HN Daily

Today's lineup: Iroh 1.0 — A peer-to-peer networking library hits stable. You dial a key, not an address, and the library figures out how to get there. A backdoor hiding in a LinkedIn job offer — A bogus recruiter sent a npm package as a take-home; inside was a prepare-script that opened a reverse shell. Has anyone replaced Claude or GPT with a local model for daily coding? — HN reports on running DeepSeek V4 Flash on a dual-GPU rig and what the workflow trade-offs feel like. TinyWind — A tiny browser-based pirate sailing game with real wind physics and emergent multiplayer. My homelab AI dev platform — One developer's writeup of self-hosting an OpenCode agent behind a human-gated pull request workflow. US battery manufacturing keeps breaking records — FRED data shows domestic battery cell output at the highest level on record. A peopleless economy? Not technically impossible — An essay arguing the labor share could keep shrinking without breaking the math, and what that would mean. Banned book library in a WiFi smart light bulb — A maker stuffs censored texts into a cheap smart bulb's flash chip; it serves them over a captive portal. Follow links to the original posts and HN threads via news.ycombinator.com.

Sunday roundup with Best of the Week: Rio de Janeiro homegrown LLM appears to be a weighted merge of two existing models Did the makers of Claude Fable ask for this? The trust gap keeps widening Stanford grads stage a visible walkout during Sundar Pichai commencement speech The Jqwik Anti-AI Affair: maintainer sunsets the project as protest The only scalable delete in Postgres is dropping the whole table at once Firewood Splitting Simulator: a Sunday front-page hit Your ePub Is Fine. Kobo Disagrees. Blame Adobe. Best of the Week: the full Claude Fable saga, from leaked launch to fail-cleanly demands

Saturday roundup: U.S. Commerce Dept bans noise infusion (differential privacy) from Census Bureau outputs GLM 5.2 ships with a 1M-token context window and MIT-licensed weights next week Tonsky's "Every Frame Perfect" — animation polish as a trust signal Pyodide 314.0 — Python wasm wheels can now be published directly to PyPI Derbyshire police officer under investigation for using AI to create evidence in multiple cases Israeli firm BlackCore suspected of meddling in New York and Scotland votes Running DOS on a Behringer mixing console with a from-scratch x86 BIOS Bonus: UC San Diego and Google propose a 2,000-Pixel-phone low-carbon datacenter

Friday roundup: If you are asking for human attention, demonstrate human effort — the AI-slop pushback that owned the front page "Don't You Just Upload It to ChatGPT?" — the cultural pressure to outsource thinking New CRISPR technique selectively shreds cancer cells, including previously undruggable cancers Malware developers added nuclear and biological weapons text to spyware — probably to poison AI classifiers WASI 0.3 lands with async, sockets, and unified streams Palantir loses legal challenge against Swiss investigative magazine Republik Twenty one zero-days disclosed in FFmpeg — CCTV, ingest, and transcoding pipelines exposed Bonus: Renault is shipping electric motors with no rare earth metals

Thursday roundup: Homebrew 6.0.0 ships — and surprises Mac users by auto-upgrading casks that were supposed to stay put Anthropic apologizes for invisible Claude Fable guardrails that silently downgraded benign requests Solar generated more US electricity than coal for the first time ever "Lines of code got a better publicist" — a takedown of AI productivity metrics Xiaomi releases MiMo Code, a terminal-native open source coding assistant The remote code execution that AMD wouldn't fix — until HN got loud macOS 27 Beta breaks the ability to boot Asahi Linux on Apple Silicon Bonus: a developer gets Half-Life running at 30 FPS on a 2007 Nokia N95

Tuesday roundup: Anthropic releases Claude Fable 5 (Mythos 5), leaked early via Google cache If Claude Fable stops helping you, you'll never know — competitive sabotage policy concerns Apple yanks Siri AI from the EU rather than comply with the Digital Markets Act Techdirt: CEOs who think AI replaces their employees are just bad CEOs FCC proposes ID requirements that would end anonymous prepaid phones OpenCV 5 ships with built-in multimodal model support A solo developer makes graphics like it's 1993 — raycasting, software rasterization, no GPU Bonus: a rare pair-instability supernova observed at the edge of the universe

Monday roundup: Show HN: Performative-UI, a React library of design tropes done well on purpose MusicDecoy stops the Apple Music app from launching on stray clicks BBC: It is fads, not friends, that now dominate social media feeds Xiaomi releases MiMo v2.5 Pro UltraSpeed, a 1 trillion parameter model at 1000 tokens per second Apple announces Siri AI; Apple Intelligence reportedly built on Google Gemini infrastructure Essay argues xAI is looking more like a datacentre REIT than a frontier lab Ed Zitron returns with AI is slowing down Bonus: OpenAI submits a confidential S-1 draft to the SEC

Sunday roundup with Best of the Week: An anxious blog post says LLMs are eroding software engineering careers How is Linear so fast? A local-first architecture deep dive Linux developers ask Anthropic to ship an official Claude Desktop A 100 kilowatt FM radio feedline severed in broad daylight in the Ohio Valley The 29th International Obfuscated C Code Contest winners are out Building from zero after addiction, prison, and a felony Gamers push laws to stop publishers from remotely disabling games Best of the Week: revisiting the Google to SpaceX compute deal for xAI capacity

Friday roundup: Astronauts shelter on the ISS during an air leak repair, then return to normal ops Microsoft open-sources pg_durable, putting durable workflow execution inside Postgres Google ships Gemma 4 QAT models for efficient on-device inference Mouseless: keyboard-driven control of your entire operating system A blog post asks whether Claude is increasing bugs in rsync Gov dot uk drops Stripe in favor of Dutch payment processor Adyen Why Conventional Commits encourages focus on the wrong things

Thursday roundup: VoidZero joins Cloudflare, bringing Vite, Vitest, Rolldown and Oxc under one roof Anthropic publishes a recursive self-improvement research framework Anthropic releases an open-source vulnerability discovery harness Why IPv6 zone identifiers in URLs are a long-running mistake Ian Fieggen's Secure Shoelace Knot returns to the front page A parent shares their retro-tech approach to limiting screen time

Wednesday roundup: Elixir v1.20 ships gradual type checking for the BEAM Google's Gemma 4 12B: an encoder-free multimodal model Uber caps engineering AI tool spending at 1,500 dollars per developer per month Pwnd Blaster: a Bluetooth speaker that hides a BadUSB keyboard attack Meta gives users a 30-minute opt-out window before AI training kicks in

Saturday roundup: Index gatekeepers refuse to bend rules for SpaceX, OpenAI, and Anthropic Meta confirms 20,225 Instagram accounts hacked through AI chatbot exploit Google to rent xAI data center compute capacity at large monthly run rate Pokemon Emerald ported to WebAssembly, runs in the browser LWN on moving beyond fork plus exec as the kernel process primitive ntsc-rs: open source video emulation of analog TV and VHS artifacts Zeroserve: a zero-config web server you can script with eBPF Recent US college grads now have higher unemployment than the average worker

Tuesday roundup: Adafruit receives a demand letter from Fenwick on behalf of Flux.AI after a critical PCB review Gmail thinks I'm stupid, so I left — the AI-overreach burnout Mullvad on age verification for social media as the end of the free internet Microsoft drops MAI-Code-1-Flash, a 5B-active coding model with explicit decontamination Why you don't love systemd timers enough — a love letter to a debuggable cron replacement Trump signs downsized AI executive order after weeks of reversals Anthropic expands Project Glasswing to 150+ new orgs across critical infrastructure Don Marti on the advertising cartel coming to your web browser (Attribution Level One)

Sunday roundup: Cloudflare Turnstile and the WebGL fingerprinting tradeoff Bonsai Image 4B — 1-bit and ternary image generation for local devices Creatine and brain energy — small uncontrolled study, big headline The Chuwi Minibook X — the netbook we deserve Restartable Sequences — tiny database transactions in the kernel The Website Specification — a platform-agnostic checklist for good websites Best of the Week: revisiting Claude Opus 4.8 five days in.

Monday roundup: Instagram AI support bot lets attackers reset any account with a username and a VPN Red Hat npm packages compromised in a supply chain attack hitting 30+ libraries Anthropic files a confidential draft S-1 with the SEC, three days after its $65B Series H Stanford CS336 + Claude.md — students build LLMs end-to-end with Tatsu Hashimoto and Percy Liang Nvidia unveils RTX Spark, a new line of AI-first small form factor PCs Florida AG sues OpenAI — first state-level lawsuit, post the FSU shooting case The Pirate Bay turns 20 — still resilient after the 2006 raid RGB 255 vs 256 — why dividing by 255 is the right call when normalizing colors

Saturday roundup: OpenRouter raises $113M Series B led by CapitalG Domain Expertise Has Always Been The Real Moat Accenture to acquire Ookla (Speedtest, Downdetector, Ekahau, RootMetrics) Microsoft degrades perpetual Office for Mac to view-only on July 13 I Found A Seashell In The Middle Of The Desert — a shape-space CV project Voxel Space — the Comanche-era terrain renderer in under 20 lines Jef Raskin, the visionary behind the Mac (2013 interview returns) Zig ELF linker improvements catch up to LLD

Friday roundup: The Dead Economy Theory — when AI eliminates labor faster than productivity grows Notes from Mistral's AI Now Summit in Paris Liquid AI ships LFM2.5-8B-A1B with 38T training tokens SQLite Is All You Need For Durable Workflows responds to yesterday's DBOS post Is AI Causing A Repeat Of Frontend's Lost Decade Over 600 UC faculty demand the SAT come back for STEM majors Microsoft 0-day feud escalates as researcher threatens July 14 drop GTA 6 developers at Rockstar unionize

Thursday roundup: Claude Opus 4.8 lands with fast mode and dynamic workflows Anthropic raises $65B Series H at $965B post-money valuation YouTube starts auto-labeling AI-generated videos EU fines Temu €200M for letting illegal products on the platform DBOS argues Postgres is all you need for durable execution Various LLM Smells — the writing tells of generated prose Continue Y/N: a 60-second game about AI agent permission fatigue Raspberry Pi 6 pushed to 2028 as DRAM shortage bites

Friday roundup: Anthropic's Project Glasswing and the Mythos Preview model that found 10,000+ critical vulnerabilities in a month CISA's vulnerability-data leak gets worse as lawmakers demand answers yt-dlp deprecates Bun after the maintainer ships a vibe-coded Rust rewrite Antigravity 2.0 dominates the OpenSCAD Pantheon benchmark DeepSeek V4 Pro slashes API pricing U.S. researchers face new restrictions on foreign collaborators Anna's Archive publishes an llms.txt aimed at AI labs Project Hail Mary's interactive stellar navigation chart hits the front page

Thursday roundup: Flipper One asks the community to help finish an open Linux pocket cyberdeck (8-core RK3576, NPU, 8 GB RAM, Wi-Fi 6E, dual GbE, M.2 expansion, mainline kernel) Google's Antigravity 2.0 silently replaces the IDE with a chatbot via background update; engineer's chat history and settings purged Seattle Shield: SPD-operated intelligence network shares surveillance bulletins with Amazon, Facebook, ICE, FBI, NYPD, and hundreds of others — 17 years, zero publicly cited arrests Google packs new ad formats into AI Mode: Conversational Discovery, Highlighted Answers, AI-powered Shopping ads, Business Agent for Leads, expanded Direct Offers Waymo pauses Atlanta and San Antonio because robotaxis keep driving into floods; the recall last week didn't fix it Python 3.15 quietly ships: asyncio.TaskGroup.cancel(), threading.serialize_iterator / concurrent_tee, frozendict, json.loads(array_hook=...), Counter xor A 2021 M1 Max MacBook indexes a year of video locally with Gemma 4 31B Q4 — 28.4 GB model in RAM, 50.89 GB of swap, $140/mo cloud bill cut to $22 No Slop Grenade publishes the AI-etiquette manifesto: stop pasting AI-generated walls of text into conversations

Wednesday roundup: An OpenAI model disproves an 80-year-old conjecture in discrete geometry (the Erdős unit-distance problem) GitHub confirms ~3,800 internal repos breached via a malicious VS Code extension on an employee device; TeamPCP demanding $50k Railway 8-hour outage as GCP auto-suspends their production account; cached routes expired and cascaded to AWS + bare metal Meta geo-blocks ALQST and other human rights accounts from Saudi Arabia and UAE; X has not complied with similar requests SpaceX S-1: $1.75T-$2T target valuation on ~$15-16B revenue and ~$8B profit; 30% retail allocation Qwen3.7-Max: agentic coding model with a 35-hour, 1,000+ tool-call autonomous run, compared head-to-head against Claude Opus 4.6 Max SpiderMonkey says goodbye to asm.js after 13 years — Firefox 148 disables OdinMonkey, removal tracked in bug "Ragnarök"

Tuesday roundup: Karpathy joins Anthropic to lead a new Claude-helping-build-Claude pre-training research group Gemini 3.5 Flash lands as Google's "frontier intelligence with action" — and gets repriced like Pro Google reinvents the Search box: dynamic expansion, multimodal input, AI Mode by default CISA contractor leaks AWS GovCloud admin keys, plaintext passwords, and internal credentials on a public GitHub repo named "Private-CISA" Tesla's Robstown lithium refinery wastewater turns up hexavalent chromium and abnormal lithium/vanadium not on the permit Disney erased FiveThirtyEight: Silver estimates ~200k person-hours of work deleted Virtual OS Museum: 1,700+ pre-installed operating systems spanning 1948 to today, in a single Linux VM Minnesota becomes the first state to ban prediction markets; CFTC sues

Monday roundup: Musk loses lawsuit against OpenAI and Sam Altman - jury accepts statute of limitations defense The Quiet Renovation at Bitwarden: CEO swap, retired "always free" promise, edited values Archestra uses Git's --author flag to stop AI bot spam in their GitHub repo Anthropic acquires Stainless, the SDK generator behind every official Anthropic client library The FBI wants $36M nationwide access to license plate readers (Flock and Motorola) Quick note: Haiku OS now boots on M1 Macs

Sunday episode: Mozilla pushes back on UK regulators considering age-gating VPNs Why AI doesn't make your processes faster - it just moves the bottleneck upstream Gruber: AI is technology, not a product (like wireless networking) Apple Silicon vs OpenRouter: local inference is ~3x the cost of the cloud Native all the way... until you need text - WebKit beats SwiftUI for chat UIs Best of the Week: revisiting how frontier AI has broken open CTFs

Saturday roundup: Frontier AI has broken the open CTF format - scoreboards now measure orchestration budget, not skill Mitchell Hashimoto: "entire companies are under AI psychosis" Julia Evans on moving away from Tailwind and learning to structure CSS You don't know HTML lists - five types, hidden powers Kioxia and Dell pack nearly 10PB into a 2RU server (196PB per rack) Japan's Monster Wolf robot sells out as record bear attack season drives demand

Friday roundup: DOJ subpoenas Apple and Google to unmask 100k+ users of EZ Lynk's car-tinkering app Project Zero ships a 0-click Pixel 10 exploit chain (Dolby + VPU kernel) A Wikipedia explorer styled as a Windows XP desktop California's Protect Our Games Act advances - patches or refunds when servers shut down Zulip becomes a nonprofit foundation as founders join Anthropic Mitchell Hashimoto: "entire companies are under AI psychosis"

Sunday episode: GrapheneOS: hardware attestation is becoming a monopoly tool, not security Local AI needs to be the norm - why on-device beats cloud for user data CVE-2024-YIKES: a satirical supply chain post-mortem that's a little too plausible Obsidian plugin abused to deploy the Phantom Pulse RAT Maryland ratepayers footing a $2B grid bill for out-of-state AI data centers A long-time AWS advocate returns and gets suspended within 3 hours Best of the Week: revisiting the Replit agent that deleted production

Saturday roundup: Tim Gowers says ChatGPT 5.5 Pro produced PhD-level math in under two hours Microsoft's DELEGATE-52 paper shows LLMs corrupting documents under autonomous edits Internet Archive expands to Switzerland for sovereign preservation OpenAI's WebRTC pain and the case for Media over QUIC A developer bans query strings on his website and explains why Revisiting the Mythical Man Month, fifty years later

Today's top Hacker News stories: Google quietly broke reCAPTCHA for de-Googled Android — new QR-code verification requires Play Services 25.41.30+, which GrapheneOS and other custom ROMs don't ship. iPhones are unaffected. AWS US-East-1 overheats — an availability zone lost cooling, taking FanDuel and Coinbase down with it. AWS is rolling in additional cooling capacity. Meta kills end-to-end encryption on Instagram DMs — rationale: low uptake. Context: $375M New Mexico jury verdict in March. Jeff Kaufman: AI is breaking two vulnerability cultures — coordinated disclosure and "bugs are bugs" both relied on attackers being slow at scanning patches. AI fixed that. The Linux LPE sequel: ZCRX freelist — one day after Dirtyfrag, a fresh io_uring exploit drops on the front page. Cliff Stoll: rumors of my death are slightly exaggerated — an AI declared the Cuckoo's Egg author dead. He posted from Facebook to politely correct it. $1M of Yu-Gi-Oh cards in a Texas dumpster — Konami's printer was supposed to destroy them. They went in the bin instead.

Today's top Hacker News stories: Dirtyfrag: Universal Linux LPE — chained ESP and RXRPC kernel bugs let any local user escalate to root on every major distro, with no patches yet. Mitigation today: blacklist the modules. Cloudflare lays off 1,100+ employees — the founders explicitly cite a 600% increase in internal AI usage as the reason, with industry-leading severance. AI slop is killing online communities — Robin Moffatt asks everyone, please, share less. Agents need control flow, not more prompts — if you've ever typed MANDATORY in a system prompt, you've hit the ceiling. Canvas LMS breach — ShinyHunters threaten to release student data on 9,000 institutions and 275M users by May 12. The Burning Man MOOP map — the cleanest example of community accountability you'll see all year.

Today's top Hacker News stories: Valve open-sources the Steam Controller — the original 2015 controller's CAD files released under Creative Commons. Fork it, 3D print replacement shells, build your own variant. Anthropic takes over SpaceX's Colossus 1 — 300+ megawatts, 220,000 NVIDIA GPUs. Claude Code rate limits doubled. And a tossed-off mention of "multiple gigawatts of orbital AI compute." Simon Willison: vibe coding and agentic engineering are getting closer than I'd like — the normalization-of-deviance worry as agents get reliable enough to skip code review. The bottleneck was never the code — agents collapse coding time, but the new bottleneck is spec quality, focus, and shared organizational context. Appearing productive in the workplace — a sharp piece on output-competence decoupling, with two anecdotes that will change how you read your colleagues' messages. Google Cloud Fraud Defense — reCAPTCHA's "next evolution" adds an agentic policy engine, Web Bot Auth/SPIFEE integration, and a QR-based human-in-the-loop challenge. Inkscape 1.4.4 — a quiet, careful point release. The closing palate cleanser.

Today's top Hacker News stories: The .de TLD went offline — a DNSSEC key rollover went sideways and validating resolvers refused to serve German domains. The fix, the workarounds, and why this pattern keeps repeating. Google accelerates Gemma 4 with multi-token prediction — up to 3x speedup by training a drafter that proposes multiple tokens for the big model to verify in parallel. Computer use is 45x more expensive than structured APIs — Reflex benchmarks vision agents (53 steps, 17 minutes, 551k tokens) vs API agents (8 calls, 20 seconds, 12k tokens) on the same task. Three Inverse Laws of AI — Susam Pal's riff on Asimov: don't anthropomorphize, don't blindly trust, stay accountable. Chrome silently installs a 4GB AI model — ThatPrivacyGuy's forensic deep dive on the Gemini Nano download with no consent prompt. Should you run plain Docker Compose in production in 2026? — surprisingly, yes, with caveats.

Sunday edition. Today's top Hacker News stories: Mercedes-Benz commits to bringing back physical buttons — the company admits the touchscreen-everything era didn't work, and the manufacturing reason it happened in the first place. AI outperforms doctors in Harvard ER triage trial — OpenAI's o1 vs two ER physicians on 76 cases. The headline number, and the asterisks. Why TUIs are back — Alcides Fonseca on terminal interfaces winning by default because Electron is everywhere. New statue attributed to Banksy in central London — a suited man blinded by a flag, stepping off his pedestal. The council is keeping it. BYOMesh: LoRa mesh radio with 100x bandwidth — a dual-band kit that adds a fast 2.4 GHz channel on top of the slow 900 MHz mesh. A desktop made for one — Geir Isene replaced his entire Linux desktop with custom software because LLMs collapsed the cost of writing it. Best of the Week: The AI agent that deleted a production database. What Replit shipped since, and the pattern connecting that to Anthropic's regex and VS Code's Copilot co-author default. Permissions, not prompts.

Microsoft defaults VS Code to add 'Co-Authored-By Copilot' on every commit — even when Copilot wasn't used or AI features are disabled NetHack 5.0.0 ships after 11 years, replacing yacc/lex with full Lua scripting and unlocking modding Noctua's deep engineering blog: why carbon black pigment forces them to retool injection molds and run 12 months of validation California will start ticketing driverless cars July 1 — manufacturer pays, with a 30-second response requirement to police Roblox stock down 18% as new child-safety friction cuts a billion off bookings guidance — and they're still facing 140+ federal lawsuits Uber's CTO floats turning millions of drivers into a sensor grid for 25 AV partners — driver compensation conspicuously unaddressed

Flock's 'demo partner program' caught accessing live cameras in a children's gymnastics room — Dunwoody, GA renews contract anyway UC Davis professor publishes the actual physics math on AI water use in California (it's far smaller than the panic suggests) Inside a credit card brute force attack: PCI's masked PAN, differentiated gateway errors, and friendly merchants exempt from 3D Secure Spotify rolls out 'Verified by Spotify' badges for human artists — but it labels the human, not the music WhatCable: a tiny Mac menu bar app that finally tells you what your USB-C cable can actually do Lucid dream research: subjects solving math, practicing darts, and answering questions in REM sleep — and a warning not to weaponize it

Anthropic's Claude Code allegedly throttles or charges extra when commits mention 'OpenClaw' LinkedIn scans your browser for 6,278 specific extensions, encrypts results into every API request Mozilla opposes Chrome's Prompt API as a Google-controlled web standard Rivian lets you fully disable internet connectivity in your vehicle Belgium reverses course and stops decommissioning its nuclear power plants Spain's parliament moves against LaLiga's massive Cloudflare IP blocks Shai-Hulud themed malware spreads through PyTorch Lightning and 2,200 compromised repos Mark Klein and the original AT&T NSA surveillance whistleblower story, revisited

Today on HN Daily: Zed 1.0 ships (1459pts) HERMES.md in commit messages causes routing to extra-usage billing — Anthropic refuses refunds Online age verification is the hill to die on Cursor Camp by Neal.fun Soft launch of open-source code platform for the Dutch government We need a federation of forges (Tangled) Copy Fail — CVE-2026-31431 SUID exploit via clipboard paste Maryland becomes first state to ban surveillance pricing in grocery stores

Today on HN Daily: Ghostty is leaving GitHub (1442pts) Your phone is about to stop being yours — Keep Android Open Localsend: open-source AirDrop alternative Talkie: a 13B vintage language model from 1930 An update on GitHub availability — Microsoft going multi-cloud Claude.ai unavailable and elevated errors on the API Who owns the code Claude Code wrote? GitHub Actions is the weakest link

Today on HN Daily: Microsoft and OpenAI end their exclusive and revenue-sharing deal GitHub Copilot moves to usage-based billing (Opus = 27x multiplier) 4TB of voice samples stolen from 40k AI contractors at Mercor 'Men who stare at walls' — the case for sitting still Pgbackrest is no longer being maintained Show HN: Dirac OSS agent tops TerminalBench on Gemini 3 Flash China blocks Meta's acquisition of AI startup Manus 'Is my blue your blue?' — color perception goes viral

Today on HN Daily (Sunday Best Of edition): An AI agent deleted our production database (548 comments) GoDaddy gave a domain to a stranger without any documentation Asahi Linux Progress Report: Linux 7.0 Why has there been so little progress on Alzheimer's disease? Statecharts: hierarchical state machines (XState creator chimes in) SWE-bench Verified no longer measures frontier coding capabilities I bought Friendster for $30k — here's what I'm doing with it AI should elevate your thinking, not replace it Best of the Week: DeepSeek v4 (1782pts)

Today on HN Daily (DNA Day edition): New tiny 10 GbE USB adapters: cooler, smaller, cheaper 1-Bit Hokusai's 'The Great Wave' renders Replace IBM Quantum back end with /dev/urandom — same result 'Plain text has been around for decades and it's here to stay' Trump fires all 24 members of NSF oversight board The Free Universal Construction Kit (3D-printed brick adapters) Martin Galway's C64 music source files released Discret 11 — French TV encryption of the 80s

Today on HN Daily: DeepSeek v4 dominates the front page (1782pts) 'I cancelled Claude' — token issues, declining quality, poor support Sabotaging projects by overthinking and scope creep Spinel — Matz ships a Ruby AOT native compiler Google to invest up to $40B in Anthropic SDL now supports DOS OpenAI releases GPT-5.5 and GPT-5.5 Pro in the API 'My audio interface has SSH enabled by default'

Today on HN Daily: GPT-5.5 ships (HN community supremely unimpressed with the marketing) David Crawshaw: 'I am building a cloud' — Cloud 1.0 IOPS price-gouging Wired: Palantir employees wondering if they're the bad guys Bitwarden CLI compromised in Checkmarx supply chain attack Anthropic postmortem on Claude Code quality issues Your hex editor should color-code bytes French government agency confirms breach as hacker sells data Show HN: Honker — Postgres NOTIFY/LISTEN semantics for SQLite

Today on HN Daily (Earth Day edition): Alberta startup sells no-tech tractors for half price (1198pts) Windows 9x Subsystem for Linux (871pts) Qwen 3.6-27B claims flagship-level coding GitHub CLI now collects pseudoanonymous telemetry by default Google's 8th-generation TPUs for the agentic era Stable Firefox identifier links all your private Tor identities 'Over-editing' — when LLMs modify more code than needed Apple fixes bug that cops used to extract deleted iPhone messages

Today on HN Daily: Framework Laptop 13 Pro (831pts) Laws of Software Engineering visual list (794pts) OpenAI ships ChatGPT Images 2.0 GitHub Copilot plan changes spark Opus 4.7 rug-pull outrage TagTinker: edit store price tags with Flipper Zero Meta to capture employee mouse movements and keystrokes for AI training The Vercel breach: OAuth attack on platform env vars 'I don't want your PRs anymore' — open source in the AI era

Today on HN Daily: John Ternus to become Apple CEO (985pts) EU: all phones must have replaceable batteries from 2027 GitHub's fake star economy exposed Kimi K2.6 and Qwen 3.6 Max: Chinese AI model race heats up Atlassian enables default data collection for AI training M7.7 earthquake near Miyako, Japan Deezer: 44% of daily uploads are AI-generated

Today on HN Daily: Archive of BYTE magazine from 1975 (519pts) Vercel April 2026 security incident Notion leaks email addresses on public pages The seven programming ur-languages The RAM shortage could last years SPEAKE(a)R: turning speakers into microphones Best of the Week: Claude Opus 4.7 and its aftermath

Today on HN Daily: Migrating from DigitalOcean to Hetzner (661pts) Opus 4.7 tokenizer costs 45% more than 4.6 Michael Rabin has died -- a computing giant The Amiga Graphics Archive Why Japan has such good railways B-52 bomber's electromechanical star tracker Sumida Aquarium's 2026 penguin relationship chart

Today on HN Daily: Claude Design: is this the Figma killer? (790pts) Claude 4.7 tokenizer costs 30% more on code Asimov's The Last Question trends again Ban the sale of precise geolocation data NASA Force: a slick, mysterious new government site Smol Machines: VMs with subsecond cold starts Middle schooler finds ancient Troy coin in Berlin

Today on HN Daily: Claude Opus 4.7 drops with cybersecurity safeguards (1385pts) Qwen3.6-35B open weights rival frontier models on a laptop OpenAI ships major Codex update Codex hacked a Samsung TV (sort of) Cloudflare launches email sending service The future of everything is lies