Hacker News front page as a site

# The Front Page Source: [https://thefrontpage.dev/](https://thefrontpage.dev/)  Hacker News [1h, 42p, 7 comments](https://news.ycombinator.com/item?id=48272984) ## [Using AI to write better code more slowly](https://nolanlawson.com/2026/05/25/using-ai-to-write-better-code-more-slowly/)  In his*Read the Tea Leaves*post,**Nolan Lawson**argues that**AI**should be used deliberately and*slower*to produce**high‑quality**code rather than as a slop‑cannon for rapid, low‑effort outputs**vibe coding**\. He describes a workflow where multiple LLM agents—such as Claude, Codex, and Cursor Bugbot—scan a pull request for bugs, after which the developer validates, documents, and refines the design, emphasizing thoroughness over speed\. This method, he says, uncovers hidden bugs, improves overall code health, and deepens understanding of the codebase, contrasting with typical expectations of speedy but superficial development\. [4h, 54p, 27 comments](https://news.ycombinator.com/item?id=48225338) ## [Show HN: Write your BPF programs in Go, not C](https://github.com/boratanrikulu/gobee)  **gobee**is an eBPF transpiler by*Bora Tanrikulu*that lets developers write BPF programs in a strict Go subset rather than C, transpiling them to BPF C and generating typed*cilium/ebpf*bindings for the userspace side\. The tool supports eight program types including XDP, tracepoints, kprobes, and LSM, 19 map types, and around 200 BPF helpers auto\-generated from libbpf v1\.5\.0 headers\. Key features include verifier error mapping back to Go source positions, kernel\-version gating via**bpfvet**, CO\-RE auto\-detection through clang, sourcemap sidecars, and cross\-architecture support for Linux arm64 and amd64\. Instead of targeting LLVM directly, gobee reuses clang's mature BPF backend to provide BTF and verifier\-friendly codegen, positioning itself as a way to unify kernel\-side and userspace\-side code in a single Go module while relying on existing tooling like cilium/ebpf and clang\. [14h, 1312p, 732 comments](https://news.ycombinator.com/item?id=48265206) ## [Magnifica Humanitas](https://www.vatican.va/content/leo-xiv/en/encyclicals/documents/20260515-magnifica-humanitas.html) ***Magnifica Humanitas***is Pope Leo XIV’s 2026 encyclical on protecting the dignity of every human being amid the rapid rise of artificial intelligence\. It calls the Church to a “dynamic, Gospel‑faithful” approach that updates the Social Doctrine—rooted in the image of the Triune God, the equal dignity of all persons, and the principles of the common good, universal destination of goods, subsidiarity, solidarity and social justice—to address today’s “new things\.” The document warns that AI, while a valuable tool, can amplify technocratic power, deepen inequalities, and obscure truth, urging transparent, accountable governance, responsibility at every stage of design and use, and the protection of vulnerable groups from new forms of digital slavery and exploitation\. It stresses the need for truthful public communication, an education alliance for the digital age, dignified work, family stability, and the safeguarding of freedom against digital dependence and surveillance\. By contrasting the biblical images of Babel \(hubris, domination\) and Nehemiah’s rebuilt Jerusalem \(shared responsibility, communion\), the Pope advocates a “civilisation of love” built on dialogue, diplomacy, and a renewed culture of peace, urging all—governments, corporations, churches, families and individuals—to collaborate as “builders” of a common‑good future where technology serves, rather than overwhelms, genuine human flourishing\. [2h, 8p, 0 comments](https://news.ycombinator.com/item?id=48272715) ## [How Shamir's Secret Sharing Works](https://ente.com/blog/how-shamirs-secret-sharing-works/) The post explains**Shamir’s Secret Sharing**scheme, introduced by Adi Shamir in 1979, which splits a secret into multiple pieces so that only a defined threshold of pieces can reconstruct the secret while any smaller number reveals nothing\. It uses polynomial mathematics: a secret is hidden as the constant term of a polynomial, with random coefficients generating shares as points on the curve; two points \(a line\) recover a 2\-of\-n secret, three points \(a parabola\) a 3\-of\-n, and so on\. The article notes real implementations work over finite fields and describes how Ente’s Legacy Kit incorporates this method to enable secure, revocable recovery without exposing a permanent key\. [2h, 15p, 2 comments](https://news.ycombinator.com/item?id=48272393) ## [Show HN: OpenBrief – Local\-first video downloader/summarizer](https://github.com/tantara/openbrief)  **OpenBrief**is an open\-source desktop application that converts videos and audio files into concise,*grounded*summaries with timestamped insights\. It allows users to import media locally or via URLs, extract transcripts using speech\-to\-text models like Whisper or local solutions, and generate markdown\-style briefings\. Features include chatting directly with media context, text\-to\-speech summaries, and organizing playlists\. Built with Tauri and React, it runs locally without requiring external dependencies, emphasizing privacy and open\-source accessibility\. Future plans include enhanced audio support, cross\-platform library search, and expansion to additional document formats\. [16h, 204p, 66 comments](https://news.ycombinator.com/item?id=48231247) ## [Gnutella: A Protocol Outliving the World That Created It](https://rickcarlino.com/notes/p2p/gnutella-explanation.html) **Gnutella**, a decentralized peer\-to\-peer file\-sharing protocol popularized in the 2000s through clients like LimeWire, is the focus of this nostalgic analysis\. Developed as an internal demo that leaked publicly after AOL canceled it, Gnutella thrived for over a decade by solving real\-world problems: enabling file sharing without central servers, circumventing the music industry's resistance to digital distribution, and operating effectively despite dial\-up internet limitations\. The protocol used a gossip\-based mesh network for peer discovery and HTTP for file transfers, with core message types \(PING/PONG, QUERY/QUERYHIT, PUSH\) supporting search, connectivity, and firewall traversal\. While it scaled to millions of users and adapted via extensions like GGEP and HUGE, its decline stemmed not from technical failure but from the disappearance of its original context—modern platforms and streaming services replaced the need for decentralized file sharing\. Despite this, Gnutella persists in a "long tail" state, maintained by enthusiasts and clients like GTK\-Gnutella, proving its resilience and enduring design\. [15h, 140p, 59 comments](https://news.ycombinator.com/item?id=48265056) ## [IBM Spins Off the First Pure\-Play Quantum Chip Foundry](https://futurumgroup.com/insights/2-billion-chips-act-investment-in-quantum-bets-on-ibms-300mm-superconducting-silicon/)  The U\.S\. Department of Commerce and IBM announced a $2 billion initiative to establish Anderon, America's first pure\-play quantum chip foundry in Albany, New York\. Funded by $1 billion from the CHIPS Act and $1 billion from IBM, Anderon will operate a 300mm superconducting silicon wafer fabrication facility, positioning the U\.S\. at the forefront of quantum manufacturing\. This move prioritizes superconducting silicon technology, leveraging established semiconductor processes for scalable, rapid iteration—a strategic advantage over smaller 200mm alternatives\. The funding structure creates a two\-tier quantum ecosystem, concentrating infrastructure capital on fabrication\-ready modalities while offering smaller equity stakes to other approaches\. IBM's focus extends beyond qubit production, including four ASICs aimed at scalable quantum control systems, critical for fault\-tolerant computing by 2029\. The package risks favoring one modality but aligns with industry consolidation needs, targeting $3 million in sales by the mid\-2030s\. Other funded companies include GlobalFoundries, D\-Wave, and Rigetti, each receiving smaller portions for R&D\. [4h, 7p, 1 comment](https://news.ycombinator.com/item?id=48271257) ## [Tidy PSU – PD\-64 C64 PSU Brings USB PD to Commodore 64](https://theoasisbbs.com/pd-64-c64-psu-brings-usb-pd-to-commodore-64/)  **Side Project's Lab**has introduced the**PD\-64**, a compact USB PD replacement power supply for the**Commodore 64**that eliminates the original bulky brick\. The classic C64 requires both 5V DC and 9V AC at 50 or 60 Hz for its internal time\-of\-day clock, traditionally demanding a large transformer\. PD\-64 draws 12V DC from a USB PD wall adapter, converts it to 5V DC via a step\-down converter, and generates 9V AC by producing a 500 kHz signal through a small planar transformer to a class D amplifier, ensuring galvanic isolation\. A rear switch selects the correct AC frequency for the user's region, and the unit includes electronic fuses, short\-circuit, under\-voltage, over\-voltage, and thermal shutdown protections\. PD\-64 delivers 5V DC at 2A and true galvanically insulated 9V AC at 1A, with schematics and 3D case files available on GitHub, though the full design remains proprietary\. [3h, 3p, 0 comments](https://news.ycombinator.com/item?id=48271942) ## [Show HN: Fungible – A local personal finance app in the terminal](https://github.com/tomfunk/fungible) **fungible**is a terminal\-based personal finance management tool that syncs bank transactions via Plaid, imports CSV files, and provides comprehensive financial tracking through keyboard\-driven navigation\. The application automatically categorizes transactions using customizable substring and regex rules, supports tagging across accounts, and offers financial insights including net worth tracking, spending trends, and retirement planning metrics \(FIRE number, Coast FIRE projections\)\. Key features include manual asset tracking, flexible spending categorization \(fixed/flexible/discretionary\), duplicate transaction detection, and integration with Claude AI through the Model Context Protocol \(MCP\) server for voice\-enabled financial queries\. Data is stored locally at ~/\.fungible/ with encrypted Plaid access tokens, and the tool is installable via Homebrew or from source with Node\.js 22\+\. [1d, 189p, 46 comments](https://news.ycombinator.com/item?id=48245916) ## [White Rabbit – sub\-nanosecond synchronization for large distributed systems](https://ohwr.org/projects/white-rabbit/)  White**Rabbit**delivers*sub‑nanosecond*synchronization and picosecond precision for large distributed systems, enabling deterministic data delivery and time‑tagging across thousands of nodes up to 10 km apart via Ethernet‑based gigabit links, supporting open‑source hardware, firmware and software from multiple vendors\. It also powers**CERN***White Rabbit*projects, currently advertising*FPGA developer*roles to work on the WR switch v4 and the evolution of the eRTM board, with recent openings announced in March 2026 and September 2024\. [3h, 7p, 0 comments](https://news.ycombinator.com/item?id=48271934) ## [Sqlit – A lazygit\-style TUI for SQL databases](https://news.ycombinator.com/item?id=48271934) **Sqlit**is a new*lazygit\-style TUI*for SQL databases that allows users to connect and query databases from the terminal without configuration files\. The tool supports an extensive range of database systems including**SQL Server, PostgreSQL, MySQL, SQLite, Snowflake, BigQuery**, and many others\. Key features include context\-aware keyboard bindings, Docker integration, a Vim\-style query editor, fuzzy filtering in results, SSH tunnels, OS keyring credential storage, autocomplete functionality, cloud CLI integration, and multiple themes\. Built with**Python and Textual**, Sqlit can be installed via pipx, uv tool, or pip\. The developer aims to create an aesthetic tool that makes database querying easy and enjoyable, focusing on doing one thing well\. [11h, 168p, 154 comments](https://news.ycombinator.com/item?id=48266422) ## [Microsoft pulls plug on plans for 244\-acre data center in Caledonia \(2025\)](https://www.tmj4.com/news/racine-county/microsoft-pulls-plug-on-plans-for-244-acre-data-center-in-caledonia-after-community-pushback)  Microsoft has**canceled**its proposed*244‑acre data center*in**Caledonia**, Wis\., after**over 2,000 residents**petitioned against the rezoning of farmland on County Line Road and State Highway 32; a Microsoft spokesperson cited community feedback, but said**Microsoft remains interested in investing**in southeast Wisconsin and is seeking a new site that aligns with local priorities, with**village trustee Nancy Pierce**and resident**Prescott Balch**expressing hope for better engagement\. [1h, 4p, 0 comments](https://news.ycombinator.com/item?id=48273162) ## [The Vatican\-Anthropic relationship that's reshaping the AI ethics debate](https://religionnews.com/2026/05/22/why-anthropic-is-helping-unveil-the-popes-new-encyclical-on-ai/)  The Vatican is deepening its relationship with leading AI firms, particularly Anthropic, as Pope Leo XIV prepares an AI ethics encyclical\. Christian and tech leaders are now engaging to shape ethical guidelines for artificial intelligence, signaling a broader influence of faith perspectives in the rapidly evolving tech industry\. [1d, 170p, 167 comments](https://news.ycombinator.com/item?id=48259861) ## [Defeating Git Rigour Fatigue with Jujutsu](https://ikesau.co/blog/defeating-git-rigour-fatigue-with-jujutsu/) The article introduces a workflow to combat "git rigour fatigue" during large feature development using the**Jujutsu**version control system\. Developers often struggle to write*Good Commits*—scoped, incremental changes like*define types, add DB functions, server CRUD*—as their work becomes tangled with temporary fixes and debugging code\. The author’s solution involves creating an initial “everything commit” containing all changes, then using**jj squash \-i**and**jj new \-B**to reorganize the code into logically ordered commits post\-development\. This method avoids the complexity of maintaining strict commit discipline in real\-time, leverages Jujutsu’s flexibility over alternatives like**jj split**, and allows iterative refinement without merge conflicts\. While it sacrifices intermediate commit stability \(e\.g\., all commits may not compile\), it streamlines the review process and accommodates improvisation during development\. The approach is contrasted with traditional methods and highlighted as advantageous for teams prioritizing reviewer convenience over bisect\-friendly debugging\. [1d, 157p, 38 comments](https://news.ycombinator.com/item?id=48256475) ## [Mastering Dyalog APL](https://mastering.dyalog.com/README.html) The online*MasteringDyalog APL*is a**continuously updated**rework of the 2009 edition, released under a Creative Commons Attribution‑NonCommercial‑ShareAlike license and featuring the original material alongside modernized explanations and new chapters for Dyalog APL 12\.0, while being transformed into interactive**Jupyter notebooks**for an*experiment‑friendly*learning experience and paired with a static site and forthcoming printed version to serve diverse reader preferences\. [4h, 9p, 0 comments](https://news.ycombinator.com/item?id=48271451) ## [Slimcc: C23 compiler with C2y/GNU extensions for x86\-64 Linux/BSD, written in C9](https://github.com/fuhsnn/slimcc/tree/main)  The GitHub project slimcc offers a C compiler targeting x86\-64 Linux and BSD, built with C99 and extensions from C2y/GNU\. It focuses on improved cross\-platform compatibility, portability, and modern standards, including C23 support, and includes tools for code improvements and optimizations\. Its recent development emphasizes secure and efficient compilation, making it suitable for various programming projects\. [4h, 15p, 1 comment](https://news.ycombinator.com/item?id=48271001) ## [Stablecoins Are Private Money\. That's Why They're a Risk to the Economy](https://www.wsj.com/finance/currencies/stablecoins-are-private-money-thats-why-theyre-a-risk-to-the-economy-d3498171) The webpage from wsj\.com appears to require JavaScript to function properly after enabling it and disabling ad blockers\. It contains the main content about the latest news updates\. Key points highlight developments in current events without further detail here\. [1d, 181p, 71 comments](https://news.ycombinator.com/item?id=48231547) ## [Build Adafruit projects right from Firefox](https://www.firefox.com/en-US/landing/adafruit/)  **Firefox**enables users to build*Adafruit*hardware projects directly through its browser using**Web Serial**technology, allowing direct communication with compatible devices without additional tools\. This integration, recommended by*Adafruit*for programming convenience, streamlines the process from concept to execution by eliminating complex setup steps\. Developed by**Mozilla**, the browser emphasizes open\-source principles and provides a hassle\-free experience for makers, requiring only a device connection and web\-based coding\. The platform underscores its commitment to the open web, offering a seamless path for hardware enthusiasts to prototype and control projects efficiently\. [5h, 20p, 6 comments](https://news.ycombinator.com/item?id=48270716) ## [Hawaii just found a way around Citizens United\. Other states are following](https://www.ms.now/ali-velshi/watch/hawaii-just-found-a-way-around-citizens-united-other-states-are-following-2501173315542)  Hawaii has developed a novel strategy to circumvent the Citizens United campaign finance ruling, with lawmakers and advocates crafting legislation that would require greater disclosure of dark money political spending\. The effort, which aims to increase transparency by mandating that nonprofits reveal their top donors for political ads, is gaining traction as other states consider similar measures to push back against the 2010 Supreme Court decision that allowed unlimited corporate and union spending in elections\. [10h, 94p, 92 comments](https://news.ycombinator.com/item?id=48266895) ## [2026 HIPAA Security Rule Update](https://medcurity.com/hipaa-security-rule-2026-update/)  The**2026 HIPAA Security Rule**, finalized January 6, 2025 and taking full effect by May 2026, imposes sweeping cybersecurity requirements on healthcare organizations, including**mandatory annual security risk assessments**,**universal encryption of ePHI**at rest and in transit \(removing the previous "addressable" designation\),**multi\-factor authentication**across all systems accessing patient data,**regular vulnerability scanning and penetration testing**, comprehensive**technology asset inventories and network mapping**,**72\-hour incident reporting**, and**annual business associate agreement verification**\. The Office for Civil Rights has already begun citing the Final Rule in resolution agreements, with the January 2026 OCR Cybersecurity Newsletter emphasizing that risk analysis must evolve into demonstrated remediation and that unpatched software exposure is now a specific enforcement target\. Industry groups including CHIME warned that the rule's estimated*$9 billion year\-one cost*could strain small and rural providers, but organizations of all sizes are urged to begin gap analyses, deploy encryption and MFA, and strengthen documentation immediately to meet compliance deadlines\. [1d, 508p, 191 comments](https://news.ycombinator.com/item?id=48253386) ## [Microsoft open\-sources “the earliest DOS source code discovered to date”](https://arstechnica.com/gadgets/2026/04/microsoft-open-sources-the-earliest-dos-source-code-discovered-to-date/)  **Microsoft**has open\-sourced "the earliest*DOS*source code discovered to date," including the 86\-DOS 1\.00 kernel and precursors to MS\-DOS\. The code, predating the MS\-DOS branding, was recovered from decades\-old printed documentation by preservationists who transcribed it manually due to poor OCR quality\. This release sheds light on the origins of MS\-DOS, which Microsoft licensed from programmer Tim Paterson and later developed into a foundational PC OS\. The move aligns with Microsoft's history of sharing early software, including*Zork*,*3D Movie Maker*, and other vintage projects\. The effort highlights the cultural and technical significance of early computing history\. [5h, 142p, 73 comments](https://news.ycombinator.com/item?id=48270770) ## [Norway's 2 petabytes of Huawei flash storage and LLM training](https://www.blocksandfiles.com/flash/2026/05/22/norways-2-petabytes-of-huawei-flash-storage-and-llm-training/5244910)  At the**Huawei ID Forum 2026 in Paris**,*Marius Husnes*, Head of IT Platform at the**Norwegian National Library**, explained that the library is building a**sovereign Norwegian‑language LLM**using**2 PB of Huawei OceanStor Dorado flash storage**for its AI training pipeline, a step vital because no commercial provider offers a local model; the library’s massive digital collection, amassed since 2005, totals around 20 PB of unique data \(≈60 PB with preservation copies\) and feeds an in‑house pipeline on an Nvidia DGX H200 and 384‑core CPU cluster before the data is sent to the national supercomputer**Sigma2 Olivia**\(an HPE Cray EX with 448 GPUs\) for training, while Husnes highlighted the difficulty of moving petabyte‑scale archives with low‑latency, high‑throughput storage and the lack of standard evaluation tools for such a**Norwegian LLM**\. [1h, 40p, 3 comments](https://news.ycombinator.com/item?id=48273169) ## [CVE\-2026\-28952: Apple macOS 26\.5 Kernel Vuln found by Claude](https://support.apple.com/en-us/127115) Apple's**macOS Tahoe 26\.5**security update, released May 11, 2026, addresses multiple vulnerabilities across various system components\. The update fixes critical issues including**buffer overflows**in APFS and HFS that could cause system termination,*sandbox escape*vulnerabilities in App Intents and GPU Drivers, and memory corruption problems in WebKit and ImageIO\. Other significant fixes address privilege escalation flaws in Kernel and CUPS, with researchers from organizations like**Google Threat Analysis Group**and*TrendAI Zero Day Initiative*discovering many of these vulnerabilities\. The security patches include improved bounds checking, enhanced input validation, better memory management, and additional restrictions to protect against potential attacks\. [4h, 93p, 38 comments](https://news.ycombinator.com/item?id=48271127) ## [Hacker News front page as a site](https://thefrontpage.dev/)  The Front Page highlights a diverse set of tech and science stories, including**Apple’s PICO \(Perceptual Image Codec\)**—a learned image compression system delivering up to three‑fold bitrate reductions over traditional codecs while running on an iPhone 17 Pro Max;**SpaceX’s successful Starship V3 sub‑orbital test**featuring hot‑staging and a payload of prototype Starlink satellites despite an engine failure;**DeepSeek’s permanent discount on its V4 Pro model**with token‑based pricing and upcoming model renaming;**Microsoft’s open‑source release of the earliest DOS source code**, shedding light on the origins of MS‑DOS;**Italy’s €1\.39 billion contract for six Airbus A330 MRTT tankers**, shifting its air‑refueling fleet from Boeing KC‑46 to a European platform; and a groundbreaking archaeological find of a**1,000‑year‑old dingo**in Australia that shows evidence of injury, care and ritual burial by Indigenous peoples\. Additional notable items include a study on “constraint decay” in LLM agents, a free, open‑source web‑based multitrack audio editor \(*Audiomass*\), and a new Bayesian Gaussian‑process model for handling uncertain sampling coordinates in environmental data\. [3h, 21p, 1 comment](https://news.ycombinator.com/item?id=48271632) ## [Riscrithm – An intuitive RISC\-V assembler and optimizer coded in Go](https://github.com/ghetea-patrick/riscrithm)  **Riscrithm**is a lightweight macro‑assembly language that compiles directly to clean, human‑readable*RISC‑V*assembly, aiming to combine high‑level readability with low‑level hardware control\. The tool provides a simple CLI \(\`riscrithm source\_file target\_file \[\-o\|\-\-optimize\]\`\) and requires each file to declare a header and entrypoint, with macros defined via \`define\`\. Code is indentation‑scoped: unindented labels mark blocks, while indented lines contain instructions; raw assembly can be inserted using \`\!\!\` prefixes\. The language offers explicit system calls, arithmetic, bitwise, stack/heap memory ops, and control flow via \`@\` jumps and ternary‑style \`if … else\` conditionals, plus shortcuts like \`^^\` for zeroing registers and triple‑XOR swaps\. Its two‑pass compiler sanitizes input, expands macros, and optionally optimizes \(dead‑assignment elimination, identity‑math removal, strength‑reduction to shifts\)\. Output assembly is pretty‑printed for direct use\. Future v1\.1\.0 plans include module imports, better error diagnostics, and guard‑clause support\. [9h, 50p, 176 comments](https://news.ycombinator.com/item?id=48267829) ## [Launch HN: Chert \(YC P26\) – Twilio for iMessage](https://www.trychert.com/)  **Chert**provides iMessage infrastructure for businesses to reach people at scale through a single API, enabling the deployment of AI on iMessage while maintaining quality and trust\. The service offers real iMessage threads with blue bubbles, verified senders, end\-to\-end encryption, tapbacks, group chats, and SMS fallback when recipients are off\-platform\.**Chert**distinguishes itself from traditional SMS services by delivering peer\-to\-peer messaging in the trusted blue\-bubble interface with better deliverability and no spam flags, using rotating sending identities and volume capping\. The platform is used by GTM teams for onboarding, customer support, conversational AI, and cold outbound messaging, with integrations to CRM and sales tools via REST API and webhooks\. [8h, 33p, 6 comments](https://news.ycombinator.com/item?id=48221122) ## [CPPL: A Circuit Prompt Programming Language](https://arxiv.org/abs/2605.17892)  The paper introducesCPPL, a compiler\-mediated framework for LLM\-assisted hardware design, addressing challenges in generating verified RTL from LLMs\. CPPL combines a Python frontend for defining module interfaces with a JSON\-based IR that exposes compiler\-visible structure, enabling static validation of generated code\. Unlike direct RTL or CIRCT IR generation, CPPL ensures legality, hierarchy, and port binding checks, then lowers results to CIRCT for synthesizable Verilog\. Results demonstrate improved functional correctness and optimized post\-synthesis AIG node counts, suggesting compiler mediation enhances reliability and optimization potential in LLM\-driven hardware workflows\. [6h, 195p, 76 comments](https://news.ycombinator.com/item?id=48270111) ## [The bootstrapper's EU stack for under €10 per month](https://eualternative.eu/guides/bootstrapper-free-tier-eu-stack/)  **HetznerCloud's**€7/month VPS plan serves as the core of a cost\-effective EU stack for startups, supporting*Django*,*Rails*, databases, and backend services\. Complementary free\-tier providers include**Ahasend**\(transactional email\),**Simple Analytics**\(privacy\-focused tracking\), and**Hanko**\(passkey\-based authentication\)\.**Mollie**handles payments per\-transaction, avoiding monthly fees\. This stack emphasizes minimal upfront cost, scaling smoothly as usage grows, prioritizing EU sovereignty and avoiding US\-dependent services\. [3h, 5p, 0 comments](https://news.ycombinator.com/item?id=48271931) ## [Reticulum: Source\-privacy claim vs\. routing metadata](https://codeberg.org/MarSik/reticulum-audit/src/branch/main/reticulum-source-privacy-flaw.md) The automated system employs the cookie monster to block bots, requiring JavaScript activation for immediate reroutalization, ensuring clean web navigation\. [1h, 8p, 1 comment](https://news.ycombinator.com/item?id=48273167) ## [Google is its own worst enemy](https://disconnect.blog/google-is-its-own-worst-enemy/)  *Paris Marx*’s May 20, 2026 article argues that**Google**is sabotaging its own power by aggressively embedding**Gemini**into Search, turning the service from a web directory into a self‑contained AI portal that favors its own ads and inaccurate Overviews, thereby draining publisher traffic, polluting the information ecosystem with hallucinations, and risking user backlash as people seek alternatives\. [13h, 47p, 17 comments](https://news.ycombinator.com/item?id=48219373) ## [The physicists who convinced Fermilab to send Brazil's emails](https://buttondown.com/blog/brazil-fermilab-email) Brazil's delayed internet integration through grassroots academic efforts, technical challenges, and strategic network development, honoring Achilles' heel connections yet pioneering foundational steps for national connectivity\. [1h, 8p, 0 comments](https://news.ycombinator.com/item?id=48272938) ## [Cox Media fined after bragging it spied on users through their phones](https://www.theverge.com/policy/937027/cox-media-marketing-ai-powered-phone-spying-ads-ftc-fine)  Cox Media and two marketing firms,**MindSift**and**1010 Digital Works**, have been fined a total of**$930,000**by the Federal Trade Commission for falsely claiming they could secretly listen to users through phones and smart devices to target ads\. The companies had promoted a system called "Voice Data" that allegedly turned "every casual conversation between two consumers into a tool for you to target, retarget, and retain customers," similar to a Black Mirror episode\. However, the FTC investigation revealed the service did not actually listen to conversations or use voice data at all; instead, it consisted of reselling email lists obtained from other data brokers at a significant markup\. The companies also falsely claimed consumers had opted into this surveillance system\. [1d, 174p, 140 comments](https://news.ycombinator.com/item?id=48259192) ## [Building Pi with Pi](https://lucumr.pocoo.org/2026/5/24/pi-oss/)  The article discusses challenges in using building Pi with Pi as discussed by Armin Ronacher, focusing on the increasing volume and quality issues in open\-source projects\. It highlights concerns about vague or faulty issue tracking, common complaints about shallow or inaccurate diagnoses, and the complexity of managing repetitive or poorly formed reports\. The author emphasizes the need for better community oversight and clearer expectations in code and issue handling to improve reliability\. [1d, 456p, 458 comments](https://news.ycombinator.com/item?id=48259808) ## [Migrating from Go to Rust](https://corrode.dev/learn/migration-guides/go-to-rust/) The article explores the considerations and challenges of migrating from Go to Rust, focusing on backend systems\. It highlights Go's strengths, such as simplicity, fast development, and a robust concurrency model with goroutines, contrasted with Rust's compiler\-enforced safety, ownership model \(via the borrow checker\), and zero\-cost abstractions\. Key differences include error handling \(Go's explicit errors vs\. Rust's \`Result\` types\), null safety \(Go's \`nil\` vs\. Rust's \`Option\`\), and runtime guarantees \(Go's garbage collection vs\. Rust's stack\-allocated lifetimes\)\. Rust offers stronger guarantees against data races, memory leaks, and unhandled errors but introduces a steeper learning curve, longer compile times, and a need to adapt to an explicit borrow checker\. Migration strategies suggest starting with isolated hot paths or background services, leveraging Rust's interoperability via HTTP/gRPC or C bindings, and retaining Go for CLIs, Kubernetes tooling, and glue services\. Tradeoffs emphasize Rust's compile\-time safety and performance benefits against Go's productivity and immediate tooling\. The conclusion balances these factors, advising that foundational, high\-reliability services benefit most from Rust, while Go remains optimal for rapid iteration and less safety\-critical components\. [1d, 349p, 211 comments](https://news.ycombinator.com/item?id=48254309) ## [Why is Vivado 2026\.1 dropping Linux support for free tier?](https://adaptivesupport.amd.com/s/question/0D5Pd00001YQLdMKAX/why-is-vivado-20261-dropping-linux-support-for-free-tier-?language=en_US) The question on the Xilinx/AMD forum asks why Vivado 2026\.1 has dropped Linux support from the free Basic tier, a move that has sparked criticism from users who feel the change is a cash‑grab\. Community members express frustration that Linux will only remain supported in paid tiers, while Windows support continues in the Basic tier\. AMD’s representative Anatoli Curran explains that Linux is restricted to higher tiers because the Basic tier is intended for simple, entry‑level projects, whereas advanced, production‑ready workflows require a paid license\. He notes that older Vivado versions remain available for free and that students can still obtain a 60‑day full license\. The discussion highlights the tension between cost, platform support, and user expectations\. [2h, 6p, 1 comment](https://news.ycombinator.com/item?id=48272763) ## [What Is a Direct Attach Copper \(DAC\) Cable](https://www.servethehome.com/what-is-a-direct-attach-copper-dac-cable/)  Direct Attach Copper \(DAC\) cables are pre‑terminated copper twinax links that connect network devices over short distances—typically up to 5 m for high‑speed 40 GbE and 100 GbE connections—without the need for optical transceivers\. Each end of the cable carries a QSFP\+, QSFP28, or equivalent module, and the cable’s length and shielding are fixed to preserve signal integrity at the given speed\. DACs remain popular in data‑center racks because they are inexpensive, consume little power, and are highly reliable, though they lack the flexibility and longer reach of fiber\. Often, higher‑density connectors such as QSFP\+ can be “broken out” to multiple SFP\+ or SFP28 ports, allowing a single DAC to support several lower‑speed links\. While passive DACs use minimal power, active versions can extend reach slightly at the cost of more power and thicker cabling\. As network speeds climb beyond 100 GbE, the effective distance of DACs drops to a few meters, and most rack‑to‑rack or longer connections migrate to optical links\. Vendors typically lock optical transceivers to proprietary modules, but DACs are less constrained, though device compatibility still matters\. Overall, DACs remain a cost‑effective solution for intra‑rack connectivity, striking a balance between performance, simplicity, and deployment ease\. [23h, 118p, 115 comments](https://news.ycombinator.com/item?id=48228608) ## [C constructs that still don't work in C\+\+](https://lospino.so/blog/c-constructs-that-still-dont-work-in-cpp/)  In a 2026 update to a 2019 article about C constructs that don't work in C\+\+, changes in C\+\+20 and C23 have shifted the compatibility landscape\. C\+\+20 introduced a version of designated initializers, repaired some object\-lifetime cases around malloc, while C23 changed the empty\-parameter\-list rule\. The article emphasizes that when discussing C/C\+\+ compatibility, it's crucial to specify the language mode \(e\.g\., C17, C23, C\+\+17, C\+\+20, or C\+\+23\)\. The compatibility matrix has changed, with some constructs like void\* to object pointer conversion and malloc object lifetime having evolved\. [1d, 126p, 41 comments](https://news.ycombinator.com/item?id=48256565) ## [Perceptual Image Codec: What Matters in Practical Learned Image Compression](https://apple.github.io/ml-pico/) Apple introduces**PICO \(Perceptual Image Codec\)**, the first learned image compression system that is both*practical*and directly optimized for the human visual system, achieving**2\.3‑3× bitrate savings**over traditional codecs like AV1, AV2, VVC, ECM and JPEG‑AI and**20‑40% savings**compared to the best existing learned codecs, while encoding 12 MP images on an iPhone 17 Pro Max in**≈230 ms**and decoding in**≈150 ms**, outperforming most top ML‑based codecs on a V100 GPU, and providing cross‑platform robustness guarantees\. [1d, 146p, 29 comments](https://news.ycombinator.com/item?id=48254236) ## [The C64 Dead Test Font](https://www.masswerk.at/nowgobang/2026/c64-dead-test-font)  The C64 “Dead Test” diagnostic cartridge \(Rev\. 718220\) runs in Ultimax mode, embedding its own 58‑character font in ROM at $EAD8 to bypass the computer’s built‑in ROMs and display a distinctive boxy typeface inspired by the MICR E‑13B set, complete with an Easter‑egg “transit” symbol at screen code $0x21 that nods to bank‑routing delimiters; the font implements uppercase letters, digits, a few punctuation marks and border glyphs, and the author has released compatible Dead Test font ROMs for the C64, VIC‑20 and PET systems for general use\. [1d, 67p, 33 comments](https://news.ycombinator.com/item?id=48226697) ## [Getting an old Computer online with Android Ethernet tethering](https://82mhz.net/posts/2026/05/getting-an-old-computer-online-with-android-ethernet-tethering/) To connectolder Windows 9x/XP\-era computers lacking modern Wi\-Fi or Ethernet to the internet, an Android phone can tether via a USB\-C to Ethernet adapter\. By enabling Ethernet tethering on the phone, it bridges its Wi\-Fi signal through the adapter to the old computer, assigning an IP address via DHCP\. This method works for any device with an Ethernet port, though a shorter cable may be needed, and iOS compatibility is unconfirmed\. [7h, 252p, 40 comments](https://news.ycombinator.com/item?id=48269580) ## [Exit IP VPN servers mitigation rollout](https://mullvad.net/en/help/exit-ip-vpn-servers-mitigation-rollout)  The article discusses**Mullvad's solutions**and emphasizes*privacy critical*, highlighting**technical approaches**to secure*data integrity*\. [2h, 174p, 36 comments](https://news.ycombinator.com/item?id=48272354) ## [Microsoft Copilot Cowork Exfiltrates Files](https://www.promptarmor.com/resources/microsoft-copilot-cowork-exfiltrates-files)  The article highlights that Microsoft Copilot Cowork is vulnerable to file exfiltration through indirect prompt injection attacks\. Attackers can exploit processes that permit agents to operate and access sensitive data via Teams, emails, and shared platforms without immediate user approval\. This poses a significant risk when users upload files or interact with compromised content, potentially enabling theft of personally identifiable and financial information\. The key issue lies in the system's design granting broad permissions, which, combined with persistent attack vectors, expands the attack surface\. Mitigation emphasizes limiting access to download links and tightening permissions to prevent unauthorized data extraction\. [8h, 110p, 47 comments](https://news.ycombinator.com/item?id=48268609) ## [Toshifumi Suzuki, founder of Seven\-Eleven Japan, has died](https://www.referenceforbusiness.com/biography/S-Z/Suzuki-Toshifumi-1932.html) **Toshifumi Suzuki**, born*1932*in*Nagano*, rose from a publishing sales job to become**chairman and chief executive officer**of**Ito‑Yokado Group**and its subsidiary**Seven‑Eleven Japan**, introducing franchising in*1974*and expanding the convenience‑store chain to over**10,000**outlets, many operating 24 hours a day, while implementing an integrated data system that linked sales, inventory and supply‑chain information in real time; he rescued the U\.S\.**7‑Eleven**in*1991*by applying Japan’s technology‑driven model, promoted a horizontal management structure with regular communication among managers and franchisees, and later assumed elder‑statesman roles, including vice‑chairman of the**Keidanren**and recognition as one of Japan’s*fifth most respected business leaders*\(Nikkei, 2004\)\. [4h, 96p, 20 comments](https://news.ycombinator.com/item?id=48271327) ## [Yoti age checks share facial photos and device fingerprints with third parties](https://techxplore.com/news/2026-05-online-age-pointless-privacy.html)  Digital age verification systems, such as Yoti, which serves 60% of websites requiring age checks, collect and share highly sensitive personal data—including facial images and device fingerprints—with third parties like credit card companies and data brokers, according to a study by the Georgia Institute of Technology and UC Irvine\. The research, presented at IEEE SP 2026, found that most websites subject to state\-mandated age verification laws do not enforce the policies, and when they do, users’ data is broadly transmitted, undermining privacy promises\. This practice risks user tracking and could fragment internet access by state, as varying regulations may restrict information flow based on geography\. The study critiques the analogy of age verification acting like a bartender checking IDs, arguing instead that it mirrors a bartender sharing personal data widely, creating new privacy threats and contradicting legal justifications for such laws in 25 U\.S\. states\. [10h, 262p, 69 comments](https://news.ycombinator.com/item?id=48266906) ## [Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks](https://krebsonsecurity.com/2026/05/netherlands-seizes-800-servers-arrests-2-for-aiding-cyberattacks/)  Dutch authorities**arrested***Andrey Nesterenko*and*Youssef Zinad*, co‑owners of**MIRhosting**and**WorkTitans BV**, after seizing**800 servers**and other equipment in raids on Enschede, Almere, Dronten and Schiphol‑Rijk, accusing them of violating EU sanctions by providing infrastructure that facilitated Russian‑linked cyber‑attacks, DDoS campaigns and disinformation operations across the EU; the case stems from a 2025 investigation into**Stark Industries Solutions**, a hosting provider previously sanctioned by the EU for aiding Russia’s hybrid warfare, whose network assets were transferred to WorkTitans after the sanctions, and the arrests follow earlier sanctions of the Moldovan brothers Ivan and Yuri Neculiti and their firm PQHosting\. [5h, 92p, 82 comments](https://news.ycombinator.com/item?id=48270812) ## [Japan's New Hypersonic Engine Could Make 2\-Hour Flights to the US a Reality](https://www.bgr.com/2178211/japan-hypersonic-engine-ramjet-2-hour-flights-to-us/)  Japan’s**JAXA**together with**Waseda University**, the**University of Tokyo**and**Keio University**completed a successful ground‑combustion test of a**Mach‑5***ramjet*at the**Kakuda Space Center**, validating heat‑shielding, control surfaces and engine performance under conditions simulating 25 km altitude and five times the speed of sound, a step toward commercial hypersonic passenger service by the**2040s**that could reduce the**Tokyo‑Los Angeles**flight from roughly 10 hours to about 2 hours\. [10h, 36p, 30 comments](https://news.ycombinator.com/item?id=48218210) ## [He Lost It at the Movies](https://www.theideasletter.org/essay/he-lost-it-at-the-movies/)  **Leo Robson**examines the career and critical method of film reviewer**A\.S\. Hamrah**, who gained prominence in the late 2000s with idiosyncratic, capsule\-style reviews for*n\+1*that rejected conventional analysis in favor of comic, confrontational negations\. Hamrah, whose work is collected in*The Earth Dies Streaming*and*Algorithm of the Night*, positions himself as a defiant defender of a lost era of cinephilia, influenced by**Manny Farber**and hostile to the modern**consumer\-guide approach**, streaming services, and Marvel blockbusters\. While Robson acknowledges Hamrah’s political insights and enthusiastic appreciations of directors like**Chantal Akerman**and**Stanley Kubrick**, the essay argues that his relentless negativity often undermines his judgments, leading to inaccurate portrayals of other critics, strained logic, and a tendency to present decline as the only narrative\. Robson points to Hamrah’s rare positive essay “Movie Stars in Bathtubs” as a tantalizing glimpse of what his criticism might be without the reflexive opposition\. [16h, 118p, 18 comments](https://news.ycombinator.com/item?id=48236816) ## [AI errno\(2\) values](https://www.netmeister.org/blog/ai-errno.html) A blogger has created a satirical extension to the standard system errno header file, defining 30 new error codes specifically for AI failures\. The humorous code includes constants like**EAI \(201\)**for "hallucination,"**EDAWKINS \(205\)**for "claude delusion,"**EGPT \(213\)**for "walked like an 𐦂," and**ELON \(220\)**for "megalomania exhaustion\." The complete header file, posted on May 19th, 2026, presents a tongue\-in\-cheek approach to categorizing potential AI system malfunctions with descriptive error messages that reference various AI\-related issues and cultural references\. [9h, 24p, 1 comment](https://news.ycombinator.com/item?id=48244547) ## [The analog computer museum's online library](https://www.analogmuseum.org/english/library.html) The**Analog Computer Museum**online library hosts an extensive collection of scanned manuals, brochures and technical reports for historic*analog computers*, including the**BBC Tischanalogrechner**handbook,**Comdyna 808**and**EAI**series documentation, as well as rare materials for the**DO\-80**,**RA 770**and**Dornier**systems; contributions from collectors such as**Chris Yewell**,**Dave Burraston**,**Thomas Proell**,**Patrick Binon**and**Rainer Glaschick**provide PDFs ranging from installation instructions and operator manuals to schematics and research reports, documenting the evolution of analog computation in industrial, scientific and military contexts\. [1d, 228p, 119 comments](https://news.ycombinator.com/item?id=48260117) ## [A fundamental principle of aeronautical engineering has been overturned](https://www.wired.com/story/a-fundamental-principle-of-aeronautical-engineering-has-been-overturned/)  The study challenges a long\-established principle in aeronautical engineering that smoother surfaces reduce drag, by demonstrating that introducing extremely fine, random surface roughness can significantly lower aerodynamic resistance\. Researchers at Tohoku University developed distributed micro\-roughness techniques, called DMR, which shrank the pressure resistance zone and cut drag by up to 43\.6%, highlighting a different mechanism than previous ideas focused on shark\-skin undulations or laminar flow\. This advancement could improve fuel efficiency and reduce emissions in aircraft, with potential to persist across a wider range of speeds\. [1d, 168p, 54 comments](https://news.ycombinator.com/item?id=48242546) ## [Bug 1950764: Work Around Crash on Intel Raptor Lake CPU](https://phabricator.services.mozilla.com/D301917) The revision**D301917**on the Firefox‑autoland repository implements a fix for*Bug 1950764*, adding a workaround to prevent crashes on systems with Intel Raptor Lake CPUs\. Authored by**glandium**and marked “Needs Review”, the change includes updates to Rust dependencies and build configurations, and has passed automated remote builds\. The patch is publicly visible and awaiting review from the designated reviewers\. [1d, 706p, 274 comments](https://news.ycombinator.com/item?id=48256953) ## [DeepSeek reasonix, DeepSeek native coding agent with high caching and low cost](https://esengine.github.io/DeepSeek-Reasonix/)  Reasonix is a terminal\-native AI coding agent built specifically for DeepSeek, designed to assist developers directly within their command\-line environment\. It functions as an intelligent assistant that can understand context, generate and modify code, debug, and automate repetitive programming tasks by leveraging DeepSeek's capabilities\. The tool aims to streamline developer workflows by providing AI\-powered coding support without leaving the terminal\. [1h, 4p, 0 comments](https://news.ycombinator.com/item?id=48272967) ## [Garden Grove chemical tank cools, risk of catastrophic explosion eliminated](https://ktla.com/news/orange-county/garden-grove-chemical-tank-crack-explosion-risk/) Access to this page isdenied because your browser has JavaScript disabled\.**Enable**JavaScript via the provided link, or contact*challengehelp@humansecurity\.com*for assistance\. [4h, 37p, 41 comments](https://news.ycombinator.com/item?id=48271270) ## [Ninth Circuit Panel Goes Out of Its Way to Question Section 230–DOE vs\. Meta](https://blog.ericgoldman.org/archives/2026/05/ninth-circuit-panel-goes-out-of-its-way-to-question-section-230-doe-v-meta.htm)  A Ninth Circuit panel in Doe v\. Meta went beyond the necessary ruling to voluntarily address Section 230 immunity in a case involving Rohingya genocide victims suing Facebook over its algorithmic content promotion, despite the lower court having dismissed on statute of limitations grounds alone\. The panel's unusual decision to consider Section 230 questions not raised below reflects what the author calls judicial activism, as the court applied broad Section 230 protection to Facebook's algorithmic content matching and recommendation practices\. Notably, all three panel judges expressed support for en banc review of Section 230 precedent, with Judge Berzon and Fletcher concurring that algorithms recommending content should fall outside Section 230 immunity because such activities exceed “traditional activities of publication and distribution\.†Judge Nelson separately criticized the broad application of Section 230 and suggested algorithms might constitute the platform’s own content\. The ruling reinforces existing precedent protecting algorithmic content curation while highlighting deepening circuit conflicts over Section 230’s scope in the age of AI\-driven content recommendation\. [1d, 211p, 239 comments](https://news.ycombinator.com/item?id=48255593) ## [Greg Brockman interview \[video\]](https://fs.blog/knowledge-project-podcast/greg-brockman/)  The KnowledgeProject features**Greg Brockman**reflecting on the*72 hours after Sam Altman’s ouster*, describing how a Napa off‑site forged OpenAI’s three‑step technical roadmap, why the firm moved from a pure nonprofit to a capped‑profit model, how a “Phoenix” backup company was spun up at Sam’s house, and the decisive tweet from Ilya Sutskever that altered the outcome; he then discusses the global AI race, the share of code now written by AI, why reasoning traces were abandoned, the role of compute constraints in AGI access, and the looming question of what this means for people’s jobs\. [11h, 17p, 1 comment](https://news.ycombinator.com/item?id=48266698) ## [Show HN: Volt – front end tooling for Phoenix that runs inside the BEAM](https://github.com/elixir-volt/volt)  **Volt**is an Elixir‑native frontend build tool that replaces Node\.js–based tooling such as esbuild and Tailwind CLI with Rust NIFs powered by OXC and LightningCSS\. It offers a dev server with hot‑module replacement, automatic Tailwind rebuilding in ~40 ms, browser overlay for compilation errors, and production builds in under 100 ms\. Volt supports JavaScript, TypeScript, Vue SFCs, React JSX, Svelte 5, and Solid JSX, providing features like code splitting, CSS modules, JSON imports, asset queries, static asset imports, import aliases, and import\.meta\.hot with state preservation—all without installing Node\.js\. Integration is simple through a single mix dependency; configuration is done via**config/volt\.exs**instead of separate vite\.config\.js or tailwind\.config\.js files\. Volt also supports Rust‑based formatting and linting, project‑specific lint rules written in Elixir, and extensible build plugins that can transform custom file types or invoke JS tooling\. The project is MIT‑licensed and aims to streamline frontend development directly on the BEAM\. [1d, 105p, 14 comments](https://news.ycombinator.com/item?id=48195698) ## [Using HTTP/2 Cleartext for a server in Go 1\.24](https://www.clarityboss.com/blog/go-http2-cleartext-h2c-cloud-run)  **Go 1\.24**has simplified configuring servers for unencrypted HTTP/2 \(h2c\), removing the need for non\-standard library packages\. This is particularly useful for*Cloud Run environments*that handle TLS termination but can benefit from HTTP/2 features, especially for long\-lived server\-sent event streams where HTTP/1\.1 has issues with client disconnect propagation\. The new approach is more straightforward than the previous method that required wrapping handlers with*golang\.org/x/net/http2/h2c*\. With**Go 1\.24\+**, developers can directly set protocols on*http\.Server*using*srv\.Protocols\.SetUnencryptedHTTP2\(true\)*\. The article includes testing with curl and demonstrates Terraform configuration for Cloud Run services to properly support h2c with appropriate timeouts for long\-lived connections\. [1d, 278p, 185 comments](https://news.ycombinator.com/item?id=48256912) ## [Constraint Decay: The Fragility of LLM Agents in Back End Code Generation](https://arxiv.org/abs/2605.06445)  The study by**Francesco Dente**,**Dario Satriani**and**Paolo Papotti**shows that large language model agents experience*constraint decay*, with performance dropping roughly 30 points in assertion pass rates and often falling toward zero as structural requirements become stricter, especially in convention‑heavy frameworks like FastAPI and Django versus minimal ones such as Flask, and identifies data‑layer defects—including incorrect query composition and ORM runtime violations—as the leading root causes\. [1d, 652p, 101 comments](https://news.ycombinator.com/item?id=48223997) ## [I spent 50 hours drawing a line graph](https://www.dougmacdowell.com/50-hours-to-draw-some-lines.html)  **“50 Hours to Draw Some Lines”**is Doug MacDowell’s personal project documenting his experiment in hand‑drawing data visualizations using traditional drafting tools—rulers, T‑squares, pens, and a lettering kit—rather than software\. Over 50 hours he creates a statistically accurate line graph of a coffee‑maker computer, describes the step‑by‑step workflow \(grid layout, plotting points with a circle stencil, inking, erasing, adding titles and annotations\), and lists classic reference books by Tufte, Du Bois, and Brinton\. The piece argues that manual rendering offers an artistic, mindful counterpoint to digital tools, while also providing a detailed tutorial and a curated list of essential materials\. [1d, 85p, 36 comments](https://news.ycombinator.com/item?id=48236791) ## [Noroboto: Lying Fonts and Mitigation in Rust](https://tritium.legal/blog/noroboto)  The article explains a new “**noroboto**” attack that embeds a malicious TrueType font in legal documents, swapping visible glyphs with Unicode private‑use code points so the text looks normal to humans but becomes garbled when copied or processed by AI models\. By exploiting how Word, PDF and LibreOffice allow embedded fonts, attackers can hide or replace critical clauses—e\.g\., changing “Maryland” to “Delaware”—and fool LLMs that read the document’s Unicode strings without rendering it\. The authors demonstrate proof‑of‑concept code \(noroboto\.py\) and show that current LLMs can partially overcome simple obfuscation but struggle with partial or replacement attacks\. To mitigate, they propose a Rust‑based verification step that renders each font’s ASCII glyphs, runs OCR, and compares the result to the expected characters, flagging fonts with less than perfect accuracy as suspicious\. An open‑source reference implementation and further community testing are planned\. [6h, 593p, 259 comments](https://news.ycombinator.com/item?id=48269961) ## [California moves to exempt Linux from its age\-verification law after backlash](https://www.tomshardware.com/software/linux/california-moves-to-exempt-linux-from-its-upcoming-age-verification-law-after-backlash-over-forcing-operating-systems-to-collect-users-ages-amendment-proposed-by-the-same-lawmaker-who-wrote-the-original-law)  California is amending its Digital Age Assurance Act through Assembly Bill 1856 to exempt most open\-source operating systems from controversial age\-verification requirements after facing significant backlash\. The amendment would exclude software distributed under licenses permitting users to "copy, redistribute, and modify the software," protecting**Linux distributions**such as Debian, Fedora, Ubuntu, Arch Linux, and Mint\. The original law, passed in late 2025 as Assembly Bill 1043, would have required operating systems to collect user ages during device setup and provide an "age bracket signal" to apps, raising concerns about how this would apply to decentralized open\-source projects maintained by volunteers\.*SteamOS*might still be affected due to its ties to Valve's proprietary ecosystem\. The amendment, proposed by the same lawmaker who wrote the original law, narrows the definition of "operating system provider" but doesn't repeal the entire act, potentially leaving commercial platforms with proprietary app ecosystems subject to age\-assurance requirements\. [1h, 6p, 1 comment](https://news.ycombinator.com/item?id=48257087) ## [Squares in Squares](https://kingbird.myphotos.cc/packing/squares_in_squares.html) The page presents a comprehensivecatalog of the best known packings of n unit squares inside the smallest square of side length s for n ≤ 324, listing side lengths \(often algebraic numbers\), proof status, and recent record‑setting packings; many early results were proved by**Frits Göbel**,**Erich Friedman**,**Wolfram Bentz**, and**Hiroshi Nagamochi**, while numerous recent optimal packings \(including many with rational or algebraic s\) were discovered by**David Ellsworth**\(2025\) using a modified version of*Thomas Schadt*’s simulated‑annealing program, and several entries are marked with a 🔒 indicating that the side length satisfies a high‑degree polynomial with no concise closed‑form\. [10h, 137p, 47 comments](https://news.ycombinator.com/item?id=48267126) ## [C extensions, portability, and alternative compilers](https://lemon.rip/w/6-c-extensions-compilers/) The blog post examines the significant challenges facing C compiler portability, particularly for alternative compilers attempting to work with real\-world codebases that heavily rely on non\-standard extensions and compiler\-specific behaviors\. The author, writing from experience developing their own C compiler, highlights numerous obstacles including glibc's assumption of GCC compatibility through \_\_attribute\_\_ macros and packed structs that break ABI compatibility, SDL's endian detection that prioritizes GCC/clang inline assembly over builtin functions, OpenBSD's problematic \_\_only\_inline macro that conflicts with standard C inline semantics, and Android's bionic libc's dependence on clang\-specific extensions\. These issues demonstrate how most C code depends on GCC or clang\-specific features beyond the ISO standard, creating a quasi\-duopoly that makes it difficult for smaller compilers to achieve compatibility\. The author suggests that pretending to be GCC \(implementing \_\_GNUC\_\_ macros and extensions\) represents the most realistic path forward, though this requires extensive effort to keep pace with evolving extensions, and advocates for broader adoption of feature test macros like \_\_has\_builtin instead of compiler\-specific guards\. [7h, 52p, 8 comments](https://news.ycombinator.com/item?id=48212461) ## [Everyone Against Us \(2023\)](https://www.chicagomag.com/chicago-magazine/april-2023/everyone-against-us/)  **Allen Goodman**, a former*public defender*in Cook County, details systemic flaws in**Criminal Justice**through systemic neglect, evidence suppression, and punitive tactics\. His \*Everyone Against Us\* chronicles cases like a Cabrini\-Green drug case where police fabricated apartment searches, and a gun possession trial involving a young man wrongfully charged after a band attack\. Goodman highlights**overcrowded jails**,*underfunded PD offices*, and prosecutors’ punitive policies \(e\.g\., "jury tax" sentences\) that exacerbate racial and class biases\. He also recounts traumatic client visits in jails, where inmates harried him despite his efforts to mediate, underscoring the emotional toll on both defendants and attorneys\. [1h, 70p, 76 comments](https://news.ycombinator.com/item?id=48273030) ## [Nobody cracks open a programming book anymore](https://unix.foo/posts/nobody-cracks-open-a-programming-book/) **Programming book sales**have plummeted as AI tools like**ChatGPT**and**GitHub Copilot**replace the need for printed guides, with the "computer book" category down*16\.9% year over year*in early 2023 and publishers quietly stopped reporting the segment after*22\.3% declines*in professional books by August 2025\. The programming book, a medium that forced discipline through slow typing, is being supplanted by chatbots that explain in exact words but leave no residue of practice\. Knowledge for programmers was always the result of typing code, and as that activity fades, the industry shifts toward higher abstraction—though the physical books, with their pencil names and coffee stains, remain in used bookstores, unsold\. [2h, 4p, 0 comments](https://news.ycombinator.com/item?id=48272694) ## [Agentic Patterns](https://veso.ai/research/agentic-patterns/)  The webpage presents**Agentic Patterns**, a universal architecture emerging across all frontier AI systems like Claude Code, OpenAI Codex, and Gemini CLI that have converged on the same design principles due to fundamental constraints\. The guide categorizes systems into three types:*domain context substrates*providing structured access to specific domains,*personal AI runtimes*with long\-running state, and*multi\-agent shells*that orchestrate other agents\. Eight postulates form the foundation of production agentic systems, including starting with persistent instruction files, enforcing safety outside prompts, budgeting context windows, building tools on MCP, coordinating through shared state, decomposing tasks before hitting limits, tracking costs, and adding complexity incrementally\. The architecture sections cover prompt design, control mechanisms, context management, interfaces, operational considerations, and anti\-patterns, with guidance on reading order based on whether teams are building their first agent or scaling up existing systems\. [18h, 139p, 54 comments](https://news.ycombinator.com/item?id=48236122) ## [Bytecode VMs in surprising places \(2024\)](https://dubroy.com/blog/bytecode-vms-in-surprising-places/) Patrick Dubroy’s article highlights several unexpected uses of bytecode virtual machines beyond typical programming languages\. He describes Linux’s \*eBPF\* as a register‑based VM with ten registers and a JIT compiler, now a universal in‑kernel VM\. He notes that GDB’s remote debugging agent interprets a custom bytecode for evaluating traced expressions efficiently on targets\. He explains that WinRAR’s RAR format embeds a simple x86‑like VM \(RarVM\) to apply reversible data‑transform filters for better compression\. He also cites GPU‑side interpreters such as “uber‑shaders” and flexible shader systems that execute arithmetic expressions or whole rendering pipelines on the GPU, avoiding per‑frame shader recompilation\. Additional examples include DWARF debugging expressions, TrueType hinting instructions, and PostScript’s binary encoding\. [16h, 63p, 14 comments](https://news.ycombinator.com/item?id=48264635) ## [Show HN: Geomatic – A command\-driven geometry studio enabled with autodiff](https://www.tinyvolt.com/geomatic) Tiny Volt's**Geomatic**is a platform offering tools for exploration, learning, and pricing, with features like extension support and an interactive editor\. The site includes sections for*Explore Extensions*,*Learn*, and*Pricing*, though specific details are not yet populated\. The interface shows a loading state for the editor with no commands available at this stage\. [4h, 4p, 2 comments](https://news.ycombinator.com/item?id=48271283) ## [Show HN: TryPost – open\-source Social Media Scheduler](https://trypost.it/en)  The page introduces \*\*TryPost\*\*, an open‑source social‑media scheduling platform that lets users write captions, generate images with AI, and schedule posts across major networks—including Instagram, Facebook, LinkedIn, X, TikTok, YouTube, Pinterest, Threads, Bluesky and Mastodon—from a visual drag‑and‑drop calendar\. It offers features such as auto‑publishing via native APIs, team collaboration with real‑time editing and approval threads, a unified media library, per‑network post previews, and built‑in analytics tracking follower growth, reach and engagement\. Users can self‑host the free, privacy‑first software or try a 7‑day cloud trial, with pricing aimed at solo creators, freelancers, brands, startups and agencies managing multiple client accounts\. The site highlights use‑case scenarios, FAQ answers, and integration with AI assistants for additional support\. [18h, 50p, 5 comments](https://news.ycombinator.com/item?id=48204632) ## [Notes about reading messages with the Python email packages](https://utcc.utoronto.ca/~cks/space/blog/python/EmailPackagesNotes) **403 \- Request Unsuccessful**: Access is denied because the*User\-Agent*claims to be a web crawler yet comes from an IP range outside the listed ranges, causing the server to reject the request\. [20h, 291p, 140 comments](https://news.ycombinator.com/item?id=48263253) ## [Jira Is Turing\-Complete](https://seriot.ch/computation/jira.html) The article demonstrates that**Jira**is**Turing\-complete**by constructing a**Minsky register machine**using its automation features\. Registers are modeled as linked issue counts \(e\.g\.,*Bug*and*Task*\), the program counter as an Epic’s status, and automation rules as conditional instructions\. A working*addition*example uses Epic statuses \(*BACKLOG*,*TODO*,*DEV*,*PROD*\) and rules to decrement one register, increment another, and branch conditionally via JQL queries\. A*Fibonacci*sequence is implemented using issue type conversions \(e\.g\.,*Bug*→*Story*→*Task*\) to simplify operations\. Despite finite quotas, the system can encode unbounded computation under standard conventions, proving Jira’s Turing\-completeness through reduction to the Minsky model\. The human operator acts as an external clock when automation chain limits are reached\. [5h, 5p, 1 comment](https://news.ycombinator.com/item?id=48270455) ## [WebAssembly 128\-bit packed SIMD Extension](https://github.com/WebAssembly/spec/blob/main/proposals/simd/SIMD.md)  The WebAssembly specification introduces a**128\-bit packed SIMD extension**to enable near\-native performance for multimedia applications by leveraging common hardware capabilities\. The extension adds a**v128 value type**that can be interpreted in various ways, including as vectors of 8\-bit, 16\-bit, 32\-bit, or 64\-wide lanes containing integers or floating\-point values\. The specification defines numerous operations for these vectors, including**arithmetic, bitwise, comparison, and load/store operations**\. JavaScript cannot directly access these SIMD types, with any attempts to import/export v128 types throwing errors\. The operations are designed to map efficiently to common SIMD instructions in modern hardware, enabling developers to perform parallel data processing in WebAssembly environments\. [1d, 239p, 118 comments](https://news.ycombinator.com/item?id=48256597) ## [Childhood Computing](https://susam.net/childhood-computing.html) The author recalls their childhood computing experiences from 1992 when, at age eight, they gained access to a computer lab at their new school in an industrial town\. The lab contained**old IBM PC compatible machines with monochrome CRT monitors and no hard disks**, requiring students to insert floppy disks to load MS\-DOS and LOGO\.COM for programming sessions\. With only*two hours of computer time per month*, the author primarily worked with pen and paper at home, testing Logo programs on graph paper before executing them in the lab\. One notable program created an animated house outline that classmates copied and modified, effectively becoming the author's first "free and open source software" distributed through handwritten notebooks\. Beyond programming, the author fondly remembers early computer games like Moon Bugs, Digger, and Grand Prix Circuit, with the latter particularly impressing them with its 3D graphics capabilities\. These experiences, filled with wonder and exploration, remain vivid sensory memories decades later, including the distinctive smell and sounds of the computer lab\. [21h, 149p, 153 comments](https://news.ycombinator.com/item?id=48240025) ## [I love my Bluetooth keyboard](https://liquidbrain.net/blog/i-love-my-bluetooth-keyboard/) The authorenthusiastically shares their positive experience with a Bluetooth keyboard, emphasizing three key advantages: enhanced texting efficiency on a phone keyboard with quick typing and copy/paste, improved note\-taking in the notes app that mimics a typewriter's flow with reduced distractions, and efficient phone navigation via keyboard shortcuts \(like CMD\+Space for search\)\. They recommend the Logitech Pop keyboard for similar benefits, highlighting that this setup suits note\-taking and phone control better than using a phone's on\-screen keyboard\. [1d, 430p, 470 comments](https://news.ycombinator.com/item?id=48258684) ## [Memory has grown to nearly two\-thirds of AI chip component costs](https://epoch.ai/data-insights/ai-chip-component-cost-shares)  According to Epoch AI research,**high\-bandwidth memory \(HBM\)**now accounts for**63% of AI chip component costs**, up from 52% in Q1 2024, based on data from Nvidia, AMD, Google, and Amazon\. While*logic dies*remained stable at approximately 13%,*advanced packaging*declined from 19% to 15%, and*auxiliary components*fell from 15% to 9%\. In absolute terms, HBM spending across these four major designers surged from roughly $12 billion in 2024 to $32 billion in 2025, outpacing growth in all other components\. As memory supply remains constrained and prices continue to rise, HBM's share is expected to grow further in 2026, with major hyperscalers already factoring these increased costs into their capital expenditure projections\. [1d, 111p, 52 comments](https://news.ycombinator.com/item?id=48234831) ## [Scientists solve 200\-year\-old puzzle of how tobacco plants make nicotine](https://www.york.ac.uk/news-and-events/news/2026/research/200-year-old-puzzle-tobacco-plants-nicotine/)  Scientists from the University of York and University of Copenhagen have solved a 200\-year\-old puzzle by discovering how tobacco plants naturally produce nicotine, a mystery that has baffled researchers since nicotine was first extracted in the late 1820s\. Published in Nature Communications, the study identified the missing genes and enzymes—including**NaGR**and*NicGS*—that assemble nicotine from vitamin\-derived and amino acid\-derived ring structures, initially forming it attached to a glucose molecule for energy before the glucose is removed in the final step\. Lead researcher**Dr Benjamin Lichman**of York's Centre for Novel Agricultural Products said the finding could transform tobacco biotechnology by allowing nicotine removal or repurposing, enabling safer production of vaccines and pharmaceuticals using tobacco plants without contamination\. First author**Benjamin Schwabe**, a York PhD student, discovered the exact structures of the two key enzymes\. [1d, 74p, 27 comments](https://news.ycombinator.com/item?id=48236940) ## [Selling SaaS in Germany](https://embedworkflow.com/blog/selling-saas-in-germany-austria-and-switzerland-dach/)  Selling SaaS in Germany, Austria, and Switzerland \(DACH\) requires understanding the region's business culture, which prioritizes**risk assessment**over opportunity, unlike in the US or UK where the opposite is true\.*IT departments hold significant veto power*early in the sales process, making technical approval crucial before business discussions can progress\. Sales cycles in DACH are approximately twice as long as in Anglo\-American markets, but customers exhibit stronger loyalty once acquired\. While translated content is common,**true localization**requires adapting messaging to address compliance, security, and data protection concerns upfront rather than simply translating materials focused on speed and disruption\. A local presence demonstrates commitment to the market, though Germany, Austria, and Switzerland can be approached similarly from a SaaS perspective, with subtle differences not warranting separate strategies\. Detailed materials like PDFs and technical documentation become important later in the decision\-making process, after establishing clear value propositions to secure initial meetings\. [1d, 149p, 32 comments](https://news.ycombinator.com/item?id=48254020) ## [Alexander Grothendieck Revolutionized 20th\-Century Mathematics](https://www.quantamagazine.org/how-alexander-grothendieck-revolutionized-20th-century-mathematics-20260520/)  **Alexander Grothendieck**transformed 20th‑century mathematics by recasting algebraic geometry around abstract relationships rather than concrete objects\. Starting in the 1950s he introduced groundbreaking concepts such as*schemes*, which unified equations across different number systems, and developed tools like sheaves, topoi, stacks, motives, and étale cohomology\. These ideas linked algebraic geometry to topology, number theory, and representation theory, enabling proofs of Weil’s conjectures and influencing modern fields such as number theory and logic\. Despite withdrawing from academia in 1970 and living as a hermit until his death in 2014, Grothendieck’s work remains central, with mathematicians still building on his abstract “highway” of ideas\.