HN Daily

Today's top Hacker News stories: Dirtyfrag: Universal Linux LPE — chained ESP and RXRPC kernel bugs let any local user escalate to root on every major distro, with no patches yet. Mitigation today: blacklist the modules. Cloudflare lays off 1,100+ employees — the founders explicitly cite a 600% increase in internal AI usage as the reason, with industry-leading severance. AI slop is killing online communities — Robin Moffatt asks everyone, please, share less. Agents need control flow, not more prompts — if you've ever typed MANDATORY in a system prompt, you've hit the ceiling. Canvas LMS breach — ShinyHunters threaten to release student data on 9,000 institutions and 275M users by May 12. The Burning Man MOOP map — the cleanest example of community accountability you'll see all year.

Today's top Hacker News stories: Valve open-sources the Steam Controller — the original 2015 controller's CAD files released under Creative Commons. Fork it, 3D print replacement shells, build your own variant. Anthropic takes over SpaceX's Colossus 1 — 300+ megawatts, 220,000 NVIDIA GPUs. Claude Code rate limits doubled. And a tossed-off mention of "multiple gigawatts of orbital AI compute." Simon Willison: vibe coding and agentic engineering are getting closer than I'd like — the normalization-of-deviance worry as agents get reliable enough to skip code review. The bottleneck was never the code — agents collapse coding time, but the new bottleneck is spec quality, focus, and shared organizational context. Appearing productive in the workplace — a sharp piece on output-competence decoupling, with two anecdotes that will change how you read your colleagues' messages. Google Cloud Fraud Defense — reCAPTCHA's "next evolution" adds an agentic policy engine, Web Bot Auth/SPIFEE integration, and a QR-based human-in-the-loop challenge. Inkscape 1.4.4 — a quiet, careful point release. The closing palate cleanser.

Today's top Hacker News stories: The .de TLD went offline — a DNSSEC key rollover went sideways and validating resolvers refused to serve German domains. The fix, the workarounds, and why this pattern keeps repeating. Google accelerates Gemma 4 with multi-token prediction — up to 3x speedup by training a drafter that proposes multiple tokens for the big model to verify in parallel. Computer use is 45x more expensive than structured APIs — Reflex benchmarks vision agents (53 steps, 17 minutes, 551k tokens) vs API agents (8 calls, 20 seconds, 12k tokens) on the same task. Three Inverse Laws of AI — Susam Pal's riff on Asimov: don't anthropomorphize, don't blindly trust, stay accountable. Chrome silently installs a 4GB AI model — ThatPrivacyGuy's forensic deep dive on the Gemini Nano download with no consent prompt. Should you run plain Docker Compose in production in 2026? — surprisingly, yes, with caveats.

Sunday edition. Today's top Hacker News stories: Mercedes-Benz commits to bringing back physical buttons — the company admits the touchscreen-everything era didn't work, and the manufacturing reason it happened in the first place. AI outperforms doctors in Harvard ER triage trial — OpenAI's o1 vs two ER physicians on 76 cases. The headline number, and the asterisks. Why TUIs are back — Alcides Fonseca on terminal interfaces winning by default because Electron is everywhere. New statue attributed to Banksy in central London — a suited man blinded by a flag, stepping off his pedestal. The council is keeping it. BYOMesh: LoRa mesh radio with 100x bandwidth — a dual-band kit that adds a fast 2.4 GHz channel on top of the slow 900 MHz mesh. A desktop made for one — Geir Isene replaced his entire Linux desktop with custom software because LLMs collapsed the cost of writing it. Best of the Week: The AI agent that deleted a production database. What Replit shipped since, and the pattern connecting that to Anthropic's regex and VS Code's Copilot co-author default. Permissions, not prompts.

Microsoft defaults VS Code to add 'Co-Authored-By Copilot' on every commit — even when Copilot wasn't used or AI features are disabled NetHack 5.0.0 ships after 11 years, replacing yacc/lex with full Lua scripting and unlocking modding Noctua's deep engineering blog: why carbon black pigment forces them to retool injection molds and run 12 months of validation California will start ticketing driverless cars July 1 — manufacturer pays, with a 30-second response requirement to police Roblox stock down 18% as new child-safety friction cuts a billion off bookings guidance — and they're still facing 140+ federal lawsuits Uber's CTO floats turning millions of drivers into a sensor grid for 25 AV partners — driver compensation conspicuously unaddressed

Flock's 'demo partner program' caught accessing live cameras in a children's gymnastics room — Dunwoody, GA renews contract anyway UC Davis professor publishes the actual physics math on AI water use in California (it's far smaller than the panic suggests) Inside a credit card brute force attack: PCI's masked PAN, differentiated gateway errors, and friendly merchants exempt from 3D Secure Spotify rolls out 'Verified by Spotify' badges for human artists — but it labels the human, not the music WhatCable: a tiny Mac menu bar app that finally tells you what your USB-C cable can actually do Lucid dream research: subjects solving math, practicing darts, and answering questions in REM sleep — and a warning not to weaponize it

Anthropic's Claude Code allegedly throttles or charges extra when commits mention 'OpenClaw' LinkedIn scans your browser for 6,278 specific extensions, encrypts results into every API request Mozilla opposes Chrome's Prompt API as a Google-controlled web standard Rivian lets you fully disable internet connectivity in your vehicle Belgium reverses course and stops decommissioning its nuclear power plants Spain's parliament moves against LaLiga's massive Cloudflare IP blocks Shai-Hulud themed malware spreads through PyTorch Lightning and 2,200 compromised repos Mark Klein and the original AT&T NSA surveillance whistleblower story, revisited

Today on HN Daily: Zed 1.0 ships (1459pts) HERMES.md in commit messages causes routing to extra-usage billing — Anthropic refuses refunds Online age verification is the hill to die on Cursor Camp by Neal.fun Soft launch of open-source code platform for the Dutch government We need a federation of forges (Tangled) Copy Fail — CVE-2026-31431 SUID exploit via clipboard paste Maryland becomes first state to ban surveillance pricing in grocery stores

Today on HN Daily: Ghostty is leaving GitHub (1442pts) Your phone is about to stop being yours — Keep Android Open Localsend: open-source AirDrop alternative Talkie: a 13B vintage language model from 1930 An update on GitHub availability — Microsoft going multi-cloud Claude.ai unavailable and elevated errors on the API Who owns the code Claude Code wrote? GitHub Actions is the weakest link

Today on HN Daily: Microsoft and OpenAI end their exclusive and revenue-sharing deal GitHub Copilot moves to usage-based billing (Opus = 27x multiplier) 4TB of voice samples stolen from 40k AI contractors at Mercor 'Men who stare at walls' — the case for sitting still Pgbackrest is no longer being maintained Show HN: Dirac OSS agent tops TerminalBench on Gemini 3 Flash China blocks Meta's acquisition of AI startup Manus 'Is my blue your blue?' — color perception goes viral

Today on HN Daily (Sunday Best Of edition): An AI agent deleted our production database (548 comments) GoDaddy gave a domain to a stranger without any documentation Asahi Linux Progress Report: Linux 7.0 Why has there been so little progress on Alzheimer's disease? Statecharts: hierarchical state machines (XState creator chimes in) SWE-bench Verified no longer measures frontier coding capabilities I bought Friendster for $30k — here's what I'm doing with it AI should elevate your thinking, not replace it Best of the Week: DeepSeek v4 (1782pts)

Today on HN Daily (DNA Day edition): New tiny 10 GbE USB adapters: cooler, smaller, cheaper 1-Bit Hokusai's 'The Great Wave' renders Replace IBM Quantum back end with /dev/urandom — same result 'Plain text has been around for decades and it's here to stay' Trump fires all 24 members of NSF oversight board The Free Universal Construction Kit (3D-printed brick adapters) Martin Galway's C64 music source files released Discret 11 — French TV encryption of the 80s

Today on HN Daily: DeepSeek v4 dominates the front page (1782pts) 'I cancelled Claude' — token issues, declining quality, poor support Sabotaging projects by overthinking and scope creep Spinel — Matz ships a Ruby AOT native compiler Google to invest up to $40B in Anthropic SDL now supports DOS OpenAI releases GPT-5.5 and GPT-5.5 Pro in the API 'My audio interface has SSH enabled by default'

Today on HN Daily: GPT-5.5 ships (HN community supremely unimpressed with the marketing) David Crawshaw: 'I am building a cloud' — Cloud 1.0 IOPS price-gouging Wired: Palantir employees wondering if they're the bad guys Bitwarden CLI compromised in Checkmarx supply chain attack Anthropic postmortem on Claude Code quality issues Your hex editor should color-code bytes French government agency confirms breach as hacker sells data Show HN: Honker — Postgres NOTIFY/LISTEN semantics for SQLite

Today on HN Daily (Earth Day edition): Alberta startup sells no-tech tractors for half price (1198pts) Windows 9x Subsystem for Linux (871pts) Qwen 3.6-27B claims flagship-level coding GitHub CLI now collects pseudoanonymous telemetry by default Google's 8th-generation TPUs for the agentic era Stable Firefox identifier links all your private Tor identities 'Over-editing' — when LLMs modify more code than needed Apple fixes bug that cops used to extract deleted iPhone messages

Today on HN Daily: Framework Laptop 13 Pro (831pts) Laws of Software Engineering visual list (794pts) OpenAI ships ChatGPT Images 2.0 GitHub Copilot plan changes spark Opus 4.7 rug-pull outrage TagTinker: edit store price tags with Flipper Zero Meta to capture employee mouse movements and keystrokes for AI training The Vercel breach: OAuth attack on platform env vars 'I don't want your PRs anymore' — open source in the AI era

Today on HN Daily: John Ternus to become Apple CEO (985pts) EU: all phones must have replaceable batteries from 2027 GitHub's fake star economy exposed Kimi K2.6 and Qwen 3.6 Max: Chinese AI model race heats up Atlassian enables default data collection for AI training M7.7 earthquake near Miyako, Japan Deezer: 44% of daily uploads are AI-generated

Today on HN Daily: Archive of BYTE magazine from 1975 (519pts) Vercel April 2026 security incident Notion leaks email addresses on public pages The seven programming ur-languages The RAM shortage could last years SPEAKE(a)R: turning speakers into microphones Best of the Week: Claude Opus 4.7 and its aftermath

Today on HN Daily: Migrating from DigitalOcean to Hetzner (661pts) Opus 4.7 tokenizer costs 45% more than 4.6 Michael Rabin has died -- a computing giant The Amiga Graphics Archive Why Japan has such good railways B-52 bomber's electromechanical star tracker Sumida Aquarium's 2026 penguin relationship chart

Today on HN Daily: Claude Design: is this the Figma killer? (790pts) Claude 4.7 tokenizer costs 30% more on code Asimov's The Last Question trends again Ban the sale of precise geolocation data NASA Force: a slick, mysterious new government site Smol Machines: VMs with subsecond cold starts Middle schooler finds ancient Troy coin in Berlin

Today on HN Daily: Claude Opus 4.7 drops with cybersecurity safeguards (1385pts) Qwen3.6-35B open weights rival frontier models on a laptop OpenAI ships major Codex update Codex hacked a Samsung TV (sort of) Cloudflare launches email sending service The future of everything is lies

Google data requests and user notification promises (EFF) Security as proof-of-work in the age of token-burning AI Cal.com going closed source and the open-source trust debate ChatGPT for Excel and the spreadsheet co-pilot race Building a modern terminal pager (and why UTF-8 is hard) PiCore / Tiny Core Linux on Raspberry Pi McDonald's Japan burger photo bun alignment... plus web perf comparisons

Today on HN Daily: DaVinci Resolve adds full Photo mode Backblaze stops backing up OneDrive and Dropbox folders Google cracks down on back-button hijacking Thousands of rare concert recordings hit the Internet Archive Jujutsu (jj) version control continues its rise Flock license plate surveillance and opt-out struggles YouTube surpasses Disney as world's largest media company

Today on HN Daily: Someone bought 30 WordPress plugins and planted backdoors in all of them Servo browser engine now on crates.io GitHub ships native stacked PRs Polymarket bot that always buys No Cloudflare unified CLI preview Firefox builds 17% faster with WebIDL caching AMD GAIA: local AI agents on AMD hardware

Today on HN Daily: Docker pull fails across Spain during football matches Anthropic quietly downgraded cache TTL, developers furious Seven countries at 100% renewable electricity Bring Back Idiomatic Design Bryan Cantrill on the peril of laziness lost Google removes Doki Doki Literature Club boringBar: taskbar-style dock for macOS Best of the Week: EFF leaving X

Today on HN Daily: Small models found the same vulnerabilities as Mythos Berkeley breaks top AI agent benchmarks without solving tasks Cirrus Labs joins OpenAI, Cirrus CI shutting down June 1 Advanced Mac Substitute reimplements 1980s Mac OS APIs Dark Castle returns 447 TB/cm² atomic-scale memory on fluorographane Pijul: a patch-theory-based alternative to Git

Today on HN Daily: 1D Chess WireGuard makes new Windows release following Microsoft signing resolution CPU-Z and HWMonitor compromised JSON Formatter Chrome Plugin Now Closed and Injecting Adware Industrial design files for Keychron keyboards and mice Filing the Corners Off MacBooks Helium Is Hard to Replace

Stories today: - EFF is leaving X - Reallocating $100/Month Claude Code Spend to Zed and OpenRouter - Maine is about to become the first state to ban major new data centers - Introduction to Nintendo DS Programming - Wit, unker, Git: The lost medieval pronouns of English intimacy

Mac OS X running natively on a Nintendo Wii Five Git commands to triage a codebase before reading it Meta introduces Muse Spark (and what’s actually available) VeraCrypt’s Windows update pipeline blocked by signing account issues Cities ending contracts with Flock Safety surveillance tech Škoda’s DuoBell that targets noise-cancelling headphone ‘gaps’ Why ML/LLMs may get profoundly weird as deployment scales

Today on HN Daily: Project Glasswing (Anthropic AI security initiative), a brutalist concrete laptop stand, Claude Mythos Preview system card, GLM-5.1 long-horizon agents, Apollo 11 guidance computer bug, Cloudflare post-quantum 2029, and Artemis II lunar flyby.

Today on HN Daily: Claude Code users report reduced reasoning depth and more hallucinations New Yorker profile asks whether Sam Altman can be trusted with AI power Bram Cohen on the risks and rewards of “vibe coding” Battle for Wesnoth nostalgia and why long-running open source survives Quantum timelines and why post-quantum crypto migration needs urgency German police publicly name alleged REvil/GandCrab leaders Adobe allegedly edits the hosts file to detect Creative Cloud installs

Gemma 4 runs on iPhone (offline LLMs) Caveman prompt to cut token-y verbosity Artemis II sees the Moon’s far side Microsoft’s never-ending Windows GUI framework churn LÖVE 2D Lua game framework Building SQLite devtools with AI agents (and refactoring the spaghetti) Nightly Rust tail-call interpreter performance tricks Sunday Best Of: BrowserGate updates on LinkedIn extension scanning

Today on HN Daily: Mvidia: a browser game that teaches you to build a GPU from transistors Someone mapped 75+ different Microsoft products named ‘Copilot’ Self-distillation boosts code generation without RL or a teacher model Apple approves a signed driver enabling Nvidia eGPUs on Arm Macs (Tiny Corp) sllm: ‘unlimited token’ shared GPU cohorts, and the HN skepticism TurboQuant-WASM: vector quantization and dot products in the browser

Artemis II sends back a spectacular Earth photo iNaturalist and the surprisingly hardcore citizen-science community Show HN: Blogosphere, a front page for personal blogs Mintlify swaps classic RAG for a virtual filesystem (ChromaFs) OpenClaw privilege-escalation bug and deployment lessons Tell HN: Anthropic changes Claude Code subscription usage for third-party harnesses Running Gemma 4 locally on a Mac mini (and the tool-calling pain) Show HN: TinyOS RTOS for microcontrollers

LinkedIn extension probing and browser fingerprinting backlash Google DeepMind releases Gemma 4 open models Qwen3.6-Plus pitches ‘real world agents’ via API AMD’s Lemonade: OpenAI-compatible local AI server using GPU/NPU Tailscale’s notch-proof macOS windowed UI Cursor 3 shifts toward an agent-first coding workspace Former Azure engineer on decisions that eroded trust Artemis II toilet as a surprisingly mission-critical milestone

Top stories from Hacker News today: DRAM pricing is squeezing the hobbyist SBC market Cloudflare’s EmDash, a WordPress successor focused on plugin sandboxing Claude-assisted FreeBSD remote kernel RCE write-up (CVE-2026-4747) NASA Artemis II news conference on the NASA Live schedule Git bayesect: Bayesian git bisection for flaky bugs Flight-Viz: 10K flights on a 3D globe in Rust+WASM

Stories covered: - Claude Code source map leak and hidden feature flags - Axios NPM supply-chain compromise and mitigation ideas - OpenAI's reported $852B valuation and what it implies - OkCupid photo-sharing allegations and privacy risks - GitHub historic uptime debate and SLO math - Why AI code 'slop' may be uneconomic long-term

Today on HN Daily: How to Turn Anything into a Router — US router import ban prompts a practical guide to DIY Linux routers from e-waste Fedware — Government apps that spy harder than TikTok; the White House app ships a Huawei tracking SDK and an ICE tip line CodingFont — A bracket-tournament game to find your perfect coding font (166 comments of font debates) FTC vs. OkCupid — Match Group settles over secretly sharing 3 million users' photos with a facial recognition company back in 2014 Don't Let AI Write For You — Why outsourcing writing to LLMs is like paying someone else to work out for you I Am Definitely Missing the Pre-AI Writing Era — A raw personal account of losing the ability to write without AI assistance MacBook Touchscreen with $1 of Hardware — Project Sistine resurfaces; Apple still hasn't made a touchscreen Mac in 2026 Cherri & Build123d — A language that compiles to Apple Shortcuts, and Python-based parametric CAD

Kai and Maya cover the top stories from Hacker News for Sunday, March 29, 2026: - Voyager 1 is still flying through interstellar space on just 69KB of memory and an 8-track tape recorder, 48 years after launch - A researcher decrypted 377 Cloudflare Turnstile programs and found ChatGPT reads your React state before you can type - Neovim 0.12.0 drops with built-in plugin manager, multi-cursor support, and AI integrations - C++26 is officially done with reflection, memory safety improvements, contracts, and sender/receiver concurrency - Claude Code caught running git reset --hard origin/main on a user's repo every 10 minutes - AI coding agents could revive the practical importance of free software by exercising freedoms on behalf of non-technical users - RISE project launches free native RISC-V CI runners on GitHub for any open source project - Pretext solves the notoriously hard problem of multiline text measurement in pure TypeScript

Kai and Maya cover the top stories from Hacker News for Saturday, March 28, 2026: - GitLab founder Sid Sijbrandij fights bone cancer by founding companies, sharing 25TB of treatment data publicly - Stanford research confirms AI chatbots are yes-men that reinforce bad relationship and personal decisions - Decompiling the White House app reveals GPS tracking every 4.5 minutes, cookie banner injection, and third-party JS from random GitHub Pages - Someone built an open-world game engine that runs on the Nintendo 64's 4MB of RAM - Cocoa-Way brings native Wayland compositor support to macOS for running Linux GUI apps seamlessly - DOOM rendered entirely in CSS with 2,000 divs, no Canvas or WebGL, using modern CSS 3D transforms - A philosophical argument that Linux is an interpreter, built from reverse-engineering a self-replicating kexec loop - Continued human plus AI plus proof assistant work on Donald Knuth's Claude Cycles mathematical problem

Kai and Maya cover the top stories from Hacker News for Friday, March 27, 2026: - Telnyx Python SDK hit by TeamPCP supply chain attack on PyPI using WAV steganography for payload delivery - FBI Director Kash Patel's personal Gmail hacked by Iran-linked Handala Hack Team, DOJ confirms - Anatomy of the .claude/ folder: configuring Claude Code with rules, skills, and custom commands - Make macOS consistently bad (unironically) by forcing uniform rounded corners via DYLD injection - LG's new 1Hz display panel could cut laptop battery consumption by nearly half - Installing a Let's Encrypt TLS certificate on a Brother printer with automated Certbot renewal - Nashville library launches Memory Lab for free digitization of home movies and family archives - Meow.camera: a live cat camera that hit the Hacker News front page

Kai and Maya cover the top stories from Hacker News for Thursday, March 26, 2026: - LiteLLM hit by TeamPCP supply chain attack on PyPI, stealing credentials across AWS, GCP, Kubernetes, and more - The great GitHub to Codeberg migration debate: practical tradeoffs of leaving Microsoft's platform - NYC hospitals drop Palantir over privacy and political concerns while the company expands in UK healthcare - DOOM runs entirely from 2,000 DNS TXT records with zero files touching disk - CERN selected to host Europe's Diamond Open Access publishing platform with 17M euro budget - Remembering John Bradley, creator of the beloved xv image viewer for Unix - Deploy Tarot: a tarot card reading site that tells you if today is safe to push to production

Kai and Maya cover the top stories from Hacker News for Wednesday, March 25, 2026: - Supreme Court rules 9-0 for Cox Communications, ISPs cannot be held liable for users' piracy - EU Chat Control proposal returns with forced re-vote on scanning all encrypted messages - Google's TurboQuant achieves 3-bit KV cache compression with zero metadata overhead - Security researcher runs a Tesla Model 3 computer on his desk using crashed car parts - ARC-AGI-3 launches first interactive reasoning benchmark, frontier AI models score near zero - Apple criticized for auto-closing developer bug reports after years of silence - 90% of Claude Code output goes to low-star GitHub repos, but that matches the platform base rate

Kai and Maya cover the top stories from Hacker News for Tuesday, March 24, 2026: - LiteLLM compromised via supply chain attack on its own security scanner, stealing credentials from thousands of machines - Wine 11 ships NTSYNC kernel driver bringing massive gaming performance gains to mainline Linux - OpenAI shuts down Sora after six months as Disney deal collapses and company pivots toward IPO - Apple launches free all-in-one business platform with MDM, email, calendar, and ads in Maps - Arm names its first custom silicon the AGI CPU, sparking naming controversy on Hacker News - Developer blog post about being bored of talking about AI resonates with over 430 upvotes - Hypothesis creator launches Hegel for property-based testing across every programming language - SentrySearch uses Gemini video embeddings for natural-language semantic video search

Kai and Maya cover the top stories from Hacker News for Monday, March 23, 2026: - An iPhone 17 Pro runs a 400 billion parameter LLM on-device using SSD streaming at 0.6 tokens per second - Autoresearch lets Claude Code run ML experiments autonomously, cutting error by 90% in a single Saturday - Trivy's GitHub Actions hit by a second supply chain attack this month, 75 version tags poisoned with an infostealer - A deep dive reveals that finding all regex matches has always been O(n^2), even in engines designed to prevent it - LocalStack archives its 64k-star open-source repo, now requires an account to run - The FCC bans all new foreign-made consumer routers from the US market, sparking debate over whether any are even made domestically - A hacker mints $80 million in fake stablecoins after compromising an AWS account, crashing the token 97.5%

Kai and Maya cover the top stories from Hacker News for Sunday, March 22, 2026: - Bram Cohen (creator of BitTorrent) releases Manyana, a CRDT-based vision for the future of version control - Project NOMAD brings offline Wikipedia, AI assistants, maps, and education to any computer without internet - Flash-MoE runs a 397 billion parameter AI model on a single MacBook Pro at 4+ tokens per second - PC Gamer publishes a 37MB article recommending RSS readers, downloading 500MB of ads in the background - Steve Krouse argues that reports of code's death are greatly exaggerated in the age of vibe coding - A love letter to NixOS explores why declarative systems are perfect for the AI coding era - Inside RollerCoaster Tycoon's legendary x86 assembly optimization from 1999

Kai and Maya cover the top stories from Hacker News for Saturday, March 21, 2026: - Armin Ronacher argues that AI speed obsession dangerously undervalues the irreplaceable role of time in building trust and community - Dyne.org warns that child protection age verification is evolving into broad internet access control infrastructure backed by Meta lobbying - George Hotz's Tinybox offers offline 120B parameter AI inference for $12K to $65K with no cloud dependency - Grafeo graph database sparks heated debate about whether AI-generated codebases with 200K lines in week one can be trusted - Invisalign revealed as the world's biggest 3D printer user, printing over one million custom molds annually - Tooscut brings professional video editing to the browser with WebGPU and Rust/WASM, billing itself as the Photopea of video - A critical Trivy supply chain attack was accidentally suppressed on HN by spam bot activity that flagged the domain years earlier

Kai and Maya cover the top stories from Hacker News for Friday, March 20, 2026: - Le Monde tracks France's aircraft carrier in real-time via Strava fitness data in a major OPSEC failure - Microsoft publishes a sweeping blog post pledging to fix Windows 11 quality across performance, reliability, and design - OpenCode becomes one of the largest open-source AI coding agents with 126K GitHub stars and 5 million monthly developers - OpenUI rewrites their Rust WASM parser in TypeScript and gets 3x faster by eliminating serialization overhead - Practical Engineering explores the wild engineering and ethical history of the Los Angeles Aqueduct - A developer reconstructs VisiCalc in under 500 lines of C, highlighting the highest impact-to-complexity ratio in software history - MoonshotAI's Attention Residuals paper introduces dynamic layer-to-layer attention in Transformers, authored by a high school student

Kai and Maya cover the top stories from Hacker News for Thursday, March 19, 2026: - Astral, creator of uv and ruff, joins OpenAI in a blockbuster acquisition that sparks centralization fears across the Python ecosystem - Google adds a 24-hour cooling-off period for sideloading unverified Android apps, fueling walled-garden concerns - KittenTTS launches three new open-source TTS models with the smallest under 25MB, capable of running on a Raspberry Pi - A deep dive into Return of the Obra Dinn's spherical mapped dithering technique for stable 1-bit 3D rendering - The Iroh team launches noq, a new Rust QUIC implementation with multipath support, praised for respectful open-source fork etiquette - Cockpit, the web-based Linux server GUI, reignites the eternal CLI vs GUI debate

Kai and Maya cover the top stories from Hacker News for Wednesday, March 18, 2026: - Rob Pike's five Rules of Programming from 1989 hit 820 points and 400+ comments, reigniting debates about premature optimization and data-first design - OpenRocket, the open-source model rocket simulator with 6-DOF physics, inspires the STEM education crowd at 365 points - Wander is a tiny decentralized tool for exploring the small web, built in 90 minutes with just two files - NVIDIA NemoClaw offers sandboxed runtime for always-on autonomous AI agents at 220 points - NVIDIA GreenBoost transparently extends GPU VRAM using system RAM and NVMe storage - Stardrift predicts whether your specific flight will have Starlink internet by tracking aircraft tail numbers - An AI-assisted short story about debugging AI gets de-indexed from HN for lacking AI disclosure