2. Don't discontinue Gemini 2.5 Flash (discuss.ai.google.dev)

Hi Everyone - Firstly, I want to give my thanks to the Gemini team for providing access to such great models. It has been so helpful. We have some very specific workflows that rely on Gemini 2.5 Flash. Our internal benchmarks show that Gemini 3 flash does not perform as well (even after attempting to tweak prompting following the new prompting guidelines and other changes). I am sure there are others with the same experience as well, and there is no easy switch. It would be extremely appreci...

8. GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years (nebusec.ai)

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by VEGA that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.

16. Build your own vulnerability harness (blog.cloudflare.com)

We break down the technical architecture behind our multi-stage vulnerability discovery harness and automated triage loop. Learn how we manage state controls, squash false positives through adversarial review, and route around LLM context limits.

24. My burner email blocklist blocked me (benjamin.piouffle.com)

Blocking disposable email domains at signup increasingly punishes privacy-conscious users while doing little against motivated abusers.

Article Details

Browse by Date

Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open