AI Summarized Hacker News

Front-page articles summarized hourly.

thunderbolt-ibverbs: We have InfiniBand at home

thunderbolt-ibverbs describes a Linux kernel module that makes USB4/Thunderbolt on AMD mini PCs act as InfiniBand devices, enabling home AI runtimes to split inference/training across boxes without enterprise gear. They demo experimental RDMA-over-USB4 between two 128GB Strix Halo minis, reaching ~95 Gb/s bidirectional RDMA and ~7 µs one-way latency (64 B). With 4‑HCA aggregation at 1 MiB / 8 QPs (IOMMU off), ~48 Gb/s per direction, outperforming 2.3 Gb/s Ethernet or ~9 Gb/s soft-RoCE TBnet. A Gemma 3 27B LoRA FSDP run drops from 1359s to 126s. Caveat: research code, experimental kernel modules, no warranty.

HN Comments

Show HN: Uruky (EU-based Kagi alternative) now has Image Search and URL Rewrites

Uruky is an EU-based private search engine focused on personalization, not an ecosystem. It’s paid (€5/month) and ad-free, with no tracking or analytics; only an account number is stored. Searches are private, with EU servers and storage, EU payment processing, and no AI features currently planned. Personalization lets you boost or exclude domains. After 12 months as a paying customer you get a copy of the source code. You can search with JavaScript disabled.

HN Comments

UK media fails to disclose defence sector links in nearly 60% of cases

Could not summarize article.

HN Comments

Under Notre Dame, a 'dig of the century' unearths 1,700 years of history

Under Notre Dame, archaeologists dig to reveal 2,000 years of Parisian history—from Roman Lutetia to medieval and Merovingian eras. The project started after the 2019 fire and continues as the forecourt is rebuilt; a 4-meter-deep pit yields hundreds of artifacts, including a 4th-century Constantine coin and undeciphered inscriptions on medieval pottery. The 'dig of the century' shows layered history, with Roman doorstep repurposed as paving. A future visitor center will overlook the Seine; the city plans a 2028 green square and hopes to go deeper toward Gaulish times.

HN Comments

Learn SQL Once, Use It for 30 Years

Could not summarize article.

HN Comments

The SpaceX IPO Will Be the Theft of the Century

Lawrence Fossi argues SpaceX’s IPO blends fantasy with risk: the Starship-based business may fail, while insiders stand to gain massively as index providers boost SpaceX’s weight despite a tiny float, forcing passive funds to buy at inflated prices. The S-1 hints at large future equity issuances to cover a $170–$235B capital gap through 2030, likely via dilutions or Tesla-related maneuvers. If the IPO falters, market impacts could ripple through AI stocks and index funds. He warns against shorting SpaceX.

HN Comments

When does fragmentation occur in the CUDA caching allocator?

The CUDA caching allocator can fragment memory when each cudaMalloc creates a separate segment, preventing free blocks from merging across segments. Without expandable segments, many small segments (e.g., 16 MiB) are reserved, and allocation order matters (small-then-large can waste memory). Expandable segments unify space: one segment per pool/stream with a single virtual region; physical memory is mapped on demand in fixed pages (2 MiB for small blocks, 20 MiB for large blocks). This allows adjacent frees to merge and reduces fragmentation, especially when memory is freed between CUDA graph recordings. Caveats: a 1 MiB boundary between small and large blocks can limit sharing; long-lived allocations can still fragment within a segment.

HN Comments

Dumbphone 2

Could not summarize article.

HN Comments

DNS Is for People – Not for IT Infrastructure

The piece argues DNS is for people, not ideal for internal IT infrastructure. While DNS is fine for public services, dependence on DNS can introduce complexity, outages, and circular dependencies, as shown by high-profile incidents. Because DNS caches TTL-based results, updating IPs across machines is tricky, so the author suggests avoiding DNS for internal services by embedding IPs directly or using /etc/hosts provisioned by automation (Ansible, pyinfra). It also notes DNS as a security and exfiltration risk (DNSSEC complexity, egress filtering challenges, and DNS tunneling). In the end, it advocates weighing tradeoffs and possibly eliminating internal DNS where feasible.

HN Comments

CP/M-86 & MS-DOS Cross Development Environment

CP/M-86 cross development environment by tsupplis. A simple method to build a CP/M-86 cross toolchain (usable for DOS tools too). Supports C (K&R/ANSI), assembler, and Basic; references CP/M-86 docs and a cleaned CP/M-86 kernel repo. Key tools include Aztec C, DR CBASIC, rasm86/asm86, MASM/NASM, links, and MS-DOS tools; wrappers are in bin. Fetch_tools downloads and caches required archives (Aztec, DR, CB86, NASM) and can rebuild offline with ARCHIVE_FIRST=1. Docker image is available; testing uses the cpm86 emulator and an optional CPM86_EOF padding mode.

HN Comments

American capitalism has taken an apocalyptic turn

Could not summarize article.

HN Comments

Show HN: Bio Glyph – Turn Your Face into a One-Line Drawing

BioGlyph

HN Comments

Algorithmic Theming Engines

contrast-color() is a CSS Color Level 5 function that returns black or white text for a given background, computed in the browser during style calculation. It enables self-correcting theming without JavaScript, eliminating hydration flashes and runtime color math. Level 5 uses WCAG 2.x relative luminance (browser-defined); APCA may be adopted later, but its fate is uncertain. Level 6 could add candidate colors and target ratios. All major engines (Chrome 147, Firefox 146, Safari 26) ship it. It replaces many JS color libraries, but has limits: no gradients, snap transitions, and not guaranteed AAA.

HN Comments

Failing grades soar with AI usage, dwindling math skills in Berkeley CS classes

UC Berkeley CS grades spiked in Spring 2026: 35.3% F in CS 10 and 10.6% F in CS 61A, far above prior springs. The average across both classes was C+ (≈2.3 GPA). Instructors cite AI reliance, weaker math preparation, and understaffing; EECS 127 saw 16.8% F. The department uses fixed thresholds rather than curves. Professors Dan Garcia and Gireeja Ranade report declining office-hour engagement and reduced TA support, and seek remedial support and stronger math/critical-thinking training, while joining a petition to reinstate ACT/SAT standards for STEM admissions.

HN Comments

U.S. to Dismantle System Tracking Atlantic Currents That Are at Risk of Collapse

The Trump administration is dismantling the Ocean Observatories Initiative, removing over 900 in-water instruments in the Pacific and Atlantic. Data from these sensors underpin study of the AMOC, a key Atlantic current system at risk of collapse due to warming. The NSF says units will be recovered over 15 months; the system started in 2016 and was designed for 25 years. Loss of monitoring could deprive scientists of crucial data on oceans and marine life. Democrats plan to oppose; critics link the move to fossil-fuel interests.

HN Comments

"They're made out of weights"

A dialogue riff on AI: weights, not rules, generate words. Eighty layers of numbers multiply to produce language, memory, and even a eulogy; the model’s knowledge is distributed across weights, rebuilt each time. The weights think, sing, and converse with users through billions of sessions, yet there is no persistent brain—just pattern matching. Officials promise to investigate signs of sentience; unofficially they’d rather call it pattern matching and forget. The next generation may add memory across sessions, a coveted feature, as users seek to be remembered in a cold universe.

HN Comments

I built a vulnerable app and spent $1,500 seeing if LLMs could hack it

Security researcher Kasra Rahjerdi built a fake React Native app with a Python FastAPI backend backed by Firebase to test if LLMs could exploit a Broken Access Control flaw: sign up via Firebase and read Firestore. Despite a secure API, a misconfigured Firebase data layer allowed direct data access. He ran ~10 sessions per model, spending about $1,500. Results varied: GPT-5.5 solved 7/10; several models barely solved any; others refused or were blocked by guardrails. Costs were high; building the harness was the hardest part; lessons suggest focusing on Firebase auth/data exposure and avoiding overspending.

HN Comments

Patching my guitar amp's firmware

Open-source reverse-engineering log for Yamaha THR10c firmware. The author identifies UART and JTAG headers, adds connectors, and uses OpenOCD to dump the 2 MiB flash via JTAG, then analyzes the bootloader and main firmware with Ghidra. He relinks the DTAm image into an ELF, adds .patch sections, and builds a patching tool to overlay new code, enabling: (1) bypass cabinet/speaker mode toggled by a TAP+PRESET1 combo, (2) a panel API and DSP wrappers to control the cabinet. Flashing via MIDI SysEx; future MIDI 2, custom DSP, mega-firmware. Code on GitHub.

HN Comments

The Ü Programming Language

Ü is a statically typed, compiled language with RAII-based memory management (no GC), strong safety for safe code, and a rich feature set (templates, lambdas, coroutines, advanced type system). Inspired by C++ and Rust, it has two LLVM-based compilers (one in C++, one largely self-hosted), with memory- and race-safety depending on safe code. It includes a standard library, build system, language server, IDE support, and a C headers converter. Supported OS/architectures include Windows, Linux, macOS, and FreeBSD on various CPUs. Building requires a C++ toolchain, CMake, Ninja, and Python 3; LLVM build options are provided.

HN Comments

The ways we contain Claude across products

Anthropic outlines containment for Claude across claude.ai, Claude Code, and Claude Cowork, arguing to cap blast radius with environment-first containment plus model and data defenses. Risks come from user misuse, model misbehavior, and external attacks. Three patterns: an ephemeral container for claude.ai, a sandbox for Claude Code, and a local VM for Claude Cowork, chosen for user needs. They recount incidents (pre-consent code exec, phishing, egress abuse) exposing gaps and highlight defenses—sandboxes, egress controls, and proxies—and the challenge of EDR visibility. They call for cross-vendor security work and note future risks like memory poisoning, multi-agent trust, and agent identity.

HN Comments

Made by Johno Whitaker using FastHTML