HackerNews

A 32-year-old bug walks into a Telnet server

Article URL: https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/ Comments URL: https://news.ycombinator.com/item?id=49721291 Points: 49 # Comments: 16
HackerNews

Cloudflare/Security-Audit-Skill

Article URL: https://github.com/cloudflare/security-audit-skill Comments URL: https://news.ycombinator.com/item?id=49736466 Points: 27 # Comments: 4
🌍 TheVerge

The streamers are fighting over Halloween

The Toronto International Film Festival is a place to go to see the future of film, but this year it also provided a glimpse at what is coming very soon in the realm of streaming. Four different streamers - Peacock, Netflix, Amazon, and AMC - all premiered early looks at upcoming horror-adjacent series that are […]
Self-Hosting a Dockerized App on WSL2, Exposed with a Cloudflare Tunnel
🌍 Dev.to

Self-Hosting a Dockerized App on WSL2, Exposed with a Cloudflare Tunnel

TL;DR: A proof-of-concept to-do app — Node/Express and Postgres, running in Docker on WSL2 — reachable at a real domain through a named cloudflared tunnel. No login system, just a per-browser cookie hash. If you already have WSL2 and a Cloudflare-managed domain, expect this to take a few minutes, not hours. I wanted a small proof of concept: a to-do list with real persistence, running in Docker, reachable from my own domain instead of localhost . Nothing about that sounded hard on paper t...
🌍 Dev.to

Why "Remove Background" Is the Wrong Mental Model for Video

You've seen it happen. You feed a video into an image background remover, export the result, and the subject's hair turns into a cardboard cutout. Fast hand movements smear into semi-transparent ghosts. The edge between foreground and background flickers frame after frame. The model probably didn't fail. You did—by treating video as a stack of independent photos. I've been building with video segmentation pipelines for the past year, and the single biggest mistake I see developers make is ...
I Built TGDown, a Chrome Extension for Downloading Telegram Web Media
🌍 Dev.to

I Built TGDown, a Chrome Extension for Downloading Telegram Web Media

I built TGDown , a Chrome extension that adds download controls for images and videos in Telegram Web. The original product goal was simple: when users browse a Telegram chat, channel, or search result, they should be able to save media without repeatedly opening the viewer, fighting the context menu, or handling every item one by one. The implementation was less simple. Telegram Web is a large, fast-moving single-page application. An extension needs to add UI without breaking scrollin...
🌍 Dev.to

Is 'Chunkless RAG' Actually Solving the Right Problem?

This came up in Chinese AI developer circles recently: IBM has been promoting something called Chunkless RAG, where instead of the standard document-to-chunk-to-embedding pipeline, an AI agent navigates document structure the way a human reader would. Tools like Docling parse PDFs into structured representations, preserving headings, tables, and section hierarchies, and then the agent walks that structure to find relevant content rather than doing cosine similarity on chopped-up text. The pit...
🌍 Dev.to

Choosing a Multimodal AI API in 2026: Match the Platform to the Workload

I wouldn’t pick a multimodal API by counting models. I’d start with what the application actually does: synchronous text requests, occasional image generation, thousands of queued video jobs, or inference behind enterprise IAM. Those are different operating models. A single account can simplify procurement and billing, but it does not make request schemas, output formats, or job lifecycles interchangeable. My shortlist splits into four categories: a cross-provider gateway for mixed commerc...
🌍 Dev.to

How to Set Up an Agent Operating System in 2026: The Open-Source Stack That Unifies Chat, Voice, Tasks, and Memory

An agent operating system solves the single biggest productivity tax in AI today: the scattered-agent problem, where five different AI tabs share zero memory and you re-explain your business in every window. The fix is one self-hosted runtime that gives every AI surface — chat, voice, task board, scheduled jobs, and background workers — a single agent, single memory, and one set of skills behind one dashboard. The best open-source implementation in 2026 is Hermes Agent by Nous Research: MI...
🌍 Dev.to

Hermes Agent Use Cases: 5 Free Things You Can Set Up Today (2026)

Verdict: Hermes Agent is a free, open-source (MIT-licensed) AI agent from Nous Research, and the gap between installing it and actually using it is almost entirely about which tools you plug in. The five setups below cover the jobs it does best today: rendering videos from HTML, delegating work to a Kanban-based agent team, turning your documents into podcasts and videos, building websites and small apps, and tying all of it into one self-hosted dashboard. Every component listed is free at the ...
🌍 Dev.to

Best Personal AI Agents in 2026: Grok Bot vs Claude Cowork vs ChatGPT Work vs Hermes Agent (Compared)

Verdict: There is no single best personal AI agent in 2026, because all of them are built from the same six parts: a model, a computer to run on, file storage, tools and plugins, memory, and scheduled routines. If you want a zero-setup product, Claude Cowork is the safest bet and Grok Bot is the flashiest new option. If you want to own the machinery and pick your own models, Hermes Agent is the strongest open-source choice. The real decision is not which agent, it is whether you want turnkey co...
🌍 Dev.to

Tencent Hy3 in Hermes Agent: The 295B Open Agent Model, Now That the Free Window Closed (2026 Guide)

Verdict: Tencent Hy3 is a 295-billion-parameter open agent model that ran completely free inside Hermes Agent (via Nous Portal) and on OpenRouter for roughly two weeks in July 2026. That promotional window has closed, but Hy3 remains a strong open-weight option for agent work, and several genuinely free agent-capable models still exist on OpenRouter today. This guide covers what Hy3 actually is, what the free period meant, what is still free, and how to plug any of them into Hermes Agent in a f...
🌍 Dev.to

Floci: The Free, Open-Source LocalStack Alternative That Runs AWS on Your Laptop (2026)

Floci is a free, MIT-licensed local AWS emulator that runs real AWS services (S3, DynamoDB, Lambda, SQS and more) in Docker on your own machine, with no account, no auth token and no feature gates. It is the most credible drop-in replacement for LocalStack since LocalStack retired its Community edition in March 2026 and started requiring an auth token for every run. If your local dev or CI workflow broke this year, Floci is the fastest fix: docker compose up and you are running. TL;DR ...
Tired of "new" Everywhere? Learn Factory Method with Laravel
🌍 Dev.to

Tired of "new" Everywhere? Learn Factory Method with Laravel

1. Hook & Problem Statement You're building a Laravel application. You need to create a payment processor. So you write: $processor = new StripePaymentProcessor ( config ( 'services.stripe.secret' ), config ( 'services.stripe.webhook_secret' ) ); Then you need to create a different processor for another part of the system: $processor = new PayPalPaymentProcessor ( config ( 'services.paypal.client_id' ), config ...
🌍 Dev.to

I Let AI Plan 170 Changes. It Made the Same 3 Mistakes Every Time.

Everyone is arguing about which model plans best. I ran 170 goals and found out the model was never the variable. The plan was. I built a small engine called PlannerCritic : one LLM writes a plan, a second LLM reviews it, and a set of deterministic gates decides whether it's allowed to move forward. Then I pointed it at 170 real change-planning goals across 40 domains, including identity management, multi-agent ops, SRE, supply chain policy, and FinOps. Total cost: $0.49. The resul...