| News Nug |
|---|
|
Android and iPhone users can now share files, starting with the Pixel 10 Published: 2025-11-20 | Origin: Hacker News Google is introducing a feature that allows Quick Share to work with AirDrop, enabling easier file transfers between iPhones and Android devices, starting with the Pixel 10 family. This integration focuses on security, employing strong safeguards validated by independent experts. It aims to enhance compatibility between different operating systems, complementing previous efforts like RCS and unknown tracker alerts. Google plans to expand this feature to more Android devices and encourages users to try it out. Users can also sign up for Google news updates. |
|
How A Missing Last Name Check Left Millions of Airline Customers' Data Exposed Published: 2025-11-20 | Origin: /r/programming On October 15, 2025, a vulnerability was discovered in Avelo Airlines' reservation system, which lacked last name verification and rate limiting on reservation endpoints, potentially exposing sensitive customer information. The vulnerable nature of the system could allow unauthorized access to personal identification information (PII) and reservation details. Upon discovering this, the researcher promptly contacted Avelo's cybersecurity team, who responded quickly and engaged in productive discussions about the vulnerability. Avelo took the findings seriously, implementing a fix by November |
|
Cursor's President is loving this University of Chicago study, but does merge rate really = productivity? Published: 2025-11-20 | Origin: /r/programming The latest news highlights an upcoming study from the University of Chicago, indicating that AI coding agents, particularly Cursor, significantly boost developer productivity. The study analyzed over 1,000 organizations and found that companies using Cursor's AI tool could merge 39% more pull requests compared to those not using it, with a 25% increase in weekly code merges. Importantly, this increase in productivity did not lead to a rise in short-run revert rates, suggesting that the quality of the code produced was high |
|
Nano Banana Pro Published: 2025-11-20 | Origin: Hacker News On November 20, 2025, Google DeepMind launched Nano Banana Pro, an advanced image generation and editing model built on Gemini 3 Pro. This new tool allows users to create high-quality visuals with improved text rendering in multiple languages. Nano Banana Pro offers enhanced reasoning and real-world knowledge for a more accurate and context-rich visualization of ideas, making it suitable for various applications, such as prototyping, infographics, and transforming handwritten notes into diagrams. The model builds upon the earlier Nano Banana |
|
TinyFloat - the most unoptimized soft float library on the net Published: 2025-11-20 | Origin: /r/programming The author takes feedback seriously and has created a simple 32-bit floating-point implementation due to dissatisfaction with existing soft floating-point libraries, which are often complex and poorly documented. Their project aims for readability and simplicity rather than efficiency, exemplified through its use in a raytracer for a personal TinyCompiler project. The motivation arose from a need to emulate floating-point operations with integer arithmetic, leading to the realization that much misinformation exists on the topic. The author has developed an unoptimized C++ library for |
|
Pareto principle: 20% of your code causes 80% of your bugs (Microsoft found 1% caused 99% of crashes) Published: 2025-11-20 | Origin: /r/programming The Pareto Principle, or the 80/20 rule, posits that 80% of results typically come from 20% of inputs. This observation, first noted by Italian economist Vilfredo Pareto in the 19th century, highlights how a small portion of efforts or resources often leads to the majority of outcomes. Understanding which 20% of activities, clients, or issues drive significant results can enhance planning, prioritization, and focus. To leverage this principle, one should list |
|
New in Rails 8.1: Bring Your Favorite Editor to Error Pages Published: 2025-11-20 | Origin: /r/ruby Rails 8.1.0, released on October 22, 2025, introduces a new feature that allows users to open the file that caused an error directly in their preferred editor. To utilize this feature, users must set the EDITOR or RAILS_EDITOR environment variable with the path to their editor. On encountering an error page, users can click on a pencil icon to open the relevant file in their editor. Additionally, a new ActiveSupport::Editor class has been implemented to support |
|
What Killed Perl? Published: 2025-11-20 | Origin: /r/programming The article argues that Perl is not dead, as demonstrated by the 2023 cpan Report, which shows its popularity remains on par with the dotcom era and even saw a slight increase after 2022. While cpan usage isn't a perfect measure, it indicates Perl’s ongoing relevance, although fewer newcomers are adopting the language since 2011. The author refutes the idea that Raku (formerly Perl 6) drained Perl's momentum, suggesting that Perl's infrastructure is too entrenched |
|
OpenMicrofrontends - First Major Release Published: 2025-11-20 | Origin: /r/programming The OpenMicrofrontends specification is a community-driven initiative that standardizes the description and integration of Microfrontends. It is not a framework and is not affiliated with any company. All code related to this specification is free and open source. The specification allows for the decoupling of Microfrontend development from their integration into applications, treating them similarly to Microservices, albeit with a different formal description. |
|
The EU wants to kill cookiebanners by moving consent to your browser Published: 2025-11-20 | Origin: /r/programming Iron Brands has declared they do not participate in Black Friday sales and encourage consumers to seek fair pricing instead of discounts. In related news, cookie banners, which require users to consent to tracking cookies on websites, may soon become a thing of the past in Europe. The European Commission is proposing a shift that would allow browser settings to manage cookie preferences, eliminating the need for repetitive consent pop-ups. This change aims to enhance user privacy and reduce annoyance, as users would set their preferences once and websites would have |
|
The exhaustiveness errors (generated by the Java compiler) could be improved Published: 2025-11-20 | Origin: /r/programming Failed to fetch content - HTTP Error - Net::ReadTimeout with #<TCPSocket:(closed)> |
|
Verifying your Matrix devices is becoming mandatory Published: 2025-11-20 | Origin: Hacker News In April 2026, Element will implement a significant security update that will require all devices to be verified in order to send and receive end-to-end encrypted messages. This change, stemming from a Matrix specification update, aims to enhance the security of communications and ensure users can trust that messages received are genuinely from their intended contacts. Currently, unverified devices can raise concerns over potential account compromises or impersonation risks. The new verification process will eliminate these uncertainties, ensuring that only verified devices can communicate securely. |
|
Basic Rust FFI Tutorial Published: 2025-11-19 | Origin: /r/programming Failed to fetch content - HTTP Status - 403 |
|
Precise geolocation via Wi-Fi Positioning System Published: 2025-11-19 | Origin: Hacker News In a post by Andrew on November 19, 2025, he discusses his experience in an Introduction to Algorithms course at UW, which uniquely requires attendance tracking through a platform called TopHat. This system uses a four-digit numerical code to confirm students' presence, but to combat the common trick of having friends enter their codes for them, TopHat offers a "secure attendance" feature. This feature uses geolocation to confirm student presence, raising concerns about the accuracy of location tracking, especially given the |
|
A breakdown of all OAuth 2.0 authorization flows (Server-side, PKCE, Device Code, Client Credentials) Published: 2025-11-19 | Origin: /r/programming Failed to fetch content - HTTP Status - 403 |
|
Researchers discover security vulnerability in WhatsApp Published: 2025-11-19 | Origin: Hacker News IT-security researchers from the University of Vienna and SBA Research discovered a significant privacy vulnerability in WhatsApp's contact discovery system, enabling the enumeration of 3.5 billion accounts globally. This issue was responsibly reported to Meta, which has since mitigated the vulnerability. The research highlights the necessity for ongoing independent security assessments of major communication platforms and the dangers related to the centralization of instant messaging services. The researchers revealed that it was possible to query over 100 million phone numbers per hour, confirming extensive account |
|
Loose wire leads to blackout, contact with Francis Scott Key bridge Published: 2025-11-19 | Origin: Hacker News On November 18, 2025, the NTSB reported that a loose wire in the electrical system of the 984-foot containership Dali caused a blackout, leading to the vessel colliding with the Francis Scott Key Bridge in Baltimore on March 26, 2024. This incident resulted in the bridge's collapse and the deaths of six highway workers. Investigators found that improper wire-label banding prevented the wire from being connected correctly, triggering the blackouts and loss of propulsion and |
|
The lost cause of the Lisp machines Published: 2025-11-19 | Origin: Hacker News The author expresses frustration with the lingering romanticism surrounding Lisp Machines, which were specialized computers designed to run Lisp programming languages. The original Symbolics company, a major player in this market, went bankrupt in 1993, signaling the decline of Lisp Machines, which had begun years earlier. By the late '80s, mainstream RISC machines were outperforming Lisp Machines, leading to their obsolescence. The author notes that despite some nostalgia for these machines due to their innovative development environments, it's time |
|
Optimizing Ruby performance: Observations from thousands of real-world services | Datadog Published: 2025-11-19 | Origin: /r/ruby The content describes an integrated monitoring and security platform that offers comprehensive visibility into the health and performance of an organization's stack, which includes infrastructure, applications, and logs. Key features include: - **Observability**: Provides end-to-end visibility of system health and performance metrics. - **Security**: Enables real-time threat detection, prioritization, and response, covering code and cloud security, as well as threat management. - **Digital Experience**: Focuses on optimizing front-end performance to enhance user |
|
Linus Torvalds: Vibe coding is fine, but not for production Published: 2025-11-19 | Origin: /r/programming Failed to fetch content - HTTP Status - 403 |