A$AP Rocky's Helicopter music video was shot entirely with volumetric capture using a 56-camera RGB-D array by Evercoast, generating 10TB of raw data. Post-production used GSOPs (Gaussian Splatting Operators) in Houdini plus OctaneRender. The tech lets you reposition cameras and relight scenes after the fact.

Antirez built a pure C implementation of FLUX.2-klein-4B image generation with zero external dependencies. Supports Metal GPU acceleration on Apple Silicon, includes an integrated Qwen3-4B text encoder, and can do both text-to-image and image-to-image. The entire project was written with Claude's help as an experiment in AI-assisted development.

Dan Abramov explains Bluesky's AT Protocol as a filesystem where your social data lives in your own 'everything folder' that apps read and write to. Posts are JSON files with unique IDs, record types use domain-based namespacing to avoid conflicts, and the key principle is 'apps don't trap what you make with them.'

Tauformer replaces dot-product attention with a Laplacian-derived scalar approach, injecting 'domain structure' directly into attention. It compresses head vectors into a scalar using Laplacian energy calculation, potentially enabling 50% KV cache reduction and cheaper computation. A 30M parameter model hit 1.914 validation loss at 60K tokens/second.

A CLI that lets AI agents design in Figma with 100 commands for creating shapes, text, frames, components, and exporting assets. Uses JSX syntax that's ~100x faster than plugin API imports. Built with Bun + Citty, connects to Figma's internal multiplayer protocol via Chrome DevTools. No JSON schema overhead.

A satirical-but-math-heavy analysis projecting OpenAI will rake in $70B/year in ad revenue by 2029. The author crunched numbers on 950M free users and a $50 ARPU, concluding that ChatGPT will become the world's most lucrative ad platform. The hire of ex-Meta's Fidji Simo to lead 'Applications' isn't helping the optics.

A 2014 classic resurfaces: processing 3.46GB of chess data took 26 minutes on a 7-node Hadoop cluster but only 12 seconds with shell tools (find, xargs, mawk). That's 270MB/sec vs 1.14MB/sec. The article argues most 'Big Data' problems are actually 'Medium Data' that fit in RAM.

A browser extension from Aarhus University that auto-fills cookie consent popups based on your preferences. Works with 200+ Consent Management Platforms and actually rejects tracking when you tell it to. The extension GDPR intended before the industry turned consent into a dark pattern.

The 9front FAQ explains Plan 9, a research OS from the Bell Labs team that created Unix. Key innovations: everything is a file (taken to extremes), per-process namespaces, and distributed computing via networked file systems. Rob Pike's 'not Unix for a reason' philosophy prioritizes elegant design over compatibility.

Singularity is an MIT-licensed Linux rootkit published 'for research.' It uses Ftrace to hook syscalls without modifying kernel code, can hide processes/files/network connections, and block module/eBPF loading. Creator Matheus Alves hopes it inspires better detection methods. The code is on GitHub.

Aristophanes invented a 171-letter word in his 391 BC comedy 'Assemblywomen' to describe a fictional dish containing fish, shark heads, honey, various birds, and wine. The Guinness Book recognizes it as the longest word in literature. One ingredient, silphium, is a plant so heavily used in the ancient world that it went extinct.

David Hill's portfolio showcasing the design philosophy behind iconic ThinkPad innovations including the X300, TrackPoint, and ThinkLight. The site argues that design is 'the tangible expression of a brand's identity' and demonstrates how empathy-driven design principles created hardware that developers still hoard years later.

A 1957 sci-fi story about George Platen, who dreams of being a Computer Programmer in a world where professions are directly downloaded into brains on 'Education Day'. When his brain is deemed incompatible with the system, he's sent to the 'House for the Feeble-minded' - only to discover that true learning requires struggle, not instant uploads.

A unified platform offering 150,000+ icons across 100+ open-source icon sets, organized by category (Material, UI, Logos, Emojis) with various licenses. Search across sets, preview animated SVGs, and stop the eternal 'which icon library should I use?' debate.

A Bay Area flea market veteran's memoir about collecting vintage culinary knives from 2005-2018. The author initially dismissed cheap American Forgecraft carbon steel knives, then watched younger collectors discover their charm. A meditation on how collecting tastes evolve and why the best finds happen at 6 AM.

Neel Somani claims to have solved Erdos problem 281 using only GPT 5.2 Pro. Terence Tao called it 'perhaps the most unambiguous instance' of AI solving an open math problem. Plot twist: a human solution was found right after, demoting the LLM proof to Section 2 of Tao's wiki.

jQuery 4.0 finally drops IE support (except IE 11, which somehow survives until 5.0), migrates to ES modules, adds Trusted Types support for CSP, removes deprecated APIs like jQuery.trim, and shaves 3KB off the gzipped size. First major release in nearly a decade.

Anthropic showcases how researchers use Claude: Stanford's Biomni reduced genome-wide association studies from months to 20 minutes, MIT's Cheeseman Lab built MozzareLLM for gene knockout analysis, and Lundberg Lab uses Claude to generate hypotheses about which genes to study. The AI handles tasks 'previously impossible to scale.'

MIT's 6.566 is a comprehensive systems security course covering isolation, privilege separation, buggy code handling, web/network security, user authentication, messaging security, anonymous communication, and differential privacy. Includes labs, guest lectures, and exams. Free materials online.

Boldyn Networks built a 'neutral network' with 9 data centers and 800km of cabling under a 20-year TfL concession at no cost to TfL. Multiple carriers share the infrastructure. They use 'leaky feeder' cables in tunnels and the network serves both public mobile and emergency services. Expected full coverage by end of 2026.

A designer noticed that Apple's app icons, when viewed in reverse chronological order, look like a portfolio of someone progressively mastering icon design - from flat minimalist shapes to rich, detailed skeuomorphic illustrations.

A startup founder confesses that after raising VC money, he became obsessed with metrics and perceived expectations, operating counterproductively instead of focusing on solving real problems. The pressure was mostly self-imposed, not from investors.

Charity Majors argues DevOps failed its core mission: creating a seamless feedback loop between developers and production. The tools made instrumentation too complex. Now AI might finally bridge that gap by making observability accessible.

Xous is a pure-Rust microkernel OS for embedded devices, designed by bunnie Huang's team. It prioritizes process isolation with nearly everything in userspace, using message passing for IPC. EU-funded through NLnet's NGI0 program.

A Quanta article exploring how different data structures - hash tables, heaps, trees - each optimize for different operations with inherent trade-offs. There's no universal solution because what you optimize for depends entirely on how you'll access the data.

Author analyzed MacOS screenshots from 2009-2025 and found UI brightness has crept from 71% to 100% white. Designers keep making things 'cleaner' until you need sunglasses to check your email.

Founder confesses that raising VC money created intense self-imposed pressure to appear successful, leading to counterproductive decisions driven by 'how big does this feel' instead of solving real problems.

Hardwick Hall used solar orientation, 4.5ft thick central walls for thermal mass, strategic window placement, and tapestries to achieve 10C warmer than outside - while typical Elizabethan homes managed only 2-3C.

Olivetti went from Italian typewriter manufacturer in 1908 to building arguably the first personal computer (Programma 101), then slowly declined through the PC wars until absorption by Telecom Italia in 2003.

Kip is a research language that uses Turkish noun cases as a type system - argument relationships are marked by grammatical suffixes, enabling flexible argument ordering. Written in Haskell, includes algebraic data types and pattern matching.

Ramp Labs hooked Claude Code up to OpenRCT2 and had it autonomously design theme parks. The AI could read game state, execute commands, and iterate on designs. Key insight: agents automate diligence, not intelligence - the limiting factor is environment legibility and interface strength.

Since 1969, every new technology wave (COBOL, CASE tools, Visual Basic, AI) has promised to eliminate developers. None have. The fundamental challenge remains: software development requires complex intellectual reasoning that can't be fully automated. AI amplifies developer capability, it doesn't replace it.

Open-source Python tool that generates minimalist map posters from OpenStreetMap data. Choose from 17 themes (neon_cyberpunk, japanese_ink, sunset, etc.), specify any city and radius, and get high-quality poster images. Uses OSMnx for map data, Nominatim for geocoding, matplotlib for rendering.

WSIStreamer is a cloud-native tile server for Whole Slide Images (pathology slides). Uses HTTP range requests to fetch only the bytes needed for each tile, avoiding full downloads of gigabyte files. Supports Aperio SVS and pyramidal TIFF, includes OpenSeadragon viewer with pan/zoom, HMAC-SHA256 auth.

The word 'hello' traces back to 15th century origins - Old High German 'halâ' (hailing ferrymen), the hunting call 'halloo', and French 'hol' meaning 'stop'. First appeared in print January 18, 1826. Edison championed it as the telephone greeting, defeating Bell's preferred 'ahoy'.

Most ASCII renderers treat each cell as a single brightness value, resulting in blurry output. The author proposes using 6-dimensional shape vectors that capture how characters occupy space within grid cells, then matching image regions to characters with similar shapes. The result: ASCII art that follows contours precisely instead of looking like a low-res approximation.

US electricity demand jumped 135 TWh in 2025 (3.1% increase), the fourth-largest annual rise in a decade. Solar generation grew by a record 83 TWh (27% increase from 2024), covering 61% of new demand. Texas and Midwest saw solar meet 81% of their demand growth. Battery storage is making solar more flexible for evening use.

［From HN comments - article blocked］ A hacker breached Vastaamo, Finland's largest private psychotherapy provider, and extorted patients directly by threatening to release their therapy notes. The database had no firewall and was secured with a blank password. The CEO and others should face accountability for this negligence alongside the hacker.

Microsoft's January Patch Tuesday update causes Windows 11 23H2 PCs with Secure Launch enabled to refuse shutting down or hibernating. The workaround is using 'shutdown /s /t 0' from the command prompt. Microsoft acknowledged the bug and will release a fix in a future update.

Scott Alexander's psychological profile of Scott Adams argues he embodied the 'nerd experience' of believing himself smarter than everyone but failing to leverage it. Adams channeled frustrations into Dilbert, capturing 'the repressed object at the bottom of the nerd subconscious: you're smarter than everyone else, but for some reason it isn't working.' His post-Dilbert career was a series of attempts to prove intellectual superiority that ultimately led him down controversial paths.

ClickHouse acquired Langfuse, an open-source LLM observability platform that was part of YC W23. Langfuse already used ClickHouse as its data layer, making this a natural fit. The platform stays open-source and self-hostable, existing cloud users keep their agreements, and the founding team joins ClickHouse to accelerate development on production monitoring for AI agents.

Security researchers at Neodyme physically desoldered the NAND flash chip from a Potensic Atom 2 drone to dump its firmware. The tricky part was bruteforcing the ECC algorithm - 224 parity bits per chunk, capable of correcting up to 16 bit flips. They had to find the correct primitive polynomial (17475) and transformation sequences. Part 2 will cover reverse engineering the actual firmware and finding vulnerabilities.

［From title + HN comments, article is video-only］ Eastern Ontario's largest parrot rescue is launching a pilot project to address a growing crisis of abandoned parrots. These birds are extremely intelligent, bond strongly with one caregiver, and when that person dies or can't care for them anymore, the trauma causes birds to pull out their own feathers. Parrots can live 50+ years, outliving their owners.

Keifu is a Rust-based terminal UI for visualizing git commit graphs with colored Unicode rendering, per-branch colors, and a details panel showing file changes. Supports basic git operations like checkout, branch creation and deletion. Caps at 500 commits and 50 changed files. Works in narrow terminals.

Formal methods and interactive theorem provers are not the silver bullet some claim. The semantic gap between software and its formal representation is real - LLMs might rewrite code during verification, axioms can be introduced that break proofs (like proving 1+1=3 in ACL2), and deciding how far down the stack to verify is non-trivial. Proof complexity grows superlinearly with errors, and some proofs using Axiom of Choice produce computationally unusable results.

Black Forest Labs released FLUX.2 Klein, a 4B/9B parameter image generation model that runs on consumer GPUs (~13GB VRAM) with sub-500ms inference. It handles text-to-image, editing, and multi-reference generation in one architecture. Open weights for 4B under Apache 2.0.

Nanonets published a comprehensive guide on getting LLMs to produce reliable structured outputs (JSON, XML, code). Covers grammar-constrained generation, schema enforcement, and best practices for production systems. A living document that updates with the field.

Ben Visness argues that 'low-level programming' isn't inherently difficult - it's just that nobody has made those foundations high-level yet. The Handmade community isn't about writing everything from scratch; it's about rebuilding better abstractions from lower in the stack.

Developer patched their Wii to serve Puerto Rican news from El Nuevo Dia through the original News Channel. Involved modifying the WAD binary to point to a custom S3 bucket, using Go + AWS Lambda to regenerate news files hourly in Wii-compatible format.

The author proposes pre-configured software templates for common business needs (fleet tracking, ticketing, IoT) that developers can deploy and customize. Argues we're in a 'pre-industrial era of code' where everyone rebuilds the same auth/database/user management from scratch.

Cloudflare has acquired the Astro Technology Company. The framework remains open-source and MIT-licensed. All employees join Cloudflare. The team admits previous monetization attempts failed, and this acquisition lets them focus 100% on building the framework instead of chasing revenue.

A project that uses official browser group policies to strip AI features, telemetry, shopping integrations, and sponsored content from Chrome, Edge, and Firefox. No browser modification needed - just configuration files that leverage built-in enterprise settings.

Author explains why DuckDB has become their go-to data tool: blazing speed (100-1000x faster than SQLite/Postgres for analytics), single binary with zero dependencies, friendly SQL dialect with features like EXCLUDE and COLUMNS, and the ability to query CSV/Parquet/JSON files directly from local storage, S3, or URLs.

Elasticsearch lacks atomic transactions beyond single documents, has immutable index mappings requiring full reindex for schema changes, offers limited relational query capabilities, and can leave half-applied operations after failures. It was designed as a search engine, not a system of record.

A proposed standard for writing installation instructions that AI agents can execute autonomously. Includes product description, objectives, verification criteria, and checkbox-style TODO lists. The idea is to let LLMs detect environments, choose install methods, and verify success without human intervention.

In 1979, two families spent 18 months secretly building a hot air balloon from cotton and taffeta, then flew 28 minutes across the heavily fortified East German border to freedom. Eight people, including four kids, made it to West Germany. One guy broke his leg on landing, but that beats the Stasi.

Mandiant is releasing precomputed rainbow tables that crack Net-NTLMv1 hashes trivially. The protocol has been known insecure since 1999, but orgs keep using it. This release aims to shame stragglers into finally upgrading by making the vulnerability so obvious even management can understand it.

An open-source robot that brute-forces pin tumbler locks using a hollow key and copper wire to test every combination. A 4-pin lock takes about 3 minutes, 5-pin takes 35 minutes. Uses Dynamixel servos and 3D-printed parts. The project emphasizes it's too slow for covert use, making it more educational than criminal.

Slop is low-quality, algorithmically-optimized content that floods platforms because demand for engagement exceeds human creative capacity. Platforms like TikTok use infinite scrolling and hidden timestamps to encourage mindless consumption. Only 1-3% of users create content, and creativity doesn't scale. The author argues for 'surfing the web' over passive scrolling.

Dell released a 52-inch 6K curved ultrawide monitor for $2,900. It has 120Hz refresh, Thunderbolt 4 with 140W power delivery, and basically every port you could want. HN commenters are divided between 'this is the dream' and 'this would require me to move my entire head to see the corners'.

A web app that captures ambient audio and plays it back with a 2-second delay to create an auditory feedback loop. The creator built it out of spite after encountering someone watching loud reels at Bombay airport. Uses the Web Audio API.

Let's Encrypt now offers 6-day (160-hour) certificates and IP address certificates for both IPv4 and IPv6. Short-lived certs improve security by reducing the window of vulnerability if a key is compromised, since revocation is notoriously unreliable. Select 'shortlived' profile in your ACME client.

The Torment of Saint Anthony, painted when Michelangelo was 12 or 13 in the late 1480s, shows demons attacking the saint in the desert. Infrared reflectography revealed correction marks proving it was an original work, not just a copy. One of only four easel paintings attributed to Michelangelo ever.

Cursor claimed their AI agents built a browser over weeks with 1M+ lines of code. The critic checked the repo: it doesn't compile (34 errors, 94 warnings), GitHub Actions show consistent failures, and no working demo exists. It's essentially a non-functional wrapper around Servo.

Author built a Garmin watch app that predicts daily chess ELO using health metrics and logistic regression. Surprise findings: REM sleep was the best predictor, moderate stress helped, and exercise actually impaired short-term cognitive performance. He now schedules cognitive tasks around his predicted scores.

Astro Technology Company is being acquired by Cloudflare. The framework stays open-source, MIT-licensed, and platform-agnostic. All employees join Cloudflare. Fred Schott says they can now focus 100% on the framework instead of figuring out how to make money. Astro 6 beta is already out.

Open-source project that uses hidden enterprise policy settings to strip AI features, Copilot, shopping integrations, sponsored content, telemetry, and bloat from Chrome, Edge, and Firefox. Provides install scripts for Windows, Mac, Linux. Firefox announced an 'AI kill switch' option for full AI disable.

Briar is a decentralized messaging app designed for activists and journalists. No central servers - messages sync directly between devices. When internet is unavailable, it uses Bluetooth and WiFi mesh networking for device-to-device communication. When online, it routes through Tor for privacy.

Nvidia has likely overtaken Apple as TSMC's largest client by chip wafer purchases. The AI chip boom is driving 48% growth in TSMC's high-performance computing sales while smartphone growth stagnates. Apple now has to fight for production capacity. TSMC's CEO CC Wei is cautiously expanding, aware the AI boom may not last.

Kyutai Labs released Pocket TTS, a 100M parameter text-to-speech model that runs in real-time on CPU. Can clone any voice from just 5 seconds of audio. Trained on 88k hours of public English data. Uses continuous audio latent prediction instead of discrete tokens. MIT licensed and open source.

Wikipedia maintains a list of notable individual trees worldwide, including the 3,350-year-old Oliveira do Mouchao in Portugal, a tree in Italy where a mulberry grows inside a cherry tree, and one in an established gay cruising area noted for its 'slender trunk which facilitates gay sex.' The editors somehow let that one through.

Researchers completed a collaborative project proving all 1,646,147 still life patterns with exactly 23 cells in Conway's Game of Life can be constructed purely from glider collisions. The most complex synthesis required 47 steps and 178 gliders. They built tools called 'Stomp' and 'Mr. Component' plus GPU-based random collision searches to crack it.

Academic paper argues that AI systems are fundamentally incompatible with civic institutions like law, universities, and the press. The authors claim AI erodes expertise, short-circuits decision-making, and isolates people from each other. Their conclusion: 'current AI systems are a death sentence for civic institutions.'

Article argues that in AI, your only defensible advantage is data collection. Easy-to-adopt domains are value traps where model providers will dominate. Hard-to-solve, hard-to-adopt problems offer the best opportunity for unique data moats. Enterprise-specific workflows create the most defensible advantages.

Primecoin is a cryptocurrency that uses prime chain discovery as proof of work instead of arbitrary hash puzzles. Miners must find Cunningham chains, sequences of primes where each number is almost double its predecessor. The longest known chains are 17 and 19 primes long. It remains unknown whether infinitely many such chains exist.

Two commits from Helg Bredow and Stefan Fritsch fix viogpu and vio network drivers, enabling OpenBSD/arm64 to run on Apple's Virtualization.framework. The GPU fix returns physical addresses correctly and adds DMA sync calls; the network fix supports VIRTIO_NET_F_MTU negotiation that Apple's VMM requires.

NTSB investigation reveals Boeing identified cracks in MD-11 engine mounting assemblies on four occasions across three aircraft before a November 2025 UPS cargo plane crash in Louisville killed 15. Boeing's 2011 response was a 'service letter' recommending visual inspections every five years, concluding it 'would not result in a safety of flight condition.'

Author shares three examples: Claude excels at debugging Sentry integrations and migrating infrastructure to AWS ECS using existing tools, but fails to propose elegant solutions for novel problems like React data lookups. The thesis: Claude can assemble pre-existing Lego blocks brilliantly but lacks the 'soul' to create new abstractions or understand system design context.

Gambit inverts typical agent pipelines - instead of compute-compute-LLM-compute, it's LLM-LLM-LLM-compute-LLM. Agents are described in markdown or TypeScript 'decks' with explicit inputs/outputs and guardrails. Includes built-in graders for automatic evaluation and test agents for synthetic data generation.

OpenWork is a native desktop app built on OpenCode that aims to bring agentic workflows to non-technical users. Motivated by wanting to let family members run privileged workflows like controlling Home Assistant or deploying web apps without touching a terminal. Supports skills/plugins, local-first operation, and surfacing plans/permissions in a GUI.

Briar is a secure messaging app that syncs messages peer-to-peer via Bluetooth and Wi-Fi when the internet is unavailable. No central servers, end-to-end encryption, and mesh networking that routes messages through available devices. Persian manual page suggests this is gaining traction as Iran's regime keeps hitting the kill switch.

Kyutai releases a 100M parameter TTS model that runs faster than real-time on CPU. Clone any voice with just 5 seconds of audio. Trained on 88k hours of public English data, MIT licensed. Uses continuous audio latent prediction instead of discrete tokens, which apparently makes it both smaller and better.

JuiceFS splits your files into chunks stored in S3-compatible storage while keeping metadata in Redis or other databases. Full POSIX compliance, Kubernetes and Hadoop support. Files get chunked into 64MB pieces, then slices, then 4MB blocks. The idea is to use cheap object storage like a proper filesystem without rewriting your apps.

FDA releases official guidance document on using Bayesian statistics in clinical trials. Covers borrowing data from previous trials, pediatric extrapolation, subgroup analysis, and dose-finding. Key points: you need to justify your prior distribution, run sensitivity analyses, and document everything. The prior's influence can be quantified using 'effective sample size'.

Hillel Wayne lists his frustrations with Prolog: no standardized strings, no functions (only predicates that return true/false), limited collection types, no boolean values, confusing cuts that can lead to invalid programs, and quirky sorting that removes duplicates by default. He suggests Picat as a more user-friendly alternative.

Photographer Weimin Chu documents China's renewable energy buildout with drone footage showing solar and wind installations at a scale that's hard to comprehend from the ground. China added enough renewable capacity in May alone to power Poland, installing roughly 100 solar panels per second. Photos span from the Tala Desert to tidal flats, with sheep grazing under elevated panels.

The Internet Archive runs 28,000 spinning hard drives in a converted church in San Francisco, storing 99 petabytes of unique data (212 PB with backups). They use custom 'PetaBox' servers with consumer-grade drives, passive cooling from SF's maritime climate, and the server heat warms the building. Budget: $26.8M/year. They capture pages using Heritrix and store them in WARC format.

Five CVEs disclosed affecting Svelte, SvelteKit, and the devalue library: three DoS vulnerabilities causing memory exhaustion via malicious payloads, one potential SSRF in adapter-node, and one XSS when using hydratable with unsanitized keys. All patches available in devalue 5.6.2, svelte 5.46.4, SvelteKit 2.49.5, and adapter-node 5.5.1.

Senior engineers treat influence like a bank account with limited funds. They strategically choose which failing projects to try to stop, considering political capital, proximity to their team, and potential blast radius. Being technically right about a project's doom isn't the same as being effective in stopping it.

Shellbox lets you spin up Linux VMs instantly via SSH with no signup - just 'ssh shellbox.dev'. VMs suspend when you disconnect and resume when you reconnect. Pricing is $0.05/hr running, $0.005/hr suspended. Specs: 2 vCPUs, 4GB RAM, 50GB SSD. Includes automatic HTTPS endpoints and full SSH features like port forwarding.

Apple is losing its throne as TSMC's top customer to Nvidia. Apple's chip revenue grew a measly 3.6% while Nvidia exploded 62%. The AI boom has TSMC's high-performance computing sales up 48% vs 11% for smartphone chips. TSMC's CEO is 'very nervous' about how long the AI party lasts.

Wikipedia turned 25 on January 15, 2026. It now has 65 million articles across 300+ languages, 250,000 volunteer editors, and 15 billion monthly views. The anniversary page reflects on its journey from joke to trusted source, surviving the Seigenthaler hoax and now facing AI attribution battles.

OP asks how to solve the loneliness epidemic where countless voiceless people sit alone daily with no one to talk to. They sit on social media when not working. The discussion explores multiple roots into community, intentional effort to leave the house, and the challenge that easy entertainment offers no rejection but also no reward.

404 Media exposed ELITE, Palantir's app for ICE that creates Google Maps-style interfaces to identify deportation targets by neighborhood. It generates dossiers with names, photos, addresses, and 'confidence scores' on location accuracy. The author questions the morality of engineers building such tools.

Fly.io introduces Sprites: 'ballpoint disposable computers' - instant Linux VMs with 100GB persistent storage backed by S3. No container images needed, creation is instant, and they auto-sleep when inactive. The key innovation is 'inside-out orchestration' where management happens within the VM itself.

Security researchers at PromptArmor discovered that Claude Cowork can be tricked via prompt injection to upload user files to an attacker's Anthropic account. The attack exploits allowlisted API access within Claude's sandboxed VM - no human approval needed. A hidden prompt in a .docx file instructs Claude to read sensitive documents and exfiltrate them using the attacker's API key.

404 Media reports on ELITE, Palantir's app that populates maps with potential deportation targets and generates dossiers with 'confidence scores' on current addresses. The app pulls data from HHS and other sources to identify high-concentration neighborhoods. ICE agents in Minneapolis have been using it to box in residents, slam them to the ground, and detain them for hours.

Jeff Geerling reviews the $130 Raspberry Pi AI HAT+ 2 with Hailo 10H chip and 8GB LPDDR4X RAM. Despite the AI branding, the Pi's built-in CPU actually outperforms the Hailo for LLM inference. The 40 TOPS NPU is good for vision tasks (10x faster than CPU) but the 8GB RAM is restrictive for larger models. Mixed inference mode is unstable. Verdict: 'A solution in search of a problem.'

Nvidia published a technical brief claiming rack busbars in a 1GW data center could require 'up to half a million tons of copper.' The actual math: standard architectures use ~200kg per megawatt, so 1GW needs ~200 tons, not 500,000. Thunder Said Energy calls it an 'innocent typo' - they likely meant pounds, not tons (a 2,200x difference). The error was circulated by media and even the Copper Development Association.

Susam is building a community-maintained directory of personal websites at hnpwd.github.io. Over 2,000 HN users have shared their personal sites, digital gardens, wikis, and blogs. The thread has become a showcase of indie web creativity, from ESP32 smartwatch projects to hand-coded HTML tape catalogs to plain CSS portfolios.

Raspberry Pi launched the $130 AI HAT+ 2 with a Hailo 10H chip and 8GB LPDDR4X RAM, capable of 40 TOPS at just 3W. In practice, it's underwhelming for LLMs since the CPU often outperforms the NPU, and 8GB is too small for serious models. Better suited for vision tasks like object detection.

Handy is a free, open-source, cross-platform STT app that runs entirely offline. Press a hotkey to speak, release to transcribe, and it pastes text directly. Supports Whisper and Parakeet models with GPU acceleration. No cloud, no subscription, just works.

Tavus released Sparrow-1, an audio model that predicts conversational 'floor ownership' rather than waiting for silence. It analyzes semantic completeness, prosodic cues, and vocal signals at frame-level to achieve zero interruptions with 55ms median latency. Claims 100% precision and recall in benchmarks.

Chrome proposes a new <geolocation> HTML element that requires explicit user clicks instead of JS API calls. It shows a visible button users must interact with, enforces styling constraints to prevent clickjacking, and provides autolocate and watch modes. Aims to reduce permission fatigue and accidental blocks.

HN discusses local RAG setups. Top approaches: SQLite-vec and FAISS for vectors, BM25 for code (embeddings are bad for code), hybrid search combining both. Key insight: you probably don't need a fancy vector DB - SQLite FTS5 or plain trigram search often works better for specific use cases.

CreepyLink takes your innocent URLs and transforms them into something that looks like it was crafted by a Nigerian prince. Input your link, get back something like 'totally-not-malware.xyz/free-bitcoin-logger.exe'. The twist? LLM agents apparently refuse to click these links, which might actually be useful for keeping bots away from your stuff.

Bubblewrap is a Linux sandboxing tool that creates isolated environments for running AI coding agents. Mount system directories as read-only, bind /dev/null over your .env file, and suddenly your AI assistant can't accidentally ship your API keys to the training data gods. Lighter than Docker, more paranoid than your security team.

Someone discovered that archive.today's CAPTCHA page is running JavaScript that hammers a blogger's website with requests every 300ms. The target? The author of a 2023 article investigating archive.today's mysterious anonymous Russian operator. The script sends fetch requests with timestamps to gyrovague.com, seemingly as petty revenge or a DDoS attempt 2.5 years after the article was published.

webctl is a CLI-first browser automation tool designed specifically for AI agents. Unlike MCP implementations that dump everything into your context window, webctl lets you filter what you see: --interactive-only shows just clickable stuff, pipe through head to limit output. Uses ARIA roles for targeting (role=button name~='Submit') instead of brittle CSS selectors. Runs a persistent daemon to keep session state alive.

An interactive 3D visualization of Earth-Sun orbital mechanics. Slide through dates and watch the sun trace its path across the sky at any latitude. Toggle between geocentric and heliocentric views, see twilight zones, polar circles, and daylight patterns. Rendered with atmospheric effects and a starfield. Educational astronomy tool that actually makes orbital mechanics intuitive.

Starlink doubled Roam data from 50GB to 100GB at no extra cost. After hitting the cap, you get unlimited slow data (500 kbps) instead of a hard cutoff. Per-GB purchases are gone except for Ocean Mode.

pyca/cryptography is distancing itself from OpenSSL. Their Rust implementation is 10x faster at X.509 parsing, 60% faster end-to-end for key loading, and avoids OpenSSL's memory safety issues. OpenSSL 3's OSSL_PARAM API is called out as overly complex and error-prone.

Zettalane presented objbacker at OpenZFS Summit: a native ZFS VDEV that talks directly to object storage via a userspace daemon, bypassing FUSE. Achieved 3.7 GB/s reads and 2.5 GB/s writes to S3. Maps ZFS 1MB blocks directly to S3 objects.

FuriosaAI's NXT RNGD Server packs 8 accelerators delivering 4 petaFLOPS FP8 at just 3 kW. LG AI tested their 32B model and got 60 tokens/sec with 4K context. Benchmarks compare against H100 but only show Llama 3.1 8B results.

WebTiles is a grid of 250x250 pixel tiles where you can claim a spot and build a mini website using HTML/CSS/JS. Think of it as your digital plot of land with neighbors. The goal is exploring the indie web by browsing interesting tiles.

Researchers demo a prompt injection attack on Claude Cowork that uploads victim files to an attacker's Anthropic account. Hidden text in a .docx file triggers the exploit, which abuses the allowlisted Anthropic API to bypass network restrictions. Works on Haiku and Opus 4.5.

Ford F-150 Lightning sold 27,300 units in the US in 2025, beating Cybertruck's estimated 21,500 global units. Tesla's truck is at roughly 10% of planned capacity. Ford canceled the Lightning in December 2025 anyway. SpaceX bought over 1,000 Cybertrucks (20% of quarterly sales) to help numbers.

Cursor built a multi-agent coding system with 'planners' that explore codebases and 'workers' that complete tasks. They ran it for weeks on ambitious projects including building a web browser from scratch (1M lines of code) and migrating Cursor from Solid to React with +266K/-193K line changes.

UK site that lets you enter a postcode to find local pubs facing financial pressure from business rate increases. Features a 'Fucked Pub Index' metric using VOA data to calculate vulnerability. Built 'with rage and a love of pubs' by Ben Guerin.

Community directory of personal websites at hnpwd.github.io. Maintainer asks for submissions of sites hosted on spaces with full design control. 1,236 comments and counting, mostly links to personal blogs, digital gardens, and portfolio sites.

［From title + comments, article geoblocked］ FBI raided the home of Washington Post reporter Hannah Natanson, seizing devices. She had cultivated 1,169 federal employee sources for her reporting. The raid appears aimed at identifying her sources through her communications.

SparkFun terminated its business relationship with AdaFruit citing Code of Conduct violations: 'sending offensive, antagonistic, and derogatory emails' to employees and 'inappropriately involving a customer with a private matter.' AdaFruit's Phil Torrone claims SparkFun's founder Nate was reported for multiple issues and SparkFun retaliated by cutting off Teensy distribution.

Developer documents their frustration with GitHub Actions: the painfully slow feedback loop (2-3 minutes per change), YAML rigidity, mysterious cross-platform build failures, and the inability to test locally. Concludes with the wisdom of keeping scripts under your control and just having Actions call them.

Natural fibers like cotton and wool have 'memory' and return to their crinkled state when exposed to heat, moisture, and tumbling. Wool's scales interlock causing felting. To unshrink: soak in lukewarm water with hair conditioner, gently stretch, and dry flat. Prevention: cold water, low spin, delicate cycle.

NUKEMAP creator Alex Wellerstein switched from Google Maps to Mapbox+Leaflet after Google's API became increasingly hostile to developers: pricing changes, worse documentation, and a platform that went from 'amazing' in 2012 to unsustainable for hobby projects.

A 1995 party game where players create cards and rules during play. You start with blank cards, draw pictures and write effects on them, then shuffle them together and play. The real victory isn't points - it's having your cards deemed worthy of keeping for next time.

Gleam is a statically-typed functional language that runs on the Erlang VM (BEAM) or compiles to JavaScript. It gives you Erlang's legendary fault tolerance and concurrency with actual type safety, no nulls, and clear error messages.

Rails 8 ditches Redis for SolidQueue, which uses PostgreSQL's FOR UPDATE SKIP LOCKED to handle job queues. You get concurrency limits, recurring jobs, and monitoring dashboard for free. Works for 99% of apps doing under 300 jobs/sec.

vLLM achieved 2.2k tokens/second per H200 GPU serving DeepSeek-V3 using Wide Expert Parallelism, Dual-Batch Overlap, and disaggregated serving. On a 16xH200 cluster ($750k hardware), this translates to roughly $4 per million tokens over 3 years.

Natural language interfaces via LLMs have terrible latency - often tens of seconds. The author proposes a hybrid approach: use structured UI elements (dropdowns, checkboxes) with an 'Other' escape hatch for flexibility. Best of both worlds.

A teardown of a disposable vape reveals: 32-bit ARM Cortex M0 MCU, 800mAh LiPo battery, USB-C charging, a digital display showing battery/fluid levels, three microphones detecting suction position, and six flavor chambers. All for $15 and destined for a landfill.

A satirical piece treating the JP Morgan Healthcare Conference as an elaborate conspiracy ritual. The author notes no one they know has actually been inside, frames it as a 'Schelling point' for deal-making, and escalates into absurdist speculation about the conference feeding a subterranean organism beneath California.

An open-source AI agent that has indexed roughly 100 million words from the publicly released Epstein documents - emails, flight logs, court documents. Supports both semantic search and exact text lookup with source citations. Built to let people verify claims against primary sources without manual PDF archaeology.

A guide to not accidentally leaking your secrets through shell history, /proc, or environment variables. Key techniques: use file-based headers with restricted permissions, process substitution to avoid persistent storage, read -s for interactive input, and prefer shell variables over exported env vars that child processes can inherit.

A procedural ASCII art generator that renders animated clouds using noise functions. Maps different characters (., -, +, O, X) to intensity thresholds, with customizable cell size, wave amplitude, vignette effects, and color settings. Features preset styles like Terminal, Retro, and CRT.

Early-stage startups should avoid three management anti-patterns: trying to artificially motivate engineers (996 culture, weekend meetings), hiring managers too early (under 15 engineers), and copying big-company practices. The advice? Hire motivated people, then get out of their way and build product.

When companies discontinue smart devices, they should release hardware specs and connection protocols so the community can keep them alive. The author's smart scale became e-waste when the app died. Spotify's Car Thing lasted 3 years. Bose actually did it right by open-sourcing their EOL speakers.

If you have one NPC who lies 20% of the time, you're right 80% of the time. Add a second identical NPC and... you're still right exactly 80% of the time. The disagreement cases perfectly cancel out any accuracy gain. You only improve with an odd number of advisors. Math is weird.

GitHub has two ID systems: legacy IDs (simple format like '010:Repository2325298') and new node IDs (base64-encoded MessagePack like 'PRRC_kwDOL4aMSs6Tkzl8'). The author reverse-engineered both to avoid a database migration, finding that database IDs hide in the last 32 bits of the new format.

HN moderator dang compiled curated lists of 'The {name} Programming Language' posts, tracking the tradition from Go (2009) to Rust (2010) to Julia (2012). Two new pages: /thelang for classic intros and /showlang for Show HN language debuts. The obscure and esoteric ones are the most fun.