HackerNews Digest

GhostLock (CVE‑2026‑43499) is a stack‑UAF kernel flaw introduced in Linux 2.6.39 (2011) and fixed in 7.1 (2026). It requires only CONFIG_FUTEX_PI=y and no special privileges. The bug stems from remove_waiter() clearing current‑>pi_blocked_on instead of waiter‑>task‑>pi_blocked_on during a proxy‑lock rollback in rt_mutex, leaving a dangling pointer to a waiter’s stack frame. An attacker creates a PI futex deadlock cycle with three threads using FUTEX_WAIT_REQUEUE_PI, FUTEX_CMP_REQUEUE_PI and a chain of PI futexes, forcing the -EDEADLK path and exposing the dangling pointer. The freed stack is reclaimed via PR_SET_MM_MAP, which copies a user‑supplied auxv onto the same stack depth, forging a fake rt_mutex_waiter containing controlled fields (task = &init_task, lock = &inet6_protos[IPPROTO_UDP]‑8). This yields an arbitrary‑address write that overwrites inet6_protos[IPPROTO_UDP] with a crafted function pointer. Combined with a prefetch‑based KASLR leak, CEA spraying to locate the CPU entry area, and a UDP packet trigger, the exploit achieves reliable privilege escalation and container escape, earning a $92 k kernel‑CTF prize.

A chronological catalogue of cyber‑punk illustrated works highlights the genre’s evolution from early French sci‑fi graphics to modern Japanese manga. 1975’s *The Long Tomorrow* (Dan O’Bannon & Moebius) introduced noir‑detective tropes that prefigured Blade Runner and Neuromancer. Katsuhiro Otomo’s *Akira* (1982‑90) expanded dystopian, anarchic motifs across six volumes. Marvel’s *Blade Runner* comic (1982) adapts the film with added narration, while Peter B. Gills & Mike Saenz’s *Shatter* (1985‑88) is the first fully digital comic, densely packed with cyber‑punk conventions. Masamune Shirow’s *Dominion* (1986) and the *Ghost in the Shell* manga series (1989‑97) explore cybernetics, AI, and a polluted megacity. Scott Rockwell’s *Cyberpunk* books (1989‑90) depict early virtual‑reality “Playing Field” concepts. Yukito Kishiro’s *Gunnm* (1990‑95) and its side story *Haisha* (1998) blend post‑apocalyptic settings with cyborg bounty‑hunting. Marvel’s *RoboCop* comics (1990‑92) amplify cyber‑netic and cloning themes. Bruce Wagner’s *Wild Palms* (1990‑93) examines VR‑driven mind control, while Warren Ellis’s *Transmetropolitan* (1997‑2002) fuses gonzo journalism with transhumanist dystopia. Later entries—*Eden* (1998‑2008), *Blame!* (1996‑2003), *NOiSE* (2000‑01), and *Gunslinger Girl* (2002)—continue the focus on AI, robotics, surveillance, and the social impact of cyber‑enhancement.

The page, titled “Tiny Emulators,” presents a section labeled “Ancient Civilizations (KC85/4)” and includes a UI overview. It references visual material, specifically “Image 1,” though no description of the image is provided. The content appears to focus on a compact emulator implementation for the KC85/4 system, highlighting its user‑interface aspects and accompanying graphics. No additional textual information, technical specifications, or functional details are included in the excerpt.

None

The guide outlines a self‑study pathway for physics. It recommends non‑speculative popular books (e.g., by Frank Close or Richard Feynman) to maintain perspective, and ranks them by difficulty. Required mathematical background includes high‑school algebra, geometry, trigonometry and pre‑calculus; calculus is learned during undergraduate courses. No formal biology or chemistry prerequisites are needed, though optional refresher courses are suggested (Khan Academy). Study strategies emphasize identifying one’s learning style, thorough reading, extensive note‑taking, and summarizing concepts before progressing. Mastery is achieved through solving textbook problems; reliance on answer keys is discouraged because they lack step‑by‑step reasoning, and solutions can be located online if needed. The curriculum reflects typical undergraduate and graduate physics programs, which focus on lectures, textbooks, and homework rather than laboratory work, with research and thesis components introduced at the PhD level. The listed textbooks correspond to those used in top physics curricula worldwide.

The author purchased an ESP32‑Nano dev board, added an LCD and a BME280 sensor via I²C, then decided to replace the breakout module with a custom PCB. Using KiCad (free, GPL) on macOS, they recreated the sensor’s I²C schematic from the BME280 datasheet and assigned footprints—choosing 0805 SMD parts for hand soldering. After routing the single‑layer board, they filled ground on both sides and added vias for connectivity. Components (resistors, capacitors) were sourced from DigiKey; the BME280 chip was reclaimed from the original Amazon breakout due to stock shortages. Gerber and drill files were exported and ordered from JLCPCB for under $10, with a 2–3 week delivery. Assembly used a Hakko FX‑888DX soldering iron (≈650 °F) and a Quick 861DW hot‑air station (250 °C, low airflow) for SMD paste reflow, taking about 15 minutes. The finished board plugged into the existing firmware without modification, confirming the design, routing, and grounding were correct and providing confidence for future, more complex integrated boards.

An RCGS‑led expedition using a remotely operated vehicle from the Woods Hole Oceanographic Institution’s submersible Alvin captured the first underwater images of the ship Quest, Ernest Shackleton’s final vessel, at about 400 m depth in the Labrador Sea’s Hawke Channel. Side‑scan sonar located the wreck in 2022; the new ROV footage shows the stern entangled in trawl nets, causing damage beyond what natural burial would have produced. Distinctive portholes below the bridge confirm the identity as Quest, which sank in 1962 after ice crushed its hull, though all crew survived and the seal‑pelt cargo was lost. The ship’s history includes use as a 1920s Antarctic exploration vessel, a WWII minesweeper, and later a Norwegian seal‑hunting boat. The mission, costing several million dollars, also aims to create a 3D digital twin of the wreck and its ~300 m debris field. After completing work on Quest, the team will proceed to the southern tip of Greenland to investigate the Terra Nova wreck, famed for Robert Falcon Scott’s 1912 South‑Pole expedition.

None

None

The 1970 Plymouth Hemi ‘Cuda, built on Chrysler’s new E‑body platform (shared with the Dodge Challenger), was the first Barracuda able to accommodate the 426 Hemi V8. The 426 Hemi, originally a 1964 NASCAR racing engine, was street‑rated at 425 hp and 490 lb‑ft (actual output often higher) and featured hemispherical combustion chambers, large opposed valves, and a central spark plug for superior airflow and combustion efficiency. Power was delivered through dual four‑barrel carburetors on a cross‑ram intake, with either a four‑speed manual or TorqueFlite automatic transmission, yielding quarter‑mile times in the mid‑13‑second range (potentially low‑12s). Styling emphasized aggression: a shaker hood scoop, bold “High Impact” colors (e.g., Tor‑Red, Lemon Twist), and distinctive hockey‑stick side stripes. Production was extremely limited—652 hardtops and 14 convertibles—making the model one of the rarest American muscle cars; a 1970 convertible fetched $3.5 million at auction in 2014. The Hemi ‘Cuda epitomized the peak of the muscle‑car era, embodying extreme performance, distinctive design, and cultural defiance just before regulatory and economic forces curtailed such vehicles.