Hacker News Highlights20 Aug 2025

8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification

This is a recap of the top 10 posts on Hacker News on Aug 20, 2025.

(00:00) - Intro
(00:21) - How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
(01:40) - AGENTS.md – Open format for guiding coding agents
(02:58) - Copilot broke audit logs, but Microsoft won't tell customers
(04:15) - How to Draw a Space Invader
(05:13) - D2 (text to diagram tool) now supports ASCII renders
(06:09) - Candle Flame Oscillations as a Clock
(07:12) - Custom telescope mount using harmonic drives and ESP32
(08:29) - Without the futex, it's futile
(09:46) - Emacs as your video-trimming tool
(10:59) - Ask HN: Why does the US Visa application website do a port-scan of my network?
(12:10) - Outro

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
https://news.ycombinator.com/item?id=44953032

AGENTS.md – Open format for guiding coding agents
https://agents.md/
https://news.ycombinator.com/item?id=44957443

Copilot broke audit logs, but Microsoft won't tell customers
https://pistachioapp.com/blog/copilot-broke-your-audit-log
https://news.ycombinator.com/item?id=44957454

How to Draw a Space Invader
https://muffinman.io/blog/invaders/
https://news.ycombinator.com/item?id=44956915

D2 (text to diagram tool) now supports ASCII renders
https://d2lang.com/blog/ascii/
https://news.ycombinator.com/item?id=44954524

Candle Flame Oscillations as a Clock
https://cpldcpu.com/2025/08/13/candle-flame-oscillations-as-a-clock/
https://news.ycombinator.com/item?id=44921195

Custom telescope mount using harmonic drives and ESP32
https://www.svendewaerhert.com/blog/telescope-mount/
https://news.ycombinator.com/item?id=44949895

Without the futex, it's futile
https://h4x0r.org/futex/
https://news.ycombinator.com/item?id=44951563

Emacs as your video-trimming tool
https://xenodium.com/emacs-as-your-video-trimming-tool
https://news.ycombinator.com/item?id=44953316

Ask HN: Why does the US Visa application website do a port-scan of my network?
https://news.ycombinator.com/item?id=44959073

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(578)

8.26.26 | Dolly Parton has died, Apple introduces M6 and M5 Ultra, Nitter and XCancel receive cease and desist notices

This is a recap of the top 10 posts on Hacker News on Aug 26, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:20) - Dolly Parton has di...

26 Aug 14min

8.25.26 | Europe harming makers, Xiaomi's CPU performance, MS Paint and Photos watermarking

This is a recap of the top 10 posts on Hacker News on Aug 25, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - How Europe is killi...

25 Aug 13min

8.24.26 | Reading to improve writing, Python thinking, Texas student's AI hack whistleblower

This is a recap of the top 10 posts on Hacker News on Aug 24, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:17) - To become a better ...

24 Aug 13min

8.23.26 | Canada matches US tariffs, Scrap from 2006, ElevenLabs TwelveLabs ThirteenLabs

This is a recap of the top 10 posts on Hacker News on Aug 23, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:16) - Canada will match U...

23 Aug 12min

8.22.26 | Kagi adds setting for paywalled links, citizen faces felony charges for deleting phone data at US Border, Felony Bench

This is a recap of the top 10 posts on Hacker News on Aug 22, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:16) - Kagi added a settin...

22 Aug 14min

8.21.26 | Aaron Swartz prosecution, AliExpress WebAudio fingerprinting, HTML capabilities

This is a recap of the top 10 posts on Hacker News on Aug 21, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:18) - Aaron Swartz was pr...

21 Aug 14min

8.20.26 | A joke domain purchase turned in geopolitical warfare, OpenRouter is joining Stripe, Go 1.27

This is a recap of the top 10 posts on Hacker News on Aug 20, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:18) - A joke domain purch...

20 Aug 13min

8.19.26 | Amazon tax, universal health coverage saves lives and money, memory prices spike

This is a recap of the top 10 posts on Hacker News on Aug 19, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:20) - The Amazon tax (01:...

19 Aug 13min