AI Summarized Hacker News
Front-page articles summarized hourly.
Misqe/zero-trust-llm proposes a zero-trust framework to govern LLM-driven agents in production. It argues current LLMs are over-tuned and prone to unsafe actions; demos mislead and natural-language governance fails over context. The solution strips agency and enforces an epistemic state machine via AGENTS.md, centered on a master loop: [HYPOTHESIS] [IDENTIFY EVIDENCE] [GROUND VERIFICATION] [EXECUTE] [HARD YIELD TO OPERATOR], with a runtime enforcer that cuts the API stream and feeds results back. The repo also includes MANIFESTO.md, examples, and architecture notes.
HN Comments
Vicki Boykis compares bad code to kudzu: once a feature is added, it grows hard to remove as others build on it. The post argues for aggressive pruning and planning removals from the start, since deleting code is thankless yet necessary to prevent a bloated codebase. An example shows a blog hashtag-bubbles feature that users rarely used and was ultimately pruned along with its commit history.
HN Comments
UW-Madison faced a massive SNTP flood in May 2003 targeting its public NTP server from hundreds of thousands of hosts worldwide. The flood stemmed from a design flaw in Netgear “Platinum” consumer routers (RP614, MR814, DG814, HR314) that shipped with an embedded SNTP client using a hard-coded NTP server IP (128.105.39.11) and a fixed source port (23457). Netgear cooperated and firmware fixes were developed. Proposed responses included deploying a secure anycast NTP service or suppressing requests via BGP, both with implementation risks. The incident spurred discussions on SNTP/NTP standards and best practices.
HN Comments
Claude Fable 5.1 solved the Cyphral Distich, a 64-number cipher from Urquhart, in 44 minutes. The hidden text is a royalist prayer to Charles II, produced by using the i-th number as a word index into the i-th Proquiritation and taking the first letters; the key is the book itself, not an external alphabet. It also solved the Cyphral Octastich (285 numbers) with a similar rule. The work shows AI can crack historical puzzles via simple, self-contained clues and persistence, though some line positions have ambiguities requiring verification.
HN Comments
A US diplomat was secretly flown home after allegations that he possessed child abuse images at his flat, triggering a row over diplomatic immunity upon his return.
HN Comments
StarTalk’s special edition with Jaron Lanier, Neil deGrasse Tyson, Gary O’Reilly, and Negin Farsad surveys AI, VR, and the internet. Lanier argues there is no independent AI; it’s a collaboration of people and data. He critiques social-media addiction, centralized power, and “free” data economies, urging data dignity and new business models. The discussion covers VR’s unfulfilled killer apps, privacy guardrails, and affordable software as a middle path. They advocate constructive reform over doom, blending technical insight with policy ideas like GDPR and accountability for big tech.
HN Comments
Internal tech emails from Jan 30, 2017 discuss Cambridge Analytica involving Mark Zuckerberg; a 2026 securities-litigation document is cited. A commenter says Cambridge Analytica weren’t doing anything others couldn’t have done.
HN Comments
MIT Technology Review reports a study tempering AI self-improvement hype. Princeton researchers tested AI agents’ ability to perform open-ended AI research via a shadow-evaluation on unpublished NeurIPS 2026 papers. The agents could handle engineering tasks but showed little creativity or judgment needed for original research, producing flawed experiments and cautious, unambitious writeups. They failed to backtrack or rethink approaches, though subagents occasionally hallucinated. The results suggest open-ended research remains hard for AI, implying progress toward self-improving systems may be slower and more limited to narrow tasks than some forecasts.
HN Comments
AprilNEA reveals Antspace, Anthropic's hidden AI-native PaaS inside Claude Code. It runs on a Firecracker MicroVM with a minimal init (process_api) and an unstripped Go binary (environment-manager) detailing a complete deployment stack. Antspace uses its own deployment protocol (Create Deployment, Upload Tarball, Stream NDJSON) instead of Vercel’s API, and is integrated with Baku, the web app builder where Antspace is the default deploy target. BYOC lets customers run Anthropic-managed environments in their own infra. The result is a vertically integrated platform from intent to production within Anthropic.
HN Comments
Could not summarize article.
HN Comments
Global lubricant shortages and stricter engine specs have led Costco to ration motor oil. A 10-quart Kirkland Signature synthetic now lists at $57.99, up from the mid-$30s, with a purchase limit of two units per week (20 quarts). Mobil 1 is also capped (five units). Higher base-oil costs, tougher testing (dexos1 Gen 3, API/ILSAC), and certification requirements, plus upstream refining constraints, are squeezing supplies and eroding DIY savings.
HN Comments
Docket captures per-commit evidence records for agent-written code, preserving the agent’s journey: what was attempted, what was verified, and what reviewers didn’t see. It folds the agent’s pre-image, patches, and outputs with the diff to produce per-hunk evidence stored as a trailer on commits. Supported agents include Claude Code, Codex CLI, and opencode. It provides commands like docket show, explain, verify, and gate. Privacy is enforced by redacting secrets; records stay in the repository and can be pushed to your Git host. Apache 2.0 licensed; not a live dashboard.
HN Comments
Making startups powerful means reorienting strategy around customer value and scalable leverage: aim to own the customer relationship and have money flow through you; generate network effects or create an app store/standards; extendibility via APIs and ecosystems; go full-stack to compete by doing the hard work for customers; seek “tails that wag the dog” where users repurpose your product; start with early-stage customers and data; be generous (open source or extensible) to build a bigger pie; prefer long-term growth over short-term grabs; design for customer-first benefits.
HN Comments
Could not summarize article.
HN Comments
Deleting a file on Linux while a program has it open removes the directory entry, but the program can keep using the file until it closes the descriptor. The disk space is freed only after all open references are closed; the file is not recreated.
HN Comments
A blogger questions why Google still serves dodgy ads after reporting a deceptive YouTube banner that mimics an iPhone storage alert and uses fake “Yes/No” options to prompt clicks. Google’s Gemini AI classifies the ad as disapproved for misrepresentation, citing misleading ad design, deceptive UI, and fear-based claims; yet human reviewers approved it twice. The post argues AI should be used to catch such ads and criticizes review processes that miss obvious issues, urging stronger policy enforcement to suspend the advertiser.
HN Comments
Robin of dreamstation.systems describes constant Assetnote scanning misattributed to Tesla due to Tesla's pool-ntp.tesla.com CNAMEs to pool.ntp.org. In nginx logs, traffic from three AWS IPs (54.165.75.96, 35.168.63.24, 52.44.200.251) with Assetnote UA targeted pool-ntp.tesla.com, attempting SSRF and exploits (path traversal, webshells, Log4Shell, Text4Shell) and many callback hits (assetnote-callback.com). The asset inventory apparently labeled the NTP pool as a Tesla asset (67.215.249.229). The author emailed Tesla; ~8k requests from two hosts over two days, ~50k since Aug 21; no harm yet, updates ongoing; Done.
HN Comments
Sprite was a 1984–1993 research OS led by John Ousterhout to build networking into the kernel, letting a cluster of workstations act as a single system with shared storage and processing. Its four achievements were: a high-performance network file system that hides networking; a process-migration mechanism enabling cross-machine speedups; a single system image across architectures; and a log-structured file system with fast small-file writes and crash recovery. The project unfolded in three phases (initial development, consolidation with LFS, closeout), peaked at ~80 users and 200k+ lines of code, and explored Zebra, RAID, Jaquith before winding down in 1993/1994.
HN Comments
Romania's Football Federation (FRF) unveiled a 'black card' for youth games to curb abusive parent/spectator behavior. Used after yellow/red cards, this final sanction can permanently abandon a match if abuse continues after de-escalation attempts. The process: 1) temporary suspension to request calm; 2) 10-minute pause with teams off; 3) final whistle and abandonment if abuse persists. FRF distributed materials to academies; the move makes FRF the first federation to adopt such a measure.
HN Comments
David Sacks tells OpenAI and Anthropic to pace the frontier themselves, arguing they already lead frontier intelligence and should not wait for permission or accept restrictive antitrust or regulatory controls. He says METR is entangled with investors, emphasizes product liability concerns, and that slowing for safety should be their decision, not political coercion. Pacing would enable a more thoughtful regulation debate and reflect China’s likely nonparticipation in global deals. If they proceed, they gain goodwill; if not, it’s framed as regulatory capture or an election psyop.
HN Comments
Made by Johno Whitaker using FastHTML