HackerNews

HEIF Heist: image parser RCE exploit

Article URL: https://heif-heist.com Comments URL: https://news.ycombinator.com/item?id=49754253 Points: 7 # Comments: 0
HackerNews

Cloudflare Quick Tunnels

Article URL: https://try.cloudflare.com/ Comments URL: https://news.ycombinator.com/item?id=49754785 Points: 67 # Comments: 35
HackerNews

BeanShell3 in Development

Article URL: https://beanshell.github.io/home.html Comments URL: https://news.ycombinator.com/item?id=49754823 Points: 11 # Comments: 6
HackerNews

Mathematicians Build Long-Awaited Graph Sandwich

Article URL: https://www.quantamagazine.org/mathematicians-build-long-awaited-graph-sandwich-20260918/ Comments URL: https://news.ycombinator.com/item?id=49755095 Points: 9 # Comments: 0
The Leftist Split Over AI Doom
🌍 Wired

The Leftist Split Over AI Doom

The left wants AI regulation. They just can't agree on what it should look like or how concerned they should be.
🌍 TheVerge

Flash floods can strike without warning — this new technology could change that

On the morning of June 9th, Laura Lin was working from her home in Lanesville, a rural southern Indiana town about 15 miles from the Kentucky border. She was on a Zoom call, unaware that the heavy rain outside was beginning to flood her yard. "I look over to where the barn is over there, […]
🌍 Dev.to

Your Agent Did Not Inherit Your Laptop PATH

Did your last agent run pick the wrong python? I see this failure more than failed tests. The chat looks green after a version print. Then CI executes an entirely different local binary. Why does that split keep happening on scratch hosts? Because PATH is only a search story, not truth. The agent tells one story and your laptop tells another. A disposable host will tell a third story. This FAQ kills five PATH myths with commands. It is a court, not a vibe check. Why these...
How I Fought Bybit's Partial TP/SL Mode and Got Almost Nowhere — TradingView Automation with Bybit
🌍 Dev.to

How I Fought Bybit's Partial TP/SL Mode and Got Almost Nowhere — TradingView Automation with Bybit

A few days ago I had what looked like a pretty normal request. A user was trading on Bybit from TradingView and opening several entries in the same direction. He wanted every new entry to keep its own Take Profit and Stop Loss. Not one TP and SL for the whole position, but separate levels for every entry. The first BUY could happen at one price, the next one an hour later at another price, and a third one could belong to a completely different setup. From the TradingView side these are separate ...
🌍 Dev.to

The Poller Was Fine on My Laptop. The Deadline Was Reading the Wrong Clock.

Have you ever watched a health check fail, even though the process was still doing useful work? I spent two days chasing that exact pattern after a deploy that looked boring on my laptop. The service came up, the retries fired, and then the client declared the whole thing unreachable. Why would a timeout that passed locally start collapsing as soon as I left my own machine? This is not a retry-storm recap, and it is not a performance bake-off with invented numbers. These are field notes from ...
Getting Started with Amazon ECS Express Mode
🌍 Dev.to

Getting Started with Amazon ECS Express Mode

AWS App Runner End of Support Did you know that AWS App Runner has been deprecated ? I've been using AWS App Runner for my simple services. It's a bit sad that I'm no longer able to create a new service, even though I can still maintain AWS App Runner services. Quick Learning of Amazon ECS Express Mode Amazon ECS Express Mode is an alternative to AWS App Runner. I've tried to use Amazon ECS directly, but the setup is quite a lot. Let's delegate these tasks to Amaz...
🌍 Dev.to

AI Agent Security: 4 Failure Modes That Are Not Prompt Injection

Prompt injection is one item on a list of ten. That is worth sitting with, because if you read the agent security conversation online you would think it was the whole list. The OWASP Top 10 for LLM Applications 2025 opens with LLM01:2025 Prompt Injection, and then names nine more things that will take your system down: Sensitive Information Disclosure, Supply Chain, Data and Model Poisoning, Improper Output Handling, Excessive Agency, System Prompt Leakage, Vector and Embedding Weaknesses, ...
🌍 Dev.to

Generate MIDI and WAV from the Same C# Source with SoundScript

Less audio plumbing. More programmable sound. Generating a MIDI file in C# isn't particularly difficult. Generating MIDI, rendering audio, keeping everything reproducible, and making the musical source easy to review in Git is where complexity starts to accumulate. SoundScript takes a different approach. Instead of manually creating MIDI events or building audio pipelines, you describe musical intent and let SoundScript render the outputs. Let's build something. ...
🌍 Dev.to

Deterministic Audio Fixtures for Automated Testing in .NET

We generate JSON fixtures, images, database records, and API payloads for tests. Why not audio? Most engineering teams already treat test data as code. We generate: JSON fixtures Database records API payloads Configuration files Images Yet audio is often handled differently. A WAV file gets copied into a test directory and remains there as a binary asset that nobody wants to touch. tests/ └── fixtures/ └── notification.wav The test passes. The...
🌍 Dev.to

Text-to-Music with SoundScript: Deterministic Composition Instead of Prompting

Generated music does not have to mean unpredictable music. When developers hear text-to-music today, they often think of generative AI. The workflow is familiar: Prompt ↓ AI Model ↓ Music It's a powerful approach when your goal is creativity, experimentation, or stylistic exploration. But what if your requirements are different? What if: The same input must produce the same output Results must be reproducible in CI/CD Generated music must be testab...
🌍 Dev.to

How to Restore Lost Chat History in Google Antigravity IDE (Reverse Engineering, The Plan Mystery, and Ready-to-Use Solutions)

If you have ever launched Google Antigravity IDE only to be greeted by the dreaded "No Conversations Found" message in your history, or noticed that dozens of past AI chat sessions have vanished from your sidebar , you are not alone. Many developers assume their conversation data was permanently wiped out after: Updating or reinstalling the IDE (e.g. migrating between tarball, Ubuntu Snap, or Flatpak packages); Clearing editor caches or resetting application state; Extended peri...
🌍 Dev.to

Generate Background Music from JSON in .NET

What if application data could drive sound without your application owning an entire audio engine? Modern applications already use JSON to describe behaviour. Configuration User preferences Application state Notifications Workflow status Environment settings Feature flags That data typically controls things like: JSON ↓ UI JSON ↓ Feature Behaviour JSON ↓ API Configuration JSON ↓ Workflow Logic But JSON can also drive audio. With SoundScr...
🌍 Dev.to

A Green API Is Not a Working Page

I spent a morning connecting a session-recording tool to OneFindMe , the AliExpress product search engine I run in twelve languages, expecting to learn something about user behaviour. Instead it handed me a list of JavaScript errors, and every single one turned out to be a bug that had been in production for weeks while every check I had was green. That is the part worth writing down. Not the bugs — bugs are ordinary. The fact that my entire measurement apparatus was structurally incapable o...