Delhi-Kathmandu bus service suspended for two days

Gill clears air on Siraj's fitness, says pacer is not carrying an injury

Questions arose over Mohammed Siraj's fitness during the recent Test after he bowled at reduced pace and used a shorter run-up. Concerns deepened when Siraj landed heavily while attempting a catch in Sri Lanka's first innings. However, Indian captain Shubman Gill addressed the speculation and confirmed that Siraj is not carrying any injury. Gill indicated that the pacer simply needs time, dismissing suggestions of any physical setback.

Launching Route 53 Files

Article URL: https://www.daemonology.net/blog/2026-08-27-Launching-Route-53-Files.html Comments URL: https://news.ycombinator.com/item?id=49465732 Points: 9 # Comments: 0

New Social Platform Launches, Distances Itself From Twitter Comparisons

A new social media platform has entered the market, drawing inevitable comparisons to Twitter. Company representative Coates addressed these comparisons directly in a LinkedIn post. Coates clarified that the company is not attempting to recreate or replicate Twitter. The statement appears aimed at setting clear expectations about the platform's distinct identity and direction.

Attackers Probe SharePoint Auth Bypass and RCE Chain Flaws CVE-2026-55040 and CVE-2026-63520

Security researchers have observed active exploitation attempts targeting two high-severity Microsoft SharePoint vulnerabilities, CVE-2026-55040 and CVE-2026-63520, which together form a potential authentication bypass to remote code execution chain. Honeypot data confirmed that unauthenticated attackers are exploiting a JWT token validation flaw in CVE-2026-55040 to impersonate SharePoint users or administrators without any user interaction. Following the authentication bypass, attackers were seen enumerating management functions and probing Business Data Catalog endpoints linked to the second vulnerability, CVE-2026-63520. As of the time of observation, successful remote code execution has not been confirmed, though the risk remains high for internet-exposed on-premises SharePoint servers. Microsoft has issued security updates, and administrators are advised to apply patches, restrict management surfaces, and block direct internet exposure to SharePoint instances.

The N+1 Query Problem: How Lazy Database Calls Silently Slow Your App

The N+1 query problem is a common database performance issue where an application fires one initial query to fetch a list of items, then executes a separate query for every individual item to retrieve related data. This pattern creates excessive network overhead, causing response times to worsen significantly as data volume grows. A list of 50 blog posts, for example, could trigger 51 database calls just to render one page, straining server CPU and exhausting connection limits in production. The problem frequently arises when developers use Object-Relational Mapping tools that 'lazily' load related records only when accessed inside a loop. The fix involves 'eager loading', where all required data is fetched upfront in a single joined query, reducing dozens of round trips to just one.

Texas officer indicted on 100 felony counts after 45,000 database searches

Waymo and Zoox Test Drivers Suffered 24+ Injuries From Sudden AV Maneuvers

Test drivers working for autonomous vehicle companies Waymo and Zoox have sustained over two dozen injuries in 2024 and 2025. The injuries, including sprains, pain, and whiplash, resulted from hard braking and other sudden movements made by the self-driving vehicles. The findings come from a TechCrunch review of injury data submitted to the Occupational Safety and Health Administration (OSHA). The incidents raise safety concerns about human operators in autonomous vehicles as robotaxi services continue to expand in scale.

Dark Caracal Deploys GoCaracal Malware Using SVG Phishing and Ethereum Backup C2

Arctic Wolf Labs published research on August 26, 2026, detailing a new campaign by the threat group Dark Caracal, which distributes a Go-based malware called GoCaracal through malicious SVG files disguised as Spanish-language financial and tax documents. Victims are lured via phishing emails into opening SVGs that redirect them through URL shorteners to attacker-controlled sites, where a lightweight GoCaracal executable is delivered inside a 7-Zip archive. Once executed, the malware collects host data, establishes encrypted C2 communication, and deploys an extended build alongside the Delphi-loaded Bandook trojan, enabling browser credential theft, keylogging, SOCKS5 proxying, and WebRTC remote desktop access. Notably, if the primary command-and-control server becomes unreachable, the malware retrieves a backup C2 address stored in an Ethereum smart contract via JSON-RPC calls, making takedown efforts significantly harder. Defenders are advised to block SVG and archive attachments at mail gateways, restrict unauthorized executables, and filter outbound Ethereum JSON-RPC traffic to counter this threat.

RQD* Clearing Raises $74M in Bain Capital-Led Round to Build Tokenization Infrastructure

U.S. clearing and custody firm RQD* has secured $74 million in a funding round led by Bain Capital. The capital raise signals growing institutional interest in preparing financial infrastructure for tokenized markets. RQD* intends to use the funds to expand its digital asset capabilities and tokenization services. The investment reflects broader efforts by Wall Street to modernize clearing and custody operations ahead of anticipated growth in blockchain-based financial instruments.

Developer Used Claude AI to Cut 8,400 Weekly Errors Down to 11 Real Bugs

A software developer built a 200-line Python pipeline that feeds structured error data and repository context into Claude Code to automatically triage production issues. Their error tracker was generating around 8,400 events per week across roughly 340 distinct issue groups, far exceeding what any engineer could manually review. The top errors by volume were largely noise — bot traffic, browser warnings, and user-aborted network requests — while genuine bugs were buried deep in the list. The AI agent evaluated each error cluster and returned a verdict, flagging 11 real bugs that had gone unnoticed for months, including a null dereference tied to a 2024 database schema change. The approach aimed not to fix bugs automatically, but to replicate the routine four-minute human triage pass at scale, so engineers only spend time on issues that truly matter.

How to Build a Production-Ready Polymarket Arbitrage Bot in Python

A production-grade Polymarket arbitrage bot requires more than checking if two prices sum below $1 — it must account for fees, liquidity, partial fills, and execution risk. The recommended architecture separates market data ingestion, strategy detection, risk management, and execution into distinct layers, preventing the strategy from directly controlling the exchange client. Real-time order book data is consumed via Polymarket's public WebSocket channel using the CLOB V2 trading stack and the official py-clob-client-v2 Python library. Fee-aware opportunity detection compares the combined executable cost of YES and NO legs against the fixed $1 payout, filtering out trades that do not clear a minimum edge threshold. Critical risk controls include position size limits, stale-book timeouts, one-leg fill timeouts, daily loss limits, and emergency shutdown mechanisms to manage two-leg execution exposure.

Dev builds AI sanctions-screening tool for NGOs, uncovers critical error-handling flaw

A developer built an AI agent called Interdict to automate OFAC sanctions screening for small NGOs, which face the same compliance exposure as major financial institutions but lack resources to manage it. In its first real test run using Google's Gemini model, the system quarantined 438 of 536 counterparties — flagging them for human review. The root cause was not a model failure but a coding bug: API rate-limit errors were misclassified as model-integrity failures, flooding the compliance queue with false escalations. This buried genuine cases requiring human attention under hundreds of irrelevant entries, effectively turning a safety signal into noise. The fix involved distinguishing transient network errors from true model failures and implementing proper retry logic with server-guided backoff.

Chrome Extension Dev Explains Two Distinct Methods for Recording Scrolling Webpages

A developer building a Chrome extension for auto-scroll screen capture describes two fundamentally different approaches to recording a scrolling webpage. The first method, live capture, records the tab in real time as it scrolls, faithfully capturing video, hover states, and dynamic content, but risks dropped frames when the encoder is overloaded. The second method, called Cinema mode, takes a single full-page screenshot and animates a virtual camera across it, enabling precise timing and real motion blur but unable to capture live elements like video or hover interactions. Each approach fails in opposite ways: live capture can produce uneven frame rates, while Cinema mode is limited to whatever was visible at the moment of capture. The developer treats the choice as a question of what the output file must truthfully contain, rather than a matter of UI preference.

Docker Swarm Rejects Task Despite 0.01% Memory Use — Reservations Are Why

A developer discovered that Docker Swarm refused to schedule a new service due to 'insufficient resources,' even though the existing service was consuming only 480 KiB of memory on a 5.772 GiB node. The confusion stemmed from the difference between runtime memory usage and scheduler reservations: Swarm makes placement decisions based on declared --reserve-memory values, not actual consumption. In the test setup, Service A held a 3.463 GiB reservation (60% of node memory), and adding Service B with a 50% reservation pushed the combined total to roughly 6.349 GiB — exceeding node capacity. Reducing Service B's reservation from 50% to 20% brought the combined total to 4.617 GiB, and Swarm immediately scheduled the task successfully. The experiment highlights that --reserve-memory controls scheduling eligibility, while --limit-memory is the correct flag for enforcing actual runtime memory caps.

How a 2001 Hamburg defeat helped Federer build the mental edge for Grand Slam glory

Roger Federer suffered a painful defeat in Hamburg in 2001 that proved to be a turning point in his career. Rather than letting the loss derail him, Federer used it as motivation to develop greater emotional control on the court. Just weeks later, he channelled his composure to defeat Pete Sampras at Wimbledon, signalling a significant shift in his mental approach. This psychological growth ultimately laid the foundation for his first Grand Slam title in 2003. The episode highlights how self-regulation, not just physical skill, was central to Federer's rise as one of tennis's all-time greats.

Developer builds 59 privacy-first browser tools in vanilla JS with zero dependencies

A developer has publicly launched Antigravity Tools, a collection of 59 free, browser-based utilities built entirely in vanilla JavaScript with no external dependencies, backend servers, or analytics. The project was motivated by privacy concerns with popular online tools, such as JWT decoders and regex testers, which can log or transmit user data to remote servers. All operations run locally in the browser using native APIs including Web Crypto, Canvas, Web Audio, and IndexedDB. The toolkit covers a wide range of developer needs, including JWT inspection, RSA key generation, JSON formatting, cURL conversion, regex testing, and AI prompt utilities. The tools are available at antigravitytools.app and require no installation, npm packages, or build tools.

The Daily Catch-Up: Nepal floods, a Gen Z disconnect in politics, and a Metro blunder

Developer Works on Emulating France's Mitra-15 Minicomputer in SIMH

A developer has published a work-in-progress project on GitHub aimed at emulating the French CII Mitra-15 minicomputer using the SIMH simulator framework. The Mitra-15 was a minicomputer produced by the French company CII (Compagnie Internationale pour l'Informatique) in the 1970s. The project is currently incomplete and actively under development. The repository was shared on Hacker News, where it received limited early engagement with a small number of points and comments.

Australian Police Arrest Two Suspects Linked to TeamPCP Hacks on Tech Firms

Australian law enforcement has arrested two individuals in connection with a series of cyberattacks carried out by a group known as TeamPCP. The attacks targeted several prominent technology companies, including AI firms Mercor and OpenAI, among others. The breaches exploited vulnerabilities in widely used open source software that these companies depended on. The wave of attacks occurred earlier in 2024, prompting an investigation that ultimately led to the arrests. Authorities have not yet disclosed the identities of the suspects or the specific charges they face.