AI Summarized Hacker News
Front-page articles summarized hourly.
WSJ 404 page: the requested page can’t be found. It advises checking the URL and emailing support, and it presents popular articles and latest podcasts from The Wall Street Journal.
HN Comments
ACPI SystemIO conflicts are not firmware bugs. ACPI exposes hardware via Operation Regions and requires serialized access with a mutex to avoid races between ACPI methods and drivers. If a Linux driver accesses the same IO range directly, it can race with ACPI, yielding incorrect values or hardware faults. The kernel warns like “SystemIO range ... conflicts with OpRegion ...” and blocks the driver. The remedy is to use the ACPI-defined interface/driver and let ACPI tables mediate access. Disabling ACPI or blaming firmware is misguided.
HN Comments
Reflective, a San Francisco nonprofit, released the SAI Research Roadmap to map the experiments and infrastructure needed to inform decisions about stratospheric aerosol injection (SAI). It proposes a phased program: foundational simulations and lab work (2–3 years, $30–75M); small outdoor tests releasing 10 tons of sulfur dioxide (4× over two seasons; 4–8 years, $70–150M); larger field tests up to 25,000 tons (4–11 years, $270M–$1.1B, ~66% uncertainty reduction); plus ongoing monitoring if deployed. Total time could be 10–20 years and $370M–$1.4B, depending on coordination. Not advocacy, but aims to inform decisions and invites feedback; raises governance and termination-shock concerns.
HN Comments
An umbrella review of 137 systematic reviews updates ACSM guidance on resistance training (RT) for adults. Compared with no training, RT improves strength, hypertrophy, power, endurance, contraction velocity, gait speed, balance, and function. Key RT prescription findings: strength—heavy loads (≥80% 1RM), full ROM, 2–3 sets, ≥2 sessions/week; hypertrophy—high weekly volume (≥10 sets) and eccentric overload; power—moderate loads (30–70% 1RM), low–moderate volume, Olympic lifts. Many variables (time under tension, rest, periodization) show inconsistent effects. Prioritize progressive overload, individualization, and adherence. RT is safe; elastic bands and home RT are effective. Recommend at least two RT sessions weekly for muscle groups.
HN Comments
The passage is a Google CAPTCHA/traffic-block notice rather than video content. It says JavaScript must be enabled and that Google has detected unusual traffic from the user's network, likely automated requests, bots, malware, or a browser extension. The block will lift once requests stop; solving the CAPTCHA lets continued access. If on a shared network, a different computer may be responsible. It provides the IP address and timestamp and notes the related URL.
HN Comments
Researchers found Android leaks that let apps bypass VPNs and reveal IPs. One leak allows any app to send traffic outside the VPN tunnel; another flaw in the Android network stack lets data escape even when 'Block all connections without VPN' is enabled. No special permissions are needed; fixes require Android system changes. The issue was reported to the Android VRP but reportedly closed; Google action seems unlikely. GrapheneOS is working on a fix. The flaw uses a keep-alive UDP connection offloaded to hardware NAT, letting UDP packets (port 4500) leak. Mitigation uncertain; Mullvad has no plan to implement.
HN Comments
A practical guide to reducing foot sliding in character animation using IK and runtime/on/offline strategies. The author details a two-bone IK approach to place the heel from a toe target, then orients the toe (and toe-end) toward targets, with optional ground collision handling. For runtime foot locking, they combine inertialization to smoothly transition between input motion and a locked ground contact, plus a system to annotate contact times. An offline method treats pelvis/toe locations as constraints in a position-based dynamics pass to minimize sliding across entire clips. Key takeaways: preserve input velocity, emphasize toe locking, and avoid over-constraining hips.
HN Comments
An article reverse-engineers Apple's Neural Engine (ANE) on the M1 to map its architecture. It shows 16 compute cores with 128 FP16 (256 INT8) MAC lanes each (2048 total), forming a fixed-function datapath driven by Task Descriptors rather than a GPU ISA. Each core uses a 32-bit accumulator with saturation and post-MAC activation, plus a 33-entry LUT for tanh-like lookups and fused ReLU/scale. ANE uses three DMAs and per-core KMem with a shared 2 MB L2. Memory bandwidth, not compute, often limits performance, giving a memory-roofline around 162 OP/byte. Transformers shaped the design; workloads are compiled TD streams.
HN Comments
Calif reports WeWorm, the first zero-click worm that spreads through WeChat calls on iOS and Android. In a three-device demo (Android attacker, iPhone 17e victim, Android target), the attacker hijacks a victim’s WeChat and has them call others, spreading rapidly. Exploitation requires no user interaction and the caller must be on the victim’s friend list. The AI-assisted effort produced the RCE and worm in about a week. Tencent mitigated the bug; Calif advocates global AI-enabled defense collaboration and will publish full technical details later.
HN Comments
An approach to fileless ELF execution using the Linux kernel keyring. The ELF payload is stored in a kernel key (type 'user') attached to the session keyring via add_key, kept in slab memory, and retrieved with keyctl READ into an anonymous user-space buffer. After revoking the key, the loader maps the ELF’s PT_LOAD segments directly into memory with mmap MAP_FIXED_NOREPLACE, zeros BSS, builds a minimal stack, and jumps to the entry point—no execve, no FD, no VFS inode. The payload is fetched over HTTPS and never written to disk; only the loader remains on disk.
HN Comments
AgentGuard is a Linux eBPF LSM that enforces coding-agent policies at the kernel, running the agent as the invoking user and loading YAML policies from policies/default.yaml. Its starter rules block credentials (.env, id_rsa), destructive argv (rm, dd), and non-allowlisted egress; a denied openat, execve, or connect returns EPERM. Hooks may provide feedback, but the LSM path is the enforcement, not the prompt. It is not a replacement for sandboxes and requires CAP_BPF to load; child processes inherit the LSM and the policy is versioned in Git. Fail closed, with policy in git.
HN Comments
On Sept. 11, 2026, the Clay Mathematics Institute announced that the Navier–Stokes Millennium Prize Problem—concerning existence and smoothness of 3D Navier–Stokes solutions—appears to have been settled. The announcement reiterates that the Millennium Problems, unveiled in 2000 with $1 million prizes, aim to elevate public understanding, emphasize deep, long-term work, and recognize historic achievements. It notes breakthroughs in related fields have raised anticipation and that new technologies accelerate research. CMI welcomes the apparent settlement and expects further analysis to yield new insights; prize rules will govern credit and updates will follow.
HN Comments
Stephanie Stimac explains how to design for foldables using CSS, highlighting two media queries: horizontal-viewport-segments and vertical-viewport-segments, which target book-like side-by-side and laptop-like stacked layouts. She introduces environment variables (viewport-segment-width/height/top/left/bottom/right) to obtain each segment's geometry and demonstrates using them in CSS Grid, e.g., grid-template-columns: env(viewport-segment-width 0 0), 1fr for two displays. She discusses when to enable a dual-screen mode, noting foldables' growing adoption (over 21M shipped in 2023) and browser support: Edge currently, Chrome lacking (flags available). The piece is an overview and points to an in-depth Smashing Magazine article.
HN Comments
Usenet-Rewind is a research archive of Usenet newsgroup posts from 1981 to the present, preserving early internet discussions across tech support, science, hobbies, entertainment, and history. It offers search and browse across all groups, with over 1 billion messages and retention through 2026, operated by Erie Data Systems, LLC. The site warns when leaving for external links.
HN Comments
Google Search now uses /goto links that hide the destination behind a redirect. The /goto URL returns a Location header with the real URL; the blob in the URL is not a plain-encoded target and cannot be decoded offline. This shift, visible since Aug 2026 especially in logged-out/private sessions, aims to deter automated SERP scraping by forcing a Google-backed lookup rather than letting crawlers parse plain links. The old /url format is different. Autom updated its Google Search integration to resolve /goto by reading the Location header and return the URL in API responses, preserving existing integrations.
HN Comments
Minitap found Google’s Artemis repo reused their open-source mobile-use code and prompts without attribution, including earlier author names that were removed via a force-push. They argue for proper attribution under Apache 2.0 and published the comparisons and timeline. They tried to get their benchmark results on the AndroidWorld leaderboard with no response. They’ve contacted Google, expressing disappointment in attribution and open-source culture; Artemis today is closed-source and very different.
HN Comments
Useful Code Comments advocates a simple heuristic: never tell me what the code does, sometimes tell me why a choice was made, and always tell me why not. Real-world examples show that dull comments restate code, while better ones justify design decisions (e.g., no DB index on isActive necessitates filtering on the app side) and explain why not to take the obvious fix. Never leave “compostable” comments aimed at LLMs; they waste time and offer no enduring signal. The goal is to document intent for future reviewers.
HN Comments
Scholars find no Snakes and Ladders board or written mention before the late 18th century. Medieval-origin claims have collapsed: 1735/36 Jain boards are likely forgeries; a 11th–12th-century manuscript claim is unverified; a 15th‑century style chart seems anachronistic. Three traditions name 13th‑century founders, but none has evidence. The earliest datable object is a 72-square Vaishnava board from 1780–1782; the first written reference is 1831. About 150 charts exist; many forged. The game’s age is late 18th century, spread quickly, reaching England by 1892.
HN Comments
Abi Olvera argues that cultural know‑how isn’t limited to elites; the bottom 40% rely on networks to buy affordable cars. When a car fails, they turn to trusted sources—family, friends, mechanics, and dealers like Mario—to find reliable used cars in roughly $1k–$6k (sometimes up to $8k). They avoid bank loans; payments are direct installments. A car is 'crappy' if it’s not reliable or safe, not if it looks bad. The market is invisible to outsiders but vital for mobility, and policies like 2009’s scrappage reduced the supply of cheap cars, revealing its infrastructure.
HN Comments
Curtin University researchers warn SpaceX Starlink hardware leakage floods SKA-Low's low-frequency bands with unintended emissions far exceeding the faint cosmic signals it seeks. Analyzing 76 million radio images over 29 days, they cataloged 112,534 leakage emissions from 1,806 satellites across 73–235 MHz, including ITU-protected bands 73–74.6 and 150.05–153 MHz. Leaks reach up to 10^6 Jy/beam, while the hydrogen signal of interest is about 10^-5 Jy. About 30% of images show Starlink interference. Unintended emissions lie outside current ITU rules; mitigation and hardware fixes are needed, with SpaceX open to dialogue.
HN Comments
Made by Johno Whitaker using FastHTML