of reasons, they can just sense that it looks cheap. This is not a new instinct. We've been detecting generic clip a...

A screenshot of an execution tree looks useful in a pull request. It is also missing almost everything a skeptical reviewer should ask: Which trace produced it? Was the trace changed after capture? Which redaction policy was applied? Did the crop remove a warning? Can I inspect the failing step without asking the author to reproduce it? Raw JSONL answers some of those questions and creates another problem: it may contain identifiers, attributes, or bounded previews that shou...

A Mac app I maintain needs Full Disk Access. It measures disk usage, and most of what is worth measuring sits behind that permission. I switched it on in System Settings ▸ Privacy & Security ▸ Full Disk Access, and the app went on reporting limited access. Its banner said what these banners say: already granted? Relaunch. Relaunching changed nothing, and never could have. The app did not validate A permission is granted to an app, and to macOS "the app" is not a name. So t...

Brazil has a huge amount of high-quality official economic data. The problem is that using it programmatically is much harder than it should be. The Brazilian Central Bank has one API and data model. IBGE has another. Tesouro has another. SICONFI, Comex Stat, Novo Caged, ANP, EPE and CVM all expose data differently. At first, I thought the solution was straightforward: Put all of these sources behind one API. While building it, I realized that API normalization was not actuall...

A Postman collection can be a surprisingly useful starting point for an MCP server. Many teams have Postman collections before they have polished OpenAPI documentation. The collection already contains working requests, paths, query parameters, headers, bodies, example responses, and authentication notes. That is enough to begin thinking about MCP tools. But there is a catch. A Postman request is still a developer artifact. An MCP tool is an AI-facing capability. Converting one into the ...

I added three new checks to a build. Nothing about the code under test changed. Ten tests that had nothing to do with any of them went red, and a separate, unrelated block of work was refused outright. Both of those were correct. FAIL_ORACLE reason=row_without_its_oracle_or_fault_cells rows=OK_BRIDGE, OK_COST, OK_MUTATION (10 tests red with it) REFUSED reason=line_outside_the_layer_vocabulary What I had actually done I wrote the ...

TL;DR: I was the bottleneck on every pull request. Reviews waited days for me. So I built a PR inbox for my phone. AI summarizes each diff. I swipe right to approve. Built with Expo and Supabase. Costs $0. This is post one of the build-in-public series. I am the problem. Let me say that first. Every PR on my projects waited for me. Contributors opened good work. Then silence. For days. Not because the code was bad. Because reviewing code on a laptop feels like homework. And I kept not doin...

TL;DR: GitHub login in my Expo app broke three separate times. A deep link that went nowhere. A PKCE flow I wired backwards. A redirect URL with a typo. Each fix is copy-pasteable below. Total auth code is under a hundred lines. Steal it. Auth is the worst part of every app. Nobody downloads your app for the login screen. They tolerate it. Every minute you spend on OAuth is a minute nobody will ever thank you for. I spent three days on it. Here are all three failures, so you spend thirty minu...

For anyone passionate about digital sovereignty and homelabbing , setting up a private home server on a Single Board Computer (like a Raspberry Pi 5, Orange Pi) or a Proxmox home lab is one of the most rewarding engineering projects. However, anyone who has managed a growing homelab knows the friction that comes with it: Writing and debugging endless docker-compose.yml files with conflicting port mappings, network subnets, and missing environment variables. Heavy all-in-one pl...