Hacker News top 30 - 2025-08-20
- How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos research.kudelskisecurity.com - 184 comments 548 points
- Copilot broke audit logs, but Microsoft won’t tell customers pistachioapp.com - 127 comments 384 points
- “Remove mentions of XSLT from the html spec” github.com - 434 comments 347 points
- AGENTS.md – Open format for guiding coding agents agents.md - 151 comments 343 points
- Prime Number Grid susam.net - 91 comments 279 points
- Custom telescope mount using harmonic drives and ESP32 www.svendewaerhert.com - 101 comments 276 points
- D2 - text to diagram tool now supports ASCII renders d2lang.com - 46 comments 273 points
- UK drops demand for backdoor into Apple encryption www.theverge.com - 107 comments 268 points
- Vendors that treat single sign-on as a luxury feature sso.tax - 163 comments 252 points
- Without the futex, it’s futile h4x0r.org - 119 comments 251 points
- How to Draw a Space Invader muffinman.io - 20 comments 238 points
- Emacs as your video-trimming tool xenodium.com - 111 comments 217 points
- Notion releases offline mode www.notion.com - 147 comments 208 points
- Google is killing the open web wok.oblomov.eu - 166 comments 177 points
- Positron, a New Data Science IDE posit.co - 42 comments 147 points
- BBC witnesses settlers attack on Palestinian farm in West Bank www.bbc.com - 37 comments 137 points
- Perfect Freehand – Draw perfect pressure-sensitive freehand lines www.perfectfreehand.com - 10 comments 125 points
- Why I’m all-in on Zen Browser werd.io - 115 comments 121 points
- Critical Cache Poisoning Vulnerability in Dnsmasq lists.thekelleys.org.uk - 101 comments 121 points
- PyPI Preventing Domain Resurrection Attacks blog.pypi.org - 47 comments 118 points
- Why Semantic Layers Matter - and how to build one with DuckDB motherduck.com - 22 comments 118 points
- ‘Ad Blocking Is Not Piracy’ Decision Overturned by Top German Court torrentfreak.com - 172 comments 114 points
- AnduinOS www.anduinos.com - 127 comments 107 points
- Launch HN: Uplift - YC S25 – Voice models for under-served languages news.ycombinator.com - 47 comments 101 points
- CRDT: Text Buffer madebyevan.com - 3 comments 99 points
- The forgotten meaning of “jerk” languagehat.com - 96 comments 92 points
- China blocked all HTTPS connection abroad for 1 hour in midnight gfw.report - 35 comments 91 points
- How to Think About GPUs jax-ml.github.io - 1 comments 85 points
- Porn censorship is going to destroy the internet mashable.com - 139 comments 83 points
- Warp sends a terminal session to LLM without user consent news.ycombinator.com - 28 comments 82 points
August 20, 2025 ∙