Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: http Clear Filter

New CrushFTP zero-day exploited in attacks to hijack servers

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain administrative access via the web interface on vulnerable servers. CrushFTP is an enterprise file transfer server used by organizations to securely share and manage files over FTP, SFTP, HTTP/S, and other protocols. According to CrushFTP, threat actors were first detected exploiting the vulnerability on July 18th at 9AM CST, though it may have begun

CrushFTP zero-day exploited in attacks to gain admin access on servers

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain administrative access via the web interface on vulnerable servers. CrushFTP is an enterprise file transfer server used by organizations to securely share and manage files over FTP, SFTP, HTTP/S, and other protocols. According to CrushFTP, threat actors were first detected exploiting the vulnerability on July 18th at 9AM CST, though it may have begun

Show HN: An MCP server that gives LLMs temporal awareness and time calculation

"Passage of Time" Model Context Protocol (MCP) Server šŸ• An MCP server that gives language models temporal awareness and time calculation abilities. Teaching LLMs the significance of the passage of time through collaborative tool development. šŸ“– The Story This project emerged from a philosophical question: "Can AI perceive the passage of time?" What started as an exploration of machine consciousness became a practical solution to a real problem - LLMs can't reliably calculate time differences.

Show HN: I gave Claude a sundial and it built a calendar

"Passage of Time" Model Context Protocol (MCP) Server šŸ• An MCP server that gives language models temporal awareness and time calculation abilities. Teaching LLMs the significance of the passage of time through collaborative tool development. šŸ“– The Story This project emerged from a philosophical question: "Can AI perceive the passage of time?" What started as an exploration of machine consciousness became a practical solution to a real problem - LLMs can't reliably calculate time differences.

What Was Cyberpunk? In Memoriam: 1980-2020 (2020)

To wrap up our look at print sci-fi I am going to compare and contrast two books released in 2020 that both have much in common with Mirrorshades, but in very different ways:, Gibson’s (ā€œā€ā€the father of cyberpunkā€ā€ā€) Agency and Miciah Johnson’s debut novel ā€œThe Space Between Worldsā€. I am going to be a little mean to Gibson, but hopefully by the time you’ve read both summaries you’ll understand why. This section has also put me in the unfortunate position of trying to summarize these books so yo

What Was Cyberpunk? In Memoriam: 1980-2020

To wrap up our look at print sci-fi I am going to compare and contrast two books released in 2020 that both have much in common with Mirrorshades, but in very different ways:, Gibson’s (ā€œā€ā€the father of cyberpunkā€ā€ā€) Agency and Miciah Johnson’s debut novel ā€œThe Space Between Worldsā€. I am going to be a little mean to Gibson, but hopefully by the time you’ve read both summaries you’ll understand why. This section has also put me in the unfortunate position of trying to summarize these books so yo

Show HN: ArchGW – an intelligent edge and service proxy for agents

Hey HN! This is Adil, Salman and Jose and and we’re behind archgw [1]. An intelligent proxy server designed as an edge and AI gateway for agents - one that natively know how to handle prompts, not just network traffic. We’ve made several sweeping changes so sharing the project again. A bit of background on why we’ve built this project. Building AI agent demos is easy, but to create something production-ready there is a lot of repeat low-level plumbing work that everyone is doing. You’re applyi

Series of posts on HTTP status codes (2018)

Because I want to get into the habit of blogging on a regular basis, I thought it would be a fun idea to write a series of articles on one of my favourite topics: HTTP and Webservices. To start, I began writing an article for every HTTP status code. I only realized after I drafted the first few, that the IANA page actually lists 68 official ones. Definitely a bit more than I thought, but I started and I’m going to see if I can finish it. I’m going to release the first few this week, and then s

Series of posts on HTTP status codes

Because I want to get into the habit of blogging on a regular basis, I thought it would be a fun idea to write a series of articles on one of my favourite topics: HTTP and Webservices. To start, I began writing an article for every HTTP status code. I only realized after I drafted the first few, that the IANA page actually lists 68 official ones. Definitely a bit more than I thought, but I started and I’m going to see if I can finish it. I’m going to release the first few this week, and then s

What is going on in Unix with errno's limited nature

You're using a tool with a too-generic User-Agent You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace, the wiki thing it's part of. Unfortunately whatever you're using to do so has a HTTP User-Agent header value that is too generic or otherwise excessively suspicious. Unfortunately, as of early 2025 there's a plague of high volume crawlers (apparently in part to gather data for LLM training) that behave like this. To reduce th

Serving 200M requests per day with a CGI-bin

In the early 2000s, we used to write a lot of CGI programs. This was the primary way to make websites dynamic at the time. These CGI programs were usually written in Perl, but sometimes in C or other languages to increase performance. The CGI mechanism is conceptually simple but powerful. When the web server receives an incoming request for a CGI script (e.g. /~jakegold/cgi-bin/guestbook.cgi ), it: Sets up environment variables containing request metadata (HTTP headers, query parameters, requ

Yurei – Open source social media researcher powered by Exa AI API and YouTube v3

yurei app still in progress, not live on https://yurei.app/ yet, but you can clone it and try it out a simple opensource social media researcher powered by exa ai api and youtube v3. built with vercel's ai sdk. what it does: searches youtube for videos searches reddit for posts searches linkedin (kinda fucked rn, working on it) using grok-21212 as the llm how to install clone this repo npm install or yarn make a .env.local with: NEXT_PUBLIC_URL=http://localhost:3000 # For development NE

A simple opensource social media researcher powered by exa ai api and youtube v

yurei app still in progress, not live on https://yurei.app/ yet, but you can clone it and try it out a simple opensource social media researcher powered by exa ai api and youtube v3. built with vercel's ai sdk. what it does: searches youtube for videos searches reddit for posts searches linkedin (kinda fucked rn, working on it) using grok-21212 as the llm how to install clone this repo npm install or yarn make a .env.local with: NEXT_PUBLIC_URL=http://localhost:3000 # For development NE

Launch HN: K-Scale Labs (YC W24) – Open-Source Humanoid Robots

Hi HN, I'm Ben, from K-Scale Labs ( https://kscale.dev ). We're building open-source humanoid robots. Hardware video: https://www.youtube.com/watch?v=qhZi9rtdEKg Software video: https://www.youtube.com/watch?v=hXi3b3xXJFw Docs: https://docs.kscale.dev Github: https://github.com/kscalelabs HN thread from back in May: https://news.ycombinator.com/item?id=44023680 I started K-Scale because I really wanted a humanoid robot to hack on, so I knew that if I built one, I would have at least one cu

Math.Pow(-1, 2) == -1 in Windows 11 Insider build

Description The following is copied with extra bits from https://aka.ms/AAwwjwl (Feedback Hub) to raise awareness of this issue: Hello, I'm a contributor to osu! (https://github.com/ppy/osu). A user reported a really weird problem with our game that only happens in the current version of Canary (27881.1000) in ppy/osu#33948. I've narrowed it down to ppy/osu#33948 (comment), which is Math.Pow(-1, 2) returning -1 instead of 1 for some odd reason. Used VSCode for C# installation of .NET 8 (what

Topics: https osu pow ppy std

Show HN: A modern C++20 AI SDK (GPT‑4o, Claude 3.5, tool‑calling)

Hi all, I’m hacking on new features for the ClickHouse native client and wanted the same ā€œjust call the modelā€ ergonomics JavaScript and Python now enjoy. It didn’t exist for modern C++, so I wrote one. ai‑sdk‑cpp (Apache‑2.0) gives you: - Unified calls to OpenAI (GPT‑4o) and Anthropic (Claude 3.5) with a single C++20 API. - Streaming, multi‑turn chat, error handling—all std::optional/std::variant, no macros. - Tool calling (function‑calling) so the model can hit real APIs; sync or async, run

Topics: ai com github https sdk

Ask HN: Who is hiring? (July 2025)

Please state the location and include REMOTE for remote work, REMOTE (US) or similar if the country is restricted, and ONSITE when remote work isan option. Please only post if you personally are part of the hiring company—no recruiting firms or job boards. One post per company. If it isn't a household name, explain what your company does. Please only post if you are actively filling a position and are committed to responding to applicants. Commenters: please don't reply to job posts to compla

Show HN: Arch-Router – 1.5B model for LLM routing by preferences, not benchmarks

Hi HN — we're the team behind Arch ( https://github.com/katanemo/archgw ), an open-source proxy for LLMs written in Rust. Today we're releasing Arch-Router ( https://huggingface.co/katanemo/Arch-Router-1.5B ), a 1.5B router model for preference-based routing, now integrated into the proxy. As teams integrate multiple LLMs - each with different strengths, styles, or cost/latency profiles — routing the right prompt to the right model becomes a critical part of the application design. But it's stil

Cloudflare to introduce pay-per-crawl for AI bots

5 min read A changing landscape of consumption Many publishers, content creators and website owners currently feel like they have a binary choice — either leave the front door wide open for AI to consume everything they create, or create their own walled garden. But what if there was another way? At Cloudflare, we started from a simple principle: we wanted content creators to have control over who accesses their work. If a creator wants to block all AI crawlers from their content, they should

Why is the Rust compiler so slow?

"Why is the Rust compiler so slow?" I spent a month repeatedly building my website in Docker, and now have horrors to share. I've got a problem. My website (the one you're reading right now) is mainly served by a single Rust binary. For far too long now, every time I wanted to make a change, I would: Build a new statically linked binary (with --target=x86_64-unknown-linux-musl ) Copy it to my server Restart the website This is... not ideal. So instead, I'd like to switch to deploying my we

ā€œWhy is the Rust compiler so slow?ā€

"Why is the Rust compiler so slow?" I spent a month repeatedly building my website in Docker, and now have horrors to share. I've got a problem. My website (the one you're reading right now) is mainly served by a single Rust binary. For far too long now, every time I wanted to make a change, I would: Build a new statically linked binary (with --target=x86_64-unknown-linux-musl ) Copy it to my server Restart the website This is... not ideal. So instead, I'd like to switch to deploying my we

"Why is the Rust compiler so slow?"

"Why is the Rust compiler so slow?" I spent a month repeatedly building my website in Docker, and now have horrors to share. I've got a problem. My website (the one you're reading right now) is mainly served by a single Rust binary. For far too long now, every time I wanted to make a change, I would: Build a new statically linked binary (with --target=x86_64-unknown-linux-musl ) Copy it to my server Restart the website This is... not ideal. So instead, I'd like to switch to deploying my we

Some bits on malloc(0) in C being allowed to return NULL

You're using a tool with a too-generic User-Agent You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace, the wiki thing it's part of. Unfortunately whatever you're using to do so has a HTTP User-Agent header value that is too generic or otherwise excessively suspicious. Unfortunately, as of early 2025 there's a plague of high volume crawlers (apparently in part to gather data for LLM training) that behave like this. To reduce th

Launch HN: Issen (YC F24) – Personal AI language tutor

Hey HN, we're Mariano and Anton from ISSEN ( https://issen.com ), a foreign language voice tutor app that adapts to your interests, goals, and needs. Demo: https://www.loom.com/share/a78e713d46934857a2dc88aed1bb100d?... We started this company after struggling to find great tools to practice speaking Japanese and French. Having a tutor can be awesome, but there are downsides: they can be expensive (since you pay by the hour), difficult to schedule, and have a high upfront cost (finding a tutor

Show HN: Scream to Unlock – Blocks social media until you scream ā€œI'm a loserā€

Hi all, I kept wasting time on social media, even though I’d promised myself I’d stay focused. Regular site blockers didn’t help. I needed something that felt annoying enough to break the habit. That’s how the idea came up: make the blocker ask me to say something embarrassing out loud before it lets me back in. If I actually have to yell ā€œI’m a loserā€ into my mic. Even better - the louder I screamed, the more time I’d get. So I put together Scream to Unlock. It’s silly, but so far it’s done

Show HN: I built a tool that blocks social media until you scream "I'm a loser"

Hi all, I kept wasting time on social media, even though I’d promised myself I’d stay focused. Regular site blockers didn’t help. I needed something that felt annoying enough to break the habit. That’s how the idea came up: make the blocker ask me to say something embarrassing out loud before it lets me back in. If I actually have to yell ā€œI’m a loserā€ into my mic. Even better - the louder I screamed, the more time I’d get. So I put together Scream to Unlock. It’s silly, but so far it’s done

Tell HN: Meta developer account suspended

Hi all, my Meta developer account was suddenly restricted without warning, and there’s no way to appeal or reach support. I believe this may have been triggered by a location (read, IP address) change: I’m a student-entrepreneur who recently moved from China to Kenya for school holidays. I’m building a WhatsApp-based accounting tool for African small businesses, and this restriction is blocking critical operations. I’ve come across others facing the same issue, with no review option or clear re

Rivulet: An esolang inspired by calligraphy && code [video]

Rivulet: an esolang inspired by calligraphy and other experiments in natural language && code Daniel Temkin 22 min 22 min 105 105 Fahrplan [Rivulet](https://github.com/rottytooth/Rivulet) eschews keywords entirely. This is not done to move *away* from natural language (as in APL's use of mathematical symbols) but instead to draw from an aspect of natural language usually ignored in prog language design: calligraphic writing. Rivulet code is written in flowing lines inspired by handwritten n

Tell HN: Beware confidentiality agreements that act as lifetime non competes

Just a note of warning from personal experience. Companies don’t really need non-competes anymore. Some companies take an extremely broad interpretation of IP confidentiality, where they consider doing any work in the industry during your lifetime an inevitable confidentiality violation. They argue it would be impossible for you to work elsewhere in this industry during your entire career without violating confidentiality with the technical and business instincts you bring to that domain. It do

Hurl: Run and test HTTP requests with plain text

Hurl is a command line tool that runs HTTP requests defined in a simple plain text format. It can chain requests, capture values and evaluate queries on headers and body response. Hurl is very versatile: it can be used for both fetching data and testing HTTP sessions. Hurl makes it easy to work with HTML content, REST / SOAP / GraphQL APIs, or any other XML / JSON based APIs. # Get home: GET https://example.org HTTP 200 [Captures] csrf_token: xpath "string(//meta[@name='_csrf_token']/@content