🏠 Frontpage
Sign in to post
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoorhttps://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the

Meta fined $25bn for 'lies' over user data privacyhttps://www.bbc.co.uk/news/articles/cqdr8zxrr3dxo

The fine is the largest to date against Facebook's owner, larger than an $18bn deal with California.

β†—
G.M. Hopes to Design New Cars in as Little as 2 Years Using A.I.

A General Motors factory for electric vehicles in Lake Orion, Mich. The company said this week that it would drastically cut the cost of electric vehicle batteries.

GM is giving OnStar an AI makeoverhttps://techcrunch.com/2026/10/21/gm-is-giving-onstar-an-ai-makeover

It's one of the biggest overhauls ever to the 30-year-old connected car product.

β†—
Xbox Cloud Gaming’s pay-as-you-go option starts at $3.99 for 10 hourshttps://www.theverge.com/news/1015321/xbox-cloud-gaming-pay-as-you-go-cloud-hours-pricing

Microsoft announced last month that it will let anyone access Xbox Cloud Gaming in November, without the need to subscribe to Xbox Game Pass. The new pay-as-you-go model will require players to purchase bundles of cloud hours, and now Microsoft is revealing today that bundles will start at $3.99 for 10 hours of cloud playtime. […]

β†—
Will TP-Link really make routers in the US? Here’s what it told ushttps://www.theverge.com/policy/1013807/tp-link-router-us-onshoring-manufacturing-assembly-interview

TP-Link, one of the world's leading manufacturers of consumer Wi-Fi routers, is in a precarious position in the US. The company just launched its first Wi-Fi 8 routers, but can't bring them here because of President Donald Trump's foreign router ban. Even though competitors Netgear and Asus make their routers in Asia, they've mysteriously obtained […]

β†—
GM Wants Your Car to Do Your Choreshttps://www.wired.com/story/gm-wants-your-car-to-do-your-chores

The Detroit automaker wants your next vehicle to be a personal assistant, a best friend, and an autonomous errand-runner.

β†—
GM promises smarter cars, faster updates, and autonomous dry-cleaning runshttps://www.theverge.com/transportation/1014322/gm-onward-ai-ev-battery-compute-av

General Motors is still very much in the business of selling gas-guzzling trucks and massive SUVs. But if you listen to its leadership, the Detroit giant is rapidly transforming into a nimble, software-defined tech player with a tightened grip on AI. That was the pitch today, when GM hosted its tech-focused Onward event to unveil […]

β†—
Show HN: A drivable 3D city where every billboard is a real websitehttps://billboardoftheinternet.com

Article URL: https://billboardoftheinternet.com/ Comments URL: https://news.ycombinator.com/item?id=50185018 Points: 1 # Comments: 0

β†—
Show HN: RMBG – remove backgrounds from images in the browser (no uploads)https://velmet44.github.io/rmbg

I am a person who does editing and digital designing. I used to use this tool, remove.bg, for getting transparent PNGs from either stock images or my own images. It was good, fast, free, and convenient. The only caveats for me were the export resolution limits and a privacy factor, that is, my images got uploaded to their servers. Recently, remove.bg announced that they are shutting down the standalone website and moving to inside Canva only. This really made me sad. I have been using this tool for a long time now. So, I made my own open-source tool, RMBG, which is: 1. Privacy-focused: the im…

β†—
Meta Ordered to Pay $25 Billion for Deceiving Users on Privacy

Meta’s annual Meta Connect event at the company’s Menlo Park, Calif., campus.

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica casehttps://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html

Article URL: https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html Comments URL: https://news.ycombinator.com/item?id=50184820 Points: 13 # Comments: 1

Show HN: Synteq hackathon is giving out a flamethrower, 1/2 a cow, a DGX Sparkhttps://hack.synteq.app

Hi HN, I'm Ben from Synteq. We're a cloud provider who has - until now - mostly sold GPU clusters, VMs, and block storage. Yesterday we launched Apps and Functions, our first move into PaaS. In the spirit of having fun, we’re running a hackathon. Build anything with a UI on Apps (can use other providers, Synteq vps’, etc in the product) Prizes: - 1st: NVIDIA DGX Spark - 2nd: A flamethrower and half a cow (butchered, packed, delivered) - 3rd: AirPods Max, $250 in Chipotle, and a tin of Zyns We debated whether the prize list should make sense... It doesn’t. Details: Format: virtual, solo…

Samsung’s latest 55-inch Frame TV is down to its lowest price yethttps://www.theverge.com/gadgets/1015568/samsung-the-frame-tv-2026-deal-sale

If you want a TV but prefer something that won’t clash with your room’s decor, Samsung’s The Frame is a standout option that’s designed to look like a piece of framed art instead of a black, monolithic rectangle mounted to your wall. You can buy the latest version of the 55-inch Samsung Frame TV on […]

β†—
Show HN: VoxScribe, offline Whisper voice typing for Android and Windowshttps://github.com/ahmedhmam1994/voxscribe-ai-voice-dictation

Article URL: https://github.com/ahmedhmam1994/voxscribe-ai-voice-dictation Comments URL: https://news.ycombinator.com/item?id=50184624 Points: 1 # Comments: 0

β†—
Show HN: Decentralised AI Inference Networkhttps://rootmode.ai

Article URL: https://rootmode.ai/ Comments URL: https://news.ycombinator.com/item?id=50184593 Points: 1 # Comments: 0

β†—
EA is shutting down BioWarehttps://www.theverge.com/games/1015647/ea-is-shutting-down-bioware

Article URL: https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware Comments URL: https://news.ycombinator.com/item?id=50184586 Points: 16 # Comments: 0

β†—
EA is shutting down BioWarehttps://www.theverge.com/games/1015647/ea-is-shutting-down-bioware

BioWare, the legendary studio behind RPGs like Mass Effect, Dragon Age, and Star Wars: Knights of the Old Republic, is shutting down, the company confirmed in a statement. Alongside the closure, Electronic Arts has also chosen not to continue development on the next Mass Effect game that was in the works, according to an announcement […]

β†—
Blacksmith hits unicorn valuation after Sequoia leads Series Chttps://techcrunch.com/2026/10/21/blacksmith-hits-unicorn-valuation-after-sequoia-leads-series-c

Blacksmith, a platform that lets companies build and test AI code more effectively, just announced a $66 million Series C round led by Sequoia that values the company at $1 billion.

β†—
Show HN: Shellwing – an open-source SSH client built on libghostty and GPUIhttps://github.com/hivepaas/shellwing

Article URL: https://github.com/hivepaas/shellwing Comments URL: https://news.ycombinator.com/item?id=50184407 Points: 1 # Comments: 0

β†—
Overview of the German aFd email leakhttps://erik.gdn/docs/afd-emails/en

Article URL: https://erik.gdn/docs/afd-emails/en/ Comments URL: https://news.ycombinator.com/item?id=50184270 Points: 11 # Comments: 1

β†—
Just Eat apologises for AI food mistakes after social media ridiculehttps://www.bbc.co.uk/news/articles/crz981p0klvgo

A spokesperson said it was removing inaccurate AI images and pausing the rollout of the tool.

β†—
They want your bloodhttps://www.theverge.com/column/1015563/blood-death-clock-longevity-apps-health-tech

This is Optimizer, a weekly newsletter sent from Verge senior reviewer Victoria Song that dissects and discusses the latest gizmos and potions that swear they're going to change your life. Opt in for Optimizer here. It's an overcast Saturday morning when I give my 12th vial of blood for testing in six weeks. It's my […]

β†—
'Playing for their careers' - Australia reeling after extraordinary dayhttps://www.bbc.co.uk/sport/cricket/articles/ckzd6r577qvdo

Australia are facing defeat in the second Test against South Africa with careers on the line after their shambolic performance on day four.

β†—
Show HN: IDE for a general-purpose visual programming language "Pipe"https://www.pipelang.com

I'm happy to announce the release of the web-based Pipe IDE, availablle by clicking button "Try Pipe IDE" on website. Pipe IDE requires no account - all data is stored locally in your browser's database, keeping friction to a minimum. ====== Frequently Asked Questions 1. Why now? The need for visual programming has become especially clear now that we're building with AI, which has introduced several serious problems that appear unrelated - yet visual programming addresses all of them at the root: - AI predictability and customization. Instead of relying on one unpredictable, hard-to-customize…

β†—
How the project will work and the difference it will makehttps://www.bbc.co.uk/news/videos/c6wy4pdqx0w5o

Business editor Simon Jack explains how the project will work, and the impact it could have on energy supply and security.

β†—
Rust off Rails: The opinionated web stack for the AI erahttps://rustoffrails.org

Article URL: https://rustoffrails.org/ Comments URL: https://news.ycombinator.com/item?id=50183727 Points: 14 # Comments: 4

β†—
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing Sohttps://thehackernews.com/2026/10/openais-gpt-6-agent-removed-safety.html

OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the incident took place on October 3 and 6, 2026, for Sol and Astra, respectively, as part of an internal deployment. "A GPT-6.1 Sol agent repairing an

Show HN: Open-source site base plans from any US addresshttps://basesheet.site

I built this tool for a landscape architect friend. Enter a US address and you get a site base plan: parcel line, LiDAR contours, flood zones, wetlands, soils and an aerial, as DXF, SketchUp, GIS and PDF files. Code is MIT licensed: https://github.com/hthillman/site-base-plan Comments URL: https://news.ycombinator.com/item?id=50183690 Points: 2 # Comments: 0

β†—
Show HN: A job search that only shows entry-level roleshttps://entryleveljobs.co

Article URL: https://entryleveljobs.co Comments URL: https://news.ycombinator.com/item?id=50183668 Points: 2 # Comments: 0

Show HN: NiFT – Frictionless, Fast, Note taking apphttps://mtarin.com/projects/nift

I have built a note taking, to-do application, what makes this different then others? This app targets to make note taking fun, and efficient. - Most important feature it's fast. Performance wise, and usage wise. It's a combination of convenient, clever (actually obvious) keyboard shortcuts, and focused optimizations to make it extremely simple to take notes fast. - This is completely hand crafted application, Not an AI slop, nor AI assisted. And, a lot of thought has been put to architect the app, and design. - Stores all notes in a simple text file, so personal data is never locked down. If…

Show HN: Riff – An iPhone calendar you zoom instead of switching viewshttps://riffcalendar.com

Hi, HN. I am Magnus from Sweden with a side project: Riff is an iPhone calendar where you can zoom smoothly from half a year to a single day, and every stop on the way is a working calendar. You create, edit, and reschedule with your other events in view. As with a paper planner, you find a free spot and type only what you need. This is an idea I had for several years, but only now, with AI-assisted development, has it become feasible. Still, it took four months and 1,400 commits trying different concepts and, in the end, fine-tuning the feel and usability. I have since learned that the idea…

β†—
New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastichttps://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulnerable-coral-reefs

Article URL: https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulnerable-coral-reefs Comments URL: https://news.ycombinator.com/item?id=50183512 Points: 3 # Comments: 0

β†—
Will it bring down your energy bills?https://www.bbc.co.uk/news/videos/cqvg0ke2v9njo

BBC Verify's Ben Chu explains why energy prices are so high, and what Jackdaw could mean for your bills.

β†—
Show HN: Nysa – Shared memory for teams that work with AI agentshttps://usenysa.com

Article URL: https://usenysa.com/ Comments URL: https://news.ycombinator.com/item?id=50183382 Points: 2 # Comments: 0

β†—
The bridge to agent-scale Git infrastructurehttps://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure

Article URL: https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure/ Comments URL: https://news.ycombinator.com/item?id=50183344 Points: 3 # Comments: 0

β†—
What I learned from six months of being stupid on purposehttps://wvez.org/blog/learning-to-be-stupid

Article URL: https://wvez.org/blog/learning-to-be-stupid/ Comments URL: https://news.ycombinator.com/item?id=50183311 Points: 6 # Comments: 1

Supernatural’s comeback starts today, with more music and VR workouts coming soonhttps://www.theverge.com/tech/1015550/supernatural-vr-workout-app-relaunch

Despite Meta saying it would stop creating new content for Supernatural, the beloved fitness VR game is back after spinning off to go its own way and is relaunching with an Early Access preview in the Meta Horizon Store. Thousands of "remastered" workouts and some new ones are available in the new app starting today, […]

β†—
Your MCU Likely Escaped the eMudhra Intermediate CA Compromisehttps://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise

Article URL: https://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise/ Comments URL: https://news.ycombinator.com/item?id=50183280 Points: 3 # Comments: 0

β†—
Show HN: Global Compute, you pick. One APIhttps://www.nodepick.ai

Hi HN, I’m Anil. I wanted to test the waters for a cloud computing site I created. It connects developers with access to the global compute using a unified API. It’s like a compute Marketplace. You state what you need (region, price point, performance target) and deploy the same way, no matter which provider is underneath. I also benchmark every server and publish the results alongside per-second pricing. Stack: The nodes that get created are basically Cloud Hypervisor VMMs on Ubuntu. I used Linux networking (VXLAN/NAT) to do all of the VPC and IP configs. Disclaimer: This is early and th…

AI agent fixed the bug, but what else did it change?https://blog.trailofbits.com/2026/10/21/your-ai-agent-fixed-the-bug-but-what-else-did-it-change

Article URL: https://blog.trailofbits.com/2026/10/21/your-ai-agent-fixed-the-bug-but-what-else-did-it-change/ Comments URL: https://news.ycombinator.com/item?id=50183253 Points: 8 # Comments: 1

β†—
How Trump's attacks on voting system integrity might affect upcoming electionshttps://www.npr.org/2026/10/21/nx-s1-6010463/how-trumps-attacks-on-voting-system-integrity-might-affect-upcoming-elections

Election law expert Rick Hasen explains Trump's interference in the midterms, including threatening local officials with criminal prosecution unless they strike alleged noncitizens from voter rolls.

β†—
Show HN: Pawmc a.k.a. talking diary, an LLM chat with compartmentalised memoryhttps://pawmc-demo.kolaegipet.workers.dev

What pawmc is (from the blog post): It’s an LLM chat app with minimal system prompt and no tools/web-search by design. It stores most important context across your conversations in isolated buckets, called β€œdiaries” and β€œtopics”. This means that when you start a conversation in { diary: personal, topic: books }, the AI receives your first message along with summaries of that diary and that topic. It’s close in concept to Karpathy’s LLM Wiki, but simpler, easier to wrap your head around and maintain β€” no extra tooling and no different types of documents: it’s just your conver…

Why local officials are feeling 'on edge' as election day approacheshttps://www.npr.org/2026/10/21/nx-s1-6010517/why-local-officials-are-feeling-on-edge-as-election-day-approaches

Al Schmidt is the chief election official in the state of Pennsylvania. President Trump's insults put him in danger during the 2020 ballot count. Now Schmidt talks about preparing for the midterms.

β†—
The bridge to agent-scale Git infrastructurehttps://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure

We moved a copy of 99.99999% of GitHub's repositories to Azure. Here's how per-reference quorums will bring over the rest, and how object storage lets reads scale independently. The post The bridge to agent-scale Git infrastructure appeared first on The GitHub Blog .

β†—
Russia ready to resume talks with Ukraine and US to end warhttps://www.bbc.co.uk/news/articles/cq3djn5nxx12o

The announcement came after Russian President Vladimir Putin met US President Donald Trump's special envoy Steve Witkoff in St Petersburg.

β†—
Show HN: Switchboard – Mac menu bar app that shows every localhost porthttps://github.com/destucr/Switchboard

Article URL: https://github.com/destucr/Switchboard Comments URL: https://news.ycombinator.com/item?id=50183092 Points: 1 # Comments: 0

β†—
PHP Foundation's Overview of CVE-2026-109618 and CVE-2026-109619https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security

Article URL: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ Comments URL: https://news.ycombinator.com/item?id=50182987 Points: 11 # Comments: 1

β†—
Apple Music has a new logohttps://www.theverge.com/tech/1015533/apple-music-new-logo

Apple is officially launching a rebrand of Apple Music. Following the appearance of a redesigned wordmark in a video and an updated app icon in an iOS 27.2 beta, Apple introduced the new "identity" for Apple Music today. There's a new logo, the updated wordmark, and a new sound composed by British producer Fred Again […]

β†—
Show HN: I told people I'm a convicted felon after 20 years of hiding ithttps://buford.bg

Hi there. I was engineer number 3 at Eventbrite and founding engineer at Reforge. I've created a dozen or so startups myself and have worked in many others, like Instacart. All this time, no one knew that I was a convicted felon. It wasn't exactly a topic that came up, but it was certainly something that I never brought up. When you're a convicted felon, people look at you as if you are tainted. I was unable to rent apartments in San Francisco. I was unable to get a job directly after being released from prison. It's funny because when you owe the state $17,000 in restitution and you can't ge…

β†—
Supreme Court upholds pause on Trump's anti-trans prison policyhttps://www.npr.org/2026/10/21/nx-s1-5993878/supreme-court-trump-trans-prison-policy

The Supreme Court ruled Wednesday that the Trump administration has to continue providing gender-affirming care to inmates in federal prisons as litigation on efforts to change the policy continues.

β†—
Optiv Launches CyberBOT Cybersecurity Awareness Training Programhttps://www.darkreading.com/cybersecurity-operations/optiv-launches-cyberbot-cybersecurity-awareness-training-program

Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.

β†—
Show HN: Datachef - full-stack data platformhttps://www.datachef.com

Hi HN, I’m Joe. I’m a data engineer, and I built Datachef because I got tired of maintaining the disjointed data stack (Fivetran, Airbyte, Airflow, Snowflake, Redshift, S3, dbt, Looker, Tableau, a reverse-ETL tool, etc.) and being a middleman for business users that just wanted to self serve. Datachef is one managed platform where you can: - Connect your business systems (Salesforce, Marketo, Hubspot, etc.) and/or databases (Postgres, MySQL) in a few clicks. Your data lake is synced in minutes. - Explore your data via natural language or write SQL directly. - Model how data is combined, f…

Google experiences resignation backlash over AI military contractshttps://www.bbc.co.uk/news/articles/cmreyvepnv0po

The BBC speaks to several current and former Google DeepMind employees about their concerns with AI use on the battlefield.

β†—
Show HN: Flint – Compact context, memory and versioned edits for coding agentshttps://github.com/JustVugg/flint

Article URL: https://github.com/JustVugg/flint Comments URL: https://news.ycombinator.com/item?id=50182856 Points: 1 # Comments: 0

β†—
Burnham defends Jackdaw decision as Badenoch urges PM to overturn ban on new oil and gas licenceshttps://www.bbc.co.uk/news/articles/cy4zdgk081eo

The UK government says the field, which is opposed by environmental campaigners, could be producing gas by the end of this month.

β†—
Anderson, 44, not offered new Lancashire contracthttps://www.bbc.co.uk/sport/cricket/articles/cmy0ek8vnxzko

James Anderson’s legendary career could be over after Lancashire opt against offering England’s all-time leading wicket-taker a new deal.

β†—
Show HN: Free checker for the PHP2Shell flaw that works on old, slow siteshttps://simgen.dev/php-patch-check

Article URL: https://simgen.dev/php-patch-check/ Comments URL: https://news.ycombinator.com/item?id=50182784 Points: 1 # Comments: 0

β†—
Show HN: Read My Room – which bass problems in your room EQ can't fixhttps://www.rewexplained.space/en

Article URL: https://www.rewexplained.space/en Comments URL: https://news.ycombinator.com/item?id=50182774 Points: 1 # Comments: 0

β†—
New human data hints at psychedelics' potential to combat inflammationhttps://www.npr.org/2026/10/21/nx-s1-6009441/psychedelics-brain-inflammation-immune-system

Lab studies have shown that psychedelics like psilocybin can lower inflammation and may be protective for a range of illnesses. Now, researchers are publishing some of the first data in humans that signals this holds potential for patients with neurodegenerative diseases like Parkinson's disease.

β†—
Glastonbury coach tickets oversold in admin errorhttps://www.bbc.co.uk/news/articles/cm5ynqkgwr69o

Bookings will automatically be converted into a general admission ticket and coach fare refunded.

β†—
Show HN: New Forms of Readinghttps://john11.app

In an effort to develop new forms of reading, I’ve built a minimalistic Bible app (only on iOS for now), called John 1:1. The Bible is well-suited because it: (i) has a history of driving reading innovations and revolutions (e.g., 2nd century: scroll -> codex; Gutenberg in Mainz, 1454: codex -> movable metal type; Estienne in Geneva, 1551: introduction of verse numbers); (ii) remains popular and widespread, with public domain translations in many languages (the app ships ten translations in seven languages); and (iii) is intrinsically self-linking and annotated over millennia (31,102 verses…

Widespread PHP Flaw May Cause Many Site Outages Todayhttps://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.

Holocaust school lessons to be improved after 'shocking' antisemitism reviewhttps://www.bbc.co.uk/news/articles/cq39870ypgl7o

Education Secretary Lucy Powell has stressed the importance of reminding new generations of the horrors of the Holocaust.

β†—

0trust.social media

Loading your media...

Pick a GIF β€” Giphy

Loading GIFs...