Wiring Designers Into Your EAS Preview Loop
TL;DR Figma reviews miss everything that's a function of the real device — touch targets, scroll momentum, keyboard behavior, font substitution, dark-mode tr...
💻
Programming & Dev News
The best programming and software engineering content — tutorials, open source releases, language updates and developer tools. Curated from Hacker News, Dev.to, Smashing Magazine, GitHub Blog and more.
93 articles · Updated 2 min ago · Browse all categories
Hello World! 👋 I'm Pablo, Android Dev & Creator of Aura Finance
Hi everyone! 👋 I’m Pablo Martín, a Mobile Engineer and Android Architect based in Spain. For over 5 years, I’ve been building, scaling, and leading native A...
Nginx Proxy Manager on Your Home Lab: Performance Tuning Beyond the Defaults
TL;DR: Nginx Proxy Manager ships with one goal: get a reverse proxy with Let's Encrypt certs running in under ten minutes. It delivers on that. 📖 Reading ti...
The bug wasn't in my AI agent
It was in the way I was debugging it. I spent hours trying to figure out why an agent kept choosing the wrong tool. So I did what most of us would do. I chec...
My GSoC 2026 Mid-Term: How Building Webpack's Blog Led Me to Patch Node.js Core Tools 👀
Halfway through Google Summer of Code 2026 🤦🏻♂️ Time flies when you are deeply immersed in AST parsers, metadata extraction, and architectural decisions. ...
Egypt fans react to emotional World Cup exit after unforgettable campaign
Al Jazeera spoke with Egypt fans gathered at Obour City to watch the FIFA World Cup Round of 16 match against Argentina.
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Article URL: https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/ Comments URL: https://news.ycombinator.com/item?i...
a software engineering interview question I like: computing the median
Comments
Ad
Chinese DoorDash rival smashes open source record with 1.6-trillion-parameter LLM with a 1-million-context-token model crafted without Nvidia hardware
Meituan released LongCat-2.0, a 1.6-trillion-parameter model trained entirely on domestic chips, avoiding Nvidia hardware entirely.
NBA execs react to the shocking Jaylen Brown trade...
How execs view the 76ers' deal for Jaylen Brown, and why the star's value was lower than most thought.
Here's Why Code Review Is Having Trouble Scaling to the AI Era
Code review was built for a world where the supply of code was bounded by how fast a person could write it. That world is over, and the tools built to keep p...
Data centers’ energy demand threatens Trump’s “Made in America” plan
Squeeze on Rust Belt electricity bills threatens Trump’s manufacturing plan.
Android’s July 2026 Google System Update: What Users Should Know
Google’s July Play services update improves Google One purchases, adds Wear OS work profile support, and expands Android developer tools. The post Android’s ...
Building a Low-Latency AI Tutoring Platform With FastAPI and WebSockets
Traditional HTTP architecture breaks down under the heavy concurrent load required by real-time AI tutors. This article provides a comprehensive software eng...
An Open Source Tool for Safely Analyzing Exposed Modbus PLCs
Active scanning tools like nmap can easily crash fragile, legacy industrial hardware. MEA (Modbus Exposure Analyzer) solves this by passively monitoring raw ...
Why the rise of open source AI isn’t hurting Anthropic … yet
Open source models’ success isn’t coming at the expense of frontier labs. Instead, they each seem to capture two phases of the same life cycle.
Ad
227 Blog Posts To Learn About Angular
Visual MCP Gateway Earns a 47.66 Proof of Usefulness Score by Building a Unified AI Chat Interface
This interview profiles Visual MCP Gateway, an open source project built for the Proof of Usefulness Hackathon. The tool uses Anthropic's Model Context Proto...
Your Rust Service Isn't Leaking — It Could Be the Allocator
Comments
The Camp Snap CS-8 made a special appearance at Taylor Swifts wedding. Heres how to snag one for yourself.
Spotted at Taylor Swift's wedding: The Camp Snap CS-8 Digital Video Camcorder is available to buy for $199.
Show HN: Rowboat – Open-source, local-first alternative to Claude Desktop
Claude’s desktop app is brilliant, but for our own daily work we kept wanting it to be less like a chat app and more like a full-fledged work app. Rowboat is...
Anthropic's Claude Cowork heads to the cloud as data shows 90% of sessions aren't for coding
Claude Cowork is moving to web and mobile, and new data shows it's being used far beyond coding and software development. Can it safely replace OpenClaw for ...
Q1 2026 Innovation Graph update: Open source collaboration is accelerating worldwide
New Innovation Graph data shows global developer communities growing faster than ever, with collaboration reaching new highs across many economies. The post ...
Anthropic brings Claude Cowork to mobile and web as usage data shows most users aren’t coding
Anthropic on Tuesday launched Claude Cowork on mobile and web, expanding a tool that has quietly become the company's bridge between the developer-centric wo...
Ad
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.
The FBI and Google just took down a botnet that hijacked 2 million smart TVs
The Popa botnet relied on a malicious software development kit embedded in low-cost Android-based devices, including smart TVs and streaming boxes, as well a...
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have show...
The GitHub Actions Attack Pattern Your CI Security Scanners Miss
ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and...
‘GitLost’ vulnerability let GitHub’s AI workflows leak private repositories
Researchers at artificial intelligence security company Noma Security Inc. today disclosed a critical prompt injection vulnerability in GitHub Inc.’s new Age...
Free Dropbox Client Maestral Will Eventually Stop Working
Maestral, the free lightweight open-source Dropbox client for Mac, has been retired, according to the project's maintainer, Sam Schott. Over its seven-year l...