Feed aggregator

SN 1065: Attestation - Code Signing Gets Tough

Security Now - Tue, 02/17/2026 - 11:25pm

How secure are your Chrome extensions and certificate signings really? This episode pulls back the curtain on a massive spyware discovery and exposes the convoluted hoops developers must jump through to prove their identity in 2026.

  • Websites can place high demands upon limited CPU resources.
  • Microsoft appears to back away from its security commitment.
  • What's Windows 11 26H1 and where do I get it.
  • Chrome 145 brings Device Bound Session Credentials.
  • More countries are moving to ban underage social media use.
  • The return of Roskomnadzor.
  • Discord to require proof of adulthood for adult content.
  • Might you still be using WinRAR 7.12 -- I was.
  • Paragon's Graphite can definitely spy on all instant messaging.
  • 30 malicious Chrome Extensions.
  • 287 Chrome extensions from spying on 37.4 million users.
  • The first malicious Outlook add-in steals 4000 user's credentials.
  • Some AI "vibe" coding thoughts.
  • What I just went through to obtain a new code signing certificate

Show Notes - https://www.grc.com/sn/SN-1065-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

Categories: Security Now

Show HN: TerminalRant – Mastodon for developers who live in the terminal

Hacker News - Tue, 02/17/2026 - 11:19pm

Hi HN,

I kept noticing something slightly ironic: a lot of developers live in their terminal, coding, running tests, pushing commits and then open a browser just to post a rant.

That context switch felt unnecessary.

So I built TerminalRant, a Mastodon client designed for people who prefer staying in the terminal.

It’s written in Go (using Bubble Tea) and focuses on being keyboard-first: fast startup, vim-style navigation, inline editing, and buffer-mode posting through $EDITOR. No mouse required.

It’s not trying to compete with full-featured GUI clients. It’s just meant to make reading and posting feel native to a terminal workflow.

You can install it with: `go install github.com/CrestNiraj12/terminalrant@latest`

There’s also Homebrew and Scoop support.

I’d really appreciate feedback, especially on the UX and posting workflow. I’m sure there are things power users would want that I haven’t thought of yet.

Repo: https://github.com/CrestNiraj12/terminalrant

Thanks for taking a look.

Comments URL: https://news.ycombinator.com/item?id=47057120

Points: 1

# Comments: 0

Categories: Hacker News

Show HN: StatusPing – Uptime monitoring for $9/mo

Hacker News - Tue, 02/17/2026 - 11:08pm

Article URL: https://statusping.dev

Comments URL: https://news.ycombinator.com/item?id=47057050

Points: 1

# Comments: 1

Categories: Hacker News

Pidgin Plugins

Hacker News - Tue, 02/17/2026 - 11:07pm

Article URL: https://pidgin.im/plugins/

Comments URL: https://news.ycombinator.com/item?id=47057043

Points: 1

# Comments: 0

Categories: Hacker News

Meshcore IRC Bridge

Hacker News - Tue, 02/17/2026 - 11:00pm
Categories: Hacker News

Show HN: Verified 16.7M Mac chip architecture on $60 Android phone

Hacker News - Tue, 02/17/2026 - 10:55pm

Over 6 weeks I built and verified a complete chip architecture on a $60 Android phone using Termux, iverilog, and Yosys.

Phoenix 4096×4096 specs: - 16,777,216 MAC units (analog in-memory compute) - 50,331 TOPS @ 3GHz (25× NVIDIA H100) - 512 deterministic reasoning cores - 2 TB/s memory bandwidth - All verified in simulation

Hardware verified (15/15 passing): - Half Adder → Full Adder → 8/16/64/128/256-bit ALUs - 8-bit CPU (Fibonacci working) - RISC-V core - FPU (IEEE 754) - GPU SIMD - Complete Phoenix SoC

Also built: - ULA compiler: Plain English → 12 languages (Python, Rust, Java, Assembly, COBOL, Fortran, C, C++, Go, Kotlin, Solidity, TypeScript) - RF presence detection: 2-person tracking via WiFi signals, no cameras, 91% gesture accuracy

All code on GitHub: https://github.com/jltackett1980-cell

Built in Sikeston, MO on a $60 Android. No laptop. No cloud. No funding.

Looking for: Chip designers, semiconductor engineers, anyone interested in open silicon or analog computing. Want to tape out with Efabless or similar.

Live demo available

Comments URL: https://news.ycombinator.com/item?id=47056968

Points: 2

# Comments: 0

Categories: Hacker News

A Local-Algebraic Route to Emergent Gravity (100 Pages)

Hacker News - Tue, 02/17/2026 - 10:46pm

I've been developing a framework called Observer Patch Holography (OPH), which attempts to derive spacetime geometry and gravity from purely local quantum information structure.

Instead of assuming global spacetime, the construction starts with local operator algebras attached to observer patches and imposes Markov consistency constraints on overlaps. Under these conditions, metric structure and gravitational dynamics emerge from entropic consistency requirements.

The full derivation is ~100 pages and draws from algebraic QFT, operator algebras, and quantum information theory:

https://zenodo.org/records/18288114

For accessibility:

- Conceptual book: https://oth-book.lovable.app - Interactive notebook (with diagrams + video): https://notebooklm.google.com/notebook/d5249760-6ce8-44a0-927b-ccf90402711a?artifactId=fb7c0ebd-4375-4997-9cae-6558ff8977b4

I’d especially appreciate critique from people familiar with algebraic QFT, holography, or quantum Markov states. If it fails, I’d love to know precisely where.

Comments URL: https://news.ycombinator.com/item?id=47056911

Points: 1

# Comments: 1

Categories: Hacker News

Cultivating Praxia

Hacker News - Tue, 02/17/2026 - 10:44pm
Categories: Hacker News

Managing Docker Composes via GitOps

Hacker News - Tue, 02/17/2026 - 10:42pm

Built a small tool called ConOps for deploying Docker Compose apps via Git. It watches a repo and keeps docker-compose.yaml in sync with your Docker environment. This is heavily inspired from Argo CD (but without Kubernetes). If you’re running Docker Compose on a homelab or server, this lets you deploy via Git instead of SSH. Includes CLI and a clean web dashboard. MIT licensed.

Try it out if you have a second. Would love some feedback:).

Github: https://github.com/anuragxxd/conops

Website: https://conops.anuragxd.com/

Comments URL: https://news.ycombinator.com/item?id=47056882

Points: 1

# Comments: 0

Categories: Hacker News

An update on upki

Hacker News - Tue, 02/17/2026 - 10:36pm
Categories: Hacker News

Pages