Episode

Bluetooth soundbar becomes BadUSB & GitHub.dev OAuth token theft - Hacker News (Jun 3, 2026)

Podcast
The Automated Daily - Hacker News Edition
Published
Jun 3, 2026
Duration seconds
479
Processing state
not_requested
Canonical source
https://theautomateddaily.com/episodes/2026-06-03-bluetooth-soundbar-becomes-badusb-github-dev-oauth-token-theft
Audio
https://dts.podtrac.com/redirect.mp3/cdn.theautomateddaily.com/audio/hn/2026-06-03/en/episode.mp3
JSON
/v1/public/podcasts/the-automated-daily-hacker-news-edition-6639591/episodes/bluetooth-soundbar-becomes-badusb-github-dev-oauth-token-theft-hacker-news-jun-3-2026
Markdown
/podcast/the-automated-daily-hacker-news-edition-6639591/bluetooth-soundbar-becomes-badusb-github-dev-oauth-token-theft-hacker-news-jun-3-2026.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/the-automated-daily-hacker-news-edition-6639591/episodes/bluetooth-soundbar-becomes-badusb-github-dev-oauth-token-theft-hacker-news-jun-3-2026/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/the-automated-daily-hacker-news-edition-6639591/bluetooth-soundbar-becomes-badusb-github-dev-oauth-token-theft-hacker-news-jun-3-2026.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

Please support this podcast by checking out our sponsors: - Consensus: AI for Research. Get a free month - https://get.consensus.app/automated_daily - SurveyMonkey, Using AI to surface insights faster and reduce manual analysis time - https://get.surveymonkey.com/tad - Prezi: Create AI presentations fast - https://try.prezi.com/automated_daily Support The Automated Daily directly: Buy me a coffee: https://buymeacoffee.com/theautomateddaily Today's topics: Bluetooth soundbar becomes BadUSB - A Creative Sound Blaster Katana V2X flaw enables long-range Bluetooth attacks, firmware tampering, and USB HID "keyboard" injection—raising serious supply-chain and surveillance risks. GitHub.dev OAuth token theft - A one-click github.dev exploit can steal a broad-scoped GitHub OAuth token via VSCode webview event spoofing, enabling read/write access to private repos and potential downstream compromise. Cache-friendly data layout performance - A deep dive shows why real-world speed often hinges on CPU cache behavior—Array of Structs vs Struct of Arrays, working-set size, and random access patterns can dwarf Big-O expectations. Linux swap in GPU VRAM - An open-source tool turns NVIDIA VRAM into Linux swap using NBD and CUDA, improving interactive latency on memory-starved laptops—at the cost of power and some throughput overhead. PlayStation 1 design tradeoffs - A PlayStation 1 hardware explainer connects Sony’s CPU+DMA approach and GPU limitations to iconic visual artifacts, plus the security and copy-protection cat-and-mouse of the era. Reverse engineering classic game maps - A long-running preservation project extracts and reconstructs Test Drive III map data, turning proprietary DOS-era formats into viewable, exportable assets for modding and archiving. - Researcher Reveals Remot…