News Nug
Abusing Entra OAuth for fun and access to internal Microsoft applications

Published: 2025-08-09 | Origin: Hacker News

The blog details the author's experience of gaining access to over 22 internal Microsoft services after exploring Microsoft's aka.ms URL shortener. While working on documentation, the author became curious about what happened when accessing the main aka.ms page, only to find a login screen meant for Microsoft employees. After a few unsuccessful login attempts, the author discovered an indexing service related to aka.ms links, which led to another domain, eng.ms. Attempting to log in there resulted in a consent prompt for sharing profile information;

Curious about the training data of OpenAI's new GPT-OSS models? I was too

Published: 2025-08-09 | Origin: Hacker News

Failed to fetch content - HTTP Error - HTTP redirects too deep

Ch.at – a lightweight LLM chat service accessible through HTTP, SSH, DNS and API

Published: 2025-08-09 | Origin: Hacker News

Of course! Please provide the content you'd like me to summarize.

A CT scanner reveals surprises inside the 386 processor's ceramic package

Published: 2025-08-09 | Origin: Hacker News

The content discusses the Intel 386 processor, released in 1985 as the first 32-bit chip in the x86 line. It details the chip's packaging, which consists of a ceramic square with 132 gold-plated pins. A 3-D CT scan revealed the intricate internal structure, including six layers of complex wiring and nearly invisible metal connections. The chip features two separate power and ground networks for I/O and CPU logic. Intel opted for the custom 132-pin ceramic package, designed

My Lethal Trifecta talk at the Bay Area AI Security Meetup

Published: 2025-08-09 | Origin: Hacker News

On August 9, 2025, the author gave a talk on prompt injection and related security challenges at the Bay Area AI Security Meetup. Although the talk wasn't recorded, they created an annotated presentation with slides and notes. The presentation includes their hobby of coining new terms in the field. Prior to the talk, an audience member inquired about pelicans, prompting the speaker to quickly add a related photograph as a backdrop. In the discussion, the author described prompt injection as analogous to SQL injection

Bezier-rs – algorithms for Bézier segments and shapes

Published: 2025-08-09 | Origin: Hacker News

Of course! Please provide the content you'd like me to summarize.

wrkflw v0.6.0

Published: 2025-08-09 | Origin: /r/programming

WRKFLW is a command-line tool designed for testing and executing GitHub Actions workflows locally, without needing a full GitHub environment. It enables developers to validate workflows on their machines prior to deployment. WRKFLW supports various container runtimes, like Podman and Docker, to run workflows in isolated environments. It can be installed via Rust's Cargo package manager and is user-friendly, automatically detecting workflows from the project’s directory. Key features include: - Interactive terminal user interface (TUI

OpenFreeMap survived 100k requests per second

Published: 2025-08-09 | Origin: Hacker News

The author reflects positively on the past 10 months of OpenFreeMap, noting the stability of their architecture, support from Cloudflare, and efficient server performance. However, they suddenly encounter a significant issue: an unexpected surge of traffic with 3 billion requests and 215 TB of data transferred in just 24 hours. This alarming spike indicates a rate of 100,000 requests per second, and despite the traffic, only a small percentage of requests are failing. The surge is attributed to a new

Show HN: The current sky at your approximate location, as a CSS gradient

Published: 2025-08-09 | Origin: Hacker News

Of course! Please provide the content you'd like me to summarize.

MBCompass - FOSS Compass and Navigation App

Published: 2025-08-09 | Origin: /r/programming

MBCompass is a modern, free, and open-source compass and navigation app designed without ads, in-app purchases (IAP), or tracking. Built with Jetpack Compose, it provides direction and live location features while remaining lightweight. The app caters to users who need basic navigation capabilities without the bloat of a full mapping app. MBCompass has received positive recognition from the global developer community, and contributions are encouraged for bug fixes and feature suggestions. While the project is open-source and sustainable, user support

HTTP/2: The Sequel is Always Worse

Published: 2025-08-09 | Origin: /r/programming

The content discusses the vulnerabilities associated with the HTTP/2 protocol, highlighting that it is often incorrectly perceived as a secure transport-layer protocol. It presents research detailing various HTTP/2-exclusive threats stemming from implementation flaws and RFC imperfections, including desynchronization attacks that can hijack clients, poison caches, and steal credentials, thus leading to significant security risks for high-profile websites. The paper introduces new techniques for exploiting these vulnerabilities, particularly focusing on request tunneling, which is often misidentified as a false positive

Kotlin's Rich Errors: Native, Typed Errors Without Exceptions

Published: 2025-08-09 | Origin: /r/programming

At KotlinConf 2025, the Kotlin team announced the introduction of Rich Errors with union types, enhancing error handling in Kotlin. This feature allows functions to return types such as String or Error, moving away from the conventional try-catch paradigm to a more explicit and type-safe approach. By incorporating errors directly into the type system, developers are encouraged to handle them proactively. While Kotlin currently offers Result<T> and many teams use Arrow's Either and Validated for error modeling, Rich Errors simplify error handling

I Built a 64-bit VM with custom RISC architecture and compiler in Java

Published: 2025-08-09 | Origin: /r/programming

The content discusses the Triton-64 Virtual Machine (VM), a comprehensive 64-bit virtual machine system developed in Java with JavaFX. It features a custom CPU architecture, assembler, compiler, and development environment. The TriC programming language, specifically designed for Triton-64, simplifies writing programs compared to raw assembly code, supporting modern programming constructs while considering the VM's architecture. The TriC compiler translates TriC code into Triton-64 assembly and is built to generate efficient, readable

Just built a tool that turns any app into a windows service - fully managed alternative to NSSM

Published: 2025-08-09 | Origin: /r/programming

The content emphasizes the importance of user feedback and outlines the features of Servy, a tool that allows users to run any application as a Windows service. Servy provides full control over aspects such as the working directory, startup type, logging, health checks, and parameters. It supports a graphical user interface (GUI) and a command-line interface (CLI) for easy management of Windows services. Unlike the built-in Windows service tool, which has limitations regarding the working directory, Servy allows users to specify

The Article in the Most Languages

Published: 2025-08-09 | Origin: Hacker News

In late 2024, a Wikipedia article about artist David Woodard surprisingly became the most translated article, surpassing entries for countries and even Wikipedia itself, with 335 versions across different languages. This unusual occurrence attracted attention, particularly due to the involvement of a single user, “Swmmng”, who appeared to orchestrate a significant promotion campaign involving around 200 accounts and multiple proxy IPs. David Woodard, born in California in 1964, gained fame in the 1990

ohyaml.wtf | YAML Trivia to make you go wtf

Published: 2025-08-09 | Origin: /r/programming

Of course! Please provide the content you'd like summarized.

Tesla used car prices keep plumetting, dips below average used car

Published: 2025-08-09 | Origin: Hacker News

Tesla used car prices are dropping significantly, now below the average used car prices in the U.S., despite Tesla being considered a premium brand. While the overall used car market has seen an increase in prices, Tesla's used car values have continued to decline—down 4.59% year-over-year. This trend began last year alongside a broader market downturn but has persisted even as the market began to recover. All Tesla models have seen price decreases, with the Model Y's performance particularly dragging down the

What the windsurf sale means for the AI coding ecosystem

Published: 2025-08-09 | Origin: Hacker News

The founders of WindSurf experienced a remarkable journey, transforming their company into one of the fastest-growing SaaS businesses, reaching $82 million in annual recurring revenue (ARR) within eight months and attracting enterprise clients like Nvidia and Palantir. However, they sold the company to Cognition for $250 million—essentially valuing the business at $150 million excluding cash—just days after a failed $3 billion acquisition by OpenAI. Notably, on the same day OpenAI walked away,

Efrit: A native elisp coding agent running in Emacs

Published: 2025-08-08 | Origin: Hacker News

The content discusses Efrit, a sophisticated AI coding assistant designed for Emacs that utilizes native Elisp programming. It emphasizes the importance of user feedback and offers a seamless integration through various interfaces for different tasks. Users can clone the repository, configure their API key, and test the setup within Emacs. Efrit features conversational continuity, allowing users to refine and modify previous work easily. The tool is built on the principle of Elisp-centricity, enabling direct access to Emacs' evaluation capabilities for enhanced

Jim Lovell, Apollo 13 commander, has died

Published: 2025-08-08 | Origin: Hacker News

Acting NASA Administrator Sean Duffy issued a statement on the passing of Apollo astronaut Jim Lovell, who died at the age of 97 on August 7 in Lake Forest, Illinois. Duffy expressed condolences to Lovell's family, highlighting his inspirational life and contributions to NASA. Lovell played a significant role in pioneering Gemini missions and the Apollo program, notably as the Command Module Pilot for Apollo 8 and the commander of Apollo 13, showcasing his strength and innovation during critical missions. He