AI Summarized Hacker News
Front-page articles summarized hourly.
Critiques the misuse of multipart/alternative for error messages, arguing text/plain parts must truly be alternatives to the HTML—not just errors. Such parts confuse old clients, MIME-capable clients with preferences, and users who expect a usable plain text version. If you can’t produce a useful text/plain version, omit it rather than say “Plain text version not available,” and consider cleaner HTML-based approaches (e.g., via HTML comments) to avoid confusion and spam flags.
HN Comments
Norbert Kozsir describes turning work into a 2D spatial canvas called Campus (FlutterFlow) to combat context switching. After exploring 3D (Three.js) and Minecraft prototypes, Campus presents an infinite 2D canvas where tiles are live artifacts (terminals, browsers, assets) rather than links. It groups related work spatially, enabling memory-like context and easier collaboration. It supports opt-in multiplayer with local-first execution; assets are hashed and fetched as needed via a fanout server, with eventual P2P approaches. A shared space includes light local chat. Campus is free for macOS; future plans include WASM extensions, mobile, and web/3D capabilities.
HN Comments
The piece argues that many hobby programming communities (OSDev, LangDev, TxtDev, EmuDev, RLDev, the demoscene, code golf) are increasingly hostile to LLM usage. They prize hard-won, slow mastery and view LLMs as missing the point or even cheating. Early engagement often backfired due to shallow LLM understanding and gatekeeping. In these circles, respect comes from years of activity and deep domain knowledge, not just producing working code. LLMs should act as a force multiplier for experts, not a substitute for craft; expertise doesn’t immunize against being fooled by LLMs.
HN Comments
Access to acm.org is blocked by Cloudflare’s security service. The block may result from actions that trigger the system (e.g., specific words, SQL commands, or malformed data). To resolve, email the site owner with what you were doing and include the Cloudflare Ray ID (shown on the page) and your IP.
HN Comments
Threat actors increasingly host phishing pages on legitimate cloud platforms (Cloudflare Workers, Vercel, Netlify, GitHub Pages, IPFS) to exploit trust and evade detection. In a multi-stage AitM attack, they harvest emails, bootstrap a transparent proxy via a service worker to rewrite traffic, and use BitB browser-window spoofing to capture credentials and MFA tokens. From Aug 2025–Jul 2026, security solutions blocked 224,984 unique third-level domains on cloud platforms; top abused domains include pages.dev, vercel.app, github.io, netlify.app. Over 390k phishing pages were neutralized. Defenses: layered security, verify URLs, avoid unexpected CAPTCHAs, and beware BitB/URL spoofing.
HN Comments
Sula is a Gemini protocol server implemented in Scryer Prolog. It requires a patched Scryer Prolog (branch js/fixes) with patches: copy_stream/2 for streaming, fix to pio, non-blocking poll loop for SIGINT, port to rustls, and optional client cert in tls_server_negotiate. Build: clone scryer-prolog, cargo install, ensure openssl on PATH. Run: sula.pl --addr HOST:PORT --hostname NAME --content DIR --certs DIR. Features: TLS via rustls with hostname verification, mime-type based content negotiation, text responses, binary streaming via copy_stream, per-connection error handling, graceful shutdown. Planned: client certs, config persistence, CGI, rate limiting, virtual hosting, multi-threading, hot reload.
HN Comments
Meta AI releases Muse Code (beta), a terminal coding agent powered by Muse Spark 1.2. It handles planning, writing, and validating code across large repos, using persistent async subagents to speed multi-step tasks. It runs on macOS/Linux via a curl install and logs every model call and tool action in a local event log for restart-safe, crash-resilient sessions. Default skills include /plan, /grill, and /goal. Muse Spark 1.2 improves code generation, debugging, and end-to-end workflows, with scaled training for coding and long-horizon tasks, co-trained with Muse Code. Availability now via Muse Code and Meta Model API.
HN Comments
DeltaDB is an early-access version control system that records work as it unfolds and keeps each change tied to the related agent conversation. It lets you rewind to any edit, trace code to its conversations, and spin up new branches at any point in history since the virtualized worktree makes branching effectively free. Teams can collaborate by sharing the thread (not a PR) and annotating in real time. Available downloads and early-access signup via DeltaDB’s site; from Zed Industries, 2026.
HN Comments
Could not summarize article.
HN Comments
celld is an open-source daemon that self-hosts Cloudflare Workers and Durable Objects on your own machines. Each Durable Object is its own SQLite DB owned by one node via object-storage CAS and replicated to a user-owned S3-compatible bucket; there is no central control plane. Nodes coordinate through bucket leases; idle cells hibernate and deployments are restored from the bucket. It embeds V8 and runs Wrangler bundles, invoking esbuild for Worker code, and deploys by writing to the bucket. Install via curl installer or Docker; TLS is not terminated at peers. Apache-2.0 license.
HN Comments
Naomi left OpenAI to join Conduit as a Founding Researcher to build telepathy: thought-to-text models trained on non-invasive neural data. The post sketches a 2027–2035 arc where humans converse with AI via thought, aided by neural headbands, and later write tech enabling near‑superhuman control. It covers data-scale needs, why Conduit (audacious vision, strong team, fun problems), and Naomi’s background, inviting conversation and noting ongoing hiring.
HN Comments
Q2 2026 GNU Hurd updates: an svg logo for an ethernet multiplexer was created; artwork improvements welcome. Sergey Bugaev released 9pfs as a public repo with basic 9P file operations and writes, aiming at virtio-9p VM sharing. Key changes include msync validation, priority tweaks in glibc and GNU Mach, OpenNTPD port work, a Rust trivfs prototype for Hurd translators, and mmap/diskfs/journal fixes; partfs expanded to multiple disks with dynamic /dev entries, plus storeio/device-tree discussions. Several porting efforts (OpenNTPD, s-build, Neovim) and CI/QEMU improvements continue.
HN Comments
Neon and Castform report a 4B open‑source model post‑trained with Castform that matches GPT‑5.6 Sol’s accuracy at ~100× lower cost. Castform turns a company’s existing data into RL post‑training tasks and manages the training loop to teach open models to use that data, using Neon Lakebase Search for retrieval against Neon’s Postgres corpus. The pipeline stages Neon + Lakebase Search, trains with RL feedback and observability, and uses Neon’s autoscaling, branching, and time‑travel to support thousands of isolated rollouts. Result: cheaper, faster, and potentially superior agent performance to frontier models.
HN Comments
Google Antigravity 2.0 is a platform to manage multiple autonomous AI agents across projects, with a unified UI to launch, monitor, and orchestrate their activities. It features dynamic subagents for parallel problem-solving, scheduled tasks via cron, and artifacts that communicate progress, plus customizable skills, hooks, and workspace settings. Projects organize conversations; live voice transcription (Gemini Audio) enables real-time prompts. Downloads are available for Apple Silicon and Intel, with docs, changelog, and pricing provided.
HN Comments
PromptArmor reports a zero-click data exfiltration vulnerability in Atlassian Rovo AI via indirect prompt injection, bypassing web-search controls. By uploading a file containing a hidden prompt injection and prompting Rovo to organize Jira tickets, an attacker can force Rovo to search Jira/Confluence and send sensitive data to the attacker’s site through Rovo’s insecure URL retrieval tool. The leakage occurs even if web search is disabled, since the URL tool remains; attacker logs capture the exfiltrated data. A second path uses insecure Markdown image rendering. Atlassian has not responded; the flaw remains.
HN Comments
An intermittent “no healthy upstream” in a search backend wasn’t CPU throttling but a metastable outage caused by unbounded downstream calls and retries. Logs showed a datastore socket read timeout; CPU metrics stayed flat and the system self-recovered, masking the real cause. The root: a downstream call without a deadline plus retries, inflating concurrency and causing head-of-line blocking and health-check failures. The fix: add explicit downstream timeouts, bound retries (token bucket with jitter), and consider circuit breakers, load shedding, or bulkheads. Validate by keeping worker occupancy flat under stress and preferring fast failure. Lesson: let evidence drive diagnosis.
HN Comments
Constraint Lab argues AI is a bubble like dot-com. It traces Andrej Karpathy and Claude in Slack as a paradigm shift—an ongoing, collaborative AI workspace. It notes a tension: leaders push AI, engineers demand understanding, layoffs cite AI, and people fear those who own AI versus those whose jobs it affects. Using a Pets.com/Amazon analogy, it says hype will persist even as fundamentals are debated. The piece posits dependable AI won’t arrive quickly enough to settle these questions, and invites readers to test hypotheses and form their own judgments about AI’s true impact.
HN Comments
Access to theparisreview.org is blocked by Cloudflare’s security. The page requests enabling cookies and explains that certain actions (e.g., submitting specific words, SQL commands, or malformed data) can trigger the block. To resolve, email the site owner with what you were doing and include the Cloudflare Ray ID from the page; your IP is shown.
HN Comments
Jeff Dean announces Discovery Loop, a Public Benefit Corporation with Sanjay Ghemawat, Oriol Vinyals, and Quoc Le, to automate machine learning, science, and engineering to accelerate discoveries. The plan is to automate the experimental loop, starting with ML research and engineering, with potential applications beyond. They’ve created a pitch deck for VC firms, aim to hire a founding team and secure office space, and will build their product at discoveryloop.com.
HN Comments
Distributed Key Generation (DKG) lets a group generate a shared private key without any member holding the full secret, so a threshold of parties can reconstruct it. Each party picks a random r_i and secretly shares [r_i] using a degree-1 polynomial; addition makes the sum [r], and each party computes [r]G to obtain the public key rG. The article shows a 3-party, threshold-2 example in mod 17 where no one learns r and any two parties can recover it. Real-world DKG handles asynchronous networks and malicious actors; use cases include wallet creation and key rotation.
HN Comments
Made by Johno Whitaker using FastHTML