AI Summarized Hacker News

Front-page articles summarized hourly.

Drone-Bench: Tracking simple drone surveillance capabilities of frontier models

Andon Labs releases Drone-Bench, a benchmark that measures how well AI models can write code to autonomously surveil an office with a low-cost drone. It covers five tasks—Reconstruct (3D map and obstacle slice), Localize, Navigate, Detect, and Follow—each scored against a human baseline and run in isolation to avoid error chaining. Ten runs per model show no one beats the Reconstruct baseline, leaving end-to-end success at 0%. Best submissions improve dramatically over their first attempts (e.g., Fable-5), but average runs lag best by six months. The team notes misuse risk and outlines future extensions, including end-to-end evaluation and harder benchmarks.

The Secret Origins of Amazon's Alexa

Jeff Bezos sketches a cloud-powered, voice-controlled device in 2011 for $20. Hart leads the Alexa effort; Ivona and Evi acquisitions build Alexa’s voice and knowledge. The team wrestles with far-field speech vs. knowledge graphs; Rohit Prasad advocates deep learning. They underestimate data needs; Bezos pushes for a magical product. AMPED data-collection program uses Appen, decoy devices, and thousands of workers to gather massive speech data. By 2014 Echo launches modestly; Alexa’s smartness comes from massive data, helping Amazon outrun Google/Apple.

Reporting Web 3D Capabilities on a Budget of $3 a Month

Ben Houston describes Web3DSurvey, a low-cost system (C$3/mo) that reports real-world WebGL, WebGL2, and WebGPU support. It uses two Cloud Run services, a partitioned BigQuery store, and a transparent JSON cache. A tiny iframe collector probes browsers for capabilities and sends samples to a lightweight API that filters bots and writes to BigQuery in batches; five-day partitions with 120-day TTL. Reporting runs client-side from small SQL queries, with many small aggregations and JavaScript rollups. A 2-day TTL JSON cache reduces BigQuery load; cloud costs remain around CAD 3, even with 500k samples/month. Future improvements include typed schemas and migrations.

Marimo Now Runs in PyCharm

Marimo announces the first PyCharm plugin, bringing reactive notebooks to PyCharm and JetBrains IDEs. You can add a marimo notebook to a project, import code, and run interactive cells without leaving the IDE. Notebooks are plain .py files identified by a marimo import and App declaration; they integrate with Git/VCS. A local marimo server starts on opening a notebook; the plugin handles ports and lifecycle and uses the project’s Python env by default (sandbox mode via uv available). You can pair with AI via marimo-pair, try via JetBrains Marketplace, and the project is open source on GitHub.

Postgres LISTEN/NOTIFY actually scales

Postgres LISTEN/NOTIFY is often deemed non-scalable due to a global exclusive lock during commit, which serializes stream writes and caps throughput. The authors optimize LISTEN/NOTIFY-backed streams by buffering notifications in memory and flushing them in a single batch transaction, reducing lock contention. Readers also poll as a fallback for undelivered notifications. Benchmarks show up to 60K stream writes per second with 15–100 ms latency on a single Postgres server, saturating CPU rather than contention. Code and quickstart available; DBOS promotes durable execution tooling.

BGP ORIGIN attribute manipulation and its impact on the Internet

Cloudflare researchers examine the BGP ORIGIN attribute, which should not be modified after origination. Analyzing RIPE RIS/RouteViews data, they find 89.8% of routes use IGP, 3.5% EGP, 6.7% INCOMPLETE. They observe widespread ORIGIN rewriting: about 10% of direct peers modify ORIGIN, and ~70% of IPv4 and 67% of IPv6 AS_PATHs show ORIGIN reset to IGP. The manipulation is concentrated among top ASes (including some Tier-1s) and shifts traffic toward rewriters, altering routing decisions. They advocate deprecating or scrubbing ORIGIN and restarting IETF discussions.

The small, real, original web

The article champions the “small” or “indie” web—the human-made, non-corporate Internet that predates ads and big platforms. It argues the web isn’t dying and traces the shift from ad-free origins to today’s ad glut. It offers practical ways to reclaim the web: host and maintain personal sites (Neocities, Porkbun for TLDs, Bear), run blogs, and build digital gardens; embrace decentralised services (Mastodon, PeerTube, Lemmy) and discoverability tools (RSS with PowRSS). It advocates a return to a simple, readable, user‑built web.

Extending Polars with Rust Expression Plugins

fenic is a semantic DataFrame library using Polars as the core engine for AI/LLM pipelines. To cover text workloads Polars lacks, they built nine Rust expression plugins via pyo3-polars. They run in-engine over Arrow, produce declared dtypes, and compose with native ops in a single expression tree, avoiding Python UDFs. Python registers namespaces and plugin functions; Rust exposes #[polars_expr] kernels taking &[Series] and returning Series. Output types can depend on kwargs via output_type_func_with_kwargs. Plugins use zero-copy Arrow conversion and careful broadcasting for performance. Built with maturin, with tight Polars version pins. Result: end-to-end, one expression tree, no Python round-trips.

Don't Take the Black Pill [video]

Could not summarize article.

Self-host your mail server

The piece argues you can self-host a mail server in 2026, even at home, if you have a static IPv4, no CGNAT, a configurable PTR, and open ports (25, 143, 465, 587, 993). It covers software options (docker-mailserver, Mailcow, ISPConfig), DNS records (SPF, DKIM, DMARC, MX) and a PTR. It notes outages are tolerable since mail retries. It recommends testing with mail-tester. Spam is addressed with local anti-spam using rspamd and a local LLM (Gemma-4-12B-it-qat) via llama.cpp. Clients include Thunderbird or webmail; maintenance and backups are essential. Conclusion: feasible, worth trying for data sovereignty.

Gsxui – Shadcn-style components for Go

gsxui is a shadcn-style component library for gsx in Go, offering copy-in, type-checked, server-rendered UI components styled with Tailwind. It provides a range of components (buttons, dialogs, inputs, cards, etc.) and documentation hosted on GitHub. Install and bootstrap via commands like go install github.com/gsxhq/gsxui/cmd/gsxui@latest, then gsxui init and gsxui add button. The example shows a Dialog rendered by the native <dialog> element with no client framework required, part of gsxui’s suite.

The hardest way to make a GIF

Will Grant shows how to make a GIF the hard way: shoot a 35mm plastic-camera sequence (Lomo ActionSampler) at ~4 fps, develop the film at home, photograph each frame on an LED panel, process RAWs in Affinity, crop/align frames, then assemble a looping 4fps GIF with ImageMagick, adding 50% opacity tweens for smoothness. The result is a GIF captured from real life on 35mm film; next project: IMAX.

DuckPGQ – A DuckDB community extension for graph workloads

DuckPGQ is a DuckDB community extension for graph workloads implementing the SQL/PGQ standard (SQL:2023), used for in‑process, high‑performance graph analytics. It’s easy to install with no dependencies and supports CLI, Python, NodeJS, R, and Java to install/load from the community repository. Documentation covers creating PROPERTY GRAPHs (SNB, airline, finbench) and running queries such as shortest path, mutual friends, most popular people, and transfers. It is a work in progress and invites feedback.

Fil-C: Garbage In, Memory Safety Out [video]

Could not summarize article.

I got into YC by hacking it

Obaid describes discovering a cryptographic flaw in Paxel, YC's tool for Startup School applications. He found Paxel’s results pipeline accepted forged reports because nonce validation didn’t bind all score fields with a signature, allowing anyone to upload manipulated scores and notes to YC’s ranking database (about 1.2 million reports). He built a self-sponsored boosting proxy to test the vulnerability, briefly letting users rank at the top. YC patched the flaw within hours, adding proper HMAC signing and field encryption; the author was invited to Startup School SF.

Nvidia, Microsoft, Meta warn against overregulating open-weight models

Could not summarize article.

Apple won't let me show my app

An app developer laments Apple’s heavy App Store review load and slow, often automated, rejection replies amid a boom in vibe-coded apps, noting delays even for big apps. The core gripe: Wiseday was rejected for screenshots not showing the app in use, despite guidance that screenshots should convey the app’s core concept. The author argues their screenshots do reflect the UI and its main value (a page with three functions) and urges reviewers to consider such objections. The piece highlights tension between app presentation and review rules.

Claude Opus 5

Anthropic launches Claude Opus 5, a proactive model near Fable 5 in capability but at half the price. It leads coding and knowledge-work benchmarks, rivals Mythos 5 in cybersecurity but is behind there; designed for daily use as the default on Claude Max and strongest on Claude Pro. Opus 5 improves performance for the same cost as Opus 4.8, excelling across Frontier-Bench, CursorBench, ARC-AGI, Zapier AutomationBench, OSWorld, and life sciences tasks. It emphasizes verification and safer, more aligned behavior; Mythos 5 remains stronger in biology and exploits. Price: $5/1M input, $25/1M output; Fast mode available.

Proving a Human Wrote Something

Explores proving human authorship in the AI era. The author, a coder who uses AI but values human effort, presents Semoi—a Obsidian plugin that records writing time and keystrokes, uploads them to a server to cryptographically sign and mint a proof of authorship, and produces an image badge. He argues this heuristic—time and keystroke patterns—helps distinguish humans from LLMs, though not foolproof and easy to circumvent. It's a starting point he hopes spurs better ideas, with a nod to Lucia Joyce.

Making Xen's dom0 I/O path NUMA aware

Edera closes the Xen dom0 I/O NUMA gap by making dom0 memory placement and paravirtual I/O topology NUMA-aware on multi-node hosts. It extends SRAT/SLIT/CPUID synthesis to dom0, exposes host proximity domains via a new hypercall (XENMEM_get_mfn_pxms), and partitions memory into per-node pools. Ring pages, IRQs, and backend threads are pinned to the corresponding host node; frontends/backends distribute rings per Linux node; XPS maps TX queues to node-local CPUs. End-to-end, the domU→dom0 path stays on one node, reducing cross-node traffic and latency. It also fixes a latent vNUMA memory placement bug.

Made by Johno Whitaker using FastHTML