2025-07-09

41 篇热帖

1. Supabase MCP can leak your entire SQL database (www.generalanalysis.com)

In this post, we show how an attacker can exploit Supabase’s MCP integration to leak a developer’s private SQL tables. Model Context Protocol (MCP) has emerged as a standard way for LLMs to interact with external tools. While this unlocks new capabilities, it also introduces new risk surfaces.

5. IKEA ditches Zigbee for Thread going all in on Matter smart homes (www.theverge.com)

With more than 20 Matter-over-Thread smart devices set to launch next year, Ikea is switching things up as it looks to make the smart home simpler and more affordable.

6. Most RESTful APIs aren't really RESTful (florian-kraemer.net)

When talking about REST, it is worth reading the dissertation of Roy Thomas Fielding. The original paper that describes RESTful web, “Architectural Styles an...

8. Phrase origin: Why do we "call" functions? (quuxplusone.github.io)

On StackExchange, someone asks why programmers talk about “calling” a function. Several possible allusions spring to mind:

Calling a function is like calling on a friend — we go, we stay a while, we come back. Calling a function is like calling for a servant — a summoning to perform a task. Calling a function is like making a phone call — we ask a question and get an answer from outside ourselves.

The true answer seems to be the middle one — “calling” as in “calling up, summoning” — but indirectly, originating in the notion of “calling for” a subroutine out of a library of subroutines in the same way that we’d “call for” a book out of a closed-stack library of books.

9. Bulgaria to join euro area on 1 January 2026 (www.ecb.europa.eu)

The European Central Bank (ECB) is the central bank of the European Union countries which have adopted the euro. Our main task is to maintain price stability in the euro area and so preserve the purchasing power of the single currency.

10. Smollm3: Smol, multilingual, long-context reasoner LLM (huggingface.co)

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

11. US court strikes down 'click-to-cancel' rule designed to make unsubscribing easy (www.theguardian.com)

Rule would have kept businesses from forcing customers through lengthy chats or other barriers to cancellation

12. Solar power has begun to transform the world’s energy system (www.newyorker.com)

In the past two years, without much notice, solar power has begun to truly transform the world’s energy system, Bill McKibben writes.

13. US Court nullifies FTC requirement for click-to-cancel (arstechnica.com)

FTC failed to follow rulemaking process required by US law, judges rule.

14. RapidRAW: A non-destructive and GPU-accelerated RAW image editor (github.com)

A beautiful, non-destructive, and GPU-accelerated RAW image editor built with performance in mind. - CyberTimon/RapidRAW

16. A fast 3D collision detection algorithm (cairno.substack.com)

Make your separating axis tests 5x faster with this one weird trick!

17. Xenharmlib: A music theory library that supports non-western harmonic systems (xenharmlib.readthedocs.io)

Xenharmonic (adj.): Pertaining to music which sounds unlike that composed in the familiar 12 tone equal-tempered scale. Ivor Darreg, Xenharmlib is a generalized music theory library that supports t...

18. GlobalFoundries to Acquire MIPS (mips.com)

Acquisition will expand GF portfolio with cutting-edge RISC-V processor IP and software tools for real-time computing in autonomous mobility, industrial automation, datacenter and intelligent edge applications MALTA, N.Y., and San Jose, Calif., July 8, 2025 – GlobalFoundries (Nasdaq: GFS) (GF) today announced a definitive agreement to acquire MIPS, a leading supplier of AI and processor […]

20. SUSE launches new European digital sovereignty service to meet surging demand (www.zdnet.com)

With SUSE's help, European companies and governments can ensure their IT support, software, and data assets are safe.

21. Fundamentals of garbage collection (2023) (learn.microsoft.com)

Learn how the garbage collector works and how it can be configured for optimum performance.

22. Frame of preference A history of Mac settings, 1984–2004 (aresluna.org)

A story of early Mac settings told by 10 emulators.

23. Where can I see Hokusai's Great Wave today? (greatwavetoday.com)

Where can I see Hokusai's Great Wave today?

25. Springer Nature book on machine learning is full of made-up citations (retractionwatch.com)

Would you pay $169 for an introductory ebook on machine learning with citations that appear to be made up? If not, you might want to pass on purchasing Mastering Machine Learning: From Basics to Advanced, published by Springer Nature in April.  Based on a tip from a reader, we checked 18 of the 46 citations…

28. Florida is letting companies make it harder for highly paid workers to swap jobs (www.businessinsider.com)

Lobbyists for the law said it would protect trade secrets and invite high-paying companies to Florida.

31. Astro is a return to the fundamentals of the web (websmith.studio)

Why Astro is perfect for content-driven sites: island architecture, zero JS by default, and blazing-fast performance.

32. Nuclear Waste Reprocessing Gains Momentum in the U.S. (spectrum.ieee.org)

U.S. federal funding and directives are driving innovation in nuclear waste reprocessing in an attempt to close the nuclear fuel cycle.

33. Helm local code execution via a malicious chart (github.com)

GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.

34. Monorail – Turn CSS animations into interactive SVG graphs (muffinman.io)

Monorail turns any CSS keyframe animation into an interactive graph

35. Exposing a web service with Cloudflare Tunnel (2022) (erisa.dev)

What if you could host a web service with no ports exposed? With Cloudflare Tunnel, you can!

36. Nvidia Becomes First Company to Reach $4T Market Cap (www.cnbc.com)

Nvidia topped a $4 trillion market cap for the first time as investors bet on the tech giant that's building the hardware for the generative AI boom.

37. Systemd has been a complete, utter, unmitigated success (blog.tjll.net)

Eleven init systems enter, one init system leaves.

38. Libpostal: C library for parsing/normalizing street addresses around the world (github.com)

A C library for parsing/normalizing street addresses around the world. Powered by statistical NLP and open geo data. - openvenues/libpostal

39. Show HN: A rain Pomodoro with brown noise, ASMR, and Middle Eastern music (forgetoolz.com)

Rain Pomodoro: free online study timer with rain sounds and brown noise for focus. ASMR triggers, ambient music and animated rain effects.

40. Dict Unpacking in Python (github.com)

can we have dict unpacking in python? Contribute to asottile-archive/dict-unpacking-at-home development by creating an account on GitHub.