This week: 20 top links from Lobste.rs.

This Week on Lobste.rs

Trending topics: vibecoding security meta cryptography openbsd

1. Updates to site guidelines and AI/LLM tags announce meta

submitted by 355E3B — 368 points (+339 this week) — 419 comments

Lobsters is killing the vibecoding tag and tightening submission rules to stop low-effort posts and self-promotion from drowning out actual technical discussion of AI tools.

2. It's enough - vibecoding tag crossed from useless to harmful meta vibecoding

submitted by viraptor — 326 points (+201 this week) — 276 comments

The vibecoding tag was meant to flag LLM-generated code but has sprawled into a catch-all for anything LLM-adjacent, now burying legitimate technical work and frustrating contributors who want to engage with the actual problem.

3. Upcoming Critical PHP Security Release php security

submitted by pushcx — 194 points (+191 this week) — 144 comments

Two critical unauthenticated RCE vulnerabilities in PHP's request handling affect all actively maintained SAPIs, with mod_php being especially dangerous since the exploit executes before application code even loads.

4. Men in tech #YesAllMen culture video

submitted by gmem — 182 points (+144 this week) — 45 comments

A talk on how male engineers can actually address gender issues in tech by examining their own behavior instead of just performing allyship.

5. Firefox Local Mode browsers

submitted by lim — 140 points (+136 this week) — 24 comments

Firefox 153 lets you map local files to HTTPS URLs directly in DevTools, so you can test secure APIs and origin-specific storage without spinning up a server—the mappings only stay active while DevTools are open.

6. Protecting Firefox users following the compromise of eMudhra intermediate certificates security

submitted by freddyb — 170 points (+130 this week) — 71 comments

Mozilla revoked eight eMudhra intermediate certificates in three hours after their private keys leaked, deploying the block through OneCRL so Firefox users got the fix instantly without a restart—then issued browser and NSS updates for edge cases using custom configs or Mozilla's trust store outside the browser.

7. Why are we even doing all this? math vibecoding

submitted by dcao — 137 points (+108 this week) — 24 comments

A physicist skewers how LLM-generated math papers exploit academic incentives: publish fast, get citations, worry later about whether anyone actually read it or whether it's correct.

8. The NIST Elliptic Curves Seeds Bounty Has Been Claimed cryptography

submitted by FiloSottile — 131 points (+104 this week) — 37 comments

Someone finally reverse-engineered how NIST picked the seeds for its elliptic curves — they used drand48 seeded with Unix timestamps from 1997–98, not mysterious English sentences as the legend claimed — which definitively rules out the Bernstein-Lange backdoor hypothesis that fed decades of conspiracy theories.

9. OpenBSD 8.0 openbsd release

submitted by dgv — 97 points (+92 this week) — 12 comments

OpenBSD 8.0 expands kernel address space on amd64 from 4GB to 512GB, adds hibernate support for arm64, and bumps VMM guests up to 64 VCPUs, among other architecture-specific improvements and driver updates.

10. Wine ported to OpenBSD openbsd

submitted by nbyqvist — 119 points (+89 this week) — 22 comments

Wine on OpenBSD can now run 64-bit Windows software like The Witcher 3 Remaster after a developer worked around the missing %gs register with a software emulation layer — 32-bit apps still need WoW64 support to function.

11. Making all divisions slower to fix a bug in 0.000000000000000000542% of cases plt

submitted by NoahTheDuke — 77 points (+73 this week) — 12 comments

Futhark's C backend adds an overflow check to every signed integer division to handle the one edge case where dividing by -1 overflows, since C leaves this undefined; the latency hiding on GPUs means the extra instruction won't hurt performance.

12. Linus Torvalds on AI-assisted kernel contributions linux vibecoding

submitted by thang — 88 points (+70 this week) — 159 comments

Linus argues that blanket bans on AI-assisted contributions are arbitrary: refusing to accept compiler-generated code would be absurd, so why demand humans write every line instead of using another tool? The real issue is control, not competence.

13. The Netherlands is building its own Linux OS to break free from Microsoft linux windows

submitted by pocket_walrus — 72 points (+67 this week) — 24 comments

The Dutch government is funding NixOS-based infrastructure to replace Microsoft across public agencies, partly in response to US pressure on the ICC and Microsoft's reported service blocks to it.

14. JPEG XL vs AVIF for web use-cases compsci web

submitted by jaffathecake — 111 points (+65 this week) — 31 comments

AVIF wins for photos and screenshots, but encoder matters as much as format — jixel's JPEG XL sometimes beats libjxl by 20%, yet can also game metrics while looking worse to the eye, making it worth benchmarking your own images before picking a codec.

15. Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds cryptography security

submitted by pims — 74 points (+65 this week) — 26 comments

A certificate authority generated private keys as single-byte numbers, making them brute-forceable in milliseconds and potentially exposing TLS and code-signing trust for 17 months — and most non-browser tools won't catch the revocation.

16. zls 0.17.0 zig

submitted by FedericoSchonborn — 70 points (+65 this week) — 2 comments

ZLS kept pace with Zig 0.17's build system redesign, but the new protocol broke how packages and modules resolve inside build.zig files—fixes are in progress, though the underlying changes should eventually make editor support more reliable.

17. Unikernels in OCaml ml osdev

submitted by xvw — 61 points (+60 this week) — 14 comments

A hands-on walkthrough of building unikernels with OCaml and Solo5, including deployable examples that show whether this approach is practical beyond academia.

18. One Hash Bloom Filters compsci databases

submitted by pushcx — 67 points (+59 this week) — 9 comments

A Bloom filter variant that swaps multiple hash functions for one, accepting a higher false-positive rate in exchange for simpler code and better cache performance.

19. The Future of CSS css

submitted by typesanitizer — 63 points (+56 this week) — 8 comments

Josh Comeau picks features he wants to see in Interop 2027, including CSS functions for reusable gradients and transforms, corner-shape for squircles and bevels, and border-shape for curved outlines—all shipping in Chrome now, most waiting for Firefox and Safari to catch up.

20. The road to iroh 1.0 networking

submitted by Frando — 71 points (+55 this week) — 15 comments

Four years of shipping a P2P stack built backwards from real constraints: IPFS compatibility couldn't handle resource-constrained devices, so they stripped it down to just QUIC + BLAKE3, then discovered hole punching (via the Tailscale approach) was the actual hard problem worth solving.

Pleopods is a weekly digest of the top links from Lobste.rs. Archive