Rouler is a Windows split‑tunnelling tool that sends traffic from specific apps, IPs or subnets out the network interface you choose, letting multiple VPNs and your regular connection run side‑by‑side. Rules match an application and optionally a destination range, are applied just before Windows routes traffic, and do not change the system route table; if an interface can't carry matched traffic Rouler blocks it rather than leaking it. It works with any VPN that Windows exposes as an interface (WireGuard, Tailscale, OpenVPN, etc.), lets apps keep choosing their own interface for things like casting, and provides a live activity view showing every connection, what rule matched, and the outcome. A custom Rust kernel driver handles steering, and the UI supports creating rules from observed connections and showing which interfaces can reach a given IP range.
The project emphasizes minimal interference - no virtual adapters, no user‑mode proxies, no system hooks - and full visibility for every action. Claimed performance impact is negligible (no measurable lag, full‑speed transfers), and the installer and memory footprint are small. The beta is free but invite‑limited and aimed at technical testers; requirements include 64‑bit x86 Windows and English UI, and users should expect a SmartScreen warning initially. This is a solo project with a roadmap focused on driver correctness, stability and expanded features; feedback goes to [email protected].
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.