Some things I found interesting from 2026-05-10 to 2026-05-17

Internet Discoveries between 10 and 17 May

Let’s Encrypt Halts Certificate Issuance After Cross-Signed Root Certificate Incident
Reality Check - Deepfakes are everywhere. The godfather of digital forensics is fighting back
Rotten Dot Com by Dena Yago
Saturday Morning Breakfast Cereal - Terminal
Demystifying evals for AI agents \ Anthropic
Saturday Morning Breakfast Cereal - Arp
Mythos finds a curl vulnerability - daniel.haxx.se
Claude Platform on AWS
Postmortem: TanStack NPM supply-chain compromise
Red Hot Chili Peppers ink $300M deal with Warner Music to sell catalog
Space Cadet Pinball on Linux
Running local models on an M4 with 24GB memory
Incident Report: CVE-2024-YIKES
Local AI needs to be the norm
Idempotency is easy until the second request is different
Local privilege escalation via execve()
Saturday Morning Breakfast Cereal - Sport
See Artemis 2’s amazing views of Earth in timelapse video taken from 12,000-photo drop - Space
Saturday Morning Breakfast Cereal - Tide
Casus Belli Engineering — mmagueta
Saturday Morning Breakfast Cereal - Hierarchy
Saturday Morning Breakfast Cereal - Bot
I believe there are entire companies right now under AI psychosis
Project Gutenberg – keeps getting better
Show HN: Find the best local LLM for your hardware, ranked by benchmarks
New Nginx Exploit
Removing the modem and GPS from my 2024 RAV4 hybrid
Claude for Small Business
Scorched Earth 2000 – Web
Xs of Y – roguelike that names itself every run. Written in 4kLoC
SecurityBaseline.eu
The Future of Obsidian Plugins

Interesting details

Let’s Encrypt Halts Certificate Issuance After Cross-Signed Root Certificate Incident - Let’s Encrypt temporarily suspended all certificate issuance on May 8, 2026, after engineers identified a critical issue involving a cross-signed certificate linking the organization’s Generation X root to its upcoming Generation Y root infrastructure.

Reality Check - Deepfakes are everywhere. The godfather of digital forensics is fighting back - AI-generated images have left us questioning what is real. But the godfather of digital forensics, Hany Farid, is not giving up

Rotten Dot Com by Dena Yago - May 6, 2026 – “Rotten.com was a haunted arcade, dispensing trauma in gumball-machine doses straight to kids with dial-up, who chewed on images never meant for their half-formed stomachs.”

Saturday Morning Breakfast Cereal - Terminal - SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.

Demystifying evals for AI agents \ Anthropic - Demystifying evals for AI agents

Saturday Morning Breakfast Cereal - Arp - SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.

Mythos finds a curl vulnerability - daniel.haxx.se -

Claude Platform on AWS -

Postmortem: TanStack NPM supply-chain compromise - On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 malicious versions across 42 @tanstack/* packages on npm. Full postmortem.

Red Hot Chili Peppers ink $300M deal with Warner Music to sell catalog - The Red Hot Chili Peppers have sold their recorded catalog for $350 million to Warner Music Group through WMG’s joint venture with Bain Capital.

Space Cadet Pinball on Linux - Stephen Brennan’s personal website and blog.

Running local models on an M4 with 24GB memory - Experiments with getting usable outputs out of local models on a standard Macbook

Incident Report: CVE-2024-YIKES - A series of unfortunate events.

Local AI needs to be the norm - Local AI models should be the default.

Idempotency is easy until the second request is different - Idempotency is not just an HTTP header or a key lookup. This article covers the failure cases that bite real APIs: different requests with the same key, concurrent retries, partial success, downstream uncertainty, response replay, expiry, and duplicate message handling.

Local privilege escalation via execve() -

Saturday Morning Breakfast Cereal - Sport - SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.

See Artemis 2’s amazing views of Earth in timelapse video taken from 12,000-photo drop - Space - While making history on the first human moon mission in more than 50 years, the Artemis 2 astronauts captured incredible pictures of our home planet.

Saturday Morning Breakfast Cereal - Tide - SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.

Casus Belli Engineering — mmagueta -

Saturday Morning Breakfast Cereal - Hierarchy - SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.

Saturday Morning Breakfast Cereal - Bot - SMBC is a daily comic strip about life, philosophy, science, mathematics, and dirty jokes.

I believe there are entire companies right now under AI psychosis -

Project Gutenberg – keeps getting better - Project Gutenberg is a library of free eBooks.

Show HN: Find the best local LLM for your hardware, ranked by benchmarks - Find the local LLM that actually runs and performs best on your hardware. Ranked by real, recency-aware benchmarks, not parameter count. One command, run it instantly. - Andyyyy64/whichllm

New Nginx Exploit - exploit for CVE-2026-42945. Contribute to DepthFirstDisclosures/Nginx-Rift development by creating an account on GitHub.

Removing the modem and GPS from my 2024 RAV4 hybrid - Modern cars are computers on wheels that send home nonstop telemetry about you. In this post I remove my 2024 RAV4 Hybrid’s modem and GPS to prevent that :)

Claude for Small Business - We’re launching Claude for Small Business, a package of connectors and ready-to-run workflows that put Claude inside the tools small businesses use every day.

Scorched Earth 2000 – Web -

Xs of Y – roguelike that names itself every run. Written in 4kLoC - Roguelike that names itself each run. WIP. Contribute to nooga/xsofy development by creating an account on GitHub.

SecurityBaseline.eu - On May 13, 2026, the website SecurityBaseline.eu was launched. It is a spin-off from the Dutch “Basisbeveiliging”, which has monitored baseline security for over a decade and is part of governmental policy. Three months ago we sent tens of thousands of e-mails to European governments indicating the new site would launch, giving them time to […]

The Future of Obsidian Plugins - Introducing the new Obsidian Community site and developer dashboard.

All this was saved to my Link Ace and YouTube Interesting playlist over the week