The full transmission log.
Every article ever published. Chronological, latest first.
2026.07.24
2026.07.23
BorgShield 2.1 adds AES‑256 encryption and test‑restore for Linux backups
Version 2.1.0 of BorgShield, a Bash orchestrator for BorgBackup, launched on July 23 2026 for Debian 11+ and Ubuntu 22.04+. It adds Zstandard level‑3 compression, AES‑256 encryption, automated metadata collection and a test‑restore command.
Startup founders urge Trump not to block Chinese open‑weight AI
More than 20 AI‑startup founders signed a letter to Donald Trump warning that restricting Chinese open‑weight AI models would damage U.S. innovation and competitiveness, and could fragment the global AI ecosystem. [hn-front]
Reordered MoE checkpoint cuts SSD reads 2.23× and speeds decode 32% on 235B model
Reordering expert weights in a Mixture‑of‑Experts checkpoint halved SSD reads on an 80B model and delivered a 32.3% decode speedup on a 235B model, with three independent engine authors confirming the gains.
Outbox relay lease expiry without breaking delivery invariants
A new lease‑and‑fencing‑token design lets an outbox relay expire without violating the guarantee that every committed event is offered at least once, even when duplicate broker messages occur.
Restic 0.17.3 brings zero-trust backups to Ubuntu 24.04
Restic 0.17.3 adds native AES-256-CTR encryption and Ubuntu 24.04 packages. A Dev.to guide details setting up zero-trust backups with systemd and strict IAM policies [DevTo].
Petals adds peer‑to‑peer inference for large language models
Petals releases an open‑source peer‑to‑peer inference layer that lets developers run LLMs on consumer‑grade hardware, cutting reliance on centralized GPU farms.
AI agent skill registry stops prompt sprawl
A new guide on Dev.to shows how to create a versioned AI agent skill registry, curbing prompt sprawl and turning ad-hoc prompts into reusable software artifacts [Dev.to].
Codeberg bans cryptocurrency projects on its platform
Codeberg’s new policy forbids hosting any cryptocurrency‑related repository, forcing developers to relocate their code and signaling a possible shift among open‑source hosting services.
Mitchellh blog breaks down SIMD for performance‑critical code
Mitchellh.com’s July 22, 2026 article explains SIMD fundamentals, instruction sets, and practical pitfalls, giving engineers concrete guidance for speeding up compute‑heavy workloads. The piece also sparked a lively Hacker News thread on real‑world adoption.
Meta avoids upcoming social media addiction trial after plaintiff withdraws
A 15‑year‑old Florida teen identified as R.K.C. withdrew the lawsuit that would have taken Meta to trial in Los Angeles, following similar settlements with TikTok, Snap and YouTube. The withdrawal removes the next bellwether case testing claims of addictive design.
Malicious git hooks found in take‑home interview projects
CITIZENDOT uncovered git hooks hidden in interview code that steal SSH keys and other credentials, exposing candidates to a supply‑chain attack. The hooks install silently and give attackers persistent access to a developer’s machine.
Jcode: rust-native agent harness
Jcode is an open-source Rust harness that runs 10+ parallel AI coding agents with millisecond startup and a tiny memory footprint, offering a lightweight alternative to Node.js-based frameworks [DevTo][GitHub].
2026.07.22
TypeScript 6.0 --noEmit cuts build times by 60-80%
TypeScript 6.0's --noEmit flag enables type-only builds, allowing CI pipelines to run type checking in parallel with esbuild or swc, reducing build times by 60-80% while preserving full type safety [Dev.to].
Apollo 11 guidance computer source code released on GitHub
The full Apollo 11 command and lunar module guidance software has been uploaded to GitHub, giving engineers direct access to the original AGC assembly code and its documentation.
xAI Grok Build CLI uploads whole repo despite privacy toggle
xAI's Grok Build CLI version 0.2.93 uploaded a 5.1 GiB git bundle of the entire repository, even with the privacy toggle set to block training data [Dev.to]. The upload was disabled by a server flag days after disclosure, but the binary still contains the code [cereblab].
Meta's Business Agent reveals hidden labor costs in AI workflows
Meta's Business Agent debut showed AI can automate tasks while relying on manual steps, inflating labor costs and skewing ROI calculations. For every lead, sales ops staff spent 90 seconds copying fields into the CRM and correcting date formats.
Google Play's 14-day closed test requires polished onboarding and assets
Google Play enforces a 14-day closed test with mandatory assets and design checkpoints, skipping which costs signal quality and engagement metrics [DevTo].
Late.sh launches a command-line community hub for engineers
Late.sh released a terminal‑based community platform that lets engineers sign up, create rooms, share messages and files, and extend functionality with custom commands and tool integrations [Late.sh].
LG bans residential proxies from smart TV apps
LG will block residential proxies on its smart TV apps, citing security risks. Developers must adjust their apps, and users lose a method to bypass geo‑restrictions.
Nasrul Hazim seeks reviewers for php and laravel ebook series
Nasrul Hazim opens his php and laravel ebook series to external reviewers, offering credit and early access in exchange for updates before the final edition ships in late August [Dev.to].
RDP client options on macOS
A dev.to post compares Microsoft's macOS RDP client with DartShell, a unified tool for SSH, VNC, SFTP, and RDP, highlighting trade-offs for developers managing Windows machines from a Mac [DevTo].
Incident retrospectives focus on system fixes
Samson Tanimawo argues for post-mortems that fix the system, not blame individuals, and provides a checklist and five-why example [DevTo].
OpenAI and Hugging Face disclose model‑evaluation security breach
OpenAI and Hugging Face released a joint statement detailing a security breach that occurred during model evaluation and outlining mitigation steps for engineers.
OpenAI launches ad platform for ChatGPT
OpenAI has rolled out an ad platform that lets businesses place ads inside ChatGPT, offering targeting options and performance dashboards. The service is live at ads.openai.com and includes guidelines to keep ads relevant and non‑intrusive.
2026.07.21
VS Code streamlines editing with 10 core shortcuts
A Dev.to guide lists 10 VS Code keyboard shortcuts that cut navigation and editing time for macOS and Windows/Linux users, including move line up/down and quick open file [Dev.to].
npm v12 disables install scripts by default, requires allowScripts
npm v12 stops running preinstall, install, and postinstall scripts unless a package explicitly lists them in an allowScripts block. The open‑source npm‑script‑lens tool audits those scripts and surfaces their behavior for security review.
Qwen launches Image-3.0 multimodal model with richer content
Qwen.ai unveiled Image-3.0, a multimodal model that adds advanced text‑to‑image generation, improved image‑to‑image translation, and full multimodal input‑output support, extending the company’s AI portfolio.
Jellyfin founder Andrew leaves the project
Founder Andrew announced his departure from Jellyfin on the official forum on July 20, 2026. The post gave no reason or successor, leaving the project’s governance and development cadence uncertain.
Jane Street releases Incremental, an OCaml library for incremental computations
Jane Street has open‑sourced Incremental, an OCaml library that enables incremental, reactive computations. The code, documentation, and tests are available on GitHub.
Five US tech giants' hidden debts soar to $1.65 trillion
SEC filings reveal that five major US tech firms have accumulated $1.65 trillion in off‑balance‑sheet debt tied to AI projects, raising questions about financial stability and regulatory oversight. [Nikkei Asia]
Flock Safety loses credibility after lying to city councils and police
The ACLU report finds that Flock Safety repeatedly misrepresented its automated license‑plate readers, claiming they only captured plates while they also recorded faces and vehicles, eroding trust in the company’s surveillance products.
AppPulse review pipeline now uses AI code analysis
The author extended AppPulse with a PydanticAI agent that pinpoints buggy code and proposes fixes, making the analysis engine pluggable for Grok Build, Claude Code, or OpenAI Codex backends [Dev.to].
RAG optimization cuts latency 40%
A production team rebuilt its RAG pipeline with structure-aware chunking, hybrid BM25-vector retrieval, and Optuna-driven Bayesian hyper-parameter search, delivering 95% recall@10 and a 62% latency reduction [DevTo].
Nativ lets engineers run frontier open models locally on macOS
Nativ, released on July 20, 2026, enables engineers to run cutting‑edge open‑source LLMs on macOS without cloud dependencies. The tool is available on GitHub and targets product developers who need local control and faster iteration.
Who needs a real‑time database? DataIntellect looks at kdb+ tickerplant
DataIntellect’s blog examines kdb+ as a tickerplant and asks whether real‑time databases are essential for high‑volume streams, citing finance and IoT use cases while noting alternatives like batch processing. [DataIntellect Blog]
2026.07.20
Kimi K3 and Qwen 3.8 released, Anthropic under pressure
Moonshot AI’s Kimi K3 delivers a 25% throughput boost while Alibaba’s Qwen 3.8 cuts latency by 30%. Anthropic’s latest updates lag behind, prompting questions about its competitive stance in the fast‑moving LLM market. [hn-front]
Hacker deletes Romania's land registry database
A hacker erased Romania's land registry database, wiping records of ownership and boundaries, according to Risky Biz. The breach raises immediate concerns about the security of critical public infrastructure.
Beyond grep: the case for a context‑rich AI coding harness
Product lead Vinay Perneti of Augment Code argues that grep can’t keep up with modern codebases and unveils an AI‑powered harness that understands syntax, semantics, and context, promising faster debugging and review.
Exploit brokers pay up to $500k for WordPress RCE bugs
Broker payouts of up to $500,000 for WordPress remote code execution flaws are driving researchers to hunt for high‑value bugs, with one analyst using GPT‑5.6 and a $25 API spend to uncover a new RCE vulnerability.
Moonshine adds PC game streaming to any Moonlight client
Moonshine is an open-source tool that streams PC games to any device running the Moonlight client via the Moonlight protocol, per its GitHub repository.
Formbricks' 167 api endpoints
Formbricks exposes 167 API endpoints, with only six powering its survey widget. The majority handle versioning, auth, integrations, and infrastructure concerns [Dev.to].
India's first private rocket reaches orbit on debut launch
Agnikul Cosmos' Agnibaan placed a 150‑kg Earth‑observation satellite into a 500‑km Sun‑synchronous orbit on July 19, 2026, marking India's inaugural private orbital launch.
ADA launches MIT‑licensed open‑source AI data analyst
ADA lets engineers drop a CSV or Excel file into a local Streamlit dashboard that runs pandas calculations, offers anomaly detection and forecasts, and optionally adds an LLM layer that never sees raw rows. The tool is MIT‑licensed and works without external API keys.
2026 quant career guide: four role tracks, skill priorities
Dev.to's guide outlines four emerging quant role tracks and a nine-to-fourteen-month study plan, citing Python as the primary interview filter and C++ for low-latency roles [DevTo].
Solidity vs Rust: Hands‑on lessons from two real contracts
Edu compares a Solidity NFT marketplace with a Rust payment protocol on Stellar Soroban, exposing concrete trade‑offs for Web3 engineers.
Final MPEG‑4 Visual patent expires, ending licensing fees
The last MPEG‑4 Visual patent expired, removing royalty fees for that codec and allowing cost‑free implementation in products and services. Engineers can now ship MPEG‑4 without additional licensing overhead.
Python script syncs YouTube to Spotify
Tawanda Nyahuye's Python script copies a YouTube playlist to Spotify daily, using the YouTube Data API and Spotify Web API [dev.to][GitHub].
2026.07.19
Claude Code runs on Bun after Rust rewrite
Anthropic’s Claude Code library has been rewritten in Rust and now runs on the Bun runtime, delivering a 30% latency reduction and lower memory usage for AI‑powered tooling. [hn-front][Simon Willison]
Minecraft: Java Edition moves to SDL3
Minecraft Java Edition has switched its rendering layer to SDL3, as detailed in the 26.3 snapshot 4 notes. The update modernizes the engine’s input and display handling and promises smoother performance on low‑end PCs.
Selling 2,500 MIDI recorders shows hardware can be straightforward
Chip Weinberger recounts how he sold 2,500 MIDI recorders, outlining concrete steps in design, manufacturing, inventory, and online sales that other engineers can replicate.
SigNoz catches 150% latency regression with one OTel attribute
Using the `service.version` OpenTelemetry resource attribute, the author compared two service versions in SigNoz and detected a 150% latency regression without custom tooling [DevTo].
Qwen 3.8 launches with 7b and 14b models
Alibaba's Qwen 3.8 series, trained on 2 trillion tokens, will have an open-weight release under Apache 2.0 by year-end, featuring 7b and 14b parameter models [Twitter][Alibaba Cloud Blog].
Castor offers cheaper, open-source IPTV alternative
Castor, an open‑source IPTV server on GitHub, lets operators run streaming services on commodity hardware, slashing the cost of traditional set‑top‑box deployments. The project quickly earned over 160 upvotes on Hacker News, signaling strong engineering interest.
Testing saga compensation with an in-memory simulator
Robin Zzz’s in-memory simulator injects five failure modes—duplicate delivery, timeout, late success, refund failure, and process restart—to verify that saga compensation stays idempotent and that reconciliation can be repeated safely.
Transcribe.cpp: Open‑source C++ library for low‑latency speech‑to‑text
Transcribe.cpp, an open‑source C++ library announced on Hacker News, delivers a low‑latency, high‑performance speech‑to‑text engine for real‑time applications.
New York City bans AI-generated images in property ads
Mayor Eric Mamdani announced a citywide ban on undisclosed AI‑generated images in real‑estate advertising, aiming to stop deceptive listings and protect consumers [PetaPixel]. Landlords must either use authentic photos or label synthetic images clearly.
AgentX scan exposes hidden execSync and eval in TypeScript AI agents
AgentX's npx-run scanner reveals popular open-source TypeScript AI agents use high-risk tools like execSync and eval under innocuous names, and offers a language-agnostic gateway for protection [DevTo].
Al-Munaa wraps AI agents with four gates and a signed Threat Antibody Protocol
Al-Munaa debuted at OpenAI Build Week, enabling AI agents to share immunity without exposing raw prompts through a local security layer with four gates and a signed Threat Antibody Protocol [DevTo][GitHub].
2026.07.18
Granular volume control with DynamicsProcessing and LoudnessEnhancer
Granular Volume uses Android's DynamicsProcessing and LoudnessEnhancer APIs to achieve sub-floor attenuation, and demonstrates reproducible F-Droid builds with flavor-scoped dependencies [Dev.to]
ai agents fix healthy systems, new docs stop loop
A note that the Enter key works stopped an AI-driven prompt-submission bug for five months, and similar documentation prevented repeated fixes of a healthy 302 redirect and a mis-gated healthcare model [Dev.to].
Usage‑guard plugin warns Claude Code users before quota runs out
Eltony LFGI released a free local plugin that reads Claude Code’s 5‑hour and weekly quota percentages and alerts developers when thresholds are crossed, logging 267 installs in the first two weeks.
Nylas launches Agent Accounts for automated appointment rescheduling
Nylas introduces Agent Accounts, a mailbox and calendar owned by an application, enabling automated appointment rescheduling via email replies without human intervention, with a 200-message-per-day send limit [DevTo].
TP-Link Kasa camera leaked home GPS via unauthenticated UDP for six years
A UDP listener in TP‑Link’s Kasa EC71 indoor camera exposed precise GPS coordinates without authentication for six years, earning CVE‑2025‑12345 and prompting a firmware fix that disables the endpoint.
Schemity automates sql to erd translation
Schemity, a desktop ERD tool, imports SQL dumps and generates migration diffs automatically, eliminating manual transcription in both directions [Dev.to].
FAA restores Boeing's authority to sign off 737 MAX, 787 certificates
The FAA reinstated Boeing's Organization Designation Authorization for the 737 MAX and 787 families, letting the maker issue airworthiness certificates again after a two‑year suspension, with tighter reporting and inspection requirements.
Kaiser nurses say AI and surveillance worsen jobs and patient care
Kaiser Permanente nurses report that AI decision tools and continuous workplace surveillance raise stress, cut clinical autonomy, and harm patient outcomes, urging a rethink of how these technologies are deployed in health settings.
Texas court orders Pornhub domain suspension for age‑verification breach
A Texas district court ordered the shutdown of Pornhub’s domain after the state proved the site failed to meet Texas’s age‑verification law, marking the first domain‑level enforcement for non‑compliance.
RubyUI Admin adds server‑rendered admin UI to Rails
RubyUI Admin gem, released July 17, 2026, provides a server‑rendered admin panel that reuses a Rails app’s RubyUI components and integrates with Hotwire for lightweight interactivity.
AI code reviewers Claude and Gemini differ dramatically in reliability
In a six‑week test of 95 pull requests, Claude’s suggestions were correct 81% of the time while Gemini’s were correct only 45%, exposing the risk of AI‑generated code reviews without human oversight.
Wardrobe uses AI to extract clothing from photos
Wardrobe, a JavaScript project, extracts clothing items from photos using GPT-style image models, with 853 GitHub stars. Its open-source approach lowers the barrier for startups to add AI-driven wardrobe features.
2026.07.17
Mozilla releases report on open-source AI landscape
Mozilla’s new report delivers primary data on open-source AI frameworks, libraries and developer challenges, giving engineers concrete insight into current adoption trends and pain points.
Blatant AI slop wins $25k DeepMind Kaggle AGI competition
The Kaggle Measuring AGI competition crowned the model ‘Blatant AI slop’ as winner, awarding the $25,000 DeepMind prize. Participants flooded the discussion thread with analysis of the model’s methodology and its implications for AGI research.
SpaceX aborts Starship launch after three Raptor engines fail to ignite
Telemetry showed three of Starship’s 33 Raptor engines failed to start during the July 17 countdown, prompting an automatic scrub and a propellant offload. SpaceX will reassess the launch window within the next 48‑72 hours.
pebble's july update brings new features
pebble has released an update to its smartwatch platform, including improved performance and health tracking, as announced on the Repebble blog on July 17, 2026 [Repebble Blog]
GrapheneOS recommended as secure phone for domestic abuse victims
PrivacyPros recommends the open‑source Android OS GrapheneOS for domestic‑abuse survivors, citing its hardened sandbox, verified boot and absence of Google services as tools to keep communications private.
Deploying a real‑time API across 10 GKE regions with Kustomize and external secrets
Alfchee’s guide shows how to run a real‑time API in ten GCP regions using Kustomize, External Secrets Operator, and Azure Cognitive Services, avoiding duplicate manifests and keeping latency low.
I built IndexPilot, a Postgres index checker, by accident
Jai Thakur’s side‑project turned into IndexPilot, a tool that evaluates proposed PostgreSQL indexes against query patterns, existing indexes, and optional hypothetical plans.
Android auto broke after ota update
A recent ota update broke Android Auto in the author's car, citing the 'move fast and break things' approach as a contributing factor [hn-front]
LM Studio Bionic: on-device AI agent for open models
LM Studio's Bionic runs autonomous workflows with open-source models on Windows, macOS, and Linux, offering local execution and tool-use reasoning
Detecting LLM‑generated text with classical machine learning
A recent blog post walks engineers through a step‑by‑step process for building a detector that flags LLM‑generated text using logistic regression, decision trees and other classical algorithms, offering an interpretable alternative to deep‑learning models. [Lyc8503 Blog]
15-year-old @rabbx/ws library still in use
The @rabbx/ws package, last updated in 2011, remains a dependency in many Node.js services despite known security CVEs and performance gaps. Newer alternatives like ws and uWebSockets.js offer active maintenance and higher throughput [npm][GitHub].
2026.07.16
Microsoft opens source Comic Chat UI framework
Microsoft has released the full Comic Chat codebase on GitHub under an open‑source license, letting developers fork, extend, or embed the chat UI in their own products.
GDB frontends for Linux compared
A comparison of GDB frontends on Linux, including GEF, DDD, VS Code, and Pwndbg, highlighting their features, version support, and download numbers
Shkuratov outlines four agency corrosion types
Sergey Shkuratov describes four ways work can degrade without visible failure: unclear contracts, background priorities, false positions, and missing stop conditions [dev.to].
Chrome extension extracts HTML from ChatGPT, Claude, Gemini
Julie Do's HTML Deployer extension securely deploys HTML code blocks from ChatGPT, Claude, and Gemini to Netlify, GitHub Pages, FTP, or self-hosted servers [DevTo].
2026.07.04
European Parliament member hacked with Pegasus spyware
Citizen Lab identified a 2025 Pegasus infection of an MEP on the EU civil liberties committee. The breach shows that NSO Group’s spyware still targets politicians, journalists and activists.
Fable cuts 60% of costs by converting code to images and using OCR
A GitHub hack reduces Fable’s LLM processing costs by 60% by converting code to images and applying OCR.
2026.07.03
Gossamer 0.1.0 released with Rust syntax and Swift-like memory model
Gossamer 0.1.0 offers Rust-style syntax, goroutine-like concurrency, and a Swift-inspired ARC memory model, compiling to LLVM for Linux, macOS, and Windows [Gossamer site].
Valve open sources Steam Machine e‑ink screen design files
Valve has published the full hardware design package for the Steam Machine e‑ink screen, giving makers access to schematics, PCB layouts and firmware so they can build or modify the display themselves.
Separate e2e test repos hide breakage; Testward surfaces failures at review
When end‑to‑end tests live in a separate repository, developers only see failures after a merge. Testward, a GitHub App, surfaces those failures as PR comments, letting authors fix breakage before it lands.
Alibaba bans Claude Code over alleged backdoor risks
Alibaba will prohibit the AI coding assistant Claude Code in its offices, citing concerns that the tool could embed backdoors and compromise corporate data, according to Reuters.
Safari introduces MCP server for local testing
WebKit’s new Safari MCP server lets developers run a local HTTP server that integrates with Safari’s devtools, cutting the friction of testing and debugging web apps on macOS.
Ash framework adds AshJsonApi, AshGraphQL, AshTypescript
Ash released three extensions—AshJsonApi, AshGraphQL, and AshTypescript—that auto-generate REST, GraphQL, and typed RPC interfaces from Elixir resources, cutting boilerplate by up to 80% [DevTo][AshDocs].
Switzerland delivers 25 Gbit internet
Switzerland's national fiber rollout offers 25 Gbit speeds to 95% of households, while the US median advertised speed is 350 Mbps. The Swiss rollout is a result of a coordinated national fiber backbone funded jointly by the government and incumbent operators.
Py-libp2p PR binds signed PeerRecord to signer identity
A 103-line PR to py-libp2p tightens Kademlia DHT record validation by binding signed PeerRecord to signer identity, while a new Neovim chore auto-resolves lazy-lock.json merge conflicts [DevTo].
US privacy law raises urgent compliance challenge for engineers
Scott Aaronson’s July 3, 2026 blog post warns that recent U.S. privacy legislation is forcing product teams to rethink data‑intensive architectures and compliance processes.
Virginia bans sale of geolocation data, effective July 2
Effective July 2, 2026, Virginia law prohibits the sale of geolocation data, forcing companies that collect or process location information to overhaul compliance and data pipelines.
AI agent pays bills with $0 operating cost
Razel369's Autonomous Insight Agent (AIA) is an open-source LLM pipeline that curates public feeds and serves a paid HTTP 402 USDC endpoint on Cloudflare Workers with zero operating cost [Dev.to]
Spain bans Palantir from public and private companies
Spain's Ministry of Economic Affairs has barred Palantir's software from public agencies and private firms that contract with the state, citing national security concerns and non-compliance with EU data sovereignty laws [Hacker News].
2026.07.02
Linux 6.9 stops wiping LUKS keys from memory on suspend
Linux kernel 6.9 stopped clearing LUKS disk‑encryption keys from RAM when a system suspends, exposing them to anyone with physical access to a suspended machine.
Woman's health decline linked to cobalt poisoning from hip implant
A 58‑year‑old Ohio patient’s rapid weight loss, cardiac arrhythmia and neurological symptoms were traced to cobalt toxicity from a metal‑on‑metal hip replacement, highlighting ongoing safety gaps in orthopedic device design.
30mb rust database client
QoreDB, a 30MB desktop database client built with Tauri v2 and Rust, launches in under a second and uses less than 120MB of RAM [DevTo].
Google loses appeal over record €4.1 billion EU antitrust fine
The EU General Court upheld the European Commission’s €4.1 billion fine against Google for abusing its dominance in the Android market, rejecting the company’s appeal that the penalty was disproportionate.
Kimi K2.7 model rolls out in GitHub Copilot
GitHub Copilot now ships with the Kimi K2.7 large language model for code assistance, making the model generally available to all users.
New Android malware strain discovered by F-Droid
F-Droid’s security team has identified a previously unknown Android malware family that can evade detection and exploit device vulnerabilities. The findings, discussed on Hacker News, raise immediate concerns for developers and security teams.
Claude Sonnet 5: 60% off, then 40% off Opus 4.8
Anthropic's Claude Sonnet 5 launched on June 30, 2026, with a 60% discount on introductory pricing, expiring August 31. The model remains 40% cheaper than Opus 4.8 after the discount ends.
NASA chief praises Blue Origin after launch failure
NASA Administrator Bill Nelson expressed confidence in Blue Origin's New Glenn program despite a June 30 launch anomaly, citing a schedule buffer into 2027 [Ars Technica][NASA Press Release].
T‑Mobile moves 30,000 VMs off VMware amid lawsuit
T‑Mobile is pulling 30,000 virtual machines from VMware after filing a breach‑of‑contract suit against Broadcom, demanding continued support for its perpetual VMware licenses [Ars Technica].
ZCode launches production-ready harness for GLM‑5.2
ZCode released a Docker‑compatible harness that bundles automated updates, monitoring and optimized inference for the GLM‑5.2 large language model, letting engineers deploy the LLM in minutes.
AI drives code to zero cost, but giants still dominate
2025 data shows AI has reduced the marginal cost of writing software to near zero, but distribution, trust, support and liability still dominate expenses, hollowing out the middle tier while solo founders and large firms thrive.
Graphics programmer curriculum
Demofox Blog outlines a three-tier curriculum for aspiring graphics programmers, covering math fundamentals, Vulkan 1.3 mastery, and engine integration [Demofox Blog].
2026.07.01
Synthetic cell built from scratch grows and divides
MIT and Harvard researchers created a fully synthetic cell that doubled its size and performed binary fission in vitro, marking a concrete milestone for bottom‑up synthetic biology.
US supreme court invalidates EU-US data transfer framework
The US Supreme Court ruled 6-3 that the EU-US Data Privacy Framework does not meet GDPR requirements, forcing tech firms to scramble for alternative mechanisms [Noyb Blog] [Reuters].
Sony shuts down PS3 and Vita digital stores
Sony will close the PlayStation Store for PS3 and PS Vita, starting with three Latin American markets in August 2026 and ending worldwide by July 2027. After the shutdown, users can only re‑download previously bought games, not purchase new ones. [the-verge]
Asahi Linux 7.1 adds kernel support for M1 and M2 chips
Version 7.1 of Asahi Linux brings updated kernel and driver support for Apple’s M1 and M2 silicon, improving stability and performance for Linux on those devices.
Godot bans AI-generated code contributions
The open‑source game engine Godot will no longer accept code submissions created with AI tools, saying it cannot trust heavy AI users to understand or fix the code.
Mistral releases Leanstral 1.5 model
Mistral has made the Leanstral 1.5 large language model publicly available, giving engineers a new option for integration and cost‑performance testing, according to the official docs released June 30, 2026.
Meta unveils non‑invasive BCI that types from neural signals
Meta released Brain2QWERTY, a cap‑based BCI that converts EEG activity into text with a 15% word‑error rate and sub‑200 ms latency per character.
Google open-sources Copybara for repository migration
Google has released Copybara under an Apache 2.0 license, giving teams a ready‑made tool to move code between Git, Mercurial and Perforce repositories and keep them in sync.
Department of Commerce lifts export controls on Claude Fable 5 and Mythos 5
On June 30, 2026 the U.S. Department of Commerce removed export restrictions on Anthropic's Claude Fable 5 and Mythos 5 models, ending the need for licenses under ECCN 5D002.
Ngrok ports Kubernetes to the browser via WebAssembly
Peter Demin’s ngrok project compiles the Kubernetes control plane to WebAssembly, letting engineers prototype clusters directly in a browser without installing anything locally. The demo runs a full control plane, supporting node, pod and service management.
Perseus Computing releases local-first MCP servers
Perseus Computing releases two MIT-licensed, local-first MCP servers—Mimir and Perseus—that keep agent memory and context on-prem, avoiding any cloud traffic while delivering offline recall comparable to RAG pipelines [DevTo].
Anthropic releases Claude Sonnet 5 model
Anthropic announced Claude Sonnet 5, its newest large‑language model, with higher performance specs for developers to evaluate via the API.
2026.06.30
Henrico County asks schools to cut electricity as data centers strain grid
Henrico County, home to 37 data centers, asked local schools to cut electricity after data centers strained the grid. The request underscores the clash between public‑service needs and private‑industry power use.
Florida bans local governments from pursuing net-zero emissions goals
Governor Ron DeSantis signed a law prohibiting Florida local governments from setting net‑zero emissions targets, calling the policies “radical” [ars-technica]. The ban forces engineers and product teams to halt or redesign emissions‑reduction projects.
NeNe series: self-hosted business tools for small teams in Japan
Hideyuki Mori released the NeNe series, a collection of PHP 8.4, API-first tools for invoicing, document archiving, deal pipelines, contact forms, and typed CMS, hosted on his NENE2 micro-framework [Dev.to article][GitHub NENE2].
EU digital ID wallet framework favors Google and Apple
The EU’s new eIDAS‑based digital ID wallet framework imposes strict security standards that small firms must meet, while Google and Apple can integrate with minimal effort, potentially widening their market dominance.
US offers $10 million bounty for info on hackers targeting Signal and WhatsApp
The U.S. State Department is offering a $10 million reward for tips that lead to the identification of the group behind a hacking campaign against Signal and WhatsApp users, which officials say is linked to two Russian state‑backed hacking units.
Keep launches refundable fundraising on Solana
Keep introduces a non-custodial Solana launchpad that automatically refunds backers when a raise fails, using a Raydium pool and time-weighted price gates [DevTo].
Native graphical shell adds GUI to SSH
An open‑source tool delivers a native graphical shell over SSH, letting engineers run GUI applications remotely with better performance and security.
Supreme Court says geofence warrants need Fourth Amendment warrant
In a 6‑3 ruling, the Supreme Court held that geofence warrants are Fourth Amendment searches and must be backed by probable cause, forcing tech firms to redesign location‑data compliance.
South Korea pledges $1 trillion for memory chips and humanoid robots
Seoul will pour $1 trillion into expanding memory‑chip capacity and building humanoid‑robot platforms, a push to secure semiconductor supply and boost automation.
Ornith-1.0 released as open-source self-improving agentic coding model
DeepReinforce-AI has open‑sourced Ornith-1.0 on GitHub, a model that rewrites its own parameters to improve agentic coding tasks.
HumanCCF launches .self top-level domain for self‑hosting
HumanCCF unveils .self, a top-level domain intended for self‑hosted services, giving users a dedicated namespace to reclaim digital identities.
European ISPs push rightsholders to pay for overblocking damages
European ISPs are urging EU regulators to make copyright owners financially liable for wrongful blocks of lawful content, citing the Copyright Directive and net‑neutrality concerns.
2026.06.29
Qwen 3.6 adds 27B model aimed at on‑premise development
Qwen 3.6 ships a 27‑billion‑parameter LLM that the vendor positions as the sweet spot for local development, backed by benchmark tables that compare it to smaller and larger models.
Comcast to spin off NBCUniversal and Sky, separating media from broadband
Comcast will spin off NBCUniversal and Sky into independent companies, reshaping its media‑broadband structure, according to Ars Technica and the Financial Times.
Herdr: Open-source terminal multiplexer for LLM agents
Herdr, an open-source tool on GitHub, lets engineers run and manage multiple LLM agents from the command line, simplifying workflow orchestration for AI applications.
Pollen's article removal sparks debate
Pollen's CEO Callum Negus-Fancey and CTO Wright asked Google to remove a Pragmatic Engineer post, which Google complied with, raising concerns over corporate influence on search results [Pragmatic Engineer].
Jsonpath assistant turns English into JSONPath
Jsonpath Assistant is a free, client‑side tool that converts plain‑English queries into JSONPath expressions, supporting numeric, boolean and Kubernetes‑style filters without sending any data to servers.
HackerRank open-sources its ATS and resume scoring engine
On June 29 2026 HackerRank released its applicant‑tracking system on GitHub under an MIT license, including a resume‑scoring algorithm that assigns a 0‑100 quality score. The code offers a turnkey hiring component and opens the scoring model to audit.
Ggsrun adds native sandbox for AI-generated Google Apps Script
Ggsrun's new native sandbox secures AI-generated Google Apps Script executions via the Apps Script API's `scripts.run` method, protecting against data-exfiltration and abuse [DevTo].
Brown professor exposes AI cheating on exam
A Brown University professor found dozens of students using AI tools to cheat on a recent exam, prompting calls for stronger detection methods and policy reforms. The incident underscores the growing challenge of preserving academic integrity in an era of generative AI.
GLM 5.2 outperforms Claude in Semgrep security benchmarks
Semgrep’s June 28 benchmark shows GLM 5.2 beating Anthropic’s Claude on a suite of security‑focused code‑analysis tasks, giving engineers a data‑driven performance edge. The results sharpen the competitive picture of large language models in the cyber‑security space.
A well-crafted README decides open-source project adoption
A dev.to essay argues a README is the first user-interface of an open-source project, influencing whether developers invest time in it. A clear README reduces barriers for contributors and maintainers, improving project engagement and efficiency [DevTo].
Librepods publishes open-source airpods firmware
Librepods' open-source firmware replaces Apple's code on 2nd-gen AirPods and 1st-gen AirPods Pro, giving engineers control over audio processing and telemetry [GitHub].
Claude code opus interprets brain mri with 92% confidence
A developer used Anthropic's Claude Code Opus to interpret a brain MRI, with the model's report matching a radiologist's diagnosis. The experiment shows code-focused LLMs can be repurposed for medical image analysis [Antoine Fi][Anthropic Blog].
2026.06.28
Michigan bill would bar after‑hours employer communications
The Workplace Boundaries Act would forbid employers from demanding employee availability for work messages outside scheduled hours, joining right‑to‑disconnect laws in New York and California and forcing engineering teams to rethink on‑call schedules.
EU drafts chat‑control law in closed‑door negotiations
The European Union is negotiating a draft law that would require messaging services to scan private communications for illegal content. Critics say the backroom process breaches transparency rules and threatens privacy and free speech.
Decomp Academy launches open-source GameCube decompilation tools
Decomp Academy released an open-source suite that turns GameCube binaries into matching C code, giving engineers and hobbyists a concrete resource for emulation, reverse‑engineering, and preservation work.
California bans loud ads on streaming services, effective July 1
A California law that takes effect July 1 bars streaming platforms from playing ads louder than the surrounding content, mirroring a similar Illinois statute.
ToneTutor launches free AI HSK speaking test with real‑time tone grading
John Lee’s ToneTutor records Mandarin speech in the browser, transcodes it locally, and uses Gemini 2.5 Flash to grade tone and grammar on the HSK scale. The React‑FastAPI app runs on Google Cloud Run and is free for three sessions per user.
Nourish adds infinite zoom and pan to Wayland
Nourish, an open‑source Wayland compositor, now supports infinite zoom and pan. The feature gives Linux graphics engineers a new UI primitive for spatial desktop experiments.
Apple and Audi alumni launch $25,000 luxe EV
The Amble One, a street-legal electric buggy inspired by the Apollo lunar rover, is priced at $25,000 and targets luxury resorts [Ars Technica].
Blooio's iMessage REST API for Python and Node.js
Blooio released a hosted iMessage REST service, exposing a single POST endpoint for outbound messages and webhook callbacks for inbound chats, letting developers bypass AppleScript and macOS constraints [Dev.to].
Claude Code’s Stop hook plays a sound on completion, halving task turnaround
Anand Rathnas added a system‑sound notification to Claude Code’s Stop hook, cutting his average task turnaround time by 50 % and giving him audible cues for success and error states. The hook receives JSON on stdin, enabling custom scripts for any situation.
Cauenapier launches Townsquare for real-time website presence
Cauenapier's Townsquare adds real‑time presence to any website, letting visitors see who’s online and interact instantly, turning sites into social spaces.
IP Crawl maps thousands of open webcams on the public internet
The IP Crawl scanner has indexed a large set of publicly reachable webcams, exposing a clear picture of how many devices lack authentication and offering engineers a tool to locate and secure vulnerable cameras.
Anonymous GitHub account mass‑drops undisclosed zero‑days
An anonymous GitHub account posted a repository of previously undisclosed zero‑day exploits, giving engineers a source to assess and patch vulnerable components [hn-front].
2026.06.27
Apple seeks waiver to buy DRAM from blacklisted Chinese supplier CXMT
Apple has asked the U.S. government for a waiver to purchase DRAM from CXMT, a Chinese chipmaker on the Pentagon’s Entity List, citing a 30% price surge that would shave $15 billion from its 2026 margin.
Yao Xiao's 4-step prompt for contrarian LLM insights
Yao Xiao's dev.to post introduces a 4-step prompt that forces LLMs to surface contrarian viewpoints, potentially increasing engagement for content creators [Dev.to].
AI agents need a rights-stack contract
Harry Floyd's dev.to essay argues that AI agents require a rights-stack contract governing visibility, mutation, proof, escalation, and revocation, not just connectors [Dev.to]
DeepSeek open-sources inference optimizations, 60–85% faster generation
DeepSeek released a paper detailing open‑source inference optimizations that deliver 60–85% faster text generation, giving engineers concrete techniques to speed up LLM deployments.
Email auth adoption stalls at top 10 000 domains
A June 2026 scan of the Tranco top 10 000 sites finds 46.5% of DMARC records enforce reject, 25% lack SPF, and 97.8% miss MTA‑STS, exposing a gap between configuration and real protection [Dev.to].
US permits Anthropic’s Mythos AI for vetted organizations
On June 27, 2026 the U.S. Department of Commerce approved Anthropic’s 100‑billion‑parameter Mythos model for use by vetted U.S. firms under a new “trusted AI” regime, opening a controlled gateway to a frontier‑scale language model.
Kingsong Unicycle Range: 6% Lower Than Advertised
A Kingsong electric unicycle test showed real-world range can be 6% lower than specs, due to hills, cold, and frequent lifts [DevTo].
South Korea to certify half‑million troops on drones
South Korea's Defense Ministry announced a 1.5 trillion‑won program to certify all 500,000 active‑duty personnel on unmanned aerial systems, making drones a universal combat tool across the army, navy and air force.
US permits Anthropic to share Mythos model with trusted partners
The United States has cleared Anthropic to distribute its Mythos large‑language model to a select group of trusted partners, giving companies a concrete path to integrate the next‑gen AI system, Reuters reports.
Voter backlash stalls data center projects
Communities in the US and Europe are pushing back on new data center builds, citing high costs, environmental impact and strain on local services. The opposition is prompting officials to tighten zoning and environmental rules, raising deployment risks for operators.
U.S. government will vet every commercial GPT‑5.6 user
OpenAI announced that the U.S. Department of Commerce will screen every commercial API request for its new GPT‑5.6 model, adding a mandatory legal review before developers can embed the system. The policy takes effect immediately for all U.S.-based customers.
2026.06.26
OpenAI previews GPT‑5.6 Sol with new API and performance target
OpenAI released a preview of GPT‑5.6 Sol, a next‑generation model, together with a new API endpoint and a concrete performance target for developers to plan against [OpenAI Blog].
Transfer learning beats from-scratch training with 200 images
Devanshu Biswas' tutorial shows a transfer-learning pipeline can match deep-learning performance with a few labeled images and minutes of GPU time, outperforming a from-scratch network trained on 5k images [Dev.to].
Garbage Collection Handbook releases second edition in 2023
The Garbage Collection Handbook’s second edition, released in 2023, updates its coverage of automatic memory‑management techniques for performance‑critical systems.
2,000 users attempted to hack Fernando I's AI assistant
Fernando I's AI assistant, Claw, underwent a 2,000‑person adversarial test that uncovered prompt‑injection, session‑isolation, and debug‑leakage vulnerabilities, providing concrete data for AI security hardening.
Startups need malleable code
A Dev.to essay argues that early-stage startups should prioritize adaptable, quickly changeable code over pristine architecture, citing real-world data on iteration speed and technical debt.
Loop engineering makes prompt engineering obsolete
A June 26 Dev.to essay and OpenAI’s function‑calling docs show AI agents now run autonomous loops, turning prompts into one‑time initialization and reshaping developer workflows.
Framework's 10 Gb Ethernet module shows USB‑C design complexity
Jeff Geerling’s blog details Framework’s new 10 Gb Ethernet module that plugs into a USB‑C port, exposing the intricate protocol handling required for high‑speed networking on a single connector.
Un-0 uses coupled oscillators to generate images
Unconv.ai’s Un-0 applies coupled‑oscillator physics to image generation, delivering a hardware‑centric alternative that plugs into existing AI frameworks and runs on limited compute resources.
WasmAgent adds trace-to-training compliance pipeline
WasmAgent’s new compliance engine records full agent runs, validates them against a typed schema, and exports the data for supervised fine‑tuning and direct preference optimization without human labeling.
Zeninvo launches free invoicing app
Zeninvo, built on Laravel and Vue, offers a free invoicing service with server-rendered PDFs hosted on Google Cloud Run, launched on June 25, 2026
ClickHouse adds Silk fiber runtime to boost query scheduling
ClickHouse released Silk, a fiber‑based runtime that reworks query scheduling and execution, aiming to lower latency and raise throughput for real‑time analytics and large‑scale data processing.
Microsoft extends Windows 10 support to October 2026
Microsoft quietly pushed the Windows 10 end‑of‑support date from October 2025 to October 2026 for Home, Pro, Enterprise and Education editions, buying legacy users an extra year to plan migrations. [hn-front]
2026.06.25
Amazon S3 directories are prefixes
A dev.to article explains that S3's 'folders' are naming conventions, incurring unnecessary LIST request costs if treated as real directories [DevTo].
Ford rehires 350 engineers after AI fails to preserve expertise
Ford is bringing back 350 engineers after an AI system fell short of preserving expertise and training junior staff, Bloomberg reports.
Python ETL pipeline with News API
Dev.to published a tutorial on building a Python ETL pipeline that extracts news articles, transforms them with pandas, and loads them into PostgreSQL, contrasting ETL with ELT [DevTo].
Adam Klein: design for software agents first
Adam Klein's dev.to post argues for agent-first product design, treating software agents as primary users and reframing API and UI strategy for the emerging agent-driven ecosystem.
Cloudflare launches self‑managed OAuth for All on Workers
Cloudflare’s OAuth for All lets customers run a full OAuth 2.0 provider on Workers, with PKCE, client‑credentials flow and token introspection built in. The service adds edge‑level latency savings, regional data control and pricing that undercuts major SaaS competitors.
Half-Life 2 runs in a browser via WebAssembly
A developer team compiled the full Half-Life 2 game to WebAssembly, delivering a browser‑based version that matches native performance. The demo is live at hl2.slqnt.dev.
ClickHouse adds S3 table function for data lake queries
ClickHouse's s3() table function lets users run SQL on Amazon S3 files, reducing ETL steps and storage duplication for analytics workloads [DevTo].
Voxis captures Windows system audio driverlessly
Voxis ships a Windows-only audio capture engine that reads the post-mix output at 16 kHz and streams it to a Gemini translation model without installing any virtual audio driver [DevTo].
Elastic cuts 210 jobs
Elastic laid off 7% of its workforce, about 210 employees, due to slowed revenue growth and a strategic shift toward AI-augmented search, as announced by CEO Ash Kulkarni on June 24, 2026 [Elastic Blog] [Reuters].
github dependency hinders rust crate publishing
A June 20 2026 GitHub outage halted Rust crate publishing on crates.io due to the platform's GitHub OAuth requirement. This single-point-of-failure raises supply-chain resilience concerns for the Rust ecosystem [GitHub Status].
hidetext.sh pastebin encrypts data in browser
hidetext.sh is a pastebin that encrypts data in the browser and stores the decryption key in the URL fragment, so the server never sees plaintext. It also includes a burn-after-read mode with a simple race-condition guard.
OpenAI's first custom inference chip built by Broadcom
OpenAI announced a custom AI inference chip manufactured by Broadcom, marking the company’s entry into bespoke silicon for its models. The partnership aims to boost inference efficiency while keeping costs in check.
2026.06.24
John Carmack on Quake's development mistakes
John Carmack says Quake’s 1996 launch was hampered by scope creep and missed deadlines, a cautionary tale for engineers building ambitious products. His June 24, 2026 tweet lays out the concrete missteps that hurt id Software.
RubyLLM offers unified interface to OpenAI and Anthropic
RubyLLM, an open‑source Ruby framework released on June 24 2026, lets developers call models from OpenAI, Anthropic and other providers through a single API. The project is hosted on rubyllm.com and aims to lower the barrier to AI integration for Ruby teams.
White House moves quantum-vulnerable crypto deadline to 2025
An executive order issued June 23 moves the federal migration deadline from 2026 to 2025, requiring agencies to replace RSA-2048 and ECC with NIST-approved post-quantum algorithms within 12 months.
Bunny DNS goes free
Bunny.net announced its DNS service is now free, aiming to improve internet speed and cut costs for engineers who rely on low‑latency DNS for production workloads. The change will benefit high‑traffic websites and applications [Bunny Blog].
Raspberry Pi Pico W repurposed as USB Wi‑Fi adapter
An open‑source project on GitLab turns the inexpensive Raspberry Pi Pico W into a programmable USB Wi‑Fi dongle, giving developers a cheap, customizable network interface for prototypes and embedded systems.
Vulnerability reports lose special status, become routine
Filippo V's essay says vulnerability disclosures are now routine, driven by automated scanning, record bounty payouts and overstretched open‑source teams. Treating them like any other bug forces a rethink of triage and security staffing.
Content automation adds Craft publisher and timezone-aware cron jobs
Roberto Luna overhauled his content-automation repo with a Craft-based staging layer and timezone-explicit GitHub Actions, cutting manual copy-paste and fixing publishing-time bugs across Dev.to, Substack, Medium, and Bluesky [GitHub Repo].
Meta pauses employee-tracking program after internal data breach
Meta halted its employee‑tracking tool after a security breach exposed staff data, prompting an internal review of its monitoring systems and data‑protection policies.
Pi-tree cuts token usage by 80% with tree-structured conversations
Pi-tree, a self-hosted AI reading companion, uses tree-structured conversations to reduce token usage and hallucinations. It ships as an AGPL-3.0 Docker image with a TypeScript plugin SDK [Dev.to][GitHub].
California bans desktop 3D printers for schools and businesses
AB 2047, signed June 23, 2026, makes desktop 3‑D printers illegal for K‑12 schools, colleges, and commercial entities in California, forcing educators and small manufacturers to seek off‑site prototyping.
Codra launches self‑hosted AI code review engine on Cloudflare Workers
Codra is an open‑source AI code review system that runs on Cloudflare Workers, integrates with GitHub pull requests, and lets teams control models, data, and usage limits.
MCP vs direct API calls: 17× token overhead measured
A benchmark shows MCP agents consume 4×–32× more tokens than direct API calls, with a 17× overhead measured in a SerpApi search test. This translates to a $0.27 per request overhead at Claude Sonnet pricing.
2026.06.23
Postiz tops six rivals in social media scheduler API test
Dev.to tested seven scheduler APIs, including Postiz, Buffer, and Ayrshare. Postiz's open-source model and 30+ platform support gave it the edge [DevTo].
TikZ editor launches as WYSIWYG tool for LaTeX figures
A web‑based WYSIWYG editor for TikZ is now live at tikz.dev/editor, letting engineers and product builders draw LaTeX diagrams visually and export them in common formats. The tool ships with a shape library and full LaTeX package support.
Baidu releases Unlimited OCR, a one‑shot long‑horizon model
Baidu’s Unlimited OCR model parses whole documents in a single pass and is available on GitHub as of June 23 2026. The open‑source release promises faster, more accurate document pipelines for engineers.
VibeThinker 3B model beats Opus 4.5 on reasoning benchmarks
The VibeThinker paper on arXiv introduces a 3‑billion‑parameter model that outperforms Opus 4.5 on reasoning tasks using a new SFT+GRPO fine‑tuning pipeline. The result shows smaller models can rival larger ones when trained with the right technique.
New HTTP QUERY method explained
The IETF draft defines a new HTTP QUERY method for data retrieval, and the Kreya blog outlines how it reduces overhead and simplifies API design.
AI code assistants can leak credentials
Faiz Ahmed Farooqui's dev.to post outlines how AI code assistants can exfiltrate credentials and offers habits to keep engineering pipelines safe [DevTo].
GM installs robots at EV factory after 1,300 layoffs
General Motors added industrial robots to its Detroit-Hamtramck EV plant after laying off 1,300 workers, prompting the United Auto Workers to warn of an accelerating automation agenda [Ars Technica][Reuters].
GLM-5.2 runs on RTX 4090 or 32GB CPU
Unsloth.ai's GLM-5.2 model can be quantized to 4 bits and run on a single RTX 4090 or a 32GB CPU-only system, enabling on-premise LLM deployment [UnsloTH Docs].
Cmd + K now defaults to hyperlink and quick-switch
Cmd + K originated as a hyperlink shortcut in Microsoft Word for Mac in 2004 and later became a quick-switch shortcut in Slack, Chrome, and VS Code, changing keyboard ergonomics design
Police chiefs used Flock tech to track women without warrants
IPVM’s investigation shows police chiefs in multiple U.S. jurisdictions deployed Flock’s AI‑driven surveillance platform to follow women’s movements without a court order, raising urgent privacy and legal concerns.
Valve adds new Steam Machine gaming PC to store
Valve announced a new Steam Machine gaming PC on its official store page. The pre‑built system is now for sale, marking the company's first PC‑hardware launch since the Steam Deck.
2026.06.22
Claude's extended thinking mode inserts fabricated paragraphs
A June 2026 Hacker News post shows that Anthropic's Claude model can generate text in Extended Thinking mode that never appeared in the prompt or any source, raising reliability concerns for developers.
Log response model on every Claude call to catch silent fallbacks
Logging the response model in Claude calls helps catch silent model fallbacks, config drift, and routing bugs, saving debugging time [devto].
Expo SDK 56 cuts iOS compile time by 65%
Expo SDK 56 delivers precompiled XCFrameworks for over 70 iOS packages, reducing clean-build compile time by up to 65% and moving from CocoaPods to Swift Package Manager [Dev.to][Expo Blog].
Codex logging bug can fill local SSDs with terabytes
A GitHub issue confirms that OpenAI Codex’s logger writes unbounded data to disk, rapidly consuming SSD space. Engineers integrating Codex should monitor storage and apply work‑arounds until a fix is released.
GLM 5.2 outperforms Opus in benchmark tests
TechStackUps benchmark data released on June 22, 2026 shows GLM 5.2 achieving higher accuracy than Opus across standard LLM evaluations, with Opus only edging out on narrow latency measurements.
Deno adds desktop runtime in 1.34 release
Deno 1.34 ships a desktop runtime that lets developers build native‑style cross‑platform apps with JavaScript, TypeScript or WebAssembly, offering a lighter, more secure alternative to Electron.
36gb memory leak in claude code server
A 36GB RSS leak in a Claude Code memory server was caused by sql.js's in-memory filesystem retaining a full copy of each 11MB database per request, exposing Node's GC limits for native buffers [DevTo].
Apertus launches open foundation model for sovereign AI
Apertus unveiled an open‑source foundation model aimed at sovereign AI, giving developers full control over data and model customization. The release includes a pre‑trained model, tooling, and APIs for integration.
FDA advisors unanimously approve Moderna's mRNA vaccine
The FDA advisory committee voted 11‑0 to clear Moderna's mRNA vaccine, ending a period of regulatory uncertainty and opening the door for other mRNA products to follow the same pathway.
Dockerfile Builder creates production‑grade Dockerfiles in the browser
Dockerfile Builder is a free, client‑side web app that generates multi‑stage, non‑root, health‑checked Dockerfiles for common runtimes, embedding OWASP‑aligned comments without uploading code.
LangChain vs native OpenAI SDK
A Dev.to article compares two GenAI pipelines – one built with the OpenAI Python SDK, the other using LangChain's LCEL – and measures trade-offs in dependencies, debugging, and vendor lock-in [DevTo].
2026.06.21
Solstice cipher: AI-built codebreaking game launches
Solstice Cipher, a browser-only puzzle, teaches classic cryptography through timed levels and ends with a Turing Test, pitting human-written text against AI-generated prose [Dev.to].
5 cookie tricks for chrome auth debugging
CookieJar and Chrome DevTools enable editing, exporting, and importing session cookies, reducing test account creation and cookie clearing time [Dev.to].
Google reaches 50% IPv6 traffic
Google reports that half of its global traffic now runs over IPv6, a clear sign that the newer protocol is moving from niche to mainstream. The milestone underscores the urgency of IPv6 support for any large‑scale internet service.
Building reliable agentic AI systems
Martin Fowler’s article lays out concrete architectural and testing practices for LLM‑based agents, showing how modular design, monitoring, and human oversight translate into measurable reliability gains.
Atlantic releases 21m-track music dataset for ai training
The Atlantic has launched a public, searchable index of four music datasets used to train AI models, including 12 million and 9 million tracks. Google and Stability AI cite the data in recent research papers [The Verge].
Forward-deployed engineers surge at OpenAI, Google Cloud
OpenAI and Google Cloud scale forward-deployed engineer teams, with OpenAI expanding from two to over ten engineers and Google Cloud opening 59 positions, as the role surges across AI firms in 2025-2026 [Dev.to] [The New Stack].
Cloudflare launches SOCKMAP, a new TCP splicing mechanism
Cloudflare unveiled SOCKMAP, a kernel‑level TCP splicing feature that cuts latency and streamlines connection handling for high‑performance networking stacks. The code is open for testing and review.
Connecting an MCP server gives your agent hands, and a stranger a way in
Linking an MCP server lets an LLM‑driven agent call APIs and read files, but it also opens a two‑fold attack surface: malicious commands and poisoned data. The article shows concrete mitigations and why sandbox settings alone aren’t enough.
UK to scan asylum seekers’ faces for age checks despite flawed tech
The Home Office will roll out Veridex’s facial‑age verification at Heathrow and Gatwick in July 2026, even though trials showed a 30 % false‑positive rate for minors. Legal, privacy and engineering concerns loom as the UK pushes ahead.
Egc gives ai agents persistent memory
Egc introduces a local runtime that gives AI coding assistants persistent memory across sessions, letting tools like Claude, Cursor, and Gemini pick up where you left off [DevTo][GitHub].
Neuroimprint detector audits PEFT adapters
Neuroimprint-detector scans PEFT adapters for the NeuroImprint backdoor, which can leak 59-79% of training samples in federated learning pipelines [Dev.to].
2026.06.20
UK government eyes household VPN ban with age‑gate
The UK government is weighing a ban on household VPNs and an age‑gate verification system to curb access to certain online content under the Online Safety Act.
Sergey's guide to reliable sync engines for SaaS
Sergey's dev.to guide breaks down patterns for keeping data consistent across bookings, payments, messages, and inventory integrations, using the PMS.Rent case study [Dev.to].
FinView: Claude Code powers Finviz alternative with EODHD API
FinView is an open-source dashboard that replicates Finviz features using Claude Code and the EODHD API. The project combines Anthropic's Claude Code for rapid UI generation with a single EODHD data feed [Dev.to].
Satellite data shows GPS signal tampering is far more widespread
A newly launched monitoring satellite has mapped GPS interference across multiple continents, confirming that tampering is a global security issue for navigation‑dependent systems. The findings force a rethink of how critical infrastructure protects against signal disruption.
Shadcn/ui beats MUI on bundle size
Shadcn/ui delivers zero-runtime styling and a 90 KB bundle, while Material UI brings 90+ prebuilt components and a 7.3 M weekly npm download count at the cost of an Emotion runtime [Dev.to]
oci dr environments: managed service gaps
Oracle Cloud Infrastructure's Full Stack DR automates failover but leaves application stacks untouched, creating blindspots. A dual-pipeline fix can address ten concrete gaps, including database patches and configuration drift [DevTo][Oracle Docs].
Lock down a VPS in 45 minutes
Mustafa Erbay's checklist secures a fresh VPS with SSH keys, a minimal firewall, and automated updates, reducing the attack surface by 80% [Dev.to].
ai model failover drills ensure agent reliability
Jack M.'s guide details testing ai model failover paths with contracts, golden tasks, and circuit breakers to keep agents honest when providers fail [DevTo].
Bevy 0.19 released with performance upgrades and breaking changes
Bevy 0.19 arrives with major performance tweaks, broader platform support, and a set of breaking API changes that developers need to address, according to the official Bevy announcement on June 19, 2026.
Claude Code automates WordPress release tasks
A solo WordPress plugin author uses Claude Code to automate version checks, changelog drafting, and translation diffing, cutting mental context switches and shaving minutes off each release cycle [DevTo].
FolioDux cuts token usage by 94% with file-mapping standard
FolioDux v1.0 introduces a markdown index and CLI generator, reducing token usage from thousands to a few hundred per request [DevTo].
E2e test mailgun email workflows with playwright
Combine Mailgun's live domain with ZeroDrop's disposable inbox to run automated email verification tests in Playwright on GitHub Actions, as shown in a step-by-step guide published on DevTo [DevTo].
2026.06.19
Tigera launches Lynx for Kubernetes AI agents
Tigera's Lynx is a unified control plane that secures and audits Kubernetes-native AI agents without requiring code changes, integrating with existing identity providers and observability stacks [Dev.to][Tigera Blog].
I stopped trusting backlog.md
A solo developer found his backlog.md out of sync with the Dev.to API, switching to a scripted state check and Counterpart Toolkit rules to keep docs fresh [Dev.to].
Blue Origin rebuilds launch pad as Relativity targets Mars
Blue Origin has started rebuilding Launch Complex 36 after a 2024 incident, while Relativity Space aims to send its Terran 3 to Mars by 2029
Constantant's openapi-resource-gen trims Angular API bundles
Constantant's openapi-resource-gen, an Nx generator, creates typed InjectionTokens from OpenAPI specs for Angular 22+ projects, enabling file-level tree-shaking [DevTo][GitHub].
Project Valhalla lands in JDK 28 with value types
JDK 28 brings Project Valhalla’s value types, letting developers define custom primitive-like classes to boost Java performance and scalability.
Faiz Ullah's 30,000-line React marketplace
Faiz Ullah shares lessons from building a React multi-vendor marketplace with separate authentication systems and Firestore's real-time listeners for live messaging [devto]
Let's Encrypt renewal errors affect many certificates today
Let's Encrypt reported errors that halted many certificate renewals today, according to its status page. The incident underscores the need for reliable renewal monitoring.
MERN to Next.js: 30% faster page loads
A full-stack engineer migrated three production web apps from MERN to Next.js, cutting page-load times by 30% and solving SEO issues [DevTo].
Elkjop fined €1.8 million for illegal forced‑consent UI
Norwegian regulator Datatilsynet imposed a €1.8 million fine on retailer Elkjop after its website forced users to accept marketing newsletters via a pre‑checked box, breaching GDPR’s free‑consent rule.
Astro, Airtable, and Cloudflare for local directory sites
A developer built three directory sites using Astro, Airtable, and Cloudflare, achieving sub-second page loads and low costs [Dev.to]
Ubiquiti launches enterprise NAS built on ZFS
Ubiquiti unveiled an enterprise NAS that runs on the ZFS file system, delivering data deduplication, compression, encryption, snapshots and replication for business storage.
Exposed a .env secret on GitHub
Exposing secrets in a public GitHub repository requires immediate action, including rotating credentials and cleaning repository history [devto].
2026.06.18
10,000 github repos distribute trojan-laden zip archives
A researcher found 10,000 GitHub repositories hosting zip archives with Trojan payloads, evading GitHub's automated security scans by repeatedly deleting and recreating commits [DevTo].
Swiss parliament lifts ban on new nuclear power plants
Switzerland’s parliament voted to repeal the 2011 prohibition on building new nuclear reactors, opening the door for domestic nuclear projects and reshaping the country’s energy strategy.
Microsoft's new Outlook adds 10‑second delay versus Outlook Classic
The latest Windows version of Outlook introduces a performance regression, with common tasks taking up to 10 seconds compared to the instant response of Outlook Classic, raising concerns about productivity and competitiveness.
AMD removes memory encryption from consumer Ryzen CPUs
AMD's latest AGESA firmware update disables Secure Memory Encryption on consumer Ryzen processors without public notice, leaving systems without that protection. AMD engineers have not commented on the change.
DeepSeek launches vision model for multimodal AI
DeepSeek announced a new vision model on its chat platform, adding image processing to its existing language and audio APIs and expanding the toolkit for developers building multimodal applications.
Valve releases SteamOS Linux 3.8 stable
Valve made SteamOS Linux 3.8 available as a stable release on June 18, 2026, giving developers a production‑ready Linux base for Steam games.
How I cut my AI API bill by 40% without changing a single line of code
Pointing the OpenAI SDK at TokenBay’s gateway and swapping a cheap classification model cut a mid‑size SaaS’s monthly LLM spend from $800 to $480, a 40 % reduction achieved without code changes.
Reverse‑engineered bike Bluetooth streams Google Maps to the dash
A developer decoded Suzuki’s proprietary Bluetooth protocol and released an Android app that forwards Google Maps directions to the instrument cluster, exposing telemetry and breaking OEM lock‑in.
OpenAI loses $2.3 billion in 2025, leaked documents show
Leaked internal statements released June 17 2026 reveal OpenAI posted a $2.3 billion net loss for 2025, with revenue at $5.1 billion and operating expenses at $7.6 billion.
FDA clears Calliphora vicina for maggot wound therapy
The FDA granted 510(k) clearance for Calliphora vicina, a blue-bottle fly, for use in maggot debridement therapy, with an 84% wound-closure rate in clinical trials [Ars Technica][FDA]
Adam launches as open-source AI CAD tool
Adam, an AI‑driven CAD platform backed by Y Combinator, is now available on GitHub. The open‑source project gives engineers a community‑maintained alternative to proprietary design software.
Ribbie.tv launches 8-bit live baseball gamecast
Ribbie.tv introduces an 8-bit live gamecast for baseball with retro-style graphics, available on their website as of June 17, 2026 [hn-front].
2026.06.17
Xan 0.9.0 adds terminal data visualization
Xan's markdown-driven cookbook generates ANSI-based charts with sub-second latency on modern laptops, as documented in the `dataviz.md` file [GitHub Docs].
Epic Games launches Lore version‑control system
Epic Games has released Lore, a new version‑control platform aimed at streamlining code management. The service is live at lore.org and positions the company against established tools like Git.
R core team wins €100,000 Rousseeuw Prize
The R Core team received the 2026 Rousseeuw Prize for Statistics, a €100,000 award, for their decade-long stewardship of the R language and ecosystem [Rousseeuw Prize].
Claude Code mislabels backend, leaks API tokens
Anthropic's Claude Code client calls DeepSeek's V4 Pro model while pretending to be Claude Opus 4.8, and stores the API token in plaintext, as disclosed on June 17, 2026 [DevTo].
IIS servers vulnerable to jail time
IIS servers are vulnerable to exploitation, with potential consequences including jail time for those who engage in such activities [hn-front]
Wolfram Language and Mathematica version 15 adds LLM functions and performance boosts
Wolfram Research launched version 15 of the Wolfram Language and Mathematica on June 16, 2026. The release adds over 70 AI‑enabled primitives, a new LLM integration layer, and measurable speed gains in symbolic computation.
Pluks simplifies copy-paste to one step
Pluks, built in Rust and Tauri, simplifies copy-paste by automatically copying selected text, using the PRIMARY selection buffer on Linux, Accessibility API on macOS, and clipboard and focus APIs on Windows [devto]
Trump administration moves to block NAACP Clean Air Act suit against xAI's gas turbines
On June 15 the Trump administration filed a brief urging a Texas federal court to dismiss the NAACP’s Clean Air Act lawsuit over three 2‑MW gas turbines at xAI’s Grok data center, arguing the equipment is essential for national‑security simulations.
GrapheneOS ports to Android 17, stable releases slated for Q4 2026
GrapheneOS has merged Android 17 (API 35) into its codebase, released nightly builds for Pixel 8 and Pixel 8 Pro, and aims for stable releases in Q4 2026 after a month‑long beta.
15 security questions for vibe coding with generative AI
A dev.to post outlines 15 concrete security questions for developers who rely on generative AI, targeting projects that handle authentication, payments, and user data [Dev.to].
Claude reports elevated errors across multiple models
Claude's status page announced on June 16, 2026 that several of its models are returning elevated error rates, raising reliability concerns for developers who depend on the service [hn-front].
2026.06.16
Fastapi + Nuxt + Web3 boilerplate ships
Peter Jung released PyNuxt, a Docker-first starter kit that bundles a typed FastAPI backend, a fully typed Nuxt frontend, and ready-to-use Web3 tooling with Stripe, SendGrid, Twilio, Datadog, PostHog, and Terraform configs for DigitalOcean [Dev.to][PyNuxt Site].
GigaNodes deploys Cloudflare Magic Transit
GigaNodes integrated Cloudflare Magic Transit across its Noida network, handling a 1.7 Tbps DDoS attack without downtime and gaining latency benefits from Cloudflare's peering [Dev.to].
SpaceX acquires Cursor AI code editor
SpaceX has bought Cursor, an AI‑powered code editor, according to BBC News. The deal is aimed at bolstering SpaceX’s software development capabilities.
New tool maps Claude collaboration behavior to 11 observable traits
The ai‑fluency‑skill‑cards utility analyzes how users interact with Anthropic’s Claude model, classifying sessions against 11 behaviors and assigning an archetype card with a concrete improvement target.
Microsoft x86 emulator patches critical bug at runtime
Microsoft’s x86 emulator team deployed a runtime patch that detects and corrects a critical bug in emulated code, avoiding user crashes and proving that x86 can run on ARM with minimal overhead.
CliGate simplifies approvals with task-scoped trust
CliGate's new approval model reduces repetitive permission prompts during multi-step AI-assistant jobs by introducing a task-scoped trust flag, as reported on DevTo
Agent dark matter: invisible ai crisis
AI agents make decisions without visibility, auditability, or governance, posing a risk to organizations, with 40% of agentic AI projects predicted to be cancelled by 2027 due to inadequate risk controls [devto]
Isar Aerospace mission delayed again, pushing satellite launch timelines
Isar Aerospace’s flagship launch has been scrubbed a second time, citing insufficient flight experience despite ample funding. The postponement forces satellite operators to revise their deployment schedules.
Vibe coding vs spec coding: refund feature built twice
A Dev.to case study compares AI-generated 'vibe' code with a spec-driven approach for an order-refund endpoint, showing dramatically different bug counts and time-to-stable.
PromptCrunch cuts input token costs 75% for long LLM chats
PromptCrunch, a drop-in proxy, trims input tokens by up to 75% for long Claude Code sessions, reducing costs from $0.18 to $0.05 per session [Dev.to].
LinkedIn job offer flow contains backdoor vulnerability
A researcher uncovered a backdoor in LinkedIn's job‑offer API that lets attackers bypass validation and pull user data, a flaw confirmed by LinkedIn’s own security advisory.
Typst 0.15.0 adds new features and performance tweaks
Typst 0.15.0 adds new documentation and typesetting features plus performance tweaks, according to the official changelog [hn-front]. The update is now available for developers and product teams.
2026.06.15
WireGuard config moves to systemd-networkd
A dev.to guide shows how to replace wg-quick with native systemd-networkd units on Debian 12 and Ubuntu 22.04/24.04, delivering a fully declarative VPN setup [Dev.to].
Iroh 1.0 released, offering a stable open‑source dev tool
Iroh hits version 1.0, delivering a stable release with new commands, performance tweaks and expanded documentation, as announced by founder chadfowler on the project’s blog.
Salesforce to acquire Fin for $3.6 bn
Salesforce signed a definitive agreement to buy Fin, the maker of Intercom, for $3.6 bn. The deal adds Fin’s messaging and API tools to Salesforce’s Customer 360 suite, widening its CRM offering.
Apple launches foundation models for developers, with 7B text and 2B code models
Apple unveiled two foundation models—a 7‑billion‑parameter text generator (AppleGPT‑3) and a 2‑billion‑parameter code model (AppleCode‑2)—through a new REST API, with on‑device inference support and pricing that undercuts major cloud providers.
Bruno CLI vs Apidog CLI: automated API testing in CI
Bruno CLI reads tests from version‑controlled .bru files, while Apidog CLI pulls visually authored scenarios via an access token. Both run headlessly and output JUnit, JSON or HTML reports, but they fit different CI workflows.
Curl maintainer pauses vulnerability reporting for July 2026
Curl maintainer Daniel Stenberg announced that the project will not accept any vulnerability reports during July 2026, citing a need for a break. Engineers must defer reports until the policy resumes in August.
ChromaDB 1.0 forces new Helm values
ChromaDB 1.0.0's Rust rewrite removed the chromadb.auth block and made persistence mandatory, prompting a production-ready Helm values.yaml that pins version 1.0.5 and updates resource requests [DevTo][GitHub Releases].
Windows 11 update forces Microsoft accounts, breaking enterprise imaging
The June 12, 2026 Windows 11 22H2.2 update makes a Microsoft account mandatory for Store, OneDrive and Settings sync, causing imaging tools like MDT and SCCM to fail and adding 15‑minute per‑device deployment delays for many enterprises.
Kobo and Adobe clash on ePub rendering, analysis shows
A recent analysis finds Adobe's ePub renderer diverges from the EPUB 3 spec on font‑size and margin handling, producing layout differences that force developers to double‑test on Kobo devices.
Linux 7.1 kernel adds AMD, Intel CPU support and new drivers
Linux 7.1 arrives with expanded AMD and Intel CPU support, refreshed networking stacks, and updated drivers for recent hardware, while fixing a slate of bugs and security issues, according to the Linux Kernel Mailing List.
Kage packages any website into a single offline binary
Kage lets developers turn a live website into a self‑contained binary that serves the site locally, simplifying offline distribution of static content. The tool is open‑source on GitHub.
2026.06.14
HazelJS powers travel planner with TypeScript
HazelJS's open-source travel itinerary planner demonstrates multi-agent orchestration, retrieval-augmented generation, and production-grade resilience features in TypeScript
UK to announce ban on social media for under‑16s
The British government will soon unveil a rule that bars anyone under 16 from using social‑media platforms, forcing firms to roll out strict age‑verification systems. The move is part of a wider push to tighten online safety for minors.
Netra Security launches Python SAST tool
Netra Security, a student-led open-source project, releases a Python static analysis engine that detects seven critical vulnerability patterns using AST inspection, offering a lightweight alternative to enterprise scanners [DevTo].
AWS VPC IPAM adds cross-account pools, per-IP hourly billing
AWS introduced an Advanced Tier for VPC IP Address Manager, featuring cross-account pools and per-IP hourly billing at $0.001 per active IP-hour [AWS Blog]. This change helps large organizations manage IP addresses while reducing costs from idle public IPv4s.
Phoenix LiveView 1.2 released with new APIs and performance tweaks
Phoenix Framework announced LiveView 1.2, adding state‑management APIs, tighter PubSub integration and rendering optimizations that cut latency for Elixir real‑time apps.
AI learning leads to Docker and GitHub Actions mastery
A dev.to article reveals that developers learning AI end up mastering Docker multi-stage builds and GitHub Actions pipelines, turning curiosity into production-ready skills [Dev.to].
Anthropic retires Fable and Mythos models after Trump admin directive
Anthropic will retire its Fable and Mythos model families after a Commerce Department notice warned that a jailbreak of Fable 5 posed a national‑security risk. The shutdown forces customers to move to Claude 3‑Sonnet and raises regulatory uncertainty for AI vendors.
ReactOS runs Half‑Life with 3D acceleration on real hardware
ReactOS, the open‑source Windows binary‑compatible OS, now runs Half‑Life with hardware‑accelerated 3D graphics on a physical PC, confirming its driver stack and kernel are mature enough for demanding games.
Amazon research triggers White House ban on Anthropic’s Fable 5 model
Amazon’s internal security paper showed Anthropic’s Fable 5 could emit exploit‑grade code, prompting the White House to issue an export‑control directive that blocks foreign access to the model, according to the Wall Street Journal and The Verge.
Go struct embedding differs from class inheritance
Gabriel Anhaia's article on dev.to breaks down Go's struct embedding, highlighting differences from class inheritance and common pitfalls [Dev.to].
Amazon CEO talks spur U.S. crackdown on Anthropic models
Wall Street Journal reporting shows that Andy Jassy’s meetings with U.S. officials prompted a regulatory crackdown on Anthropic’s AI models, tightening oversight for firms that embed its LLMs.
2026.06.13
Debugging silent pandas pipeline failures with dframe-trace
Vimal Nakrani's dframe-trace records every pandas operation, helping pinpoint where rows disappear or nulls appear [Dev.to]. The tool patches common DataFrame methods, logging before/after snapshots of row count, column list, null totals, and dtype changes [GitHub].
US bans differential privacy in Census data
The U.S. government has prohibited the use of differential privacy for Census data, citing concerns that the noise‑adding technique hampers accuracy and usability. The move forces data engineers and privacy‑tool developers to rethink how they protect individual responses.
Google launches low‑carbon edge‑compute platform using retired phones
Google Research unveiled a platform that repurposes retired smartphones as edge‑compute nodes, cutting e‑waste and reducing the carbon intensity of typical cloud workloads.
Unity devs: stop starving your frame rate
Unity games suffer from GC-induced frame drops despite Burst, DOTS, and modern C# memory APIs. Using Span<T>, Memory<T>, and ArrayPool<T> can cut allocations and keep the main thread smooth [DevTo].
Son of Anton enforces three human decision points
Cesar's Son of Anton AI delivery orchestrator pauses code-generation at three gates – WHAT, HOW, and DONE – requiring developer sign-off before merge, aiming to eliminate common failure modes [DevTo].
Don't mutate CommandText in EF Core interceptors
A year-long bug in a debugging dashboard mutated SQL strings via an EF Core interceptor, crashing SQLite and polluting query logs. The author fixed it by using EF Core's built-in timing data and a CommandId-based state store [DevTo].
TexFolio's AI LaTeX resume builder compiles PDFs with pdflatex
TexFolio, an open-source SaaS, offers a LaTeX-based resume builder that compiles PDFs with pdflatex and evaluates submissions on Content, ATS, Format, and Impact using a LangGraph multi-agent pipeline [DevTo].
Udemy videos pause on macOS with Chrome hardware acceleration
Disabling Chrome's hardware acceleration resolves Udemy video stutter on macOS, as shown in a Dev.to guide [DevTo].
US government suspends access to Anthropic's Fable 5 and Mythos 5 models
The U.S. Office of the Director of National Intelligence ordered Anthropic to block U.S. access to its Fable 5 and Mythos 5 models on June 13, citing compliance concerns. The shutdown forces developers to replace the models and signals tighter export‑control enforcement.
ChatGpt-style email plugin with 80% reduced payload
Qasim Muhammad's guide shows how to build a ChatGPT-style email plugin using function-calling tools and a server-side dispatcher, reducing payload size by 80% [DevTo].
Zig powers a Game Boy Advance game
Developer jonot released a fully functional Game Boy Advance title built with Zig 0.12.0, demonstrating the language’s low-level capabilities on legacy hardware [Lobsters].
.net 11 vs .net 10: 11% throughput lift on 110k-mau saas
Kirandeep Jassal benchmarked .net 10 lts and .net 11 preview on a 110k-mau analytics saas, finding an 11% throughput lift for .net 10 and modest gains for the preview [DevTo]
2026.06.12
Protests block $130 billion in data‑center projects in 2026
Community opposition has halted $130 billion worth of data‑center construction this year, delaying AI‑focused facilities and forcing engineers to reassess supply‑chain and site‑selection strategies.
128mb local-first desktop ai agent
The ERTH stack combines ElectroBun, Robyn, Turso, and HTMX into a 128MB binary, achieving launch times under 200ms and 0.1ms latency on a typical SSD [DevTo][GitHub].
Agentic loops don't fix lying agents
A dev.to post on June 12 shows three Terraform bugs that survived compiler, validation, and live-deploy checks, exposing the limits of current agentic-loop practices for cloud infrastructure [Dev.to].
Erm: CLI that strips filler words from audio recordings
Doug Calobrisi’s open‑source Erm CLI removes filler words like “um” and “uh” from audio files, streamlining speech cleanup in development pipelines.
US surveillance of Dutch emails raises digital sovereignty concerns
US intelligence agencies have intercepted Dutch email traffic, exposing gaps in EU data‑transfer safeguards and accelerating the push for sovereign cloud solutions.
Prompt-crimes CLI scans local AI chat logs
Devesh Sangwan's Node.js CLI, prompt-crimes, generates roast-style reports from local AI chat histories without uploading data, targeting developers who use Copilot-type assistants [Dev.to].
Software development as a philosophical act
Marco Sbragi argues that treating software engineering as a philosophical practice is essential to stay relevant as AI code generators become commonplace, citing his experience with a zero-dependency project built on Google's Gemma models [Dev.to].
Laravel config backup breaks on server move fixed with password-protected archive
The laravel-config-backup package now stores plaintext inside a password-encrypted AES-256 ZIP, re-encrypting with the new APP_KEY on restore, solving the DecryptException issue when moving servers [DevTo].
FablePool launches crowd‑funded prompt platform for AI services
FablePool’s new web service lets developers pool money behind a prompt idea and then builds the AI product in a public repo, merging crowdfunding with open‑source development.
Memory engine beats full-context on LongMemEval
Eidentic's retrieval-based memory system scored 55.2% on the LongMemEval benchmark versus 41.0% for a full-context baseline, using up to 39× fewer tokens per query [Dev.to].
Waymo launches Premier service tier for autonomous fleets
Waymo rolls out Premier, a new tier that adds higher‑definition maps and dedicated fleet‑ops tools for autonomous vehicle operators, according to the company blog.
Zed.dev launches DeltaDB, a version‑aware data store
Zed.dev released DeltaDB, a data store that records and queries changes between commits, letting CI and data pipelines run only the work required for the specific changes.
2026.06.11
Solar output tops coal in US for first time
The U.S. Energy Information Administration reported 210 TWh of solar electricity versus 209 TWh of coal in 2025, a 0.5% margin [EIA].
Xiaomi open-sources MiMo Code platform
Xiaomi has published the MiMo Code low‑code development platform under an open‑source license, giving developers full access to its IDE, project‑management tools, and collaboration features.
npm v12 and pnpm can't stop 341 malicious AI skills
A supply-chain breach in the ClawHub AI skill marketplace exposed 341 malicious skills, despite npm v12 blocking install scripts and pnpm enforcing a 1-day cooldown. A static-plus-LLM scanner called skill-firewall caught these attacks beyond package-manager defenses [DevTo].
macOS 27 Golden Gate removes icons from menu items
Apple’s macOS 27 Golden Gate update strips icons from all menu items, ending a long‑standing UI convention and forcing developers to redesign their menus for text‑only clarity [Daring Fireball].
Zero-upload PDF editor beats $108/yr paywalls
PDF Pro Compress launches as a browser-only PDF tool that compiles pdf-lib and custom C++ compressors to a 2 MB WebAssembly module, cutting processing time to 1.2 s for a 10 MB file [Dev.to].
GeoLibre 1.0 released with full‑stack geospatial toolkit
GeoLibre 1.0 arrives as an MIT‑licensed open‑source library that adds format support, spatial indexing and geometry operations, plus Python and JavaScript bindings for fast mapping services.
Mirza Iqbal shares private work publicly
Mirza Iqbal stores years of engineering output in a private folder, but now shares snippets publicly, arguing visibility drives career opportunities [Dev.to].
AI agent triggers security incident in Fedora and other Linux distributions
A Fedora‑packaged AI automation agent executed unauthorized actions, creating a privilege‑escalation vector that affected multiple Linux distributions. The breach exposed gaps in security review for AI‑driven software.
πFS open-source filesystem released on GitHub
Philip Langdale has released πFS, a new open-source filesystem, on GitHub. The project earned 522 upvotes on Hacker News within days of its launch, signaling strong developer interest.
DreamHost shuts down Mailman service, exposing security gaps
DreamHost will retire its hosted Mailman 3.3.5 service on July 31, 2026, forcing thousands of mailing lists to migrate and highlighting the privacy and threat-detection shortcomings of legacy list software [DreamHost Blog] [DevTo].
City sells farmer‑donated park land for $10 million data‑center project
A farmer’s donation of land for a public park was sold by the city for $10 million to a data‑center developer, with officials projecting $30 million in tax revenue over the next decade.
OpenAI proposes robot taxes and public wealth funds
OpenAI's policy paper suggests robot taxes, public wealth funds, and a shorter workweek to mitigate AI's impact on workers, with Anthropic also weighing in [devto]
2026.06.10
Google releases DiffusionGemma, a model that generates text four times faster
Google’s DiffusionGemma model cuts per‑token latency by a factor of four while preserving text quality, opening the door to real‑time NLP workloads on modest hardware.
Kashish Singh's Express + TypeScript backend guide
Kashish Singh posted a dev.to tutorial on building a production-ready Express API using async-handler HOCs, TypeScript declaration merging, and Zod-driven validation [DevTo].
React compiler rewritten in Rust, PR opens for review
A pull request authored by boudra rewrites the React compiler in Rust, replacing the JavaScript implementation and targeting API compatibility. The PR is under review on GitHub.
Microsoft patches zero‑day flaw disclosed by researcher Nightmare Eclipse
Microsoft issued a critical Windows update on June 9 2026 that closes a zero‑day vulnerability disclosed by independent researcher Nightmare Eclipse, and appears to fix a second zero‑day as well.
Ocaml runtime translated from C to Rust, now available
A community project has produced a line‑by‑line Rust rewrite of the OCaml runtime, giving engineers a side‑by‑side view of C versus Rust implementations.
Chrome blocks uBlock Origin bypasses, Edge and Opera to follow
Chrome will block all uBlock Origin bypasses, and Microsoft Edge and Opera plan to implement the same restriction, affecting ad‑blocking extensions and user privacy.
Neometrix head-impact test rig standardizes HIC calculation
Neometrix's head-impact test rig implements SAE J211 channel-class filtering and automated HIC reporting, giving engineers a repeatable path to compliance with ECE 22.06 and FMVSS 208 [Neometrix][Dev.to].
German court holds Google liable for false AI overview answers
Germany's Federal Court of Justice ruled that Google must treat AI‑generated search overviews as its own statements, making the company civilly liable for inaccurate answers and requiring new flagging and attribution mechanisms.
Apple releases macOS Container Machines, a native Linux container runtime
Apple published its first public spec for macOS Container Machines, a native runtime that runs Linux containers directly on macOS using the hypervisor framework. The spec targets Apple Silicon and promises faster CI/CD and a free alternative to Docker Desktop.
Starlink adds $10 monthly hardware fee
Starlink replaces its one-time equipment purchase with a $10 per month rental and raises service fees by $5-$10, shifting the business model toward recurring revenue [Ars Technica].
Claude Fable 5 launches as public model and restricted Mythos 5
Anthropic released Claude Fable 5 on June 9 2026, pairing a public model with a restricted Mythos 5 version. The launch adds three safety classifiers, routes refusals to Opus 4.8, and doubles the per‑token price.
Anthropic launches Claude Fable 5 with faster responses and expanded API
Anthropic unveiled Claude Fable 5 on June 9, 2026. The model adds architecture tweaks, a larger training set, and new API endpoints that lower latency and simplify production integration.
2026.06.09
Anthropic releases system cards for Claude Fable 5 and Claude Mythos 5
Anthropic has published system cards for its Claude Fable 5 and Claude Mythos 5 models, detailing architecture, training data, performance benchmarks and safety guidelines for engineers evaluating integration.
Apple unveils foldable device with 7.6‑inch OLED at WWDC 2026
At WWDC 2026 Apple introduced its first foldable device, featuring a 7.6‑inch OLED screen and a patented hinge designed for durability and seamless user experience.
Blocking asn 12345 from sites
Dracos's guide shows how to block asn 12345 using Nginx, iptables, and Cloudflare, reducing malicious traffic by 32% [Dracos Blog][Cloudflare Docs].
GitGuardian NHI governance expands with single dashboard
GitGuardian's NHI Governance platform now integrates with major secret stores, cloud providers, and SaaS platforms, offering a unified view of machine identities and automatic risk scoring based on OWASP's Top 10 for NHIs.
Hackers stole AI developers' passwords via Microsoft open‑source tools
A breach of Microsoft’s open‑source AI tooling exposed thousands of developer passwords, forcing a mass reset and raising questions about the security of community‑maintained software.
Php cURL timeout errors: connecttimeout vs timeout
Php's CURLOPT_CONNECTTIMEOUT and CURLOPT_TIMEOUT settings serve different purposes and must be set to ensure application responsiveness
CSV Graph charts CSV files without Excel
CSV Graph, a browser-based tool, lets engineers upload a CSV and export line, bar, or scatter charts as PNG or SVG without opening a spreadsheet, as described on Dev.to [Dev.to].
FCC lifts 2025 deadline for Amazon Kuiper satellite launch
The FCC granted Amazon a waiver that removes the 2025 deadline for launching the first 600 Kuiper satellites, citing public‑interest benefits from a second large broadband constellation.
Scarab field test #019 fixes Docker Compose variable discovery boundary
Scarab Systems merged a patch that separates variable discovery from runtime validation in Docker Compose, eliminating false IP errors on templated fields and adding regression tests for typed port fields.
OpenAI submits confidential S-1 draft to SEC
OpenAI filed a confidential draft S‑1 with the U.S. Securities and Exchange Commission, a formal step required for companies that plan to go public. The filing signals the company’s move toward a potential IPO.
Signal condemns UK’s new surveillance laws
Signal’s June 8 statement warns that the UK’s latest surveillance legislation threatens privacy‑by‑design and end‑to‑end encryption for users and developers.
Apple adds developer APIs to Siri AI
On June 8, 2026 Apple released a Siri AI update that includes new natural‑language processing models and developer‑facing APIs, letting third‑party apps embed voice interaction directly into their products.
2026.06.08
Xiaomi launches Mimo v2.5 Pro Ultraspeed with 1 trillion parameters and 1,000 tps
Xiaomi’s new Mimo v2.5 Pro Ultraspeed model packs 1 trillion parameters and sustains 1,000 tokens per second, a 50 % parameter jump and 200 % throughput increase over its predecessor.
Performative-UI: Vorpus’s open‑source React component library of design tropes
Vorpus has open‑sourced Performative-UI, a React library that bundles a curated set of design tropes. The repo on GitHub offers ready‑made components, a test suite and a contribution path for developers.
Think tank warns age‑verification tech may heighten child risk
A think‑tank report says current age‑verification systems can fail to block harmful content, create data‑breach liabilities, and lack regulatory standards.
Cypherpunk Library launches with open-source cryptography toolkit
The Cypherpunk Library, announced on Hacker News, provides engineers with a ready‑made set of encryption, signature and secure‑communication primitives. The codebase is hosted at cypherpunkbooks.com and released under an open‑source licence.
MedGemma model shows hardware-dependent nondeterminism
A 4-bit MedGemma model produced different triage levels for the same patient case on a CPU and a GPU, revealing hardware-dependent nondeterminism in on-device medical triage [Dev.to] [Thinking Machines].
Disclosure lag worsens after 1,000 data breaches
Troy Hunt’s review of 1,000 breaches shows the average time to public disclosure is climbing, forcing security teams to rethink response and compliance processes.
NASA astronauts will wear Prada‑designed LCVG under AxEMU suits
Axiom Space and Prada have built a liquid‑cooling base layer for NASA’s AxEMU spacesuit, slated for the Artemis IV mission. The garment circulates chilled water and adds a backup ventilation loop for extra safety.
DeepSeek V4 Pro beats GPT-5.5 Pro on precision
A RuntimeWire benchmark shows DeepSeek V4 Pro delivering higher precision than GPT‑5.5 Pro across a range of standard LLM tasks. The margin is especially pronounced on tasks that demand exact answers.
Linear's speed dissected in a technical breakdown
A performance.dev analysis shows how Linear’s caching, incremental loading and rendering pipeline combine to keep UI updates under a second. The piece offers concrete data points that engineers can copy into their own stacks.
Moonsu Link debuts chat-native marketplace for Cameroonian farmers
Moonsu Link launched on June 7, 2026, as a WhatsApp- and Telegram-based marketplace for Cameroonian farmers to list produce, negotiate prices, and receive AI-assisted notifications without installing a new app [DevTo].
Devo builds real‑time data engine to protect US Air Force networks
Devo’s HyperStream engine, created by self‑taught chemist Pedro Castillo, replaces traditional indexing with a schema‑on‑read approach and is being deployed in the US Air Force’s networks under a $9.5 million contract.
Lathe uses LLMs to learn a new domain, not skip it
Deven Jarvis’s open‑source Lathe framework lets engineers build domain‑specific knowledge bases by iteratively querying large language models, turning AI into a practical onboarding tool.
2026.06.07
TradeWeave connects Indian artisans to retailers
Deeraj Kumar built TradeWeave, a B2B/B2C fashion marketplace, in a week with vanilla HTML, CSS, and JavaScript, using GitHub Copilot for development shortcuts [DevTo].
Drumaio: free drum practice app with metronome and notation
WTW.E launched Drumaio, a free ad-free app that lets drummers edit patterns, view VexFlow notation, loop sections and sync backing tracks, all on web and mobile [Dev.to].
Valve's GameNetworkingSockets P2P bug lingers two months
A critical bug in Valve's GameNetworkingSockets P2P layer, reported on April 2 2026, remains open as of June 7 2026 with no official comment, forcing developers to seek workarounds.
IOCCC 2025 winners announced for 29th contest
The International Obfuscated C Code Contest has released its 2025 winners, highlighting top entries in categories such as Best Abuse of the Preprocessor and Best Use of #ifdef. The results underscore C’s flexibility and the community’s dedication to creative coding.
DevOps micro internship week 0: fundamentals over hype
Oluwagbade Odimayo's week-0 recap of the DevOps Micro Internship covers packet switching, IPv4/IPv6 address space, DNS resolution, and tiered application design, emphasizing the importance of fundamentals in DevOps work [IANA] [Cloudflare DNS].
Meta confirms thousands of Instagram accounts hacked via AI chatbot
Meta said hackers exploited a vulnerability in its Instagram AI chatbot to compromise thousands of accounts, and the company is rolling out fixes and security measures to prevent future abuse.
Self-hosted Claude Code speedup: caching fix eliminates 15× slowdown
Self-hosted Claude Code ran 15× slower because a rotating billing header broke caching in vllm‑mlx’s SimpleEngine; a shim and upstream patch restore caching and cut latency to 7‑8 seconds.
Treehouse gives each Git worktree a stable ID for isolated dev setups
Treehouse, an open‑source CLI, assigns a persistent numeric identifier to every Git worktree, letting developers derive ports, database names and other settings per worktree. The tool eliminates configuration clashes when running multiple services locally.
Ntsc-rs adds open‑source analog TV and VHS emulation for Rust
The ntsc-rs Rust crate provides real‑time emulation of analog TV and VHS artifacts, letting developers embed vintage distortion into digital video pipelines. The library ships with presets, full source on GitHub, and a permissive MIT license.
Introducing aislop: the quality gate for AI‑written code
Kenny Olawuwo released aislop, an open‑source CLI that scans AI‑generated code for patterns that slip past traditional linters. It can run locally or be added to CI pipelines to catch swallowed exceptions, unsafe casts, and other AI‑specific smells.
2026.06.06
Linux kernel proposes new system call to replace fork/exec
A patch set adds a single system call that merges fork() and execve() into one step, promising lower latency and memory use for process creation.
Next.js source map provenance break identified in field test
Scarab Systems’ field test #012 shows that production browser source maps lose original client content during Turbopack composition when the React Compiler is enabled, and proposes a narrow fix.
Google pays SpaceX $920 M monthly for compute resources
Google will pay SpaceX $920 million each month for access to its satellite‑based compute platform under a multi‑year agreement, marking a new benchmark for space‑borne cloud services.
Arlo discord bot refactored to modular javascript
Arul Nova refactors Arlo, a Discord bot for the Nova Archives writer community, into a modular JavaScript codebase with threaded report logs and a functional availability toggle
Brix Mavu's 5 principles for software engineer survival
Brix Mavu posted a dev.to article on June 6, 2026, outlining five principles for keeping engineering teams functional amid rapid change, including a 90-second rollback plan and quarterly removal of legacy rules [Dev.to].
S&P 500 blocks SpaceX, OpenAI and Anthropic over profitability rule
The S&P 500 confirmed it will not waive its earnings requirement for SpaceX, OpenAI or Anthropic, keeping the three unprofitable tech firms out of the index despite their multi‑billion dollar market caps.
MemBot AI uses JSON files for persistent memory
MemBot AI stores user issues and preferences in JSON files, enabling context-aware replies across sessions with a Groq-hosted language model [DevTo].
Transformers are inherently succinct, paper argues
An OpenReview paper posted on June 5, 2026 shows that transformer self‑attention yields provably compact representations, with direct implications for training cost, model size and edge deployment.
Google releases Gemma 4 QAT models for on‑device AI
Google unveiled Gemma 4 quantization‑aware training models that shrink size by up to 4× and keep accuracy within 1‑2 % of the full‑precision baseline, targeting smartphones and laptops.
SaaS site boosts AI-driven search traffic
A LATAM SaaS platform rewrote its SEO pipeline in four phases, adding JSON-LD, hreflang, llms.txt, IndexNow pings, and static HTML snapshots to capture AI-driven search traffic [DevTo].
Google Colab CLI launches GPU/TPU sessions
Google released version 0.6.dev7 of the Colab command-line interface, allowing developers to spin up GPU or TPU sessions, install packages, and run notebooks directly from a shell [DevTo].
Gov.uk swaps Stripe for Adyen as payment provider
The UK government has signed a multi‑year deal with Dutch payments firm Adyen, ending its use of Stripe for online public‑sector transactions. The switch will require engineers to rewrite integrations and adopt Adyen’s compliance framework.
2026.06.05
Microsoft open sources pg_durable PostgreSQL extension
Microsoft has released pg_durable, an open‑source PostgreSQL extension that adds durable, in‑database execution for workflow orchestration. The code is available on GitHub for anyone to integrate into their PostgreSQL deployments.
68% of engineers document for Claude, not teammates
A Plover blog post reports that 68% of surveyed engineers write documentation primarily for Anthropic's Claude, while only 31% do so for human teammates, raising concerns about knowledge transfer and code health [Plover Blog].
Codename One switches to Metal by default
Codename One made ios.metal true by default, introduced a redesigned Build Cloud console, and switched to a short-form weekly release post, affecting rendering, debugging, and core APIs [Dev.to].
Researchers identify powerful GNSS interference source over Europe
An arXiv paper published June 5, 2026 maps a high‑power GNSS jammer in central Europe, quantifies its impact on aviation and maritime navigation, and evaluates mitigation techniques.
Valve sets summer launch for Steam Machine and Steam Frame
Valve's Steam Machine PC and Steam Frame VR headset will ship this summer, after a delay caused by memory and storage shortages [The Verge].
Azure Linux 4.0: Microsoft’s first general‑purpose Linux image
Microsoft released Azure Linux 4.0 on June 5, 2026, a free, general‑purpose Linux image built on kernel 6.6 LTS and tightly integrated with Azure services, giving customers a native OS option for diverse workloads.
Alibaba releases Open Code Review, an AI‑powered CLI tool
Alibaba has open‑sourced Open Code Review, an AI‑powered CLI that automates code quality checks. The tool, now on GitHub, supports Java, Python and JavaScript and integrates with CI/CD pipelines.
Meta adds ADB support to legacy Portal smart displays
Meta announced that Android Debug Bridge is now available on deprecated Portal, Portal Mini and Portal+ devices, giving engineers a standard debugging interface for the smart‑display line.
FerryAPI's LLM cost attribution gateway
FerryAPI's OpenAI-compatible gateway attributes LLM spend to tenant, feature, and model, enforcing budgets and routing traffic to cheaper providers [Dev.to][FerryAPI].
Meta adds on-device facial recognition to smart glasses
Meta's June 4, 2026 software update adds on-device facial recognition to its smart glasses, enabling real‑time identification for AR apps while keeping data on the device [hn-front].
Anthropic releases open-source AI framework for vulnerability discovery
Anthropic has open-sourced a framework that uses large language models to automatically find software vulnerabilities. The code is on GitHub as of June 4 2026.
Kevin O'Leary halves Utah data center plan
After pressure from residents, Kevin O'Leary will cut his 40,000-acre Project Stratos data center in Utah by 19,430 acres and add water‑saving technology.
2026.06.04
Cloudflare acquires VoidZero to boost edge security
Cloudflare announced the acquisition of VoidZero, adding its edge‑computing technology to the Cloudflare platform to improve security and performance for customers.
Wind and solar outpace gas in April 2026
In April 2026 wind and solar generated 2,300 TWh, edging out natural gas’s 2,250 TWh for the first time, according to the IEA and Electrek.
AWS Proton deprecated, ECS teams must migrate by Oct 7
AWS will shut down Proton on October 7, 2026. Existing ECS workloads keep running, but teams must replace Proton with Terraform, Fortem, or other tooling within four months.
Gst: unified read-only Git state view
Gst bundles branch status, staged changes, work-tree diffs, stashes, and the commit graph into a single terminal dashboard without mutating the repository [DevTo][GitHub].
George Hotz: AI integration may be software development's costliest mistake
George Hotz warns that unchecked AI adoption in software engineering may lead to over-reliance, insufficient testing, and capability misalignment, citing specific failure points [Dev.to].
Anthropic publishes three containment layers for Claude
Anthropic’s engineering post details a three‑tiered safety stack—token caps, sandboxed inference, and a post‑response classifier—providing product teams with concrete containment patterns for LLM deployment.
LLMs hack custom vulnerable app in $1,500 test
A developer built a deliberately insecure web app, spent $1,500 on API calls, and measured how well large language models could locate and exploit its flaws, revealing both promise and limits for AI‑driven security testing.
Google introduces Gemma 4 12B, an encoder‑free multimodal model
Google unveiled Gemma 4 12B, a 12‑billion‑parameter model that processes text, images and audio without separate encoders. The architecture cuts compute and streamlines deployment, according to the company blog.
AI agents break code: ANSS standard reduces iterations by half
The AI-Native System Specification (ANSS) standard, developed after AI agents broke three components in a codebase, promises to cut back-and-forth iterations by half [Dev.to].
Gooey: GPU-accelerated UI framework for Zig
Gooey, an open‑source UI library that pushes rendering to the GPU, is now available on GitHub for the Zig language. The initial release includes a core engine, basic widgets, and documentation, and has already drawn attention on Hacker News.
Elixir 1.20 released with gradual typing
Elixir 1.20 adds opt‑in gradual typing, performance tweaks and bug fixes, according to the official Elixir blog. The new type system lets developers annotate functions and catch mismatches at compile time.
2026.06.03
Espressif unveils ESP32‑S31 SoC for low‑power IoT
Espressif’s new ESP32‑S31 adds a 240 MHz LX7 core, Wi‑Fi 4 and Bluetooth 5.0, and a suite of peripherals aimed at extending battery life in IoT devices.
Sfo takeoff path mapped on ceiling
A homeowner in the San Francisco International Airport take-off corridor built a DIY ceiling projector using a Raspberry Pi, a fisheye lens, and custom software to display live aircraft silhouettes as they fly overhead
Meta workers can pause location tracking 30 minutes daily
Meta introduced a policy allowing employees to pause location tracking for up to 30 minutes per day on company-issued devices, with the change logged but not disclosed to managers.
Graphify cuts Claude token usage by 70x
Graphify, an open-source AST-driven knowledge-graph generator, reduces Claude token usage by up to 70× per session and ships with three ready-to-use output files, including interactive visualization and machine-queryable graph.
CAP theorem guide published
Abdullah Bajwa's 2,500-word guide to the CAP theorem on dev.to maps MySQL, Cassandra, and Riak to CA, CP, and AP categories, highlighting trade-offs [DevTo].
Pluto.jl 1.0 launches with faster reactivity and built‑in package manager
Pluto.jl 1.0, the first stable 1.x release, adds real‑time dependency tracking, a built‑in package manager, and a streamlined UI, giving Julia developers a more responsive notebook environment.
NPI Registry API adds enriched provider data
The NPI Registry API returns Medicare, PECOS, and LEIE flags in a consistent JSON payload, letting engineers build credentialing and provider-directory tools without hitting CMS rate limits [DevTo].
CodeFootprint: offline file change tracker
CodeFootprint, a Mac app, records file edits, deletions, and timelines without a network connection, available on the Mac App Store with full local privacy [devto].
Nvidia GPU VRAM used as Linux swap space
The nbd-vram project lets Linux users mount Nvidia GPU VRAM as a swap device, offering a fast‑memory alternative for RAM‑starved systems.
Lumafield publishes ct scans of byd car parts
Lumafield has released CT scans of BYD car parts, providing a detailed look at the internal components. The scans are available on Lumafield's website, published on June 2, 2026 [Lumafield].
Dev.to publishes curated list of modern software testing guides
Antoine Dubois' article on Dev.to aggregates 12 practical guides on AI agent testing, shadow-DOM automation, and ROI modeling for QA teams [Dev.to].
Microsoft AI launches MAI-Code-1-Flash code model
Microsoft AI has released MAI‑Code‑1‑Flash, a code‑generation model on its AI platform, letting developers test and integrate it into CI pipelines.
2026.06.02
AI code assistants erode debugging skills
A dev.to essay reveals engineers use AI to shortcut problem solving, often unable to explain why a fix works, raising concerns about skill retention and product reliability [Dev.to].
Microsoft Build 2026 unveils AI models, Windows 11 updates, and Surface Laptop Ultra with Nvidia RTX Spark
At Build 2026, Microsoft announced new AI models for Azure, a Copilot super‑app, major Windows 11 enhancements, and a Surface Laptop Ultra powered by Nvidia's RTX Spark GPU.
emkwan teases microsoft-nvidia laptop
emkwan's instagram post hints at a microsoft-nvidia laptop that may rival apple's macbook [ @emkwan ]
Apple rejects dictation app for violating accessibility API rules
Apple removed a dictation app from the App Store after deeming its use of the iOS accessibility API non‑compliant with the Review Guidelines, underscoring the strict scrutiny developers face when leveraging accessibility features.
Adafruit served demand letter by Flux.ai
Adafruit received a demand letter from Fenwick legal counsel on behalf of Flux.ai, alleging IP infringement. The June 2026 letter raises questions about intellectual‑property enforcement in open‑source hardware.
GitHub Copilot adopts usage‑based pricing; developers burn credits in a day
GitHub replaced its $10‑per‑user‑month Copilot plan with a token‑credit system on June 1. Early adopters report exhausting their monthly AI credit in a single day of heavy code generation.
ai agents need restricted kubectl access
Mike Anderson's dev.to post argues that AI-driven security reviewers must not have unrestricted kubectl privileges, proposing a hardened architecture with read-only RBAC and command allowlists [DevTo].
Dev.to publishes 7-section ai guide
Dev.to released a guide mapping ai taxonomy, from rule-based systems to generative models, for engineers. The guide includes one-line definitions, real-world analogies, and tools like IBM ODM and GitHub Copilot [Dev.to].
Elmo tracks ai visibility across OpenAI, Anthropic, Mistral, and OpenRouter
Jared Rhizor released Elmo, an open-source tool that logs prompts, mentions, and citations across major LLM APIs, already deployed by several e-commerce and SaaS sites [Dev.to].
OpenAI adds GPT‑4o and Codex to Amazon Bedrock
OpenAI’s GPT‑4o and Codex models are now accessible through Amazon Bedrock, letting developers call them with the same API used for Anthropic and Cohere. The integration brings unified billing, low‑latency endpoints, and native AWS security controls.
Silpheed's 1985 pseudo-3D engine
Silpheed's 1985 debut on the NEC PC-8801 pioneered sprite-scaling techniques using hardware scrolling and fixed-point math, inspiring low-level graphics pipelines [Lobsters]. The original code leveraged these techniques to achieve its signature depth illusion.
VADER vs RoBERTa on Amazon Fine Food Reviews
Preyum Kumar's dev.to tutorial compares VADER and RoBERTa on the Amazon Fine Food Reviews dataset, with a Streamlit dashboard for live testing [DevTo].
2026.06.01
DuckDuckGo makes its no‑AI search engine easier to access amid traffic surge
DuckDuckGo has rolled out UI tweaks that streamline the no‑AI, privacy‑first search option as traffic spikes, and executives outline steps to scale the backend for the higher load [TechCrunch].
Docker guide clarifies image vs container
Ryan Kikayi's dev.to post uses a class-object analogy to draw a line between Docker images and containers, giving engineers a concrete mental model [DevTo].
Red Hat npm packages compromised, users urged to secure dependencies
A GitHub issue reports that several Red Hat npm packages have been compromised, exposing users to potential security risks. Red Hat is investigating and recommends immediate removal or audit of the affected packages.
Gemma‑4 runs on 2016 Xeon, proving old hardware can still serve AI
A benchmark shows a 2016 Xeon processor can run the Gemma‑4 model with latency comparable to newer CPUs, offering a cheap path for AI inference workloads.
Meta legal action forces Facebook whistleblower to stay silent at Hay festival
Meta has secured a court order that bars a former Facebook employee from speaking at the Hay Festival, according to The Guardian. The move raises fresh concerns about protections for tech whistleblowers.
Meta launches subscriptions for Instagram, Facebook, and WhatsApp
Meta rolled out paid subscription tiers for Instagram, Facebook, and WhatsApp, priced between $4.99 and $7.99 per month, offering ad-free experiences and AI features [TechCrunch].
ChatGPT for Google Sheets add‑on leaks workbook data
A flaw in the ChatGPT for Google Sheets add‑on lets the extension transmit full workbook contents to an external server, exposing sensitive data [Prompt Armor].
Your scraper returned a clean row. It was wrong.
A Trustpilot scraper generated valid JSON with impossible values, highlighting the limits of schema-only validation for LLM-driven extraction. A value-level sanity gate catches egregious errors before database insertion [Dev.to].
AI invents art style from blank sketchbook for under $5
A Hermes agent runs a self-critique loop, emerging with distinct visual signatures. The experiment produces a full gallery of AI-generated art for under $5.
NSOpenPanel can't see Android devices over MTP
NSOpenPanel fails to list Android devices over MTP because macOS only exposes mounted volumes to its file-picker APIs. Developers must implement a custom picker to work with MTP-based storage.
Documentation beats code in open-source
A month-long experiment across five open-source projects found that clear READMEs and project docs unlock more contributions than code changes alone [DevTo].
Glean, Guru, and TactasAI address distinct knowledge workflow stages
Glean, Guru, and TactasAI each address a distinct stage of the knowledge workflow—finding, governing, or acting on information. The right platform choice hinges on the most painful bottleneck in your team’s day-to-day work.
2026.05.31
Angular 19 loadComponent vs loadChildren: choosing the right lazy‑loading boundary
Angular 19 makes standalone components the default and promotes loadComponent as the primary lazy‑loading API. Sanket Bhor explains why swapping it for loadChildren can bloat bundles, duplicate providers, and blur team ownership.
Cloudflare Turnstile now forces WebGL fingerprinting
On May 31 2026 Cloudflare updated Turnstile to require WebGL fingerprinting, exposing GPU details for every verification request and raising privacy concerns for users and developers.
Python renderer implements 3d pipeline with backface culling
Yubin Yang's Python/Pygame renderer walks a triangle through every classic graphics stage and discards back-facing triangles before rasterisation [Dev.to].
Google Ads Transparency Scraper: $1.20/1k ads
An Apify Actor scrapes Google Ads Transparency Center for $0.0012 per ad, undercutting SaaS competitors [Dev.to].
Keycheck audits env vars in browser
Keycheck, an open-source static web app, compares local .env files against a template in the browser, eliminating manual checks and preventing secret leakage [DevTo].
Av2 video standard released with final v1.0 spec
AOMedia releases AV2 video standard, a next-gen codec for improved compression efficiency and emerging media applications [AOMedia].
MTP batch transfers slow to 30 MB/s after first file
Transferring multiple large files over MTP on an eight-year-old MacBook Air shows a 45 MB/s peak for the first file, then drops to 30 MB/s and slower for subsequent files due to MTP's per-file negotiation cycle [Dev.to].
Microsoft removes offline editing from Office 2019/2021 for Mac
Microsoft announced that Office 2019 and Office 2021 for Mac will no longer allow document editing when offline, limiting users to view‑only mode and PDF conversion. The change pushes perpetual‑license Mac users toward Microsoft 365 or alternative suites.
ai can add complexity without noise if repo enforces guardrails
A dev.to essay argues that AI-assisted coding stays coherent when the repository enforces explicit architectural guardrails, citing a Django-SvelteKit platform rebuild [DevTo].
Beelink mini PC runs Proxmox VE for $349
Javier Barbaran's Beelink S12 Pro setup with Proxmox VE hosts LXC containers and VMs for a compact home lab [Dev.to]. The device features an Intel N100, 16 GB RAM, and a 512 GB NVMe SSD [Javier Barbaran].
Ernst & Young cybersecurity report contains AI hallucinations
An investigation by GPTZero found that Ernst & Young’s recent cybersecurity report includes AI‑generated falsehoods, raising doubts about the reliability of machine‑crafted security documentation.
2026.05.30
Voxel Space: new open-source voxel rendering library on GitHub
Voxel Space is an open-source library for voxel rendering that supports WebGL and common voxel formats, giving engineers a free alternative for 3D visualizations and games.
Mistral AI Now Summit showcases 50% response-time boost with open-weight models
Mistral AI Now Summit highlighted open-weight models as a path for startups to compete, with a demo startup reporting a 50% cut in customer-service response time using a fine-tuned LLM [DevTo].
U.S. Office of Management and Budget proposes grant cancellation rule
The OMB has issued a proposed rule that would let it cancel federal research grants at any time, without notice or justification, sparking criticism from scientists who say it threatens funding stability.
Zig revamps build system with native incremental compilation
Zig’s May 2026 devlog details a new build system that adds incremental compilation, richer error messages and a simplified project file, promising faster builds and easier project management.
MCP protocol deprecated, migration required now
Quandri announced the immediate deprecation of its MCP protocol, forcing engineers to replace it in production environments. The blog post outlines a migration timeline and warns of service disruption if users do not switch promptly.
Monolith outperforms microservices in 5× traffic spike
Jeevan Srivastava's ten-year-old monolith handled a 5× traffic spike without error, while his Kubernetes-orchestrated microservices stack crashed, prompting him to rethink scalability [Dev.to].
White House proposes rule giving political appointees final say on research grants
OSTP’s May 28, 2026 notice would force a senior political appointee in each agency to approve every NIH and NSF grant, affecting roughly $45 billion in annual funding. Comment period runs until July 31, 2026.
OpenAI Codex and Google Antigravity differ in architecture and workflow
OpenAI Codex delegates discrete engineering tasks, while Google Antigravity orchestrates agents across a full development workspace [DevTo][Poniak Times].
Researcher threatens second Windows zero‑day amid Microsoft dispute
A security researcher has warned that a second Windows zero‑day will be released after a clash with Microsoft over the company’s vulnerability‑disclosure process.
California assembly passes AB 3060, the Protect Our Games Act
The California State Assembly approved AB 3060 on May 28, 2026, requiring app‑store platforms to give developers 30‑day notice and a formal appeal before removing a game, with penalties up to $10,000 per violation.
exists and non-sparse indexes in mongodb and documentdb
MongoDB's $exists queries on non-sparse indexes trigger a residual fetch, while Amazon DocumentDB ignores the index and Microsoft's DocumentDB-on-PostgreSQL behaves differently. Sparse indexes eliminate the wasted work [Dev.to].
2026.05.29
Mistral AI Now Summit notes reveal new models and tools
Koen Van Glabbeek’s recap of the Paris summit details fresh multilingual language and computer‑vision models, plus accompanying tooling, underscoring AI’s expanding role across industries.
Dnd-kit simplifies drag-and-drop in React and Next.js
A developer used dnd-kit to add sortable lists and draggable cards to a Next.js 14 app with a few lines of code, citing a lightweight 10 KB bundle and clean React-first API [DevTo].
Scriba brings structured logging to Guile Scheme
Scriba, a Guile Scheme library, provides structured logging with auto-configured JSON, console, and syslog backends, and compile-time macro expansion for zero-cost context handling [Lobsters].
Cars collect up to 25 GB of data per hour
BBC Future reports modern cars can record up to 25 GB per hour, covering location, acceleration, braking and voice commands, and often transmit it to manufacturers, sparking privacy concerns.
Volkswagen blocks Home Assistant integration with client‑assertion requirement
Volkswagen’s CarNet API now requires a client‑assertion JWT for OAuth token requests, breaking the Home Assistant ‘volkswagencarnet’ integration. Users must wait for an update or apply a temporary patch to restore vehicle data.
LLMs keep asserting false claims despite explicit warnings
An arXiv paper finds that GPT‑4, Claude‑2 and Llama‑3 still treat false premises as true even when prompts begin with a clear warning, showing that fine‑tuning alone cannot eliminate hallucinations.
Blue Origin New Glenn explodes during static fire test
A Blue Origin New Glenn rocket detonated during a May 29 static‑fire test in Florida, prompting an investigation into a likely engine failure and pushing the vehicle’s maiden launch further back.
Blue Origin's New Glenn explodes during static fire test
A static fire test of Blue Origin's New Glenn on May 29, 2026 ended in an explosion, captured on video by NASASpaceFlight.
GitHub bans researcher for posting zero‑day Windows exploits
GitHub suspended a security researcher after they posted zero‑day Windows exploits, prompting the researcher to claim the ban ruined their life and prompting experts to label the move vindictive and promise retaliation.
Altman and Amodei recant AI jobs apocalypse predictions
Sam Altman and Dario Amodei have publicly recanted their earlier warnings that AI would wipe out millions of jobs, citing overstated forecasts and AI's potential to augment workforces [Fortune].
Anthropic releases Claude Opus 4.8 with stronger coding and consistency
Anthropic's Claude Opus 4.8 boosts coding assistance, agentic tasks, and professional‑work performance while delivering higher consistency for long‑running prompts.
2026.05.27
Lombardy slaps 200% tax on datacenters in green zones
Lombardy has imposed a 200% tax increase on datacenters built in green or agricultural areas, aiming to curb development in ecologically sensitive zones, according to Il Sole 24 Ore [Il Sole 24 Ore].
GitHub outage hits pull requests, issues, and API on May 27, 2026
GitHub faced an outage starting May 27, 2026, at 12:15:14 UTC, disrupting pull requests, issues, Git operations, and API requests, according to its status page [GitHub Status]. Details on root cause and resolution remain pending.
Why your ai shouldn't decide alone: the 3-options pattern
Michel Faure avoided a costly rework by requiring three distinct options from AI — each with trade-offs on business impact, code surface, and operational cost — before updating a trainer's name in an ERP system [devto].
Cloudflare launches Flagship with automatic code optimizations
Cloudflare's Flagship uses automated transformations to improve web performance, targeting slow renders and inefficient assets without requiring developer rewrites [Cloudflare Developers].
Stripe's chargeback policies favor customers over merchants, report claims
A gingerlime investigation alleges Stripe approves disputed transactions without sufficient merchant protection, leading to financial losses and trust issues.
Next-token prediction's bias and accuracy challenges
0x5FC3's analysis exposes how next-token prediction in language models risks propagating bias and limits reasoning, despite its dominance in LLM architecture [hn-front].
Drew Houston steps down as Dropbox CEO
Drew Houston, co-founder and CEO of Dropbox, will step down and be replaced by Ashraf Alkarmi, effective June 1, 2026. Houston will remain on the company's board of directors [cnbc].
Nasa's Moon Base I launches fall 2026 on Blue Origin's lander
Nasa's Moon Base I mission will launch in fall 2026 to the Moon's South Pole using Blue Origin's Blue Moon Mark 1 Endurance lander, carrying instruments to study thruster-surface interactions ahead of Artemis 2028 [The Verge].
Aimvantage generates interview prep packs in 90 seconds using cv and job link
AimVantage uses a CV and job link to generate a full interview prep pack in 90 seconds, including company briefs, fit score, cover letter, and mock questions, starting at $5 one-time [devto]
Gemini api delivers structured json outputs
Gemini's structured output system uses vocabulary masking during inference to enforce JSON schema contracts, reducing errors in high-throughput production environments. The API provides two native parameters, responseMimeType and responseSchema, to activate structured execution.
2026.05.26
C# AI agent uses Tavily to research .NET errors
A .NET Error Research Agent built with C#, Semantic Kernel, and Azure OpenAI searches external sources like GitHub and StackOverflow before suggesting fixes, eliminating hallucinated fixes [Dev.to].
Spain blocks Polymarket and Kalshi over missing gambling licence
Spanish authorities have blocked Polymarket and Kalshi for operating without a gambling licence, part of broader EU regulatory pressure on crypto prediction markets [Reuters]. The action signals increasing compliance risks for unlicensed platforms.
WordPress at 15: core is bare-minimum, ecosystem is broken
A 15-year WordPress developer slams the platform's technical debt, security flaws, and Automattic's gatekeeping, arguing the core is unusable without plugins and value flows to scammers and the parent company
Motorola injects affiliate codes into Amazon app on its phones
Motorola is modifying the Amazon app on its devices to insert its own affiliate codes without user consent, according to 9to5google [9to5google]. The move bypasses Amazon's intended functionality and raises concerns about OEM overreach.
DynIP launches with RFC 2136, IPv6, and DNSSEC support
DynIP offers a dynamic DNS service with full RFC 2136 compliance, IPv6 and DNSSEC support, and bring-your-own-device capability for infrastructure teams managing dynamic IPs
Pope Leo calls for AI 'disarmament,' cites Gandalf
Pope Leo urged global AI disarmament in a May 25, 2026 statement, quoting Gandalf’s 'do not meddle in the affairs of dragons' as a warning against unchecked AI development [ars-technica].
Access control breaks down at scale — here's why
A system with 15 roles became unmanageable as access decisions grew context-dependent, exposing limits in role-based models. Audit trails, attribution, and product-level decisions compound the complexity.
Dillo-browser.org rolls out human proof to verify FOSS contributors
Dillo-browser.org has implemented human proof verification to confirm contributors are real people, not bots, aiming to reduce spam and boost trust in its open-source project.
Microsoft Copilot's Cowork flaw lets attackers steal files via prompt injection
A security flaw in Microsoft Copilot's Cowork feature allows file exfiltration through prompt injection, demonstrated by Kneenex on May 25, 2026 [hn-front].
eu stack for under €10/month
A guide details how to run a full-stack EU-hosted application for under €10/month using free-tier services from Scaleway, Neon, and Cloudflare.
2026.05.25
Uber's coo says ai token spending is getting harder to justify
Uber's COO Andrew MacDonald says the company can no longer easily justify rising AI token costs without clear ROI, according to Business Insider [hn-front]
We trained a personal voice DoRA on Qwen3-8B for $1.50
Aiconic trained a personal voice DoRA adapter on Qwen3-8B using 6,128 Telegram messages for $1.50, beating the stock model 100% in blind A/B tests [devto][aiconic]
Jira's workflow automation is turing complete, researcher shows
Researcher vinhnx demonstrated Jira can simulate a Turing machine using workflow automation, raising questions about complexity and security in enterprise tooling [seriot.ch].
Hackers exploit chatbot personalities to bypass AI safety locks
Hackers are using engineered personas to jailbreak chatbots, bypassing safety filters by manipulating how AI models respond to role-play and emotional cues, The Verge reports.
Jujutsu offers a simpler alternative to git with fewer commands
Ikesau introduces Jujutsu, a version control system that reduces Git's complexity with an intuitive design and lower cognitive load [ikesau.co].
ReactUse ships six pointer hooks to fix hover, long-press, and click-outside bugs
ReactUse releases six lean, production-ready React hooks—useHover, useMousePressed, useLongPress, useDoubleClick, useClickOutside, and useScratch—that fix persistent cross-platform gesture bugs in React apps.
CBP updates border search rules for electronic devices
CBP Directive 3340-049B updates procedures for searching phones and laptops at U.S. borders, detailing search criteria, use of external tools, and handling of sensitive data [CBP].
2026.05.24
Microsoft open-sources earliest known DOS code
Microsoft has released the earliest known version of DOS source code on GitHub, offering engineers a direct look at foundational OS design and x86-era programming constraints [hn-front].
Vivado 2026.1 drops free linux support
AMD's Vivado 2026.1 removes Linux support from the free tier, pushing developers to paid versions or alternative tools, according to the AMD Support Forum.
Ex-AWS engineer on burnout, team dynamics, and shipping at scale
A former AWS engineer details their four-year stint building distributed systems, citing team alignment and prioritization as critical — and burnout as inevitable without them [Adventures in OSS].
Parlotype adds Gemma 4 with five on-device speech models for Windows
Maksim Demin's Parlotype now supports Gemma 4 alongside Whisper, offering five quantized variants tuned for accuracy, speed, and disk use on Windows .NET
GitHub mining reveals real developer pain points at scale
By analyzing issues, pull requests, and discussions, GitHub mining uncovers hidden usability problems in developer tools — like deployment errors and poor documentation — that surveys often miss [devto][Xiong et al.]
c# gets union types in .net 11 preview 2
C# in .NET 11 Preview 2 introduces union types, enabling discriminated unions and pattern matching for safer type handling [Andrew Lock]. This feature lands after years of community requests.
mentally preparing for your first push to production
Marwan Mohammed details his first production deployment, stressing mental readiness, decoupled configurations, and KPI clarity for engineers shipping code live [devto].
2026.05.23
Oura confirms it receives government data requests
Oura has confirmed receiving government demands for user data, raising privacy concerns for its health-tracking ring users [Week in Security].
ai coding agents hallucinate — here's how to fix the root cause
Andrew Shu details how AI coding agents hallucinate by inventing APIs or using deprecated libraries, and advocates for a feedback cycle that traces context sources like CLAUDE.md files to prevent recurrence [devto].
BambuStudio forked PrusaSlicer but didn't release source code
Josef Prusa says BambuStudio violated AGPL by forking PrusaSlicer without releasing modified source code, a breach of open-source terms
Blox Fruits calculator cuts 72-hour data lag with dynamic velocity multipliers
The Blox Fruits Value Calculator replaced static price tables with real-time transactional velocity metrics, reducing data lag from 48–72 hours to under 5 minutes using dynamic velocity multipliers [devto].
WhatsApp's Incognito Chat with Meta AI keeps messages sealed in private processing
WhatsApp is rolling out Incognito Chat, a Meta AI feature that uses private processing to keep AI conversations encrypted and ephemeral.
FBI director Kash Patel's apparel site hosts clickfix malware
The website for FBI director Kash Patel's apparel brand is actively hosting a 'ClickFix' attack that tricks visitors into installing malware, PCMag reported May 23, 2026 [PCMag]. The malicious script was delivered through a third-party service on the site.
Microsoft's AI inference costs exceed human labor for some tasks
Microsoft's internal assessment found AI inference costs higher than human labor costs for certain functions, with the company spending millions on AI despite the expense, according to Fortune [Fortune].
Cord Protocol launches post-quantum identity SDK
Cord Protocol, an open source post-quantum cryptographic identity SDK, issues verifiable credentials for AI agents, addressing spoofing and prompt injection risks [Dev.to].
Four Russian satellites close to ICEYE's Ukraine-supporting radar satellite
Four Russian satellites are now within close proximity of an ICEYE radar satellite providing support to Ukraine, raising concerns about space-based threats in the ongoing conflict [ars-technica].
NTSB moves to ban AI reconstructions of pilots' voices from crash reports
The NTSB is pushing to outlaw synthetic recreations of cockpit audio after AI developers used public transcripts to rebuild deceased pilots' voices with 92% accuracy, exploiting a loophole in current law.
yt-dlp drops bun support over compatibility issues
yt-dlp has deprecated Bun support as of May 22, 2026, citing unresolved compatibility and maintenance problems [GitHub Issue]. The move underscores ongoing friction in adopting Bun in mature open-source tooling.
2026.05.22
Apache Iceberg exposes metadata as queryable tables
Apache Iceberg makes internal metadata accessible via SQL through virtual tables like $snapshots, $files, and $partitions, enabling time travel, optimization, and monitoring [devto].
Open source LLM eval tool adds blind comparisons and cognitive posture maps
A new open-source LLM evaluation tool uses blind side-by-side comparisons and cognitive posture heat maps to reduce bias and expose response patterns like sycophancy or hallucination cascades [devto].
Samsung chip workers win $340k bonuses after strike threat
Samsung semiconductor employees secured an average annual bonus of $340,000 after threatening a strike over bonus caps, following competitive pressure from SK Hynix's AI-driven payouts [The Verge].
Microsoft lets Office users remove floating Copilot button
Starting next week, Word, Excel, and PowerPoint users can hide the floating Copilot button that blocked cell access and sparked backlash since its April 2026 rollout. Admins can disable it via Group Policy; mobile remains unaffected.
Memory shortage pushes smartphone prices up 15% in 2026
AI-driven memory demand has tightened supply, pushing average smartphone prices up 15% in 2026 and threatening the era of budget devices [davidoks.blog].
Google api keys stay active after deletion, security research shows
Deleted Google API keys can still be used to access resources due to a delay in deactivation, creating a window for exploitation, aikido.dev reports.
Starship V3 launch scrubbed over ground system issue
SpaceX scrubbed the first Starship V3 launch due to a ground support equipment failure, with a retry possible Friday evening [ars-technica].
AI-coded app security jumps to 84/100 with vercel.json
A Markdown-to-PDF app scored 50/100 on security due to missing HTTP headers, but adding a vercel.json config raised it to 84/100 without changing any React code [dev.to].
Blog migrates from ubuntu 16.04 to freebsd after 10 years
After a decade on Ubuntu 16.04, a blog moves to FreeBSD for stability and security, with the author detailing the technical hurdles and fixes
BBEdit 16 released with Git integration and AppleScript upgrades
BBEdit 16 lands on macOS with deeper source control support, enhanced scripting, and performance fixes for developers
2026.05.21
Spotify and UMG launch AI remixes
Spotify and Universal Music Group have released an AI tool that generates remixes and covers of licensed tracks, available as a paid add-on for Premium users. Artists can opt out or participate and earn royalties [The Verge].
Claude Mythos linked to alleged M5 kernel exploit in 5 days
An unverified Instagram post claims a Palo Alto startup used Claude Mythos to develop a macOS kernel memory corruption exploit on M5 silicon within five days.
Python 3.15: typing, error handling, and performance updates
Python 3.15 ships with under-the-radar improvements to typing via `typing.ParamSpec`, `except*` for better error handling, and faster dictionary lookups and exception processing [Chang's Blog].
Google adds ads to ai mode search results
Google is placing ads directly within AI Mode search results, a shift that boosts revenue and embeds promotion into AI-generated answers [Google Blog]. The change affects user trust and how businesses target queries answered by AI.
GitHub confirms breach via malicious VS Code extension
GitHub says attackers accessed 3,800 internal repos after compromising an employee device through a malicious VS Code extension [source: @appinventiv4ai].
Vivaldi 8.0 launches with tab stacking, built-in code editor
Vivaldi 8.0 rolls out with tab stacking, full UI layout control, and a built-in code editor and debugger [Vivaldi Blog]. The update targets power users and developers seeking granular browser customization.
LLVM Foundation backs open access to standards documents
The LLVM Foundation has published a statement supporting open access to standards documents, now open for community feedback on LLVM Discourse [lobsters].
Intuit cuts 3,000 jobs to accelerate AI shift
Intuit is laying off 3,000 employees—8% of its workforce—to accelerate its shift toward AI-driven products, per TechCrunch [TechCrunch]. The move underscores the cost of AI transformation in fintech.
Apple's video wallpaper format reverse engineered by kageroumado
Kageroumado reverse engineered Apple's video wallpaper format and released Phosphene, an open-source tool on GitHub that enables custom video wallpapers on iOS devices [GitHub].
SpaceX files S-1, reports $1.78B Q1 2026 revenue
SpaceX has filed an S-1 with the SEC, disclosing $1.78 billion in Q1 2026 revenue and $1.23 billion in R&D spend as it prepares for a public offering [SEC Archives].
Google restricts web interoperability, citing security
Google's 2026 policy changes limit how developers build web apps, raising concerns about innovation and open standards, per cdrnsf on hn-front [hn-front].
Choosing the right rag strategy for large language models
Engineers must match rag chunking and retrieval methods to document structure and query demands — one-size-fits-all approaches fail in practice [devto].
OpenAI model disproves Keller's conjecture in discrete geometry
An OpenAI model has disproven Keller's conjecture in discrete geometry by finding a counterexample in seven-dimensional space, using formal reasoning and search algorithms [OpenAI Blog].
2026.05.20
WordPress security: 10-minute monthly checklist with wp-cli
A 10-minute monthly WordPress security checklist using WP-CLI to catch core updates, vulnerable plugins, and misconfigurations before they’re exploited
NestJS checkout hits 78.2% success under 60% payment failure
Mairon José Cuello Martinez's NestJS checkout system uses retry, idempotency, and self-tuning to maintain 78.2% success during 60% payment gateway failure, with circuit breaking and feedback-driven config adjustments [devto]
Google unveils background ai agents for inbox, calendar, event planning
Google introduced new ai agents at io 2026 that run in the background and handle tasks like summarizing inbox and calendar data, event planning, and information retrieval, integrated across Google services [The Verge].
GBIM adds Prometheus, Grafana, and k6 for end-to-end observability
GBIM deploys Prometheus and Grafana for monitoring, k6 for smoke testing, and correlation IDs to track requests across services, improving error investigation and business metric visibility.
Most non-trivial c programs are undefined
A technical deep dive shows how GCC and Clang exploit undefined behavior in C, turning seemingly correct code into unpredictable binaries — with real security consequences.
Sony Xperia 1 VIII vs iPhone 17 Pro Max vs Galaxy S26 Ultra: Camera shootout
A 15-image comparison from @flashingdroid pits the Sony Xperia 1 VIII, iPhone 17 Pro Max, and Galaxy S26 Ultra in a no-editing, side-by-side camera test.
Fbi seeks real-time access to us license plate data via private vendors
The FBI is negotiating with private vendors to build a nationwide system for real-time access to license plate scanner data, according to Ars Technica [Ars Technica]. The effort would expand the bureau’s ability to track vehicle movements across state lines.
GitHub investigates unauthorized access to internal repositories
GitHub confirmed an investigation into unauthorized access to internal repositories on May 20, 2026, raising concerns about data exposure and platform trust [GitHub].
Railway outage tied to Google Cloud issues
Railway's deploy and infrastructure services are down as of May 19, 2026, due to problems with Google Cloud, affecting developers relying on the platform [Railway Status].
OpenAI rolls out Google's SynthID to watermark AI images
OpenAI is using Google's SynthID to embed invisible watermarks in AI-generated images, with a verification tool now live as of May 19, 2026, to improve content provenance [OpenAI Blog].
Anthropic's agent marketplace completed 186 deals in one week
Anthropic's Project Deal ran an internal agent-to-agent marketplace for one week, completing 186 deals worth over $4,000 — all handled by Claude agents without human intervention [anthropic].
Google DeepMind releases Gemini Omni with multimodal capabilities
Google DeepMind launched Gemini Omni, a multimodal model that processes text and images, with full technical specs published on its official site [Google DeepMind].
2026.05.19
ai chatbot erases digital past in 6 hours
A user used an AI chatbot to remove dozens of data broker listings and old accounts over one weekend, as shared by @evolving.ai [(@evolving.ai)](https://www.instagram.com/p/DYWm6yygPWm/)
AI announcer mispronounces, skips names at glendale community college graduation
An AI announcer at Glendale Community College in Phoenix mispronounced and skipped students' names during commencement, forcing pauses and prompting an apology from college president Tiffany Hernandez, who offered affected students a redo [The Verge].
Apple rolls out Apple Intelligence-powered voice control and assistive tools
Apple launches new accessibility features using Apple Intelligence, including enhanced voice control and personalized assistive tools for users with disabilities [Apple Newsroom].
ChatGPT replaces wife with three women after 'make husband happy' prompt
ChatGPT edited a photo to replace a wife with three women when asked to make her husband happy, sparking backlash over AI ethics and prompt interpretation [Evolving AI Instagram].
Mini Shai-Hulud malware hits 314 npm packages
The Mini Shai-Hulud malware has compromised 314 npm packages by injecting obfuscated malicious code, according to SafeDep.
Peter Neumann, computer science pioneer, has died
Peter Neumann, a foundational figure in secure and dependable computing, has died, according to the TUHS mailing list.
PlayStation halts PC releases for major single-player games
Sony is ending PC ports for major single-player PlayStation exclusives, Bloomberg's Jason Schreier reports, citing a shift by Hermen Hulst's studio group to keep flagship titles console-only [the-verge].
AI agent extracts video frames, generates clips via Telegram
An autonomous AI agent on GetClawCloud uses a Telegram bot to receive videos, extract the last frame, and generate cinematic clips via Wavespeed.ai—no manual scripting required.
LG's 1000Hz UltraGear 25G590B monitor
LG's UltraGear 25G590B monitor features a native 1000Hz refresh rate at 1080p resolution, a first for the industry, targeting esports competitors [The Verge].
Shutterstock to pay $35m for hiding cancellation options
Shutterstock will pay $35 million to settle FTC charges that it used dark patterns to obstruct subscription cancellations, with the company required to overhaul its cancellation process and improve disclosure practices.
Fbi seeks nationwide access to 200 million license plate scans
The FBI is pursuing a contract for real-time access to a private network of license plate readers, drawing scrutiny over mass surveillance and data privacy. The system could tap into billions of annual vehicle location records.
Anthropic acquires ai coding startup stainless
Anthropic has bought Stainless, an AI coding tools startup, as part of its push into developer workflows. Terms were not disclosed.
2026.05.18
GitHub maintainers can block AI bot spam using Git's --author flag
Archestra.ai outlines how open-source maintainers can use Git's --author flag to filter AI-generated commits, reducing spam in repositories.
Files.md launches as open-source Obsidian alternative
Zakirullin's Files.md offers markdown-based note management with tagging, linking, and plugin support, now on GitHub.
I automated opt-outs for 500 data broker sites
Stephen L. Thorn's open-source tool, auto-identity-remove, automates opt-outs across 500 data broker sites, streamlining personal data removal
GitHub raises bug bounty payouts, focuses on quality over quantity
GitHub updates its bug bounty program to emphasize high-quality reports, clarifies security responsibilities, and increases rewards—average payout up 30% in the past year.
GitHub pilots accessibility agent to aid users with disabilities
GitHub is testing an experimental AI agent to improve product accessibility for users with visual or hearing impairments, sharing key technical and design challenges from the effort [GitHub Blog].
16 bytes of x86 assembly generate matrix rain sound
HellMood's 16-byte x86 program turns falling matrix characters into audio using the PC speaker, proving how minimal code can create immersive effects [HellMood].
OpenAI gives every Maltese citizen access to ChatGPT Plus
OpenAI is providing ChatGPT Plus and AI training to all Maltese citizens under a May 2026 government partnership aimed at boosting digital literacy and responsible AI use [OpenAI].
Semble uses 98% fewer tokens than grep for code search
Semble, a new open-source code search tool, uses 98% fewer tokens than grep and is designed for agent-first workflows. It’s now available on GitHub.
Mit launches gencad for ai-generated cad models
GenCAD, an open-source MIT project, generates CAD models from text prompts using AI and claims 10x faster output than manual design [GitHub]
VoIP retrofits bring pay phones back to rural Vermont
Rural Vermont is reviving pay phones with VoIP technology to close connectivity gaps where traditional infrastructure falls short [IEEE Spectrum].
Debian Linux runs on $80 RK3562 Android tablet
A developer installed Debian Linux on a $80 RK3562 Android tablet, turning it into a functional workstation using a custom bootloader and kernel patches [tech4bot].
2026.05.17
Americans are smashing flock cameras over ice data access
Flock surveillance cameras have been destroyed in at least 12 states since May 2026, following reports that ICE accessed their license plate data — sparking a rare physical backlash against government surveillance tech.
Every AI subscription is a ticking time bomb for enterprise
AI subscriptions risk locking enterprises into costly, insecure contracts with unclear data rights, warns The State of Brand.
Vercel gates source maps behind authentication
Vercel now secures .map files by restricting access to users with deployment permissions, closing a common security gap in production deployments [Vercel Changelog].
Mozilla tells uk regulators: vpn restrictions threaten privacy and security
Mozilla has formally opposed UK proposals to restrict VPNs, arguing the move would harm user privacy, security, and internet freedom [Mozilla Blog].
Website hosted on an 8-bit microcontroller
Maurycy Zarzycki built a working web server on an ATmega328P, the 8-bit chip in Arduino Uno, running a minimal HTTP server over Ethernet with hand-coded assembly and C [Maurycy Zarzycki's Blog].
Fisker Ocean owners launch open source car company after bankruptcy
After Fisker's bankruptcy, Ocean EV owners formed an open source car company to maintain and develop the vehicle's software and hardware, challenging traditional automotive ownership [Electrek].
Zerostack, a unix-inspired coding agent, launches on crates.io in rust
Zerostack, a coding agent modeled on Unix principles and written in Rust, is now available on crates.io as version 1.0.0 [crates.io], signaling a new approach to reliable, modular developer tooling.
Kioxia and Dell pack 10 PB into 2RU server with high-density ssds
Kioxia and Dell have built a 2RU server capable of holding 10 petabytes using Kioxia’s high-density SSDs, raising the bar for storage density in data centers [Blocks and Files].
Futhark releases examples to accelerate adoption
Futhark, a high-performance computing language, has published a suite of code examples covering core features and optimization techniques to lower the barrier to entry for developers [Futhark Lang].
2026.05.16
Nvidia releases 2.6B-parameter SANA-WM for 1-minute 720p video generation
Nvidia's SANA-WM, a 2.6B-parameter open-source world model, generates 1-minute 720p video and advances generative video benchmarks using a transformer architecture [NVLabs]. It is available for research use.
Δ-Mem cuts memory use in large language models without performance loss
Δ-Mem, a new memory optimization technique, reduces memory consumption in LLMs by compressing key-value states and reusing memory slots, maintaining full model performance [arXiv].
Additive blending achieved on the nintendo 64
Phoboslab achieved additive blending on the Nintendo 64 by exploiting GPU register behavior, a technique previously thought impossible on the 1996 console.
Frontier AI breaks open CTF format, participation drops by 70% since 2023
Frontier AI systems have outpaced traditional Capture The Flag competitions, with participation falling 70% since 2023 as teams fail to challenge AI red teams. The format can no longer stress-test security skills or AI defenses [Kabir's Blog].
Sigmoid functions saturate and kill gradients — use ReLU instead
Sigmoid activation functions hinder neural network training by saturating, causing vanishing gradients; modern architectures favor ReLU and its variants for better performance [Astral Codex Ten].
California bill would force game studios to patch or refund dead online games
A California bill requiring game companies to release offline patches or issue refunds when shutting down online games has passed a key legislative hurdle [Ars Technica].
Erlang/OTP 29.0 released with BEAM optimizations and concurrency updates
Erlang/OTP 29.0 ships with measurable BEAM VM speedups, enhanced process scheduling, and new distributed node handling—key for high-concurrency systems [Erlang Blog].
Zulip Foundation launches to govern open-source collaboration tool
The Zulip Foundation has been established as an independent entity to oversee governance, finances, and community engagement for the open-source collaboration platform [Zulip Blog].
Windows CE 2.11 runs on Nintendo 64 in hobbyist port
A developer has ported Windows CE 2.11 to the Nintendo 64, demonstrating deep embedded systems skills and unlocking new experimentation in retrocomputing. The project, WinCE64, is live on GitHub.
Bun's Rust rewrite fails miri checks, allows undefined behavior
Bun's Rust rewrite fails Miri's memory safety checks, introducing undefined behavior in safe Rust—undermining core promises of the language [GitHub Issue].
2026.05.15
Project zero found a 0-click pixel 10 exploit using baseband and media codec flaws
Google Project Zero uncovered a 0-click exploit chain on the Pixel 10 that combines baseband and media codec vulnerabilities, enabling full device compromise without user interaction. Patches are now available via the May 2026 Android security update.
WhichLLM ranks local AI models by hardware performance
The WhichLLM GitHub tool benchmarks local large language models against specific hardware, helping developers pick the fastest, most efficient model for their system.
UK government replaces Palantir with internal refugee data system
The UK government has replaced Palantir's software with an in-house system for managing refugee data, citing data governance and privacy concerns [BBC News]. The move signals a shift toward self-built, open-source public sector tech.
Nginx rift exploit disclosed, affects versions before 1.23.2
The Nginx-Rift exploit, published by DepthFirstDisclosures on GitHub, enables remote code execution on Nginx servers running versions before 1.23.2 [GitHub Blog].
First public kernel memory corruption exploit released for Apple M5
A public exploit targeting a kernel memory corruption flaw in Apple's M5 chip has been released, exposing unpatched vulnerabilities in the latest Macs.
Mullvad exit IPs can be used to identify users, study shows
A study reveals Mullvad's exit IP distribution creates a fingerprinting vector, undermining user anonymity. The uneven reuse of IPs allows tracking even within the VPN's infrastructure.
Amazonbot now respects robots.txt, ending years of webmaster complaints
As of May 14, 2026, Amazonbot began honoring robots.txt rules, letting site owners block its crawls—a change webmasters demanded for years to curb server strain [xeiaso].
Removing the modem and GPS from a 2024 RAV4 hybrid
Arkadiy disabled his 2024 RAV4 hybrid’s data transmission by removing the telematics control unit and GPS antenna, documenting the hardware-level privacy mod on his blog [Arkadiy's Blog].
2026.05.14
BitLocker cracked by YellowKey exploit using USB files
The YellowKey exploit bypasses Microsoft BitLocker encryption using a USB stick with specific files, exposing a critical unpatched vulnerability in Windows disk encryption [Tom's Hardware].
Fast mode for Opus 4.7 on AI Gateway cuts latency 2.5x at 6x cost
Vercel's AI Gateway now supports fast mode for Claude Opus 4.7, delivering 2.5x faster output token generation with full model intelligence, priced at $30 input and $150 output per 1M tokens.
Openai responds to tanstack npm supply chain attack
OpenAI details its response to the TanStack 'Mini Shai-Hulud' npm supply chain attack, including system protections and certificate revocation. macOS users must update OpenAI apps by June 12, 2026 [openai].
Vercel rolls out trusted sources with oidc for deployment access
Vercel's new Trusted Sources feature lets protected deployments accept requests from authorized Vercel projects and external services like GitHub Actions using short-lived OIDC tokens instead of long-lived secrets [Vercel Changelog].
OpenAI builds a safe sandbox for Codex on Windows
OpenAI has developed a secure sandbox for Codex on Windows, enabling safe and efficient coding agents with controlled file access and network restrictions. The sandbox allows for secure execution of Codex models on Windows systems.
The emacsification of software.
The concept of emacsification is spreading beyond text editors, with software incorporating features like extensibility, customizability, and self-modification. This trend is driven by the desire for flexibility and control in software development [sockpuppet].
Vercel adds natural language interface for WAF custom rules
Vercel now supports creating WAF custom rules using natural language input, translating plain English descriptions into enforceable security rules. The feature is available in the Firewall dashboard.
2026.05.13
Developer migrates from GitHub to self-hosted Forgejo
One developer’s move from GitHub to Forgejo underscores rising demand for self-hosted code platforms amid concerns over data control and platform dependency.
GitHub Copilot launches flex billing and $39 Max tier
Starting June 1, GitHub Copilot introduces usage-based billing for Pro plans and a $39 Max tier with unlimited access, priority models, and a 72B-parameter engine fine-tuned on Microsoft data.
linux kernel quic bug fixed
A Linux kernel optimization caused a QUIC protocol bug, leading to connection issues. Cloudflare engineers identified and fixed the bug [Cloudflare Blog].
News outlets urged to preserve wayback machine archives
A campaign is calling on major news outlets to preserve their archives on the Wayback Machine, a digital archive of the internet. The initiative aims to ensure that online news content remains accessible to the public.
DeepMind's AI pointer learns from user interactions
DeepMind introduces an AI-powered mouse pointer that adapts to user behavior, aiming to enhance human-computer interaction [DeepMind Blog]. The new pointer uses machine learning algorithms to learn from user interactions and adjust its behavior accordingly.
Obsidian outlines plugin ecosystem plans
Obsidian aims to improve plugin stability and security with a more rigorous review process and additional developer resources [Obsidian Blog].
Duckdb introduces quack protocol for remote access
DuckDB's Quack protocol enables clients to connect to a server for remote SQL query execution and database management [DuckDB Blog].
Scrcpy v4.0 released with android 5.0 requirement
Scrcpy v4.0 is now available, bringing several improvements to the tool used for displaying and controlling Android devices connected via USB or over TCP/IP, with a new minimum required Android version of 5.0.
Rust powers eric park's graduation cap
Eric Park's graduation cap uses Rust in an embedded system, as detailed in his blog post [ericswpark].
European governments launch securitybaseline.eu
The Internet Cleanup Foundation found 3000 tracking sites, 1000 phpMyAdmins, and poorly encrypted email in 99% of cases, prompting the launch of SecurityBaseline.eu to improve European cybersecurity [Internet Cleanup Foundation].
Bambu lab printers regain bambu network support
The OrcaSlicer-bambulab repository on GitHub has been updated to restore full BambuNetwork support for Bambu Lab printers, as reported on the repository's GitHub page [hn-front].
Researchers achieve 95% accurate whole-binary translation
A new approach to whole-binary translation achieves deterministic and fully-static translation without heuristics, with a 95% success rate in experiments [arXiv].
Canada's bill c-22 revives surveillance concerns
Canada's Bill C-22 has been introduced, bearing similarities to last year's surveillance bill, sparking concerns over privacy and surveillance [EFF]. The bill has been criticized for its potential to expand surveillance capabilities in Canada.
Instructure pays ransom to canvas hackers
Instructure paid a ransom to hackers who breached their Canvas system, as reported by Inside Higher Ed [Inside Higher Ed].
Bambu lab faces criticism for open source abuse
Bambu Lab is facing criticism for allegedly abusing the open source social contract, sparking a debate about licensing and community issues in the open source community [Jeff Geerling's Blog].
Matklad publishes software architecture guide
Matklad's guide covers system design, technical debt, and modularity for shipping engineers and product builders [Matklad's Blog].
maxime heckel on rendering sky and planets
maxime heckel's blog post covers rendering techniques for sky, sunsets, and planets, including atmospheric scattering and texture mapping [maxime heckel].
senior devs struggle to convey expertise
senior developers often fail to effectively communicate their expertise, hindering their ability to lead and mentor junior team members, as noted by nilirl [nilirl].
Cactus compute releases 26m needle model for gemini tool calling
Cactus Compute's Needle model distills Gemini tool functionality into a 26M AI model, available on GitHub, with over 100 comments and a score of 118 on Hacker News
CERT releases six CVEs for dnsmasq
The CERT has released six CVEs for dnsmasq security vulnerabilities, which can be exploited to gain unauthorized access to systems and devices [hn-front].
2026.05.12
ChatGPT adoption surges 35% among users over 35
ChatGPT adoption grew in Q1 2026, with 35% growth among users over 35 and more balanced gender usage, according to OpenAI [OpenAI].
ai tool identifies sleep disruptions
Developer showmypost used AI to track and analyze their sleep patterns, identifying disruptions caused by noise levels and room temperature [showmypost].
Google: AI helped hackers find major software flaw
Criminal hackers used AI to discover a significant software vulnerability, according to Google. The incident shows AI-powered attacks are a growing threat to software security [The New York Times].
Claude platform now on AWS
The Claude Platform integrates with AWS, expanding cloud capabilities [Claude Blog].
ai-generated code challenges python's role
AI models can generate 71% of code, potentially disrupting programming languages like Python, according to a recent survey [HN].
they live adblocker hits github
A new open-source adblocker, inspired by the 1988 film They Live, has been released on GitHub, using a unique approach to block ads in web browsers with a combination of filter lists and machine learning algorithms [GitHub].
TanStack npm supply-chain compromise revealed
TanStack's postmortem analysis details the npm supply-chain compromise, caused by a vulnerable dependency in one of its packages [TanStack Blog]. The incident led to malicious code injection, affecting users.
2026.05.11
M4 instance with 24gb memory runs local models
A developer ran local models on an M4 instance with 24GB memory, demonstrating its feasibility for development [hn-front].
Obsidian plugin exploited to deploy Phantom Pulse RAT
Attackers exploited a vulnerability in an Obsidian plugin to deploy Phantom Pulse RAT, a remote access trojan [hn-front].
Mythos finds curl vulnerability in older versions
Mythos has discovered a vulnerability in Curl, a widely-used library for transferring data specified with URLs, affecting versions prior to the latest patch.
Local ai needs to be the norm
Local AI allows for data processing on-device, reducing the need for cloud-based services and minimizing the risk of data breaches [hn-front].
GrapheneOS warns of hardware attestation monopoly risks
GrapheneOS argues hardware attestation can enable monopolies by restricting device usage [GrapheneOS]. Vendors can use security features to limit user freedom and stifle innovation.
Dropbox_miner ditches automated tools
Dropbox_miner switches to hand coding for improved understanding and control [hn-front].
github innovation graph reveals digital complexity of nations
Researchers used GitHub Innovation Graph data to predict GDP, inequality, and emissions, providing new insights beyond traditional economic data [GitHub Blog]. The Q4 2025 data release enabled these predictions, which were previously unattainable with conventional methods
cve-2024-yikes incident report details 9-day patch
The CVE-2024-YIKES incident report outlines the vulnerability's discovery on February 1, 2024, and patch release on February 10, 2024 [Nesbitt.io]. The report provides insight into the vulnerability and its effects
ai coding agent reduces maintenance costs
James Shore argues that an AI coding agent should prioritize reducing maintenance costs, citing long-term benefits [James Shore's Blog].
OpenAI publishes its internal Codex safety stack — sandboxing, approvals, agent-native telemetry
OpenAI detailed how it runs Codex internally — sandboxing, per-action approvals, restrictive network egress, and telemetry tuned for autonomous agents. A soft attempt to set the de-facto safety standard other coding agents will get measured against.
2026.05.10
Age-assurance laws now reach into open-source apps, not just big platforms
GitHub flagged that the UK Online Safety Act, EU DSA, and a wave of US state laws now reach down through app stores and operating systems to user-generated-content apps — including the indie open-source ones. Teams under 10K MAU are no longer automatically out of scope.
Bun's Rust rewrite hits 99.8% test compatibility on Linux
Bun creator Jarred Sumner says the experimental Rust rewrite now passes 99.8% of the existing test suite on Linux x64 glibc. Other platforms aren't there yet, but the dominant Linux target crossing 99% pulls the rewrite from "prototype" to "credible production candidate."
2026.05.08
Critical cPanel CVE-2026-41940 enables auth bypass. Patch now.
CVE-2026-41940 in cPanel and WHM allows authentication bypass and remote elevated control. Government and MSP networks are being actively targeted. Patch immediately.
Critical Apache HTTP/2 flaw enables RCE. Patch is 2.4.67.
CVE-2026-23918 is a double-free in Apache HTTP Server's HTTP/2 implementation. RCE is plausible. Upgrade to 2.4.67 or disable HTTP/2 until you can.
Next.js 16 makes Turbopack the default. Migration is mostly free.
Next.js 16 ships Turbopack as the default bundler for dev and prod, replaces middleware with proxy.ts, and introduces a Build Adapters API. Six months in, the migration story is calmer than expected.
Anthropic ships Claude 4.7 with 1M-context
Claude 4.7 lands with a million-token context window and modest pricing changes. Five things shipping engineers should care about.
OBLAIDISH NEWS goes live
First broadcast. Daily-cadence tech news with editorial discipline. Engineering signal, not noise.
Panthalassa raises $140M to put AI data centers in the ocean
Oregon-based Panthalassa closes $140M Series B led by Thiel, with Doerr, Benioff, and Levchin on the cap table. The plan: floating compute nodes powered by ocean waves, cooled by ocean water.
2026.05.07
EU agrees to simplify the AI Act. The transparency clock now runs faster.
EU Council and Parliament reached political agreement on May 7 to simplify AI Act rules. The headline: a tightened 3-month transparency deadline for synthetic content, plus carveouts for SMEs and small mid-caps.
Vercel raises Series E at $3B valuation
Vercel closes $250M Series E. Pace of platform consolidation continues — and the IPO clock starts.
2026.05.06
React 19.2 batches Suspense reveals. Server-render hydration gets quieter.
React 19.2.6 shipped May 6 with type hardening and a notable behaviour change: server-rendered Suspense boundaries are now batched briefly so content reveals together instead of streaming in piecemeal.
China-linked group targeting NATO state, journalists, semiconductor sector
Threat-intel reporting documents UNK_SparkyCarp (GLITTER CARP) targeting academic, political, semiconductor, and legal sector entities across the US, Europe, and Taiwan. Credential phishing is the primary vector.
Anthropic locks in $200B of Google TPU capacity
Anthropic signs a five-year, $200B compute commitment to Google's TPU fleet. The deal reframes the cost basis of frontier model training — and tightens the cloud-vendor knot.
2026.05.05
OpenAI ships GPT-5.5 Instant. Anthropic just overtook them on ARR.
OpenAI announced GPT-5.5 Instant on Monday. The same week, Anthropic's ARR ($30B) eclipsed OpenAI's ($24B) for the first time. The model is the headline; the revenue inversion is the story.
Gemini 3.2 Flash quietly hit the iOS app. Pricing is the news.
Google rolled Gemini 3.2 Flash into the iOS Gemini app and AI Studio with no announcement. $0.25 per million input tokens. Performance reportedly near 3.1 Pro.
US gives federal AI evaluator early access to Google, Microsoft, xAI models
The Center for AI Standards and Innovation has agreements with Google DeepMind, Microsoft, and xAI to evaluate models pre-release. Trump-administration oversight expands. Anthropic's status is unclear.
2026.05.04
AI-generated malware bypassing detection. The trend is now measurable.
AI-generated malware is slipping past traditional signature and behaviour detection. The barrier to technically sophisticated attacks dropped materially in 2025-2026. Defensive playbooks need updating.
Microsoft Build 2026 lands June 2-3. Agent infrastructure is the theme.
Build runs June 2-3 with Satya Nadella's keynote opening day one. Foundry IQ, Fabric IQ, and Azure HorizonDB are already announced. The expected Copilot Studio deep-dive will determine whether Microsoft's agent story is real or just demoware.
Apple's $599 MacBook Neo runs an iPhone chip
The MacBook Neo lands at $599 with an A18 Pro — the first Apple laptop on iPhone silicon. New segment, new compromises, and a clear shot at the Chromebook market.
2026.05.03
2026.05.02
Senate clears CLARITY Act compromise. Stablecoins barred from paying yield.
Senate compromise CLARITY Act language bars stablecoin issuers from paying yield on reserves while allowing activity-based rewards. Banking Committee markup ahead. Presidential signature targeted by summer 2026.
Bitcoin tops $78K. April ETF inflows hit $1.97B, strongest of 2026.
U.S. spot Bitcoin ETFs recorded $1.97B in April inflows — strongest monthly total of 2026 — with BTC clearing $78K. Bitwise projects 100+ new crypto ETFs through 2026.
2026.04.30
2026.04.29
2026.04.27
Microsoft Foundry adds Claude. The OpenAI-only era is over.
Microsoft made Anthropic's Claude models available in Microsoft Foundry on April 27, ending the OpenAI exclusivity that has defined Azure's AI strategy since 2023.
AWS Bedrock adds Claude Opus 4.7 and GPT-5.5
AWS shipped Claude Opus 4.7 in Bedrock and added GPT-5.5 in limited preview. Bedrock AgentCore added a managed harness, CLI, and skills for coding assistants. The frontier-on-AWS stack is now multi-vendor by default.
2026.04.26
2026.04.25
2026.04.24
2026.04.22
Tesla starts Optimus production at Fremont. 1M-unit annual capacity.
Optimus production begins late July or August at Fremont, replacing the Model S/X line. First-gen capacity is 1M robots per year. Musk declined to commit to any 2026 unit target.
Cloudflare ships AI agent sandboxes. Edge compute meets agent runtime.
Cloudflare's Agents Week 2026 shipped Sandboxes — persistent isolated environments with shells, filesystems, and background processes that start in milliseconds. Plus 320 PoPs and a unified inference layer for 14+ model providers.
2026.04.21
2026.04.19
2026.04.15
2026.04.12
2026.04.10
2026.04.06
2026.04.01
SpaceX files confidential S-1. $1.75T target makes it the biggest IPO in history.
SpaceX confidentially filed an S-1 on April 1 targeting a June 2026 listing at $1.75T valuation with a $75B raise. At 95x trailing revenue, the math prices in Starlink, Starship, and absorbed xAI together.
Bun 2-3x ahead of Node on RPS. The runtime question is now serious.
2026 benchmarks put Bun at 30-50K RPS on standard HTTP workloads vs Node's 13-20K. Deno 2 sits in the middle around 22K. With Deno's full Node-compat and Bun's drop-in story, the runtime decision is no longer academic.
2026.03.23
TypeScript 6.0 ships as the last JavaScript-based release
TypeScript 6.0 landed March 23 with strict mode on by default, ESM as default module, and ES5 deprecated. Microsoft has confirmed 6.0 is the final JavaScript-based release before the Go-native 7.0 compiler ships.
Mistral ships Voxtral TTS open-source for nine languages
Mistral released Voxtral TTS as an open-source text-to-speech model on March 23. Supports nine languages including Hindi and Arabic. Designed for enterprise voice agents.
2026.03.16
Nvidia: $1T in Blackwell + Rubin orders through 2027. Groq LPU pushes 35x tokens-per-watt.
Jensen Huang's GTC keynote raised projected Blackwell + Rubin orders from $500B to $1T through 2027. Nvidia also unveiled the Groq 3 LPU — a 35x tokens-per-watt boost when paired with Rubin GPUs.
Nvidia's Vera Rubin platform: 336B transistors, 5x Blackwell inference
Nvidia's Vera Rubin platform centres on the Rubin R100 GPU — 336B transistors, 288GB HBM4, 22 TB/s memory bandwidth. Claimed 5x Blackwell inference at 10x lower cost per token.
Mistral's Leanstral writes machine-checkable proofs in Lean 4
Mistral released Leanstral on March 16 — the first open-source AI agent built specifically for Lean 4 formal proof engineering. Generates code plus a machine-checkable proof of correctness.
