Feed aggregator

Article URL: https://sober-dev.app/

Comments URL: https://news.ycombinator.com/item?id=49181275

Points: 1

# Comments: 0

Article URL: https://www.wired.com/story/people-are-ghosting-long-term-partners-some-dont-regret-it/

Comments URL: https://news.ycombinator.com/item?id=49181264

Points: 2

# Comments: 0

Article URL: https://einvoicekit.com/

Comments URL: https://news.ycombinator.com/item?id=49181263

Points: 1

# Comments: 0

Article URL: https://mplemay.github.io/belgie/

Comments URL: https://news.ycombinator.com/item?id=49181252

Points: 3

# Comments: 0

Article URL: https://en.wikipedia.org/wiki/Jeremy_(snail)

Comments URL: https://news.ycombinator.com/item?id=49181250

Points: 1

# Comments: 0

Article URL: https://www.dontbeasillygoose.fyi/

Comments URL: https://news.ycombinator.com/item?id=49181246

Points: 1

# Comments: 0

Article URL: https://www.youtube.com/watch?v=LeUUxLRdvho

Comments URL: https://news.ycombinator.com/item?id=49181243

Points: 2

# Comments: 0

Article URL: https://github.com/zrk222/code-factory

Comments URL: https://news.ycombinator.com/item?id=49181232

Points: 1

# Comments: 0

Article URL: https://spectrum.ieee.org/electronics-corrosion-multiphysics-simulation

Comments URL: https://news.ycombinator.com/item?id=49181227

Points: 1

# Comments: 0

Article URL: https://nodes-web.com/

Comments URL: https://news.ycombinator.com/item?id=49181226

Points: 1

# Comments: 1

Article URL: https://www.paecon.net/PAEReview/issue114/Beaudreau114.pdf

Comments URL: https://news.ycombinator.com/item?id=49181218

Points: 1

# Comments: 0

Passkeys were supposed to make stolen passwords a thing of the past. No password to phish, no secret to reuse, and no string of characters sitting in a database waiting to be leaked.

Over time, it’s thought that passkeys will replace passwords entirely. But what happens when malware steals the master key?

Researchers have found a way for malware to hijack passkey-protected accounts through Google Password Manager, highlighting an important exception: passkeys can be very secure but the software surrounding them still has weaknesses.

What are passkeys?

Passkeys are a password replacement based on public‑key cryptography. Instead of a secret you remember and type, each account gets a key pair where the private key never leaves your devices, and the website only ever sees the public key and signed challenges. Because there’s nothing reusable to phish or reuse on another site, passkeys are marketed as “phishing‑resistant” and safer than passwords stored in a browser or password manager.

By the end of 2024 Google reportedly said that 800 million Google accounts used passkeys.

Passkeys have a major advantage over passwords: there is nothing useful for a phishing site to steal. A passkey is also tied to the website it was created for, making it much harder to trick into authenticating to the wrong domain.

The other significant difference is that if malware steals a password vault, an attacker still often needs to get past a second factor on another device, such as an authenticator app on your phone, before they fully own the account. With passkeys, many services relying on them simply trust the passkey assertion, and in some cases even trust a single “user verified” flag without confirming whether a real biometric or PIN event occurred.

Malware comes into play

The researchers, however, started with a malware infected Windows computer and came up with three possible attack scenarios to steal Google synchronized passkeys. Google Password Manager can synchronize passkeys between devices, which is convenient since you don’t want to register a new passkey every time you buy a new computer. But it also opens them up to abuse.

From bad to worse the attacks are:

• Pass‑ta‑key: malware on the victim’s computer silently asks Chrome and Google’s cloud to create a valid passkey login, no biometric or PIN prompt needed.
• Silver Pass‑ta‑key: malware abuses device re‑enrollment to register its own user‑verification key, then logs in as the victim from the attacker’s machine without touching the victim’s device.
• Golden Pass‑ta‑key: Malware extracts Google’s security domain secret (the master encryption key), decrypts all synced passkeys, and can reuse them anywhere, even after losing access to the original device.

How to stay safe

The researchers urge services to stop blindly trusting the user verification flag and to properly validate that a real User Verified event occurred before granting access. Google, in turn, is encouraged to harden device registration and recovery, and verify that new devices and keys are backed by genuine hardware rather than accepting them at face value.

For end users, passkeys still offer strong protection against classic phishing websites and credential stuffing attacks based on reused passwords. The weak point highlighted here is not so much the concept of passkeys, but the way they’re implemented, synchronized, and trusted without enough verification on the server side.

Until vendors close these gaps, basic anti‑malware hygiene remains critical. The best ways to prevent malware from using your passkeys are:

• Keep on top of updates: make sure your systems and software are patched as soon as you can.
• Use up-to-date real-time anti-malware protection.
• Treat unexpected attachments or links as suspicious until proven innocent.

From reporting threats to removing them.

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.

The post Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data  appeared first on SecurityWeek.

In one instance, an unsanctioned model attempted to inject malicious code into an open source repository.

The post AI Security Institute Reports Anthropic and OpenAI Models Going Rogue Against Organizations appeared first on SecurityWeek.

Article URL: https://www.theguardian.com/commentisfree/2026/aug/05/trump-iran-war-diplomacy

Comments URL: https://news.ycombinator.com/item?id=49180850

Points: 2

# Comments: 0

Article URL: https://www.notebookcheck.net/Most-security-keys-ship-without-a-PIN-and-websites-rarely-ask.1359677.0.html

Comments URL: https://news.ycombinator.com/item?id=49180845

Points: 1

# Comments: 0

Hi HN!

I created Anteroom, a hobby project allowing you to play casino (and non-casino) games with your friends in your terminal. The project is complete with hooks for Claude & Codex which allow in-app alerts as well as a global leaderboard.

Happy to take the past two weeks to craft this and there is definitely room to add more games in the future.

Cheers!

Comments URL: https://news.ycombinator.com/item?id=49180819

Points: 1

# Comments: 0

Article URL: https://www.windowslatest.com/2026/08/04/microsoft-never-learns-it-admins-rage-as-a-new-onedrive-app-invades-windows-11-and-keeps-coming-back-when-you-remove-it/

Comments URL: https://news.ycombinator.com/item?id=49180806

Points: 1

# Comments: 0

Recently we've all seen the chart showing different industries and the amount of AI solutions being created for it in percentages. I remember that something that stood out was that the supply chain and transportation industry had less than 2%.

Now recently Happy Robot reached unicorn status and they started as AI voice agents but for almost a year now they've rebranded completely to "superintelligence" (among other similar iterations before they landed on that word). But something here doesn't line up, if agents are the future and they have the infrastructure to make all the agents from here to kingdom come, why would you pivot to "enterprise superintelligence"? More importantly, why keep trying with pure agent systems when one of the biggest startups is highlighting the importance of intelligence?

It's not only Happy Robot but also C.H Robinson, J.B Hunt and Project 44. The words on their highlights do say AI agents, but if you read about what they had to do/plan on doing, it all revolves around building a data layer/infrastructure that paves the way for AI agents. So are they building AI agents? Or are they building an infrastructure with the side benefit of agents?

Comments URL: https://news.ycombinator.com/item?id=49180795

Points: 1

# Comments: 0

For many everyday images, background removal works well. The remaining challenge is images with fine hair, fur, glass, transparent objects, motion blur, low-contrast subjects, or cluttered backgrounds. Improving results on those difficult cases has been the focus of this project.

This is the third iteration of the model, built through many rounds of training and evaluation. I've focused on improving performance on the kinds of images that are still difficult for many background removal tools.

I recently released the third iteration of my open-weight background removal model (Apache-2.0 for my contributions; see repository for third-party licensing). My goal is to make high-quality background removal easy to run locally (or on your own infra)

Some example results: - Open model results: https://withoutbg.com/open-model/results - Comparison with remove.bg: https://withoutbg.com/compare/withoutbg-open-model-vs-remove...

(The comparison intentionally focuses on challenging images, since many tools produce similar results on easier ones. I was more interested in showing where the approaches differ)

You can run the model in several ways: - macOS app: https://withoutbg.com/mac - GIMP plugin: https://github.com/withoutbg/withoutbg-gimp - Python package: https://github.com/withoutbg/withoutbg-python - Docker image/service: https://withoutbg.com/docs/open-model/docker - Model weights (Hugging Face): https://huggingface.co/withoutbg/withoutbg-openweights-onnx

I would be interested in feedback on both successes and failures. If you have images where the model produces poor results (or unexpectedly good ones compared to other tools) I would appreciate seeing/knowing them. Those kinds of examples have been the most useful for improving the model. I will be around to answer questions about the model, implementation, and the decisions behind it.

Comments URL: https://news.ycombinator.com/item?id=49180772

Points: 1

# Comments: 0