AI Summarized Hacker News

Front-page articles summarized hourly.

GPT-6 Astra in code review: Gains, privacy, and cost

GPT-6 Astra improves code review by catching about 4% more labeled bugs than GPT-5.6 Sol and 22% more than Opus 5, with cross-file gains up to 33% for harder reviews. Its strength is connecting dispersed context to support reasoning, though at a premium: $10 per million input tokens and $50 per million output tokens. The authors see potential in tasks beyond coding—research synthesis, operational investigations, requirements analysis, and document reviews. Privacy notes: CodeRabbit claims no training on customer data; OpenAI offers zero-data-retention for eligible customers; Anthropic varies. Next: broader, privacy-preserving deployment and dependable reasoning.

HN Comments

The Highest Point in the Netherlands

After 25 years at Cisco, the author is laid off in a precise, impersonal process that erodes identity and pride. He grapples with disposability, resentment, and the lack of a “thank you.” He had championed open standards and open source, but the layoff forces a reevaluation of what mattered. A mushroom retreat in the Netherlands helps him reconnect with self-kindness and family, reframing the pain as something to move through. He rebuilt his network across multiple companies, learned to laugh at corporate life, and now advocates love, kindness, and better regulation.

HN Comments

Nitter has more working instances than before the takedowns

Codeberg reports changes to its Terms of Use: LLM-generated content restricted and cryptocurrency projects disallowed. The page lists public Nitter/Shitter instances, categorized as Working (with many URLs, including Tor links), Active but rate-limited, and Formerly active / Taken down. It directs readers to posts about obtaining session tokens and evading DMCA/legal complaints, and points to a repo with customizations to improve performance. The page is part of mv12star/shitter on Codeberg and is powered by Forgejo.

HN Comments

Git Submodules as a Package Manager

Andrew Nesbitt reframes Git submodules as a fragile package-manager: .gitmodules is the manifest and the gitlink in the superproject is the lockfile entry. A submodule pins an exact commit; updates fetch the configured branch or the pinned commit via git submodule update. Worktrees collide with submodules: removal/movement can require --force, and each worktree can need its own submodule checkout, with storage under $GIT_DIR/modules. Resolution relies on the gitlink and per-submodule URLs; URLs can be rewritten via config. Submodules expose git internals and carry security caveats (several CVEs).

HN Comments

Connecting every app to every other app

Val Town envisions connecting all apps without manual OAuth setup by using Dynamic Client Registration (DCR) and Client ID Metadata Documents (CIMD) within MCP. DCR auto-provisions OAuth clients for unknown apps; CIMD lets apps start OAuth via a metadata document. A live demo (oauth-demos.val.run) shows 3,613 connectors, and remixing yields instant, zero-setup connectors with a “Login with Val Town” flow. Challenges remain: not all endpoints are truly dynamic, MCP vs REST API compatibility issues, and the need for public registries and OSS tooling. Still, the dream is closer.

HN Comments

When declaring an incident becomes everyone's favorite workaround

Access to the page is forbidden (HTTP 403).

HN Comments

Gimlet's Series B

Gimlet Labs announced a $300M Series B led by Andreessen Horowitz, with participants including Sapphire Ventures, Menlo Ventures, Arm, Samsung Ventures and others. The funding supports rapid growth as token demand and datacenter capacity surge, while power constraints push for higher throughput per kW. Gimlet claims a multisilicon, heterogeneous inference cloud that disaggregates workloads across GPUs, near-memory compute, dataflow accelerators and CPUs, routing model parts to the optimal silicon. They report 5–10x speedups for frontier workloads at the same power, and are hiring and inviting access to low-latency inference.

HN Comments

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

MikroTik RouterOS 7.23.4/7.24.2/6.49.21 released with security fixes; details were withheld. Nick Pratley analyzes three bugs and two chains: (1) a low-exponent RSA signature forgery enabling SSH bypass to forge signatures; (2) an SSH -2 username exploit that lets an authenticated user elevate to full admin via a trusted login path; (3) a post-auth mtget TFTP pathname overflow leading to memory corruption; 7.23.4 patches include SSH username validation, RSA digest checks, and safer mtget handling; guidance: patch, audit for ops users, RADIUS/User Manager config, restrict MAC-Telnet, rotate keys, and monitor for indicators like specific domains and autosupout; Mac-Telnet not fully resolved.

HN Comments

ExactTex. A gradually-typed superset of LaTeX

ExactTeX is a gradually-typed superset of LaTeX. Every .tex remains valid LaTeX, and adding annotations buys checked references, safe renames, and in-name error checks before PDF creation. You can rename a .tex to .xtex and annotate progressively; the core promise is a transport guarantee: untouched LaTeX bytes are preserved and emitted byte-identically. It offers three access points: xtex-cli (parsing/checking/emitting LaTeX), xtex-lsp (editor diagnostics), and a WebAssembly build (browser/Vitela editor) with identical core and a parity CI suite. Not a replacement for LaTeX, but stronger tooling and verification. MIT-licensed; see docs.

HN Comments

Portal by Spotify cut my Claude Code token usage by 90%

Spotify’s Portal with AiKA modes cuts Claude Code token use by routing IO-heavy tasks to cheaper worker models. Two modes: bulk-reader (reads multiple files for analysis) and code-writer (generates code from a spec with exact patterns), running on ephemeral runtimes via Portal CLI/API with no infra. In a Java monorepo, bulk-reading saved ~90% of tokens; code output is written directly to disk without Claude seeing it. Limitations: editing and deep reasoning can’t be delegated; latency ~10–30s per call. Setup: install plugins and run portal setup; modes are public and shareable.

HN Comments

Show HN: Moadim.io – A scheduler for agents

Moadim is an open-source loop engine for AI agents. A loop combines a prompt, schedule, and agent (Claude, Codex, Hermes, NanoClaw, Pi); each tick runs the agent in an isolated workbench with a watchdog and is reaped on completion. It runs locally via a portable in-process scheduler (no cloud or queue) and can install as a launchd/systemd service to survive reboots. Every loop is an HTTP/MCP endpoint with Swagger UI and an iCal feed. It ships REST/UI/MCP tooling, supports macOS/Linux, tmux, and self-hosts under the MIT license.

HN Comments

Artificial Analysis Intelligence Index v4.2

Artificial Analysis announces Intelligence Index v4.2, an interim update toward v5 with more complex tasks and private held-out test sets to curb gaming. New evaluations AA-Briefcase (multi-week agentic knowledge-work with private data) and GDP.pdf (4,592 pages across 100 PDFs in 10 domains) are added. Held-out weighting rises to 40%, with grading infrastructure upgrades for robustness. Leading results: Anthropic Claude Fable 5.1 tops the Index; GPT-6 Astra posts substantial gains and strong token efficiency; Meta Muse Spark 1.3 and Gemini 3.8 Flash remain competitive. Further incremental releases toward v5 are planned.

HN Comments

Can guitar frets perform multiplication?

Access to www.charlespetzold.com is blocked by the site's security system. The message explains blocks can be triggered by certain requests or actions (e.g., specific words, SQL commands, improperly formatted data). To resolve, contact the site owner and provide the Request ID: 76384680-0588-4ce2-9aee-bd2644173678.

HN Comments

Record-High 89% in U.S. Say Government Corruption Widespread

Gallup reports record-high 89% of U.S. adults say government corruption is widespread in 2026, up 10 points from 2025 and the highest in two decades. Democrats’ concern surged to 91%, independents 90%, Republicans 83%. Perceptions of government corruption are higher than business corruption (89% vs 71%). The gap between U.S. and OECD nations widening; U.S. tops OECD in perceived government corruption. Survey conducted May 1–June 10, 2026, with 1,000 adults; margin ±4.1 points.

HN Comments

Icons as a Service

Through the Ark of the Covenant as a case study, the piece argues that religious images become powerful, often misunderstood symbols that spark iconoclasm across cultures. It traces debates from the Second Commandment to Islamic tawhid, Byzantine Iconoclasm, and Jewish/Christian thinkers like Calvin and Maimonides, illustrating how 'images' can become idolatrous or dangerous representations. The essay then links these threads to contemporary 'Icons as a Service'—AI image generation that externalizes thought and accelerates hyperreality and deterritorialization, drawing on Deleuze, Baudrillard, and myth-making (e.g., Wyatt Earp).

HN Comments

Some more thoughts on random_page_cost

Vondra argues that random_page_cost is a proxy for several imperfect aspects of the PostgreSQL cost model—memory usage, caching, and the size of the active data set—none of which the planner fully accounts for. Disk I/O costs vary by storage and caching, so the 4.0 default is not a raw I/O cost and increasing it can hurt performance. There is no universal right value; tuning must be system-specific and feedback-driven (e.g., via pg_stat_statements), by iteratively adjusting and monitoring top queries to see effects on the active set and locality.

HN Comments

Digital Sovereignty Is Written in PHP

Digital Sovereignty Is Written in PHP argues Europe’s public sector increasingly relies on PHP-based platforms (notably Germany’s TYPO3-based Gov Site Builder and Drupal elsewhere). Germany’s €108m migration to GSB 11 shows a national shift to PHP, with Nextcloud-based sovereign tools while IO paths move to Rust. A funding gap exists: dependencies lack sustainable upstream maintenance. The PHP Foundation highlights upstream funding via the Sovereign Tech Agency and urges procurement reforms: 20% weight for verified open-source contributions, 2–5% maintenance budgets, and a 30-day upstream release rule. Calls on public bodies and contractors to adopt these measures.

HN Comments

Updates on HEIR, the Homomorphic Encryption Compiler Project

HEIR is Google's homomorphic-encryption compiler that turns programs into encrypted-data executions, enabling private inference without revealing inputs, outputs, or intermediates. The article (a companion to Google's post) shows HEIR compiling small ML models and running them encrypted; for a credit-card fraud detector, HE inference runs ~2 seconds on a single CPU, vs ~0.5 ms in cleartext—a ~4,000x slowdown. Key bottlenecks are evaluation-key memory and per-user key material. Use cases include remote diagnostics and B2B analytics. Roadmap: LLVM/MLIR-based backend, GPU/TPU backends, new schemes, benchmarking; open source; invites collaboration.

HN Comments

RSA-260 Factorized

A viral X post claims a giant integer divides RSA-260, posted by penlu/penlume. The thread, which has about 15.6 million views, prompts replies referencing RSA-155 and jokes about character limits from figures like Alec Muffett and Elon Musk.

HN Comments

GPT-6 Astra on OpenRouter

GPT-6 Astra is OpenAI’s flagship for demanding end-to-end work, excelling in long-horizon tasks with software, research, and browser use. OpenRouter serves it via OpenAI and Azure (US), with routing modes Balanced, Nitro, and Exacto. Pricing: $10 per 1M input tokens, $50 per 1M output tokens; Cache Read $1/1M, Cache Write $12.50/1M, Web Search $10 per 1K calls. Context window: 1,050,000 tokens; up to 128,000 completion tokens. Inputs: PDFs, images, text; outputs: text. Tools and structured outputs supported (tool calling and JSON). Released Sept 4, 2026.

HN Comments

Made by Johno Whitaker using FastHTML