A gunman targeted random people as he drove into Krakow's Main Square, a major tourist spot. Police shot and wounded the gunman during a gunfight.

(Image credit: Beata Zawrzel)

Article URL: https://blog.bosscher.ch/posts/openstick/

Comments URL: https://news.ycombinator.com/item?id=50406670

Points: 38

# Comments: 6

Article URL: https://hunch.net/?p=13764006

Comments URL: https://news.ycombinator.com/item?id=50406589

Points: 39

# Comments: 15

Article URL: https://businessexaminer.ca/victoria-articles/item/microsoft-researcher-john-langford-exits-as-ai-frontiers-group-is-declared/

Comments URL: https://news.ycombinator.com/item?id=50406563

Points: 58

# Comments: 13

Article URL: https://prog21.dadgum.com/19.html

Comments URL: https://news.ycombinator.com/item?id=50406319

Points: 13

# Comments: 2

Article URL: https://maxxbench.unlap.ai/research/why-maxxbench/

Comments URL: https://news.ycombinator.com/item?id=50406222

Points: 45

# Comments: 7

Article URL: https://sheets.works/data-viz/cpu-dies

Comments URL: https://news.ycombinator.com/item?id=50405782

Points: 14

# Comments: 2

I built Coldframe, a honeypot that pretends to be a supermarket refrigeration controller. Inspired by the events on industrial fridge installations in the past weeks, I wanted to see what people would try against a convincing fake.

To learn more about this I built a honeypot that resembled perfectly the Danfoss AK-SM 800A and Dixell XWEB interfaces. Both of them are recognized on Shodan as real ones (an not as honeypots). It’s one Python file using only the standard library, and it builds on eppser/danfoss-ak-sm-decoy and public research by Synacktiv, Claroty and Ironhackers.

Things that were fun to get right:

- Matching real units. I used Shodan records of real devices to match header order, page titles, certificate fields and TLS versions. The Danfoss persona sends nginx headers in the same order as a real AK-SM 800A. The Dixell persona sends no Server header and pads its page to exactly 8,202 bytes.

- Recognising exploit attempts. It recognises CVE-2025-41450, the Danfoss “code of the day” login bypass, and records whether the submitted code is correct for today. It also tags attempts targeting three other Danfoss CVEs and the XWEB vulnerabilities.

- Letting them in. Default logins open a fake store dashboard with defrost buttons, so you see the second move, not just the first. Nothing behind it is real.

Two instances have been live for a day. So far they’ve only seen generic scanners and Shodan’s crawler, which is called refrigerator.census.shodan.io.

Feedback welcome, especially from anyone who has seen these devices in the field!

Comments URL: https://news.ycombinator.com/item?id=50406292

Points: 75

# Comments: 20

Paraguayan President Santiago Peña was removed from office and placed under house arrest Friday. The Senate voted on his impeachment after the collapse of a state-affiliated bank.

(Image credit: Federico Parra)

Article URL: https://www.theguardian.com/technology/2026/nov/06/struggling-to-spell-male-chauvinist-pig-apple-grey-list-means-your-iphone-wont-help-you

Comments URL: https://news.ycombinator.com/item?id=50406111

Points: 67

# Comments: 41