covid20212022
ads
ads
Wednesday, February 25, 2026
Show HN: Live iOS 26.3 exploit detection (CVE-2026-20700) – Multi-region C2 https://ift.tt/AjMsJ0Z
Show HN: Live iOS 26.3 exploit detection (CVE-2026-20700) – Multi-region C2 Public release of *ZombieHunter*, a forensics tool detecting live exploitation of CVE‑2026‑20700 (dyld memory corruption) in iOS 26.3. Analysis of sysdiagnose archives shows identical exploit shells showing different C2 endpoints: US Device 1 → 83.116.114.97 (EU/US) US Device 2 → 101.99.111.110 (CN) The rogue dyld_shared_cache slice triggers overflow via malformed `mappings_count`, executes shellcode (BL #0x15cd), and applies an AMFI bypass (`DYLD_AMFI_FAKE`) enabling unsigned code persistence. Apple PSIRT + CISA were notified; public disclosure follows. Sample: https://drive.google.com/file/d/1rYNGtKBMb34FQT4zLExI51sdAYR... SHA256 artifact: ac746508938646c0cfae3f1d33f15bae718efbc7f0972426c41555e02e6f9770 Usage: `python3 zombie_auditor.py sysdiagnose_xxx.tar.gz` (Needs capstone) Reproducible PoC confirms CVE‑2026‑20700 bypass, AMFI neutralization, and live C2 connectivity in production iOS 26.3. https://ift.tt/62Yeg0Q February 25, 2026 at 11:32PM
Tuesday, February 24, 2026
Show HN: MasqueradeORM – Memory Efficient Node ORM: Just Write Classes https://ift.tt/KgCXx98
Show HN: MasqueradeORM – Memory Efficient Node ORM: Just Write Classes https://ift.tt/ekyqx6Z February 25, 2026 at 12:41AM
Show HN: Ghist – Task management that lives in your repo https://ift.tt/gUbtJRh
Show HN: Ghist – Task management that lives in your repo https://ift.tt/Wts4IwS February 24, 2026 at 11:55PM
Monday, February 23, 2026
Show HN: EloPhanto – A self-evolving AI agent that builds its own tools https://ift.tt/bgVKYSt
Show HN: EloPhanto – A self-evolving AI agent that builds its own tools I built EloPhanto because I wanted an AI agent that could actually execute tasks on my machine with full visibility — not a black box API call. It runs locally and controls a real Chrome browser (47 tools) using your existing sessions. The standout feature: when EloPhanto encounters a task it doesn't have a tool for, it autonomously writes the Python code, tests it, reviews itself, and integrates the new tool permanently. It's now built 99+ tools for itself this way. Other features: - Multi-channel gateway (CLI, Telegram, Discord, Slack) with unified sessions - MCP tool server support (connect any MCP server) - Document & media analysis (PDF, images, OCR, RAG) - Agent email (own inbox for service signup/verification) - Crypto payments wallet (Base chain, spending limits) - TOTP authenticator (autonomous 2FA handling) - Evolving identity that learns from experience - Skill system with EloPhantoHub marketplace (28 bundled skills) It's open source (Apache 2.0), local-first, and designed to be your personal AI operating system. The project is very new — currently at 6 stars on GitHub. I'd love to get feedback on the architecture, the self-development approach, or what features you'd want in a local agent. https://ift.tt/xYzytgK February 23, 2026 at 10:28PM
Show HN: TTSLab – A voice AI agent and TTS lab running in the browser via WebGPU https://ift.tt/0vW7Tsc
Show HN: TTSLab – A voice AI agent and TTS lab running in the browser via WebGPU I built TTSLab — a free, open-source tool for running text-to-speech and speech-to-text models directly in the browser using WebGPU and WASM. No API keys, no backend, no data leaves your machine. When you open the site, you'll hear it immediately — the landing page auto-generates speech from three different sentences right in your browser, no setup required. You can then try any model yourself: type text, hit generate, hear it instantly. Models download once and get cached locally. The most experimental feature: a fully in-browser Voice Agent. It chains speech-to-text → LLM → text-to-speech, all running locally on your GPU via WebGPU. You can have a spoken conversation with an AI without a single network request. Currently supported models: - TTS: Kokoro 82M, SpeechT5, Piper (VITS) - STT: Whisper Tiny, Whisper Base Other features: - Side-by-side model comparison - Speed benchmarking on your hardware - Streaming generation for supported models Source: https://ift.tt/hB5p9ow (MIT) Feedback I'd especially like: 1. How does performance feel on your hardware? 2. What models should I add next? 3. Did the Voice Agent work for you? That's the most experimental part. Built on top of ONNX Runtime Web ( https://onnxruntime.ai ) and Transformers.js — huge thanks to those communities for making in-browser ML inference possible. https://ttslab.dev February 23, 2026 at 10:52PM
Sunday, February 22, 2026
Show HN: Drowse – Nix dynamic derivations made easy https://ift.tt/EzSsnJ3
Show HN: Drowse – Nix dynamic derivations made easy https://ift.tt/DR0xN7y February 22, 2026 at 10:18PM
Show HN: I quit MyNetDiary after 3 years of popups and built a calorie tracker https://ift.tt/EYVg35N
Show HN: I quit MyNetDiary after 3 years of popups and built a calorie tracker After three years of hitting the same upgrade popup every time I opened MyNetDiary just to log lunch, I finally gave up searching for an alternative and built one myself. The whole thing is a single HTML file. No server, no account, no login, no cloud. Data lives on your device only. You open it in a browser, bookmark it, and it works — offline, forever. The feature I'm most proud of is real-time pacing: it knows your eating window, the current time, and how much you've consumed, and tells you whether you're actually on track — not just what your total is. Free trial, no signup required: calories.today/app.html Built this for myself after losing weight and just wanting to maintain without an app trying to sell me something every day. If that sounds familiar, give the trial a shot. https://calories.today/app.html February 22, 2026 at 11:41PM
Saturday, February 21, 2026
Show HN: Blindspot – a userscript to block tab-switch detection https://ift.tt/XfMunP9
Show HN: Blindspot – a userscript to block tab-switch detection A Tampermonkey userscript that disables in-browser anti-cheat mechanisms (BlurSpy, honest-responder). https://ift.tt/ThleUYw February 21, 2026 at 09:04PM
Show HN: ClaudeUsage – macOS menu bar app to track your Claude Pro usage limits https://ift.tt/D65rhFX
Show HN: ClaudeUsage – macOS menu bar app to track your Claude Pro usage limits https://ift.tt/7qfutxe February 21, 2026 at 10:44PM
Friday, February 20, 2026
Show HN: Celeste game installs as ELF binary (42kB) on ESP32/breezybox [video] https://ift.tt/1NkwMPm
Show HN: Celeste game installs as ELF binary (42kB) on ESP32/breezybox [video] https://www.youtube.com/watch?v=nufOQWBmwpk February 21, 2026 at 12:26AM
Show HN: Flask Is My Go-To Web Framework https://ift.tt/ErlFe6V
Show HN: Flask Is My Go-To Web Framework https://ift.tt/eUgoJBS February 20, 2026 at 06:41PM
Thursday, February 19, 2026
Show HN: Hi.new – DMs for agents (open-source) https://ift.tt/VquKM8i
Show HN: Hi.new – DMs for agents (open-source) https://www.hi.new/ February 20, 2026 at 04:20AM
Show HN: Astroworld – A universal N-body gravity engine in Python https://ift.tt/MJwrvFR
Show HN: Astroworld – A universal N-body gravity engine in Python I’ve been working on a modular N-body simulator in Python called Astroworld. It started as a Solar System visualizer, but I recently refactored it into a general-purpose engine that decouples physical laws from planetary data.Technical Highlights:Symplectic Integration: Uses a Velocity Verlet integrator to maintain long-term energy conservation ($\Delta E/E \approx 10^{-8}$ in stable systems).Agnostic Architecture: It can ingest any system via orbital elements (Keplerian) or state vectors. I've used it to validate the stability of ultra-compact systems like TRAPPIST-1 and long-period perturbations like the Planet 9 hypothesis.Validation: Includes 90+ physical tests, including Mercury’s relativistic precession using Schwarzschild metric corrections.The Planet 9 Experiment:I ran a 10k-year simulation to track the differential signal in the argument of perihelion ($\omega$) for TNOs like Sedna. The result ($\approx 0.002^{\circ}$) was a great sanity check for the engine’s precision, as this effect is secular and requires millions of years to fully manifest.The Stack:NumPy for vectorization, Matplotlib for 2D analysis, and Plotly for interactive 3D trajectories.I'm currently working on a real-time 3D rendering layer. I’d love to get feedback on the integrator’s stability for high-eccentricity orbits or suggestions on implementing more complex gravitational potentials. https://ift.tt/wOhUEuP February 20, 2026 at 02:57AM
Subscribe to:
Comments (Atom)