DEV Community
GPUStack With vLLM in Production: Pinning KV Cache Before the OOM Finds You
We run a small on-prem inference fleet - four nodes, mixed A6000 and 4090 cards - and last quarter we replaced a pile of hand-rolled docker run wrappers with…
Curated feed from trusted sources: cybersecurity, AI, and dev.
We run a small on-prem inference fleet - four nodes, mixed A6000 and 4090 cards - and last quarter we replaced a pile of hand-rolled docker run wrappers with…
If you vibe-code, read this before you share anything you built. An agent can produce a working app in an afternoon. What it cannot do is check that the app …
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle TL;DR — Photograph one page of a shop's handwritten credit notebook. …
Short answer: for a scheduled daily report email backend, use cron to start one coordinator, then put one durable, idempotent delivery job per subscriber beh…
What a I learnt about outcome definitions, patient-grouped splits and honest metrics while predicting hospital readmission with scikit-learn. The problem Hos…
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle An AI-powered business assistant for freelance video creators, built …
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle What I Built Cold pitches in Lagos fail because they say nothing Free…
What I Built ReLoopAI — Discover opportunities in waste. Turn ideas into possibilities. ReLoopAI is an AI-powered application designed to help people discove…
This is a submission for the Hacktoberfest 2026 Open-Source AI Challenge, Week 2: Side Hustle. Try it before you read anything: tariff-desk.onrender.com. Cli…
Over the last two decades, digital payments have become an integral part of our everyday lives. Today, we can send money across borders, purchase goods using…
What I Built TutorSaathi AI is an AI-powered teaching assistant designed to help English tutors and coaching centers create personalized learning materials f…
"No logs" is the most common promise in VPN marketing. It is also the hardest one for a buyer to check. A privacy policy can say "no logs" in the headline an…
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected serve…
Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compr…
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content …
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowin…
Listen to the session or watch below Can AI design new life forms? In 2025, Stanford University PhD student Samuel King came up with a preliminary answer whe…
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering t…
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. …
This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Kids ar…
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing …
More than 5 million people around the world have an advanced form of age-related macular degeneration (AMD) called geographic atrophy, in which cells in the …
I. Meet cute Barnabas and Mainspring grew up near at hand, about an hour apart with good traffic, but for a long time they weren’t close. They traded glimpse…
I don’t remember much about Peppy, my first and only pet cat. I can conjure the sensation of stroking her while she purred, recall how she used to get stuck …
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]
Social media bans are stacking up. In July, France joined Australia in restricting minors from accessing social media—barring children under 15 from major pl…
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptc…
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. […
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
I believe the cybersecurity industry may be approaching AI security the wrong way.
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocum…
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
AI, agents, voice, and physical controls are shifting software development from operating tools to expressing intent—and helping developers stay focused on b…
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
Put native GitHub features to work to review outside collaborator access and archive stale repositories. The post Staying Evergreen: How we automated secure …
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business co…
This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Pig kid…
In this age of rising electricity demand, people are trying to squeeze every last bit of power out of every power plant possible. Over the past few weeks, th…
Have you ever thought about what makes you you? Science assures us it has everything to do with the three-pound organ between our ears, with its billions of …
Pig kidneys that were cooled to -150 °C and stored in a freezer for months have been successfully rewarmed and shown to work again for the first time, say sc…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
In September, we experienced two incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: September 2026 …
Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tra…
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for paym…
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch …
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no cust…
GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan execution time by 86%. The …
Article URL: https://opennet.ru/base/maillist/169.txt.html Comments URL: https://news.ycombinator.com/item?id=50069439 Points: 116 # Comments: 68
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Learn how to add custom instructions and skills to your repository, use custom agents, and connect MCP servers like Playwright. The post GitHub Copilot app f…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigatio…
The barriers to building software have collapsed. Today, anyone can build. Hackathons are a great place to start learning. The post Hack the World: Why hacka…
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and experiences ha…
Developers aren’t becoming more careless; they’re being outpaced. The tools that let developers create more software should also take on more of the work of …
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating w…
We're rebuilding GitHub's Git infrastructure while GitHub keeps running, creating a foundation for agent-scale software development. The post Building Git in…
Article URL: https://www.techdirt.com/2026/10/06/metas-muse-is-an-adorable-privacy-and-security-dumpster-fire/ Comments URL: https://news.ycombinator.com/ite…
Article URL: https://discuss.grapheneos.org/d/41564-pixel-11-doesnt-yet-meet-the-grapheneos-security-standards-and-may-be-skipped Comments URL: https://news.…
Article URL: https://www.youtube.com/watch?v=NnV_cWeoo5Q Comments URL: https://news.ycombinator.com/item?id=49929391 Points: 346 # Comments: 128
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacke…
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 mil…
Article URL: https://blog.trailofbits.com/2026/09/18/auditing-in-the-age-of-good-enough-ai/ Comments URL: https://news.ycombinator.com/item?id=49793957 Point…
Article URL: https://arxiv.org/abs/2609.02852 Comments URL: https://news.ycombinator.com/item?id=49758689 Points: 79 # Comments: 29
Article URL: https://github.com/cloudflare/security-audit-skill Comments URL: https://news.ycombinator.com/item?id=49736466 Points: 213 # Comments: 38
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search ser…
Article URL: https://www.tomshardware.com/video-games/playstation/26-year-old-sony-ps2-security-chip-broken-wide-open-after-four-years-of-effort-reverse-engi…
Article URL: https://www.lawfaremedia.org/article/america%27s-drivers-licence-breach-is-a-national-security-disaster Comments URL: https://news.ycombinator.c…
Article URL: https://www.tomshardware.com/pc-components/us-customs-supervisor-busted-for-stealing-core-i7-cpus-ram-and-hard-drives-from-homeland-security-pcs…
Article URL: https://huggingface.co/security.txt Comments URL: https://news.ycombinator.com/item?id=49659245 Points: 278 # Comments: 72
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch…
Article URL: https://jyn.dev/a-year-to-fix-security/ Comments URL: https://news.ycombinator.com/item?id=49605691 Points: 312 # Comments: 368
Article URL: https://rfd.shared.oxide.computer/rfd/0301 Comments URL: https://news.ycombinator.com/item?id=49593066 Points: 52 # Comments: 3
Article URL: https://quad9.net/ Comments URL: https://news.ycombinator.com/item?id=49569663 Points: 135 # Comments: 39
Article URL: https://purplesyringa.moe/blog/guest/the-nx-bit-is-not-just-about-security/ Comments URL: https://news.ycombinator.com/item?id=49564609 Points: …
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United …
Article URL: https://jasontucker.blog/how-i-turned-my-security-cameras-into-an-automatic-bird-identification-system-with-birdnet-go/ Comments URL: https://ne…
The journey to create a polyfill for the upcoming CSS random() function that works in all browsers. Let’s Use the Emergent CSS random() Function in all the B…
Well, that’s a wrap. No, not a flex-wrap, but rather today marks a new day, week, month, season, aaaand new edition of What’s important (#18), bringing you t…
Article URL: https://au.pcmag.com/ai/116091/meta-security-researchers-ai-agent-accidentally-deleted-her-emails Comments URL: https://news.ycombinator.com/ite…
The general idea is that we create a Document Picture-in-Picture window (DPIP window), and then we put HTML, CSS, and JavaScript into it. Creating Web Widget…
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the …
The CSS animation-trigger property allows you to delay the start of a CSS animation until a specific trigger occurs. animation-trigger originally handwritten…
Article URL: https://blog.happyfellow.dev/merchants-of-insecurity/ Comments URL: https://news.ycombinator.com/item?id=49447682 Points: 297 # Comments: 445
Article URL: https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability Comments URL: https://news.ycombinator.com/item?id=49440410 Points: 178 # Com…
Syntax highlighting for code blocks without the complicated markup, spans, classes, and bloated JavaScript, courtesy of Uncle Dave. MicroLighter: Syntax High…
Article URL: https://www.businessinsider.com/anthropic-san-francisco-staff-work-remote-office-security-strike-2026-8 Comments URL: https://news.ycombinator.c…
Seven and half years after blocks arrived in Core, WordPress introduces a way to build blocks without React annd build pipelines. All you need is PHP. WordPr…
A newly resolved proposal would allow us to select classes that are a prefix for variations with a wildcard, like .prefix-*. Resolved: CSS Class Prefix Selec…
Apply a style when someone navigates from one specific page to another. The idea being it'd make the sources for cross-document view transitions declarative …
As someone who teaches beginning web development, I find that building a WordPress site makes for a great final project. Hosting those projects has always be…
Lea's pushing back on light/dark mode implementations that display three state options for visitors: light, dark, and system. Dark mode toggles: two states a…
Plus, how to style skeleton UIs, how to enable diagonal scrolling, how images can overflow themselves, and yet, still more. Basically, how to do a lot of rea…
The warning is correct. And the recommended fixes you've probably seen are wrong. Here's what you can do instead to properly fix the issue. Blocked aria-hidd…
Border images are an overlooked feature. One neat fact is that border image slices can run across entire borders on an element, and animating it creates beau…
Smashing Magazine’s in-person conferences are back and returning to the wonderful city of Freiburg next month, September 7–10. SmashingConf Freiburg 2026, Se…
There's a lot of nuance to the <dialog> element, a seemingly little piece of web architecture. I've got some notes from digging into it. Using and St…
Preface This essay argues that rational people don’t have goals, and that rational AIs shouldn’t have goals. Human actions are rational not bec…
"In projecting language back as the model for thought, we lose sight of the tacit embodied understanding that undergirds our intelligence." –…
What is the Role of Mathematics in Modern Machine Learning?The past decade has witnessed a shift in how progress is made in machine learning. Research involv…
LLM-based chatbots’ capabilities have been advancing every month. These improvements are mostly measured by benchmarks like MMLU, HumanEval, and MATH …
IntroductionImagine yourself a decade ago, jumping directly into the present shock of conversing naturally with an encyclopedic AI that crafts images, writes…
The AI revolution drove frenzied investment in both private and public companies and captured the public’s imagination in 2023. Transformational consu…
A brief overview and discussion on gender bias in AI
Is Attention all you need? Mamba, a novel AI model based on State Space Models (SSMs), emerges as a formidable alternative to the widely used Transformer mod…
Exploring the utility of large language models in autonomous driving: Can they be trusted for self-driving cars, and what are the key challenges?
'Vec2text' can serve as a solution for accurately reverting embeddings back into text, thus highlighting the urgent need for revisiting security protocols ar…
Have you ever trained a model you thought was good, but then it failed miserably when applied to real world data? If so, you’re in good company.
On the the pivotal role that Deep Learning has played as a key enabler for advancing single-cell sequencing technologies.
On fish counting – a complex sociotechnical problem in a field that is going through the process of digital transformation.
In this article, we will talk about classical computation: the kind of computation typically found in an undergraduate Computer Science course on Algorithms …
This essay first appeared in Reboot. Credulous, breathless coverage of “AI existential risk” (abbreviated “x-risk”) has reached t…