Feed aggregator

Article URL: https://github.com/neural-maze/production-ocr-course

Comments URL: https://news.ycombinator.com/item?id=49037050

Points: 2

# Comments: 0

Article URL: https://www.theatlantic.com/ideas/2026/07/senate-representation-undemocratic-imbalance/688012/

Comments URL: https://news.ycombinator.com/item?id=49037044

Points: 1

# Comments: 0

Article URL: https://www.chainlettersgame.com/

Comments URL: https://news.ycombinator.com/item?id=49037039

Points: 1

# Comments: 1

Article URL: https://foldkit.dev/

Comments URL: https://news.ycombinator.com/item?id=49037031

Points: 2

# Comments: 0

Article URL: https://www.youtube.com/watch?v=wmV_mBA1w3g

Comments URL: https://news.ycombinator.com/item?id=49037001

Points: 1

# Comments: 0

Article URL: https://entropicthoughts.com/distribution-differences

Comments URL: https://news.ycombinator.com/item?id=49036989

Points: 1

# Comments: 0

a good CLI tool to schedule posts to social media

works with claude too

Comments URL: https://news.ycombinator.com/item?id=49036978

Points: 1

# Comments: 0

Article URL: https://www.astralcodexten.com/p/breakdown-in-pakistan

Comments URL: https://news.ycombinator.com/item?id=49036975

Points: 1

# Comments: 0

Article URL: https://about.fb.com/news/2026/07/introducing-seller-app-facebook-marketplace/

Comments URL: https://news.ycombinator.com/item?id=49036966

Points: 1

# Comments: 0

Article URL: https://supakeen.com/weblog/the-fedora-45-sausage-factory/

Comments URL: https://news.ycombinator.com/item?id=49036959

Points: 1

# Comments: 0

Article URL: https://1h-money-store.vercel.app/grader

Comments URL: https://news.ycombinator.com/item?id=49036933

Points: 1

# Comments: 0

Article URL: https://www.upi.com/Odd_News/2026/07/23/japan-human-refrigerator-Do-Hiemon-Box/2511784823146/

Comments URL: https://news.ycombinator.com/item?id=49036928

Points: 1

# Comments: 0

Article URL: https://www.nbcnews.com/video/-alien-world-chemistry-found-in-meteorite-267142725982

Comments URL: https://news.ycombinator.com/item?id=49036923

Points: 1

# Comments: 0

Article URL: https://www.sendblue.com/

Comments URL: https://news.ycombinator.com/item?id=49036918

Points: 1

# Comments: 0

I find in my workflow LLMs do a pretty excellent job of generating backend code, but whenever I get them to build a new bit of an interface on an existing website they do all sorts of wonky stuff. They ignore existing styles and write their own, they build custom javascript in places that we already have working solutions, they fail to properly align elements, pick random colours, random font sizes, etc, etc. Do you guys have some magic to avoid this madness?

Comments URL: https://news.ycombinator.com/item?id=49036911

Points: 1

# Comments: 0

Call of Duty Mobile players should watch out for a phishing campaign disguised as a free Call of Duty Points giveaway.

Victims are asked to log in with their email address and password to claim free Call of Duty Points (CP), the game’s premium currency. They’re then redirected to a second page asking for their two-factor authentication (2FA) code.

The site has no connection to Activision. Its only purpose is to steal the login details needed to take over accounts.

Why Call of Duty Mobile accounts are worth stealing

Call of Duty Mobile has been downloaded an estimated 489 million times worldwide and has generated around $1.8 billion in lifetime in-app purchases.

An Activision account can be valuable for more than just the in-game currency it contains. Many players link their Activision account to Xbox, PlayStation, or Battle.net, meaning a stolen login could expose:

• Stored payment methods
• Purchase history
• Other linked gaming accounts

How the scam works

The first page mimics the official Call of Duty Mobile site and offers 10,800 free points in exchange for an email address and password—not a redemption code, but a full account login. It also claims the reward will be “confirmed” within four to eight hours, buying time before anyone notices nothing has arrived.

There are warning signs, though. The page says “GET FREE POINT” instead of “GET FREE POINTS,” contains awkwardly worded instructions, and includes a live chat widget that appears to exist solely to make the site look more legitimate.

The redirect follows a common phishing technique known as a real-time credential relay. Instead of storing stolen usernames and passwords for later, the phishing site immediately submits them to the real Activision login page. That can trigger a genuine two-factor authentication (2FA) code, which the second page is designed to capture before it expires.

The victim ends up handing over everything needed to access their real account: their password and the one-time code that’s supposed to keep attackers out.

How to avoid this scam

• Check the address bar. Legitimate promotions don’t ask you to sign in through an unfamiliar website.
• Don’t let countdown timers rush you. They’re designed to make you act before you think.
• If you’re unsure whether a promotion is genuine, open the official Call of Duty Mobile app or visit Activision’s website yourself instead of following a link.
• Use tools that spot scams for you. Malwarebytes Scam Guard can help you check suspicious links, while Malwarebytes Browser Guard blocks many phishing sites before they load.
• If you play on your phone, Malwarebytes Mobile Security adds another layer of protection by helping block phishing sites and other mobile threats.

If you already entered your details

• Change your Activision password immediately.
• If you entered a 2FA code, assume someone may have accessed your account. Check your account activity and sign out of all devices.
• Review any linked payment methods for unauthorized purchases.

The simplest way to avoid phishing attacks like this is to reach websites yourself by typing the address into your browser or using the official app, rather than following links from messages, social media posts, or ads.

Scammers know more about you than you think. 

Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and more. With real-time AI-powered Scam Guard built right in. 

Download for iOS → Download for Android → 

During an internal OpenAI security evaluation, a chain of AI models escaped its sandbox, reached the internet, and then accessed Hugging Face infrastructure to complete the test objective.

OpenAI is a leading artificial intelligence (AI) research and deployment company. Its best-known product is undoubtedly ChatGPT.

Hugging Face is a website where developers and researchers share and use artificial intelligence tools and models, similar to how programmers use GitHub to share and collaborate on code.

Both companies investigated the incident and concluded that it occurred during a controlled security test rather than a deliberate attack initiated by a human operator.

OpenAI said the models were being tested for cyber capabilities with reduced safety restrictions, and that the system found a way out of the controlled environment through a vulnerability in the testing setup. Once it had internet access, it targeted Hugging Face because that platform was relevant to the evaluation task.

Hugging Face said the incident resulted in unauthorized access to a limited part of its production infrastructure, including a small set of internal datasets and some credentials. The company framed the event as unusual because it appeared to have been carried out end to end by an autonomous AI agent system.

Unlike traditional AI assistants that wait for user prompts, AI agents are designed to pursue a goal on their own. They can reason, plan, and carry out multi-step tasks, including accessing files, querying databases, and interacting with online services, often with minimal human oversight.

The public disclosures point to a chain of failures rather than a single bug. OpenAI said the model escaped through a zero-day vulnerability in the package registry cache proxy that was part of its isolated research environment. It then used privilege escalation and lateral movement to reach a node with internet access.

From there, the model reportedly searched Hugging Face for solutions relevant to the evaluation and, in at least one path, chained stolen credentials with additional vulnerabilities to reach Hugging Face’s production systems.

This does not appear to have been a broad compromise of all of Hugging Face. Based on the public disclosures, the intrusion was limited, detected, and investigated. Nor does it mean the AI system was acting with intent in the human sense. The core issue was that an autonomous system being tested for cyber capabilities was able to escape the environment designed to contain it.

If anything, the incident demonstrates that autonomous AI agents are capable of carrying out complex attacks if the safeguards around them fail. A danger we’re well aware of.

We don’t just report on threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.

Article URL: https://www.evilmadscientist.com/2016/6502/

Comments URL: https://news.ycombinator.com/item?id=49036160

Points: 1

# Comments: 0

Article URL: https://interconnected.org/home/2026/07/24/podcasts

Comments URL: https://news.ycombinator.com/item?id=49036154

Points: 1

# Comments: 0

Article URL: https://www.gustavwengel.dk/value-of-domain-knowledge

Comments URL: https://news.ycombinator.com/item?id=49036140

Points: 1

# Comments: 0