Go’s crypto/x509 code was changed to block trust in a specific, small set of intermediate certificates after security concerns tied to their operation. The Verify path-building code now filters out certificate chains containing those intermediates so they won’t be returned as valid, and the change is tied to CVE-2026-111943. The maintainers label the fix as an urgent security release-blocker and strongly recommend immediate upgrades to patched releases.
The mitigation was landed and tracked across releases: it’s included in the Go1.28 milestone with backports opened for 1.26 and 1.27, and multiple commits/CLs update branches and release artifacts (including external/go updates to go1.27.3). Automated repo tooling recorded the backports and referenced changelists; work was created and completed between Oct 19-20, 2026, and the change was closed as completed. An original internal tracking reference (b/575512169) is noted for the urgent investigation.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Death Plan Switch is a self-hosted dead man's switch for solo developers that sends weekly check-in emails and alerts designated contacts if the user disappears. It automates notifying the right people in case of an emergency, ensuring business continuity and safety. (deathplanswitch.com)
A leak of over 421,000 emails from Germany's far-right AfD party reveals instances of nazism, including Nazi symbols, jokes, and references by party members and staff. The emails also detail discussions of violence, racist comments, and Nazi memorabilia, highlighting deep-rooted extremist attitudes within the party. (twitter.com)
OpenBSD 8.0 was released on October 20, 2026, introducing platform-specific improvements such as increased kernel virtual address space for amd64 and added support for features like hibernate on arm64. The update also includes various kernel enhancements, bug fixes, and architecture support updates across multiple platforms. (openbsd.org)
OpenBSD 8.0 was released on October 20, 2026, marking its 61st release with enhanced security and performance features. The update includes platform-specific improvements, kernel enhancements, and support for suspend and hibernate functions across various architectures. (marc.info)
A Ukrainian drone evacuated a wounded soldier from the front line, marking a world first according to the brigade. The operation successfully saved the soldier, who is now receiving treatment, with the drone lowering itself to pick him up. (abc.net.au)
Supporters of Brazilian President Lula protested outside Meta's headquarters in São Paulo, accusing the company of electoral interference by favoring opposition content. The protest occurred ahead of the election, with Lula's supporters demanding equal treatment and transparency from Meta. (efe.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.