Feed aggregator

Article URL: https://avi.press/posts/2026-07-10-after-7-years-in-production-scarf-has-reluctantly-moved-away-from-haskell.html

Comments URL: https://news.ycombinator.com/item?id=48859673

Points: 1

# Comments: 0

Article URL: https://geohot.github.io//blog/jekyll/update/2026/05/03/punk-or-why-i-dont-stream.html

Comments URL: https://news.ycombinator.com/item?id=48859671

Points: 1

# Comments: 0

Article URL: https://antonz.org/concurrency-in-c/

Comments URL: https://news.ycombinator.com/item?id=48859656

Points: 1

# Comments: 0

Article URL: https://www.youtube.com/watch?v=2k8Hr5Aw73o

Comments URL: https://news.ycombinator.com/item?id=48859634

Points: 1

# Comments: 0

Article URL: https://1h-money.vercel.app

Comments URL: https://news.ycombinator.com/item?id=48859632

Points: 1

# Comments: 0

Article URL: https://arstechnica.com/space/2026/07/wally-funk-last-of-mercury-13-and-oldest-woman-in-space-dies-at-87/

Comments URL: https://news.ycombinator.com/item?id=48859624

Points: 3

# Comments: 0

Microsoft published new research on GigaWiper, a modular Golang backdoor for Windows that combines robust remote access with multiple ways to permanently destroy systems and data.

GigaWiper is a Windows backdoor that Microsoft has observed in intrusions since October 2025. Rather than being a single-purpose wiper, it’s an operational platform that blends command‑and‑control (C2), data destruction, and remote access options in a single piece of malware.

What’s remarkable is that GigaWiper seems to be built using previously separate tools like the Crucio ransomware and the FlockWiper disk wiper, wrapped into a consolidated framework.

Based on the characteristics of the malware, which include espionage features (screen capture, VNC‑like remote control, system inventory) and multiple ways to irreversibly destroy data, it fits the pattern of an attacker that wants long‑term access but also reserves the option to wipe systems if they choose.

GigaWiper implements about 20 commands, falling broadly into three categories: destruction, remote access/monitoring, and system management. Some examples include:

• Raw disk wiper that overwrites raw disk content in large chunks before forcing an immediate reboot.
• Fake ransomware (Crucio‑based) wiper that masquerades as ransomware. Instead of demanding payment, it encrypts files and then throws away the encryption key, making recovery impossible.
• Windows drive secure wiper that targets the Windows installation drive and performs multi‑pass overwrites using different byte patterns.
• Screen capture and recording, including one‑shot screenshots of each monitor and continuous recording while the user is active.
• Remote control via a TCP (Transmission Control Protocol) server that streams the desktop and allows keyboard and mouse input after creating its own Windows Firewall exceptions.

GigaWiper also sets up a scheduled task called “OneDrive Update” that runs every minute and at startup to maintain persistence.

Command-and-control servers were found at 185.182.193[.]21 and 212.8.248[.]104.

Malwarebytes blocks the C2 connections

Its management utilities include process, service, and registry managers that can create, list, or kill processes, manage Windows services, and navigate and mutate registry keys. It also collects system information, including hardware, operating system, network, firmware, user, and antivirus details.

How to stay safe

Because GigaWiper is deployed after attackers have already compromised a system, the best defence is preventing the initial intrusion and detecting malicious activity before destructive commands can be executed.

Malwarebytes detects GigaWiper components with the detection names Trojan.FlockWiper and Backdoor.GigaWiper.

• If GigaWiper is detected, disconnect the affected machine from the network immediately to prevent attackers from initiating destructive commands.
• Enable tamper protection (or the equivalent feature in your security software) so local admins and malware cannot silently disable anti-malware or other security tools.
• Monitor for connections to the known C2 servers, the creation of the “OneDrive Update” scheduled task, and unauthorized attempts to disable Windows recovery.
• Finally, rotate credentials, particularly for any accounts that may have been compromised, and review logs for privilege escalations or lateral movement to determine if other systems have also been affected.

We don’t just report on threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.

Article URL: https://www.cnbc.com/2026/07/10/meta-instagram-facebook-addictive-design-breach-eu-laws.html

Comments URL: https://news.ycombinator.com/item?id=48859606

Points: 3

# Comments: 1

Article URL: https://hackaday.com/2026/06/17/an-orbital-stormwall-could-mitigate-the-next-carrington-event/

Comments URL: https://news.ycombinator.com/item?id=48859605

Points: 1

# Comments: 0

Article URL: https://arxiv.org/abs/2607.08642

Comments URL: https://news.ycombinator.com/item?id=48859591

Points: 1

# Comments: 0

Article URL: https://opula.io

Comments URL: https://news.ycombinator.com/item?id=48859573

Points: 1

# Comments: 0

Article URL: https://feeds.software

Comments URL: https://news.ycombinator.com/item?id=48859557

Points: 1

# Comments: 0

This post is part 2 in a series about automated content moderation. Read the first post here.

When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time, while failing to detect hate speech under the company’s own policies in many instances. Meta’s own transparency report released later that year demonstrated similar findings. Five years later, researchers in the region report that overzealous moderation remains a problem, while paths to remedy have all but collapsed.

Where these systems are faltering in Arabic, they’re positively failing in less-resourced languages. As a 2025 report from the Center for Democracy and Technology found, labeled datasets in certain languages and dialects such as Maghrebi Arabic and Kiswahili contain inconsistencies, bias, and inaccuracies due to the limited hiring of annotators who actually speak the languages as well as shifts in the languages themselves. An investigation into ChatGPT’s outputs in several low-resource languages demonstrates the depth of problem.

But language disparities are just one of several concerns as automated moderation becomes more widespread. From the systemic suppression of content from Palestine to the repeated misclassification of LGBTQ+ content as adult or explicit material, these varied examples demonstrate the risks of overreliance on automated moderation—and the need for stronger safeguards.

Transparency, Cultural Competence, Appeals

As we discussed in Part 1 of this series, automated systems can process content at a scale that humans never could, potentially enabling better moderation at scale and alleviating the psychological load on ill-paid moderators whose jobs require them to view incredibly disturbing content. But automated systems also reproduce existing biases, struggle to understand context, and often make mistakes that disproportionately affect journalists, activists, artists, and other vulnerable and marginalized communities.

As Rachel Griffin wrote in 2023, “Perfectly accurate moderation is not only technically out of reach but intrinsically impossible.” Despite those intrinsic flaws, there is a great deal companies, policymakers, and civil society can do to help ensure that highly-automated systems operate in ways that respect human rights, minimize predictable harms, and provide meaningful accountability when they fail. If companies are going to continue relying on automation to moderate users’ speech—and there is little reason to believe they won’t—then accountability must evolve alongside these technologies.

That evolution can start with committing to the Santa Clara Principles 2.0. These principles, first outlined in 2020 and re-launched in 2021 after substantial international input, reflect the needs and expectations of the global community and specifically address automation. The first Foundational Principle states:

Companies should ensure that human rights and due process considerations are integrated at all stages of the content moderation process, and should publish information outlining how this integration is made. Companies should only use automated processes to identify or remove content or suspend accounts, whether supplemented by human review or not, when there is sufficiently high confidence in the quality and accuracy of those processes. Companies should also provide users with clear and accessible methods of obtaining support in the event of content and account action. 

Drawing on the Santa Clara Principles 2.0, international human rights standards, and years of research documenting the shortcomings of automated moderation, we propose eight recommendations for policymakers thinking about regulation and companies deploying AI-assisted content moderation systems.

1. Automated technologies should help, not replace, human moderators. For example, automated systems can help flag and prioritize content for review, while humans can interpret context, handle sensitive cases, and refine system performance.
2. Companies must be transparent about when and how automation is used in content decisions.
3. Companies must regularly audit their automated systems for bias, with particular attention to low-resource languages, vulnerable and marginalized communities, and conflict zones.
4. Users must have the ability to appeal, and to provide context when they believe human or automated moderation decisions have wrongfully removed their content. Appeals should be promptly evaluated and decided by human moderators.
5. Companies should regularly assess the human rights impact of their moderation decisions, and issue public statements of the results
6. If they rely on third-party vendors, companies should carefully (and regularly) audit those vendors for compliance with these same principles
7. Lawmakers should avoid promoting and passing legislation that effectively or explicitly mandates automated moderation systems
8. Policymakers should also refrain from attempting to dictate platforms technical and design choices to favor or disfavor particular expression.

These recommendations understand that automated content moderation isn’t just a technical problem for clever engineers and product teams to solve. Because content moderation shapes public discourse and fundamental rights, its design and oversight must respond to the concerns of policymakers, civil society, independent researchers, and the communities most affected by these systems.

This is the second post in a 2-part series on automated content moderation. Read the first post here.

Article URL: https://www.engadget.com/2211886/guy-who-took-photo-of-jupiter-with-a-game-boy-camera-and-giant-telescope-publishes-diy-tutorial/

Comments URL: https://news.ycombinator.com/item?id=48859526

Points: 2

# Comments: 0

Article URL: https://www.toxel.com/tech/2026/07/05/gage-roads-beer-surfboard/

Comments URL: https://news.ycombinator.com/item?id=48859518

Points: 1

# Comments: 0

Article URL: https://www.theguardian.com/business/2026/jul/10/ryanair-passenger-almost-sucked-out-of-shattered-window-during-flight

Comments URL: https://news.ycombinator.com/item?id=48859515

Points: 4

# Comments: 0

Article URL: https://newsletter.humanprogress.org/p/time-pricing-big-macs-around-the

Comments URL: https://news.ycombinator.com/item?id=48859491

Points: 3

# Comments: 0

Article URL: https://learn.chatgpt.com/docs/app

Comments URL: https://news.ycombinator.com/item?id=48859478

Points: 2

# Comments: 0

Article URL: https://gizmodo.com/scientists-say-a-critical-ocean-current-system-may-already-be-past-the-point-of-no-return-2000783571

Comments URL: https://news.ycombinator.com/item?id=48859458

Points: 1

# Comments: 0

Why are educational institutions easy targets for cybercriminals? Uncover the reality of edtech security, recent breaches and what schools must do.