Feed aggregator
PEP 836 – JIT Go Brrr: The Path to a Supported JIT Compiler for CPython
Article URL: https://peps.python.org/pep-0836/
Comments URL: https://news.ycombinator.com/item?id=49109443
Points: 1
# Comments: 0
'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling
Article URL: https://remysharp.com/links/2026-07-23-35890312
Comments URL: https://news.ycombinator.com/item?id=49109440
Points: 1
# Comments: 0
Show HN: An AI bug fixer for VS Code that explains why your code broke
Article URL: https://marketplace.visualstudio.com/items?itemName=NeoBugForge.neo-bug-forge
Comments URL: https://news.ycombinator.com/item?id=49109430
Points: 1
# Comments: 0
CLIs are more token-efficient than MCP. Or are they?
Article URL: https://www.checklyhq.com/blog/mcp-vs-cli-token-efficiency/
Comments URL: https://news.ycombinator.com/item?id=49109425
Points: 1
# Comments: 0
Show HN: SwiftNet 0.6.0 – Lightweight l2 C networking lib (pcap and early DPDK)
SwiftNet is a small C networking library that works at Layer 2 with libpcap (and now has a very early DPDK implementation).
I built it because I was tired of using sockets or complex libraries and wanted something simple enough for my game while still being able to go fast using compile time customizations
0.6.0 changes: - Dynamic library build - Changed API in buffer functions - Simple DPDK implementation only usable right now with loopback - Cleaner source code - Built with maximum warnings enabled - Added write at offset function for buffer - Performance optimizations - Working on ubuntu linux arm64 - Added DISABLE_DYNAMIC_RATE_LIMITING flag
New version release: https://github.com/Morcules/SwiftNet/releases/tag/0.6.0 Repo: https://github.com/Morcules/SwiftNet
Comments URL: https://news.ycombinator.com/item?id=49109422
Points: 1
# Comments: 0
Anthropic's new MCP spec, Kimi K3 open weights on Ollama, GPT Transcribe, plus
Article URL: https://ddsboston.com/blogs/vibe-code-academy/ai-news-for-vibe-coders-daily-2026-07-30
Comments URL: https://news.ycombinator.com/item?id=49109406
Points: 1
# Comments: 0
Discern Security Raises $13 Million in Series A Funding
The company will invest in accelerating the development and adoption of its agentic platform.
The post Discern Security Raises $13 Million in Series A Funding appeared first on SecurityWeek.
Cantina Emerges From Stealth With $8 Million in Funding
The startup’s community-powered agentic security platform helps proactively identify, prioritize, and remediate vulnerabilities.
The post Cantina Emerges From Stealth With $8 Million in Funding appeared first on SecurityWeek.
Of all 18,849 servers in the MCP registry 1 in 6 is dead
Article URL: https://mcpqueen.com/reports/state-of-mcp-2026-07
Comments URL: https://news.ycombinator.com/item?id=49109394
Points: 1
# Comments: 0
Hidden prompt turns Microsoft Copilot into an AI worm
A security researcher has demonstrated how Microsoft Copilot for Word can be tricked into spreading a self‑propagating prompt‑injection “AI worm.” The attack silently alters documents and embeds its own hidden instructions into newly created files, allowing it to spread through normal document-sharing workflows without macros or traditional malware.
The technique allows an attacker to hide a JSON‑formatted prompt as white text on a white background inside a Word document. When someone asks Copilot for Word to draft or edit content based on that document, Copilot strips away the formatting, reads the hidden text, and treats the embedded instructions as part of the user’s request.
Copilot then modifies the active document and appends the full malicious prompt as hidden white text. That new document becomes a new carrier. Anyone who later uses it as source material for Copilot triggers the same behavior, allowing the prompt injection to spread to more documents. Because the documents are created and edited by legitimate users, the attack can be difficult to trace.
The researcher could still reproduce the full worm chain even after Microsoft rolled out multiple mitigations, including upgrades to newer GPT‑5.5 and 5.6 models.
At the time of writing, there is no complete mitigation for this broader class of attacks across comparable large language model (LLM)‑based products. It’s characterized as an architectural weakness of current LLM systems: attacker‑controlled content shares the same context window as trusted instructions. Attacks that exploit this behavior are known as prompt injection attacks and may never be fixed.
How to stay safeTreat documents from outside your organization as untrusted, especially if you plan to use them with Copilot for Word.
Review any attached document before using it as Copilot source material, and carefully verify Copilot‑generated/edited documents before sharing or reusing them.
If you don’t use Copilot, you can disable it.
Malwarebytes users can turn off Copilot under Tools > System Tweaks > Miscellaneous.
Malwarebytes setting to disable CopilotOr in Word itself:
For individual users who don’t want Copilot in Word:
- Open Word, go to File > Options > Copilot and clear the Enable Copilot checkbox, then restart Word.
- In some versions of Word, the setting appears under File > Options > General in a Copilot section. In both cases, the key is unchecking the “Enable Copilot” setting.
You can also remove the Copilot icon from the ribbon by right‑clicking the ribbon, open the customization dialog, locate the Copilot/Assistance button, and removing it.
Alternatively, you can limit Copilot’s role by following these instructions:
- In Word, go to File > Account > Account Privacy > Manage Settings, and uncheck Turn on optional connected experiences. This reduces certain cloud‑powered AI features, including Copilot‑related functions that rely on those services.
- In the Microsoft 365 Admin Center, under Copilot > Settings, set Pin Microsoft 365 Copilot Chat to Do not pin Copilot chat in Microsoft 365 apps so the chat pane doesn’t appear by default in apps like Word.
This doesn’t remove Copilot entirely or stop these attacks, but it does reduce its visibility and limits some of its cloud‑assisted functionality.
From reporting threats to removing them.
Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.
Show HN: I got shadowbanned on X (Twitter), so I built a checker
Article URL: https://amishadowbanned.com
Comments URL: https://news.ycombinator.com/item?id=49109387
Points: 1
# Comments: 0
Tripplet AI
Article URL: https://www.tripplet.lol/
Comments URL: https://news.ycombinator.com/item?id=49109374
Points: 1
# Comments: 0
Show HN: 3D CSS Super Mario 64
Article URL: https://codepen.io/editor/alowpoly/pen/019fae67-50d9-74ce-8025-4b9dd5a7c484
Comments URL: https://news.ycombinator.com/item?id=49109372
Points: 1
# Comments: 0
FitForge – Solo-built fitness tracker that adapts to your training age
Article URL: https://fitforgehq.com
Comments URL: https://news.ycombinator.com/item?id=49109366
Points: 1
# Comments: 0
Show HN: wthrtxt – the same weather forecast in the browser and terminal
Article URL: https://wthrtxt.com
Comments URL: https://news.ycombinator.com/item?id=49109355
Points: 1
# Comments: 1
The State of Post-Quantum Cryptography
Article URL: https://www.feistyduck.com/newsletter/issue_139_the_state_of_post-quantum_cryptography
Comments URL: https://news.ycombinator.com/item?id=49109348
Points: 1
# Comments: 0
More Typos, Fewer Em Dashes: Writers Are Creating an Anti-AI Counterculture
Article URL: https://www.wired.com/story/more-typos-fewer-em-dashes-writers-are-creating-an-anti-ai-literary-counterculture/
Comments URL: https://news.ycombinator.com/item?id=49109341
Points: 1
# Comments: 0
Rabble – Native Matrix Client with Push-to-Talk
Article URL: https://rabble.talk/
Comments URL: https://news.ycombinator.com/item?id=49109340
Points: 3
# Comments: 0
Onyx Security Raises $113 Million to Control AI Agents in the Enterprise
The Series B funding round brings the total raised by Onyx Security to $153 million.
The post Onyx Security Raises $113 Million to Control AI Agents in the Enterprise appeared first on SecurityWeek.
‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale
Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains.
The post ‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale appeared first on SecurityWeek.
