ZeroHour

News

63 stories in the last 3d

GNOME 51 adds passkey logins, offline maps and drawn PDF signaturesnew

GNOME 51 ships passkey and smart card logins, offline Maps, and drops proprietary NVIDIA driver support for GeForce 700-series and older cards.

GNOME 51, codenamed A Coruña, was released on September 16 and will ship in Fedora 45 and Ubuntu 26.10. GDM adds smart card, passkey and QR code login, while the Settings Network panel drops legacy WEP Wi-Fi encryption. The release removes EGLStreams/EGLDevice code from Mutter, so older GeForce cards (700 series and earlier, except GTX 750 Ti/750/745) lose the proprietary NVIDIA driver under GNOME and fall back to Nouveau. Papers gains hand-drawn visual PDF signatures, though they carry no cryptographic signer identity or tamper detection.

Help Net Security · 48m agoOther

ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)

SANS Internet Storm Center's daily Stormcast podcast episode listing for September 15, 2026, with no substantive content provided.

This is a routine daily Stormcast podcast announcement from the SANS Internet Storm Center for Tuesday, September 15, 2026. The item text contains only licensing and copyright information with a link to the podcast episode. No specific security news, vulnerabilities, or incidents are described.

SANS Internet Storm Centerupdated · 3h agofirst · 2d agoOther 6 sources

Australia says it could follow Canada in forging deeper ties with EU

Australia signals it may deepen EU ties as Canada pursues a 'unique alliance' with the bloc amid escalating US trade disputes.

Australian trade minister Don Farrell said Australia is 'on the same page' as Canada, which the Wall Street Journal reported is exploring associate-member status with the EU, though Prime Minister Mark Carney clarified Canada seeks a 'unique alliance' rather than full membership. Canada-EU talks cover free movement of goods, services, and workers in AI, energy, defence, and critical minerals, plus shared infrastructure such as undersea cables, data centres, and satellite networks. Australia signed an EU free trade agreement in March after eight years of negotiations.

Tell HN: An inside view of Montana's new biotech law

Montana's SB535 lets sponsors of Phase 1 IND drugs treat patients for payment under state-registered ETRB oversight, reshaping trial economics.

Montana's SB535 extends right-to-try by allowing physicians to administer experimental treatments outside trials if the drug completed FDA Phase 1 under an active IND and a state-registered review board (ETRB) approved the protocol. It is described as the first state law letting sponsors charge for IND-stage treatments, aiming to counter Eroom's Law cost growth and the Phase 1 'Valley of Death.' The author, who contributed to the law and formed the first ETRB, says oversight includes enhanced consent, adverse-event reporting, and published decisions. The item is biotech regulation, off-topic for a cyber/AI dashboard.

We've created the first vectorized Quicksort

Google released an Apache2-licensed vectorized Quicksort using SIMD that sorts numbers up to ~10x faster than C++ std::sort across six instruction sets.

Google announced the first vectorized Quicksort, portable across six instruction sets including AVX2, AVX-512, Arm NEON/SVE and RISC-V V via the Highway library, using compress-store and permute instructions for partitioning. It reaches 499-1123 MB/s sorting 32/64/128-bit numbers, a 9-19x speedup over std::sort, outperforming prior architecture-specific sorts. The Apache2-licensed source is on GitHub with an accompanying paper. The item is a performance-engineering result, not security or AI news.

GitHub is having trouble counting things

A developer documents two GitHub UI bugs: inflated pull request counts after merges and a broken pagination popup for organization memberships.

A developer describes two UI defects noticed on GitHub over the past week: repository pull request tabs showing inflated counts, commonly after merging a PR, even though the correct count is displayed elsewhere on the page. The second bug involves the organization-membership popup, where a user with three pages of memberships could not navigate to page two because Chrome prevents editing the address bar in such popup windows, forcing a JavaScript-based navigation workaround.

Hacker News · AI · 11h agoOtherHN 41↑ · 29 comments

Can we stop with the uptime percentages?

Opinion piece argues status pages should report downtime in hours affected rather than nonlinear uptime percentages.

A blog post argues that uptime percentages are a poor interface for non-experts because values like 99.9% and 99.99% look similar but differ tenfold. The author proposes status pages display concrete downtime, for example '12 hours affected in the last 30 days' alongside the percentage. The piece cites Jason Gorman's observation that each additional nine of reliability is as hard to achieve as the previous one.

Hacker News · AI · 13h agoOtherHN 40↑ · 30 comments

Threads Expands Podcast Toolkit for Creators and Listeners

Meta added podcast tools to Threads, including profile banners, episode link cards, transcripts, reminders, and audience insights for creators.

Meta announced new Threads features for podcast creators and listeners, including profile banners, episode link cards, transcript and guest cards, episode reminders, and Podcast Insights. The updates aim to help creators share shows and grow engagement on the platform.

Meta Newsroom · 14h agoOther 2 sources

Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors

Microsoft confirmed service degradation MO1472904 causing widespread 502 and 503 errors across Microsoft 365 apps starting September 16, 2026.

Microsoft acknowledged an active service degradation, tracked internally as MO1472904, that began around 7:17 PM GMT+5:30 on September 16, 2026, leaving enterprise and consumer users unable to access core Microsoft 365 applications. Admin center advisories point to 502/503 errors consistent with backend overload or upstream infrastructure failures. Microsoft has not confirmed a root cause; 2026 saw prior Exchange Online authentication failures and a July networking misconfiguration affecting Teams and SharePoint.

Cyber Security News · 14h agoOther

PS5 Linux lead quits: "a bunch of noobs using LLMs" that "they don't understand"

PS5 Linux lead Andy 'TheFlow0' Nguyen quit the project, blaming LLM vibe-coders who reported a hypervisor bug to Sony for a bounty.

Veteran PlayStation hacker Andy 'TheFlow0' Nguyen announced he is stepping away from the PS5 Linux project, citing an influx of AI-assisted contributors submitting code they do not understand. He says 'slop kiddies' used AI to find the last remaining hypervisor bug and reported it to Sony before the agreed waiting period, undermining plans for PS5 Pro support in 2027. Version 2.5, supporting PS5 Phat and Slim on firmware 3.00-7.61, is his final release, following RPCS3's ban on vibe-coded contributions.

Anatomy of a Texture

A graphics programmer explains how BC7 block compression, texel ordering, mips, and tiling complicate cross-platform texture memory conversion.

A graphics programmer at 505 Games porting a custom PC engine to consoles explains the complexity of texture memory layouts, using a 1024x1024 RGBA BC7 texture as a running example. The post covers block compression (BC7 storing 16 texels in 16 bytes for roughly 4x compression on 8-bit RGBA), texel ordering, mipmaps, and tile-based layouts that improve cache locality. Conversion between platforms is framed as calculating each element's memory address, primarily from the DirectX 12 perspective.

Hacker News · AI · 14h agoOtherHN 42↑ · 9 comments

Next wave of VCs judging Startup Battlefield 200 contenders at TechCrunch Disrupt 2026 revealed

TechCrunch Disrupt 2026 revealed five more VC judges for its Startup Battlefield 200 pitch competition in San Francisco this October.

TechCrunch announced the next wave of venture judges for Startup Battlefield 200 at Disrupt 2026, October 13-15 in San Francisco. The five judges are Aditi Maliwal (Upfront Ventures), Michael Palank (MaC Ventures), Nell Daly (Revenge Capital), Grace Ge (Amplify Partners), and Crystal Huang (GV). Several of the investors focus on AI applications, AI infrastructure, and developer tools.

TechCrunch · AI · 15h agoOther

3 days left to exhibit: Get your brand in front of VCs and high-value leads at TechCrunch Disrupt 2026

TechCrunch Disrupt 2026 exhibit table bookings close September 18 ahead of the October 13-15 startup event in San Francisco.

TechCrunch says September 18 at 11:59 p.m. PT is the final deadline to book exhibit tables for TechCrunch Disrupt 2026, held October 13-15 at Moscone West in San Francisco. The promotional piece pitches exposure to 10,000+ attendees, Startup Battlefield 200, investor networking, and ticket discounts before September 25.

TechCrunch · AI · 15h agoOther 5 sources

Original Sony PlayStation 2 security chip 'broken wide open' after 26 years

Enthusiast DiscoStarslayer reverse-engineered and dumped the 26-year-old Sony PS2 CXP102064 MechaCon security chip after four years of effort, aiding preservation and emulation.

Canadian retro hardware enthusiast DiscoStarslayer successfully reverse-engineered and dumped the CXP102064 MechaCon security chip inside the original 1999 PlayStation 2 after four years of effort. The milestone benefits hardware preservation, repair, and emulation projects rather than modern enterprise security.

Uncanny and unappetizing: appetites spoil as AI images take over food menus

Restaurants adopting AI-generated menu images face consumer backlash over unappetizing, misleading food pictures, while industry surveys and delivery platforms normalize the practice.

A Guardian feature reports growing consumer disgust with AI-generated food images on restaurant menus, citing a Denver nurse's viral post about a Jamaican barbecue pop-up and a San Francisco cafe that removed AI signage after vandalism costing roughly $700 to repaint. A 2026 National Restaurant Association report found 26% of US restaurant operators use AI for marketing, inventory, scheduling, menus, and ordering. DoorDash offers AI photo-editing tools with an automatic 'AI-enhanced' label and policies against misleading images. Oxford psychologist Charles Spence's 2024 study found diners rate AI food images lower once told they are machine-generated.

Devastated father says his 9-year-old son spent $118,000 on YouTube ads

A father says his 9-year-old son spent $118,000 of company credit card funds on YouTube ads promoting his Minecraft channel in three weeks.

A father identified only as Dave said his 9-year-old son ran $118,000 in YouTube ad campaigns for his Mighty Mike Plays Minecraft and Roblox channel over roughly three weeks. The charges hit a company credit card the father had saved to a Google account his son also used, and surfaced in a meeting with his employer's finance staff.

EU chief opens door for Canada to become 'associate member'

European Commission President Ursula von der Leyen backed making Canada the EU's first 'associate member', alongside a proposed European Security Council.

Ursula von der Leyen told the European Parliament's State of the Union address she wants to 'open the door' for Canada as the EU's first associate member, deepening cooperation on trade, AI, defense, energy, and critical minerals amid trade tensions with the US. She also proposed a European Security Council including the UK and Ukraine, talks with the world's largest AI labs, and social media restrictions banning platforms for children under 13.

Learning Programming in an Age of LLMs

A veteran software developer argues LLM-assisted coding can outpace understanding, questioning whether newcomers should still study programming fundamentals.

The ploeh.dk blog answers a reader who built a large TypeScript, PostgreSQL, and LLM-pipeline system with AI assistance but found it exceeded his own understanding when debugging. The author compares LLMs to historical abstraction layers developers work atop, doubts reassurances that AI-driven job displacement reliably creates replacement jobs, and says that if starting today he would consider learning a manual trade instead.

Hacker News · AI · 20h agoOtherHN 44↑ · 23 comments

Threads Introduces Parental Supervision for Teens in APAC

Meta launches parental supervision tools for teen Threads accounts across Asia Pacific, adding time limits, sleep mode, and privacy controls.

Meta rolled out Parental Supervision for Threads in Asia Pacific countries, letting parents view daily usage, set time limits, and enable a 10 PM to 7 AM sleep mode with muted notifications. Parents can manage tagging, privacy settings, and sensitive content preferences, and must approve any changes by teens under 16 to built-in protections like private accounts. The controls are available through Meta's Family Center alongside supervision for its other apps.

Meta Newsroom · 1d agoOther

Recreating Voodoo Graphics and a Late-1990s Gaming PC on an FPGA

Hobbyist implements 3dfx Voodoo Graphics SST-1 in SystemVerilog on a Xilinx KV260 FPGA, running Tomb Raider with its original 3dfx renderer.

The author built zSST, a SystemVerilog reimplementation of the 3dfx Voodoo Graphics (SST-1) accelerator, paired with their z486 CPU core as 'z486 XL' on a Xilinx KV260 board. CPU and renderer run at 100 MHz, implementing triangle rendering, texture filtering, mipmapping, depth and alpha tests, fog, blending, dithering, and framebuffer access. Tomb Raider currently runs with its original 3dfx Glide renderer; broader game compatibility and later Voodoo generations are future work.

German Rheinmetall open-sources its Battlesuite connected weapon system protcol

Rheinmetall published open-source documentation for onboardapi, its Battlesuite middleware linking weapon system sensors and software via the DDS standard.

German defense contractor Rheinmetall released documentation and interface libraries for onboardapi, a C++ middleware with Java, C#/.NET, and Python wrappers for communication between sensor systems and software components in its Battlesuite connected weapon system. The library uses the OMG Data Distribution Service (DDS) standard with XTypes and XCDR2 encoding for low-latency publish-subscribe data exchange and backward compatibility.

Iran war has cost on average $246M per day in its first five months

CBO estimates the U.S.-Iran war cost the Pentagon $38.1 billion through Aug. 1, averaging $246 million per day since February.

The Congressional Budget Office estimates the U.S. war with Iran cost $38.1 billion through Aug. 1, averaging $246 million daily, with munitions replacement making up more than half. The conflict has consumed up to two-thirds of U.S. missile-defense interceptors, and rebuilding inventories could take at least five years. CBO projects the war will raise year-over-year PCE inflation by 0.5 percentage points by Q1 2027, with U.S. crude topping $106 per barrel. A parallel Pentagon inspector general report documented damage to hundreds of buildings across eight Middle Eastern countries and the loss of dozens of aircraft including F-15Es and an F-35A.

WangNet – 1.8 MB, zero-dependency Numberwang adjudication in 11 languages

Hacker News highlights WangNet, a 1.8 MB zero-dependency library adjudicating the fictional Numberwang game in 11 languages; no security relevance.

A Hacker News post links to the GitHub repository GraafHenk/numberwang, a 1.8 MB zero-dependency project that adjudicates the fictional comedy-game Numberwang across 11 programming languages. The post gathered 41 points and 13 comments. It is a humorous side project with no cybersecurity or AI research relevance.

Google copied our open-source code, removed engineers' names without credit

A Reddit post shared to Hacker News alleges Google copied an open-source reinforcement learning codebase and removed the original engineers' names.

A low-engagement Hacker News submission links to a Reddit post in r/reinforcement learning claiming Google copied open-source code and stripped attribution from the original engineers. The Hacker News thread has 21 points and zero comments, and no technical or legal details are included. This is a licensing/attribution dispute, not a security issue.

US military confirms it launched space weapons into Earth’s orbit

US Air Force Secretary Troy Meink confirmed the first acknowledged deployment of US space-control weapons in orbit, amid suspected Chinese and Russian counterspace programs.

Air Force Secretary Troy Meink stated the military now operates 'on-orbit space control weapons capable of defending the Joint Force,' without specifying types, functions, or quantities. The disclosure follows long-standing suspicions that China operates spacecraft able to damage other satellites and US Space Force claims Russia is developing a satellite designed to carry a nuclear weapon. The US had previously disavowed satellite destruction due to orbital debris risks.

TechCrunch · Security · 1d agoOther

Charges Against Man Who Destroyed 3D-Printed ‘Decoy’ Flock Camera Drastically Reduced After State Admits It Was Not Very Valuable

Florida prosecutors cut three felonies to misdemeanors after admitting a 3D-printed Flock decoy camera destroyed by a man was worth under $200.

Charges against Evan Meyer, who knocked down and destroyed an Oviedo Police Department 3D-printed decoy Flock camera with garden shears, were reduced from three felonies to two second-degree misdemeanors. The state's new filing values the damage at $200 or less and adds petty theft under $750. The department had deployed fake Flock camera shells on poles to catch would-be vandals.

404 Media · 1d agoOther

A Digital Fly Brain Has Taken Over the Internet

Viral trend sees modders run the MaleCNS v1.0 fruit fly connectome in Minecraft, games and virtual environments after its HHMI/Google release.

HHMI Janelia Research Campus and Google Research released MaleCNS v1.0, a complete connectome of an adult male Drosophila's roughly 166,700 neurons, complementing the 2024 female FlyWire map. Online modders quickly emulated the brain to play Minecraft, Doom and Beat Saber and perform other tasks, drawing millions of views. The connectome is intended as a resource for neuroscience and AI research and is not capable of sentience.

404 Media · 1d agoOther

Show HN: The bottom 50% of U.S. households are short after essentials (BLS data)

Show HN project models how bottom-50% U.S. households have little or nothing left after essentials, using BLS survey data.

A Show HN submission presents an interactive model of U.S. household cash flow built from BLS Consumer Expenditure Survey quintile data (2000–2024) and Federal Reserve Distributional Financial Accounts net-worth figures. It illustrates that lower-income groups have minimal surplus after essentials, with user-adjustable tax, childcare, and investing scenarios. The content is unrelated to cybersecurity or AI.

A Cop Searched 19,000 Flock Cameras Across 1,558 Cities. His Reason: 'LMAO'

EFF found police ran 19,000-camera Flock license-plate searches with joke justifications like 'LMAO' across 1,558 cities.

An EFF analysis of Flock Safety ALPR search logs found officers entering jokes and gibberish as search reasons, including a Lake County, Indiana officer who searched 19,000 cameras across 1,558 cities citing 'LMAO', plus over 6,300 searches across 30+ agencies justified only as 'TBD'. Flock replaced the free-text reason field with pre-populated categories in late 2025, which EFF called a loss for transparency. The network has grown beyond 120,000 cameras and received a public endorsement from President Trump.

Global bond yields hit 2008 highs, raising stakes for big borrowers

US benchmark Treasury yields pushed past 5%, reaching 2008-era highs and rattling stocks; off-topic finance news.

A Reuters report carried on Hacker News (56 points, 23 comments) on global bond markets: US benchmark yields moved beyond 5%, hitting levels not seen since 2008 and raising borrowing costs. The story is general macro-finance news with no cybersecurity or AI relevance.

This doorbell camera lets a human security guard watch your front door

SimpliSafe launches a $199.99 Video Doorbell Series 2 combining on-device AI with live monitoring agents through its Active Guard subscription.

SimpliSafe's new wired Video Doorbell Series 2 costs $199.99 and offers 2K resolution, 10x zoom, two-way audio, and a built-in siren. Its Active Guard Outdoor Protection feature, starting at $49.99 per month, uses AI analysis plus live agents who can view triggered footage and speak to deter intruders. The feature is opt-in and agents only see live footage when the armed system triggers. Ring offers a comparable Virtual Guard service at $99 per month.

The Verge · AI · 1d agoOther

Show HN: Capsule – Single-file web apps that save their data into SQLite

Capsule bundles web apps with local SQLite data into portable single .capsule files shareable without cloud services or accounts.

Capsule is a Show HN project that packages an entire app (HTML UI, media, schema, and SQLite data) into one portable .capsule file that can be shared via messaging or email. It is offline-first, requires no cloud or accounts, runs on macOS, Windows, and Linux, and supports AI-driven iteration via prompts or MCP tools. The item is off-topic for a security dashboard.

Australia 'on the same page' as Canada as it seeks deeper EU alliance

Hacker News thread (54 points) discusses Australia seeking a deeper alliance with the EU, aligned with Canada.

A Hacker News submission linking to a Reddit worldnews article reporting that Australia is 'on the same page' as Canada as it seeks a deeper EU alliance. The item is geopolitical news with 54 points and 30 comments, containing no cybersecurity or AI content.

Show HN: Hacking a $20 4G wireless hotspot into a texting device

Hobbyist project turns a $20 MF800 4G hotspot into a pocket Linux texting device using a Clicks keyboard and SHARP memory display.

The author documents repurposing a $20 MF800 4G hotspot, reflashing it with Linux via the openstick project, and pairing it with a Clicks Keyboard and Adafruit SHARP Memory Display on a custom adapter PCB. The write-up covers Android device-tree extraction, PCB trimming, power management, and wiring. It is a maker/hardware project with no security or AI relevance.

Show HN: An e-ink frame that hears birds and draws them as 1800s illustrations

Hacker News post showcases an e-ink frame that identifies bird songs and renders them as 1800s-style illustrations.

A Show HN post (81 points, 22 comments) links to a GitHub project for an e-ink picture frame that listens for birdsong, identifies the species, and draws them as vintage 1800s-style illustrations. It is a hobbyist hardware/software project with no security or AI research relevance.

On the NSA’s Supercomputer from the 1960s

Bruce Schneier blog post recounts the NSA's 1960s supercomputer; historical cryptography trivia with no current security impact.

The Schneier on Security blog entry discusses an NSA supercomputer from the 1960s. The article body contains only biographical boilerplate and site navigation, with no actionable threat, vulnerability, or research detail. It is historical security content, not current news.

Schneier on Security · 1d agoOther