MousePods Reverse Engineers Head Tracking Data From Stubborn AirPods

DeviceTree For Hackers: Intro

A leaked Raspberry Pi DeviceTree file reveals hardware details of the Pi Zero 3W, including a BCM2711 chip, PCIe support, a power button, an extra LED, and an eMMC option. This serves as the entry point for an intro to DeviceTree, the format that tells Linux kernels what CPU, drivers, and interfaces a board has. DeviceTree source files (.dts, .dtsi) compile into binary .dtb/.dtbo files the kernel reads, and the device-tree-compiler package handles both compiling and decompiling. The guide covers includes, base files, and overlays, recommends learning from Raspberry Pi's overlay directory and repos like Radxa and Armbian, and warns that LLMs sometimes hallucinate overlay properties.

sbom-cve-check 1.4.0 released

sbom-cve-check 1.4.0 has been released, adding an OpenVEX exporter and improving Linux kernel CVE analysis and version parsing. The new openvex export type, contributed by Andrey Zhizhikin, generates OpenVEX v0.2.0 documents with VEX assessments, configurable via a new --export-author option. Kernel CVE handling now distinguishes mainline versions like 6.12 from stable versions like 6.12.34 to reduce false positives and negatives. Version parsing also gained support for formats like 0.9~rc5 and Ubuntu-style suffixes, and build metadata like 1.25.0+4f85853f64 is now ignored per semver rules. Install or upgrade with pip install --upgrade "sbom-cve-check[extra]".

Dux: Free, open-source Wayland desktop shell with file manager and theming

A modern Linux desktop suite with beautiful widgets and powerful monitoring - optimized for niri, Hyprland, mangowm, Sway, and Miracle WM.

Distro choice doesn’t matter anymore, and that’s why 2027 is the year Linux finally goes mainstream

Picking your distro used to be the hard part, but it doesn't matter nearly as much as it once did

Show HN: STE80 Humanizer – de-AI text by writing 80% of the way to ASD-STE100

STE80 Humanizer: agent skill that removes AI tells and rewrites text 80% of the way to ASD-STE100 (Simplified Technical English), the method Andrej Karpathy shared. - Dodaios/ste80-humanizer

Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course

Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec

Locating the source of a mysterious beep with Claude

Simon Willison used Claude Code to build Beep Locator, a system that triangulates the source of an intermittent beeping sound using multiple devices as listeners. The Python web server coordinates phones, iPads and laptops over WebSockets, using Fast Fourier Transform beep detection and a chirp to align recorded clips, and Willison names the 2007 BeepBeep acoustic ranging paper as the research Claude found. The tool located the beep to within about 40cm, which turned out to be an ancient carbon monoxide detector that wanted its batteries replaced. He started with Claude Code Cloud running Opus 5.5 on his iPhone, then continued on his laptop after Fable 5.2 was released, iterating live by pushing new JavaScript to listening devices so they did not need to be manually restarted.

GTA.js, a reimplementation of the 1997 Grand Theft Auto engine in JavaScript and WebGL

Dự án GTA.js tái tạo lại engine của game Grand Theft Auto năm 1997 bằng JavaScript và WebGL, có thể chơi tại gtajs.wtf. Đây là bản reimplement chứ không phải emulator, nên một số vật lý và animation khác với bản gốc, nhưng engine nhiệm vụ chính xác dựa trên tài liệu mtd.doc. Tác giả sử dụng Gemini AI để triển khai hầu hết các tính năng, tham khảo tài liệu mở, ghi chú cộng đồng và trí nhớ cá nhân về game. Hiện tại game đã chơi được nhưng cảnh sát (cops) vẫn chưa được implement.

Lập trình viên nên đọc bài này để khám phá cách tái tạo lại engine game cổ bằng JavaScript và WebGL từ con số không.