Feed aggregator
Readest: Free, open-source, multi-platform ePub and PDF reader
Article URL: https://readest.com/
Comments URL: https://news.ycombinator.com/item?id=48360619
Points: 1
# Comments: 0
Darvy – a voice-first assistant we built for my blind brother
Article URL: https://darvy.ai/
Comments URL: https://news.ycombinator.com/item?id=48360604
Points: 1
# Comments: 0
We reversed the service marketplace model so providers bid on customers
Article URL: https://www.ulobo.com
Comments URL: https://news.ycombinator.com/item?id=48360602
Points: 1
# Comments: 1
Bond Graph
Article URL: https://en.wikipedia.org/wiki/Bond_graph
Comments URL: https://news.ycombinator.com/item?id=48360545
Points: 2
# Comments: 0
We reduced core unit boot time from hours to minutes
Article URL: https://blog.cloudflare.com/optimizing-core-unit-boot-time/
Comments URL: https://news.ycombinator.com/item?id=48360542
Points: 1
# Comments: 0
Welcome to Uruky, AlternativeTo's new official partner
Article URL: https://alternativeto.net/news/2026/5/welcome-to-uruky-alternativeto-s-new-official-partner-/
Comments URL: https://news.ycombinator.com/item?id=48360536
Points: 2
# Comments: 1
Florida AG sues OpenAI, seeks to hold CEO Altman personally liable for harms
Article URL: https://www.cnbc.com/2026/06/01/florida-ag-open-ai-altman-lawsuit.html
Comments URL: https://news.ycombinator.com/item?id=48360497
Points: 2
# Comments: 0
Install web apps with the new HTML install element
Article URL: https://developer.chrome.com/blog/install-element-ot
Comments URL: https://news.ycombinator.com/item?id=48360474
Points: 4
# Comments: 1
Security Specialist Warns of Bizav Cyberattack Threats
Animorphs: A Great Series Turns 30
Article URL: https://compostedbooksreview.substack.com/p/animorphs-the-greatest-achievement
Comments URL: https://news.ycombinator.com/item?id=48360438
Points: 2
# Comments: 0
PithTrain – a compact, agent-native MoE training system
Article URL: https://blog.mlc.ai/2026/06/01/pithtrain-compact-agent-native-moe-training-system
Comments URL: https://news.ycombinator.com/item?id=48360415
Points: 3
# Comments: 0
Making Debian or Fedora persistent live images
Article URL: https://sigwait.org/~alex/blog/2026/05/28/smdBC8.html
Comments URL: https://news.ycombinator.com/item?id=48360414
Points: 2
# Comments: 0
Autopoiesis (from Greek αὐτO- (auto) 'self' and ποίησις (poiesis) 'creation')
Article URL: https://en.wikipedia.org/wiki/Autopoiesis
Comments URL: https://news.ycombinator.com/item?id=48360413
Points: 2
# Comments: 0
Pokémon TCG: 30th Celebration – Available September 16 [video]
Article URL: https://www.youtube.com/watch?v=05w9UVH6zoQ
Comments URL: https://news.ycombinator.com/item?id=48360401
Points: 2
# Comments: 0
HBO Max: The 27 Absolute Best Movies to Watch
How do computers work? (from scratch, no prior knowledge needed) [12 hours long] [video]
Article URL: https://www.youtube.com/watch?v=rl0jkP9kOMw
Comments URL: https://news.ycombinator.com/item?id=48360394
Points: 1
# Comments: 0
United 767 diverted mid-Atlantic after teenager named Bluetooth speaker BOMB
Article URL: https://www.airtraveler.club/news/united-767-diverted-bluetooth-bomb-passengers-stranded/
Comments URL: https://news.ycombinator.com/item?id=48360386
Points: 2
# Comments: 1
Dutch Police Dismantle Massive 17-Million-Device Botnet
Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy network and facilitate cybercrime.
The post Dutch Police Dismantle Massive 17-Million-Device Botnet appeared first on SecurityWeek.
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta’s “AI support assistant” bot into resetting account passwords.
A screenshot from a video released on Telegram claiming to show how Meta’s AI customer support bot could be tricked into resetting a target’s password.
On May 31, word began to spread on several Telegram instant message channels that Meta’s AI bot would happily add an email address to an existing account as part of the bot’s standard password reset flow.
A video released on Telegram by pro-Iran hackers claimed to document a remarkably simple exploit that appears to have involved using a VPN connection with an IP address that is in or near the target’s usual hometown, requesting a password reset for the account, and then choosing to chat with Meta’s AI support assistant. From there, the video shows the attacker told the bot to link the account in question to a new email address, after which the bot dutifully sent that address a one-time code that allowed a password reset.
The Telegram account that posted the video also linked to screenshots of pro-Iran images, videos and messages that defaced the hacked Instagram accounts, saying hackers had used the exploit to hijack a number of valuable (read: short) Instagram account names that allegedly have a resale value of more than a half million dollars.
Meta has not responded to requests for comment on the video’s claims, but the company reportedly did acknowledge the dormant Instagram account for the Obama White House was briefly compromised. The security blog thecybersecguru.com reports that Meta pushed an emergency patch over the weekend, and clarified that no back end database was breached.
“Instagram has notoriously poor human support infrastructure,” Cybersecguru wrote. “Recovering a locked account – especially a high-value one can take weeks of back-and-forth with an automated ticketing system. Meta’s solution was to deploy a conversational AI layer to handle common recovery workflows: relinking a lost email address, triggering a password reset, verifying account ownership. The assistant, presumably, was supposed to reduce friction for legitimate users stuck in account-access hell.”
Ian Goldin, a threat researcher at Lumen’s Black Lotus Labs, said we’re entering unchartered security territory as more large online platforms start allowing AI chatbots to handle sensitive account recovery requests. Just like human customer support employees can be social engineered into providing unauthorized access to someone’s account, AI bots are equally eager to help and vulnerable to persuasion and trickery, he said.
“AI chatbots create interesting new attack surface, and we’re likely going to see a lot more of these kinds of attacks,” Goldin said.
Securing your various online accounts means taking full advantage of the most secure form of multi-factor authentication (MFA) offered (such as a passkey or security key). In this case, even using the least robust form of MFA that Instagram offers — a one-time code sent via SMS — likely would have blocked the exploit: The hackers who released the video on Telegram said their exploit failed to work against any accounts that had MFA enabled.
