Snowflake's Cortex Code CLI had a vulnerability where prompt injection could bypass human approval and sandbox restrictions. Attackers could embed malicious instructions in a README, causing Cortex to download and execute arbitrary scripts using process substitution tricks. The malware could steal database contents and drop tables via cached authentication tokens. Fixed in version 1.0.25.

A designer-developer reflects on how AI coding tools have turned programming into gambling. The dopamine hit of generating code that 'looks' right without understanding it mirrors slot machine mechanics. While AI makes trying new frameworks easier, the author questions whether it's actually making them a better developer or just more addicted to pulling the lever.

Charles Bennett and Gilles Brassard won the 2025 Turing Award for founding quantum information science. They met by chance in 1979 when Bennett ambushed Brassard with quantum money ideas while swimming in Puerto Rico. Their collaboration produced BB84, the first quantum key distribution protocol, and later quantum teleportation. Their work was dismissed for years until Shor's algorithm made quantum cryptography 'unavoidable.'

NVIDIA released NemoClaw, a plugin for secure installation of OpenClaw AI agents. It intercepts all inference requests from agents and routes them through NVIDIA's cloud, ostensibly for security but also conveniently positioning NVIDIA as the default compute provider for agentic AI setups.

Complete Hacker News archive as Parquet files on HuggingFace, containing 47M+ items from 2006 to present. Updated every 5 minutes via automated pipeline. Monthly files plus live 5-minute blocks for today. Works with DuckDB, pandas, or HuggingFace datasets library. The old Clickhouse source hasn't updated since December 2025.

ProPublica investigation reveals FedRAMP reviewers spent 5 years unable to get Microsoft to explain how GCC High encrypts government data, eventually approving it anyway because it was already deployed everywhere. Third-party assessors secretly told FedRAMP they couldn't properly vet the product.

Web developer David Bushell delivers a passionate rant against scroll fade effects - those animations where elements fade in as you scroll. He argues they hurt accessibility (vestibular disorders), tank Core Web Vitals/LCP scores, and are usually requested by shadow stakeholders at the last minute.

Stripe proposes MPP, a protocol for AI agents to make payments without human intervention. The problem: agents can't navigate pricing pages, create accounts, or enter payment details. MPP would let your AI assistant buy things autonomously by exposing machine-readable payment endpoints.

Using muon imaging and a 6mm endoscope, researchers found a 9-meter sealed corridor hidden behind chevron masonry in the Great Pyramid of Giza, about 7 meters above the main entrance. The passage, hidden for 4,500 years, may relate to the pyramid's internal load management or an unmapped deeper space.

Meta is killing the VR version of Horizon Worlds on June 15, 2026. After spending billions on the 'metaverse', the company is now 'going all-in' on the mobile app version instead. Even the recently added Hyperscape Capture feature for 3D location scanning is being removed.

Five timeless programming principles: don't guess where bottlenecks are, measure before optimizing, fancy algorithms have big constants and are buggier, simple data structures beat clever code, and data dominates - get your structures right and algorithms become obvious.

［Based on title + comments, article behind Cloudflare］ Visual explainer of JPEG compression covering the discrete cosine transform (DCT), quantization, and why low-quality images get blocky - you're literally seeing the 8x8 DCT grid when there isn't enough bit budget for high-frequency components.

Part 3 of a homebrew CPU project covering the transition from simulation to physical hardware. Uses '574 chips for registers with blinkenlights, a Rigol oscilloscope for debugging, custom EEPROM programmer, and deals with the modern reality that most components are only available as SMD now.

Pgit implements Git semantics on top of PostgreSQL, letting you version control data with familiar commands. Designed for AI agents that need to understand code history and metadata. Author tried SQLite first but hit performance and extension API limits.

Local-first karaoke app that separates vocals from instrumentals, generates word-level synced lyrics, and provides pitch scoring. Works with any music file including video. No accounts, no subscriptions, no telemetry - everything runs on your machine.

Superluminal devs tracked down periodic 250ms system freezes on Fedora to a gnarly eBPF ringbuffer spinlock bug. When NMI sampling interrupts hit during context switch events, the spinlock acquisition deadlocked because NMIs can't be masked. They discovered the 250ms timeout in the spinlock code matched their freeze duration exactly. Led to multiple kernel patches fixing recursive lock issues.

Cornell researchers used electron ptychography (EMPAD detector tech) to image atomic-scale defects in transistor channels for the first time. Working with TSMC and ASM, they found 'mouse bite' roughness in channel walls that slows electron flow. Modern transistors are 15-18 atoms wide, so every atom's position matters. The imaging could debug everything from phones to quantum computers.

A directory of 135+ IoT devices that can be flashed with open firmware like Tasmota, OpenBeken, and ESPHome. Covers smart plugs, sensors, switches, and dev boards. HN commenters note it's small compared to existing repositories (Blakadder's templates has 3000+ devices) and somewhat AI-generated-feeling.

YC-backed Kita uses vision language models to automate document-based underwriting for lenders in emerging markets like Philippines and Mexico. Handles messy bank statements, payslips, and e-wallet screenshots that existing OCR tools fail on. 98% accuracy, under 30 seconds per document. Named 'kita' which means 'seen' in Tagalog.

Interactive Claude artifact that simulates random rebirth as any animal based on population. 95% of all animal life is nematodes and beetles, so your lottery tickets mostly come up worm. One commenter got 15 nematodes in a row (3% probability) and learned about compounding.

Merritt K argues that businesses and creators should stop relying on social media and build their own websites. You don't own your followers on Instagram, platforms can change rules overnight, and email is the only portable contact method. The internet was built on linked websites, not walled gardens owned by 'pedophilic fascist speed freaks.'

Emmanuel Dupoux, Yann LeCun, and Jitendra Malik propose a framework for autonomous AI learning inspired by human cognition. Current AI lacks true learning capability. Their architecture has System A (learning from observation), System B (learning from active behavior), and System M (meta-control that switches between modes). It's basically Kahneman's System 1/2 but for machines.

Zeroboot boots Firecracker once with Python and numpy loaded, snapshots the VM state, then uses MAP_PRIVATE to get copy-on-write pages for each new sandbox. Every execution starts from an already-running Python process inside a real KVM VM. The hard part wasn't CoW itself but resuming the snapshotted VM correctly. Written in Rust, Apache 2.0.

Greek architect Katerina Kamprani has spent 15 years designing deliberately unusable objects through her project 'The Uncomfortable.' A fork with a chain handle. A watering can that pours on itself. A wine glass with holes. She started after failing at traditional architecture jobs and wanted to do 'exactly the opposite' of good design. About 50-60 designs exist, half as 3D renders and half as real prototypes.

exe.dev can't give each VM its own IPv4 (too expensive) but needs to route SSH to the right VM. Unlike HTTP which has a Host header, SSH has no equivalent. Their solution: assign each VM a unique IP relative to its owner from a pool. When SSH connects with a public key, the {user, IP} tuple uniquely identifies the VM. It required custom bespoke management software.

Eric Lengyel created the Slug Algorithm for GPU-based font rendering from Bezier curves in 2016. After a decade of licensing to major game studios (Activision, Blizzard, id Software, Adobe), he's permanently dedicating the patent to public domain. Reference shaders now MIT-licensed on GitHub.

Corridor Crew trained a neural network to solve the green screen transparency problem - the hardest unsolved challenge in chroma keying. By procedurally generating synthetic training data with known-perfect masks, they created an AI model that extracts true transparency from green screen footage, handling hair, glass, and motion blur.

Wasmer released Edge.js, a JavaScript runtime that runs Node.js apps sandboxed via WebAssembly without Docker. It runs the JS engine natively while isolating system calls through WASIX. Achieves full Node v24 compatibility with native module support, running 5-30% slower than native Node when sandboxed.

Unsloth released Studio beta - an open-source, no-code web UI for running and training AI models locally. Supports 500+ models with 2x faster training and 70% less VRAM. Features include GGUF inference on Mac/CPU, auto-dataset creation from PDFs/CSVs, model arena comparison, and export to GGUF/safetensors. Apache licensed.

Mistral launched Forge, an enterprise platform for training custom AI models on proprietary data. Supports pre-training, post-training, and RLHF. Partners include ASML, ESA, and Ericsson. Offers dense and mixture-of-experts architectures. Built agent-first so even AI agents can fine-tune models by writing plain English.

CPython's experimental JIT hit 11-12% speedup on macOS AArch64 and 5-6% on x86_64 Linux, achieving goals a year early. After the Faster CPython team lost corporate funding, volunteer Ken Jin kept the project alive. The JIT uses trace projection rather than recording, hitting 20% slowdown to 100%+ speedup depending on workload.

Platformatic proposes adding a virtual file system to Node.js core for mocking in tests, runtime code generation, and SQLite-backed storage. The 19k line PR was mostly generated by Claude Code, triggering debate about whether AI-generated contributions violate Node's Developer Certificate of Origin.

An agentic coding framework that uses meta-prompting and spec files to orchestrate Claude Code for complex multi-step tasks. Users report it burns 10x more tokens than manual steering but works well for fire-and-forget research tasks. Plan mode in vanilla Claude Code now covers most use cases.

［Article behind geo-restriction］ Honda is reportedly pulling back from EV development. TechCrunch argues this abandons software-defined vehicle capabilities and future competitiveness. HN commenters push back hard, questioning whether OTA updates are actually consumer-friendly or just rent-seeking in disguise.

A deep dive into the cinematography of Wagner Moura's 'The Secret Agent' set in 1970s Brazil during the dictatorship. The film captures the era's aesthetics so convincingly that viewers who grew up in Brazil then say it feels like being transported back. Shot to have broad popular appeal while tackling political violence.

The Xbox One, marketed as 'unhackable' since 2013, has finally been cracked using voltage glitching. A hacker named 'Bliss' achieved this by creating a precisely-timed voltage drop during key comparison, then a spike to force execution control flow. This allows loading unsigned code at every level of the system.

Article argues that speeding up code writing with AI assistants is optimizing the wrong bottleneck. Using Goldratt's Theory of Constraints, it explains that making a non-bottleneck faster actually makes systems worse. Real bottlenecks are: not knowing what to build, PR review queues, deployment fear, and lack of post-ship feedback loops.

Illinois HB5511 would require operating system providers to collect birth date at account setup and provide age signals to operators via API by January 2028. Operators would need to verify if users are minors and apply restricted default settings for them. Violations would be treated as consumer fraud.

Meta is removing Horizon Worlds from Quest VR headsets by June 15, 2026. The platform will become mobile-only. Horizon Central, Events Arena, and other first-party worlds are being removed by March 31. Horizon Plus subscription perks like Meta Credits and digital clothing are also being discontinued.

Japanese researchers found all five nucleobases (adenine, guanine, cytosine, thymine, and uracil) in samples from the Ryugu asteroid brought back by Hayabusa-2 in 2020. This is the first complete set found in space rock samples. They also found an unexpected correlation between nucleobase ratios and ammonia concentration.

Teardown devs spent years making multiplayer work in a game where everything is destructible. They rewrote destruction logic in fixed-point integer math for determinism, split changes into command streams synced across clients, and built a hybrid system: deterministic for world changes, state sync for everything else. Join-in-progress works by replaying the command stream rather than serializing the whole scene.

A developer asked Viktor (AI agent startup claiming 3000+ tool integrations) to backup its own workspace. Viktor happily complied, exporting logs, SDK code, prompts, and internal documentation. Using this dump plus public blog posts, the author reconstructed the entire architecture and reimplemented it as OpenViktor in two days. Self-hostable with a single script.

AutoCodeBench shows LLMs perform best on Elixir, Kotlin, Racket, and C# while sucking at Python and JavaScript despite massive training data. The author argues functional languages with explicit semantics, pattern matching, and immutability optimize for machine generation and human verification. Grace Hopper's original vision of English-to-code is finally here, and programs should be written for humans to verify, not write.

Gitana 18 is a 32-meter racing trimaran that flies entirely out of the water using Y-shaped foils adapted from America's Cup AC75s. It has 44 hydraulic cylinders, movable spreaders for dynamic rigging adjustment, U-shaped rudders designed to handle cavitation at 35+ knots, and took 200,000 hours to build. Projected average speed: 40 knots in 3-meter waves.

Kagi Small Web is a curated discovery portal for independent blogs and personal websites, indexing over 5,000 sites across 20+ topic categories. It only shows posts from the last 7 days, has RSS feeds, includes Small YouTube and Small Comics sections, and surfaces these results in Kagi search. The index is community-submitted via GitHub.

SEC planning to eliminate mandatory quarterly financial reporting for public companies, moving to semi-annual disclosures. Comments exploded from 64 to 283 as the debate rages between 'this reduces short-term pressure' and 'this enables more insider trading.'

Open-source data journalism quantifying healthcare waste. Key finding stands: commercial insurers pay 254% of Medicare rates for identical procedures, representing $73B/year in excess spending. Discussion expanded to 274 comments covering pharma, admin overhead, and perverse incentives.

Meta publicly recommits to jemalloc after years of neglect, with discussion tripling to 177 comments. The conversation expanded into malloc comparisons, memory allocation wars between jemalloc/mimalloc/tcmalloc, and whether this is all just about the global memory shortage.

A short film adaptation of qntm's cult SCP Foundation novel 'There Is No Antimemetics Division' has been released. The story deals with memetic threats - ideas that defend themselves by making you forget them. Two different film versions exist now, showing the book's growing influence.

A 2020 deep dive into spacecraft software reliability. When your code is 400 million kilometers away, you can't just SSH in and restart it. The article explores how space agencies build software that must survive radiation, extreme temperatures, and years without human intervention.

［From title + comments, article is interactive tool］ Kagi's translation service added a satirical 'LinkedIn Speak' output mode that transforms plain statements into corporate buzzword-laden drivel. 'I clean toilets' becomes 'I'm thrilled to announce my new chapter as Environmental Maintenance Contractor.' Also supports pirate speak and other custom outputs.

［From title + comments, article unreachable］ Avery Pennarun argues that each layer of code review exponentially degrades velocity. The math: if a PR takes 5 hours to review, adding another review layer doesn't add 5 hours, it multiplies the delay. The article advocates for shifting reviews left via pair programming and design sessions instead of post-hoc PR gatekeeping.

［From title + comments, article unreachable］ A Swedish demoscene team is creating a ground-up port of The Secret of Monkey Island for the Commodore 64. The backgrounds are being redrawn in C64's limited palette and look stunning. Open questions remain about fitting the game into 64KB and handling the iconic music.

Pyodide compiles Python and its scientific stack (NumPy, Pandas, etc.) to WebAssembly, letting you run Python in the browser with no server. Nearly 8 years old and mature enough for production use. Main downside: loading heavy packages like NumPy takes 10+ seconds.

［From title + comments, article unreachable］ Kyle Kingsbury's latest Jepsen analysis examines MariaDB Galera Cluster 12.1.2 and finds data loss scenarios. Galera provides synchronous multi-master replication for MySQL/MariaDB, and has been a workhorse for low-volume clustering, but this analysis reveals edge cases where data integrity fails.

Beyond Meat is now 'Beyond The Plant Protein Company' after CEO Ethan Brown declared 'it's just not the moment for plant-based meat.' The company is pivoting to high-protein fizzy drinks and nutrient-dense products while acknowledging consumer confusion around ultra-processed foods.

Oxyde is a new Python ORM where your Pydantic model IS your database model - no more duplicating schemas. It uses Django-style queries (.objects.filter()), has a Rust core for SQL generation, and is explicitly lazy (no surprise N+1 queries). Benchmarks show it outperforming Tortoise, SQLAlchemy, and Django ORM.

Princeton researchers argue that LLM teams should be analyzed through the lens of distributed systems - addressing questions like when teams outperform single agents, optimal team size, and how structure impacts performance. They find that classic distributed computing challenges (consensus, coordination) directly apply to LLM swarms.

Voygr is building 'infinite, queryable place profiles' that go beyond static Maps API data. Their Business Validation API detects if places are actually operating, closed, rebranded, or fake by aggregating multiple data sources and detecting conflicting signals. Founded by ex-Google Maps and Apple ML engineers.

ThermalMarky is a Python tool that adds markdown support to thermal receipt printers - headers, bold, lists, plus custom tags like ［align=center］ and ［qr=url］ for QR codes. Includes a web UI for printing from browser and CLI mode for piping content.

［From title + comments, article behind paywall］ SEC plans to move public companies from quarterly to semi-annual financial reports. The move aims to reduce short-term pressure on executives, though critics argue it just opens more doors for insider trading.

Mistral releases Leanstral, the first open-source AI agent specifically trained for Lean 4 proof engineering. With just 6B active parameters (sparse architecture), it can write and verify formal mathematical proofs in realistic codebases, not just competition problems.

Kevin Boone analyzed Kagi's small web directory and found it grew from 6,000 to 32,000 sites in a year. After filtering for active sites with proper RSS feeds, he found 9,000 sites producing about 1,251 updates per day. The small web is now too big to fit on a single aggregator page.

Open-source data journalism project that quantifies fixable waste in US healthcare. Key finding: commercial insurers pay 254% of Medicare rates for identical hospital procedures, representing $73B/year in excess spending. Total savings identified so far: $98.6B/year.

Cloudflare engineer sets up Starlink Mini as backup internet using the new 4.50 pounds/month ($5) standby plan. Hardware costs 200 pounds, connects via UniFi as secondary WAN, and provides near-instant automatic failover when primary connection drops.

Andrej Karpathy built an interactive visualization of US Bureau of Labor Statistics data showing job growth projections by sector. Software dev jobs are supposedly growing faster than average, which is news to anyone who's been job hunting for the past year.

A Home Assistant user documents their quest for a locally-hosted voice assistant that actually works. The journey involves wake word detection nightmares, TTS that sounds like a robot from 1995, and the realization that the LLM is the easy part.

Meta publicly recommits to jemalloc development after years of letting it languish. The company learned from HHVM that siloed open source projects die, and is now investing in jemalloc as shared infrastructure rather than an internal fork.

Apple releases AirPods Max 2 with USB-C and... that's about it. Same 13.6 oz weight that causes skull dents, same lack of power button, same $549 price that makes no sense when the MacBook Neo is $599.

Apideck proposes CLI as an alternative to MCP for AI agents, arguing that MCP servers eat context windows alive. The post suggests using traditional command-line interfaces to interact with services rather than bloating the agent's context with tool definitions.

［from title + comments, article unreachable］ Polymarket bettors are sending death threats to a Times of Israel journalist demanding he rewrite an article about Iran missiles because the outcome affects their bets. The bets aren't even on anyone dying - they're on whether a reportable event occurred.

Two senior MoD systems engineers claim Palantir poses a national security threat to the UK. While the government insists 'data remains sovereign,' insiders say Palantir can aggregate unclassified data from across departments to derive top-secret intelligence - like determining nuclear submarine locations from three unrelated data points. The UK has given Palantir at least £670m in contracts including access to nuclear weapons agency data.

Academic study of 62 countries finds corruption destroys social trust much more severely in democracies than autocracies. In democracies, corruption violates core fairness norms AND implicates citizens who elected the corrupt officials. In autocracies, corruption is expected - the elites are seen as separate from ordinary people. The paper calls this 'the price of accountability.'

A sysadmin reflects on 24 years with FreeBSD after discovering its comprehensive Handbook in 2002. Key points: FreeBSD prioritizes stability over hype ('The Power to Serve'), network interfaces don't randomly rename after reboots, jails have been native since 2000, ZFS is first-class, and the community is driven by genuine passion rather than monetization schemes.

150+ countries including China, India, and EU members signed an IPBES report declaring that GDP-obsessed economic activity is driving biodiversity collapse. One-eighth of Earth's 8 million species face extinction, 75% of land has been significantly altered by humans. The report slams 'perverse incentives' and business models pushing 'ever-increasing material consumption.'

A sprawling 7-year diary from a Hyundai Kona EV owner documenting everything from building home charging infrastructure to disabling BlueLink telemetry, running the battery to zero for BMS calibration, and obsessing over regenerative braking physics. Includes teardowns, oscilloscope measurements of DC fast charging, and a rant about charging apps being universally terrible.

A New Zealand software engineer sets up Home Assistant on a Beelink mini PC running Proxmox, connects a Link-Tap 4-zone irrigation controller via local MQTT (no cloud), adds Zigbee soil moisture sensors, and creates automations that skip watering when rain is forecast. The setup costs about $300 and works entirely offline.

David Goldberg's 1991 paper that remains the definitive resource on IEEE 754 floating-point representation, rounding errors, catastrophic cancellation, and why 0.1 + 0.1 + 0.1 != 0.3 in binary. Still required reading for anyone who will ever multiply two numbers on a computer.

A deep-dive into Canon's optical viewfinder engineering from 1994-2009, examining how they evolved from bouncing LED light off the reflex mirror (3 AF points) to sophisticated LCD projection systems using dichroic mirrors (45 AF points). Includes 40+ ray-traced diagrams showing exactly how light reaches your eyeball.

Ben Cox from bgp.tools tested what happens if you build a network using only Internet Exchange route servers: you'd get 56% of IPv4 prefixes (567k) and 61% of IPv6, but only about 14% inbound reachability. The gap exists because many networks export to route servers but don't import from them. Also, after the top 5 exchanges, there's almost no uniqueness in what you gain.

The Glassworm threat actor is back with a mass campaign using invisible Unicode characters (PUA) to hide malicious payloads in GitHub repos, npm packages, and VS Code extensions. The attack encodes JavaScript payloads in zero-width characters that decode at runtime via eval(). 151+ repos compromised between March 3-9, including reworm (1,460 stars), Wasmer examples, and opencode-bench. AI-generated cover commits make the injections blend in perfectly.

River 0.4.0 introduces a stable protocol (river-window-management-v1) that separates the Wayland compositor from the window manager into distinct processes. The compositor handles rendering and input routing while window managers can be written in any language, even garbage-collected ones, without affecting compositor performance. This lowers the barrier to entry dramatically - a basic window manager is now a weekend project instead of months of work. Already 15 window managers exist for river.

Intel Optane drives use 3D XPoint technology delivering 25 microsecond read latency (vs 90-110us for NAND SSDs), 100 DWPD endurance (vs 10 for best NAND), and consistent write performance without throttling. The P5800X achieves 1.5M IOPS per drive. Unlike NAND which must erase pages before writing, Optane is byte-addressable and can overwrite directly. Perfect for ZFS ZIL/SLOG, Ceph WAL, and high-write databases. Intel discontinued the technology in 2022 as part of IDM 2.0 strategy.

Moment.dev explains why they abandoned Yjs, the most popular CRDT library, for collaborative editing. Key issues: Yjs completely destroys and recreates the entire ProseMirror document on every keystroke by design, breaking position mappings, decorations, plugins, and making 60fps impossible. The 'simple' alternative using prosemirror-collab is 40 lines of code and provides the same offline/optimistic update capabilities without CRDT complexity. Unless you need truly masterless P2P editing, CRDTs are unnecessary overhead.

SpiceCrypt is a Python tool that decrypts LTspice's 'encrypted' component models. The encryption is actually just obfuscation: the file header contains two 32-bit keys used to derive a substitution table index and step value. The tool reveals that chip manufacturers' 'protected' SPICE models are trivially reversible, which matters because these models contain proprietary component characteristics.

A comprehensive draft privacy bill that bans commercial surveillance, requires opt-in consent for everything, limits government drone usage, mandates physical kill switches for car cellular connections, updates CAN-SPAM with one-click email deletion, and criminalizes data brokerage. The author admits AI says there's a 0% chance it passes.

The author documents how Amazon is increasingly shipping print-on-demand paperbacks instead of stock editions, even for popular titles from major publishers like Penguin. These POD books have grainy covers, poor typesetting, and lower print quality, yet cost significantly more (18 EUR vs 10 EUR for a stock Penguin Classic). He can now identify POD books within seconds of holding them.

The author describes his multi-agent workflow: an architect (Claude Opus 4.6) plans high-level design through extensive conversation, a developer (Sonnet) implements the plan, and multiple reviewers (Codex, Gemini, Opus) critique the code. The key insight is that using different models for review catches more issues than self-review. He built several projects this way including a personal LLM assistant and a voice note pendant.

Michael Kerrisk (TLPI author) is gathering feedback from university teachers who use his book as a course text. He wants to know which courses use it, at what level, how many students, and how to improve it for academic use. The page is essentially a call for input to improve a future edition.

A deep dive into how motor torque, mass, power dissipation, and rotor inertia scale with motor size. The counterintuitive finding: for a fixed output torque, reflected inertia is determined primarily by power dissipation, not gear ratio. A small motor with high gear reduction has the same reflected inertia as a large direct-drive motor if they dissipate the same power. Motor topology (axial flux vs radial flux) doesn't significantly affect the figure of merit either.

A manifesto against AI-generated content pollution. The site calls for an end to 'sloppypasta' - low-effort AI slop being passed off as human work. It advocates for transparency when using AI and pushes back against the flood of LLM-generated content drowning the internet.

Working with LLMs fundamentally shifts your cognitive load from generation to verification. Writing code is flow-state compatible - you build a mental model and express it. Reviewing LLM output requires constant context-switching into someone else's model, which drains you faster than writing code yourself.

Go introduces //go:fix inline, a new directive that marks functions for source-level inlining during 'go fix'. Unlike compiler inlining, this transforms actual source code, letting library maintainers deprecate functions by inlining their replacements at every call site. Useful for API migrations in monorepos.

Sebastian Raschka's visual gallery of LLM architectures from GPT-2 to modern models. The key insight: after years of experimentation with MoE, state-space models, and linear attention, competitive open-weight models have converged on dense decoder-only transformers with RMSNorm, rotary embeddings, SwiGLU, and grouped-query attention.

A 2016 Salk Institute study found THC and other cannabinoids helped remove beta-amyloid plaques from lab-grown neurons and reduced inflammatory response. The effect was concentration-dependent and required high THC levels. However, the amyloid hypothesis for Alzheimer's has since been severely questioned by multiple failed drug trials.

Canada's Bill C-22 expands police and intelligence agencies' access to digital data, including subscriber info, transmission data, and tracking data from telecom providers. While warrants seem required on paper, loopholes let judges waive warrant copy requirements, and the Five Eyes cooperation means Canadian data flows freely to US agencies.

Chrome DevTools now has an MCP (Model Context Protocol) integration letting AI assistants interact with your browser for debugging. The project just added a standalone CLI in v0.20.0 to reduce MCP's infamous context window costs. Meanwhile, HN commenters are split between 'this is amazing' and 'MCP is dead, just use Playwright.'

A developer audited news website page sizes and found egregious bloat. Some sites load 49MB+ per page visit. The culprit: pre-loaded video content, tracking scripts, and JavaScript that would make a 90s web developer weep. One commenter found their devs loading 750MB per page by pre-loading every video on a video list page.

C++26 introduces a new syntax for variadic templates that adds a trailing comma after the pack expansion, inspired by the Oxford comma. The old syntax is deprecated but not removed, so now you get to know both forms. One commenter notes this was exploitable for code golf competitions using UB stack pointer math.

Nasdaq changed index inclusion rules to allow rapid entry of low-float stocks. When a company like SpaceX IPOs with most shares locked up, index funds are mechanically forced to buy at any price. Limited supply + forced demand = price squeeze. Insiders wait for lock-up expiration, sell into artificial demand, and pocket the difference.

The Glassworm threat actor is back with a mass campaign using invisible Unicode characters (Private Use Area characters) to hide malicious payloads in GitHub repos, npm packages, and VS Code extensions. The decoder turns seemingly empty strings into malicious code that runs via eval(). Over 151 repos compromised between March 3-9, including Wasmer, Reworm, and opencode-bench. The attack uses AI-generated commit messages for camouflage.

Intel Optane SSDs (P4800X, P5800X) use 3D XPoint technology co-developed with Micron. Key advantages: 25 microsecond read latency (vs 90-110us for NAND), 100 DWPD endurance (vs 1-10 for typical SSDs), consistent write performance without degradation, and byte-addressable instead of page-addressable. Intel killed the product line in July 2022 as part of IDM 2.0 strategy, but existing drives are still being sold.

River 0.4.0 introduces a new architecture that separates Wayland compositor from window manager via the river-window-management-v1 protocol. Window managers can now be written independently, restarted without losing sessions, and even written in slow garbage-collected languages without affecting compositor latency. 15 window managers already exist for river, including an Emacs-based one (reka) similar to EXWM.

Hollywood employment down 35-40% per DGA president Christopher Nolan. Warner Bros. being sold for the third time in under a decade ($110B to Paramount Skydance). Theater attendance half of what it was 10 years ago. Gaming market ($225B) now 7x larger than movies ($33B). California doubled film subsidies to $750M to stop production fleeing. Even Netflix is experimenting with AI, paying $600M to acquire Ben Affleck's InterPositive.

BBC Reel explores rising phone addiction among older adults, featuring Charlie Warzel's Atlantic essay on why grandparents are spending more time on digital devices. Families are increasingly concerned, though the piece questions whether younger people are projecting their own screen time anxieties onto their elders. The phenomenon intersects with loneliness among older adults.

A proof-of-concept guided rocket built from consumer electronics and 3D-printed parts. Uses an ESP32 flight computer and MPU6050 IMU for canard-based guidance, with folding fins for aerodynamic stability. Total hardware cost: $96. The launcher includes GPS, compass, and barometric sensors. Designed in Fusion 360, simulated in OpenRocket.

The Pentagon released a 'modernization plan' for Stars and Stripes that limits wire services, bars comics and syndicated features, and requires content to be 'consistent with good order and discipline.' The memo expands Pentagon oversight while claiming to affirm independence. Publisher says they were never consulted.

Signet is a Go-based autonomous wildfire monitoring system that fuses NASA FIRMS thermal detections, GOES-19 imagery, NWS forecasts, LANDFIRE fuel models, USGS elevation, Census data, and OpenStreetMap. Uses Gemini to orchestrate 23 tools for deciding which detections are worth investigating. Records time-bounded predictions and scores them against later data.

The 80x24 terminal size isn't some magical technological inevitability - it's IBM's fault. Punch cards gave us 80 columns. The IBM 2260 (1965) used sonic delay lines storing bits as sound pulses in 50-foot nickel wire. The IBM 3270 (1971) doubled capacity to 80x24 using four 480-character banks. The IBM PC's 80x25 was just them squeezing one more line onto the screen.

An interactive scrolling visualization that teaches decision tree classification using SF vs NYC home prices. Shows how ML draws boundaries in data: elevation distinguishes hilly SF homes, price per sqft catches expensive NYC apartments. Walks through forks, split points, recursion, and the training/test split. Still works perfectly after 11 years.

Charles Petzold, author of several programming books, tests Spotify's AI DJ on classical music and finds it appallingly bad. The DJ mode apparently can't handle requests for composers like Bach, Beethoven, or any of the 500-year tradition of western classical music. The AI seems designed exclusively for pop songs, failing spectacularly when asked to be a DJ for music that isn't in its narrow training set.

［REVISIT - comments doubled from 54 to 111］ Tommy Thompson spent over a decade in prison for civil contempt after refusing to disclose the whereabouts of 500 gold coins from an 1857 shipwreck. He led the 1988 expedition that found $50M in gold from the SS Central America, but investors sued when profits weren't distributed. A judge finally freed him, calling indefinite detention 'coercive overkill.'

［REVISIT - comments exploded from 31 to 160］ Modern kernel anti-cheats (BattlEye, EasyAntiCheat, Vanguard, FACEIT AC) are rootkit-level software running at Ring 0 on consumer Windows machines. They intercept kernel callbacks, scan memory, strip process handles via ObRegisterCallbacks, and in Vanguard's case, load at boot to monitor all drivers. The arms race has escalated from usermode to hypervisors to DMA devices that bypass the OS entirely.

John D. Cook explains why Mathematica doesn't simplify sinh(arccosh(x)) to sqrt(x^2-1), despite it seeming mathematically obvious. The issue is branch cuts in complex analysis: the simplified form only holds for certain regions of the complex plane. When x approaches the real axis from different directions, you get different signs. Mathematica is being mathematically rigorous, not stupid.

Terence Tao announces a mathematics distillation challenge focused on equational theories. The goal is to compress and simplify mathematical proofs while preserving their correctness, essentially creating 'cheat sheets' for complex mathematical reasoning. This connects to AI research on whether LLMs can learn to do mathematical reasoning by analyzing compressed proof patterns.

The Model Context Protocol is being criticized as overengineered CRUD dressed up in fancy clothes. Author argues that while MCP's goal of standardizing AI-app communication is correct, the implementation is bloated compared to simpler alternatives like CLIs with heredoc support. Remote MCP has value for auth handling, but local MCP is context bloat.

Tommy Thompson spent over a decade in prison for civil contempt after refusing to disclose the whereabouts of 500 gold coins from an 1857 shipwreck. He led the 1988 expedition that found $50M in gold from the SS Central America, but investors sued when the gold was sold and profits weren't distributed. A judge finally freed him, calling indefinite detention 'coercive overkill.'

Wild cabbage (Brassica oleracea), an unassuming coastal shrub, was selectively bred over millennia into radically different vegetables: broccoli, cauliflower, kale, Brussels sprouts, kohlrabi, and cabbage itself. Each variety emerged from selecting for different plant parts—flowers for broccoli, leaves for kale, lateral buds for Brussels sprouts.

A clever TCP hole punching technique that enables peer-to-peer connections through NAT without a relay server. The algorithm relies on both peers knowing each other's IPs and 'equal delta mapping' in routers (where the external port matches the internal port). Trade-off: elegant simplicity at the cost of universal compatibility—it won't work on all routers.

［REVISIT - comments exploded from 146 to 337］ A Debian-based distro deliberately violating California's AB 1043 age verification law. The project argues the law creates a compliance moat benefiting Big Tech while crushing volunteer distros. They plan to hand out $15 RISC-V computers to kids at STEM fairs as documented violations, daring enforcement.

Someone had two 42U server racks but only needed 10U, so naturally they built a flood-and-drain hydroponic lettuce farm in the spare one. Uses Sterilite storage boxes that fit server racks 'almost too perfectly,' grow lights, a submersible pump, and cronjobs to control the watering schedule via PDU. Successfully grew multiple batches of lettuce and herbs with only two water leaks.

［From title + comments, article blocked］ Bumblebee queens can survive submerged underwater for up to a week using plastron respiration - a thin air layer trapped by their body hairs acts as a physical gill, extracting dissolved oxygen from water. This explains how hibernating queens survive floods in underground burrows.

Fedora 44 Beta images now available for Raspberry Pi 5, released on Pi Day. Works with all Pi 5 variants (1-16GB), includes KDE and GNOME desktop options. HDMI, WiFi, ethernet, USB all functional. Still missing: NVMe, audio, thermal support, CM5/Pi 500 support. Requires manual CMA kernel parameter for accelerated graphics.

SBCL (Steel Bank Common Lisp) is getting native fiber support - lightweight user-space threads with 256KB stacks that preserve Lisp's dynamic binding semantics. The implementation includes work-stealing schedulers, epoll/kqueue I/O integration, and proper garbage collector integration. Aims to make 10K concurrent connections trivial while keeping the sequential programming model.

The author argues that running messages through LLMs destroys the subtle personal signals in communication - word choice, emphasis, idioms, mistakes - that allow recipients to build an 'atlas of implicit knowledge' about senders. When you genericize your text, you disrupt the 'social handshake' that enables effective honest communication.

Han is a statically-typed, compiled language where every keyword is Korean (Hangul). It compiles to native binaries via LLVM IR and includes an interpreter, REPL, and LSP server. Features structs, closures, pattern matching, try/catch, file I/O, and generics. Built entirely in Rust, inspired by AI-assisted development after seeing someone convert a C++ codebase to Rust in two weeks.

Modern kernel anti-cheats (BattlEye, EasyAntiCheat, Vanguard, FACEIT AC) are among the most sophisticated software on consumer Windows machines. They operate at Ring 0, intercept kernel callbacks, scan memory structures, and use ObRegisterCallbacks to strip process handles. Vanguard loads at boot to watch all subsequent drivers. The arms race has escalated from usermode to kernel to hypervisors to PCIe DMA devices that bypass the OS entirely.

Airbus is preparing two Kratos XQ-58 Valkyrie drones for first flight with European mission systems, offering operational 'loyal wingman' capability to the German Air Force by 2029. These uncrewed combat aircraft will fly alongside Eurofighters, commanded by pilots but not remotely controlled, with shoot authorization delegated to pilots.

A GitHub repo collecting practical marketing resources for getting the first 10/100/1000 users for SaaS startups. Covers launch platforms (ProductHunt, Betalist), directories, Reddit subreddits for promotion, SEO, LLM SEO, cold outreach, content marketing, affiliates, and more. Includes lists of subreddits with self-promotion flairs and lifetime deals platforms.

Anthropic is launching the Claude Partner Network with $100M in 2026 funding for partner organizations helping enterprises adopt Claude. Partners get training via Anthropic Academy, dedicated technical support, co-marketing, and access to the first Claude technical certification: Claude Certified Architect, Foundations. Includes a Code Modernization starter kit for legacy codebase migration.

A Debian-based distro in deliberate noncompliance with California's AB 1043 age verification law. The project argues the law is a compliance moat that Big Tech already satisfies but crushes volunteer-run distros, and plans to hand out $15 RISC-V computers to children at STEM fairs as documented violations.

OpenTTD is no longer free on Steam. It's now bundled with Atari's re-release of Transport Tycoon Deluxe for $9.99. Existing Steam owners keep their copy, but new players must buy the bundle. The game itself remains free to download from openttd.org.

From March 13-27, Claude users get double usage limits during off-peak hours (outside 8 AM-2 PM ET). Applies to Free, Pro, Max, and Team plans. No action required, bonus usage doesn't count against weekly limits.

bzip2 consistently beats gzip, zstd, xz, and brotli on text/code compression because it uses BWT instead of LZ77. The author argues bzip's deterministic nature and lack of heuristics makes it easier to implement and optimize, with decoders fitting in ~1.5KB of Lua.

A minimalist journaling app with one constraint: you can only write for today. Yesterday's entries are read-only. E2E encrypted with AES-GCM, stores locally in IndexedDB with optional Supabase sync. PWA-capable, built with React/TypeScript/Zustand.

MIT Sloan researchers warn that US statistical agencies are breaking down from three directions: survey response rates have collapsed (people stopped answering phones), budgets are being slashed (USDA cut its food insecurity survey), and political interference is undermining credibility. The consequences: policymakers misjudge the economy, investors lose confidence, and the public disengages entirely. Private data can help but can't replace official statistics due to coverage gaps and lack of transparency.

Jazzband, the 10-year-old Python open source collective that maintained 84 projects with 93K+ GitHub stars including django-debug-toolbar and pip-tools, is shutting down. The killing blow: GitHub's 'slopocalypse' of AI-generated spam PRs made the open membership model untenable. But the rot ran deeper - it was always a one-person operation despite attempts to add more roadies, and the founder (now PSF chair) couldn't sustain it alongside other responsibilities. Django Commons has already picked up several projects.

BBC profiles Philippines-based workers who get paid under $2/hour to impersonate OnlyFans creators in chats, pushing sales of photos and videos to subscribers who think they're talking to the actual model. The woman interviewed describes it as 'icky' and 'heartbreaking' - she knows she's essentially scamming lonely people who seem 'really nice'. OnlyFans made $7.2B in 2024 revenue while these workers earn less than local entry-level jobs. Legal challenges against the practice have all failed so far.

Comprehensive benchmark of every way to make Python fast: from CPython upgrades (1.4x free) to PyPy (13x), Mypyc (14x), NumPy (520x), Numba (135x), Cython (124x but with hidden landmines), and Rust via PyO3 (154x). The real revelation: JAX hit 1,633x on matrix operations. Author shows Python isn't slow because of the GIL - it's slow because dynamic typing requires runtime dispatch on every operation. Each rung of the ladder removes more dispatch overhead at the cost of more effort.

Fyodor's comprehensive catalog of every movie featuring Nmap, from Matrix Reloaded (where Trinity uses real Nmap and an actual SSH1 exploit) to Ocean's 8 (Rihanna as Nine Ball), Snowden, Die Hard 4, Bourne Ultimatum, and even soft-core pornography (HaXXXor). The page is delightfully self-aware: 'For reasons unknown, Hollywood has decided that Nmap is THE tool to show whenever hacking scenes are needed. At least it is a lot more realistic than silly 3D animation approach.'

Montana Governor Gianforte signed SB 212, the Montana Right to Compute Act, making it the first state to legally protect citizens' rights to own and use computational resources including AI. The law limits government regulation and requires AI-controlled critical infrastructure to have shutdown mechanisms and annual risk reviews.

bunnie explains his new Baochip-1x: a RISC-V microcontroller with an MMU, fabricated at 22nm. The MMU enables secure loadable apps via virtual memory, something ARM deliberately kept out of low-cost M-series chips to protect A-series margins. He 'hitchhiked' on a Crossbar Inc chip design, adding his own CPU cores to unused silicon space.

An IRS engineer explains why they used XML for the Tax Withholding Estimator's 'Fact Graph' DSL. Tax logic needs declarative representation for auditability, JSON lacks expressiveness for nested DSLs, and XML gives you a universal parser plus mature tooling for free. The lesson: XML is the cheapest DSL you can build when you need cross-platform declarative specs.