Jaw-dropping research on how bean plants attract predatory wasps when attacked by caterpillars

https://arstechnica.com/science/2026/06/beans-use-an-immune-receptor-to-call-in-airstrikes-on-caterpillars/

#Nature #PlantCognition

SMD soldering using the sun.

it works astonishingly well. the trick is to de-focus the spot and light up the whole PCB. first we failed by heating the metal plate underneath with a highly focused spot. but that led to accidentally burnt PCB spots at corners and didn't melt the paste.

it works so much better than using a hot plate, so I officially declare it state of the art as of today.

#SMD #soldering #solar #solarpunk #flwr #anal0g_flow3r #sks2026

I found that crafted #MeshCore node names could compromise #HomeAssistant instances running meshcore-card, with an XSS leading to remote root access on the HA host. An attacker could then access anything controlled or visible through Home Assistant. The attacker doesn't need to be near the target, as MeshCore advertisements are repeated over the mesh, which is dense in NL.

This also affects around 20 public MeshCore analyzer websites. Some of those run CoreScope, where it looks like a vibecoding bot broke the XSS filter while hallucinating a bugfix. The analyzers are mostly public data though. In addition, the less popular MeshCore-Home-Assistant-Panel-v2 is likely also affected, but I was unable to make contact with the maintainer.

MeshCore node names are only 32 bytes, and each rendered in a different place in the page, so I had to be creative to run a more substantial payload. I found a way with three node names using an iframe feature I never heard of before.

https://mxsasha.eu/posts/meshcore-xss-home-assistant/