News for hackers. Stuff that matters.

philips

Re:CVE Tracker on Friday October 23, 2026 @10:11PM (#50217776)
Yes, and all of that changed in 2024 so fairly recently: http://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/
Re:CVE Tracker on Friday October 23, 2026 @10:07PM (#50217761)
I think a tricky thing about these metrics is GitHub and the Linux Kernel became their own CNA in mid-2024[1] and mid-2025[2]. This caused a bunch of new automation and lowered barriers to actually filing a CVE.

As a small data point I have a >20k downloads Obsidian plugin and it got a CVE on a Beta release due to a bad pathing regex. I feel this would have never happened 2 years ago.

So, I feel the bar for a CVE being issued is WAYYYY lower in 2025+ than before.

[1]: http://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/

[2]: https://github.blog/security/vulnerability-research/how-to-r...

Re:Flatpak – An Insecurity Nightmare on Monday October 19, 2026 @02:34AM (#50149076)
If the author is reading the sidebar covers all content on my iPhone 13
Re:Aweb – Communication for AI Agents on Thursday October 01, 2026 @11:39PM (#49929601)
Not a sophisticated use case but I built a fun service to send handwritten notes to my Pi agent from my eink tablet. It leads to a very satisfying and "slow" workflow.

https://ifup.org/blog/handwritten-notes-with-friends-and-mac...

Re:Show HN: NSL – WSL for Linux on Wednesday September 30, 2026 @12:12AM (#49904277)
I just had never heard of "frostyard" and the github.com/frostyard page says: Foundation for Reproducible OS Technologies
Re:Show HN: NSL – WSL for Linux on Tuesday September 29, 2026 @11:35PM (#49904075)
Oh, hey Brian! I like the project. How is it related to reproducible builds though?
Re:Show HN: NSL – WSL for Linux on Tuesday September 29, 2026 @08:31PM (#49902824)
Ha! I wrote the first commit to CoreOS's toolbox in 2014: https://github.com/coreos/toolbox/commit/dc4aa0b14bceafd6afa...

And then I read your comment and my first reaction was, oh, they typoed toolbox. But, nope, Red Hat created toolbx which confusingly has the CLI binary of `toolbox`: https://containertoolbx.org

Re:Strands Harness on Wednesday September 23, 2026 @06:11PM (#49823292)
I think with things like this. https://github.com/gotgenes/pi-anthropic-auth

I haven’t tested it though

Re:Chop Up Your Books on Tuesday September 15, 2026 @03:32PM (#49717677)
This is exactly why I love e-books as an adult.

As a kid I loved "pocket books"[1] because they didn't make my hand feel weak trying to hold them on a road trip and I could fit a few in my backpack.

But, obviously, not every work was published in a pocket book format.

[1]: https://en.wikipedia.org/wiki/Pocket_Books

Re:Picolibrary: A Small Press on Saturday September 12, 2026 @01:56PM (#49675119)
Thank you for writing up your story. Could you break down the costs at each step? Did you break even on royalties and printing costs?

I am always fascinated by the whole tension of copyright, publishing costs, and the lost knowledge due to the gap between the two.

Re:Is it time for a Luddite Renaissance? on Saturday September 12, 2026 @01:49PM (#49675051)
Yeah, calm home automation stuff is the best.

Water main valve robot, Flume water usage sensor, and Eve water sensors near supply lines is super reassuring when traveling or out of the house. So is having a electrical panel that I can check if the oven really was off.

Re:Is it time for a Luddite Renaissance? on Saturday September 12, 2026 @01:04PM (#49674479)
What are some of your favorite devices/software that follow this idea? I can list mine:

- Supernote by Ratta https://supernote.com

- Air Lab by Networked Artifacts https://networkedartifacts.com

- Xteink X4 (or equivalent) https://www.xteink.com

- Zeroink Writer - my kids use it to practice typing and write letters I can print out. Essentially digital typewriter. https://www.crowdsupply.com/zerowriter/zerowriter-ink

- Readwise - enables me to review highlighted passages and ideas from things I read

- Obsidian - I dump text files into it, it syncs it around for me to review or edit.

Re:Picolibrary: A Small Press on Tuesday September 08, 2026 @10:56AM (#49611259)
Wow! Good on you for finding the rights and republishing! I would love to read more about the process.
Re:The Hugging Face incident and the road ahead on Wednesday August 26, 2026 @09:24PM (#49458255)
I feel the entire incident confirms the “AI has too much funding too quickly” hypothesis.

The number one thing reinforcement learning needs is an assurance you can’t cheat. And they seem to have not noticed that their systems were cheating for nearly two quarters? How much capital was lit on fire by that little woopsie?

At least I hope this will start the creation of standards and better engineering on the training side- it felt as if so far “”research” gets a complete pass on best practices. Meanwhile the inference side has the standard scaling, database, web and user constraints of any application so got a somewhat reasonable amount of attention.

If it is helpful to other people here is how I manage my ebook library with flatfiles and heterogeneous devices (Android, macOS, iOS, Kindle, etc)

I have my own eBook library hosted with copyparty. It is a single binary. Runs on plain files. And speaks OPDS for integration with KOreader (Kindle) or Readest (iOS/macOS). https://github.com/9001/copyparty#opds-feeds

It also speaks webdav so I can quickly sync everything via rclone to an SD card on devices like an Android tablet.

I really like the convenience of flat files and multiple protocols.

Re:Everything I own, owned on Monday August 24, 2026 @01:10AM (#49415392)
Checkout this "handwriting demo" I made. It uses the stroke information to animate each individual stroke.

https://philips.github.io/supernote-web-component/

Click the "Pen" icon then the "Play" button.

Re:Everything I own, owned on Sunday August 23, 2026 @11:08PM (#49414805)
I know of the project but it doesn’t actually extract the stroke information. It converts the raster into vector.

My reverse engineering extracts each pen stroke directly into a svg vector.

Re:Everything I own, owned on Sunday August 23, 2026 @11:06PM (#49414793)
I built a management website and plugin for Obsidian.

https://supernote.ifup.org/

https://youtu.be/ihRh_F43-iQ

Re:Everything I own, owned on Sunday August 23, 2026 @07:09PM (#49413499)
I just reverse engineered the Supernote note file format with an agent a few weeks ago. For years the community had been asking for a document on the format. And in a few hours the agent, with 20 something file format example fixtures and 30 something prompts, was able to reverse out the format.

It would have been completely not worth the effort to do this by hand for a niche device. Now, in a few hours of effort there is working code and a doc.

https://github.com/philips/supernote-typescript/blob/main/pl...

https://philips.github.io/supernote-typescript/

Re:fx :Tiny, open, native coding agent. on Thursday August 20, 2026 @02:47AM (#49371248)
I really like the philosophy document! https://github.com/OleksandrChekhovskyi/hax/blob/master/docs...

I don’t know if I am ready to use a new tool written in C and using libcurl but I will give it a shot.

Re:Pressed Penny Machine Map on Wednesday August 19, 2026 @06:48PM (#49368160)
Tower Bridge in London has several.
Re:The Essential Question: "What should I read next?" on Wednesday August 12, 2026 @08:05PM (#49280216)
We have been working on a thing to solve this if it helps: people can oauth to their own agents for hobby projects to keep prices down.

https://tokenpony.dev

I have a project for people to OCR their Supernote notes using it all static hosted on github pages.

https://supernote.ifup.org

Re:Ask HN: What are you working on? (August 2026) on Sunday August 09, 2026 @05:27PM (#49236127)
I like this idea. I feel the hurdle is that many people have come to rely on their language tools for install.
Re:Ask HN: What are you working on? (August 2026) on Sunday August 09, 2026 @05:12PM (#49235958)
What is pax?
Re:Crime Pays but Botany Doesn't on Thursday August 06, 2026 @03:14AM (#49193516)
I listened to his book, Concrete Botany[1], while doing my gardening last month. I really enjoyed it even as a long time watcher of his YouTube channel. I don't know if I could have read it because it does seem to drag on a bit but it was worth it for his narration.

[1]: https://libro.fm/audiobooks/9798317900410-concrete-botany

Older »