HN 日々のまとめ

Hacker News の人気投稿やコメントを毎日日本語でダイジェスト

HN 日々のまとめを購読

あなたのメールアドレスはHN 日々のまとめへの登録のためだけに使われます。他と共有することはありません。

HN 日々のまとめ

2026年10月21日水曜日

Sorry, I couldn't generate a summary of today's Hacker News posts due to an API error: Google AI API error: 503 - { "error": { "code": 503, "message": "This model is currently experiencing high demand. Spikes in demand are usually temporary. Please try again later.", "status": "UNAVAILABLE" } } . Please check the server logs and API key.

本日の全てのストーリー

Security advisory: Critical remote code execution vulnerabilities, update now (www.php.net)

PHP 8.2.35 (github.com)

Show HN: SimCity, but with Permits (permit.petercai.com)

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)

Voxtral 3 (mistral.ai)

The 1.5°C goal of the Paris Agreement is no longer viable (unric.org)

The Future of CSS (www.joshwcomeau.com)

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck (www.techdirt.com)

What shall I teach my son? (stevekrouse.com)

Facebook Pages require paid subscription to post more than two links per month (mastodon.gamedev.place)

PHP2Shell: AI uncovers critical RCE in PHP (www.wiz.io)

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

Muse exposes users' personal and business secrets when they share conversations (arstechnica.com)

Google open-sources TorchTPU, a native PyTorch back end for TPUs (github.com)

DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)

Sixteen years after Deepwater Horizon, deep sea life shows few signs of recovery (e360.yale.edu)

The Other Epidemic: Trying to get off benzodiazepines (www.thebeliever.net)

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out (www.php.net)

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming (news.ycombinator.com)

Dutch National Cyber Security Center is Offline because it uses PHP (www.ncsc.nl)

Feds suspect ransom negotiator ran ShinyHunters extortion site (krebsonsecurity.com)

Qwen3-Coder writes less secure code when told it's for a US persona (www.hirundo.io)

Academics have a duty to defend open knowledge systems like Wikipedia (blogs.lse.ac.uk)

Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)

OpenAI models are coming to Google Cloud (openai.com)

IKEA – 3D Guide (sael.net)

Good type against all odds (unsung.aresluna.org)

Anthropic logged net loss of over $80B in first half of 2026 (www.reuters.com)

Whatever Happened to Fire Escapes (practical.engineering)

PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619) (jackalsyn.com)