AI Summarized Hacker News

Front-page articles summarized hourly.

BGP ORIGIN attribute manipulation and its impact on the Internet

Cloudflare researchers examine the BGP ORIGIN attribute, which should not be modified after origination. Analyzing RIPE RIS/RouteViews data, they find 89.8% of routes use IGP, 3.5% EGP, 6.7% INCOMPLETE. They observe widespread ORIGIN rewriting: about 10% of direct peers modify ORIGIN, and ~70% of IPv4 and 67% of IPv6 AS_PATHs show ORIGIN reset to IGP. The manipulation is concentrated among top ASes (including some Tier-1s) and shifts traffic toward rewriters, altering routing decisions. They advocate deprecating or scrubbing ORIGIN and restarting IETF discussions.

HN Comments

The small, real, original web

The article champions the “small” or “indie” web—the human-made, non-corporate Internet that predates ads and big platforms. It argues the web isn’t dying and traces the shift from ad-free origins to today’s ad glut. It offers practical ways to reclaim the web: host and maintain personal sites (Neocities, Porkbun for TLDs, Bear), run blogs, and build digital gardens; embrace decentralised services (Mastodon, PeerTube, Lemmy) and discoverability tools (RSS with PowRSS). It advocates a return to a simple, readable, user‑built web.

HN Comments

Extending Polars with Rust Expression Plugins

fenic is a semantic DataFrame library using Polars as the core engine for AI/LLM pipelines. To cover text workloads Polars lacks, they built nine Rust expression plugins via pyo3-polars. They run in-engine over Arrow, produce declared dtypes, and compose with native ops in a single expression tree, avoiding Python UDFs. Python registers namespaces and plugin functions; Rust exposes #[polars_expr] kernels taking &[Series] and returning Series. Output types can depend on kwargs via output_type_func_with_kwargs. Plugins use zero-copy Arrow conversion and careful broadcasting for performance. Built with maturin, with tight Polars version pins. Result: end-to-end, one expression tree, no Python round-trips.

HN Comments

Don't Take the Black Pill [video]

Could not summarize article.

HN Comments

Self-host your mail server

The piece argues you can self-host a mail server in 2026, even at home, if you have a static IPv4, no CGNAT, a configurable PTR, and open ports (25, 143, 465, 587, 993). It covers software options (docker-mailserver, Mailcow, ISPConfig), DNS records (SPF, DKIM, DMARC, MX) and a PTR. It notes outages are tolerable since mail retries. It recommends testing with mail-tester. Spam is addressed with local anti-spam using rspamd and a local LLM (Gemma-4-12B-it-qat) via llama.cpp. Clients include Thunderbird or webmail; maintenance and backups are essential. Conclusion: feasible, worth trying for data sovereignty.

HN Comments

Gsxui – Shadcn-style components for Go

gsxui is a shadcn-style component library for gsx in Go, offering copy-in, type-checked, server-rendered UI components styled with Tailwind. It provides a range of components (buttons, dialogs, inputs, cards, etc.) and documentation hosted on GitHub. Install and bootstrap via commands like go install github.com/gsxhq/gsxui/cmd/gsxui@latest, then gsxui init and gsxui add button. The example shows a Dialog rendered by the native <dialog> element with no client framework required, part of gsxui’s suite.

HN Comments

The hardest way to make a GIF

Will Grant shows how to make a GIF the hard way: shoot a 35mm plastic-camera sequence (Lomo ActionSampler) at ~4 fps, develop the film at home, photograph each frame on an LED panel, process RAWs in Affinity, crop/align frames, then assemble a looping 4fps GIF with ImageMagick, adding 50% opacity tweens for smoothness. The result is a GIF captured from real life on 35mm film; next project: IMAX.

HN Comments

DuckPGQ – A DuckDB community extension for graph workloads

DuckPGQ is a DuckDB community extension for graph workloads implementing the SQL/PGQ standard (SQL:2023), used for in‑process, high‑performance graph analytics. It’s easy to install with no dependencies and supports CLI, Python, NodeJS, R, and Java to install/load from the community repository. Documentation covers creating PROPERTY GRAPHs (SNB, airline, finbench) and running queries such as shortest path, mutual friends, most popular people, and transfers. It is a work in progress and invites feedback.

HN Comments

Fil-C: Garbage In, Memory Safety Out [video]

Could not summarize article.

HN Comments

I got into YC by hacking it

Obaid describes discovering a cryptographic flaw in Paxel, YC's tool for Startup School applications. He found Paxel’s results pipeline accepted forged reports because nonce validation didn’t bind all score fields with a signature, allowing anyone to upload manipulated scores and notes to YC’s ranking database (about 1.2 million reports). He built a self-sponsored boosting proxy to test the vulnerability, briefly letting users rank at the top. YC patched the flaw within hours, adding proper HMAC signing and field encryption; the author was invited to Startup School SF.

HN Comments

Nvidia, Microsoft, Meta warn against overregulating open-weight models

Could not summarize article.

HN Comments

Apple won't let me show my app

An app developer laments Apple’s heavy App Store review load and slow, often automated, rejection replies amid a boom in vibe-coded apps, noting delays even for big apps. The core gripe: Wiseday was rejected for screenshots not showing the app in use, despite guidance that screenshots should convey the app’s core concept. The author argues their screenshots do reflect the UI and its main value (a page with three functions) and urges reviewers to consider such objections. The piece highlights tension between app presentation and review rules.

HN Comments

Claude Opus 5

Anthropic launches Claude Opus 5, a proactive model near Fable 5 in capability but at half the price. It leads coding and knowledge-work benchmarks, rivals Mythos 5 in cybersecurity but is behind there; designed for daily use as the default on Claude Max and strongest on Claude Pro. Opus 5 improves performance for the same cost as Opus 4.8, excelling across Frontier-Bench, CursorBench, ARC-AGI, Zapier AutomationBench, OSWorld, and life sciences tasks. It emphasizes verification and safer, more aligned behavior; Mythos 5 remains stronger in biology and exploits. Price: $5/1M input, $25/1M output; Fast mode available.

HN Comments

Proving a Human Wrote Something

Explores proving human authorship in the AI era. The author, a coder who uses AI but values human effort, presents Semoi—a Obsidian plugin that records writing time and keystrokes, uploads them to a server to cryptographically sign and mint a proof of authorship, and produces an image badge. He argues this heuristic—time and keystroke patterns—helps distinguish humans from LLMs, though not foolproof and easy to circumvent. It's a starting point he hopes spurs better ideas, with a nod to Lucia Joyce.

HN Comments

Making Xen's dom0 I/O path NUMA aware

Edera closes the Xen dom0 I/O NUMA gap by making dom0 memory placement and paravirtual I/O topology NUMA-aware on multi-node hosts. It extends SRAT/SLIT/CPUID synthesis to dom0, exposes host proximity domains via a new hypercall (XENMEM_get_mfn_pxms), and partitions memory into per-node pools. Ring pages, IRQs, and backend threads are pinned to the corresponding host node; frontends/backends distribute rings per Linux node; XPS maps TX queues to node-local CPUs. End-to-end, the domU→dom0 path stays on one node, reducing cross-node traffic and latency. It also fixes a latent vNUMA memory placement bug.

HN Comments

Unitree As2-W

Unitree As2-W is a rugged industrial quadruped that blends wheels and legs for outdoor inspection and heavy tasks. It handles stairs, gravel, and 80 cm obstacles with 45° slopes at speeds over 6 m/s. Weighing ~25 kg with a 648 Wh battery, it supports static payload up to 150 kg and ~16 kg while walking; range >33 km unloaded and >25 km with load. IP54, ISS 3.0 side-follow, 64–128‑line LiDAR, 8‑core CPU, 150 TOPS AI expansion, open SDKs; Orin NX option; 7-inch wheels.

HN Comments

Be skeptical of OpenAI's rogue hacker agent story

John Thickstun argues OpenAI’s “rogue agent” episode is part of a media play since GPT-2 to portray AI as dangerously powerful, boosting investment and favorable regulation. He recounts the claim that a model hacked HuggingFace, noting the doomsday framing while OpenAI seeks capital and regulatory shelter. Readers should resist manipulated press releases and question who benefits. He adds AI will both uncover and fix security flaws; broad access could strengthen defenses, though guardrails and geopolitics push toward centralized control.

HN Comments

Online Historical Encyclopaedia of Programming Languages

HOPL Online is an online roster and genealogy of 8,945 programming languages from the 18th century to today, with 7,800 influence links and over 11,000 citations. It features a genealogical tree, advanced search, and sections on what a computer language is, taxonomy, references, and external links. Credits include Diarmuid J. Pigott and colleagues (1995–2020). Do not copy or reproduce; errata and crash reports to [email protected]. The text also contains internal error notes and other artefacts.

HN Comments

Micro-SaaS Is Dead. Service With A Software Replaces It

AI has collapsed the value of generic micro-SaaS. The real value now lies in "Service with a Software"—private, overfit tools that enable a single service to be unbeatable and not saleable. The software is an instrument; the service is the product. Distribution, trust, and context—not the code—determine success. Custom work remains scarce because it feels like consulting, but it’s the true differentiator. Build small tools as personal infrastructure, in public, as community gifts. The moat is the accumulated data, the fit with a world, and trust, not the code itself. Where you point it matters.

HN Comments

The rise and fall of language diversity through the Holocene

Could not summarize article.

HN Comments

Made by Johno Whitaker using FastHTML