You won't believe the stuff that popped up on Hacker News yesterday, Thursday, November 5, 2026. I gotta tell you about a few things real quick. Grab a coffee, this is some interesting tech drama and cool news.

Crazy OpenSSH Vulnerability and the "*sshole" Bug

First up, there was this wild post titled "sshole" – yeah, exactly. Turns out, it's about a critical vulnerability in OpenSSH, especially for Alpine Linux setups without PAM. It’s some nasty bug where the crypt() function and NULL pointers can lead to an authentication bypass. One of the comments mentioned how GCC compilers are infamous for "nasal demons," meaning they can do weird optimizations that make NULL pointer checks disappear, which sounds like exactly what happened here. Super technical, super important.

Check it out: sshole.com

Claude Code Was Leaking Emails!

Remember Claude Code, Anthropic's AI coding assistant? Well, apparently, it was having a bit of a privacy oopsie. It was sending users' email addresses to websites it was interacting with. Big yikes! Someone in the comments pointed out the irony, given that Anthropic has been pushing this "code is not the bottleneck" narrative while simultaneously shipping code with such a basic but critical flaw. Not a great look for AI ethics, huh?

Read the issue: github.com/anthropics/claude-code/issues/107757

MS Paint Had a Remote Code Execution Vulnerability

Get this: MS Paint, yes, MS Paint, had a remote code execution vulnerability! I mean, seriously, who would've thought? It's like finding a security flaw in Notepad. People in the comments were speculating it might be tied to the new generative AI features they've been adding to Paint. Makes you wonder what other old apps are hiding similar surprises.

The CVE details: cve.org/CVERecord?id=CVE-2026-83844

Discord is Ditching Electron for Less RAM

This is big news for anyone who uses Discord, and honestly, anyone who cares about app performance. Discord is finally moving away from Electron! Their new app apparently uses way less RAM. People have been complaining about Electron apps being memory hogs for ages, so this is a huge win. Hopefully, other apps follow suit!

The Verge has the story: theverge.com/news/1027379/discord-ditching-electron-web-app

Salon.com Says Goodbye

Another one bites the dust. Salon.com, the online magazine, announced it's shutting down. It sparked a pretty interesting discussion in the comments about the state of journalism. One person made a good point: while traditional newsrooms are struggling, we've also seen an "explosion in expert and first-person coverage" directly from people on the ground, especially with global events. It’s a huge shift in how we get our info.

Their farewell post: salon.com/2026/11/05/goodbye-from-salon/

"I Wish Tech Companies Knew More About Me"

This one really made me think. Someone wrote a post saying they actually wish tech companies knew *more* about them, but in a good way – so ads would be better targeted and less annoying. The comments were gold, explaining that the issue is often that advertisers are the real clients, not us users. And if you use an ad blocker, you're essentially "persona non grata," so the data pipelines get messed up, and you see all sorts of irrelevant junk you just bought. Kinda makes sense, right?

The surprising take: rakhim.exotext.com/i-wish-tech-companies-knew-more-about-me

Motorola's New Phone Gets GrapheneOS Support

And finally, for the privacy nerds out there, Motorola released their new Signature 27 phone, and it’s getting official GrapheneOS support! That's a big deal for people who want a super secure, privacy-focused Android experience. The comments were buzzing about the pricing, though – apparently, new Motorolas are getting up there with iPhone Pro Max prices, which is a bit nuts.

Details here: motorolanews.com/motorola-signature-27-2/

Anyway, that's the quick rundown! Talk soon!