🌍 Dev.to

The September 2026 KEV wave as an operations dataset, not a news cycle

The September 2026 KEV wave as an operations dataset, not a news cycle A single exploited vulnerability is an incident. Eleven additions to the CISA Known Exploited Vulnerabilities catalog inside one week is a pattern, and the pattern is more useful than any individual entry. Reading the late September 2026 batch together shows where attackers concentrate effort and where defender effort is spent badly. What the batch contains The late September additions include edge remote-...
🌍 Dev.to

Your AI agent doesn't need fewer permissions. It needs a mission.

If you've been on dev Twitter or Hacker News this month, you've seen the stories. An agent asked to clean up a folder deletes tens of thousands of files. A coding agent launches hundreds of parallel runs nobody asked for and burns through a five-figure bill. Someone's OpenClaw setup emails their clients without approval. Someone else writes "never touch production" in CLAUDE.md, and the agent reads every secret in the .env anyway. None of these agents were "hacked" in the movie sense. They ...
The SI Wealth Transfer Is Becoming the Largest Rug Pull in History.
🌍 Dev.to

The SI Wealth Transfer Is Becoming the Largest Rug Pull in History.

We are involved in this machine; don’t get upset by this message. Look at what you can do to make things more “evenly distributed”. The most important question about superintelligence is no longer simply whether the technology works. The deeper question is who will own the infrastructure, who will control access to it, who will receive the wealth it creates, and what happens to the people whose work makes the system valuable. SI is often described as an open revolution. Models are rel...
🌍 Dev.to

Polling SMS OTP Delivery Status Without Webhooks (A Clinical Report Gate)

The page says SMS OTP delivery is failing. On-call opens the alert and sees a rise in codes that users requested but never verified, while a patient is waiting to complete login and receive a generated clinical report by email. Polling delivery status without webhooks looks like the direct response, but polling every message until a terminal state is the wrong default. TL;DR: a pull-only SMS service can support login 2FA, but delivery polling should be bounded operational evidence, not the cl...
HackerNews

Tell HN: GitHub refuses to remove cracked copies of my software after a month

I am a developer of https://www.photopea.com, a popular photo editor that runs in a web browser. Many people are asking AI models to take the Javascript code from my website, remove all ads from it, and they publish such a "new product" on Github for everyone to download. There exist tens of such repositories on Github. I want my website to be the only source of a stable version of my program Photopea. I even received emails from people complaining about something in Photopea, and it took severa...
HackerNews

Berthd

Article URL: https://berthd.app/ Comments URL: https://news.ycombinator.com/item?id=49982735 Points: 41 # Comments: 62
HackerNews

When random is not actually random enough

Article URL: https://ersc.io/blog/when-random-isnt-random-enough Comments URL: https://news.ycombinator.com/item?id=49983404 Points: 14 # Comments: 3
HackerNews

System-level ad-blocking in Android

Article URL: https://kevinboone.me/adblock.html Comments URL: https://news.ycombinator.com/item?id=49983647 Points: 45 # Comments: 31
HackerNews

Vibecoding Photoshop: Time and pressure

Article URL: https://andreklein.net/vibecoding-photoshop-time-and-pressure/ Comments URL: https://news.ycombinator.com/item?id=49983780 Points: 33 # Comments: 27
HackerNews

OpenSSH 10.6

Article URL: https://www.openssh.org/releasenotes.html#10.6 Comments URL: https://news.ycombinator.com/item?id=49983791 Points: 77 # Comments: 14
HackerNews

Decisions API is in public beta

Article URL: https://developers.openai.com/api/docs/guides/decisions Comments URL: https://news.ycombinator.com/item?id=49984025 Points: 100 # Comments: 35