Hacker News

New stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Meta needs you to believe it cares about privacy (axios.com)
    —discuss
  2. A Rock Is Trapped Light [video] (youtube.com)
    —discuss
  3. All be asking more questions (seangoedecke.com)
    —discuss
  4. The Hollow Pursuit of Happiness (medium.com/ivybealtaine)
    —discuss
  5. GPT 6 Astra beat NetHack (kenforthewin.github.io)
    —discuss
  6. Code Review Says Less (openteams.com)
    —discuss
  7. Git-bug: Distributed, offline-first bug tracker embedded in Git (github.com/git-bug)
    —discuss
  8. Fueling a Return Journey from Mars – Massachusetts Institute of Technology (news.mit.edu)
    —discuss
  9. Walden. Build Deliberately (walden.so)
    —discuss
  10. ZapFast (zapfast.rocks)
    1comments
  11. Don't Trust the Super-App: A Case Study of Russia's Max (arxiv.org)
    —discuss
  12. Retries Turn a Short Outage into a Long One (dochia.dev)
    —discuss
  13. Show HN: Herobrine – Minecraft buddies using jev (github.com/xatuke)
    —discuss
  14. How to Create WebRTC Publisher Clients with Adaptive Live Encoding (red5.net)
    —discuss
  15. Reverse Engineering a Pellet Stove Remote with Codex (itunsecurity.wordpress.com)
    1comments
  16. A simple, modern, secure encryption tool (and Go library) small explicit keys (github.com/filosottile)
    —discuss
  17. A prototype ribbon menu for QGIS (github.com/qgis)
    —discuss
  18. Show HN: Skipper, a YouTube sponsor skipper using Ask Gemini and SponsorBlock (chromewebstore.google.com)
    —discuss
  19. Ventoy – An Open-Source Tool for Creating Multiboot USB Drives (digitalescapetools.com)
    —discuss
  20. Show HN: Tlx – E2E chat over SSH under 500 lines of code (github.com/achempion)
    3comments
  21. Understanding NvPCRs in Systemd v262 (aro.bz)
    —discuss
  22. The Uxn/Varvara ecosystem personal computing stack (100r.co)
    —discuss
  23. The Pentagon wants $30M to build an AI-powered lie detector (technologyreview.com)
    —discuss
  24. Ask HN: Will you take the $5k from Trump?
    4comments
  25. Anthropic: The Situation Report (anthropic.com)
    5comments
  26. Amazon Illegally 'Bricked' Older Kindle Models, Class Action Suit Claims (classaction.org)
    —discuss
  27. Sun.com (1996) (archive.org)
    —discuss
  28. PipePipe: NewPipe hard fork implementing SponsorBlock (github.com/infinityloop1308)
    —discuss
  29. Can Claude fix itself? From no to maybe (sylvainkalache.com)
    —discuss
  30. How to Clone Linux on Windows (kant2002.github.io)
    —discuss

Cloudflare addressed cross-tenant data exposure vulnerability in Containers

3 pointsby 1h agoblog.cloudflare.com
1 comments
1h agoHN ↗

"The vulnerability would potentially have allowed for a customer with a Workers Paid account to recover residual data from storage blocks previously used by other customers’ Containers on the same underlying host.

A successful exploitation would have crossed the tenant-isolation boundary and could disclose filesystem metadata, directory structures, database pages, and application data."