Feed aggregator

Article URL: https://hilariusbookbinder.substack.com/p/ai-can-never-produce-sublime-art

Comments URL: https://news.ycombinator.com/item?id=49822154

Points: 1

# Comments: 0

Article URL: https://parquet.apache.org/blog/2026/09/22/alp-adaptive-lossless-floating-point-encoding-in-apache-parquet/

Comments URL: https://news.ycombinator.com/item?id=49822152

Points: 1

# Comments: 0

Article URL: https://github.com/IterateAI/lifeboat-releases

Comments URL: https://news.ycombinator.com/item?id=49822130

Points: 1

# Comments: 0

Article URL: https://mikael.pika.page/posts/why-omarchy-exists

Comments URL: https://news.ycombinator.com/item?id=49822122

Points: 4

# Comments: 0

Article URL: https://blog.python.org/2026/09/the-python-documentation-is-now-available-in-persian/

Comments URL: https://news.ycombinator.com/item?id=49822111

Points: 1

# Comments: 0

Article URL: https://kenforthewin.github.io/blog/posts/llm-nethack-ascension/

Comments URL: https://news.ycombinator.com/item?id=49822109

Points: 2

# Comments: 0

Article URL: https://tomtunguz.com/the-most-important-market-in-ai-is-the-middle/

Comments URL: https://news.ycombinator.com/item?id=49822063

Points: 1

# Comments: 0

Article URL: https://cursor.com/blog/projects

Comments URL: https://news.ycombinator.com/item?id=49822056

Points: 2

# Comments: 0

Article URL: https://www.statnews.com/2026/05/04/trump-immigration-policy-stat-survey-measures-science-impact/

Comments URL: https://news.ycombinator.com/item?id=49822042

Points: 3

# Comments: 0

Article URL: https://media.ccc.de/v/kde2026-7-are_we_really_going_to_use_the_same_desktop_ux_forever

Comments URL: https://news.ycombinator.com/item?id=49822027

Points: 1

# Comments: 0

Article URL: https://theconversation.com/how-the-pro-nicotine-wellness-movement-rebranded-an-addictive-drug-290129

Comments URL: https://news.ycombinator.com/item?id=49822024

Points: 1

# Comments: 0

Article URL: https://www.theatlantic.com/magazine/2026/10/maga-foreign-policy/688352/

Comments URL: https://news.ycombinator.com/item?id=49822018

Points: 4

# Comments: 0

Article URL: https://medium.com/@davidly_33504/cp-m-80-2-2-compilers-91958a8f1d58

Comments URL: https://news.ycombinator.com/item?id=49822011

Points: 1

# Comments: 0

Article URL: https://www.heise.de/en/news/Signature-27-is-likely-Motorola-s-first-smartphone-with-GrapheneOS-support-11462875.html

Comments URL: https://news.ycombinator.com/item?id=49822006

Points: 1

# Comments: 0

Article URL: https://cerncourier.com/ten-thousand-magnets-later/

Comments URL: https://news.ycombinator.com/item?id=49822001

Points: 1

# Comments: 0

Article URL: https://www.youtube.com/watch?v=RwMvW9cAIZg

Comments URL: https://news.ycombinator.com/item?id=49821999

Points: 1

# Comments: 0

IonQ’s new single processor quantum error decoder minimizes the classical computing overhead in quantum error correction.

The post IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU DecoderIonQ Says Sin appeared first on SecurityWeek.

You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in page for one of your accounts.

The message claims the code will let you open the document or join the meeting. In fact, it approves a sign-in the scammer started.

The page is real and the code works, which is why this type of attack—known as device code phishing—is so dangerous.

Device code phishing abuses a legitimate sign-in feature intended for devices that cannot easily display a normal login screen (such as smart TVs, printers, conference-room equipment, and some command-line tools). Instead of entering a username and password on the device itself, you open a browser on another device, visit a sign-in page, enter a short code, and approve the sign-in. This allows the app or device that displayed the code to access your account.

In this phishing attack, the scammer starts the sign-in and gets you to enter the code and approve the request. That can give the scammer access to your account.

How device code phishing works

Device code phishing relies on the OAuth 2.0 Device Authorization Grant, a standard sign-in method for devices with no browser or limited input.

An attack generally follows these steps:

1. An attacker starts a legitimate device code sign-in request for an app or device they control.
2. The sign-in service generates a short, temporary code and a legitimate verification page.
3. The attacker uses social engineering, such as a fake Teams invite, a document-sharing request, or an invitation to join a “secure” chat, to pass that code to the victim.
4. The victim visits the genuine sign-in page, enters the code, and approves the request.
5. The attacker’s waiting device receives authentication tokens.

Those tokens act as digital passes, allowing the attacker to access the victim’s account without knowing their password.

What the attacker can access depends on the app and the permissions granted. It could be limited to one service, or include email, files, contacts, and other services. Multifactor authentication (MFA) doesn’t necessarily stop this attack, because the victim may complete the MFA check themselves while authorizing the attacker’s sign-in.

Checking the address alone will not reveal this as a scam because it’s a legitimate page. For example, in an attack targeting a Microsoft account the victim may be sent to a genuine Microsoft sign-in page, such as microsoft.com/devicelogin. Some approval screens identify the app requesting access, but others may not.

The key question to ask yourself here is: Did this code appear in an app or on a device I was trying to sign in to, or was I given it to open a document, join a meeting, or pass a security check?

How to stay safe

Device code phishing is a feature of phishing kits such as EvilTokens. Be cautious if an unexpected message asks you to:

• Enter a code on an account sign-in page.
• Approve a sign-in for a device or application you did not set up.
• Use a sign-in code to join a meeting, access a document, or enter a chatroom.
• Act urgently because an invitation, document, password, or account supposedly expires soon.
• Move a conversation to another messaging app and complete a “security check.”

If you entered the code and approved the sign-in, check the account’s recent activity, connected apps, and devices for anything you don’t recognize. Sign out everywhere and change your password.

Pro tip: Use the free Malwarebytes Scam Guard to help you assess a suspicious message and decide what to do next.

Something feel off? Check it before you click.  

Malwarebytes Scam Guard helps you analyze suspicious links, texts, and screenshots instantly.  

Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.  

Try it free → 

Article URL: https://engelsbergideas.com/essays/smrs-a-short-history-of-a-nuclear-pipe-dream/

Comments URL: https://news.ycombinator.com/item?id=49820512

Points: 1

# Comments: 0

Article URL: https://huggingface.co/apple/LensVLM-9B

Comments URL: https://news.ycombinator.com/item?id=49820496

Points: 1

# Comments: 0