AI Summarized Hacker News

Front-page articles summarized hourly.

The first 100 days as a Renovate maintainer

Jamie Tanna reflects on his first 100 days as Renovate’s maintainer and community manager. He details a tiny, multi-project crew shipping heavily in 2025, aided by automerge and a broad ecosystem (Renovate CLI, Docker image, osv-offline, Containerbase, Helm charts, npm packages). Highlights include enabling Minimum Release Age for npm, improved OpenTelemetry tracing, and first GitHub Security Advisory work. He emphasizes teamwork over individual credit, the value of community management via GitHub Discussions, building a maintainer dashboard, and the ongoing balancing act of many backlogs, multiple package managers, and future work.

I Made Zig Compute 33M Satellite Positions in 3 Seconds. No GPU Required

Anthony T. presents astroz, a Zig-based general-purpose SGP4, delivering 11–13M propagations/sec in native Zig and ~7M/s in Python, faster than Rust sgp4 in scalar mode (~5M/s). Highlights: branchless, comptime precomputation; SIMD with 4-wide vectors; three modes—time-batched (propagateV4), satellite-batched (propagateSatellitesV4), and constellation (propagateConstellationV4) with cache-friendly tiling; a polynomial atan2 for SIMD; struct-of-arrays (ElementsV4) for multi-satellite data. Live demo handles ~13,000 satellites over 1,440 points (~19M propagations in ~2.7s). Next: SDP4, multithreading. Install: pip install astroz; code on GitHub.

Comic-Con Bans AI Art After Artist Pushback

San Diego Comic-Con has banned AI-generated material from the art show after an artist-led backlash against its previous AI-friendly rule. The old policy allowed AI art if not-for-sale, labeled AI-produced, and credited the source style; after artists raised concerns, the rule was changed within a day to prohibit AI in the show. Artists like Tiana Oreglia and Karla Ortiz argued the policy enabled exploitative GenAI usage and threatened livelihoods amid broader industry moves to adopt AI. While some fear AI will still creep into conventions, Comic-Con has paused AI's art-show presence; no official comment was provided.

TPM on Embedded Systems: Pitfalls and Caveats to Watch Out For

TPMs enable secret storage, measured boot via PCRs, and attestation, with TPM 2.0 supporting multiple hierarchies. Embedded systems differ from PCs: no UEFI, more physically hostile environments, longer lifetimes, and regulatory pressures. Pitfalls include bus snooping (unencrypted traffic) and MITM during TPM resets, plus sealing keys to PCRs that may be bypassed if the boot chain is compromised. Linux’s NULL-seed helps detect interposers; fTPMs (TrustZone/OP-TEE) reduce bus risk but introduce TEEs and boot-chain challenges. Additional risks: hardware flaws, side-channel/firmware bugs, cold-boot leakage, performance limits, firmware updates, and need for robust threat modeling (IMA/EVM, HAB).

Show HN: yolo-cage – AI coding agents that can't exfiltrate secrets

yolo-cage is a GitHub project offering AI coding agents that cannot exfiltrate secrets or merge their own PRs. It runs Claude Code inside per-branch sandboxes on a Vagrant-based MicroK8s setup; each sandbox can push only to its assigned branch, and outbound traffic is filtered by an egress proxy with secret scanning and a domain blocklist. A dispatcher enforces safety; GitHub/CLI/API actions are restricted. Prereqs: Vagrant, 8GB RAM, 4 CPUs, a GitHub PAT, and a Claude account. Limitations include potential DNS, timing, or steganographic leakage. MIT license.

SmartOS

SmartOS is a Type 1 hypervisor on illumos, with OS VMs (Zones) and Hardware VMs (KVM/Bhyve). It boots as a live OS from PXE/ISO/USB and runs in memory, using disks for VMs. Core tech: ZFS, DTrace, Crossbow, Zones, SMF, RBAC/BSM. Install from USB, then configure networking, root password, and Zpool. Admin uses the Global Zone with imgadm for VM images and vmadm for VMs; both OS and HVM run on Zones with a JSON interface. Docs cover Code of Conduct, site use, and Triton affiliation; SmartOS is free to evaluate.

Finding Matrices that you can multiply wrong, right

An exploration of finding NxN integer matrices A and B satisfying AB = 10A + B. It derives B from A and shows A and B commute, with shared eigenvectors and eigenvalues linked by λ_A λ_B = 10 λ_A + λ_B (so B is a polynomial in A). A 3×3 example yields B = A^2 − 2A + 2. The author rewrites A as E + I to seek B as an integer polynomial of E, aiming for det E = ±10 and Metzler matrix properties. They discuss determinant-preserving transforms, random searches, and provide Julia/Franklin.jl code and GitHub experiments.

Show HN: ChartGPU – WebGPU-powered charting library (1M points at 60fps)

ChartGPU is a TypeScript WebGPU-based charting library designed for high-FPS rendering with large datasets. It supports multiple chart types (line, area, bar, scatter, pie, candlestick), built-in interactions (hover highlight, tooltip, crosshair), and streaming updates via appendData, plus X-axis zoom and theme presets with custom theming. The API centers on ChartGPU.create(container, options) and uses a render coordinator to manage GPU data uploads, layout, and rendering passes. Browser support includes Chrome/Edge 113+, Safari 18+ (Firefox not yet). It offers React bindings (chartgpu-react) and MIT licensing.

Uber Faces Growing Pressure over Sexual Assault Record

Could not summarize article.

Ireland wants to give its cops spyware, ability to crack encrypted messages

Ireland is drafting the Communications (Interception and Lawful Access) Bill to replace the 1993 act, giving police power to intercept all communications—including IoT, email, and encrypted messages. It would create a legal basis for spyware with strict necessity, judge approval, and oversight, and require cooperation from service providers. The bill would also allow on-site device scanning to identify persons of interest (potentially via IMSI catchers). Civil-liberties groups warn these powers threaten rights; a separate Recording Devices Bill could widen biometric surveillance.

RTS for Agents

AgentCraft is an RTS-style interface to manage AI agents. It lets you track, summon, command, and lifecycle-manage agents and subagents in a single pane of glass (starting with Claude Code). Features include RTS-like control for quick reactions, a familiar agent-management experience, and universal, easy installation that integrates with agents wherever they are. Demo available and early access offered.

Nested Code Fences in Markdown

An approachable tour of nested and fancy code fences and inline code spans in CommonMark (and GFM). It explains that fences use at least three backticks or tildes; the fence type and length dictate rendering, and nesting can be handled by increasing fence length or using tilde fences. Inline code spans can use multiple backticks to enclose content that includes backticks, with trimming of surrounding spaces. The post cites the CommonMark spec and provides illustrative examples.

AI Destroys Institutions

An essay arguing that AI erodes and threatens civic institutions—rule of law, universities, and a free press—by eroding expertise, short-circuiting decision-making, and isolating people, undermining transparency, cooperation, and accountability. As a result, AI systems pose a death sentence for democratic institutions and should be treated as such.

What Is a PC Compatible?

PC compatibility originated with the IBM PC and the BIOS abstraction, enabling software to run across hardware via a vendor-provided BIOS. Clone makers reverse-engineered the BIOS, often with partial compatibility and quirks. Over time, hardware and graphics standards (CGA, EGA, PCjr) and dependence on BIOS behavior meant software embedded vendor-specific assumptions. Modern machines use UEFI with a Compatibility Support Module to run DOS-like software, but corner cases and timing/hardware expectations fail. In short, "PC compatible" is not a strict technical guarantee, but a social construct.

Vibecoding #2

Vibecoding #2 documents building a DSL-like, cloud-spanning workflow to test TigerBeetle on six ephemeral machines. The author combines rsyscall (direct remote syscalls), remote-sync (stateful remote development) and dax (shell scripting) into a Deno-based tool 'box' that can create, destroy, list, sync, and run commands across machines. AI (Claude) helped expand the spec and generate implementation, with iterative refinement and debugging. The post discusses the value and limits of AI in code generation, the importance of maintainable, characterful code, and lessons from trial-and-error rather than one-shot perfection.

Parliament tells Dutch government to keep DigiD data out of American hands

A parliamentary majority asked the caretaker and incoming cabinet to ensure Dutch DigiD data stays out of U.S. hands, amid concerns over Kyndryl’s planned acquisition of Solvinity, which runs the DigiD infrastructure. MPs warned the U.S. could pressure or access DigiD data; one warned of blackmail, another of shutting down digital government. The government could persuade Solvinity to reconsider, switch providers, or buy a golden share; if the deal goes ahead, DigiD operations should be moved away from Solvinity. Digital security remains a priority in coalition negotiations.

Stories removed from the Hacker News Front Page, updated in real time

HackerNewsRemovals is a real-time log of stories removed from Hacker News front page. It uses the official HN API to fetch 90 Top Stories per minute and compares them with the current Front Page (top 30) from the previous minute to identify removals. For each removed Story it records the original title and URL, the points, comments, and rank at removal, and links to a graph on news.social-protocols.org. Duplicates and reappearances are excluded. The project aims to increase transparency around moderation, focusing on removals rather than title edits; implemented in C# and updated every minute.

Nukeproof: Manifesto for European Data Sovereignty

The NukeProof Alliance, started by SpaceTime (Finland), advocates European data sovereignty by uniting local storage providers, startups, MSPs and telcos into a Europe-based cloud to counter hyperscalers (Google, Microsoft, Amazon) and laws like the US CLOUD Act. It argues Europe lacks cohesive action despite talent and tech and promotes a resilient, decentralized “NukeProof” architecture to avoid single points of failure. The alliance invites all data/storage/digital industry players to join via nukeproof.org to build a sovereign, jointly governed cloud.

SETI Home Is in Hiberation

SETI@home, a UC Berkeley project, uses volunteers’ computers to analyze radio telescope data. It is in hibernation and no longer distributes tasks, but message boards remain and backend analysis continues; volunteers are urged to keep crunching for science. News includes two SETI@home papers in The Astronomical Journal on data acquisition/front-end processing and Nebula analysis, a site outage resolved after disk failure, references to Jimmy Carter’s Voyager 1 message, a Nebula progress update, UCLA citizen-science on RFI, and funding from NSF/NASA and donations.

Batmobile: 10-20x Faster CUDA Kernels for Equivariant Graph Neural Networks

Batmobile speeds up equivariant GNNs by replacing slow e3nn kernels with hand-tuned CUDA. For L_max=3, it bakes 34 Clebsch–Gordan paths into kernels, uses register-only intermediates for spherical harmonics, and fuses SH and tensor products in one pass. This eliminates Python/PyTorch overhead and memory traffic. Benchmarks on RTX 3090 (N=1000, 32 channels, ~20 neighbors) show SH 11.8x faster, tensor product 20.8x faster, backward 20.6x faster, and fused SH+TP outperforming separate ops by ~1.4x. Provides simple PyTorch interface for spherical_harmonics and tensor_product.

Made by Johno Whitaker using FastHTML