Claude model distillation allegations & OpenAI’s custom inference chip - Hacker News (Jun 25, 2026)

Please support this podcast by checking out our sponsors: - Consensus: AI for Research. Get a free month - https://get.consensus.app/automated_daily - Invest Like the Pros with StockMVP - https://www.stock-mvp.com/?via=ron - Effortless AI design for presentations, websites, and more with Gamma - https://try.gamma.app/tad Support The Automated Daily directly: Buy me a coffee: https://buymeacoffee.com/theautomateddaily Today's topics: Claude model distillation allegations - Anthropic alleges a large-scale “distillation” campaign tied to Alibaba’s Qwen lab, raising AI IP theft, model security, and U.S.–China tech tensions. OpenAI’s custom inference chip - OpenAI revealed Jalapeño, a Broadcom-built inference chip aimed at better performance-per-watt, signaling cost control and reduced Nvidia dependence for serving AI. Cloudflare self-managed OAuth expansion - Cloudflare opened self-managed OAuth to all users, enabling scoped, revocable API access for SaaS integrations and AI agents, with stronger consent and revocation tooling. Password manager supply-chain breach - LastPass says customer contact and support data was exposed via third-party firm Klue, highlighting supply-chain risk, phishing exposure, and ongoing trust concerns. Dolphin emulator major upgrades - Dolphin’s 2606 update adds Game Boy Player emulation, fixes longstanding bloom artifacts, improves NetPlay-friendly cropping, and hardens infrastructure against AI scraping. Arma engine source code release - Bohemia published Arma: Cold War Assault Remastered engine source under GPL, enabling community forks and preservation while keeping trademarks and assets separate. LuaJIT 3.0 syntax direction - LuaJIT’s lead opened a central thread for LuaJIT 3.0 syntax proposals, emphasizing backward compatibility, tooling friendliness, and clearer documentation. Web popups and blogging norms - A blog essay echoes criticism of intrusive web overlays, arguing that plainly calling out bad defaults—popups, banners, blockers—is still valuable public writing. - Dolphin 2606 Adds Game Boy Player Support, Makes Key of Avalon Playable, and Fixes High-Res Bloom - Anthropic Accuses Alibaba of Large-Scale Claude Model Distillation Attack - OpenAI Debuts Jalapeño Custom Inference Chip Built With Broadcom - Cloudflare Opens Self-Managed OAuth to All Customers After Major Backend Upgrade - Bohemia Interactive Releases Arma: Cold War Assault Remastered Source Code on GitHub - LastPass Warns Users After Klue Partner Breach Exposes Contact and Support Data - Jim Nielsen on Blogging as the Art of Stating the Obvious - LuaJIT Opens Umbrella Issue to Define and Document LuaJIT 3.0 Syntax Extensions - Markdy Launches an Open-Source DSL for Web-Native, AI-Friendly Animations Episode Transcript Claude model distillation allegations First up in AI: Anthropic is accusing Alibaba of running what it calls the largest known attempt to extract capabilities from Claude. The alleged method is “distillation,” where a weaker model learns by training on a stronger model’s answers—effectively copying behaviors without copying the weights. Anthropic claims the activity involved a huge volume of interactions and a large pool of fraudulent accounts, and it’s taking the fight to policymakers right ahead of a Senate hearing. Why this matters: as models get more valuable, the front line isn’t only data and GPUs—it’s also access controls, abuse detection, and the uncomfortable question of what “theft” looks like when the product is an API response. OpenAI’s custom inference chip Sticking with AI infrastructure, OpenAI announced its first custom inference chip, Jalapeño, built with Broadcom. The emphasis here is inference—serving answers to users—where power and cost dominate. Even modest efficiency gains can translate into major data-center savings when you’re operating at OpenAI’s scale. The bigger story is strategic: the industry is steadily shifting from buying general-purpose accelerators toward designing specialized silicon to control cost, supply, and performance—especially as AI becomes less of a feature and more of the baseline utility. Cloudflare self-managed OAuth expansion On the developer platform front, Cloudflare opened self-managed OAuth to all customers. In plain terms, it’s an easier way for apps—and increasingly, AI agents—to get limited, revocable access to Cloudflare accounts without handing around long-lived API tokens. Cloudflare also tightened the user experience around consent and ownership to reduce phishing-style confusion, and it hardened the underlying plumbing so upgrades don’t break revocations or spike auth errors. Why it’s interesting: OAuth is one of those “boring until it breaks” layers, and expanding it safely can unlock a healthier ecosystem of third-party tools without turning security into a tax paid by every developer. Password manager supply-chain breach Now to security, where the theme of the day is: your risk surface includes your vendors. LastPass says some users’ personal data was exposed through a breach involving Klue, a third-party firm connected to systems like Salesforce and Gong. LastPass emphasizes that password vaults weren’t accessed, but customer contact and support-related information was. That still matters, because support details are exactly what attackers use for convincing phishing and social-engineering attempts. And given LastPass’s history of incidents, even a partner-driven exposure keeps the trust conversation very much alive. Dolphin emulator major upgrades Let’s shift gears into emulation and preservation, because Dolphin just dropped a hefty progress report and Release 2606. The headline is long-awaited Game Boy Player emulation—aimed at faithfully reproducing the GameCube peripheral experience, including the little quirks that make or break compatibility. Dolphin also reached a milestone on the arcade side by making the last previously unplayable Triforce title, The Key of Avalon, finally work, thanks to new touchscreen and card-hardware emulation. But the sleeper hit may be graphical: a new “Bloom Blurred” graphics mod that fixes longstanding high-resolution artifacts in a bunch of GameCube and Wii games that used a faux-HDR bloom look. In other words, raising resolution used to accidentally change the intended lighting vibe; now it can look right across resolutions for many titles. Add quality-of-life touches like better Wii Remote speaker mixing and more flexible cropping—useful for aspect ratio tweaks and NetPlay—and it’s a reminder that mature projects still find room for real breakthroughs. They even had to bolster infrastructure protections due to aggressive AI scraping, which is a very 2026 kind of maintenance headache. Arma engine source code release In open-source game history, Bohemia Interactive published the engine and game source for Arma: Cold War Assault Remastered—technology that traces back to the original Operation Flashpoint era. The code is modernized and available under GPL terms, while trademarks and game assets are handled separately, pushing most innovation into community forks. Why it matters: releases like this keep foundational game tech from vanishing into archives, and they give tinkerers—and researchers—a real-world codebase to study, port, and extend, even if it’s not a fully open-content drop. LuaJIT 3.0 syntax direction For programming language fans, LuaJIT’s lead opened a single umbrella discussion to collect proposed syntax extensions for LuaJIT 3.0. That sounds procedural, but it’s actually a signal: the project wants to consolidate scattered “folklore features” into clearer documentation and set firm expectations on what gets added—quality-of-life improvements, minimal ambiguity, backwards compatibility, and not making tooling miserable. If you’ve ever watched a language community get bogged down in tiny syntax debates, you’ll recognize the attempt to keep the conversation practical and productive. Web popups and blogging norms And finally, a calmer cultural note from the web: Jim Nielsen riffed on John Gruber’s complaint about intrusive popups and overlays—those moments when a webpage won’t simply show you the thing you came for. Nielsen’s broader point is about blogging itself: sometimes the most useful writing is just saying the obvious out loud, because everyone else has normalized the annoyance. It’s a small story with a big implication—good defaults on the web don’t happen automatically; they happen when people keep pointing out that the emperor isn’t wearing any clothes. Subscribe to edition specific feeds: - Space news * Apple Podcast English * Spotify English * RSS English Spanish French - Top news * Apple Podcast English Spanish French * Spotify English Spanish French * RSS English Spanish French - Tech news * Apple Podcast English Spanish French * Spotify English Spanish Spanish * RSS English Spanish French - Hacker news * Apple Podcast English Spanish French * Spotify English Spanish French * RSS English Spanish French - AI news * Apple Podcast English Spanish French * Spotify English Spanish French * RSS English Spanish French Visit our website at https://theautomateddaily.com/ Send feedback to [email protected] Youtube LinkedIn X (Twitter)