Show HN: cdai – the AI-enhanced cd command
2 by franze | 0 comments on Hacker News.
Hack Nux
Watch the number of websites being hacked today, one by one on a page, increasing in real time.
New ask Hacker News story: Dropbox Data Breach
Dropbox Data Breach
8 by hmate9 | 2 comments on Hacker News.
I received a security notice from Dropbox today saying that my account was accessed without authorization between August 4 and August 21, 2026, and that Dropbox believes files in the account were viewed or downloaded. According to the email, Dropbox uses Lenovo as an identity provider, allowing users to authenticate to Dropbox with a verified Lenovo ID. Dropbox says: an issue with Lenovo’s email verification process allowed an unauthorized party to register a Lenovo ID using your email address and then use that Lenovo ID to log into the Dropbox account associated with that email address. So, as I understand it, the attack path was roughly: 1. Attacker registers a Lenovo ID using the victim’s email address. 2. Lenovo incorrectly treats the email address as verified. 3. Dropbox trusts the Lenovo identity. 4. Attacker gets access to the Dropbox account associated with that email address. Dropbox says it has since expired all sessions authenticated through Lenovo ID and removed the Lenovo link from my account. It also says Lenovo authentication can no longer be used for the account without first entering the Dropbox password. I’ve searched for a public disclosure from Dropbox or Lenovo and haven’t found one yet. Has anyone else received the same notice, or seen any public information about this vulnerability? I’m particularly interested in knowing how broadly the Lenovo ID login mechanism was available and how many Dropbox accounts may have been affected.
8 by hmate9 | 2 comments on Hacker News.
I received a security notice from Dropbox today saying that my account was accessed without authorization between August 4 and August 21, 2026, and that Dropbox believes files in the account were viewed or downloaded. According to the email, Dropbox uses Lenovo as an identity provider, allowing users to authenticate to Dropbox with a verified Lenovo ID. Dropbox says: an issue with Lenovo’s email verification process allowed an unauthorized party to register a Lenovo ID using your email address and then use that Lenovo ID to log into the Dropbox account associated with that email address. So, as I understand it, the attack path was roughly: 1. Attacker registers a Lenovo ID using the victim’s email address. 2. Lenovo incorrectly treats the email address as verified. 3. Dropbox trusts the Lenovo identity. 4. Attacker gets access to the Dropbox account associated with that email address. Dropbox says it has since expired all sessions authenticated through Lenovo ID and removed the Lenovo link from my account. It also says Lenovo authentication can no longer be used for the account without first entering the Dropbox password. I’ve searched for a public disclosure from Dropbox or Lenovo and haven’t found one yet. Has anyone else received the same notice, or seen any public information about this vulnerability? I’m particularly interested in knowing how broadly the Lenovo ID login mechanism was available and how many Dropbox accounts may have been affected.
New ask Hacker News story: Ask HN: What are your biggest problems and fixes with multisession engineering?
Ask HN: What are your biggest problems and fixes with multisession engineering?
2 by top_rooster | 0 comments on Hacker News.
I have run into a lot of issues using multiple sessions at once to build things, and I really want to hear from those that have figured a good amount out. Or at least hear what problems people are having to know if I am running into the same blockers everyone is. For example, I often want to have agents stop at certain points, but fail to get a mechanism that works.
2 by top_rooster | 0 comments on Hacker News.
I have run into a lot of issues using multiple sessions at once to build things, and I really want to hear from those that have figured a good amount out. Or at least hear what problems people are having to know if I am running into the same blockers everyone is. For example, I often want to have agents stop at certain points, but fail to get a mechanism that works.
New ask Hacker News story: Ask HN: AI for Home Lab Infra?
Ask HN: AI for Home Lab Infra?
2 by voakbasda | 2 comments on Hacker News.
In these days of AI agents capable of breaking into remote systems, are there any up for the task of maintaining a home lab with public infrastructure (e.g. DNS, SMTP, etc.)? I have dozens of Linux machines scattered throughout my property that need regular updates, migrations and general maintenance. To start, I imagine cloning one into an VM and letting an agent give it a go. If the results looked good, I would give them a crack at the live system on the edge. Ultimately, I would love to have an agent handle all of my infrastructure. That said, I have been maintaining my own infrastructure for almost 30 years, so the idea of handing it off to an AI seems far fetched. Heck, it would take a senior engineer to untangle the mess that I’ve cobbled together over the years. Yet I cannot deny the impressive results that I am getting from my current casual level of AI chat. So what are people using for this task? How well do they do the job?
2 by voakbasda | 2 comments on Hacker News.
In these days of AI agents capable of breaking into remote systems, are there any up for the task of maintaining a home lab with public infrastructure (e.g. DNS, SMTP, etc.)? I have dozens of Linux machines scattered throughout my property that need regular updates, migrations and general maintenance. To start, I imagine cloning one into an VM and letting an agent give it a go. If the results looked good, I would give them a crack at the live system on the edge. Ultimately, I would love to have an agent handle all of my infrastructure. That said, I have been maintaining my own infrastructure for almost 30 years, so the idea of handing it off to an AI seems far fetched. Heck, it would take a senior engineer to untangle the mess that I’ve cobbled together over the years. Yet I cannot deny the impressive results that I am getting from my current casual level of AI chat. So what are people using for this task? How well do they do the job?
New ask Hacker News story: Ask HN: Best way to archive 25 years of emails
Ask HN: Best way to archive 25 years of emails
2 by astatine | 6 comments on Hacker News.
I have emails from 1997-98 onwards all in one massive inbox, currently on gmail with emclient on Mac as the mail client (there have been probably a dozen services starting from self-hosted in the beginning). I would like to archive the historic mails for the first 25 years, but in a way that's actually searchable and usable in the future (and potentially importable to a new mail client/service) and not in any particular mailbox format that may go obsolete. There is no good reason to hoard them, other than "I feel like doing so". What are the best options, and tools?
2 by astatine | 6 comments on Hacker News.
I have emails from 1997-98 onwards all in one massive inbox, currently on gmail with emclient on Mac as the mail client (there have been probably a dozen services starting from self-hosted in the beginning). I would like to archive the historic mails for the first 25 years, but in a way that's actually searchable and usable in the future (and potentially importable to a new mail client/service) and not in any particular mailbox format that may go obsolete. There is no good reason to hoard them, other than "I feel like doing so". What are the best options, and tools?