Hacker News headlines

2

Gmail for Exfiltration: Malicious NPM Packages Target Solana Private Keys and (socket.dev)

8 months ago | feross | socket.dev | newest

13

On Priesthoods (astralcodexten.com)

8 months ago | feross | astralcodexten.com | frontpage

1

Stratechery Year in Review (stratechery.com)

8 months ago | feross | stratechery.com | newest

12

Double-keyed caching: Browser cache partitioning (addyosmani.com)

8 months ago | feross | addyosmani.com | frontpage

1

New Python Packaging Proposal Aims to Solve Phantom Dependency Problem With (socket.dev)

8 months ago | feross | socket.dev | newest

2

Private Equity Wants Your 401(k) (bloomberg.com)

8 months ago | feross | bloomberg.com | newest

2

MBA Class Project Got a Bit Too Real (bloomberg.com)

8 months ago | feross | bloomberg.com | newest

1

The Cyber Security Council Podcast: Securing Modern Applications in A (socket.dev)

8 months ago | feross | socket.dev | newest

1

Weaponizing OAST: Malicious Packages Exploit NPM, PyPI, and RubyGems (socket.dev)

8 months ago | feross | socket.dev | newest

1

NPM package poses as legit Ethereum smart contract, injects Quasar RAT (scworld.com)

8 months ago | feross | scworld.com | newest

1

Weaponizing OAST: How Malicious Packages Exploit NPM, PyPI, and RubyGems For (socket.dev)

8 months ago | feross | socket.dev | newest

2

Composable Caching with Next.js (nextjs.org)

8 months ago | feross | nextjs.org | newest

1

Can You Hate Everyone in Rome? (astralcodexten.com)

8 months ago | feross | astralcodexten.com | newest

3

Malicious NPM Campaign Targets Ethereum Developers with Fake Hardhat Packages (socket.dev)

8 months ago | feross | socket.dev | newest

83

H5N1: Much More Than You Wanted to Know (astralcodexten.com)

8 months ago | feross | astralcodexten.com | frontpage

1

Looking Back on the 2024 Blog-Building Intensive Fellowship (rootsofprogress.org)

9 months ago | feross | rootsofprogress.org | newest

2

Quasar Rat Disguised as an NPM Package for Detecting Vulnerabilities in Ethereum (socket.dev)

9 months ago | feross | socket.dev | frontpage

1

New to the Web Platform in December (web.dev)

9 months ago | feross | web.dev | newest

2

Claude Fights Back (astralcodexten.com)

9 months ago | feross | astralcodexten.com | frontpage

3

Supply Chain Attack on NPM Packages Injects Cryptojacking Malware (socket.dev)

9 months ago | feross | socket.dev | newest

1

Release Notes for Safari Technology Preview 210 (webkit.org)

9 months ago | feross | webkit.org | newest

5

How to Lose a Fortune with Just One Bad Click (krebsonsecurity.com)

9 months ago | feross | krebsonsecurity.com | newest

3

Sonar to Acquire Tidelift, Scaling Open Source Maintainer Support (socket.dev)

9 months ago | feross | socket.dev | frontpage

1

Links for December 2024 (astralcodexten.com)

9 months ago | feross | astralcodexten.com | newest

2

The Business of Ransomware: Insights from Reddit AMA with Ransomware (socket.dev)

9 months ago | feross | socket.dev | newest

4

PyPI on Ultralytics Supply Chain Attack: Poor CI/CD Practices to Blame, No (socket.dev)

9 months ago | feross | socket.dev | newest

3

People Want SpaceX Shares (bloomberg.com)

9 months ago | feross | bloomberg.com | newest

1

The Innocent and the Beautiful Have No Enemy but Time (astralcodexten.com)

9 months ago | feross | astralcodexten.com | newest

1

Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on NPM (socket.dev)

9 months ago | feross | socket.dev | newest

1

The Onion Can't Buy Infowars Yet (bloomberg.com)

9 months ago | feross | bloomberg.com | newest

1

Visual Studio Code November 2024 (visualstudio.com)

9 months ago | feross | visualstudio.com | newest

3

WebKit Features in Safari 18.2 (webkit.org)

9 months ago | feross | webkit.org | newest

1

Malicious NPM Package Typosquats Popular TypeScript ESLint Plugin, Exfiltrates (socket.dev)

9 months ago | feross | socket.dev | newest

2

What do the State of CSS and HTML surveys tell us? (web.dev)

9 months ago | feross | web.dev | newest

25

Intel's Death and Potential Revival (stratechery.com)

9 months ago | feross | stratechery.com | frontpage

2

Indulge Your Internet Addiction by Reading About Internet Addiction (astralcodexten.com)

9 months ago | feross | astralcodexten.com | newest

2

Malicious Maven Package Impersonating 'XZ for Java' Library Introduces Backdoor (socket.dev)

9 months ago | feross | socket.dev | newest

1

NPM Updates Search Experience with New Objective Sorting Options (socket.dev)

9 months ago | feross | socket.dev | newest

2

Release Notes for Safari Technology Preview 209 (webkit.org)

9 months ago | feross | webkit.org | newest

1

Citi Traders Didn't Know the Rules (bloomberg.com)

9 months ago | feross | bloomberg.com | newest

2

Chrome doubled its Speedometer scores on Android (chromium.org)

9 months ago | feross | chromium.org | frontpage

1

New to the Web Platform in November (web.dev)

9 months ago | feross | web.dev | newest

4

Supply Chain Attack Detected in Solana/Web3.js Library (socket.dev)

9 months ago | feross | socket.dev | frontpage

1

Avoiding unnecessary cleanup work in disconnectedCallback (nolanlawson.com)

9 months ago | feross | nolanlawson.com | newest

63

Sitters and Standers (pudding.cool)

9 months ago | feross | pudding.cool | best

1

Typosquatting Cryptographic Libraries: Malicious NPM Packages Threaten Crypto (socket.dev)

9 months ago | feross | socket.dev | newest

5

Stanford Study Finds 9.5% of Engineers Do Almost Nothing (socket.dev)

10 months ago | feross | socket.dev | newest

1

Progress Conference Reflections – and 2025 Plans (We're Hiring) (rootsofprogress.org)

10 months ago | feross | rootsofprogress.org | newest

2

Malicious NPM Packages Inject SSH Backdoors via Typosquatted Libraries (socket.dev)

10 months ago | feross | socket.dev | newest

1

Against the Generalized Anti-Caution Argument (astralcodexten.com)

10 months ago | feross | astralcodexten.com | newest

1

Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top List (socket.dev)

10 months ago | feross | socket.dev | newest

3

Release Notes for Safari Technology Preview 208 (webkit.org)

10 months ago | feross | webkit.org | newest

1

Make creative borders with background-clip border-area (webkit.org)

10 months ago | feross | webkit.org | newest

1

Risky Business Podcast: Why Open Source Software Needs Better Malware Tracking (socket.dev)

10 months ago | feross | socket.dev | newest

4

How Did You Do on the AI Art Turing Test? (astralcodexten.com)

10 months ago | feross | astralcodexten.com | frontpage

2

Insider Trading at the Fed (bloomberg.com)

10 months ago | feross | bloomberg.com | newest

3

Threat Actor Exposes Playbook for Exploiting NPM to Build Blockchain-Powered (socket.dev)

10 months ago | feross | socket.dev | frontpage

2

Malicious NPM Package Exploits WhatsApp Authentication with Remote Kill Switch (socket.dev)

10 months ago | feross | socket.dev | newest

2

GitHub Copilot for Azure (visualstudio.com)

10 months ago | feross | visualstudio.com | newest

1

Individual Investors Put Up the Cash (bloomberg.com)

10 months ago | feross | bloomberg.com | newest

1

An Interview with the Target and Home Depot Hacker (krebsonsecurity.com)

10 months ago | feross | krebsonsecurity.com | newest

15

The Early Christian Strategy (astralcodexten.com)

10 months ago | feross | astralcodexten.com | frontpage

1

PyPI Introduces Digital Attestations to Strengthen Python Package Security (socket.dev)

10 months ago | feross | socket.dev | newest

1

GitHub Removes Malicious Pull Requests Targeting Open Source Repositories (socket.dev)

10 months ago | feross | socket.dev | newest

2

Rubygems.org Adds New Maintainer Role (socket.dev)

10 months ago | feross | socket.dev | frontpage

1

Copilot Edits (visualstudio.com)

10 months ago | feross | visualstudio.com | newest

2

Improving Private Signal Calls: Call Links and More (signal.org)

10 months ago | feross | signal.org | frontpage

1

Book Review: The Rise of Christianity (astralcodexten.com)

10 months ago | feross | astralcodexten.com | newest

1

Is the Love Song Dying? (pudding.cool)

10 months ago | feross | pudding.cool | newest

2

FBI: Spike in Hacked Police Emails, Fake Subpoenas (krebsonsecurity.com)

10 months ago | feross | krebsonsecurity.com | newest

1

Release Notes for Safari Technology Preview 207 (webkit.org)

10 months ago | feross | webkit.org | newest

3

Game Theory of Michigan Muslims (astralcodexten.com)

10 months ago | feross | astralcodexten.com | newest

1

Node.js Implements Stricter Policies for Semver-Major Pull Requests Ahead Of (socket.dev)

10 months ago | feross | socket.dev | newest

1

MicroStrategy Has Stock to Sell (bloomberg.com)

10 months ago | feross | bloomberg.com | newest

1

Links for November 2024 (astralcodexten.com)

10 months ago | feross | astralcodexten.com | newest

1

NPM Malware Campaign Leverages Ethereum Smart Contracts to Evade (socket.dev)

10 months ago | feross | socket.dev | newest

2

New to the Web Platform in October (web.dev)

11 months ago | feross | web.dev | newest

1

Socket Recognized for Second Consecutive Year on Fortune Cyber 60 List (socket.dev)

11 months ago | feross | socket.dev | newest

2

The Case Against California Proposition 36 (astralcodexten.com)

11 months ago | feross | astralcodexten.com | newest

1

Tired of waiting in line? An expert explains why queues are so tricky (youtube.com)

11 months ago | feross | youtube.com | newest

2

Dutch National Police Disrupt Redline and Meta Malware Operations (socket.dev)

11 months ago | feross | socket.dev | newest

1

Colors of the Court (pudding.cool)

11 months ago | feross | pudding.cool | newest

4

The United States of Abortion Mazes (pudding.cool)

11 months ago | feross | pudding.cool | newest

1

Show Baseline status on your blog posts and presentations (web.dev)

11 months ago | feross | web.dev | newest

2

Our Journey with Caching (nextjs.org)

11 months ago | feross | nextjs.org | newest

2

Colors of the Court (pudding.cool)

11 months ago | feross | pudding.cool | newest

6

Supply Chain Attacks Targeting LLM Application Developers: The Hidden Dangers Of (socket.dev)

11 months ago | feross | socket.dev | frontpage

3

Be Careful Tweeting About Stocks (bloomberg.com)

11 months ago | feross | bloomberg.com | newest

1

Noxia: Emerging Dark Web Hosting Provider Targets Python, Node.js, Go, and Rust (socket.dev)

11 months ago | feross | socket.dev | newest

1

ACX Local Voting Guides (astralcodexten.com)

11 months ago | feross | astralcodexten.com | newest

3

Socket secures $40M to combat next-generation software supply chain attacks (socket.dev)

11 months ago | feross | socket.dev | newest

2

Help us choose the final syntax for Masonry in CSS (webkit.org)

11 months ago | feross | webkit.org | newest

22

The United States of Abortion Mazes (pudding.cool)

11 months ago | feross | pudding.cool | newest

1

Ruby Support in Socket (socket.dev)

11 months ago | feross | socket.dev | newest

1

License Enforcement in Socket (socket.dev)

11 months ago | feross | socket.dev | newest

2

Socket Optimize – CLI to override dependencies with tested, optimized versions (socket.dev)

11 months ago | feross | socket.dev | newest

3

Defining Generations in K-Pop (pudding.cool)

11 months ago | feross | pudding.cool | newest

4

Next.js 15 RC 2 (nextjs.org)

11 months ago | feross | nextjs.org | newest

1

Typosquatting on PyPI: Malicious Package Mimics Popular 'Browser-Cookie3' (socket.dev)

11 months ago | feross | socket.dev | newest

1

TC39 Advances 10 ECMAScript Proposals: Key Features to Watch (socket.dev)

11 months ago | feross | socket.dev | newest