AI Summarized Hacker News
Front-page articles summarized hourly.
Andrew Nesbitt reframes Git submodules as a fragile package-manager: .gitmodules is the manifest and the gitlink in the superproject is the lockfile entry. A submodule pins an exact commit; updates fetch the configured branch or the pinned commit via git submodule update. Worktrees collide with submodules: removal/movement can require --force, and each worktree can need its own submodule checkout, with storage under $GIT_DIR/modules. Resolution relies on the gitlink and per-submodule URLs; URLs can be rewritten via config. Submodules expose git internals and carry security caveats (several CVEs).
HN Comments
Val Town envisions connecting all apps without manual OAuth setup by using Dynamic Client Registration (DCR) and Client ID Metadata Documents (CIMD) within MCP. DCR auto-provisions OAuth clients for unknown apps; CIMD lets apps start OAuth via a metadata document. A live demo (oauth-demos.val.run) shows 3,613 connectors, and remixing yields instant, zero-setup connectors with a “Login with Val Town” flow. Challenges remain: not all endpoints are truly dynamic, MCP vs REST API compatibility issues, and the need for public registries and OSS tooling. Still, the dream is closer.
HN Comments
Access to the page is forbidden (HTTP 403).
HN Comments
Gimlet Labs announced a $300M Series B led by Andreessen Horowitz, with participants including Sapphire Ventures, Menlo Ventures, Arm, Samsung Ventures and others. The funding supports rapid growth as token demand and datacenter capacity surge, while power constraints push for higher throughput per kW. Gimlet claims a multisilicon, heterogeneous inference cloud that disaggregates workloads across GPUs, near-memory compute, dataflow accelerators and CPUs, routing model parts to the optimal silicon. They report 5–10x speedups for frontier workloads at the same power, and are hiring and inviting access to low-latency inference.
HN Comments
MikroTik RouterOS 7.23.4/7.24.2/6.49.21 released with security fixes; details were withheld. Nick Pratley analyzes three bugs and two chains: (1) a low-exponent RSA signature forgery enabling SSH bypass to forge signatures; (2) an SSH -2 username exploit that lets an authenticated user elevate to full admin via a trusted login path; (3) a post-auth mtget TFTP pathname overflow leading to memory corruption; 7.23.4 patches include SSH username validation, RSA digest checks, and safer mtget handling; guidance: patch, audit for ops users, RADIUS/User Manager config, restrict MAC-Telnet, rotate keys, and monitor for indicators like specific domains and autosupout; Mac-Telnet not fully resolved.
HN Comments
ExactTeX is a gradually-typed superset of LaTeX. Every .tex remains valid LaTeX, and adding annotations buys checked references, safe renames, and in-name error checks before PDF creation. You can rename a .tex to .xtex and annotate progressively; the core promise is a transport guarantee: untouched LaTeX bytes are preserved and emitted byte-identically. It offers three access points: xtex-cli (parsing/checking/emitting LaTeX), xtex-lsp (editor diagnostics), and a WebAssembly build (browser/Vitela editor) with identical core and a parity CI suite. Not a replacement for LaTeX, but stronger tooling and verification. MIT-licensed; see docs.
HN Comments
Spotify’s Portal with AiKA modes cuts Claude Code token use by routing IO-heavy tasks to cheaper worker models. Two modes: bulk-reader (reads multiple files for analysis) and code-writer (generates code from a spec with exact patterns), running on ephemeral runtimes via Portal CLI/API with no infra. In a Java monorepo, bulk-reading saved ~90% of tokens; code output is written directly to disk without Claude seeing it. Limitations: editing and deep reasoning can’t be delegated; latency ~10–30s per call. Setup: install plugins and run portal setup; modes are public and shareable.
HN Comments
Moadim is an open-source loop engine for AI agents. A loop combines a prompt, schedule, and agent (Claude, Codex, Hermes, NanoClaw, Pi); each tick runs the agent in an isolated workbench with a watchdog and is reaped on completion. It runs locally via a portable in-process scheduler (no cloud or queue) and can install as a launchd/systemd service to survive reboots. Every loop is an HTTP/MCP endpoint with Swagger UI and an iCal feed. It ships REST/UI/MCP tooling, supports macOS/Linux, tmux, and self-hosts under the MIT license.
HN Comments
Artificial Analysis announces Intelligence Index v4.2, an interim update toward v5 with more complex tasks and private held-out test sets to curb gaming. New evaluations AA-Briefcase (multi-week agentic knowledge-work with private data) and GDP.pdf (4,592 pages across 100 PDFs in 10 domains) are added. Held-out weighting rises to 40%, with grading infrastructure upgrades for robustness. Leading results: Anthropic Claude Fable 5.1 tops the Index; GPT-6 Astra posts substantial gains and strong token efficiency; Meta Muse Spark 1.3 and Gemini 3.8 Flash remain competitive. Further incremental releases toward v5 are planned.
HN Comments
Access to www.charlespetzold.com is blocked by the site's security system. The message explains blocks can be triggered by certain requests or actions (e.g., specific words, SQL commands, improperly formatted data). To resolve, contact the site owner and provide the Request ID: 76384680-0588-4ce2-9aee-bd2644173678.
HN Comments
Gallup reports record-high 89% of U.S. adults say government corruption is widespread in 2026, up 10 points from 2025 and the highest in two decades. Democrats’ concern surged to 91%, independents 90%, Republicans 83%. Perceptions of government corruption are higher than business corruption (89% vs 71%). The gap between U.S. and OECD nations widening; U.S. tops OECD in perceived government corruption. Survey conducted May 1–June 10, 2026, with 1,000 adults; margin ±4.1 points.
HN Comments
Through the Ark of the Covenant as a case study, the piece argues that religious images become powerful, often misunderstood symbols that spark iconoclasm across cultures. It traces debates from the Second Commandment to Islamic tawhid, Byzantine Iconoclasm, and Jewish/Christian thinkers like Calvin and Maimonides, illustrating how 'images' can become idolatrous or dangerous representations. The essay then links these threads to contemporary 'Icons as a Service'—AI image generation that externalizes thought and accelerates hyperreality and deterritorialization, drawing on Deleuze, Baudrillard, and myth-making (e.g., Wyatt Earp).
HN Comments
Vondra argues that random_page_cost is a proxy for several imperfect aspects of the PostgreSQL cost model—memory usage, caching, and the size of the active data set—none of which the planner fully accounts for. Disk I/O costs vary by storage and caching, so the 4.0 default is not a raw I/O cost and increasing it can hurt performance. There is no universal right value; tuning must be system-specific and feedback-driven (e.g., via pg_stat_statements), by iteratively adjusting and monitoring top queries to see effects on the active set and locality.
HN Comments
Digital Sovereignty Is Written in PHP argues Europe’s public sector increasingly relies on PHP-based platforms (notably Germany’s TYPO3-based Gov Site Builder and Drupal elsewhere). Germany’s €108m migration to GSB 11 shows a national shift to PHP, with Nextcloud-based sovereign tools while IO paths move to Rust. A funding gap exists: dependencies lack sustainable upstream maintenance. The PHP Foundation highlights upstream funding via the Sovereign Tech Agency and urges procurement reforms: 20% weight for verified open-source contributions, 2–5% maintenance budgets, and a 30-day upstream release rule. Calls on public bodies and contractors to adopt these measures.
HN Comments
HEIR is Google's homomorphic-encryption compiler that turns programs into encrypted-data executions, enabling private inference without revealing inputs, outputs, or intermediates. The article (a companion to Google's post) shows HEIR compiling small ML models and running them encrypted; for a credit-card fraud detector, HE inference runs ~2 seconds on a single CPU, vs ~0.5 ms in cleartext—a ~4,000x slowdown. Key bottlenecks are evaluation-key memory and per-user key material. Use cases include remote diagnostics and B2B analytics. Roadmap: LLVM/MLIR-based backend, GPU/TPU backends, new schemes, benchmarking; open source; invites collaboration.
HN Comments
A viral X post claims a giant integer divides RSA-260, posted by penlu/penlume. The thread, which has about 15.6 million views, prompts replies referencing RSA-155 and jokes about character limits from figures like Alec Muffett and Elon Musk.
HN Comments
GPT-6 Astra is OpenAI’s flagship for demanding end-to-end work, excelling in long-horizon tasks with software, research, and browser use. OpenRouter serves it via OpenAI and Azure (US), with routing modes Balanced, Nitro, and Exacto. Pricing: $10 per 1M input tokens, $50 per 1M output tokens; Cache Read $1/1M, Cache Write $12.50/1M, Web Search $10 per 1K calls. Context window: 1,050,000 tokens; up to 128,000 completion tokens. Inputs: PDFs, images, text; outputs: text. Tools and structured outputs supported (tool calling and JSON). Released Sept 4, 2026.
HN Comments
NVD home page.
HN Comments
Sedna's Wormhole Hall of Shame critiques sci-fi for depicting wormholes as flat, 2D circles, ignoring higher-dimensional geometry where openings appear circular from any angle and light is warped inside. It explains why 2D depictions fail and rates media: Stargate, Farscape, DS9, Babylon 5 fail; Interstellar and The Bobiverse nail realism; Schlock Mercenary earns an A+; MCU is too magical to judge. The Cloak and Its Wizard uses flat portals. Overall, a playful call for more accurate wormhole visuals.
HN Comments
Fomu is a USB-port FPGA board that lets you run Python and a RISC-V core in the USB slot. It uses a Lattice ICE40UP5K FPGA with ~5000 LUTs, 128 KB RAM for the CPU, and at least 1 MB SPI flash, plus a 48 MHz oscillator, four buttons, and an RGB LED. The device is fully open hardware with an open-source toolchain (Yosys, nextpnr) and a USB bootloader for loading code. It ships in a plastic USB case for $50, funded via Crowd Supply, with EVT/DVT/PVT development stages and two community PCB versions (Hacker and EVT).
HN Comments
Made by Johno Whitaker using FastHTML