Skip to content
devup↗
Site language
TürkçeEnglish

Edition #5 · 2026-10-18

NIST elliptic curve seeds, DeepSeek V4.1 and Linux kernel vulnerabilities

This edition covers the cracked NIST elliptic curve seeds, DeepSeek V4.1-Flash, a Linux kernel KVM escape vulnerability, and interactive refactoring in gopls.

  1. SecurityLobsters

    Origin of NIST elliptic curve seeds finally solved

    Anthropic researchers have uncovered how the seeds for the NIST elliptic curves (P-192, P-224, P-256, P-384, and P-521), published in 2000, were generated. The team proved that rather than being hashes of arbitrary sentences, the parameters came from the POSIX-standard drand48 random number generator seeded with UNIX timestamps from 1997 and 1998. The researchers reimplemented the generation algorithm in Go to verify the claim and donated the bounty to ISRG.

    Read original
  2. AIHacker News

    DeepSeek releases DeepSeek-V4.1-Flash-1017 update

    DeepSeek has introduced DeepSeek-V4.1-Flash-1017, a minor update delivering improvements across reasoning, coding, agentic tasks, and visual benchmarks. The model reduces task execution time and output length to enable faster completion at lower cost. Featuring 763 billion parameters under the MIT license, the release is accompanied by a self-contained Python reference implementation and a set of Rust libraries for prompt formatting and token encoding.

    Read original
  3. SecurityLobsters

    Critical guest-to-host KVM escape vulnerability found in Linux networking

    During a sandbox security challenge, researchers discovered a critical vulnerability (CVE-2026-99999) in the Linux networking stack leading to a full guest-to-host KVM escape. The flaw allowed guest-controlled checksum metadata to rewrite an IPv4 header after the kernel had already validated it. Because the vulnerability originated in the Linux kernel rather than a specific hypervisor configuration, it impacted numerous hypervisor and sandbox environments.

    Read original
  4. SoftwareLobsters

    Interactive refactoring introduced in gopls language server

    The Go team has released gopls v0.24.0 with interactive refactoring support, powered by a proposed extension to the Language Server Protocol (LSP). Designed as an open standard for all programming languages, the new capability allows language servers to trigger dynamic, multi-step dialogs that collect user input before computing text edits. This enables long-awaited transformations such as custom struct tag configuration and declaration moving directly within editors like VS Code.

    Read original
  5. SoftwareHacker News

    Commodore 64 hardware simulator models motherboard pin-by-pin

    Developed as an intimate hardware learning and debugging tool, c64-hw-sim simulates the Commodore 64 motherboard pin by pin. The program models the netlist and chip behaviors so developers can lift chip legs, short pins to ground or power, or pull chips from sockets, observing the resulting screen garbage and bus signals without risking physical hardware. It runs on macOS and Linux using OpenGL, executing at a fraction of real-time speed.

    Read original
  6. ToolsHacker News

    Esp32sim runs ESP32 microcontroller firmware directly in the browser

    Written in Rust, esp32sim provides instruction-level emulation for four ESP32 SoCs across Xtensa and RISC-V architectures, running entirely in the browser via WebAssembly. The emulator boots the mask ROM, second-stage bootloader, and unmodified FreeRTOS application images without requiring patched firmware or cloud services. It models core peripherals, displays, and virtual Wi-Fi access points to let developers test embedded projects end-to-end locally.

    Read original
  7. ToolsHacker News

    Pele renders Mermaid diagrams into themeable SVG

    Pele is a lightweight open source library that renders Mermaid diagrams into SVG graphics themed with CSS variables. It allows color and font modifications to apply instantly without re-rendering.

    Read original
  8. Open sourceHacker News

    Lean proof assistant ships with verified kernels

    Lean v4.35.0 introduces the lake check command and ships with four additional kernels, including formally verified implementations. This update helps eliminate implementation bugs by rechecking developments across multiple independent verifiers.

    Read original
  9. SoftwareLobsters

    GNOME OS Preview launched for broader desktop use

    The GNOME project has launched GNOME OS Preview, building an edition directly from stable GNOME releases rather than nightly developer builds. It brings hardware memory optimizations and new testing tools to a wider audience.

    Read original
All editions →