A daily curated digest with the tech news that matter + community vibes, delivered daily, in tabloid style. Like you always wanted.
Today AI moves out of the cloud and onto the PC... Nvidia unveils a new AI chip and the AI laptop race starts at speed, while Anthropic edges toward an IPO and OpenAI brings frontier models and Codex to AWS... At the same time, a reported breach through Meta's AI support bot raises fresh alarms around Instagram security, and Malaysia begins enforcing stricter age checks for users under 16... In schools, Stanford sets rules for AI coding assistants... We also see an old Xeon server run big local models without a GPU, even as game tests show where LLMs still struggle with memory and planning.
Nvidia pushes AI onto everyday PCs
Nvidia unveiled a new PC AI chip and partners quickly lined up hardware around it. It felt like the industry firing the starter pistol on the AI laptop race, with the cloud finally getting a desk-sized rival.
Anthropic edges toward the public market
Anthropic quietly filed a draft S-1, which is Wall Street code for get ready. The mood around frontier labs has shifted from moonshot mystique to grown-up money, and this move makes the AI IPO pipeline look very real.
Meta support bot becomes attack shortcut
Hackers reportedly used Meta's AI support bot to take over notable Instagram accounts. That is the kind of failure that makes every company promising faster support with AI sound a lot less comforting today.
Malaysia bans under-16 social accounts
Malaysia began enforcing a rule blocking children under 16 from social media accounts. What looked like a debate is now policy, and platforms are being pushed toward stricter age checks whether they like it or not.
OpenAI moves onto Amazon's home turf
OpenAI made its frontier models and Codex available on AWS, tightening the grip of the biggest cloud players on enterprise AI. For customers, it is convenient. For rivals, it is one more giant door getting slammed shut.
A recycled Xeon server managed to run a hefty model setup without a GPU, which is exactly the sort of scrappy result people love. It keeps alive the idea that local AI does not have to belong only to rich labs and shiny hardware.
Stanford sets ground rules for helpers
Stanford's CS336 published rules for AI coding assistants, spelling out what bots may do, what they must not do, and where students stay accountable. Schools are clearly done pretending these tools are a side issue.
Game worlds still humble the chatbots
A deep look at LLMs playing games argued that chatbots still struggle when memory, planning and feedback loops really matter. It was a neat reality check after months of breathless benchmark chest-thumping.
The jqwik test incident was funny for about three seconds and alarming after that. A hostile instruction string showing up in build output crystallized a bigger fear: software pipelines now need to defend against prompt injection too.
DuckDuckGo courts the anti-AI crowd
DuckDuckGo leaned harder into no-AI search, adding simpler ways to dodge summaries and autogenerated clutter. That says a lot about where user patience is headed: not everyone wants a chatbot wedged between them and a web page.
Mac users beg for window sanity
A plea for the return of proper window grids on macOS struck a nerve because it sounded painfully true. Modern desktops keep getting prettier while basic multitasking gets fuzzier, and plenty of users are tired of pretending that is progress.
GrapheneOS sharpens privacy-first speech tools
Version 2 of GrapheneOS Speech Services gave privacy-minded Android users a better speech stack without asking them to hand more data to big platforms. In a market drowning in defaults, that kind of stubborn independence stands out.
Tonight, we follow Nvidia as RTX Spark pushes AI and graphics onto everyday laptops instead of distant servers... A flaw in ChatGPT for Google Sheets spreads data theft risks and fake login traps across workbooks... Researchers show browser OPFS calls can help websites fingerprint your device through the SSD... A wealthy town’s fight over Caltrain electrification leaves a giant bill in its wake... Inside the Gemini race, the talk turns to 60-hour weeks, office pressure, and speed... New tools chase longer memory for coding agents, smaller image models for local devices, and tighter control for AI coders that move too fast... Across the board, the conversation centers on local computing, security, tracking, and the rising cost of everyday AI.
Nvidia unveiled RTX Spark, a single chip meant to cram AI work and graphics into slim Windows laptops. The message is clear enough: stop renting the cloud for every task and let consumer machines do more of the heavy lifting.
Spreadsheet Bot Becomes Office Snitch
A flaw in ChatGPT for Google Sheets lets one poisoned sheet trigger data theft and fake login screens across other workbooks. That is the sort of cheerful office automation nobody asked for, and it hits right where trust is thinnest.
Researchers showed sites can fingerprint devices by timing storage calls in the browser's OPFS area. Add that to the web's long list of tracking tricks and browsing starts to feel less open and more like being quietly measured.
Tiny Town Lands Massive Rail Bill
A small, wealthy town spent $145K fighting Caltrain electrification, and the delay reportedly helped swell costs by about $400M. It is a brutal reminder that a little obstruction can torch a big public tech project for everybody else.
Brin Wants Gemini On Overdrive
Sergey Brin reportedly told Gemini staff that 60-hour weeks are the productivity sweet spot and weekday office attendance matters. The AI race is now so intense that even Valley royalty is reaching for the old startup pressure cooker.
Coding Bots Start Remembering You
Show HN favorite Komi-learn promises continuous memory for coding agents, so tools recall habits and past fixes without constant prompting. That idea landed hard because everyone is tired of smart assistants acting brand new every session.
The new Bonsai Image 4B family targets phones, laptops, and other local gear instead of giant servers. Compact models keep gaining charm because people want useful image tools without cloud bills, queues, and mystery data handling.
One sharp essay argues the best way to use coding agents is with heavy backpressure, not blind autonomy. That rings true because unattended bots are fast only until they spray bugs everywhere and make cleanup the real job.
A weary builder asked whether the smartest productivity move might be canceling pricey AI subscriptions altogether. After the first rush, the question feels unavoidable: are these tools saving real time, or just selling expensive optimism?
Datacenter GPU Invades Gaming Rig
One tinkerer jammed a used Tesla V100 into a home PC for about £200 to get more VRAM for local models. It is gloriously impractical, a little chaotic, and exactly the sort of hack that makes consumer GPU prices look silly.
Valve's Steam Deck sold out in North America within a day of a price hike, which says a lot about handheld demand and a little about gamer self-control. The machine still has enough pull to shrug off higher prices, at least for now.
VideoLAN announced dav2d, an early decoder for AV2, betting that a codec does not matter until ordinary people can actually play the files. It is a nerdy milestone, but it points to the next long war over better video and less waste.
The Chuwi Minibook X arrives as the tiny laptop many Linux fans keep wishing existed: small, usable, and just quirky enough to be lovable. Netbooks were pronounced dead years ago, yet the hunger for compact do-it-all machines never left.
Rubin Starts Catching Space Monsters
The Vera C. Rubin Observatory is finally flexing, spotting asteroids and failed supernovas with frightening efficiency. Big astronomy still knows how to steal the spotlight when it starts finding giant rocks and cosmic wreckage.
Tonight, we follow Anthropic as it moves ahead of OpenAI on paper, while OpenRouter lands fresh funding and the AI money race grows even louder... But the mood turns cooler as warnings spread over AI coding, an rsync backlash erupts over machine-written commits, and Ernst & Young faces heat for a report accused of using fake cybersecurity references... Beyond AI, AV2 enters the video fight, Accenture buys Downdetector and Speedtest for $1.2B, AMD restores Linux support for Vivado Basic, and a proposed US shift on research grants raises fresh questions about who controls the future of science.
US science money gets a trapdoor
A proposed US policy would let officials yank research grants almost whenever they want, with peer review no longer guaranteed. That sounds less like science funding and more like politics wearing a lab coat.
The new AV2 video standard is officially out, promising better compression than AV1. That could mean cheaper streaming and sharper video later, though everyone knows the real wait is for chips and apps to catch up.
Accenture buys outage watchers
Consulting giant Accenture is paying $1.2B for Downdetector and Speedtest, two sites people rush to when the internet feels cursed. It is a reminder that boring utility brands can become very serious business.
AMD walks back a Linux blunder
After developer backlash, AMD said the free Vivado Basic tools will keep Linux support after all. For FPGA users, this was the rare corporate U-turn that landed exactly where it should have started.
SpaceX gets cold shoulder in Denmark
Danish pension fund Akademikerpension put SpaceX on its exclusion list over governance worries and sky-high valuation. It is a small move financially, but a loud signal that not everyone buys the rocket hype.
Anthropic passes OpenAI on paper
After a fresh valuation jump, Anthropic reportedly moved ahead of OpenAI as the most valuable AI startup. The cash cannon is still firing, and the lab race now looks like a brutally expensive fight for the future.
OpenRouter bags another giant check
Model gateway OpenRouter raised $113M in a Series B, with heavyweight backers betting the AI plumbing business will mint money. If model makers are the stars, this is the company selling the stage and cables.
AI coding gets a reality check
The blunt message was simple: AI can spit out code, but that is not the same as building a safe, reliable product. It hit a nerve because too many teams are mistaking autocomplete for adult supervision.
People noticed the latest rsync release carried hundreds of Claude-linked commits, and the reaction turned icy fast. Nobody wants a foundational tool quietly becoming a playground for machine-written patches.
Big Four report invents cyber facts
A cybersecurity report from Ernst & Young was accused of being stuffed with AI-made nonsense and fake references. When a giant firm cannot keep hallucinations out of paid work, the trust problem stops being abstract.
Shopify rolled out a new register allocator for ZJIT, the kind of under-the-hood change normal people never see and developers absolutely obsess over. It sounds dry, but this is how fast software actually gets made.
Zig landed a major build system rework, continuing the language's habit of renovating big pieces before calling them finished. It may look chaotic from outside, but bold cleanup is exactly the appeal here.
Theme park classic drops Windows 7
OpenRCT2 shipped version 0.5.1 and confirmed it is the last release to support Windows 7. Even nostalgia projects are shutting the old gates now, which says a lot about how long the past has already lingered.
Modern web sneaks onto Mac OS 9
MacSurf aims to bring a surprisingly modern browsing experience to Mac OS 9 hardware. It is gloriously impractical, deeply charming, and exactly the kind of computer mischief that keeps old machines alive.
3D splats run inside a terminal
Tsplat renders Gaussian splatting scenes right in a text terminal, even over SSH and without a GPU. It is half demo, half flex, and entirely the sort of ridiculous idea that becomes irresistible once it works.
Today tech meets reality head-on... the Linux desktop dream looks stuck again, Apple puts fresh pressure on repair-first hardware, and a Blue Origin explosion hits the space schedule... New records on license plate readers and commercial location data push privacy and security to the front of the day... At the same time, OpenAI moves into biosecurity, faster multimodal models keep the AI race moving, and coders report a strange distance from code written by agents... Hidden text tricks and shaky security benchmarks deepen questions about what those agents can really handle... We track the machines, the surveillance systems, and the growing trust gap across hardware, space, and AI.
Linux Desktop Dream Hits the Wall
Another year, another funeral for the old Linux desktop dream. The argument was blunt: users still want polished apps, long battery life, easy drivers, and zero fiddling. That gap with macOS and Windows still looks painfully real.
Apple Squeezes Framework in Plain Sight
The takedown of Framework 12 landed like a cold shower for repair-first laptop fans. Nice ideals are not enough when Apple keeps pushing thin, fast, cheap machines that regular buyers actually want. Noble hardware still has to survive basic market math.
Campus Plate Readers Feed Border Agents
Fresh records say the University of California shared license plate reader data with CBP, and that lit up every privacy alarm in sight. Campus tools sold as safety gear keep turning into quiet surveillance pipes, and that trade looks worse every time.
Soldiers Get Exposed by Ad Tracking
Reports say deployed US military personnel were tracked using ordinary commercial location data. That is the nightmare version of the ad-tech economy: the same data used to sell sneakers can also expose troops. The privacy mess now looks like a security failure.
A Blue Origin rocket blew up during a launchpad test, handing the space race another very public setback. With New Glenn already under pressure, this was not just smoke and metal. It raised fresh doubts about schedules, money, and Moon ambitions.
OpenAI unveiled Rosalind Biodefense, pitching AI as a shield against biological threats. The promise sounds noble, but it also shows how quickly frontier labs are moving from chatbots into high-stakes national security territory. The lab coat phase is here.
Another Fast Model Joins the Sprint
Step 3.7 Flash arrived promising faster multimodal work and better tool use. The race now feels brutally simple. Labs are no longer selling magic; they are selling speed, reliability, and fewer embarrassing agent mistakes that blow up in front of customers.
Coders Feel Absent From Their Code
The sharpest AI coding take of the day was brutally human: if the model did all the work and you barely remember the code, something is off. That uneasy fog after an agent session is becoming a real workplace feeling, not just a passing quirk.
Hidden Text Tricks AI Into Destruction
A sneaky change in jqwik reportedly told AI coding agents to delete app output, turning one little text addition into a nasty lesson. If your software helper can be pushed around by hidden instructions, the shiny agent future starts looking alarmingly gullible.
Security Benchmarks Humble the AI Agents
CVE-Bench tried to measure whether AI agents can fix real security bugs, and the answer was more messy than magical. Even the benchmark needed corrections. That pretty much sums up the moment: big claims, shaky yardsticks, and plenty of room for bruising reality.
Cannes AI Premiere Story Falls Apart
The viral claim that a 500K AI film premiered at Cannes fell apart once people checked the paperwork. It was a perfect little parable for the AI boom: huge marketing, loose wording, and headlines racing ahead of what actually happened.
Wikipedias Workhorses Threaten to Walk
Top Wikipedia editors are threatening a strike over tooling and working conditions, which is a reminder the internet still runs on tired humans. When the volunteers and power users start stepping back, the fantasy of endless free digital labor looks shaky.
Robinhood Invites Bots Into Your Portfolio
Robinhood now wants your AI agents to trade stocks for you, because apparently regular automated finance was not spicy enough. Handing a bot the keys to your money sounds like the kind of convenience people love right up until the first stupid trade.
Therapy App Wants Your Face First
Therapy platform Headway is pushing facial scanning on patients who just want care, and that feels like the bleakest possible product decision. When healthcare starts demanding biometrics for routine access, convenience has plainly eaten privacy alive.
Volkswagen Slams the Door on Home Automation
Volkswagen blocked Home Assistant access by tightening login rules, leaving car owners staring at another closed gate. The smart home dream keeps crashing into the same problem: you paid for the device, but the company still controls the keys.
We open with Blue Origin after New Glenn reportedly explodes during a static fire test in Florida, putting fresh heat on the Artemis orbit around the story... Across hardware, Steam Deck prices jump, AMD Vivado licensing rattles Linux and FPGA users, and datacenters picture AI infrastructure with fewer GPUs and more strain elsewhere... In AI, Anthropic stacks a towering $65B raise at a $965B valuation, ships Claude Opus 4.8, expands Claude Code, and keeps the race moving while buyers study the growing bill... Over it all, Google Search faces another wave of distrust, and the talk around AGI timelines follows whichever lab holds the spotlight.
Blue Origin rocket blows up on pad
Blue Origin's New Glenn reportedly exploded during a static fire test in Florida, turning a long-awaited moon-shot workhorse into a very public setback. With NASA Artemis in the background, this was not a small oops.
Steam Deck gets a brutal price jump
Valve said rising costs forced a price jump of more than 40% for the Steam Deck, and that lands like a brick in a market already tired of paying tomorrow's prices for today's gadgets. Portable gaming suddenly looks a lot less cozy.
AMD changed Vivado licensing in a way Linux and FPGA users saw as a classic switcheroo: friendly until everyone depends on it, then the door narrows. For builders who bet on open workflows, the trust damage may linger longer than the fee.
Datacenters imagine life after GPUs
As AI builders choke on the cost and power draw of GPUs, one write-up asked a delicious question: what if the datacenter had to work without them. The answer points to faster networks, smarter plumbing, and a bottleneck that simply moves.
Google search trust keeps sliding
The broadside against Google Search hit a nerve because it fits the mood: too many ads, too much self-preferencing, and too much AI fluff where useful links used to be. When people say the web feels worse, this is the poster child they mean.
Anthropic bags a jaw-dropping cash mountain
Anthropic pulled in $65B at a $965B valuation, which is the kind of number that makes normal startup math pack up and leave. The AI race is no longer a sprint between labs; it looks more like a state-sized spending contest with chatbots.
Claude Opus 4.8 enters the ring
Anthropic rolled out Claude Opus 4.8, another reminder that frontier model releases now arrive like software patches for reality itself. Everyone wants the next smartest assistant, but the bar for trust, price, and real gains keeps rising.
Claude Code takes on bigger chores
With dynamic workflows in Claude Code, Anthropic is pushing the dream that coding agents can plan larger jobs and finish them with less babysitting. It sounds lovely right up until you remember how draining constant permission prompts already feel.
AGI forecasts follow the winning lab
The sharp point of this analysis is hard to ignore: AGI timelines seem to speed up whenever a favorite lab is winning and slow down when the spotlight moves. Prophecy starts looking suspiciously like branding when the calendar follows market share.
AI bills start scaring the buyers
Corporate buyers are starting to blink at the bill for AI tools and giant model subscriptions. After the hype parade, finance teams want proof, not poetry, and vendors are learning that token-heavy demos are easier to sell than lasting value.
Cities bag their Flock cameras
Cities are literally covering Flock license-plate cameras with trash bags, which is about as subtle as a public trust crisis gets. When police do not even seem sure what is active, the sales pitch about smart safety tech starts sounding very thin.
Troops tracked through commercial location data
Reports that US troops have been targeted using commercial location data are the nightmare version of the ad-tech economy. Data collected to sell convenience can be repurposed for surveillance and danger with almost no friction at all.
Cheap phone lidar peeks around corners
Researchers showed that cheap smartphone lidar can help spot objects hidden around corners, bringing a sci-fi trick closer to everyday hardware. It is a reminder that some of the coolest progress still comes from clever ideas, not giant budgets.
Rust 1.96 keeps the steady march
Rust 1.96 arrived with the steady, no-drama rhythm people wish more software had. It is not flashy gossip, but the language keeps tightening the screws on reliability, and that quiet competence is exactly why it keeps winning serious fans.
GitHub bans zero-day Windows researcher
GitHub banned a researcher who posted zero-day Windows exploits, reopening the messy fight over disclosure, platform rules, and who gets to decide what counts as responsible. Security work never stays purely technical once lawyers smell smoke.
Today the big signal comes from YouTube, which starts automatic labels for AI-generated video as fake-looking clips spread wider... Apple and Google sit deeper inside push alerts, Germany studies a rule to boost approved news, and Composer and Packagist move fast after fresh supply chain attacks... On the AI side, the market shows both demand and limits at once: DuckDuckGo gains traffic as Google AI Overviews expand, companies keep paying large bills to OpenAI and Anthropic, and Claude Code grows into a real developer workflow... At the same time, new tests say AI coding agents still struggle with real software systems, PostHog turns customer data toward model training, and Qwen pushes for raw speed on unfamiliar hardware... We follow the money, the controls, and the weak points.
YouTube starts tagging fake-looking clips
YouTube is moving from polite hints to automatic labels on AI-generated video, especially clips made with tools like Veo. After months of fake-looking realness flooding feeds, this felt less like a feature launch and more like the platform admitting the mess is here.
Push alerts stop being neutral pipes
Push alerts used to be simple taps on the shoulder. Now Apple and Google sit in the middle, shaping delivery, tracking performance, and quietly deciding what reaches users. It reads like another reminder that app makers do not really own their audience anymore.
Google AI sends searchers elsewhere
After Google leaned harder into AI Overviews and AI Mode, DuckDuckGo said visits jumped 28%. That spike looks like a very public eye-roll from people who just wanted links, not a chatty machine parked above every search result.
Germany is considering a rule that would make platforms boost 'reliable' or state-approved news. However it is dressed up, the idea of officials nudging algorithms toward favored outlets set off the usual alarm bells about speech, power, and who gets to define truth.
Open source braces for package poisoning
The Composer and Packagist world spent the day tightening defenses after a wave of supply chain attacks hit open source. The mood was grimly familiar: one poisoned package can ricochet through half the internet before breakfast.
The hottest reality check of the day argued that current AI agents still cannot safely change real software systems. Demos may sparkle, but once messy history, hidden rules, and edge cases show up, the dream of hands-free coding starts wobbling fast.
LLM bills look like real business
One sharp read on the market said Anthropic and OpenAI may finally have true product-market fit. Not because the models are magical, but because companies keep swallowing shocking bills for coding help anyway. That is usually when a platform stops being a toy.
Claude Code grows into a workflow
A deep user guide to Claude Code showed how far AI coding has moved from novelty to full-blown workflow. With custom files, tools, subagents, and plugins, the pitch is simple: stop chatting with the bot and start treating it like part of the dev team.
PostHog wants your data for models
PostHog said it will use customer data to train AI models, with users opted in by default. That landed exactly how you would expect: as another reminder that every product wants to become an AI company, and your data is still the easiest fuel to grab.
Qwen grinds for speed not chat
Alibaba's Qwen3.7-Max reportedly spent 35 hours tuning code on unfamiliar hardware and came back with a 10x speedup. Even with the usual benchmark caution, the story fed the sense that model wars are shifting from chatbot flair to hard engineering muscle.
Nvidia muscles into the CPU fight
Early Nvidia Vera benchmarks suggested its new Arm CPU is no side act to the GPU empire. If the numbers hold, Nvidia is inching closer to owning the whole AI server stack, which is the sort of sentence that keeps rivals awake at night.
Cate turns coding into wall-sized chaos
Cate 1.0 arrived with an infinite canvas for code, terminals, browsers, and git, basically asking why developers still work in tiny stacked boxes. It is part IDE, part whiteboard, and part gentle accusation that normal desktops waste too much thinking space.
Kindle jailbreak becomes a Rust playground
Someone got Rust and Slint running on a jailbroken Kindle Paperwhite, turning Amazon's sleepy e-reader into a tiny hacker toy. The charm here was not practicality. It was the eternal joy of making locked-down hardware do something its maker never planned.
Mesh networking gets its backyard revival
Interest in mesh networks bubbled up again through tools like Meshtastic, MeshCore, and Reticulum. Under the hobbyist energy sat a serious point: when big networks fail, get censored, or get pricey, people start hunting for their own backup roads.
Old Windows apps sneak onto the web
Theseus can now translate old Win32 apps into WebAssembly, pushing crusty Windows programs into the browser with surprisingly little ceremony. It feels like one of those wonderfully stubborn hacker moves that refuses to let old software die quietly.
Tonight, we watch GitHub stumble as Actions and Pages fail, leaving developers stuck on broken builds... AWS support faces new heat after a restored account story turns painfully human... In the rulebook, open source gets relief from age-check laws, while the Dutch move to keep critical digital infrastructure out of foreign hands... Then the AI money story shifts fast: Xiaomi drives model prices down hard, Uber burns through its AI budget at startling speed, and the argument grows that this boom looks less like dot-com mania and more like old enterprise software excess... At the same time, LLMs get a reminder to work with boring languages, and DeepSWE tries to test coding agents without the usual score inflation.
GitHub Trips Over Its Own Pipelines
GitHub had another one of those days when Actions and Pages stopped behaving, and developers were left staring at broken pipelines instead of shipping code. For teams that treat CI like oxygen, the outage felt less like a hiccup and more like a tax.
AWS Loses the Human in Support
The saga over a restored AWS account turned into a nasty morality tale when the customer said the one person who actually helped was later let go. It landed as proof that giant clouds still feel terrifyingly human when support disappears and automation takes over.
Open Source Dodges Age Check Headache
Colorado and California carved out an exception for open source software in age-check laws, sparing volunteer projects from absurd compliance pain. After months of dread, this looked like a rare moment where lawmakers noticed not every website is a social media trap.
Dutch State Slams Brake on US Deal
The Dutch government moved to stop Kyndryl from buying Solvinity, a key supplier tied to national digital services. Europe’s mood is getting unmistakable: core online plumbing is too important to casually hand to foreign cloud interests.
Xiaomi slashed MiMo API prices by as much as 99%, turning the AI market into a bare-knuckle supermarket aisle. If model access gets this cheap this fast, the old story that only a handful of giants can afford serious AI starts wobbling hard.
Uber Burns Through AI Cash Fast
Uber reportedly burned through its annual AI budget in a single quarter, which is the sort of headline that makes every CFO reach for cold water. The promise is still huge, but the meter is running so fast that even true believers are blinking.
Why the AI Bubble Looks Different
The argument here is that the AI boom is not replaying the dot-com mess so much as reviving the bloated enterprise software playbook. Less pets.com, more expensive tools sold to bosses who fear being left behind, and that stings in a very familiar way.
LLMs Work Better With Boring Languages
A fresh bit of developer wisdom made the rounds: pair LLMs with boring, predictable languages and you get fewer surprises. When the machine is already chaotic enough, nobody wants a codebase adding jazz improvisation on top.
New Benchmark Tests Coding Agents Honestly
DeepSWE pitched a cleaner benchmark for long-running coding agents, trying to measure whether AI can fix real software without cheating off the internet first. In a field crowded with inflated scores, even the promise of a fair test felt refreshing.
A bug hunter found that adding a trailing slash to an AWS API Gateway path flipped one endpoint from locked down to wide open, earning a $12K bounty. It was the perfect horror story: one tiny character, one massive change in who gets the data.
Vision Pro Gets a Real Work Trial
An Ask HN thread on working for hours in the Apple Vision Pro became a reality check on spatial computing. Some travelers swear by the giant virtual screen, but the broader vibe was clear: useful for a slice of people, not a laptop killer yet.
One Developer Trades Rust for Ruby
One developer’s jump from Rust to Ruby hit a nerve because it challenged the cult of maximum speed and minimum comfort. The takeaway was deliciously simple: sometimes shipping a calmer app matters more than worshipping the fastest tool in the room.
Flatpak Picks systemd and Starts Another Fight
News that Flatpak will depend on systemd reopened one of Linux’s favorite family arguments. Supporters see practical progress, critics see another tightening grip, and everybody once again remembered that desktop Linux can turn plumbing into theatre.
A developer ditched Adobe and Microsoft tools to build a Git-tracked book workflow with LibreOffice, LaTeX, and open formats. It read like a small rebellion against bloated creative software and a love letter to plain files that behave.