Senior devs optimize for complexity management (stability), while the rest of the business optimizes for uncertainty reduction (speed). The solution: instead of saying 'this adds complexity,' ask 'can we try something quicker?' Frame your expertise as serving their goals.

DuckDB finally adds client-server mode via the Quack protocol. Built on HTTP, it lets multiple processes write to the same database concurrently. Benchmarks show it beating both PostgreSQL and Arrow Flight SQL in bulk transfers (60M rows in under 5 seconds) while matching PostgreSQL on transactional workloads.

DeepMind introduces an AI-enhanced mouse pointer powered by Gemini. Instead of typing detailed prompts, users can point at any element and speak naturally ('fix this', 'move that here'). The system understands context from where you're pointing and what's under the cursor.

FULU Foundation releases an OrcaSlicer fork that restores full BambuNetwork support for Bambu Lab printers, bypassing the company's recent restrictions. The fork allows cloud connectivity and remote monitoring without being limited to LAN-only mode.

Statewright uses state machines to constrain which tools AI agents can use in each phase. A planning state gets read-only tools, implementation gets edit tools, testing gets bash for tests only. Research shows 13B-20B parameter local models going from 2/10 to 10/10 on SWE-bench tasks with these constraints.

Googlebook is a new laptop category built around Gemini AI, launching Fall 2026. Features include Magic Pointer (select anything to query AI), custom widget creation via prompts, and seamless Android phone integration with Cast My Apps and Quick Access. Tagline: 'Intelligence is the new spec.'

CERT released six serious CVEs for dnsmasq, affecting nearly all non-ancient versions. The maintainer notes there's been 'a revolution in AI-based security research' leading to a flood of bug reports. Patches and release 2.92rel2 are available at thekelleys.org.uk/dnsmasq/CVE/.

Needle is a 26M parameter function-calling model that runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. Architecture uses only attention and gating (no MLPs). Trained on 200B tokens across 16 TPU v6e, with post-training on 2B tokens of Gemini-synthesized function-calling data.

XBOW discovered an unauthenticated remote code execution vulnerability in Exim mail server (CVE-2026-45185). This follows previous major Exim CVEs in 2019, 2020, and 2023. Coordinated distro releases are happening today.

Wix UX team article on writing better error messages, arguing that error messages should consider user state of mind and avoid technical jargon. However, HN commenters push back hard: cryptic error codes are better than 'Something went wrong' because at least support can grep for them.

Jeff Geerling explains why he blocked his Bambu P1S from the internet, locked it in Developer mode, and switched to OrcaSlicer after Bambu Lab pushed always-connected cloud as the new default. They built their success on open source projects like Marlin, Klipper, and OctoPrint, but now they're locking users into their ecosystem and blaming 'unauthorized traffic' for server issues.

eBay's board rejected GameStop's unsolicited $56 billion takeover bid, calling it 'not credible.' GameStop, whose existence at this point owes more to meme stock magic than actual business fundamentals, apparently thought they could buy the world's largest auction site.

Instructure, the company behind Canvas LMS used by universities everywhere, paid an undisclosed ransom to hackers who stole personal data. In their announcement, they reassured everyone that the criminals promised to delete the data and not extort customers. Because ransomware operators are known for their integrity.

Obsidian CEO kepano explains their new community site and review system for plugins. Manual reviews had become a massive bottleneck since AI made writing plugins trivially easy, and the team was burning out. The new system aims to scale plugin submissions without sacrificing quality or security.

Maxime Heckel's deep dive into rendering realistic skies and atmospheres in real-time using WebGL shaders. Covers sky domes, raymarching, Rayleigh and Mie scattering, and ozone absorption to create everything from simple blue skies to sunset gradients to full planetary atmospheres. MIT licensed, so go ahead and steal it for your game.

［Article behind paywall/timeout, based on discussion］ EU is moving to restrict addictive design features in social media apps targeting children, including endless scrolling and algorithmic feeds that maximize engagement over wellbeing.

Coursera has acquired Udemy to create what they claim is the world's most comprehensive skills platform. The merger combines Coursera's university partnerships with Udemy's marketplace of instructor-led courses.

This is a Chinese government policy slogan introduced by Xi Jinping in 2016 to address rampant real estate speculation. The policy led to strict regulations including purchase restrictions, tighter mortgages, and limits on developer leverage, contributing to the property sector crisis but also making housing more accessible.

The author compares Docker image bloat (hundreds of MB) with WASM binaries, noting that a full Godot game engine compiles to just 35MB WASM that runs in any browser. The argument is that WASM offers drastically smaller deployments with zero installation.

An analysis tool that identifies narrative archetypes in storytelling, similar to how music has scales. The discussion references Dan Harmon's Story Circle and Georges Polti's 36 dramatic situations, suggesting all stories follow recognizable patterns.

REVISIT: Comments exploded 5x since first coverage. The article argues that since AI models now write better Rust than C++ (thanks to the compiler feedback loop acting as a free training signal), Python's traditional advantage of being easy-to-write is now overhead. Microsoft rewrote the TypeScript compiler in Go. Anthropic's Claude built a C compiler in Rust for $20k. Steve Klabnik built a language in 2 weeks. The era of 'humans are slow at hard languages' is over.

REVISIT: Comments 5x since first coverage. A fork of uBlock Origin Lite that replaces cosmetically-blocked ads with white tiles bearing slogans from John Carpenter's 1988 film They Live: OBEY, CONSUME, WATCH TV, SLEEP, SUBMIT, CONFORM, STAY ASLEEP, BUY, WORK, NO INDEPENDENT THOUGHT. Instead of hiding ads, it forces them visible with dystopian messages. Requires setting filtering to Optimal mode to work.

Stanford researchers analyzed 2.2 billion social media posts and found only 3% of users post severely toxic content, but those 3% produce 33% of all posts. The article visualizes this as a bar where 3 people are shouting into the PA system while 97 have normal conversations you can't hear. This creates cascading misperceptions: the majority self-censors thinking they're outnumbered, the loud minority thinks they ARE the majority, and both sides develop wildly inaccurate beliefs about each other. Politicians then follow the perceived room, not the real one.

Matklad (creator of rust-analyzer) responds to an email about learning software design as a researcher physicist. Key insights: design is learned by doing, not from books. Conway's Law matters more than architecture - 'the code ends up being less important than the architecture, and the architecture ends up being less important than social issues.' For rust-analyzer, he intentionally made the core high-quality while letting feature code be 'happy path works' quality, because crash isolation was built into the runtime. Recommended resources: Gary Bernhardt's 'Boundaries' talk, Pieter Hintjens' writings, Ted Kaminski's blog.

REVISIT: Comments 4x since first coverage. A 2004 Slate retrospective on Nullsoft's demise after AOL acquisition. Justin Frankel created Winamp at 18, sold to AOL for $100M, then spent years antagonizing his corporate overlords by releasing unauthorized projects (Gnutella, WASTE) that AOL would frantically shut down. The article captures the last gasp of hacker culture inside big tech - Frankel quit and went on to create Reaper, the 16MB DAW that competes with Pro Tools.

［from title + comments, article unreachable］ Collection of screenshots from vintage desktop operating systems spanning 1983-1990s: VisiCorp Visi On, SunTools, GEM Desktop, Arthur, HP-UX, and more. High-resolution PNG captures showing how UIs evolved before Windows homogenized everything.

［from title + comments, article unreachable］ A frustrated maker rants about the difficulties of hand soldering, sparking a comment thread that turned into a comprehensive guide on modern soldering techniques, equipment recommendations, and the revelation that proper tools make all the difference.

［from title + comments, article unreachable］ Deep dive into VLF and ELF radio systems used for submarine communication. These frequencies (3-30 kHz for VLF, 3-30 Hz for ELF) can penetrate seawater, requiring enormous antenna arrays like the VLF Transmitter Cutler with mile-long wire spans to achieve useful power output.

［from title + comments, article unreachable］ ZX BASIC (Boriel BASIC) is a cross-compiler that translates BASIC to Z80 assembly for ZX Spectrum. It improves on Sinclair BASIC with modern features while maintaining the nostalgic development experience for 8-bit homecomputer enthusiasts.

REVISIT: Discussion doubled since first coverage. Key updates: dead-man's switch discovered in malware that runs rm -rf ~/ if stolen GitHub token is revoked. Mistral AI's npm package was also compromised as part of the worm. The attack chained pull_request_target exploitation, GitHub Actions cache poisoning, and runtime OIDC token extraction.

A browser extension forked from uBlock Origin that replaces ads with They Live-style slogans instead of just hiding them. Put on the sunglasses and OBEY, CONSUME, CONFORM messages appear where ads once were.

An email-based book club reading high-caliber technical books on databases, distributed systems, and performance. Currently reading OSTEP. Over 2500 members, 300-800 join each book. Discussion via Google Group, no video calls, just async email threads.

Rockbox-zig exposes the Rockbox audio engine (gapless playback, DSP, 20+ codecs, tag database) through gRPC, GraphQL, HTTP, and MPD APIs in a single binary. Supports multi-room via AirPlay, Snapcast, and Squeezelite. Has web, desktop (macOS/GTK4), mobile, and TUI clients.

IBM's VGA documentation was so vague that Compaq had to write better docs explaining what the bits actually do. VGA has separate control bits for CPU writes vs reads, addressing vs plane selection, and CRTC display, but IBM's manuals just said 'set these together for text mode' without explaining why.

Proto-Elamite, a 5000-year-old Iranian script overlooked for 125 years, may have been the first to encode spoken language with syllables. It was potentially more advanced than Egyptian hieroglyphs and Mesopotamian cuneiform at the time, but ancient Iranians apparently just... abandoned it. Possibly because writing was used to control populations and they rejected it.

UCLA researchers developed DDL-920, the first drug that reproduces the effects of physical stroke rehabilitation in mice. Stroke disconnects distant brain cells and disrupts gamma oscillations needed for coordinated movement. The drug targets parvalbumin neurons to restore these rhythms, offering a molecular alternative to physical therapy which most patients cannot sustain at therapeutic intensity.

Software engineer built a weekend project using AI coding assistants to diagnose what was waking him at 3am. The system uses two USB mics (inside/outside), a Raspberry Pi that only records when he's asleep (via Home Assistant), Garmin sleep data, and a custom web app that overlays audio spikes with sleep stage transitions. Culprits: doors, dishes, motorbikes. Solution: acoustic panels and better seals.

Thinking Machines announces 'interaction models' that handle real-time multimodal conversation natively rather than bolting it on. Their TML-Interaction-Small (276B MoE, 12B active) processes 200ms micro-turns continuously, enabling simultaneous speech, visual proactivity, and time awareness. The model can talk while listening, interrupt contextually, and respond to visual changes without explicit prompts. First model to score well on both intelligence AND interactivity benchmarks.

TypedMemory is a Java 25 library that maps record types to contiguous off-heap memory using the FFM API. Define a record like Point(float x, float y), allocate with Mem.of(Point.class, arena, 10), and get typed access without manually juggling layouts and offsets. Useful for native interop, games/graphics, simulation, and large datasets that shouldn't touch the GC.

Anthropic launched Claude Platform on AWS, giving AWS customers access to all native Claude API features with AWS authentication, billing, and commitment retirement. Unlike Bedrock (where AWS processes data), this is Anthropic-operated but accessible through AWS IAM and CloudTrail. Includes Claude Managed Agents, code execution, web search, prompt caching, and skills. Most AWS commercial regions supported.

Attacker compromised 42 TanStack packages by chaining three vulnerabilities: pull_request_target workflow exploitation, GitHub Actions cache poisoning across trust boundaries, and runtime OIDC token extraction from worker memory. Malware harvested AWS/GCP/SSH credentials and self-propagated via npm. Detected by external researchers within 20 minutes. Anyone who installed affected versions on 2026-05-11 should rotate all credentials.

GitLab is restructuring with layoffs, reducing country footprint by 30%, flattening management layers, and killing their CREDIT values (Collaboration, Results, Efficiency, Diversity, Inclusion, Iteration, Transparency). New values: Speed with Quality, Ownership Mindset, Customer Outcomes. CEO frames it as pivoting to the 'agentic era' where 'software will be built by machines, directed by people.' Voluntary separation window open until May 18.

［From title + comments, article behind Cloudflare challenge］ The article argues that if AI is writing your code anyway, the traditional advantages of Python (readability, ease of writing) become less relevant, and you might as well use faster compiled languages instead.

Google's threat intelligence team reports that criminal hackers used AI to discover and weaponize a zero-day vulnerability in another company's software. This is the first publicly documented case of AI-assisted vulnerability discovery by threat actors. The article also mentions Anthropic's Mythos model, which is reportedly so good at finding security holes that Anthropic only shared it with select firms and government agencies.

Interfaze is a hybrid model architecture combining specialized DNN/CNN encoders with transformer decoders. It claims to outperform Gemini-3-Flash, Claude-Sonnet-4.6, GPT-5.4-Mini, and Grok-4.3 across 9 benchmarks in OCR, vision, speech-to-text, and structured output. Key innovation: task-specific CNN/DNN layers for deterministic tasks combined with transformer flexibility. Priced at $1.50/M input tokens, $3.50/M output tokens.

Portugal spent 5.5 million euros on AMALIA, an LLM for European Portuguese. It's built on EuroLLM, trained on Arquivo.pt data, and beats Qwen on Portuguese benchmarks. But despite claiming to be 'fully open source,' the weights, data, and training logs are nowhere to be found. Only about 5.5% of training data was actually European Portuguese.

Papel is an iOS app that turns research paper discovery into a swipeable feed. Features include AI-powered Q&A over full PDFs (runs 100% on-device), XP and leveling for reading papers, and social features like comments and DMs. Indexes 2M+ papers from arXiv.

ymawky is an HTTP server written entirely in aarch64 assembly for macOS, using raw Darwin syscalls with no libc. Supports GET, HEAD, PUT, OPTIONS, DELETE, byte ranges, directory listing, and custom error pages. Author hates string parsing 'especially in assembly' but built an HTTP parser anyway.

Jesse Evers shares lessons from running Highside Workshop, a Brooklyn warehouse that hosted concerts, art shows, and motorcycle repair. Key insights: trust people with nice things, be financially transparent, give more than expected, and have a clear purpose. The space closed because it became 'mostly a venue' instead of the multi-purpose community hub he envisioned.

Ratty is a GPU-rendered terminal emulator built with Rust and Ratatui, featuring inline 3D graphics, multiple presentation modes, and a spinning rat cursor. Inspired by TempleOS. The comment section has doubled since last coverage, with renewed debate about whether terminals should do more than text.

Author argues that even if AI makes developers dumber over time, we might still be forced to use it for short-term productivity gains. Compares to construction workers destroying their backs: 'too bad, that's the job.' Suggests SWE may become like pro sports with a 15-year career window.

NVIDIA officially releases cuda-oxide, an experimental Rust-to-CUDA compiler that compiles standard Rust directly to PTX. No DSLs, no bindings, just pure Rust with safety as a first-class goal. Includes async GPU programming, closures, generics, and even warp-level programming.

Researchers at UNAM (Mexico's national university) developed three new antibiotics from scorpion venom and habanero peppers to combat tuberculosis and drug-resistant bacteria. The approach targets pathogens in novel ways that bacteria haven't evolved defenses against.

Matt Gallagher walks through 10 implementations of matrix multiplication in Swift, taking performance from 2.8 Gflop/s (17x slower than C) to Tflop/s using SIMD, AMX, and Metal. Key insight: Swift's Array copy-on-write checks murdered performance until he used MutableSpan, and missing -ffast-math required Swift-Numerics' Relaxed for FMA instructions.

［Article behind security check, based on discussion］ A 2004 retrospective on Nullsoft's demise after AOL acquisition. Justin Frankel created Winamp and later released WASTE (P2P software) without AOL approval, leading to Nullsoft's shutdown. Frankel went on to create Reaper, the beloved cross-platform DAW.

Ratty is a GPU-rendered terminal emulator built with Rust and Ratatui, featuring inline 3D graphics, multiple presentation modes, and yes, a spinning rat cursor. Inspired by TempleOS, because apparently we needed more chaotic energy in our terminals.

Restaurant exec Sherard Holland was arrested for DUI by Illinois 'Top Cop' Trooper Kevin Bradley. When Holland's MacBook went missing, he used Find My to track it to Bradley's home. Bradley claimed he kept it as a 'favor.' Internal investigation found policy violations; Bradley got a one-day suspension. Holland was found not guilty of DUI. Bradley earned nearly $250K in 2024 from overtime court appearances.

Creating a new Gmail account now requires scanning a QR code that triggers your phone to send an SMS to Google, rather than receiving a verification code. This kills SMS verification services and makes anonymous account creation significantly harder. Google claims it's for anti-phishing, but privacy advocates see it as another nail in the coffin of anonymous email.

Lawyers are increasingly concerned about AI note-takers in meetings, which could potentially waive attorney-client privilege by creating discoverable records of every offhand comment and joke. Corporate lawyers are now playing bouncer, kicking AI bots out of video calls before sensitive discussions begin.

Developer confesses to the universal sin of writing functions like createUser(user, true, false, true) and having no idea what those booleans mean two weeks later. Solution: use objects with named parameters instead. It's not a new idea, but apparently we all need the reminder every few years.

Daniel Stenberg tested Anthropic's Mythos security model on curl. It found a real vulnerability, but Daniel's verdict: mostly marketing hype. No evidence Mythos finds issues at a higher rate than existing tools, just better PR.

Phel compiles Clojure-flavored Lisp to PHP. v0.36.0 adds exact rationals (1/2 literals), arbitrary-precision BigInteger with auto-promotion, BigDecimal, first-class Vars with alter-var-root and watches, plus UUID and Queue types.

A Claude Code plugin that runs multi-stage PR reviews using parallel sub-agents, validation passes, and persistent JSON state. Claims to catch more real bugs than built-in /review while producing fewer false positives. Runs on your regular Max subscription.

Matt Might's classic 2010 article showing how to implement lambda calculus in 7 lines of Scheme or Racket. The trick: if your host language already has closures and recursion, implementing lambda calculus is mostly just repackaging what's already there.

A web-based guitar tuner that uses your phone's accelerometer instead of the microphone to detect string vibrations. The creator admits upfront: it doesn't really work. Sample rate is 50 Hz, way too low for even the lowest guitar string (82 Hz).

dBase, the database that taught a generation of programmers what a dot prompt looks like, has finally shuffled off this mortal coil after 47 years. From dBase III+ to Clipper to the Windows transition that killed it, this is the obituary of software that once ruled offices.

In the 1978 documentary 'Connections', James Burke delivered a monologue timed perfectly to end exactly as a Saturn V rocket launched behind him. One take. No retakes possible. The countdown was real. He practiced the timing repeatedly and nailed it at 13 seconds to launch.

Someone made Claude implement an IP stack in user space and tested ping response times. The result: around 27 seconds per ping response, because turns out LLMs aren't optimized for parsing raw ICMP packets in real-time. Who knew.

GrapheneOS warns that Apple and Google are expanding hardware-based attestation via Play Integrity API and App Attest. The result: services can verify you're running approved software on approved hardware, effectively banning custom ROMs, rooted devices, and privacy-focused alternatives. Privacy Pass brings this to the web.

RPCS3 developers are begging contributors to stop submitting AI-generated pull requests. The problem: people use AI to generate code they don't understand, can't test, and can't document. It's wasting maintainer time reviewing garbage, and PS3 emulation is too complex for current AI models to handle.

Author finds Qwen 3.5-9B (Q4 quant) to be the sweet spot for 24GB M4 Macs: 40 tokens/sec with thinking enabled and 128K context. Bigger models like GPT-OSS 20B and Devstral Small 24B technically fit but are unusable in practice. Local models require more hand-holding but encourage you to stay engaged rather than offloading all cognitive effort to the cloud.

Developer spent 7 months vibe-coding a GPU Kubernetes dashboard with Claude, shipping 234 commits without ever reading the generated code. Result: a 1690-line god object with 110 switch/case branches, 9 manual nil assignments scattered everywhere, and views bleeding state into each other. The fix: write architecture yourself BEFORE any code, put invariants in CLAUDE.md, and remember that AI writes features, not architecture.

James Shore models AI coding productivity with a spreadsheet showing that without maintenance cost reduction, you're screwed. Double your output with AI? You've also doubled (or quadrupled) maintenance costs. After 5 months the gains evaporate. After 40 months you're worse off than if you never used AI. The math only works if AI DECREASES maintenance costs inversely to productivity gains.

In May 2006, Guy Goma arrived at BBC headquarters for an IT job interview. Staff mistook him for a tech expert and ushered him onto live television to comment on a legal verdict. His panicked face when the cameras went live became an early viral internet moment. Twenty years later, he's being celebrated as a folk hero for anyone who's ever been unprepared at work.

The first of 89 tunnel segments for the Fehmarnbelt Tunnel has been successfully immersed on the Danish side. At 18km, it will be the world's longest immersed tunnel, connecting Denmark to Germany. Each standard element is 217 meters long and contains 33,000 cubic meters of concrete. The deepest point sits 45 meters below sea level. When complete, it will carry both highway and rail traffic.

Developer argues that slapping OpenAI/Anthropic API calls into apps creates fragile, privacy-invading software. Your phone has a Neural Engine sitting idle while you wait for JSON from Virginia. Example: Brutalist Report iOS app generates summaries on-device using Apple's local model APIs. No servers, no privacy policies, no distributed system headaches.

Attackers (REF6598) posing as VCs on LinkedIn lure finance/crypto targets into shared Obsidian vaults. The trap: enable 'community plugin sync' which loads malicious Shell Commands plugin. PHANTOMPULSE RAT is delivered, using Ethereum blockchain transactions to resolve C2 addresses. Keylogging, screenshots, file exfil, full compromise.

RPCS3, the open-source PS3 emulator since 2011, posted on X asking people to stop submitting AI-generated code pull requests. They'll ban repeat offenders. Quote: 'Learn how to debug and code instead of generating slop that you don't understand and that doesn't work.' When asked how they identify AI code: 'You can't possibly handwrite the type of shit AI slop we have been seeing.'

［Based on HN discussion - article blocked］ Maryland is being forced to pay $2 billion in grid upgrades for data centers located in other states. The state filed a complaint with federal energy regulators, arguing this breaks ratepayer protection pledges. PJM Interconnection, the regional grid operator, approved the cost allocation despite local objections.

Monthly HN community show-and-tell thread. 425 comments of devs sharing side projects. Highlights: X/D Loom for automotive wiring diagrams (hit $14k MRR after engine-swapping a Nissan), a DSL for writing drum sheet music as text inspired by ABC Notation, and Drawers.computer for giving each macOS project its own dock and space.

A satirical incident report detailing a supply chain attack that started with a stolen YubiKey, spread through npm to Rust to Python, infected 4 million developers, and was accidentally patched by a cryptocurrency mining worm. Root cause: a dog named Kubernetes ate a YubiKey.

GrapheneOS warns that Apple and Google are expanding hardware-based attestation (Play Integrity API, App Attest) to lock services behind approved devices. The EU Digital Wallet (EUDI) now requires Google/Apple attestation for identity, and Privacy Pass is bringing this to the web. Open platforms are being slowly boiled out of existence.

Joanna Rutkowska, creator of Qubes OS and pioneering security researcher known for Blue Pill hypervisor attacks, resurfaces after 7 years of silence with a new blog. Now in her mid-forties, she's shifting from pure technical security focus to exploring the tension between Rationality and Humanism, Pragmatism and Beauty, Freedom and Love.

Databricks/Neon's Lakebase achieves 5x faster Postgres writes by eliminating Full Page Writes (FPW). Traditional Postgres writes entire 8KB pages to WAL to protect against torn pages on crash. Lakebase's separated compute/storage architecture has no local disk to tear, so they pushed image generation to the distributed storage layer. Result: 94% less WAL traffic, 4.5x throughput on 32 vCPU.

Contrary to travel advice, don't do what locals do. Locals are watching reality TV, ordering DoorDash, and sports betting. Even in happy Finland, they haven't visited their famous museum in 10 years. Tourists, unburdened by routine, are free to actually enjoy the city. The local judging tourists in paddleboats is the one who's trapped.

A developer returning to AWS after time away documents the deliberately hostile UX: pricing hidden in separate tables from specs, adversarial billing, IAM complexity that makes Kubernetes look simple, and how they weaponized open source by cloning Elasticsearch, Redis, and MongoDB after those projects explicitly asked them not to. The result was a wave of defensive licenses across the industry.

Someone reverse-engineered Space Cadet Pinball from the Windows XP exe using only decompilers, no source code access. It's now available as a Flatpak for Linux with the original game resources bundled. For higher resolution (1024x768 instead of 480p), you can use data files from Full Tilt! Pinball, available on archive.org. Also ported to consoles and playable in browsers.

Right-to-repair advocate Louis Rossmann is offering to pay legal fees for an OrcaSlicer developer threatened by Bambu Lab. This comes after Bambu tried to eliminate offline access to their printers last year, backing down only after public outrage. Users are now running isolated networks with outdated firmware to avoid cloud dependency.

New modeling shows the Atlantic Meridional Overturning Circulation (AMOC) could weaken by a third by 2100, with potential for complete collapse at certain thresholds. This isn't new news - scientists have warned about this since the 90s - but newer models show stronger weakening than previously thought. Lots of unknowns with feedback loops and tipping points.

A MathOverflow discussion about the purpose and role of mathematicians. Key insight: mathematics only exists in a living community that spreads understanding and breathes life into ideas. Good pedagogy is highly undervalued - Grant Sanderson (3blue1brown) is making some of the most significant contributions to math by making complex concepts accessible.

Survey shows 31% of Gen Z now report outright anger toward AI, up from previous measurements. Adoption has stagnated while workplace displacement fears intensify. The generation entering the workforce sees AI not as a productivity tool but as competition for entry-level jobs they were promised.

Academic paper examining how exposure to LLMs may be shifting how humans conceptualize their own cognition. As we anthropomorphize AI, are we beginning to 'LLMorphize' ourselves, attributing less mind to humans and viewing ourselves as prediction machines?

［From title + comments, article behind Cloudflare challenge］ Article explores edge cases in API idempotency implementation. The 'second request is different' problem occurs when retry requests contain slightly different data than the original, breaking naive idempotency implementations that don't account for request variation.

Personal essay exploring how AI tools can exacerbate task paralysis, especially for those with ADHD. The dopamine hit from AI-generated possibilities creates a casino-like addiction loop where generating ideas replaces executing them. The author fears becoming addicted to AI in a way that prevents actual work.

［REVISIT: 547 comments now, discussion still growing］ Bun's JavaScript runtime is being experimentally rewritten from Zig to Rust, hitting 99.8% test compatibility. The port was heavily AI-assisted using Claude. Team member clarifies this might get thrown out but the numbers are impressive regardless.

FreeBSD CVE-2026-7270 allows local users to escalate to root via a one-byte bug in execve() argument handling. The fix? A single pair of parentheses to correct operator precedence: `args->endp - (args->begin_argv + consume)` instead of the original. Thai Duong's firm Calif discovered it and published an AI-generated working exploit.

［REVISIT - comments 4x since yesterday］ Jarred Sumner announces Bun's experimental Rust port has reached 99.8% test compatibility on Linux. The port uses AI assistance (Mythos + unlimited tokens). One dev notes they've been on a similar TypeScript-to-Rust port for 5 months and is at 99.6%. The team hasn't committed to rewriting - the code might still get thrown out.

Debian is formalizing a requirement that all packages must be reproducibly built. This means anyone can verify that the binary packages match the source code exactly. NetBSD achieved full reproducibility back in 2017. The announcement signals this is now policy, not just aspiration.

Gemini's API file search feature now supports multimodal retrieval-augmented generation (RAG). You can search across images and videos, not just text documents. This enables building apps that can answer questions about visual content in your document collections.

Boy Scouts' decline isn't about rebranding or marketing. The author argues it's decades of programming neglect: middle schoolers aren't trusted to lead, high schoolers are stuck in middle-school programming instead of age-appropriate autonomy and adventure. The sexual abuse bankruptcy gets mentioned 12 paragraphs down, which tells you something about where the organization's priorities have been.

Zed now has a visual theme builder that lets you customize colors, syntax highlighting, and UI elements without writing JSON. It's desktop-only and integrates directly into the editor, showing live preview of your changes across a full code sample.

［From title + comments, article blocked］ Casio released a premium calculator with traditional Japanese lacquer (urushi) finish. It's a limited Japan-only edition of their S100 premium calculator line, featuring handcrafted lacquerwork. Going for around $1000 on eBay.

Emerich Juettner, an elderly Austrian immigrant living in poverty in 1940s New York, counterfeited one-dollar bills on a cheap hand press for nearly a decade. His notes were laughably crude with spelling errors and wrong paper, but nobody scrutinizes a single dollar. Became Secret Service case #880 and the longest/most expensive counterfeit investigation ever. Caught when firefighters threw his junk (including plates) out a window. Sentenced to 1 year, fined $1, made more money from the Hollywood film 'Mister 880' than from counterfeiting.

The Arma Micro Computer from 1962 was a 20-pound transistorized aerospace computer smaller than an Apple II at 0.4 cubic feet. Used exotic transfluxor memory (two-aperture cores for non-destructive reads), 22-bit serial architecture, and could survive 100g shocks. Built for missile guidance and spacecraft navigation. Later evolved into systems used in Navy submarines, the E-2C Hawkeye, the Concorde, and Air Force One. Wen Tsing Chow, who was mocked by a general asking where he'd put 'five Harvard professors to keep it running,' also invented the PROM.

Daniel Lemire argues against 'thinkism' - the belief that innovation comes from thinking first, then building. Historical examples show the opposite: pendulum clocks came before Newton's laws, not after. The waterfall model in software is a manifestation of this error. In research and development, understanding usually follows observation and experimentation. Recipe for breakthroughs: spend more time observing and trying, less time theorizing. Also a jab at expecting AI to solve everything just by 'thinking really hard.'

ymawky is a static HTTP file server written entirely in ARM64 assembly for macOS, using raw Darwin syscalls with zero libc wrappers. It supports GET, PUT, DELETE, HEAD, OPTIONS, byte ranges for video streaming, directory listing, custom error pages, and slowloris mitigations. The author wanted to understand how web servers actually work by stripping away every convenience layer since 1957.

rlisp is a transparent s-expression frontend that compiles to Rust. Write (struct Point (x f64) (y f64)) and get real Rust with ownership, borrowing, lifetimes, and generics. No runtime, no GC - just s-expr to .rs to binary. The killer feature: macros become trivial because in Lisp, a macro is just a function from s-expressions to s-expressions.

The author proposes using Julet M6 connectors (from e-bike cables) as a standard for serial TTL connections on embedded devices. These sturdy, IP68-rated connectors replace the mess of Dupont jumper wires dangling from routers and SBCs. The pinout convention: black=RX, red=TX, blue=GND, with a Dupont arrow indicating the receiving pin.

The author created pslang, a low-level imperative language with C-like semantics but Python-like indentation syntax. Built for game modding with seamless C interop, sandboxing, and fast compilation. Already has a working path tracer written in it. The language has 13 primitive types, first-class arrays, function pointers, structs, and compiles via a custom JIT or interpreter.

A long-form history of Visual Basic covering the people who don't get written about: Alan Cooper (who built the form designer that became VB), the Thunder team (Scott Ferguson, Adam Rauch, Chris Fraley), and the pre-Microsoft BASIC lineage from Dartmouth through the 5 million BASIC programmers estimate. Chapter 1 spans 1964-1992, from Kemeny and Kurtz to VB 1.0 for DOS.

［From title + comments, article paywalled］ Meta employees are reportedly struggling under AI-first mandates that feel performative rather than practical. Internal culture has become an optics game of kissing the ring, with yes-men amplifying whatever Zuck wants to hear.

French parliament's intelligence delegation backs 'ghost participant' approach to E2E encryption - silently adding an invisible government agent to supposedly private conversations. Senator Perrin claims this isn't about getting encryption keys, just secretly joining your chats before encryption happens.

First-hand account of 35 days in Japanese detention. You can be held for 23 days per arrest (and they can stack arrests). Cells are all-white boxes with no windows, lights always on. Food is intentionally bad. Sleep deprivation is policy. Everything is designed to break you into confessing - which explains Japan's 99% conviction rate.

let-go is a Clojure dialect written in Go with 7ms cold start and a 10MB binary. Has nREPL support, 95.4% Clojure test suite compatibility, core.async with real goroutines, and can compile to standalone executables or WASM web apps. Started as a joke to write Clojure while pretending to write Go.

Chris Morgan returns 414 errors for any request with query strings on his personal site. His reasoning: UTM parameters are for site owners to use, not for other people to append. If you want referrer info, check the Referer header. His site, his rules.

Mat Duggan argues that tech's founding ideology of cyberlibertarianism has become hollow. The same people who championed Barlow's Declaration of Independence of Cyberspace now cozy up to governments when it benefits them, while invoking freedom principles only when convenient. The ideology powered tech's rise but is now selectively applied.

Jarred Sumner's experimental branch rewrites Bun from Zig to Rust, achieving 99.8% test compatibility on Linux in just 6 days. The rewrite used AI assistance (Mythos) with unlimited tokens. The team hasn't committed to shipping it and there's a high chance this code gets thrown out completely.

cPanel had a catastrophic week with ransomware hitting 44,000 servers, followed by disclosure and patching of three new vulnerabilities. The attack exposed the fragility of shared hosting infrastructure that millions of sites depend on. Many servers have been running these ancient codebases for decades with minimal sandboxing.

Dalton, Georgia is America's carpet capital, producing over 40% of the world's flooring. The industry's decades of using PFAS 'forever chemicals' for stain resistance has left a toxic legacy. Workers and residents now face the health consequences as these chemicals persist in water, soil, and bodies.

An indie developer documents the pain of distributing Mac software: notarization requirements, Gatekeeper friction, cryptic error messages, and Apple's general contempt for backward compatibility. The developer system gets nuked regularly, old apps break with each OS update, and Apple acts like you should be grateful they let you develop for their platform.

Researchers introduce DELEGATE-52 benchmark testing LLMs on long editing workflows across 52 domains. Even frontier models (GPT 5.4, Claude 4.6 Opus, Gemini 3.1 Pro) corrupt an average of 25% of document content during extended delegation. Tool use didn't help. Degradation worsens with document size, interaction length, and distractor files.

New Swiss foundation launches in St. Gallen, partnering with University of St. Gallen to build the Gen AI Archive preserving today's AI models for future generations. Also launching Endangered Archives initiative with UNESCO to rescue vulnerable collections from conflict zones. Independent but mission-aligned with Internet Archive US, Canada, and Europe.

Dillo browser developer proposes an alternative web specification: strict HTML subset that fits on a floppy disk (1.44MB compressed), semantic versioning so pages target specific standards, no JavaScript ever, strict grammar that rejects non-compliant pages, and text-first design. Aims to enable simple browsers with low implementation cost while preventing corporate standard capture.

FractalBits built a local KV storage engine that never calls fsync by using pre-allocated fixed-size files, pre-zeroed extents, O_DIRECT writes, and a journal with 4KB atomic commit blocks aligned to SSD's atomic-write unit. Result: 190K obj/s vs 116K with fsync on AWS NVMe, 1.6x throughput gain. Only works with specific SSD contracts and narrow use case.

GrapheneOS patched a VPN bypass vulnerability in Android where system_server operates with elevated networking privileges and is exempt from VPN routing restrictions, allowing traffic to leak outside the VPN tunnel. Google classified it as 'not a security issue' and declined to fix it.

Mojo 1.0 Beta is out. The language promises Python's familiar syntax with performance rivaling C++. Key features: Rust-adjacent ownership model, comptime more powerful than Zig, first-class SIMD support. Unlike most languages, it's not just an LLVM wrapper - they're using LLVM differently. Open source committed for Fall 2026.

Fields medalist Timothy Gowers gave ChatGPT 5.5 Pro open problems from a combinatorics paper. With zero mathematical input, it improved an upper bound from exponential to polynomial in about an hour - PhD-level original research. An MIT student confirmed the work is 'almost certainly correct' and the ideas are original. ［REVISIT: comments 11x since first coverage］

Sir David Attenborough turned 100. The naturalist and broadcaster has produced documentaries for over seven decades. Fun fact buried in the comments: he's why tennis balls are yellow. When color TV arrived, the white balls were invisible on screen - Attenborough, then at BBC, suggested yellow. ［REVISIT: comments 6.8x since first coverage］

Scientists still don't fully understand how lightning initiates. The cosmic ray hypothesis has gained traction - high-energy particles from space create runaway electrons that ionize air. Researchers are using rockets shot into clouds to trigger strikes and study the process. The article includes a striking 7-second video of rocket-induced lightning. ［Note: article fetched from preview, full content unreachable］

Google's new reCAPTCHA v3 requires device attestation through Google Play Services, blocking GrapheneOS, LineageOS, Huawei, Xiaomi China, and Amazon tablets from completing captchas. That's roughly 1.5 billion devices worldwide deemed 'untrustworthy.' The discussion has nearly doubled since first coverage, with web devs asking for alternatives and privacy advocates pointing out this is remote attestation wearing a bot-prevention costume. ［REVISIT: comments nearly 2x since first coverage］

Fields medalist Timothy Gowers gave ChatGPT 5.5 Pro some open problems from a recent combinatorics paper. With zero mathematical input from him, it improved an upper bound from exponential to polynomial in about an hour, producing PhD-level research complete with LaTeX writeup. An MIT student who created the original framework confirmed the work is 'almost certainly correct' and the ideas are original.

Researchers built SysMoBench to test whether LLMs can write TLA+ specs that actually match real system implementations. Results: LLMs score near 100% on syntax but only ~46% on conformance - they produce textbook-perfect specs that don't reflect how systems like Etcd or ZooKeeper actually work. The specs compile but contain states real systems never reach and miss states they always reach.

A $150 espresso maker became a 20kg, multi-million dollar ISSpresso for the ISS because space hardware must prove it won't catch fire, electrocute anyone, emit noxious gas, or fill the cabin with boiling water mist. NASA's Safety Review Process has real substance - the author's own solar-powered home was nearly destroyed by a Japanese bidet heater that destabilized his inverter. Cheap rockets don't fix this: Mars missions will cost billions inventing equipment, not launching it.

CU Boulder researchers kept bioluminescent algae (Pyrocystis lunula) glowing for 25 minutes using acidic solutions, then embedded them in 3D-printed hydrogel structures. The algae stayed alive for weeks and retained 75% brightness after a month. Applications include autonomous deep-sea robots, living water quality sensors, and yes, glowing rave decorations. Bonus: they're photosynthetic, so they store carbon while producing light.

Claude Code users are discovering that asking for 'a single index.html, no dependencies, sparse styling' produces remarkably functional tools. The pattern works because HTML is a universal format LLMs understand deeply, the output is easily shareable ('email your friends the tool'), and recipients can modify it by 'tossing it to their LLM.'

A WebRTC veteran who rewrote SFUs at Twitch and Discord argues that WebRTC is a terrible fit for voice AI. WebRTC aggressively drops audio packets to minimize latency - great for conference calls where real-time matters, terrible when you're paying per token and want accurate transcription. The author suggests simpler protocols would serve voice AI better since the bidirectional low-latency requirements of WebRTC are overkill when you just need reliable audio upload.

Anthropic's research on giving Claude deeper understanding of its values and guidelines, not just rules to follow. The approach focuses on teaching the reasoning behind behaviors rather than just the behaviors themselves. This apparently generalizes well - they've applied similar methods to open weight models in what they call 'Model Spec Midtraining.'

A comprehensive explainer on Wi-Fi standards from 802.11n through the upcoming 802.11bn (Wi-Fi 8). Covers the evolution of channel widths, MIMO, OFDMA, and MU-MIMO. Key insight: Wi-Fi signal decreases exponentially (not quadratically via inverse square law) due to real-world obstacles. The site attempts to demystify why your router box says 'Wi-Fi 7' but your actual experience varies wildly.

Martin Fowler revisits Fred Brooks' 1975 classic on software project management. The core lesson remains: adding people to a late project makes it later (Brooks's Law) because communication paths grow exponentially. Brooks also emphasized conceptual integrity - better to have a system reflect one coherent design than contain many good but uncoordinated ideas. Fowler notes some parts are dated but the fundamentals still apply in 2026.

Security researcher Lachlan details discovering React2Shell (R2S), a labyrinthine vulnerability chain that ended with remote code execution. Meta triaged, reproduced, and confirmed the submission in 17 hours despite it being a weekend. Vercel's CEO personally thanked the researcher for responsible disclosure and hopping on calls to validate remediations.

Google's new reCAPTCHA v3 requires device attestation through Google Play Services, effectively blocking GrapheneOS, LineageOS, Huawei phones, and Amazon tablets from completing captchas on websites that use it. This affects roughly 1.5 billion devices worldwide that don't have Google services installed.

Meta disabled end-to-end encryption for Instagram DMs, citing regulatory pressure and child safety concerns. The move reverses years of privacy commitments and gives Meta full access to message content for moderation and advertising purposes.

AWS us-east-1 suffered a power loss causing data center overheating in North Virginia, taking down FanDuel, Coinbase, and numerous other services. The notorious region continues its streak as the internet's single point of failure.

A local privilege escalation vulnerability in Linux's io_uring ZCRX (zero-copy receive) implementation. The bug: free_count is incremented before bounds checking, allowing a write one slot past the freelist array end. One missing bounds check = root access.