🚀 Hacker News(附 AI 简介)

1. Security advisory: Critical remote code execution vulnerabilities, update now
Security advisory: Critical remote code execution vulnerabilities, update now
PHP发布安全更新修复两个严重RCE漏洞,建议立即更新。

2. PHP 8.2.35
PHP 8.2.35
PHP 8.2.35发布,修复可致远程代码执行的两个关键漏洞。

3. Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
eMudhra的CA私钥为单字节弱密钥,被秒破。

4. The 1.5°C goal of the Paris Agreement is no longer viable
The 1.5°C goal of the Paris Agreement is no longer viable
联合国报告称1.5°C温控目标已无法实现,只能先保2°C再回降。

5. The Future of CSS
The Future of CSS
Interop协作推动CSS新特性,作者列出十大投票功能。

6. Today's PHP security release, and how we're strengthening security
Today's PHP security release, and how we're strengthening security
PHP发布安全更新修复两个可致远程代码执行的关键漏洞

7. The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck
The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck

8. What shall I teach my son?
What shall I teach my son?
在AGI时代反思教育目的,认为学校仍会长期存续。

9. PHP2Shell: AI uncovers critical RCE in PHP
PHP2Shell: AI uncovers critical RCE in PHP
AI发现PHP核心可致远程代码执行和内存泄露的严重漏洞。

10. Ofcom concedes defeat in 4chan case
Ofcom concedes defeat in 4chan case
英国通信管理局承认在4chan案中无法执行罚款。

11. EA is shutting down BioWare
EA is shutting down BioWare
艺电关闭BioWare工作室并停止开发新质量效应游戏。

12. Google Cloud outage affects almost all banking and other operations in Europe
Google Cloud outage affects almost all banking and other operations in Europe

13. How I got over 300 Tor exit nodes removed
How I got over 300 Tor exit nodes removed
发现并协助清除333个受感染的Tor出口节点。

14. Muse exposes users' personal and business secrets when they share conversations
Muse exposes users' personal and business secrets when they share conversations

15. Google open-sources TorchTPU, a native PyTorch back end for TPUs
Google open-sources TorchTPU, a native PyTorch back end for TPUs
谷歌开源TorchTPU,为PyTorch提供TPU后端。

16. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
LiteLLM 1.107.0 包被植入窃密器和后门,PyPI 已移除。

17. DuckDB 2.0.0 LTS “Cinnamon Teal”
DuckDB 2.0.0 LTS “Cinnamon Teal”
DuckDB 2.0.0 LTS发布,代号Cinnamon Teal,引入多项新特性。