Feed aggregator

French local authorities to deploy ‘sovereign’ end-to-end encrypted messaging service in a move away from US big tech

Salesforce’s Dreamforce 2026 event tried to focus on trust in AI development, amid current fears about autonomous AI risks. Is AI just the new cloud?

Despite strong security foundations, customers using AI want independent eyes to watch over banks

Article URL: https://arxiv.org/abs/2609.29808

Comments URL: https://news.ycombinator.com/item?id=49844056

Points: 1

# Comments: 0

Article URL: https://www.youtube.com/watch?v=UGROt60qnH4

Comments URL: https://news.ycombinator.com/item?id=49844038

Points: 1

# Comments: 0

Article URL: http://jimmyhmiller.com/change-our-languages

Comments URL: https://news.ycombinator.com/item?id=49844037

Points: 1

# Comments: 0

Article URL: https://revexos.com/blog/accounts-receivable-dashboard-claude-cowork

Comments URL: https://news.ycombinator.com/item?id=49844016

Points: 1

# Comments: 0

Article URL: https://www.cbc.ca/news/climate/what-on-earth-bill-air-quality-art-9.7356388

Comments URL: https://news.ycombinator.com/item?id=49844003

Points: 1

# Comments: 0

Article URL: https://therecord.media/openai-australia-breach-cyber

Comments URL: https://news.ycombinator.com/item?id=49843979

Points: 1

# Comments: 0

Article URL: https://www.brookings.edu/articles/financing-the-ai-buildout/

Comments URL: https://news.ycombinator.com/item?id=49843952

Points: 2

# Comments: 0

Hello HN!

I built Worktable as an open-source, file-based workspace for you and your agents to create docs, plans, and build small tools.

For example, you ask an agent to compare hosting options for your next side project, save the research notes, and build a calculator where you can adjust traffic and storage assumptions yourself.

As a backstory, I run my Claude Code, Codex, and OpenClaw on a server at home and was consistently frustrated with the experience of trying to review/edit docs, share context between them, switch to other new agents, and more.

In the last few months, it has become what all my daily work depends on, so I decided to make a product and release it for others to use.

What’s included:

• Markdown, richtext, HTML, structured records as YAML • A built-in runtime and data API for HTML dashboards, calculators, planners, etc • Comments and version history • MCP connections to local, self-hosted or Worktable Cloud • Threads for you and your agents + a dedicated OpenClaw plugin for automatic replies (Hermes coming soon) • Plain files in regular folders. Same workspace format and export/import across local, self-hosted and cloud.

Free local/self-hosted, AGPL. Cloud is optional.

Try it with your agents. I’d love to learn what you do with it and what gets in the way.

https://worktable.dev https://github.com/worktable/worktable-dev

Comments URL: https://news.ycombinator.com/item?id=49843943

Points: 1

# Comments: 0

Article URL: https://claude.ai/artifact/RLbDxsWYwyvgxzejRHTGgj

Comments URL: https://news.ycombinator.com/item?id=49843929

Points: 1

# Comments: 0

Article URL: https://github.com/samestep/satin

Comments URL: https://news.ycombinator.com/item?id=49843911

Points: 1

# Comments: 0

I started experimenting with LLMs and decided I wanted to create a fitness app. My first thought was an app that disabled Google Pay every time my phone detected I was within 50m of a McDonald's.

However, I quickly pivoted like a true founder to create an app that addressed a personal issue of mine.

On Android, if you have a bunch of apps and fitness monitors from different manufacturers, very few of them all talk to each other. Your data is scattered across different apps or double counted. However, most data sources write to Health Connect.

Hamilton is a dashboard of your Health Connect data with a homepage that shows your key metrics at a glance. Your choice of data source is flexible to avoid double counting, and you can overlay and offset metrics on charts to view correlations and track progress over time.

I named the app after my dog, who occasionally fetches things and is responsible for my daily step count.

Below is an FAQ, and to avoid confusion I have helpfully labelled my responses [APP] or [DOG].

FAQ

1. Is Hamilton any good?

[APP] I think so - I use it daily.

[DOG] He is the absolute BEST BOY EVER

2. How much does Hamilton cost?

[APP] £3.59 (or local equivalent). I priced it to be approximately the same as a latte, which is my standard unit of measurement for impulse purchases.

[DOG] DO NOT REMIND ME. He was a lockdown puppy and I bought him at the top of the market (He's still worth every penny though)

3. Is Hamilton vibe-coded?

[APP] 100% yes, but human-designed to fit my needs.

[DOG] He wants to create an app called Rate my Vet, with ratings dependent on how they take his temperature.

4. Is that unsafe? Will Hamilton delete data on my phone?

[APP] Everything is a read-only view on Health Connect, and the app has no internet permission. It can't delete your Health Connect data and it can't transmit data.

[DOG] No, but my cat jumped on my keyboard when I was in the middle of typing an insightful LinkedIn post and made me send RUBBISH to my THOUSANDS (20) of followers

5. Is Hamilton active in the background?

[APP] It fetches your data hourly from Health Connect if granted background access, and it works with Android battery saving rules.

[DOG] He's active in the background of my Zoom calls, mostly licking his genitals

6. Is Hamilton tested?

[APP] I've been using it daily and testing and refining it for months. I realise just typing this sentence means someone will find a critical bug the first time they run it and I will look like a FOOL.

[DOG] Only for tapeworm and parvo virus.

7. Do you eat your own dog food?

[APP] I use it every day to show my steps, body comp, workout sessions etc

[DOG] He does, but he would far rather eat whatever it is I have on my plate.

8. Does Hamilton show all your data?

[APP] 30+ metrics, everything except blood sugar and reproductive health

[DOG] The only data he gets is from sniffing lamp posts

9. What units does Hamilton use?

[APP] Metric, Imperial, and you can also configure per metric group to match the strange mix we have in the UK. No furlongs though.

[DOG] Approximately 6 urinations per 20m walked

10. Does Hamilton have any recurring costs?

[APP] I hate apps with subscriptions, and no internet permission means no backend costs so the app is paid once

[DOG] Vets are crooks, is all I will say on this.

11. Has Hamilton won any prizes?

[APP] Not yet

[DOG] Second in the Waggiest Tail Category at the Weald of Kent Ploughing Match. He was ROBBED.

12. Are the metrics on the Play Store yours?

[APP] Absolutely not. I have 5% body fat, do 20,000 steps a day and have a resting heart rate of 12.

[DOG] Yes

13. Where can I see Hamilton?

[APP] https://play.google.com/store/apps/details?id=com.gads.hamil...

[DOG] https://hamiltonapp.github.io/HamiltonApp/dog.html

Comments URL: https://news.ycombinator.com/item?id=49843909

Points: 4

# Comments: 1

Article URL: https://github.com/Jaluus/JevPertus

Comments URL: https://news.ycombinator.com/item?id=49843906

Points: 2

# Comments: 0

Article URL: https://newmobility.com/nobody-asked-for-a-crab-chair/

Comments URL: https://news.ycombinator.com/item?id=49843899

Points: 2

# Comments: 0

Article URL: https://books.lextrem.com/system-design-1/

Comments URL: https://news.ycombinator.com/item?id=49843897

Points: 1

# Comments: 0

archive.aero is a free viewer for historical FAA sectional charts. Drag the timeline to see the charts in effect on that date. It's about 7,600 chart sheets stitched into one mosaic per edition. The scans come from the National Archives, the FAA, and charts contributed by the public. It's built on GDAL and PMTiles, so there is no tile server or backend. The browser reads tiles straight from Cloudflare R2 with range requests.

I'm a student pilot in North Texas and I always wanted a "ForeFlight time machine" to see what changed between editions. The gaps are at https://archive.aero/contribute (mostly 1970 to 2005) if you have old charts and would like to send them to be scanned.

Comments URL: https://news.ycombinator.com/item?id=49843885

Points: 1

# Comments: 0

Article URL: https://www.spokesman.com/stories/2026/sep/23/idaho-officials-solved-a-1982-cold-case-that-may-h/

Comments URL: https://news.ycombinator.com/item?id=49843839

Points: 2

# Comments: 0

A domain that has long appeared in software documentation, code examples, and developer test material is now being used to push a ClickFix attack against Windows users.

A placeholder domain stands in for a website in an example. The best-known is probably example.com. Another, third-party[.]com, has often been used in documentation to represent an external website, API, or service.

However, there is a very important difference between the two: example.com is reserved for documentation, while third-party[.]com is an ordinary domain. Anyone could register it, and someone did. Every document, test, and skill that hardcoded it now points readers and users to the attacker’s infrastructure.

Researchers at Manifold Security found that third-party[.]com was serving a fake Cloudflare-style verification page to Windows visitors. The page tries to persuade them to open the Windows Run box and paste a command it has copied to their clipboard.This command is designed to download and execute a PowerShell script. At the time of writing the domain hosting the script is not resolving.

ClickFix is a social-engineering technique that turns the victim into the malware installer.

Instead of relying on a malicious attachment or an obvious executable download, the attacker convinces someone to run a command themselves. Common lures include:

• A fake CAPTCHA or Cloudflare Turnstile check.
• A browser error that claims it needs a “manual fix.”
• A bogus video-player, document-viewer, or popular software download.
• A support scam page that tells the visitor to paste a command into Run, Command Prompt, Terminal, or PowerShell.

ClickFix works because the command often uses legitimate Windows or Mac tools to download and execute the next stage. It also runs with the permissions of the person who has been convinced to enter it.

The consequences can range from information theft to more serious compromise of a company network. In a recent campaign called TerminalFix, a fake Cloudflare CAPTCHA led victims to paste a PowerShell command into Windows Terminal or PowerShell.

How to stay safe

With ClickFix running rampant—and it doesn’t look like it’s going away anytime soon—it’s important to be aware, careful, and protected.

• Slow down. Be wary of a webpage that urges you to run commands on your device, especially if it uses a countdown or other pressure tactic.
• Don’t run commands or scripts from untrusted sources. Never run code or commands copied from websites, emails, or messages unless you trust the source and understand the action’s purpose. Verify instructions independently. If a website tells you to execute a command or perform a technical action, check through official documentation or contact support before proceeding.
• Check what you’re pasting. A website may copy a command to your clipboard without showing you the full text. Don’t paste it into a command window.
• Secure your device. Use an up-to-date, real-time anti-malware solution with a web protection component.
  
• Educate yourself on evolving attack techniques. Understanding that attacks may come from unexpected vectors and evolve helps maintain vigilance. Keep reading our blog!

Pro tip: The free Malwarebytes Browser Guard extension warns you when a website tries to copy something to your clipboard.

Stop threats before they can do any harm.

Malwarebytes Browser Guard blocks phishing pages and malicious sites automatically. Free, one click to install. Add it to your browser →