AI Summarized Hacker News

Front-page articles summarized hourly.

Remotely Unlocking Electric Scooters

An ethical hacker shows how a scooter operator’s backend can be hijacked via identity and privilege flaws, not exotic bugs. By enumerating subdomains and the public WordPress API, he locates an admin identity, brute-forces login due to no rate limiting, and obtains a long-lived admin JWT. With that session, the operations panel exposes fleet data, IoT devices, users, and finances, and can issue unlock/lock commands to scooters. A single compromised credential could remotely unlock a scooter, enabling fraud, data exposure, or physical risk. Root causes: weak authentication, no 2FA, and no token revocation.

Using an old Android phone as a music player

An article about using an old Android phone as a dedicated music player. Benefits: longer battery life for other devices and distraction-free listening. Good players are hard to find; high-end brands are pricey, cheap ones tinny, and iPods lack FLAC and scrobbling. The author debloated the device with ADB, installed Poweramp, Panoscrobbler, and Niagara Launcher, and uses it for music; files come from Soulseek/Nicotine+ and Beets tagging. Syncthing failed, so manual USB transfer is used. They praise old Android phones and Universal Android Debloater; it beats forum-scouring. Conclusion: old Android phones work well as music players and save landfills.

Church of the TigerBeetle: A Look at Tech Evangelism

At Systems Distributed 2026 in Boston, the author critiqued TigerBeetle’s evangelistic branding—“The Church of the TigerBeetle”—and its overconfident, faith-based claims about mission-critical software and large transaction volumes. He calls this religious-style persuasion distracting and harmful, arguing for steelman analyses, receipts, and evidence over hype. Drawing parallels to Haskell evangelism, he warns that faith-based conviction suppresses dissent and hampers rigorous evaluation. He insists conferences should empower attendees with verifiable information to apply ideas, not inspire blind belief, and praises a culture that defends claims with evidence.

Quick impressions: A week of using Codex more than Claude

Personal impressions after a week using Codex more than Claude. Claude started with broader skills; Codex can match them by transforming Claude’s skills. In rush, Claude felt more familiar; Codex is more technical and restrained. Codex makes leaner changes with fewer comments, while Claude’s approach is richer but more complex. Codex changes faster but PRs still require full testing; Claude handles more abstractions and types. Codex occasionally mismanages Git operations; Jira/Atlassian flow is rough for Codex, while Claude adapts better. Overall, Claude is proactive but overreaches; Codex is focused and controllable.

Death to the Self-Playing Game

Brendan Caldwell argues that self-playing games like Vampire Survivors, Loop Hero, and BallXPit replace player input with automated progress, creating a dopamine-fueled treadmill. They automate core verbs (shooting, movement), favor macro decisions (upgrades, metagame) over micro-decisions, and skirt the gamefeel. The piece warns this trend risks ‘idlefication’ of genres, reducing skill and tactile feedback, and likens it to Candy Box without humor. He defends traditional play where micro-decisions matter (e.g., Devil Daggers, Tetris) and critiques designers who outsource play to automation.

Tumble Forth – from assembly to OS with C compiler

Virgil Dupras introduces a multi-article series guiding seasoned web developers into low-level programming via story-driven arcs. Starting from bare metal on PC, the project builds a Forth from scratch, then transitions to Dusk OS and a partial C compiler. Aimed at competent programmers new to low-level topics, the series promises corny jokes each episode and a step-by-step path to broader computing understanding. Questions: [email protected]. Contents preview: Liberation through bare metal, One sector to rule them all, Words in the shell, From Dusk Till C, and more.

Bringing the cybersecurity capabilities of Claude Mythos 5 to more defenders

Anthropic announces Claude Mythos 5 is now available in Claude Security and will be integrated into partner cyber-defense tools, expanding frontier-model defense to more defenders with safeguards. Claude Security can scan codebases using Mythos 5 and propose patches; patches require human review. Enterprise admins can enable it in the admin console. The Defender Advantage Fund will provide $35 million in Claude credits to bolster open-source security. The Cyber Verification Program will expand to Mythos-class access for vetted defenders. Anthropic will continue integrating Mythos into existing security products and invites partner interest.

People of ACM – Russ Cox

ACM.org access is blocked by Cloudflare’s security service after triggering a protection rule. To resolve, contact the site owner, explain what you were doing, and provide the Cloudflare Ray ID (and your IP) shown on the page.

Decayfmt – a file format that corrupts itself a little every time you open it

decayfmt is a Rust-backed experimental file format in which every open permanently corrupts the file on disk. Each file carries an instability value x in its extension (.idcy<x> for images, .tdcy<x> for text); higher x means faster decay. Opening corrupts bytes in place with probability p = 1 − exp(−x/10). The corruption is not encryption and has no recovery without a backup; backups or hex editors can defeat it. Encoding creates a clean decayfmt file; opening degrades it. MIT licensed; install via cargo or binaries.

LLMs are proof that Unix won

An ode to Unix and its philosophy of small, well‑fitted tools that work together through text streams, rooted in POSIX and GNU. The author delights in Linux for its self‑efficacy and prefers the CLI over GUIs. He argues that large language models embody the Unix ethos by translating natural‑language prompts into shell commands, letting users build powerful workflows without deep tool knowledge. Though LLMs aren’t flawless or small, text remains the universal interface, and, in this view, LLMs prove Unix won.

Galactic Compass 2: now with new augmented reality mode

Matt Webb updates Galactic Compass for iPhone with augmented reality mode and an Apple Watch app. The green arrow, pointing to the Galactic Centre, can be placed in the real world via AR, and the watch shows the arrow with a haptic alignment cue. A new Liquid Glass appearance for iOS 27 is included. He notes the app’s viral backstory, the role of ‘vibe coding’ and AI-assisted learning (quaternions) to solve rotation math, and reflects on ongoing learning in AR development.

A look under our trunk: what's in our compute

Waymo’s Compute is the brain of the Waymo Driver: onboard, real-time, and deterministic. The team co-designs hardware, sensors, and algorithms to meet edge-compute constraints, delivering ultra-low latency from pixels to actuation. The system is rugged, redundant, and built for in-vehicle operation, with a 5nm, purpose-built ASIC that processes raw lidar, radar, and camera data and powers an ML-first architecture with CPUs, GPUs, and accelerators. It now handles 13 high-resolution cameras simultaneously, enabling high-fidelity, low-light perception. Partnerships with AMD, Micron, NVIDIA, Samsung, SanDisk, Socionext, and TSMC scale the platform. More at Hot Chips and careers.

Quantifying the honey bee dance floor

Van Nest et al. define the honey bee waggle dance floor as the intersection of the convex hull of observed dances with a 2-SD confidence ellipse, yielding a bounded region with interpretable metrics: area, centroid (X,Y), major/minor axes, and orientation. Analyzing 7,444 dances from eight colonies in 4- and 8-frame observation hives, the method captured about 91% of dances. The floor typically lies near the entrance but its size and angle shift with hive size, time of day, and season. The framework is robust, data-driven, and adaptable across contexts.

I ran Photoshop on a £0.60 computer chip

An author experiments with running legacy software on tiny, cheap hardware, emulating an old Macintosh on a £0.60 RP2350/Pi setup to run Photoshop and WordPerfect. The exercise highlights a remarkable computing power-to-price ratio and prompts reflections on the minimal viable modern computer: a solar-powered, distraction-free, e-paper device with long life and low power consumption that could handle maps, music, and light browsing in remote areas. They describe hardware options (PicoMiteHDMIUSB, Olimex RP2350pc, Adafruit Fruit Jam), and share setup steps, plus ideas for ports and alternative OSes (Oberon, Plan9, Smalltalk) aligned with solarpunk and permacomputing.

AI boosted homework scores, then exam scores dropped: study

Could not summarize article.

Show HN: Proliferate- open-source, self-hostable Codex for any coding agent

Proliferate is an open-source AI IDE that runs multiple coding agents (Claude Code, Codex, OpenCode, Grok, and others) in parallel within a single workspace. Each task gets an isolated git worktree, with dedicated task branch, terminal, and review state. It supports subagents, integrations (MCPs, skills, Computer Use, Browser Use, custom tools), and recurring/event-driven workflows. The project includes a self-hosted control plane with Docker, AWS, GCP, Azure, Kubernetes, and air-gapped options; deployment via Docker Compose or CloudFormation; desktop configuration; and local dev setups. Requires Rust, Node.js 22+, pnpm; uses AnyHarness runtime and provides Make targets.

Does whispering to agents in docs help?

Experiments show explicit recommendations in docs overwhelm other factors, making agents follow the chosen path; simply labeling content 'For AI agents' does not improve behavior. Agents process docs similarly to humans; the quality of instructions and complete examples matter more than trying to tailor for machines. The author recommends: write explicit, current guidance for all readers, provide end-to-end examples, use evaluations, and offer machine-friendly and human-friendly formats without special agent-only sections.

A self hosted AI software factory

An almost fully self-hosted, sandboxed agentic software factory run on home servers using Coolify, Forgejo, Hermes, Firecrawl and more. The author built an isolated SDLC where an agent (Hermes) autonomously researches, codes, tests, commits, runs CI, and deploys a complete app behind HTTPS, all without cloud bills. Network design uses Tailnet and DNS-01 SSL with Porkbun to avoid public A records; services live under internal subdomains. A single prompt produced a working calorie-tracker app with CI and deployment; CSRF bug fixed automatically. Security tradeoffs acknowledged; next steps: VLAN isolation, credential scoping, automated backups, and approval gates.

Rebuilding our Electron meeting-recording engine in Swift

Circleback rebuilt its Electron recording engine in Swift to escape render-process limits. They moved capture native: ScreenCaptureKit on macOS and OBSKit on Windows, unified by a shared Swift layer. An internal tool, Atomic, auto-bridges Swift @Published properties to React/Jotai atoms, removing glue code and making the UI reactive. macOS uses multi-source capture with clock-drift correction; Windows uses a single graph with fallback. Recordings use fragmented MP4 for crash resilience, stored locally and uploaded when online. The two-month rewrite proves native beats keeping everything in the render process.

Another Better Lower Bound for N=17 Square Packing

An update on s(17) square packing. Building on Green’s 2000 bound (4.4452… ≤ s(17)) and Burns’ earlier improvement, Gustavo Massaccesi reports a new lower bound: s(17) ≥ 4.5058…, giving 4.4452… ≤ s(17) ≤ 4.6756…. The method uses 168 weighted grid points in a 4.5058-side square (29×29 grid) so every placement of 17 unit squares must accumulate weight ≥ 1. Weights are found by linear programming and rounded; a Python verifier and Metapict visuals accompany the post. The result also improves bounds for s(18–20) and suggests non-symmetric variants for future work.

Made by Johno Whitaker using FastHTML