Start your morning scandalously informed.

A daily curated digest with the tech news that matter + community vibes, delivered daily, in tabloid style. Like you always wanted.

← Back to Home

Saturday, March 28, 2026

Hackers Crack FBI Boss’s Private Gmail!

Hackers Crack FBI Boss’s Private Gmail!

A hacker breach of the FBI director’s personal Gmail raises fresh fears about who really controls our inboxes... An Iran school strike once blamed on AI targeting now points back at human decision makers... A Los Angeles jury slams social media as addictive for kids, sending a chill through Meta, Google and YouTube... Fuel rationing arrives in Slovenia as Middle East tension hits Europe’s energy nerves... New powers let Hong Kong police demand phone passwords, testing the limits of privacy and encrypted apps... Tonight we watch tech crash into power and daily life... Developers walk away from the AI hype, as buggy AI coding assistants still need human babysitters... A new Sup AI system tries to fact check itself while the jai sandbox keeps rogue AI agents away from real machines.

Tech Collides With Power And Real Life

  • Hackers Humiliate FBI Boss With Email Breach

    US officials admit hackers broke into FBI Director Kash Patel's personal email, leaking private photos and messages. It’s a PR disaster: if the country’s top cop can’t keep Gmail safe, the rest of us are wondering what chance we have.

  • AI Targeting Blamed Then Cleared In Iran Strike

    After a deadly strike on an Iranian primary school, early spin tried to pin the mistake on an American AI system. Reporting now suggests humans, not algorithms, drove the call, which feels even scarier than the robot blame game everyone expected.

  • Jury Calls Out Addictive Apps, Silicon Valley Panics

    A Los Angeles jury found social media apps dangerously addictive to kids, rattling Meta, Google and YouTube. The ruling could turn into a tidal wave of lawsuits and stricter rules, finally challenging the "engagement at any cost" mindset.

  • Fuel Rationing Hits EU As Middle East Burns

    With strikes and retaliation roiling the Gulf, Slovenia just became the first EU country to bring in fuel rationing. For many, it’s a jarring throwback and a warning that Europe’s energy security is a lot shakier than politicians like to admit.

  • Hong Kong Police Gain Power To Demand Passwords

    New rules let Hong Kong police force people to hand over phone passwords, with fines or jail for saying no. Privacy advocates see a massive new search power, while ordinary users are left wondering whether encrypted apps still really protect them.

AI Hype Meets Burnout And Reality Checks

  • Developer Walks Away From AI Hype Hangover

    One developer describes bailing on the AI hype after trying to use chatbots for real work and hitting walls of glitches, hallucinations and busywork. Many readers nod along, frustrated at being told the magic productivity boost is always just a quarter away.

  • AI Coding Assistants Still Need Babysitters At Work

    This essay pokes holes in the dream of fully automated AI coders. Agents wander off, break projects, and still need humans to rescue them. It’s a sober counterpoint to executive slide decks promising instant productivity gains with practically zero extra risk.

  • Stop Staring At The Spinning Claude Progress Bar

    A coder warns that waiting around while an AI assistant churns is quietly killing productivity. Instead of watching logs scroll like a slot machine, they argue we should treat AI like a slow coworker: give it a task, walk away, and stop worshipping the output.

  • Wild New AI Tries To Fact Check Itself

    Sup AI chains together hundreds of models and claims it can mathematically double-check its own answers. It sounds wild and a bit overbuilt, but it taps into something people clearly want: AI that admits uncertainty instead of bluffing its way through everything.

  • Tool Puts AI Agents In A Safe Sandbox

    As AI tools start running commands on real machines, horror stories of wiped folders and broken repos are piling up. The jai project boxes these agents into a locked-down playground. People love the help, but they definitely don’t want a chatbot near rm -rf ever again.

Browsers, Chat Apps And Control Of Our Devices

  • Popular Python Package Hijacked To Steal Developer Secrets

    A widely used Python package from Telnyx was quietly hijacked and turned into data-stealing malware, part of a broader wave of attacks on developer tools. It’s another reminder that the modern software world runs on a shaky stack of third-party code and blind trust.

  • Privacy Diehards Cheer Chat App Without Phone Numbers

    SimpleX Chat pitches a messenger with no usernames, no phone numbers and a decentralized network. Messages hop through relays instead of a big central server. For people burned by WhatsApp and Signal drama, this feels like the privacy-first reboot they’ve wanted.

  • Websites Quietly Freeze Out Firefox As Chrome Wins

    Users keep hitting big-name sites that simply refuse to work in Firefox, often pushing people toward Chrome with vague error messages. It feeds a growing fear that the open web is being boiled slowly, one "unsupported browser" warning at a time.

  • Even Microsoft Staff Hate Forced Microsoft Accounts Now

    A report says even insiders at Microsoft are fighting against Windows 11's pushy requirement for online accounts. They want straightforward local logins back. Users are clearly with them, tired of feeling like their own PCs are just rented terminals for cloud services.

  • Laptop Screens Slow Down To Supercharge Battery Life

    LG has built an "Oxide 1Hz" laptop screen that can slow down to a crawl when nothing’s moving, using far less power. Paired with a new Dell laptop, it suggests future battery gains may come more from clever displays than yet another slightly more efficient chip.

Top Stories

Hijacked Python package spooks the coding world

Cybersecurity & Software

A key software package used by many developers was hijacked, turning routine updates into a data theft trap and highlighting how fragile our everyday coding tools have become.

Read more →Comments

FBI boss’s Gmail hacked by foreign-linked group

Cybersecurity & Geopolitics

If hackers can loot the personal email of America’s top cop, it shows how exposed powerful people are online and raises fresh doubts about basic consumer services.

Read more →Comments

Iran school strike exposes messy human use of AI

War, AI & Accountability

After a US strike killed children in Iran, early attempts to blame an automated system fell apart, forcing a harder conversation about how humans, not just algorithms, make life-or-death calls.

Read more →Comments

Jury calls social media addictive to kids

Social Media & Law

A landmark jury verdict calling social media addictive to kids shakes the business model of Meta, Google and friends, and could unleash a wave of costly lawsuits and new rules.

Read more →Comments

New chat app bets big on zero identity

Messaging & Privacy

A small open-source messenger promising chat without phone numbers or tracking taps into deep frustration with mainstream apps and shows how hungry people are for true privacy.

Read more →Comments

Developer says the AI party isn’t fun

AI & Work Culture

A candid essay from a developer walking away from AI hype captures growing fatigue with glitchy tools and executive promises that don’t match day-to-day reality.

Read more →Comments

New tool locks reckless AI agents in a cage

AI Safety & Developer Tools

As AI agents start deleting files and mangling projects, a tool that cages them in a safe playground embodies a new priority: getting help from AI without risking your own computer.

Read more →Comments
All stories (75)
Complete list of news articles from this day

Chopping my brain into bits – turning my brain into a 3D model on the web

by lanakei

A medical student transformed a raw brain MRI obtained from a University of Melbourne research study into an interactive 3D model. Starting with metadata extraction to confirm scan quality, the author...

Key Points

  • FreeSurfer’s recon-all segmented the MRI into labeled anatomical structures with quantitative outputs.
  • Visualization with ITK-SNAP enabled intuitive inspection and validation of segmentation results.
  • The workflow culminated in an interactive 3D model derived from the labeled MRI data.

The European AllSky7 fireball network

by marklit

The European AllSky7 fireball network details the structure and capabilities of its meteor detection platform. The site offers station status, equipment descriptions, live images updated every 15 minu...

Key Points

  • Seven-camera AllSky7 systems cover the full sky, capturing ~5,000 meteors/year in central Europe.
  • Ubuntu-based AllSky7 software performs end-to-end analysis and is free to network members.
  • AllSky7+ (2022) adds an eighth fisheye camera for full-sky single-frame capture and improved photometry.

Show HN: Minimalist library to generate SVG views of scientific data

by afc

mini_svg is a streamlined library designed to create SVG-based visualizations from scientific data using Python. It focuses on simplicity and provides example graphs across standard plot types. The to...

Key Points

  • Supports BoxPlot, Scatterplot, Histogram, and Lineplot outputs in SVG.
  • Two interfaces: CLI with JSON parameters and in-process Python functions.
  • Examples (.sh files) are provided to demonstrate command-line usage.

A Faster Alternative to Jq

by pistolario

The article introduces jsongrep, a Rust-based command-line tool designed to search JSON documents by matching path expressions. It demonstrates how jsongrep’s query language works—covering dot-path na...

Key Points

  • jsongrep compiles JSON path queries into DFAs for single-pass, O(1) per-symbol matching.
  • Its query language supports dot paths, wildcards, alternation, recursive descent, and optional matches.
  • The article outlines a benchmarking approach comparing jsongrep with jq/JMESPath/jsonpath-rust.

21,864 Yugoslavian .yu Domains

by speckx

A blog post by Jacob Filipp releases a CSV listing 21,864 domains from the former Yugoslav .yu top-level domain, which was taken offline in 2010. Inspired by an interview with Kaloyan Kolev and buildi...

Key Points

  • CSV of 21,864 former .yu domains is available for download.
  • CDX API blocks wildcard *.yu queries; subdomain queries and pagination are viable.
  • Archived www.yu listings (Memodata) plus CDX and wget enabled dataset assembly.

Everything old is new again: memory optimization

by ibobev

This post by Jussi Pakkanen explores practical memory optimization in a simple word-count task, reflecting renewed interest in efficiency amid tighter memory availability on consumer devices. The auth...

Key Points

  • Python baseline peaks at 1.3 MB on a small input for a word-count task.
  • C++ implementation uses mmap, UTF-8 validation, lazy splitting, and string_view keys to limit allocations.
  • Only the hash table and final sorted vector allocate dynamically in the native approach.

Suddenly energy independence feels practical:Europeans building mini solar farms

by vrganj

As Europe faces a renewed energy crisis, the article explores how small-scale solar can cut household reliance on imported fossil fuels. Rooftop solar paired with home batteries and dynamic electricit...

Key Points

  • Rooftop solar plus batteries and dynamic tariffs can reduce peak-period grid usage.
  • Spain’s renewable build-out cut fossil price influence by 75% since 2019 (Ember).
  • Germany’s plug‑in solar surged (1M+ units, 2022–2025) with falling costs; UK now permits plug‑in solar.

QRV Operating System: QNX on RISC-V

by chrsw

QRV v0.16 marks a concrete milestone for a QNX-compatible microkernel targeting RISC-V: it now boots to a working shell on QEMU. Basic commands operate as expected—pwd reports the current directory, e...

Key Points

  • QRV v0.16 boots to a working shell on QEMU with basic commands functioning.
  • First dynamically linked user program runs via full QNX-style IPC.
  • Patches and build script are available on GitHub (r-tty/qrv).

Hold on to Your Hardware

by LucidLynx

This article contends that the long-standing era of affordable, easily upgradable consumer hardware is ending due to a structural shift driven by data center and AI demand. It describes a “RAM-pocalyp...

Key Points

  • Memory prices are rising due to data center and AI demand, described as a sustained “RAM-pocalypse.”
  • Shortages for components like RAM and SSDs may extend beyond 2028, according to the article.
  • Market consolidation (Micron’s reported exit; Samsung and SK Hynix dominance) may reduce consumer choice and keep prices high.

Should QA Exist

by PretzelFisch

This article examines whether dedicated quality assurance (QA) teams should exist within software engineering organizations. It summarizes arguments for eliminating separate QA—including reduced veloc...

Key Points

  • Arguments exist both against and in favor of dedicated QA teams.
  • AI-enabled automated verification strengthens the case for QA’s value.
  • Engineers typically own unit and integration tests; UI/end-to-end test ownership is debated.

Local Bernstein theory, and lower bounds for Lebesgue constants

by jjgreen

Terence Tao announces a new paper on arXiv introducing local versions of classical Bernstein-type inequalities and applying them to questions in Lagrange interpolation, specifically lower bounds for L...

Key Points

  • Introduces local Bernstein-type inequalities derived from classical methods.
  • Applies these local bounds to obtain lower bounds for Lebesgue constants in Lagrange interpolation.
  • Revisits Bernstein’s classical derivative bounds and exponential type framework.

An unstoppable mushroom is tearing through North American forests

by 1659447091

An Asian-native golden oyster mushroom has escaped cultivation and is now spreading through North American forests and parts of Europe. The species, which grows on dead or dying hardwoods, lives as my...

Key Points

  • Golden oyster mushroom is spreading after escaping cultivation, impacting North America and Europe.
  • Popularized for high yields since the early 2000s, its heavy spore release accelerates spread.
  • RHS warns against outdoor cultivation; UK community bans and conservation efforts are underway.

Understanding the Go Runtime: The Garbage Collector

by melodyogonna

This article explains Go’s garbage collector as implemented in Go 1.26, which introduced the GreenTea GC. It defines the collector’s characteristics—non-moving, concurrent, tri-color, mark-and-sweep—a...

Key Points

  • Go 1.26’s GreenTea GC refines the marking approach while preserving overall GC structure.
  • Go’s GC is non-moving and concurrent, using tri-color mark-and-sweep with brief stop-the-world pauses.
  • The GC cycle includes sweep termination, concurrent marking with write barriers, mark termination, and sweeping.

This picture broke my brain [3B1B video]

by jgwil2

3Blue1Brown has released a 28-minute, 43-second video titled “How (and why) to take a logarithm of an image.” The description frames M.C. Escher’s “Print Gallery” as the artistic starting point and in...

Key Points

  • A 28:43 3Blue1Brown video explores taking a logarithm of an image.
  • Escher’s “Print Gallery” is used to frame a tour of complex analysis.
  • The description promotes 3b1b.co/talent and supporter early access.

Hong Kong Police Can Now Demand Phone Passwords Under New Security Rules

by vidyesh

Hong Kong has expanded police powers under its National Security Law to compel access to encrypted devices without a warrant. Effective March 23, 2026, officers can require “any password or other decr...

Key Points

  • Police can compel decryption of devices without a warrant in Hong Kong.
  • Refusal risks up to one year in jail and HK$100,000 fine; false credentials risk three years.
  • Rules effective March 23, 2026, with expanded scope to anyone with access details.

Gzip decompression in 250 lines of Rust

by vismit2000

The article details a compact gzip decompressor written in roughly 250 lines of Rust, created to deepen understanding of compression. It frames gzip as a thin wrapper over the DEFLATE algorithm and co...

Key Points

  • Minimal gzip decompressor implemented in ~250 lines of Rust
  • Parses essential gzip header fields and focuses on DEFLATE blocks
  • Explains LSB-first bit reading and handling of stored/fixed/dynamic blocks

Author of Red Mars calls 'bullshit' on emigrating to the planet

by Brajeshwar

Kim Stanley Robinson, author of Red Mars, reflects on his novel as New Scientist’s Book Club reads it in April. Written between 1989 and 1991 and set around 2026, the book is used to illustrate how sc...

Key Points

  • Science fiction often reflects its own era more than the future.
  • Red Mars aligns with certain 2020s geopolitical and environmental themes.
  • Mars became a prime terraforming candidate following Mariner and Viking data.

Iran-linked hackers claim breach of FBI director's personal email

by m-hodges

A group identifying itself as the Handala Hack Team says it breached FBI Director Kash Patel’s personal Gmail account, publishing personal photographs and a sample of more than 300 emails dated betwee...

Key Points

  • Handala claims breach of Kash Patel’s personal Gmail; photos and sample emails published.
  • FBI confirms targeting, says data is historical and contains no government information.
  • Reuters cannot authenticate the emails; Patel’s address appears in prior breach datasets.

Anatomy of the .claude/ Folder

by freedomben

This guide details how Claude Code’s configuration is organized and how to use it effectively. It explains that there are two .claude directories: a project-level folder, which is committed to git and...

Key Points

  • Two .claude directories: project-level (team, versioned) and global (personal, local state).
  • CLAUDE.md guides Claude’s behavior; combined across project, global, and subdirectory scopes.
  • CLAUDE.local.md supports personal overrides; keep CLAUDE.md concise (<200 lines).

Anthropic's Claude loses its >99% uptime in Q1 2026

by timpera

A brief social post asserts that Anthropic’s Claude service fell below the historically implied >99% reliability threshold in Q1 2026. The author characterizes current availability as “one nine of upt...

Key Points

  • Post claims Claude’s uptime fell below 99% in Q1 2026.
  • The uptime is described as “one nine,” implying a notable drop.
  • No official metrics or technical details are provided in the article content.

Rank the 50 best Apple products

by dqieu

The article presents an interactive project inviting readers to rank the best Apple products from the past 50 years through simple pairwise choices. Instead of asking individuals to sort a long list, ...

Key Points

  • Readers vote on randomly paired Apple products to build a community ranking.
  • A modified Elo system updates scores after each matchup, scaling changes by opponent strength.
  • Tweaks dampen upset effects to better suit subjective user preferences.

People inside Microsoft are fighting to drop mandatory Microsoft Account

by breve

Microsoft has outlined a broad set of Windows 11 improvements aimed at addressing user frustrations such as sluggish performance, unreliable updates, AI-related bloat, and intrusive advertising. Howev...

Key Points

  • Windows 11 will keep requiring Microsoft account sign-in during setup despite other improvements.
  • Microsoft VP Scott Hanselman says he dislikes the requirement and is working on possible changes.
  • No committed plan exists; any change hinges on internal policy decisions rather than technical barriers.

Rising Air-Conditioning Use Intensifies Global Warming

by PaulHoule

A research study assesses how growing air-conditioning (AC) use will affect greenhouse-gas emissions and global warming under five climate–socioeconomic scenarios. It separates climate-driven cooling ...

Key Points

  • SSP245 projects 113.3 GtCO2eq from AC (2010–2050), adding ~0.05 °C warming.
  • Socio-economic factors outweigh climate-driven demand in AC-related emissions.
  • Even under SSP119, income-driven AC growth adds 14–146 GtCO2eq and up to 0.05 °C by 2050.

EMachines never obsolete PCs: More than a meme

by zdw

This article revisits eMachines’ late-1990s “Never Obsolete” campaign, explaining why it became a long-lived meme. eMachines entered the PC market in Q3 1998 with aggressive pricing—$399 at entry and ...

Key Points

  • eMachines disrupted late-1990s PC pricing with $399–$699 tiers and sold 2 million PCs in 1999.
  • “Never Obsolete” meant a $99 upgrade after two years, contingent on eMachines’ internet service.
  • AOL sponsorship placed AOL branding on the same machines, alongside eMachines’ offer.

Special desk for people who work at home with a cat

by zdw

Bibilab, a Japanese furniture and homewares company, has launched the Neko House Desk, a home office desk designed specifically for people who share their workspace with pet cats. The desk incorporate...

Key Points

  • Bibilab’s Neko House Desk integrates multiple cat spaces for home office use.
  • Features include a two-tier side compartment with portals and a 20 kg top tier capacity.
  • An under-desk cat area is placed to avoid knee interference and enable lap access.

SimpleX Chat

by Cider9986

SimpleX Chat’s homepage outlines a decentralized, privacy-first messaging platform focused on user ownership of identity, contacts, and groups. It highlights end-to-end encryption and asserts that ser...

Key Points

  • Decentralized messaging with user-owned identity and relationships
  • E2EE with claims that servers cannot see messages or contact graphs
  • Roadmap: scale (2025), vouchers for sustainability (2026), growth tools (2027)

The Last Gasps of the Rent Seeking Class

by surprisetalk

This article contends that decades of U.S. business practices have relied on engineered friction—procedures, call centers, and time sinks—to extract value by exploiting consumers’ limited time and pat...

Key Points

  • The author claims AI is dismantling friction-based, rent-seeking business models.
  • Five tiers of the AI supply chain are identified, with models as the key battleground.
  • An Anthropic post on distillation risks and industry coordination is cited.

Apple says no one using Lockdown Mode has been hacked with spyware

by jbegley

Apple reports no known cases of successful mercenary spyware compromises on devices with Lockdown Mode enabled since the feature’s 2022 launch. Lockdown Mode is an opt-in setting that hardens iPhones ...

Key Points

  • Apple reports no known successful spyware attacks on Lockdown Mode-enabled devices.
  • Independent labs (Amnesty, Citizen Lab) observed Lockdown Mode blocking Pegasus and Predator attempts.
  • Lockdown Mode reduces attack surface by disabling attachment types and restricting WebKit.

Sand from Different Beaches in the World

by RAAx707

This feature offers a close-up exploration of sands from beaches around the world, showing how each grain’s microscopic characteristics reflect its geological and biological origins. It defines sand b...

Key Points

  • Sand grains are 0.02–2 mm and form from weathered rocks and marine organisms.
  • Interactive 3D sand globe is available via Google Earth.
  • Each grain is unique; beach sands total roughly 5 sextillion grains globally.

Meow.camera

by surprisetalk

meow.camera is a web-based alternative viewer that surfaces feeder camera streams from the Hello Street Cat/JieMao ecosystem. The page clarifies the project is independent and unaffiliated with the or...

Key Points

  • meow.camera aggregates Hello Street Cat/JieMao feeder streams and is unaffiliated with the original developer.
  • Feeder cameras activate only when a viewer is watching via the Hello Street Cat app.
  • Configurable settings include theme, screenshot behavior, sound, preferred mobile app, and ffmpeg.wasm threading.

Iran-linked hackers have breached FBI Director Kash Patel's personal emails

by vrganj

Hackers linked to the Iranian government accessed FBI Director Kash Patel’s personal email account, publishing photos and documents they said came from his inbox. A source confirmed the authenticity o...

Key Points

  • Iran-linked hackers breached Kash Patel’s personal email, not FBI systems.
  • Stolen materials span 2011–2022; authenticity of images confirmed by a source.
  • DOJ links the group to Iran’s intelligence ministry and has seized some of their infrastructure.

I am leaving the AI party after one drink

by speckx

A developer recounts trying Claude Code for two weeks to accelerate a long-delayed app project. They used the tool for ideation, feature prioritization, marketing copy, tech stack suggestions, and imp...

Key Points

  • AI sped up repetitive setup tasks but produced CSS/responsive issues.
  • Stack suggestions (e.g., Tailwind, Vercel) conflicted with author’s preferences.
  • Tool uninstalled after two weeks to avoid dependency and preserve learning.

AI got the blame for the Iran school bombing. The truth is more worrying

by cptroot

The article analyzes a deadly U.S. strike on a primary school in Minab, Iran, during Operation Epic Fury, which killed between 175 and 180 people. It challenges early media and political focus on Anth...

Key Points

  • Targeting was performed by Maven, not Anthropic’s Claude.
  • A DIA database misclassification contributed directly to the strike on a school.
  • Public focus on LLMs obscured underlying bureaucratic and infrastructural failures.

Netflix raises prices for every subscription tier by up to 12.5 percent

by pseudolus

Netflix has implemented a price increase across all its U.S. subscription tiers. The ad-supported plan now costs $9 per month (up from $8), the Standard ad-free plan is $20 (up from $18), and the Prem...

Key Points

  • All Netflix tiers increased: $9 ad-supported, $20 Standard ad-free, $27 Premium ad-free.
  • Netflix cites service/content improvements; recent updates include HDR10+ and app revamps.
  • 2025 net income reached ~$11B; pricing, membership growth, and ads highlighted as 2026 drivers.

21,864 Yugoslavian .yu domains

by freediver

The post documents the release of a CSV containing 21,864 domains from the former Yugoslav .yu top-level domain, which was decommissioned in 2010. Inspired by an interview with Kaloyan Kolev and build...

Key Points

  • CSV released with 21,864 former .yu domains.
  • CDX API blocks wildcard *.yu; subdomain queries are possible but slow.
  • Archived “www.yu” domain listings and wget enabled broader reconstruction.

Building FireStriker: Making Civic Tech Free

by noleary

The article introduces FireStriker, a project initiated by a software engineer to provide free civic technology for grassroots organizations. The author’s motivation stems from a local experience in E...

Key Points

  • Local delays in El Paso exposed the civic “notification problem.”
  • Enterprise legislative tools are powerful but prohibitively expensive for grassroots groups.
  • FireStriker is being built to offer free, integrated civic tech for timely legislative awareness and organizing.

Show HN: Sup AI, a confidence-weighted ensemble (52.15% on Humanity's Last Exam)

by supai

Sup AI introduced a confidence-weighted ensemble that orchestrates 337 models and reports leading results on Humanity’s Last Exam (HLE), a 2,500-question benchmark spanning 100+ subjects. In a test on...

Key Points

  • 52.15% on HLE via a 337-model confidence-weighted ensemble, vs ~45% for the best single model.
  • Token-level logprob scoring, disagreement detection, and targeted retries to build higher-confidence answers.
  • Parallel, fused retrieval (keyword, embedding, visual) with 10 GB uploads and transparent sources.

Don't Wait for Claude

by jeapostrophe

This article addresses a common inefficiency when working with Claude: the idle time spent waiting during multi-minute runs. It contends that while prompt optimization matters, the larger bottleneck i...

Key Points

  • Externalize state to enable efficient parallel session management.
  • Rely on notifications to re-engage immediately when runs complete.
  • Compile review annotations directly into the next instruction to speed iteration.

Can It Resolve Doom? Game Engine in 2k DNS Records

by Einenlum

A proof-of-concept by Adam Rice shows that the classic game DOOM can be stored and executed entirely using DNS TXT records. By Base64-encoding and chunking the DOOM engine binaries and WAD, the data i...

Key Points

  • DOOM is delivered and executed solely via DNS TXT records using Base64-encoded chunks.
  • A PowerShell loader reconstructs and runs modified .NET assemblies entirely in memory.
  • The technique exposes DNS’s potential for covert payload delivery and forensic evasion, with clear scalability limits.

PyPI package telnyx has been compromised in yet another supply chain attack

by overflowy

Two malicious versions of the official Telnyx Python SDK were published to PyPI at 03:51 UTC on March 27, extending a multi-ecosystem supply chain campaign attributed to TeamPCP. The injected code in ...

Key Points

  • Telnyx PyPI package compromised; import-time malware leveraging WAV steganography
  • Campaign spans Trivy, npm (CanisterWorm), Checkmarx assets, and LiteLLM
  • Data exfiltration uses AES-256-CBC and RSA-4096; rapid registry mitigations observed

We broke 92% of SHA-256 – you should start to migrate from it

by logicallee

A research post reports a major advance against the SHA-256 hash function, claiming a “92%” break across its full 64 rounds under a new metric. The authors say they achieved a collision that persists ...

Key Points

  • Claimed 64‑round SHA‑256 collision under a new metric (sr=59; 43/48 schedule equations).
  • Method combines new theorems, low-level C, and SAT solving; reproduction files are provided.
  • Authors recommend migrating from SHA‑256 and discuss speculative Bitcoin mining implications.

Byte Magazine Archive 1975 to 1995

by oldnetguy

This archive page catalogs Byte magazine issues spanning 1975 to 1995, introducing Byte as a pioneering and influential microcomputer publication from the early personal computing era. It notes that B...

Key Points

  • Archive spans Byte magazine issues from 1975–1995, organized by month/year.
  • Highlights themed editions (IBM, Macintosh, Windows, Portable Computing, Outlook).
  • Positions Byte as an influential early microcomputer magazine launched in 1975.

Vibe-Coded Ext4 for OpenBSD

by corbet

An LLM-generated implementation of the Linux ext4 filesystem was proposed for inclusion in OpenBSD, intensifying ongoing debates about AI-produced code in open-source projects. Submitted by Thomas de ...

Key Points

  • AI-generated ext4 driver for OpenBSD raises GPL derivation and licensing concerns.
  • OpenBSD leaders say unclear copyright on LLM outputs blocks redistribution.
  • Submission claims functionality (read/write, e2fsck pass) but lacks journaling.

Telnyx Python SDK: Supply Chain Security Notice

by KomoD

Telnyx disclosed a supply chain security incident affecting its Python SDK distributed via PyPI. Two malicious versions (4.87.1 and 4.87.2) were briefly available on March 27, 2026 and have been remov...

Key Points

  • Compromised telnyx versions: 4.87.1 and 4.87.2 on PyPI
  • Impact limited to PyPI; Telnyx platform/APIs unaffected
  • Immediate actions: downgrade to 4.87.0, rotate secrets, audit pipelines and outbound connections

Make macOS consistently bad (unironically)

by speckx

A developer-focused blog post examines inconsistent window corner radii in macOS 26 and proposes a practical workaround aimed at improving visual consistency without compromising system security. Inst...

Key Points

  • Objective‑C .dylib overrides NSThemeFrame methods to fix corner radii at 23 points.
  • Applies only to third‑party GUI apps, avoiding SIP-protected system apps.
  • Builds with clang for arm64e and x86_64 and links AppKit.

Nashville library launches Memory Lab for digitizing home movies

by toomuchtodo

Nashville Public Library is debuting a free, self-service Memory Lab at its Donelson branch to help individuals digitize analog media such as VHS tapes and Polaroid photos. Launching Monday, the lab o...

Key Points

  • Free, self-service Memory Lab launches at Nashville Public Library’s Donelson branch.
  • Four-hour sessions are bookable online with staff assistance; bring an external hard drive.
  • Open to anyone, expanding on a prior pilot and aligning with similar programs in other cities.

Ask HN: Founders of estonian e-businesses – is it worth it?

by udl

A founder shares a practical assessment of forming an Estonian e‑residency company versus a German GmbH. The post credits Estonia with markedly simpler, faster, fully online incorporation, including p...

Key Points

  • Estonian e‑residency enables faster, simpler, fully online company setup.
  • Banking is the main hurdle; many EU banks require presence and Wise Business has limits.
  • Tax residency drives personal taxes; Estonia’s 0% on retained earnings may not help salaried residents elsewhere.

Telnyx package compromised on PyPI

by ramimac

Telnyx disclosed that two malicious versions of its Python SDK (4.87.1 and 4.87.2) were briefly published to the Python Package Index (PyPI) as part of a broader supply chain campaign also touching Tr...

Key Points

  • Malicious telnyx 4.87.1/4.87.2 on PyPI; platform and APIs not breached.
  • Affected window: 03:51–10:13 UTC on March 27, 2026; unpinned installs at risk.
  • Remediation: downgrade to 4.87.0, rotate secrets, audit for IOCs (C2 83.142.209.203:8080, WAV steganography).

Some uncomfortable truths about AI coding agents

by borealis-dev

This article critiques the growing use of LLM-based AI coding agents in software development. While recognizing their impressive capabilities and the broader industry enthusiasm—including examples fro...

Key Points

  • Author rejects using LLM-based coding agents for production code.
  • Four cited concerns: skill atrophy, cost dynamics, prompt injection, and copyright/licensing.
  • Industry adoption examples include Notion, Spotify, and Stripe.

Show HN: Open-Source Animal Crossing–Style UI for Claude Code Agents

by ZeidJ

Outworked is an open-source desktop application that turns Claude into a team of role-based AI agents presented in a pixel-office interface on Mac. Users configure agents by name, role, personality, m...

Key Points

  • Open-source desktop app uses Claude Code to run multi-agent workflows with a pixel-office UI on Mac.
  • Orchestrator breaks goals into subtasks for agents that handle coding, web browsing, messaging, scheduling, and project management.
  • Integrations include GitHub/Linear via MCP, PostgreSQL queries, Slack/iMessage messaging, and LinkedIn posting.

Solving Semantle with the Wrong Embeddings

by evakhoury

The article introduces an alternative solver for the word game Semantle that avoids relying on the game’s exact embedding model or cosine similarity values. Inspired by an idea from Daniel Vitek, the ...

Key Points

  • Uses ranking-only information to constrain the target via half-space geometry.
  • Pre-filters guesses by checking against accumulated constraints before submitting.
  • Implemented as an open-source ‘semantle-agnostic’ solver based on a Colab demonstration.

TurboQuant: Building a Sub-Byte KV Cache Quantizer from Paper to Production

by wizzense

This article outlines a practical path from research to deployment for sub-byte KV cache quantization in large language model inference. It starts by framing KV cache memory as the primary bottleneck ...

Key Points

  • Sub-byte KV cache quantization via TurboQuant enables aggressive memory reduction without calibration.
  • aither-kvcache (PyPI) implements the method with validated Lloyd-Max codebooks and vLLM integration.
  • Community prototypes (llama.cpp, PyTorch, Triton) appeared rapidly, indicating practical feasibility.

Capability-Based Security for Redox: Namespace and CWD as Capabilities

by ejplatzer

Redox OS outlines work on bringing capability-based security to the system, with funding from NLnet’s NGI Zero Commons. The post introduces the plan to move namespace management into userspace and tre...

Key Points

  • Redox is adopting capability-based security with userspace namespace management and CWD-as-capability.
  • Schemes provide userspace services accessed via scheme-rooted paths; namespaces gate scheme visibility.
  • relibc and redox-rt deliver POSIX compatibility on Redox and manage FD-based resources.

ISBN Visualization – Annas Archive

by Cider9986

Annas Archive offers an interactive ISBN visualization centered on a “Rarity data” preset, enabling users to gauge the scarcity of books by counting how many libraries hold them. The interface is desi...

Key Points

  • Rarity data preset highlights book scarcity by library holdings count.
  • Interactive map-style navigation with drag/zoom, tap for details, and right-click-drag for stats.
  • Search supported via Google Books integration and direct ISBN entry.

Velxio 2.0 – Emulate Arduino, ESP32, and Raspberry Pi 3 in the Browser

by dmcrespo

Velxio 2.0 is a local, open-source emulator that brings embedded development into the browser. It supports 19 boards across five CPU architectures, including AVR8-based Arduinos, RP2040 (Raspberry Pi ...

Key Points

  • Supports 19 boards across 5 CPU architectures with real CPU emulation in-browser
  • Combines client-side JS cores and backend QEMU for broad board coverage
  • Self-hostable via Docker; no installation needed to try at velxio.dev

Slovenia becomes first EU country to introduce fuel rationing

by measurablefunc

Slovenia has enacted the European Union’s first nationwide fuel rationing in response to recent energy market turbulence and cross‑border demand fueled by lower regulated prices. The government set da...

Key Points

  • Slovenia sets daily fuel purchase caps: 50L for private drivers, 200L for businesses/farmers.
  • Rationing targets cross-border “fuel tourism” driven by price gaps with Austria; enforcement by station staff.
  • MOL already imposed a 30L limit; Slovenia’s regulated prices to rise Tuesday from €1.47/€1.53 caps.

LG's new 1Hz display is the secret behind a new laptop's battery life

by robotnikman

LG Display has introduced an “Oxide 1Hz” laptop panel capable of dynamically varying refresh rates from 1Hz to 120Hz to reduce power consumption and extend battery life. The company claims up to 48% s...

Key Points

  • LG’s “Oxide 1Hz” panel supports 1Hz–120Hz refresh with up to 48% power savings.
  • Dell has received the panel for XPS models; LG plans 1Hz OLED mass production in 2027.
  • Open questions remain about transition speed and potential visual artifacts.

The Future of SCIP

by jdorfman

Sourcegraph is moving SCIP—the language-agnostic source code indexing protocol behind its code navigation features—into an independent, community-governed project as it nears its fourth anniversary. T...

Key Points

  • SCIP moves to independent, open governance with a public SEP process.
  • A cross-company Core Steering Committee (Meta, Uber, Sourcegraph) will guide the protocol.
  • Community contributions are encouraged via governance docs, GitHub Issues, and Discord.

DOJ confirms FBI Director Kash Patel's personal email was hacked

by sebastian_z

The US Department of Justice confirmed to Reuters that hackers linked to Iran breached FBI Director Kash Patel’s personal Gmail account. The Handala Hack Team claimed responsibility and posted taunts ...

Key Points

  • DOJ confirmed the breach of Kash Patel’s personal Gmail to Reuters.
  • Handala Hack Team claimed responsibility in retaliation for DOJ domain seizures.
  • Reuters could not verify leaked emails; DOJ said they appeared authentic.

Automatically generate all 3D print files for organizing a drawer

by woktalk

The article outlines a tool designed to create 3D-printable organizers for drawers using the Gridfinity modular system. Users are instructed to describe their drawer and share its dimensions, after wh...

Key Points

  • Generates Gridfinity-compatible 3D print files based on user-provided dimensions.
  • Accepts both imperial and metric measurements for flexibility.
  • Examples show varied storage needs like pens, batteries, screws, bolts, and art supplies.

Show HN: TwitchRoulette – Find live streamers who need views the most

by ellg

TwitchRoulette is introduced as a discovery tool designed to connect audiences with live streamers who currently have little to no viewers. The service highlights streams with roughly 0–2 viewers, pos...

Key Points

  • A tool to discover live streams with around 0–2 viewers.
  • Aims to direct attention to creators who need views most.
  • Focuses on real-time visibility for under-watched streamers.

Why are executives enamored with AI, but ICs aren't?

by johnjwang

This article examines why AI often appeals more to executives than to individual contributors (ICs). It proposes that executives operate in complex, non-deterministic environments and are accustomed t...

Key Points

  • Executives manage non-deterministic systems and see AI as predictable at a systemic level.
  • LLMs have known failure modes and a defined capability envelope, appealing to leaders.
  • ICs prioritize deterministic correctness, making AI’s variability a concern in their workflows.

Matlab Alternatives 2026: Benchmarks, GPU, Browser and Compatibility Compared

by bauta-steen

This 2026 update reviews free alternatives to MATLAB—RunMat, Octave, Julia, and Python—framed by cost and licensing changes at MathWorks that push engineers to seek options. It notes that none of thes...

Key Points

  • Alternatives focus on script-based workflows; no Simulink equivalent.
  • RunMat emphasizes GPU-first visualization with browser and native backends.
  • Octave 11 and NumPy 2.0/Julia 1.12 deliver notable performance and usability updates.

Improving Composer through real-time RL

by ingve

Cursor presents a “real-time RL” framework to continuously improve its coding model, Composer, by training directly on live production data. Rather than relying solely on simulated environments, the t...

Key Points

  • Real-time RL trains Composer using live user interactions and inference tokens.
  • A five-hour cycle enables frequent, on-policy checkpoint updates with evals like CursorBench.
  • The approach reduces train-test mismatch by relying on real users instead of simulations.

Fets and Crosses: Tic-Tac-Toe built from 2458 discrete transistors

by voxadam

This project implements a complete Tic-Tac-Toe (Noughts and Crosses) game using 2,458 discrete transistors. Initially prototyped in a graphical logic simulator, the design evolved from a ROM-based mov...

Key Points

  • Built from 2,458 discrete transistors with a combinational logic engine enabling perfect play.
  • Two-layer KiCad-designed PCBs use hierarchical cells, replicate-layout, and Manhattan routing.
  • Final boards assembled professionally after hand-assembly trials revealed warpage-related failures.

Colorado House passes bill to limit surveillance pricing and wage setting

by jprs

Colorado’s House passed HB26-1210, a bill aimed at curbing “surveillance pricing” and wage-setting practices that rely on processing individuals’ personal data through algorithms. Approved 39–24, the ...

Key Points

  • HB26-1210 bans using personal data and algorithms to set individualized prices or wages.
  • Exemptions cover loyalty programs, group discounts, and supply-and-demand pricing.
  • The bill passed 39–24 in the Colorado House and moves to the state Senate.

Don't YOLO your file system

by mazieres

jai is a lightweight Linux sandbox designed to safely run AI agents and untrusted commands without the overhead of containers or virtual machines. It targets a common risk scenario: users giving tools...

Key Points

  • One-command Linux sandbox that isolates home directory via overlay or private home
  • Multiple modes with differing confidentiality, integrity, and NFS support
  • Free software from Stanford research groups; not a replacement for hardened containers/VMs

Type Construction and Cycle Detection

by commotionfever

The article explains a Go 1.26 refinement to the language’s type checker, focusing on how types are constructed and validated during compilation. Go source code is first parsed into an abstract syntax...

Key Points

  • Go 1.26 refines the type checker to reduce corner cases without user-facing changes.
  • The checker constructs internal type representations from the AST and validates types and operations.
  • Completeness of types is essential; predeclared types help finalize structures like pointers swiftly.

Brave Browser unable to block certain ads due to Rust language limitations

by Onavo

This article outlines how Brave Browser’s built-in adblocker handles popups and why it struggles to match some of uBlock’s advanced capabilities. It explains that Brave can block scripts outright or d...

Key Points

  • Brave uses script-blocking and scriptlets like `##+js(nowoif)` and `close-window` to control popup behavior.
  • CSP-based rules with sandboxing can further restrict popups while still allowing necessary site functionality.
  • Rust’s lack of regex lookaround support limits Brave’s ability to replicate some of uBlock’s advanced popup filters.

Fear and denial in Silicon Valley over social media addiction trial

by 1659447091

A Los Angeles jury ruled that Meta and Google’s YouTube are liable for designing platforms intended to be addictive, determining that these designs harmed a 20-year-old plaintiff known as Kaley. The j...

Key Points

  • LA jury finds Meta and YouTube liable for harm from addictive platform design, awarding $6 million.
  • Meta and Google to appeal; both defend platform safety and contest characterizations.
  • Further bellwether trials ahead for TikTok and Snap will test the same legal theory.

Sports Betting Is Everywhere, Especially on Credit Reports

by m-hodges

A staff report assesses how the post-2018 spread of mobile sports betting across more than thirty U.S. states affects spending and consumer credit. Using anonymized transaction-level data aggregated a...

Key Points

  • Legalization boosts sportsbook deposits ~10x, with 15% spillovers into nearby illegal areas.
  • Per-bettor deposits have leveled since 2022; growth comes from more participants.
  • Credit delinquency rises by ~0.3 percentage points despite only ~3% uptake.

Tell HN: Firefox is being slowly deprecated by the industry

by gurjeet

A user reports two recent instances of web platforms enforcing browser restrictions and frames the issue as impacting Firefox users. The first case involves Apple Business Manager (business.apple.com)...

Key Points

  • Apple Business Manager shows an 'unsupported browser' notice and suggests switching to a supported browser.
  • Alma’s platform states it supports only Google Chrome and directs users to use Chrome for access.
  • The post seeks additional examples of services with similar browser restrictions.

The Interactive Lost Place Map

by bilegeek

The Lost Place Map is presented as an interactive, global database designed for urban explorers seeking abandoned locations such as bunkers, factories, and historic structures. It aims to preserve the...

Key Points

  • Global, interactive database for abandoned places with precise coordinates and categories.
  • Strong emphasis on safety and preparation, including a lighting-focused gear checklist.
  • Community-driven updates with photos, status reports, and user account features for saving and tracking.

The Bee That Everyone Wants to Save

by nivethan

This article argues that Western honeybees, while impressive in number and utility, are domesticated livestock rather than wildlife in need of rescue. Using a local example of 80 nearby hives totaling...

Key Points

  • Honeybees are domesticated livestock, not wildlife in need of rescue.
  • Urban beekeeping has grown despite honeybees not being endangered; wild pollinators need attention.
  • High honeybee densities can harm wild pollinators and disrupt ecosystems.

.apks are just .zips; semi-legally hacking software for orphaned hardware [video]

by abadar

A video by creator f4mi explores the relationship between Android application packages (APKs) and the ZIP file format, highlighting that APKs are ZIP archives and can be inspected by renaming the file...

Key Points

  • APKs are ZIP archives and can be inspected by renaming .apk to .zip.
  • The topic is framed around supporting older or orphaned hardware.
  • The video includes a sponsor plug for the REDMAGIC Air 11 gaming phone.
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.