Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. F-Droid 2.0 (f-droid.org)
    321comments
  2. CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2 (safateam.com)
    1comments
  3. Show HN: Make cursed fonts like Times New Bastard (mitpit.com)
    90comments
  4. Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design (github.com/devdotfast)
    114comments
  5. Why is the liver so weirdly regenerative? (dynomight.substack.com)
    200comments
  6. 2DWillNeverDie (2dwillneverdie.com)
    36comments
  7. Rails World 2026 Opening Keynote [video] (youtube.com)
    351comments
  8. Fearless SIMD v1.0 (linebender.org)
    34comments
  9. The Efficiency-Throughput Gap with GitHub Copilot (acm.org)
    5comments
  10. Toyota is taking the Corolla electric (electrek.co)
    540comments
  11. My weird new hobby: Wandering around Tokyo on Google Maps (ahmedhossamdev.com)
    141comments
  12. Using LLMs to trace alchemical knowledge and decode 17th century letters (resobscura.substack.com)
    24comments
  13. Two-tier encryption in the UK (macanorak.com)
    394comments
  14. Google’s Project Suncatcher to put ML infrastructure in space (blog.google)
    327comments
  15. Writing Parquet files using Haskell (datahaskell.org)
    9comments
  16. Jev Based Code Review (github.com/egma-ai)
    6comments
  17. Opus 5.5 is good at explainer videos (launchvideo.io)
    123comments
  18. Book review: Is parallel programming hard, and, if so, what can you do about it? (ahelwer.ca)
    43comments
  19. The Board Game of the Alpha Nerds (2014) (grantland.com)
    34comments
  20. California is chasing wealth that has feet (landeconomics.org)
    602comments
  21. Sourcehut account takeover via build logs (XSS in ansi2html) (blog.arusekk.pl)
    21comments
  22. Security auditing in the age of (good enough) AI (trailofbits.com)
    12comments
  23. Nokia Design Archive (2025) (aalto.fi)
    124comments
  24. The forgotten battle of East Lansing (eastlansinginfo.news)
    16comments
  25. WaveDigger: Dig into wireless signals to discover their physical locations (github.com/christianrowlands)
    20comments
  26. Show HN: Air-gapped file encryption as self-decrypting HTML page (apeleg.com)
    21comments
  27. Geothermal heat map of US hot springs (soakingsprings.com)
    39comments
  28. Show HN: Koi.rest – watch some fish and regain your balance (koi.rest)
    46comments
  29. Forging 1024-bit RSA signatures in nearly SNFS time [pdf] (iacr.org)
    11comments
  30. The Bayeux Tapestry: Woven by the Victors (historytoday.com)
    9comments

CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

18 pointsby 1h agosafateam.com
1 comments
5m agoHN ↗

Chalk another one up for "Antiviruses causing more problems than solving them".

They 'worked' when they initially just scanned files for known malicious signatures. Now they're the equivalent of a sledgehammer to a wall with all of the extra bells & whistles strapped to them.

Application whitelisting is the remaining way forward if you actually care about runtime security. That & locking every access point down to the bare minimum.