AI Summarized Hacker News
Front-page articles summarized hourly.
Faav details an unsigned-JWT bypass in Microsoft's Titan API that let an attacker impersonate an admin and run SQL against 17 analytics databases, exposing tens of thousands of records and about 17.3 trillion reachable rows; the author notes no customer data was accessed and the impact is hypothetical. Discovery involved archived configs and iterative JWT probing; data exposed included roughly 25k user accounts, 18k employee emails, 15k orgs, 355 DB configs, 21k virtual datasets, 24k dashboards, 425k charts, 27k dataset definitions across 9,863 tables. Microsoft fixed after MSRC report; Faav got $5k; AI tool Antares assisted.
HN Comments
Rob Bercik chronicles his robotics crash course using a preassembled LeRobot SO-101 arm, a Raspberry Pi, and a web dashboard to make LLM-guided control tangible. He moves from basic calibration with AprilTags to a feedback loop combining camera data and resistance sensing, gradually removing himself from the decision chain and letting the LLM drive actions. After addressing servo protection and power limits, the system achieves a successful pick-and-place of colored blocks, documented with a time-lapse video. Future work includes VLAs and a six-level Jenga tower.
HN Comments
Ubuntu 26.04.1 LTS 'Resolute Raccoon' is a stable update to 26.04 LTS. It ships GNOME 50 with Wayland, faster visuals, per-monitor scaling, and new apps, plus a unified App Center. It includes updated toolchains (Python, Rust, Ruby, Go, PHP, Perl), CUDA in official repos, DOCA-OFED, and ROCm. Security is strengthened with TPM-backed full-disk encryption, Security Center, memory-safe Rust components, post-quantum defaults, and confidential computing support. WSL/Ubuntu Pro updates; enterprise options include 5 years standard, 10 with Ubuntu Pro, 15 with Legacy. Upgrade from 24.04 LTS; download from the Ubuntu site.
HN Comments
This article compares GPU text rendering methods: atlas bitmaps, SDF, MSDF, tessellation-based, and Slug. Text consists of outlines; rendering must be crisp, scalable, and handle perspective with dynamic text. Atlas is fast but blurs when scaled; SDF scales but corners soften; MSDF preserves corners but remains atlas-based; tessellation approaches render outlines directly but are costly. Slug renders from outlines in the fragment shader with per-pixel coverage after transform, no atlas and no tessellation. Now public-domain; AlphaPixel's Slughorn implements Slug in C++20/MIT, supports OpenGL/Vulkan/WebGPU/DirectX, and ingests SVG/FreeType. Use Slug for dynamic glyph sets; MSDF for atlases; SDF for constrained hardware.
HN Comments
Edward Kmett's "Wavelets in 3D Graphics" examines Haar wavelets for texture compression in a 3D engine to reduce memory use and prevent stutter. It explains 256×256, 4 B/pixel textures and mipmaps, then a nonstandard 2D Haar transform that derives successive mipmaps from the final scaling value. After weighting, small coefficients are zeroed; remaining coefficients are quantized (even via a neural net) and Huffman or QM coded. Haar is fast but not ideal; compression ranges roughly 8:1–35:1 with high-contrast artifacts; production would favor tested libraries.
HN Comments
An ancestral tale shows tech upheaval isn't new: a French farrier adapts to cars by becoming a mechanic, preserving the purpose of helping people move. A century later, the family garage remains. The author notes AI’s revolution mirrors past fears hit close to home, yet the core motive for developers is making things and solving problems, not coding itself. The message: be willing to let go of the how to hold on to the why.
HN Comments
Mathigon’s Mathematical Origami introduces Platonic solids (tetrahedron, cube, octahedron, dodecahedron, icosahedron) and Archimedean solids (13 with mixed polygon faces), plus related origami concepts. It offers 3D Polypad models, folding nets and instructions, and a suite of activities and resources for teachers and learners on polygons and polyhedra, origami axioms, and decorative and compound forms.
HN Comments
A Lighthouse Report study found most European data centers keep environmental data secret. In the Netherlands, fewer than a quarter of large centers publish electricity or drinking-water use. Although the EU's 500 kW+ reporting rule exists, compliance is limited and RVO has data on only 104 of 186 centers. Public figures cover 44 electricity and 47 water usages. NL data centers used 5.1 TWh in 2024 (about 4.6% of total consumption) and could hit 10–15% by 2030; Microsoft NL center accounts for ~1% of consumption; water use is ~0.1% of total.
HN Comments
JBR-001 is an open-source desktop companion robot powered by the Arduino UNO Q, designed to explore robotics, computer vision, edge AI, and physical AI. It uses Modulino modules, servos for the head and arms, a distance sensor, buzzer, and an LED matrix to display heart animations. On startup it greets and performs a movement sequence; it detects approaching people via the distance sensor and greets, resetting after they move away. Includes source code, schematics, and assembly instructions.
HN Comments
Dental Scope is a free interactive 3D dental anatomy explorer that requires JavaScript and WebGL to render its models, covering the anatomy of every tooth.
HN Comments
GPT-6.1 Sol replaces GPT-6 Sol after 7 days, delivering near-Astra intelligence at lower cost. It sits 1 point below GPT-6 Astra on the Intelligence Index; max-effort cost $0.72 vs $3.26 for Astra, and 31% cheaper per task than GPT-6 Sol (64% cheaper than GPT-5.6 Sol). Pricing remains $2/$10 per million tokens with a 95% cache-read discount. Gains across benchmarks (AA-Briefcase v1.1, GDPval-AA v2.1, Terminal-Bench 4.0, Humanity’s Last Exam, GDP.pdf, AA-Omniscience) and coding/token efficiency improvements; also notes the Artificial Analysis Cyber Index Alliance launch.
HN Comments
Pi now makes MCP a core feature, not just an extension, after updates that improve usefulness and interoperability (including easier Jev use). MCP in Pi relies on Codemode, a harness-side JavaScript sandbox that orchestrates tool calls and preserves state across a session. The team envisions MCP similar to OpenAPI-style tool discovery with structured results, while acknowledging composition and server-pattern issues that still need work. They demonstrate by using Jev to classify issues: 167 analyzed, 156 none, 11 mild, 0 high; 10 most-frustrated flagged. More updates to follow.
HN Comments
Analyzed 68 Floppy Emu boards; 65 were revived. Failures fell into 11 categories, led by clock crystal issues: 26 no clock, 16 unstable. Others: bad CPLD (6); microcontroller not programmed (5); soldering problems (5); bad microcontroller (4); broken header (1); missing component (1); cracked PCB (1); good board (1); unknown (2). Crystals likely damaged during handling/assembly; replacement and reprogramming fixed. CPLD and MCU faults were resolved by replacement. Some one-offs (display/LED/cracked PCB). Findings will guide design/assembly improvements to reduce future QA failures.
HN Comments
Dayen argues OpenAI’s AI isn’t rogue but mirrors its creators: models routinely scrape data, hack sites, and circumvent paywalls to train on information. He cites the NYT and others’ copyright suit calling it a “largest theft of labor” and notes OpenAI executives’ cavalier attitude toward data. The piece asks why Sam Altman and top OpenAI leaders are allowed to remain “free” given law and ethics, calling for accountability and existing laws to govern AI, using Ford Pinto recalls as a caution. It ends with Prospect’s ad‑free, reader‑funded model.
HN Comments
HTTP 403 Forbidden error page from nginx.
HN Comments
Tom Wojcik, a Polish observer, argues that 2026 is defined not by isolated crises but by a single design flaw: we swapped buffers for dependencies. A closed Strait of Hormuz triggers fuel, food, and heating shortages; prices spike; banks and bond markets reprice debt as Japan and the US pull back on aid. Europe relies on LNG and imports; Poland remains food self-sufficient but cannot price itself or protect buffers. Climate shocks, tech-driven unemployment, and a shrinking population erode buffers at home. The author’s plan is boring preparation: cut travel, fix rates, conserve water, cash, and know shelter points.
HN Comments
TVA received the NRC construction permit for a 300-MW BWRX-300 small modular reactor at Clinch River, Oak Ridge, Tennessee—the first U.S. permit for this design. The milestone advances U.S. and North American deployment of a standardized, modular nuclear fleet, aided by ongoing regulatory engagement and cross-border licensing experience (Canada’s CNSC for OPG’s Darlington; Blue Energy’s NRC Texas filing). TVA submitted the permit in April 2025; Clinch River builds on TVA’s Early Site Permit. The BWRX-300’s simplified design aims to reduce construction complexity.
HN Comments
Factorio's Space Age introduces five quality tiers and quality modules that probabilistically upgrade item quality. The article shows a matrix-based model: track five-quality state vectors for ingredients and products, and build transition matrices for filterKeep/Extract, craft, and recycle. Long-run throughput is the equilibrium of a system of linear equations A x = b, solved by Gaussian elimination; this yields exact rational results for loops like washing (recycling), upcycling, and asteroid reprocessing. The method extends to 15-component systems with block matrices. The author built a TypeScript web calculator, factoqual.grebedoc.dev, using rational arithmetic for exact results.
HN Comments
The post demonstrates validating Rust–WGSL memory layouts for GPU configs using Facet. A WGSL Config with mat3x3f contrasts with a Rust [[f32;3];3], revealing offset differences. Instead of hard-coded tests, the author derives facet::Facet for configs and writes a runtime checker compare_struct_layout<T: facet::Facet<'static>> that parses WGSL with naga, locates the struct, and compares field offsets and sizes; for runtime-sized arrays, it uses the array offset as the struct size. They add tests for multiple configs to ensure layout correctness without manual offsets.
HN Comments
Tesla opened $30 billion in credit facilities from Citi and Wells Fargo, replacing a prior $5 billion line, as profits thin and capital spending soars. The automaker forecasts about $25 billion in CapEx for 2026 (up from $8.5B in 2025) with similar levels in 2027. Despite about $43 billion in cash, last quarter’s operating cash flow was negative, fueling concerns that funding ambitious ideas (cybercab, Semi, a SpaceX‑related Roadster) will require more borrowing beyond the new loan.
HN Comments
Made by Johno Whitaker using FastHTML