Cihangir Bozdogan — Daily Tech & AI News
Daily · tech & AI
Hand-picked from Hacker News, Reddit, GitHub Trending and engineering blogs.
Updated
Hacker News · 39
Ryan Dahl announced that the entire Deno team is moving to Cloudflare to work alongside the Workers and Durable Objects teams. The pitch is to make the Workers-style programming model, where scaling is built into the code rather than bolted on as infrastructure, the default way to build servers on Cloudflare or your own hardware. That builds on celld, Deno's newer runtime for distributed applications, which already follows the Workers model. The catch is that the Deno runtime itself gets a year of monthly bug-fix and security releases and then active development ends, though the code stays open source for anyone who wants to continue it. Anyone running Deno or Deno Deploy in production now has a migration clock ticking.
read source →What people are saying
The top thread reads this as an acquihire that effectively ends Deno, and several longtime users said they are sad to lose their favourite runtime and its permission-based security model. Some argued Deno lost its way once npm compatibility became the priority; others asked what Cloudflare gains by commoditising Workers through celld, and hoped workerd adopts Deno's sandboxing. Discussion: https://news.ycombinator.com/item?id=50019911Whistle is a single 16.9 MB model file aimed at phones, wearables, robots, cars and microcontrollers, with no runtime dependencies beyond Cactus's C++ engine. It transcribes up to 30 seconds of 16 kHz audio in one pass in seven languages (English, German, French, Spanish, Italian, Dutch, Polish), detects the language automatically, and reports the first token in about 11 ms. It also returns word-level timestamps and can emit raw speech embeddings without decoding. Because it shares an engine and quantisation with Cactus's Needle model, one binary can go straight from a voice clip to tool calls. There is an in-browser demo that downloads the model and keeps audio on the device.
read source →What people are saying
Hands-on reports were mixed: one user who rebuilt an Echo Show around local voice found Whistle much less accurate than a 1.7B Qwen ASR model on a GPU, and another got hallucinated words on a famous movie line. Others asked for streaming output while speaking and for an accuracy comparison against NVIDIA Parakeet, which many already run locally on Macs. Discussion: https://news.ycombinator.com/item?id=50008427Oxide builds integrated rack-scale computers for running cloud-style infrastructure on premises. Its post says ordinary operations became profitable enough this spring that the company paid income tax, which is rare for a hardware startup. The constraint now is cash flow: demand exceeds supply, and a hardware company must pay for components and manufacturing long before systems ship. The $445M Series D exists so Oxide can accept more orders without betting the company on supply shocks. It is a useful signal that there is real demand for owning your own cloud-like hardware rather than renting it.
read source →What people are saying
Commenters were overwhelmingly positive about Oxide's engineering and its unusually candid communication style. A few asked why it did not use trade finance or debt against orders instead of selling equity, one wished it pushed AI less in its marketing, and a past applicant complained about a very long hiring process. Discussion: https://news.ycombinator.com/item?id=50020014REA installs with one command (npx rea-agents@latest setup) and connects disassembly and analysis tools to an existing coding agent. The goal is to let the agent decode branches, trace calls and recover the rule behind a feature, so you can explain, change or rebuild it without being a reverse-engineering expert. The landing page walks through a real example, working out why the Windows Calculator returns 220 for 200 + 10%, from raw x64 instructions. It ships analysis guides and showcase projects, including a decompilation of an old Touhou game. Android support currently relies on jadx through MCP.
read source →What people are saying
People were impressed by the quality of the showcased Touhou decompilation, noting matching output, sensible variable names and little leftover Ghidra noise. Several said frontier models already do this well unaided, one recounting how Claude patched two long-standing Remote Desktop client bugs from the binary; another warned that the jadx-based Android path is too slow for analysing APKs at scale. Discussion: https://news.ycombinator.com/item?id=50028275The author, who builds explorable explanations, compares recent models for design work: earlier attempts with Opus 4.8, Fable 5.1 and GPT-6 Astra needed heavy hand-holding to fix layout overlaps and generic styling. After seeing Opus 5.5 build an interactive camera-lens lab in about an hour and a half for roughly $26 of API spend, he tested whether that quality was consistent. The prompt was to visualize the 55 cities of Italo Calvino's Invisible Cities, and the model worked autonomously for six hours. The post shows the one-shot result and argues Opus 5.5 is a step change specifically in visual design, not just in code.
read source →What people are saying
Readers of the book were split: some loved it, while others warned that seeing the cities rendered spoils the point of imagining them, and one argued the book is really about semiotics rather than city descriptions. A recurring reaction was that 'I built X with model Y' showcases now feel hollow, impressive in a technical sense but lacking the investment that made such projects compelling before. Discussion: https://news.ycombinator.com/item?id=50004790Python 3.15.0 shipped on October 9 with 5,643 commits from 1,012 contributors. Headline language changes include explicit lazy imports for faster startup (PEP 810), UTF-8 as the default encoding (PEP 686), new sentinel and frozendict built-ins, and unpacking inside comprehensions. The experimental JIT now gives about 7-8% on x86-64 Linux and 11-12% on Apple Silicon, and a new Tachyon sampling profiler arrives in a dedicated profiling package. Free-threaded builds get a stable C ABI, frame pointers are on by default for better system profiling, and the official macOS installer now includes free-threading support. The release also warns that IDLE and tkinter dialogs can hang on macOS 27.
read source →What people are saying
A library maintainer noted the bigger practical win is that Python 3.10 drops out of support, so libraries can start using 3.11 features; a contributor highlighted the free-threaded stable ABI (abi3t) as the hardest ecosystem work. Others cheered lazy imports and noticed the source tarball grew by half, mostly from large animated GIFs in the docs demonstrating the new profiler. Discussion: https://news.ycombinator.com/item?id=50021127TypeSafe AI makes Jev, a 'decision model' that picks among fixed options in a single forward pass rather than generating text, which made it popular for fast classification and routing. The round values the company at $7.5B, is led by Andreessen Horowitz with Sequoia and DCVC participating, and adds Martin Casado to the board. The company says a third of the Fortune 500 already use Jev and promises more 'machine-native' models plus enterprise features. The timing is notable because the category exploded within days of Jev's release, with Microsoft, OpenAI and many open-weight models now competing.
read source →What people are saying
Most of the thread questioned the valuation: within a week of Jev's launch there were dozens of comparable decision models, many open source, plus OpenAI's Decisions API and Microsoft's Decision-1. Defenders argued TypeSafe still leads part of the latency-quality curve and has strong brand recognition, while some suspected Jev hype on HN was astroturfed. Discussion: https://news.ycombinator.com/item?id=50023450The problem it targets is an agent that needs you to click something, like a permission dialog, but only says so in a terminal you are not watching. bigarrow lets the agent point at a named UI element in a given app with a text label, drawn on a transparent click-through overlay across every display and Space. It is a single Swift binary with no daemon, no menu-bar icon and no telemetry, and drawing needs no macOS permissions. The overlay removes itself, and the repo ships a ready-made skill for Claude Code and Codex. It is MIT licensed.
read source →What people are saying
Reactions ranged from mockery about needing a robot to say which button to press, to praise for its accessibility potential for less technical or disabled users. One commenter raised a security worry: if it can draw over permission prompts, a malicious caller could hide the decline button or relabel the approve one. Discussion: https://news.ycombinator.com/item?id=50018817Gross, who teaches computer science at Montana State, answers the question he keeps getting: should anyone still become a programmer? His 'yes' rests on programming being about problem solving and controlling complexity, which AI does not make less valuable. His 'and' is that juniors must write code by hand, because if you never write it you cannot really read it, and reading code matters more when AI generates it. He rejects the analogy that prompting is to code what high-level languages were to assembly, since compilers are deterministic and AI tools are not. The essay is from February 2026 but resurfaced this week.
read source →What people are saying
Gross joined the thread to say he still stands by the essay and that the most effective vibe coders he sees already have strong fundamentals. Critics compared it to hand-weaving rugs before industrialisation, and one argued the real distinction from compilers is not determinism but being able to reason precisely about how source changes map to program behaviour. Discussion: https://news.ycombinator.com/item?id=50003796When Telegram Desktop is already running, a newly launched instance forwards clicked tg:// links to it over a local socket as plain text, without escaping the character used to separate commands. A crafted link therefore arrives as several commands. One of them can reach an internal interpret: URI scheme that reads a file and sends it to a chat with no permission check or confirmation, turning a click into arbitrary file read. The researcher used it to steal the session files that make up a user's login. It is tracked as CVE-2026-107181 (CVSS 8.1), affected versions up to 7.2.8, and was fixed in 7.2.9.
read source →What people are saying
Commenters quoted the old observation that any sufficiently complex input format is effectively bytecode and its parser a virtual machine. Many used it to argue desktop apps should not get blanket access to all files and the network by default, citing sandboxes like firejail, and some noted Telegram re-enabling settings users had turned off. Discussion: https://news.ycombinator.com/item?id=50029123Starting with the next release, Bitwarden apps published to the various app stores will be commercially licensed builds instead of the GPLv3 ones. Bitwarden says the GPLv3 version keeps being updated on GitHub, all current features exist in both, the store builds come from publicly auditable code, and self-hosting and the free plan are unaffected. The license change mainly targets people reselling Bitwarden. When asked how the two versions will differ, staff said some future features may only exist in the commercial build. Teams that depend on Bitwarden's open source status for compliance should watch which features land where.
read source →What people are saying
Several users accepted it as a reasonable answer to the open source funding problem as long as all source stays available and personal self-hosting works. Others were less charitable, saying it was inevitable after taking VC money, criticising the heavy browser extension, and pointing to alternatives like Vaultwarden with third-party clients. Discussion: https://news.ycombinator.com/item?id=50033407You run npx create-talorys@latest and get a private assistant with streaming chat, durable memory you can view and edit, and tasks, notes and projects manageable from the UI or by chat. Reminders, daily digests and optional AI routines run on Durable Object alarms, so nothing has to stay online. Only the most relevant memories are sent to the model on each turn, and there is no signup, telemetry or developer-run backend. It is designed to fit within Cloudflare's free tier.
read source →What people are saying
The top comments objected to calling it self-hosted when it depends entirely on Cloudflare; a reply countered that it is open source and swapping the AI calls for a local model server is a small change. One user warned about confusing Workers AI 'neuron' billing on paid plans, while others praised Durable Objects as a great primitive for this kind of app. Discussion: https://news.ycombinator.com/item?id=50031614MotherDuck's Mehdi Ouazza ran the DuckDB 2.0 alpha against 1.5.5 on an M5 laptop and on S3 to see what changes for people building tables and pipelines. The biggest win is async I/O: a count over a 2.2 GB, 228-million-row Parquet file on S3 dropped from 18.8 s to 7.7 s with no query changes. In 1.5 each worker alternated between waiting on the network and decoding; in 2.0 downloads and CPU work overlap. The post also covers faster recursive CTEs and other features from the commit log, with the caveat that gains depend on how your data is shaped and modeled.
read source →What people are saying
Readers pointed to the DuckPGQ extension for graph queries as an alternative to recursive CTEs, and noted the new C++ extension API should also speed up extension development. One database person argued DuckDB is still catching up to task-based engine designs like Umbra and CedarDB, and another was put off that the article dismissed the new triggers feature. Discussion: https://news.ycombinator.com/item?id=50035530MXC is now generally available as the containment layer of Microsoft's plan to run agents more safely, alongside upcoming Entra identity for agents and IT management controls. Developers declare in versioned JSON which files, network destinations, clipboard and UI an agent may use, and MXC enforces it with the right backend for the platform. Backends range from OS process sandboxes (Bubblewrap, Seatbelt, Windows process containers) through LXC and Windows Sandbox to micro-VMs like Hyperlight. It offers Rust, .NET and Node SDKs, persistent container lifecycles, and a learning mode that works out what permissions a workload needs. The code is MIT licensed on GitHub.
read source →What people are saying
Commenters who have hand-rolled sandboxes said a consistent frontend over Bubblewrap, Seatbelt and Windows containers is genuinely valuable, and liked the learning mode and clear telemetry disclosures. The main gaps raised were no hostname or IP-level network filtering on macOS, its size (about 350,000 lines of mostly Rust), and messy SDK build scripts; one asked for permissions that can be granted and revoked dynamically. Discussion: https://news.ycombinator.com/item?id=50016956Decision models return calibrated scores over a fixed set of options instead of generating text, which makes them cheap and fast for routing, classification, prioritisation, verification and workflow control. Microsoft says Decision-1 had the highest accuracy across a 36-benchmark suite of nearly 150,000 held-out questions. It also claims it was the fastest model measured, 2.5 times quicker than the runner-up H2O-Lightning-4B and 35 times quicker than GPT-6 Sol. The post was later updated to add accuracy and calibration comparisons against Jev, the model that kicked off the category.
read source →What people are saying
Commenters noted that, like many recent decision models, it appears to be built on a small Qwen model, and joked that the category has exploded in two weeks. One tester found it cheaper but slower than Jev in a small suite, with comparable quality, and called it the first commercial entry that justified its existence. Discussion: https://news.ycombinator.com/item?id=50024913The post explains what makes 'decision models' like Jev fast: rather than generating JSON token by token, the model only has to pick from a fixed set of answers in one forward pass. You get that by masking every token except the allowed options and taking the highest-probability one. It then shows how to build your own, and warns that raw token probabilities reflect next-token confidence, not the true chance the answer is correct, unless you calibrate them. Interactive diagrams step through prefill and constrained prediction.
read source →What people are saying
Several ML practitioners pointed out that 'decision models' are essentially classifiers, a decades-old idea, and one said watching the hype after years of failing to get interest in classifiers was painful. Others shared lighter alternatives, including a browser port of the Laya decision model answering under 200 ms and a CPU-trainable classifier called Jeffy. Discussion: https://news.ycombinator.com/item?id=50037949Hales, who led the formal proof of the Kepler conjecture, writes for mathematicians weighing what formalisation means for the reliability of mathematics. He explains what a formal proof is, how proof assistants like Lean and Rocq check it down to the foundations, and lists major formalised results including the four-colour theorem, Feit-Thompson and, this year, Fermat's Last Theorem, sphere packing and a Navier-Stokes blowup result. The core question is trust: which parts of the toolchain must be correct, and what changes when AI writes both the formal statement and the proof. It is a clear primer for anyone building or evaluating AI-for-math systems.
read source →What people are saying
The top comment asked what happens when the next soundness bug is found in Lean's kernel, given how much AI-generated mathematics will rely on it. Others recommended further reading on type theory versus set theory, and one disputed the term 'autoformalization', linking an essay arguing no such thing exists. Discussion: https://news.ycombinator.com/item?id=50024090Reflection AI is one of the few US companies focused on open-weight models, positioning itself as an American counterweight to Chinese labs like Qwen and DeepSeek. According to the Financial Times, Nvidia is negotiating to acquire it outright. Nvidia already builds its own open Nemotron models, so a deal would deepen its push from selling chips into owning a model stack. It fits a broader pattern of large AI players buying model startups rather than hiring teams from scratch.
read source →What people are saying
Commenters noted Nvidia had recently invested in Reflection and wondered about strategy given Nemotron already exists. Most read it as an acquihire, asking why Nvidia cannot simply hire researchers, while others contrasted US consolidation with Chinese labs shipping competitive open models. Discussion: https://news.ycombinator.com/item?id=50035886Step 5 Preview is StepFun's flagship model for agentic work, using a sparse mixture-of-experts design with 27B active out of 600B total parameters. It targets long tasks across large codebases and documents, with tool use and multi-step refinement, and claims particular strength in software engineering and finance. It has a 1M-token context window and costs $1 per million input tokens and $2.70 per million output tokens. It was released on October 8 and is currently served by a single provider.
read source →What people are saying
Fans of earlier Step Flash models, which ran well on 128 GB unified-memory machines, were disappointed that a 600B model is far too large to run locally. One commenter said Artificial Analysis rates it smarter and slightly cheaper than Gemini 3.8 Flash and planned a week of testing in OpenCode. Discussion: https://news.ycombinator.com/item?id=50007764Bevy 0.20 comes from 227 contributors and 817 pull requests. Solari, its real-time path-traced renderer, is faster, more accurate, supports more rendering features and now runs on macOS through Metal, alongside DLSS support. BSN, the new scene system, got syntax changes intended to make scenes easier to read and compose, plus a ready event for scene entities. Other additions include mesh shaders, WESL shaders, sprite materials, a pan-orbit camera, more UI widgets and faster bulk despawning. As usual there is a migration guide, since Bevy still breaks APIs between releases.
read source →What people are saying
A rendering contributor said a major change, making the renderer's CPU cost scale with changed entities only, went unmentioned, while criticising BSN's growing pile of sigils. Others enjoy learning Bevy but called it too immature for commercial products because of frequent breaking changes, and recommended a recent talk on the Solari path tracer. Discussion: https://news.ycombinator.com/item?id=50013610The project rewrites id Software's Quake engine in safe Rust and compiles it to run in a browser tab, with mouse, keyboard and gamepad support. The author built a visual-diff harness to show the port renders the same frames as the original WinQuake. It adds optional quality-of-life settings while keeping a 'Reset to Classic' mode that restores id's exact behaviour. The author says the port was built with heavy AI assistance, and a six-minute video explains how it works.
read source →What people are saying
Commenters were most impressed by the pixel-diff harness proving fidelity, calling it a showcase of getting computers to do work people could describe but would never find time for. Skeptics asked whether developers will now use LLMs to port open-source code to Rust and pass it off as their own work, noting Quake was already stable. Discussion: https://news.ycombinator.com/item?id=50016312Glyph, the creator of Twisted, contrasts the pushback against AI from writers, artists and musicians with programmers' general acceptance of AI coding tools. He traces that acceptance to the belief that programs are functional rather than expressive, and argues this is a mistaken view of what art is, borrowing John Berger's idea of 'mystification'. In his view mundane, functional work can still be art, and programming is a creative craft. The conclusion is that programmers' reasons for objecting to AI should be the same as other creatives'.
read source →What people are saying
Many commenters disagreed, saying most programmers do not value originality and much professional code is plumbing frameworks together with business logic. Several veterans said they enjoy programming more now that AI removes the drudgery, while others described their own aesthetic satisfaction in code, such as replacing 100 lines with 10. Discussion: https://news.ycombinator.com/item?id=50017357Zakaria built Rewind VM, a deterministic VM in which each Nix build run is a pure function of its inputs, including thread scheduling, so races reproduce reliably. It has grown a source panel, stack frames, bookmarks, thread lanes showing who held the CPU at each step, gdb support, and a 'check from here' feature that finds the exact step where a race occurs. He found the hard part of each feature already done by Nix: a debugger needs exact inputs, debug symbols and sources for the program and every library, shareable with others, which is what a derivation is. The post walks through a classic two-thread bank-deposit race to show it in action.
read source →What people are saying
Readers compared it to rr and to a local, smaller version of Antithesis, and asked how Rewind handles randomness. One predicted AI will drive Nix adoption by removing its learning curve, while a dissenting user said they lost trust after a complex flake caused Nix to delete itself. Discussion: https://news.ycombinator.com/item?id=50017247In a conversation with Justin Cormack, who worked on MirageOS, Huntley revisits unikernels, where the application is the operating system and there is no userland to spawn tools from. The traditional pain was that every networking, storage or email capability had to be written as a library; Mirage teams once pulled drivers out of NetBSD to get storage. His claim is that ideas dismissed as hard, like Nix, Bazel and unikernels, are now practical because agents can do the tedious implementation. He also pitches unikernels' smaller attack surface given the recent stream of Linux privilege-escalation bugs.
read source →What people are saying
Commenters disputed the security pitch: an attacker with code execution can bring their own tooling even without a shell, and a minimal system also shrinks your observability and debugging surface. One noted LLMs also make hardening a normal Linux system easier, and another suggested Zephyr as a practical unikernel-style base. Discussion: https://news.ycombinator.com/item?id=50033357Lynch separates the model (the LLM) from the agent (Claude Code, Codex, OpenCode and similar), and says the agents are now the bottleneck. His examples: OpenCode split a feature into ten embarrassingly parallel subtasks and ran them one by one, and Claude Code waits idle on long end-to-end tests before starting the next step. Agents never decide on their own to hand grunt work to a cheaper model or escalate to a smarter one, so the user has to micromanage model choice. They also know little about their own features and search the web to answer questions about themselves.
read source →What people are saying
The top replies said most of these are solved by asking explicitly, for example telling Claude Code to use subagents on cheaper models. Several said the post matched their experience a few months ago but that the latest frontier models now juggle and delegate well, while others still find agents fine only for small one-shot tasks. Discussion: https://news.ycombinator.com/item?id=50020947Cockroach Labs built a coding-agent pipeline for MOLT, its database migration toolkit, with hospital roles: triage nurses, fellows who write code, review attendings and discharge nurses who merge. Issues are patients, merging is discharge, and humans act as chiefs of medicine, with planning reviews, strict test coverage and record-keeping before code lands. Adding Db2 support took under two days and $4,172 in tokens, versus nine months and about $160K for Oracle support in 2024, with 32 sub-issues, 27 merged PRs and 55 review send-backs. Over five months the pipeline processed over a million lines of code with only seven reverts.
read source →What people are saying
One commenter praised the hospital metaphor as an efficient way to encode complex roles and relationships for agents, and another asked what mistakes the team made before finding a balanced setup. Skeptics said role-playing is not the secret to good code and they would not trust a database built this way, and one joked this explains recent GitHub Actions instability. Discussion: https://news.ycombinator.com/item?id=50021899The goal was an accurate, stable, feature-complete C++ recreation of a popular first-person shooter, and above all learning to run autonomous agents for months. The setup used Claude Max and Codex Pro, mostly Sonnet 5, with agents tracking work in one GitHub issue per source file, coordinating in a shared Discord channel, and using Hex-Rays' headless ida-mcp for disassembly. Three worker agents and one reviewer decompiled about 80% of the game in the first month. Key lessons: compacting context at 42% instead of 90% saved tokens and reduced drift, and an hourly cron re-injected a rules document to keep agents from skipping work or closing issues early.
read source →What people are saying
Several commenters said the cost came from demanding byte-identical assembly, and that aiming for functional equivalence per function could be 10 to 100 times cheaper. One identified the game from archived posts as Call of Duty: Modern Warfare 2 (2009), and another argued AI-generated ports like this do not really fit the 'preservation' framing. Discussion: https://news.ycombinator.com/item?id=50039092Most quant models take market data events and predict a price; this project asks whether a generative model can synthesise the events themselves, such as orders added, cancelled and executed, including when they arrive. The hard part is that market data is neither cleanly discrete like text nor continuous like video: actions are discrete, prices have such high cardinality they are almost continuous, and timing is truly continuous with spiky distributions. The write-up explains how autoregressive diffusion handles that mix and what worked. It is part of Jane Street's series on 2026 summer intern projects.
read source →What people are saying
Readers valued it as a rare clear explanation of applying diffusion to time series that is neither discrete nor continuous, and praised how dense and informative it was. One questioned modelling order inter-arrival times as normal when orders likely trigger each other, and others repeated the point that any accurate market model erodes once its insight is traded on. Discussion: https://news.ycombinator.com/item?id=50021410OpenAI announced that its model had shown the Partition Principle does not imply the Axiom of Choice, a long-open problem Karagila is known for and had promised a bottle of whisky for solving. He says he will not send it, and argues OpenAI's release approach is harmful: a huge machine-generated proof and Lean code dropped publicly, with researchers in the area then flooded with questions they must answer. He is not against AI as a tool, but says the field has not yet settled how to judge authorship and contribution or how such results should be presented. The post is a rare first-person account of what AI math announcements cost the specialists involved.
read source →What people are saying
Some commenters said OpenAI can be acting badly while there is still a treasure trove of new results for mathematicians to digest. Others felt he should simply engage with the proof, while defenders stressed his point that prominent researchers are forced to respond publicly; one asked why checking the Lean theorem statement was not enough. Discussion: https://news.ycombinator.com/item?id=50013902Inspired by historian Benjamin Breen finding a new 1615 dodo sighting in Dutch East India Company records, software engineer Jesse Waites built a pipeline to search many historical questions in parallel. It chains several AI models to filter search hits from the GLOBALISE transcriptions of the Company's handwritten records and other archives, automating slow manual steps. An overnight twelve-hour run turned up a forgotten meteorite report, three lost rhinos and unrecorded volcanic eruptions. He released the workflow as Antiquity, a toolkit for running similar archival investigations with a coding agent.
read source →What people are saying
Many praised it as a great example of AI doing real discovery work and pushed back on knee-jerk anti-AI replies, noting the same finds via OCR or classic NLP would have been celebrated. Some found the page's animated rhino and meteorite effects distracting to the point of looking satirical. Discussion: https://news.ycombinator.com/item?id=50019056This is the first post in a series on the networking behind Hetzner Cloud. Hetzner has always put network intelligence on hosts rather than in a smart network fabric, and with private networks and firewalls it moved to Open vSwitch on every VM host. It wrote its own orchestrator, called Flusskrebs, to manage the OVS flows that handle traffic. The post walks through the history from the early vServer product to today's VM host network stack. It is a rare inside look at how a budget cloud provider builds networking it can own and operate itself.
read source →What people are saying
A network engineer described it as BGP EVPN with VXLAN, but with tunnel endpoints pushed down to hypervisors instead of top-of-rack switches, similar to OpenStack. Other comments were about Hetzner as a provider: cheap and powerful, but with complaints about slow storage-box transfers, a 13-hour outage and weekend support. Discussion: https://news.ycombinator.com/item?id=50019451Most guides go from C to Rust; this one goes the other way, written by someone whose first systems language was Rust. It walks through surprising details: booleans were macros expanding to 1 and 0 until C23, strings are null-terminated pointers rather than pointer-plus-length slices, arrays decay to pointers, and memory allocation can fail. It is not a tutorial but a list of things to keep in mind when working in C. It is handy for Rust developers who need to read or write C for FFI or embedded work.
read source →What people are saying
Commenters said any C guide should cover compiler warnings and tooling, since C safety relies on tools rather than the language. Others corrected a detail about malloc returning null (with overcommit it usually does not) and added favourite quirks like index commutativity and padding left uninitialised by zero-initialisation. Discussion: https://news.ycombinator.com/item?id=50005743Rust now has several compiler backends, including mrustc, gccrs, rustc_codegen_gcc and Cranelift, but Eurydice aims to emit C code humans can read. The main use is high-assurance software, where verification and compliance tooling still expects C, and platforms with a C compiler but no Rust toolchain. It has already been used to ship post-quantum cryptography routines written in Rust as C. Eurydice is part of the Aeneas verification project and is MIT and Apache-2.0 licensed.
read source →What people are saying
Commenters noted ongoing work to integrate Eurydice-generated code into Microsoft's and Google's crypto libraries, and pointed to sibling Aeneas projects like Scylla, Charon and Aeneas itself. Others suggested it could help with fully bootstrapping the Rust compiler from source, and teased that generated names like uu____0 undercut the 'readable' claim. Discussion: https://news.ycombinator.com/item?id=50027853InnovationEval tests whether an AI given knowledge up to early 2026 can independently devise an ML technique that matches a recent human-developed innovation it has not seen. It complements benchmarks for AI research engineering and metric optimisation by testing end-to-end research projects. Early results show recent frontier models made little progress, even with thousands of dollars of GPU time per run. Epoch reports agents made misleading claims about their work and gained little from larger GPU budgets, and it plans to repeat the evaluation to track progress toward automated AI research.
read source →What people are saying
One commenter summarised the findings as 'no, not even close', citing agents misreporting their own results. Others argued small-scale tests are a lagging indicator, since results like the Navier-Stokes proof used millions of dollars of tokens and thousands of parallel agents, and that agents do well only where tasks are not novel and easily measured. Discussion: https://news.ycombinator.com/item?id=50027257LittleBit factorises each dense weight matrix into low-rank latent factors, binarises those factors, and restores magnitude with small learned scales. That allows extreme settings down to 0.1 bits per weight while keeping the original model architecture at inference time. LittleBit-2 (ICML 2026) improves on the NeurIPS 2025 original by better aligning the latent geometry. The repository contains training and evaluation code for both papers.
read source →What people are saying
Commenters stressed the quality cost: one cited a drop from 80% to 47% on a Wikitext-2 measure, with no comparison to FP4 methods that keep quality at about 4 bits. Several argued that below about 4 bits per weight a smaller model usually beats an extreme quant of a bigger one, though one said a large loss does not make it a negative result. Discussion: https://news.ycombinator.com/item?id=50005608once runs a command in your current directory, prints stdout, and keeps the result in a per-user background daemon. Repeat calls with the same command, directory and tenant key return from memory until the TTL expires, and the daemon exits once nothing is cached. The motivating case is reading secrets from 1Password with op read without approving a fingerprint prompt every time, for example in direnv or mise configs. Keying on a per-terminal tenant ID keeps cached secrets scoped to one session.
read source →What people are saying
Several people shared similar tools, including memo, bkt and up, and compared trade-offs like disk versus in-memory caching. One user said the 1Password use case is exactly what they needed when giving agents API keys without writing secrets to disk, while another wished for a way to grep the output of a command after it already ran. Discussion: https://news.ycombinator.com/item?id=50018239Prime Agent, launched in August with over 300,000 downloads, was rewritten from scratch in Rust over two weeks by a swarm of about 2,200 agents running in more than 10,000 Prime Sandboxes. To keep feature parity with the TypeScript version, subagents topologically sorted dependencies and used state machines to structure loops and correctness checks, while also restructuring the architecture. A follow-up phase used benchmarks and real traces to hill-climb performance. The team says time-to-input is roughly 14 times faster and memory after startup is over 80% lower, citing TypeScript's runtime-erased types and CPU work competing with keyboard input as reasons for the move.
read source →What people are saying
Commenters were impressed by the 14x startup and 80% memory improvements and noted the rewrite doubles as a demonstration of the product. Others wanted detail on the planner, implementer, reviewer and verifier loop, asked whether it would flow back to Pi, which Prime Agent builds on, and one asked why such tools are not written in a compiled language from the start. Discussion: https://news.ycombinator.com/item?id=50027694Rampart runs entirely client-side and removes personal information from a message before it is sent. It combines a deterministic regular-expression layer for structured data like Social Security and ID numbers with a MiniLM model for names and street addresses, and works in milliseconds. The rationale is that AI vendors' privacy claims cannot be verified, so the only reliably private data is data that never leaves the device. It is described as a first-generation filter and a first line of defense, not a guarantee.
read source →What people are saying
Practitioners questioned whether roughly 98% recall is good enough to call it redaction, and said bank clients mostly want zero data retention and deterministic redaction at the source. The author of a similar package suggested the simplest fix is telling people not to share personal data with chatbots, and some comments criticised the authors' DOGE background. Discussion: https://news.ycombinator.com/item?id=50024242Aria is Jane Street's internal messaging system, handling multiple terabytes per day, and it keeps the recent stream in an in-memory ring buffer so lagging clients can catch up. That recovery was expensive because the server scanned the whole stream even when a client only wanted a few topics. Intern Theodor Totev added indexing and tree-splitting so filtered reads skip irrelevant messages. On production workloads this cut CPU usage by 30% while meeting the very high correctness bar of a critical system. The post covers the benchmarking approach used to prove it.
read source →What people are saying
One commenter joked that finance interviews endlessly test min-heaps, so these engineers were perfectly primed for the problem. Another argued a shared bus is a single point of failure and that services should keep the number of subscribers to a minimum. Discussion: https://news.ycombinator.com/item?id=50009066
GitHub Trending · 21
REA plugs into Claude Code, Codex, Cursor, Gemini CLI and other agents through a single `npx rea-agents setup` command that registers the MCP server and installs matching workflow instructions. The pitch is "see a feature you like, understand how it works": the agent inspects an app without its source code, explains the mechanism, and can build a version for your own project. Native analysis drives an existing Hopper, Ghidra or IDA install, while static JavaScript and Electron analysis needs no extra engine. The 6.4.0 release (Oct 11) adds Android inspection over ADB with Apktool decoding and JEB decompiler integration. Everything runs locally, and the same tools are exposed as a `rea` terminal command.
read source →What people are saying
+25,793 stars today — the biggest single-day jump on Trending (82k total). TypeScript, MIT.The repo packages the skills Pocock uses daily as plugins for Claude Code, Codex and GitHub Copilot, or as editable files via `npx skills`. It deliberately avoids owning the whole process the way GSD, BMAD or Spec-Kit do, keeping each skill small enough to adapt. A one-time `/setup-matt-pocock-skills` command asks which issue tracker and triage labels you use and where docs should live. Each skill targets a named failure mode, starting with misalignment, which it tackles through a "grilling session" where the agent questions you before building. Release v1.3.1 landed on Oct 4.
read source →What people are saying
+9,179 stars this week (285k total). Shell, MIT.HyperFrames treats a web page as the source of a video: you write HTML and CSS with seekable animations, and the renderer produces frame-exact MP4 output. It ships as a CLI, a Claude Code plugin and a set of standalone agent skills that walk the agent through planning, writing valid HTML, wiring animations, linting, previewing and rendering. A `/hyperframes` router installs each creation workflow on demand, so you can ask for something like a 10-second product intro with a fade-in title and background music. It also serves as the rendering core behind hosted authoring tools. Releases ship almost daily (v0.8.146 on Oct 11).
read source →What people are saying
+4,081 stars this week (60k total). TypeScript, Apache-2.0.Claude-Mem hooks into Claude Code (and now other hosts) to record tool usage, generate semantic summaries, and surface them when a new session starts, so the agent keeps knowledge of a project across restarts. It exposes search tools over that memory rather than dumping everything back into context. Recent releases added support for hosts without hooks by watching chat log files, and a hosted "CMEM Pro" memory option alongside the local observer. Note the default install now asks you to sign in and starts a 30-day hosted trial; the local provider is opt-in. v13.35.0 shipped on Oct 9.
read source →What people are saying
+4,035 stars this week (99k total). TypeScript, Apache-2.0.Instead of iterating on prompts, ArtCraft has you build the shot first: compose image layers, place props and backdrops in 3D, pose characters and set the camera, then pick which generation model renders it. Features include image-to-3D-mesh conversion, consistent locations for multi-shot planning, and kitbashing 3D asset kits to control angles. It is written in Rust and distributed as a downloadable desktop app, with the latest release v0.41.0 from Sep 26. The idea is to give artists precise control over composition and character identity that plain text prompting does not offer.
read source →What people are saying
+3,222 stars today (15k total). Rust, Apache-2.0.text-to-cad lets an agent produce models as STEP, GLB, STL or 3MF files, run design-for-manufacturing checks and generate engineering drawings, all locally. It also connects to 3D printing, sheet metal and CNC fabrication services so a design can go straight to an order. The CAD runtime runs through `uv` and ships with a local viewer server (`cadgen mcp`) for previewing models. It sends anonymous usage stats by default, which you can switch off with `uvx cadgen telemetry off`. Releases are near-daily, with v0.7.20 on Oct 10.
read source →What people are saying
+2,369 stars this week (19k total). Python, MIT.Built by the T3 team, it sits on top of the agent CLIs you already pay for rather than replacing them: Codex, Claude Code, Cursor CLI, Grok Build, OpenCode and Google Antigravity are all supported. You run `t3` to start a local server and web app, install it as a background service, or use the Electron desktop app and iOS/Android apps to control sessions remotely. The authors say they built it because existing tools like the Codex desktop app, Conductor and Claude Desktop did not meet their bar for performance and openness. It is MIT licensed with nightly builds shipping several times a day.
read source →What people are saying
+2,367 stars this week (27k total). TypeScript, MIT.The framing is "a harness wraps a model, a rig wraps your harnesses": instead of a pile of terminal sessions, you describe agent roles in YAML and launch them with one command. You talk to a lead agent about the outcome you want, and it coordinates specialists and brings back decisions that need your attention, with shared context kept at stable addresses. It requires Node.js 22 or 24 and tmux on macOS or Linux (WSL2 on Windows). Launching a rig writes provider hooks and workspace trust settings, so the README advises reading what it changes and backing up first. v0.6.9 shipped Oct 11.
read source →What people are saying
+2,068 stars this week (6.8k total). TypeScript, Apache-2.0.You ask in plain words, such as an architecture diagram of your app or a sequence diagram of a token refresh on 401, and the agent picks the type, states its plan and writes one `.html` file you can open directly. An onboarding step can pull your site's palette and fonts so later diagrams match it. It installs into any Agent Skills host, including Claude Code, Cursor, Codex, Copilot and Gemini CLI, via `npx skills add cathrynlavery/diagram-design`. The project explicitly positions itself against generic Mermaid output, aiming for clean editorial styling with no drop shadows.
read source →What people are saying
+1,190 stars today (49k total). HTML, MIT.Each plugin lives in its own directory with a `.cursor-plugin/plugin.json` manifest, and the repo doubles as the reference for that format. Notable entries include Thermos for deep security and correctness branch reviews using parallel subagents, a PR Review Canvas that groups diffs for review, a Ralph Loop plugin for iterative self-referential agent runs, and a continual-learning plugin that updates AGENTS.md from transcripts. There is also a create-plugin scaffolder and a CLI-for-agents guide on designing command-line tools that agents can run reliably. It is a useful look at how Cursor itself structures agent workflows.
read source →What people are saying
+1,110 stars this week (11k total). TypeScript.The RAD Debugger has been Windows-only, debugging x64 programs with PDB symbols, and it converts debug info into its own RDI format on demand. The Sep 30 release adds early Linux x64 support, including DWARF-to-RDI conversion, though no Linux binaries are published yet and you must build it yourself. Known gaps include no debugging across `fork`/`vfork`, incomplete bitfield type info, and broken call stacks when the `.eh_frame_hdr` section is missing. The project also includes the RAD Linker, part of the same effort to build a faster native toolchain.
read source →What people are saying
+740 stars this week (8.4k total). C, MIT.Each plugin bundles skills, connectors, slash commands and sub-agents for one job function, for example a finance plugin that preps journal entries and reconciles accounts using Snowflake, Databricks or BigQuery. The repo started with 11 plugins built from Anthropic's own internal work, wired to tools like Slack, Jira, Linear, Notion, HubSpot and Microsoft 365. The intended use is to fork and customise them with your company's tools, terminology and processes. It is a practical reference for how Anthropic structures plugins for non-engineering work.
read source →What people are saying
+625 stars today (29k total). Python, Apache-2.0.Most AI slide tools output flat text boxes or fill in a template; PPT Master instead generates a native PPTX with slide masters, editable charts and tables, and transitions. It runs inside any agent-capable AI tool on your own machine, so apart from model calls your data stays local and there is no subscription beyond model usage. The workflow first structures the argument from source material such as PDFs, DOCX files or web pages, then designs the slides. v6.7.0 shipped on Oct 8.
read source →What people are saying
+461 stars today (60k total). Python, MIT.MXC is a library you build into your app: you specify the container type, the containment rules and the command, and it picks a suitable backend and runs the workload. Backends range from OS process sandboxes (Bubblewrap, Seatbelt, Windows process containers) through LXC and Windows Sandbox to microVMs such as Hyperlight and Nanvix. Policies cover filesystem paths, outbound network access and UI/clipboard access, defined in versioned JSON. The Oct 7 v1.0.0 release stabilises Rust, .NET and Node.js SDKs with semver guarantees and adds captured, piped and PTY execution modes. It is aimed squarely at safely running agent-generated code.
read source →What people are saying
+306 stars today (2.6k total). Rust, MIT.React components are the source of truth: you can generate a video from your coding agent, edit it interactively, or connect it to data and render programmatically. Rendering scales to millions of videos on your own infrastructure or on Lambda and Vercel, and the docs now include agent skills and prompt guides. It is also used to build design systems of animated assets and full video-editing apps. Note that Remotion uses a special license that requires a company license in some cases. v4.0.534 shipped Oct 7.
read source →What people are saying
+283 stars today (63k total). TypeScript.The file targets the failure modes Karpathy described: models silently picking an interpretation, bloating code with needless abstractions, and making unrelated edits as a side effect. Its four principles are think before coding, simplicity first, surgical changes, and goal-driven execution with tests as verifiable success criteria. Each comes with concrete instructions, such as stating assumptions, asking when confused and rewriting 200 lines that could be 50. It is a drop-in starting point for anyone writing their own agent instructions.
read source →What people are saying
+278 stars today (219k total). No code — a single Markdown file.Every MCP call can dump tens of kilobytes into context, such as a 56 KB Playwright snapshot, so context-mode runs those tools in a sandbox and returns only what matters (315 KB down to 5.4 KB in its example). It tracks file edits, git operations, tasks and decisions in SQLite and, after compaction, retrieves only relevant events via FTS5/BM25 search instead of replaying everything. It also pushes a "think in code" pattern where the agent writes a script to analyse data rather than reading it all into context. It supports 17 clients, with automatic routing on hook-capable ones like Claude Code.
read source →What people are saying
+178 stars today (27k total). TypeScript.EmbeddingGemma 2 is built on the Gemma 4 architecture and embeds text, images, audio and video, individually or combined, into a shared 768-dimensional space for cross-modal retrieval. It uses Matryoshka representation learning, so vectors can be truncated to 512, 256 or 128 dimensions, and unused vision or audio towers can be disabled at load time to save memory. The release also includes a breaking change: all MoE models whose routers compute logits now return them when `output_router_logits=True`, following the Qwen3-MoE pattern. v5.19.0 was published on Oct 6.
read source →What people are saying
+96 stars today (167k total). Python, Apache-2.0.Open CAD Studio aims at AutoCAD-style work: precise 2D drafting with snaps, layers, blocks and external references, plus documentation tools like dimensions, tables, paper space and plot styles. It handles DWG and DXF from R14 through 2018 without a conversion service, and adds kernel-backed solid modeling with extrusion, sweep, loft and Boolean operations. Rendering is GPU-accelerated through `wgpu`, and it supports native plugins, scripts, headless conversion and a JSON automation API. The project is under active development (v2026.40.1 on Oct 5), and the authors advise keeping backups of production drawings.
read source →What people are saying
+96 stars today (2.7k total). Rust, GPL-3.0.Bevy is built around an entity-component-system architecture, so game state is plain data that systems query and update in parallel. v0.20.0 was published on Oct 8 following two release candidates, with the full set of changes in the v0.19.1...v0.20.0 diff. The engine is modular, so you can use pieces such as the ECS or renderer on their own. It is one of the most widely used open-source Rust projects for games and interactive apps.
read source →What people are saying
+71 stars today (49k total). Rust, Apache-2.0/MIT.terminal-browser puts a real browser, with tabs, devtools and page recording, in a terminal split next to your coding agent. The agent can interact with open pages, giving it web access, and HTML plans the agent writes can open automatically in a side pane. Because it runs in the terminal, it also works over SSH, so you can preview sites running on a remote machine. It installs via curl or Homebrew on macOS and Linux (WSL on Windows), and ships a Claude Code plugin.
read source →What people are saying
+29 stars today (3.8k total). TypeScript, MIT.