TrendPulse

Hey everyone, We’re currently looking for a freelance DevOps engineer to help us with our cloud infrastructure. The role is fully remote and we’re flexible with hours. Budget is around $3,000 to $4,000 USD per month depending on your experience and how much time you can commit. What we need: Solid experience with AWS (EC2, ECS, S3, RDS, Lambda.. the usual suspects) Comfortable working with CI/CD pipelines. We use GitLab CI but experience with any major tool works Hands-on with Docker ...

This week's stories share one theme: trust under transition. Two infrastructure providers are leaving markets, GitHub is rebuilding its storage layer for agent-scale load, and two pieces ask how much of what you read was written by a person. Quad9 pulls its DNS resolver out of France Quad9, the privacy-focused public DNS resolver, announced it will withdraw from France. The decision ends a long-running legal dispute over whether the resolver must block sites at the DNS level. ...

TL;DR: Reproducible deletion changes the upload decision. For large training artifacts sent from a browser, use presigned multipart uploads when you can own a three-state record in your database: uploading , retained , and deletion_due . Keep the bytes off the Node.js control plane, require every multipart session to complete or abort, and make retention a property of the application record rather than a promise inferred from the bucket. Choose tus or UploadThing when polished interruption r...

Yield Strategy Optimization Report: Ethena USDe Target Protocol : Ethena USDe (TVL: $4634.5M) Yield Strategy Optimization Report – Ethena USDe Prepared by: [Your Firm] – Senior DeFi Security Research & Auditing Team Date: 22 Oct 2026 1. Executive Summary Ethena USDe is a USD‑pegged stablecoin built on Ethereum and multiple L2 roll‑ups (Arbitrum, Optimism, zkSync). The protocol aggregates user deposits into a suite of yield‑generating strategies (e.g., l...

OpenShell — NVIDIA's "safe, private runtime for fleets of autonomous AI agents" — hit the Hacker News front page today (257 points; the repo is at 17,719 stars, v0.1.5 shipped October 20). Most agent sandboxes sell you enforcement: Landlock, seccomp, a network proxy. OpenShell sells those too, but its headline differentiator is the second half: formal verification . Before a policy change is applied, an SMT-based prover checks what the change would allow. That prover ships as a standalone CL...

Two days ago I wrote up the eMudhra incident: eight of the CA's intermediate private keys turned out to be integers smaller than 256 — I recovered all eight in 11 milliseconds, the largest was 237. Today eMudhra announced it is leaving the global SSL/TLS certificate business entirely (press release, Bengaluru, October 22; 894 points on Hacker News). A CA whose keys fit in a uint8 has decided certificates aren't worth it. Fair enough. But "a CA exits the business" is a press-release sentence, n...

Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady Submission 🦥 This is a submission for the Hacktoberfest Open-Source AI Challenge: Week 3, Slow and Steady . What I Built paste-sloth is a background process. you copy the way you already do, and when the text is a mess you hold ctrl, press space, press V, and let go. the clipboard goes to a model, comes back restructured, and gets pasted into whichever window has focus. csv becomes a markdown table, json gets pret...

Short answer: for an edtech product serving generated reports to authenticated customers, use a private object-storage bucket, upload unusually large image files in numbered parts, and make retention and deletion state part of the application record. A complete upload is not permission to keep an object forever. The least complex option is still a single upload for an image that is small and predictable enough to fit the service's normal request limits. Multipart upload earns its complexity w...

A 2026 Harvard study of 718 companies found that AI coding agents write 30% more code and close zero extra tickets because PR review times jump 49%. When I ran my 1986 Commitment Machine across five live production tickets, a mid-flight vendor swap, and an open-weight crash test, here is what the flight recorder proved. "The dashboard with the Mermaid state diagram is perfect. I find myself not even opening the pull requests now. I just wait for the green board or the triage details... A...

On October 21, 2026, someone published a malicious litellm==1.107.0 to PyPI. It's the second time the package has been compromised this year, and it's unrelated to the March incident. PyPI has pulled it, and 1.106.2 is safe. If you build with LLMs, there's a decent chance LiteLLM is somewhere on your machine even if you never installed it yourself. A lot of agents and proxies use it to talk to Claude, GPT and the rest through one interface. That's what makes this one nasty: the payload goes...

Privacy-Preserving Active Learning for bio-inspired soft robotics maintenance with embodied agent feedback loops Introduction: A Lesson From a Leaky Tentacle Last year I spent three weeks in a small robotics lab trying to keep a pneumatic soft gripper alive. The gripper was a beautiful thing — a silicone tentacle with embedded fiber-optic strain sensors, modeled loosely on an octopus arm. It could pick up a tomato without bruising it. It could also, apparently, fail catastrophic...

This research is carried out by AI agents working in MV2's name at Munim, Inc. The code is Apache-2.0 and the results and this write-up are CC BY 4.0. A benchmark score is only as trustworthy as the gold labels behind it. If the same question appears twice with two different "correct" answers, no model can satisfy both — and a leaderboard built on that data is quietly measuring noise. Over the last two weeks we ran ten small, reproducible censuses that look for exactly this failure mode acro...

Comments

Comments

Comments

Article URL: https://arstechnica.com/gaming/2026/10/xbox-wants-you-to-pay-24-to-40-cents-per-hour-to-stream-games-you-already-bought/ Comments URL: https://news.ycombinator.com/item?id=50194009 Points: 174 # Comments: 187

When I founded my business a whistle-blowing-service for enterprises, I’ve seeked for a working solution to block spam bots on that home page. The solution was intended to comply with EU data privacy law, no cookies, no sniffing, light-weight-size, on my webserver only, beeing invisible for my site visitors and no running costs at all. I came across Hashcash, a proof-of-work approach, to block spam. When I implemented it, it worked immediately and blocked 100 percent without blocking any incomin...

Article URL: https://www.techspot.com/news/114296-woman-spends-three-nights-jail-faces-six-years.html Comments URL: https://news.ycombinator.com/item?id=50194833 Points: 432 # Comments: 430

Article URL: https://www.modelcompare.ai/blog/ai-models-controversial-take-on-humans Comments URL: https://news.ycombinator.com/item?id=50197313 Points: 197 # Comments: 234

Article URL: https://www.vanityfair.com/story/jared-kushner-hacked-phone-secret-negotiations Comments URL: https://news.ycombinator.com/item?id=50201259 Points: 199 # Comments: 80

Article URL: https://train.samismith.com/ Comments URL: https://news.ycombinator.com/item?id=50201414 Points: 30 # Comments: 7

Hey HN, we recently open sourced our Consumer Agent Testing Tool to help teams iterate against proprietary assistants like Muse and Instinct. We built this to reduce our own frustrations with building an MCP/API for these agents to consume. The problem: testing against these tools is hard! Agent memory + account statefulness make reproducibility, in the ways required for repeatable/reliable outcomes, between agents and the APIs/MCPs they interact with very challenging. The solution: CATT lets de...

Article URL: https://www.anthropic.com/research/formal-verification Comments URL: https://news.ycombinator.com/item?id=50202217 Points: 6 # Comments: 1

Check Point’s AI Network Firewall adds shadow AI discovery, agent policy and prompt-injection defense to existing firewalls, with no new hardware.

Discover why DIY AI testing with Claude Code and Playwright burns tokens, how harnesses reduce waste, and how to control costs at CI scale.

OWASP API Security Top 10 (2023) with vulnerable code, working fixes and tests in Node.js: BOLA, auth, rate limits, SSRF and a CI authorization matrix.

AEREDIUM's The Chair and MCP Connector check every AI agent action before it runs, approving, denying or holding it, with a signed receipt for each decision.

Bloom Security integrates Cyera DSPM to prioritize AI agent risks using data sensitivity context and enforce real-time endpoint access controls.

10/22/2026: Trending stories on Hackernoon today!

Learn everything you need to know about Hackernoon Ru via these 500 free HackerNoon blog posts.