Hacker News Highlights

Hacker News Highlights

Daily overview of the Top 10 Hacker News posts. Post and comment summarization by AI.

  1. 1 HR AGO

    5.12.26 | TanStack NPM supply-chain attack, GitLab workforce reduction and CREDIT end, AI-written code questions Python use

    This is a recap of the top 10 posts on Hacker News on May 12, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:21) - Postmortem: TanStack NPM supply-chain compromise (01:58) - GitLab announces workforce reduction and end of their CREDIT values (03:22) - If AI writes your code, why use Python? (04:57) - UCLA discovers first stroke rehabilitation drug to repair brain damage (2025) (06:04) - Nullsoft, 1997-2004 (2004) (07:35) - They Live (1988) inspired Adblocker (08:48) - Training an LLM in Swift, Part 1: Taking matrix mult from Gflop/s to Tflop/s (10:21) - Screenshots of Old Desktop OSes (11:30) - Interaction Models (12:56) - Google says criminal hackers used AI to find a major software flaw (14:20) - Outro Postmortem: TanStack NPM supply-chain compromisehttps://tanstack.com/blog/npm-supply-chain-compromise-postmortemhttps://news.ycombinator.com/item?id=48100706GitLab announces workforce reduction and end of their CREDIT valueshttps://about.gitlab.com/blog/gitlab-act-2/https://news.ycombinator.com/item?id=48100500 If AI writes your code, why use Python?https://medium.com/@NMitchem/if-ai-writes-your-code-why-use-python-bf8c4ba1a055https://news.ycombinator.com/item?id=48100433 UCLA discovers first stroke rehabilitation drug to repair brain damage (2025)https://stemcell.ucla.edu/news/ucla-discovers-first-stroke-rehabilitation-drug-repair-brain-damagehttps://news.ycombinator.com/item?id=48098261 Nullsoft, 1997-2004 (2004)https://slate.com/technology/2004/11/the-death-of-the-last-maverick-tech-company.htmlhttps://news.ycombinator.com/item?id=48060077 They Live (1988) inspired Adblockerhttps://github.com/davmlaw/they_live_adblockerhttps://news.ycombinator.com/item?id=48102700 Training an LLM in Swift, Part 1: Taking matrix mult from Gflop/s to Tflop/shttps://www.cocoawithlove.com/blog/matrix-multiplications-swift.htmlhttps://news.ycombinator.com/item?id=48085685 Screenshots of Old Desktop OSeshttp://www.typewritten.org/Media/https://news.ycombinator.com/item?id=48104428 Interaction Modelshttps://thinkingmachines.ai/blog/interaction-models/https://news.ycombinator.com/item?id=48100524 Google says criminal hackers used AI to find a major software flawhttps://www.nytimes.com/2026/05/11/us/politics/google-hackers-attack-ai.htmlhttps://news.ycombinator.com/item?id=48094641

    14 min

  2. 1D AGO

    5.11.26 | Hardware attestation enables monopoly, local AI should be the norm, returning to AWS revealed reasons for leaving

    This is a recap of the top 10 posts on Hacker News on May 11, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:14) - Hardware Attestation as Monopoly Enabler (01:47) - Local AI needs to be the norm (02:52) - I returned to AWS and was reminded why I left (04:14) - Incident Report: CVE-2024-YIKES (05:25) - I'm going back to writing code by hand (07:16) - Running local models on an M4 with 24GB memory (08:41) - Obsidian plugin was abused to deploy a remote access trojan (09:51) - Mythos Finds a Curl Vulnerability (11:06) - The greatest shot in television: James Burke had one chance to nail this scene (2024) (12:35) - Ask HN: What are you working on? (May 2026) (13:44) - Outro Hardware Attestation as Monopoly Enablerhttps://grapheneos.social/@GrapheneOS/116550899908879585https://news.ycombinator.com/item?id=48086190Local AI needs to be the normhttps://unix.foo/posts/local-ai-needs-to-be-norm/https://news.ycombinator.com/item?id=48085821 I returned to AWS and was reminded why I lefthttp://fourlightyears.blogspot.com/2026/05/i-returned-to-aws-and-was-reminded-hard.htmlhttps://news.ycombinator.com/item?id=48073201 Incident Report: CVE-2024-YIKEShttps://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.htmlhttps://news.ycombinator.com/item?id=48086082 I'm going back to writing code by handhttps://blog.k10s.dev/im-going-back-to-writing-code-by-hand/https://news.ycombinator.com/item?id=48090029 Running local models on an M4 with 24GB memoryhttps://jola.dev/posts/running-local-models-on-m4https://news.ycombinator.com/item?id=48089091 Obsidian plugin was abused to deploy a remote access trojanhttps://cyber.netsecops.io/articles/obsidian-plugin-abused-in-campaign-to-deploy-phantom-pulse-rat/https://news.ycombinator.com/item?id=48088576 Mythos Finds a Curl Vulnerabilityhttps://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/https://news.ycombinator.com/item?id=48091737 The greatest shot in television: James Burke had one chance to nail this scene (2024)https://www.openculture.com/2024/10/the-greatest-shot-in-television.htmlhttps://news.ycombinator.com/item?id=48090521 Ask HN: What are you working on? (May 2026)https://news.ycombinator.com/item?id=48085993

    14 min

  3. 2D AGO

    5.10.26 | Bun's Rust rewrite achieves near-perfect Linux compatibility, EU calls for VPN regulation, and Claude Code highlights HTML's effectiveness

    This is a recap of the top 10 posts on Hacker News on May 10, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:18) - Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibc (01:12) - EU Parliamentary Research Service calls VPNs "a loophole that needs closing" (02:51) - Using Claude Code: The unreasonable effectiveness of HTML (04:19) - I’ve banned query strings (05:29) - LLMs corrupt your documents when you delegate (06:47) - The hypocrisy of cyberlibertarianism (08:21) - Distributing Mac software is increasing my cortisol levels (09:37) - Show HN: Building a web server in assembly to give my life (a lack of) meaning (10:42) - Zed Editor Theme-Builder (11:47) - Outro Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibchttps://twitter.com/jarredsumner/status/2053047748191232310https://news.ycombinator.com/item?id=48073680EU Parliamentary Research Service calls VPNs "a loophole that needs closing"https://cyberinsider.com/eu-calls-vpns-a-loophole-that-needs-closing-in-age-verification-push/https://news.ycombinator.com/item?id=48072190 Using Claude Code: The unreasonable effectiveness of HTMLhttps://twitter.com/trq212/status/2052809885763747935https://news.ycombinator.com/item?id=48071940 I’ve banned query stringshttps://chrismorgan.info/no-query-stringshttps://news.ycombinator.com/item?id=48076173 LLMs corrupt your documents when you delegatehttps://arxiv.org/abs/2604.15597https://news.ycombinator.com/item?id=48073246 The hypocrisy of cyberlibertarianismhttps://matduggan.com/the-intolerable-hypocrisy-of-cyberlibertarianism/https://news.ycombinator.com/item?id=48074952 Distributing Mac software is increasing my cortisol levelshttps://blog.kronis.dev/blog/apple-is-increasing-my-cortisol-levelshttps://news.ycombinator.com/item?id=48075366 Show HN: Building a web server in assembly to give my life (a lack of) meaninghttps://github.com/imtomt/ymawkyhttps://news.ycombinator.com/item?id=48080587 Zed Editor Theme-Builderhttps://zed.dev/theme-builderhttps://news.ycombinator.com/item?id=48076651

    12 min

  4. 3D AGO

    5.9.26 | Google's reCAPTCHA issue for de-googled Android users, David Attenborough's 100th Birthday, Introduction to Meshtastic

    This is a recap of the top 10 posts on Hacker News on May 9, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:19) - Google broke reCAPTCHA for de-googled Android users (01:39) - David Attenborough's 100th Birthday (02:37) - An Introduction to Meshtastic (03:42) - Mojo 1.0 Beta (05:12) - Cartoon Network Flash Games (06:05) - AI is breaking two vulnerability cultures (07:30) - A recent experience with ChatGPT 5.5 Pro (08:58) - OpenAI’s WebRTC problem (10:15) - US Government releases first batch of UAP documents and videos (11:40) - Wi is Fi: Understanding Wi-Fi 4/5/6/6E/7/8 (802.11 n/AC/ax/be/bn) (13:32) - Outro Google broke reCAPTCHA for de-googled Android usershttps://reclaimthenet.org/google-broke-recaptcha-for-de-googled-android-usershttps://news.ycombinator.com/item?id=48067119David Attenborough's 100th Birthdayhttps://www.bbc.com/news/articles/cp3pww9g0p5ohttps://news.ycombinator.com/item?id=48061884 An Introduction to Meshtastichttps://meshtastic.org/docs/introduction/https://news.ycombinator.com/item?id=48061566 Mojo 1.0 Betahttps://mojolang.org/https://news.ycombinator.com/item?id=48057901 Cartoon Network Flash Gameshttps://www.webdesignmuseum.org/flash-game-exhibitions/cartoon-network-flash-gameshttps://news.ycombinator.com/item?id=48065360 AI is breaking two vulnerability cultureshttps://www.jefftk.com/p/ai-is-breaking-two-vulnerability-cultureshttps://news.ycombinator.com/item?id=48066524 A recent experience with ChatGPT 5.5 Prohttps://gowers.wordpress.com/2026/05/08/a-recent-experience-with-chatgpt-5-5-pro/https://news.ycombinator.com/item?id=48071262 OpenAI’s WebRTC problemhttps://moq.dev/blog/webrtc-is-the-problem/https://news.ycombinator.com/item?id=48051951 US Government releases first batch of UAP documents and videoshttps://www.war.gov/UFO/https://news.ycombinator.com/item?id=48061938 Wi is Fi: Understanding Wi-Fi 4/5/6/6E/7/8 (802.11 n/AC/ax/be/bn)https://www.wiisfi.com/https://news.ycombinator.com/item?id=48037760

    14 min

  5. 4D AGO

    5.8.26 | Cloudflare layoffs, AI affecting online communities, Canvas outage due to ShinyHunters threat

    This is a recap of the top 10 posts on Hacker News on May 8, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:13) - Cloudflare to cut about 20% workforce (01:31) - AI slop is killing online communities (02:52) - Canvas is down as ShinyHunters threatens to leak schools’ data (04:26) - The map that keeps Burning Man honest (05:37) - Dirtyfrag: Universal Linux LPE (06:57) - Programming Still Sucks (08:13) - Maybe you shouldn't install new software for a bit (09:13) - Agents need control flow, not more prompts (10:34) - DeepSeek 4 Flash local inference engine for Metal (12:02) - I want to live like Costco people (13:19) - Outro Cloudflare to cut about 20% workforcehttps://www.reuters.com/business/world-at-work/cloudflare-cut-over-1100-jobs-2026-05-07/https://news.ycombinator.com/item?id=48054423AI slop is killing online communitieshttps://rmoff.net/2026/05/06/ai-slop-is-killing-online-communities/https://news.ycombinator.com/item?id=48053203 Canvas is down as ShinyHunters threatens to leak schools’ datahttps://www.theverge.com/tech/926458/canvas-shinyhunters-breachhttps://news.ycombinator.com/item?id=48055913 The map that keeps Burning Man honesthttps://www.not-ship.com/burning-man-moop/https://news.ycombinator.com/item?id=48049653 Dirtyfrag: Universal Linux LPEhttps://www.openwall.com/lists/oss-security/2026/05/07/8https://news.ycombinator.com/item?id=48053623 Programming Still Suckshttps://www.stvn.sh/writing/programming-still-sucks-fqffhyphttps://news.ycombinator.com/item?id=48040269 Maybe you shouldn't install new software for a bithttps://xeiaso.net/blog/2026/abstain-from-install/https://news.ycombinator.com/item?id=48056227 Agents need control flow, not more promptshttps://bsuh.bearblog.dev/agents-need-control-flow/https://news.ycombinator.com/item?id=48051562 DeepSeek 4 Flash local inference engine for Metalhttps://github.com/antirez/ds4https://news.ycombinator.com/item?id=48050751 I want to live like Costco peoplehttps://tastecooking.com/i-want-to-live-like-costco-people/https://news.ycombinator.com/item?id=48050499

    13 min

  6. 5D AGO

    5.7.26 | Valve releases Steam Controller CAD files under Creative Commons license, appearing productive in the workplace, and Vibe coding and agentic engineering are converging dangerously

    This is a recap of the top 10 posts on Hacker News on May 7, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:18) - Valve releases Steam Controller CAD files under Creative Commons license (01:23) - Appearing productive in the workplace (02:42) - Vibe coding and agentic engineering are getting closer than I'd like (04:09) - Google Cloud fraud defense, the next evolution of reCAPTCHA (05:31) - SQLite Is a Library of Congress Recommended Storage Format (06:54) - From Supabase to Clerk to Better Auth (08:19) - Show HN: Hallucinopedia (09:08) - A Theory of Deep Learning (10:31) - Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem (11:56) - Permacomputing Principles (13:19) - Outro Valve releases Steam Controller CAD files under Creative Commons licensehttps://www.digitalfoundry.net/news/2026/05/valve-releases-steam-controller-cad-files-under-creative-commons-licensehttps://news.ycombinator.com/item?id=48037555Appearing productive in the workplacehttps://nooneshappy.com/article/appearing-productive-in-the-workplace/https://news.ycombinator.com/item?id=48038001 Vibe coding and agentic engineering are getting closer than I'd likehttps://simonwillison.net/2026/May/6/vibe-coding-and-agentic-engineering/https://news.ycombinator.com/item?id=48037128 Google Cloud fraud defense, the next evolution of reCAPTCHAhttps://cloud.google.com/blog/products/identity-security/introducing-google-cloud-fraud-defense-the-next-evolution-of-recaptcha/https://news.ycombinator.com/item?id=48039362 SQLite Is a Library of Congress Recommended Storage Formathttps://sqlite.org/locrsf.htmlhttps://news.ycombinator.com/item?id=48042434 From Supabase to Clerk to Better Authhttps://blog.val.town/better-authhttps://news.ycombinator.com/item?id=48038827 Show HN: Hallucinopediahttp://halupedia.com/https://news.ycombinator.com/item?id=48038257 A Theory of Deep Learninghttps://elonlit.com/scrivings/a-theory-of-deep-learning/https://news.ycombinator.com/item?id=48027455 Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystemhttps://tilde.run/https://news.ycombinator.com/item?id=48037724 Permacomputing Principleshttps://permacomputing.net/principles/https://news.ycombinator.com/item?id=48044638

    13 min

  7. 6D AGO

    5.6.26 | DNSSEC disruption affecting .de domains, faster inference with Gemma 4, Three Inverse Laws of AI

    This is a recap of the top 10 posts on Hacker News on May 6, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:18) - DNSSEC disruption affecting .de domains – Resolved (01:34) - Accelerating Gemma 4: faster inference with multi-token prediction drafters (02:59) - Three Inverse Laws of AI (04:36) - Computer Use is 45x more expensive than structured APIs (06:26) - Today I've made the difficult decision to reduce the size of Coinbase by ~14% (07:56) - StarFighter 16-Inch (09:11) - Agents can now create Cloudflare accounts, buy domains, and deploy (10:28) - EEVblog: The 555 Timer is 55 years old [video] (11:33) - Write some software, give it away for free (12:54) - Ombudsman column: The Pentagon is trying to silence me (14:09) - Outro DNSSEC disruption affecting .de domains – Resolvedhttps://status.denic.de/pages/incident/592577eab611ce1e0d00046f/69fa60ef9d12f5057a974f38https://news.ycombinator.com/item?id=48027897Accelerating Gemma 4: faster inference with multi-token prediction draftershttps://blog.google/innovation-and-ai/technology/developers-tools/multi-token-prediction-gemma-4/https://news.ycombinator.com/item?id=48024540 Three Inverse Laws of AIhttps://susam.net/inverse-laws-of-robotics.htmlhttps://news.ycombinator.com/item?id=48023861 Computer Use is 45x more expensive than structured APIshttps://reflex.dev/blog/computer-use-is-45x-more-expensive-than-structured-apis/https://news.ycombinator.com/item?id=48024859 Today I've made the difficult decision to reduce the size of Coinbase by ~14%https://twitter.com/brian_armstrong/status/2051616759145185723https://news.ycombinator.com/item?id=48021368 StarFighter 16-Inchhttps://us.starlabs.systems/pages/starfighterhttps://news.ycombinator.com/item?id=48031261 Agents can now create Cloudflare accounts, buy domains, and deployhttps://blog.cloudflare.com/agents-stripe-projects/https://news.ycombinator.com/item?id=48031684 EEVblog: The 555 Timer is 55 years old [video]https://www.youtube.com/watch?v=6JhK8iCQuqIhttps://news.ycombinator.com/item?id=48024129 Write some software, give it away for freehttps://nonogra.ph/write-some-software-give-it-away-for-free-05-05-2026https://news.ycombinator.com/item?id=48028842 Ombudsman column: The Pentagon is trying to silence mehttps://www.stripes.com/opinion/2026-04-23/stripes-former-ombudsman-pentagon-trying-to-silence-21465037.htmlhttps://news.ycombinator.com/item?id=48031769

    14 min

  8. MAY 5

    5.5.26 | Talking to strangers at the gym, Bun is being ported from Zig to Rust, How OpenAI delivers low-latency voice AI at scale

    This is a recap of the top 10 posts on Hacker News on May 5, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:14) - Talking to strangers at the gym (01:50) - Bun is being ported from Zig to Rust (03:03) - How OpenAI delivers low-latency voice AI at scale (04:12) - Does Employment Slow Cognitive Decline? Evidence from Labor Market Shocks (05:28) - Google Chrome silently installs a 4 GB AI model on your device without consent (06:53) - Redis array: short story of a long development process (08:01) - Train Your Own LLM from Scratch (09:12) - Agent Skills (10:32) - Securing a DoD contractor: Finding a multi-tenant authorization vulnerability (11:18) - 1966 Ford Mustang Converted into a Tesla with Working 'Full Self-Driving' (12:39) - Outro Talking to strangers at the gymhttps://thienantran.com/talking-to-35-strangers-at-the-gym/https://news.ycombinator.com/item?id=48007438Bun is being ported from Zig to Rusthttps://github.com/oven-sh/bun/commit/46d3bc29f270fa881dd5730ef1549e88407701a5https://news.ycombinator.com/item?id=48016880 How OpenAI delivers low-latency voice AI at scalehttps://openai.com/index/delivering-low-latency-voice-ai-at-scale/https://news.ycombinator.com/item?id=48013919 Does Employment Slow Cognitive Decline? Evidence from Labor Market Shockshttps://www.nber.org/papers/w35117https://news.ycombinator.com/item?id=48009983 Google Chrome silently installs a 4 GB AI model on your device without consenthttps://www.thatprivacyguy.com/blog/chrome-silent-nano-install/https://news.ycombinator.com/item?id=48019219 Redis array: short story of a long development processhttps://antirez.com/news/164https://news.ycombinator.com/item?id=48009172 Train Your Own LLM from Scratchhttps://github.com/angelos-p/llm-from-scratchhttps://news.ycombinator.com/item?id=48017948 Agent Skillshttps://addyosmani.com/blog/agent-skills/https://news.ycombinator.com/item?id=48015397 Securing a DoD contractor: Finding a multi-tenant authorization vulnerabilityhttps://www.strix.ai/blog/how-strix-found-zero-auth-vulnerability-dod-backed-startuphttps://news.ycombinator.com/item?id=48012162 1966 Ford Mustang Converted into a Tesla with Working 'Full Self-Driving'https://electrek.co/2026/05/02/tesla-1966-mustang-ev-conversion-full-self-driving/https://news.ycombinator.com/item?id=48009840

    13 min
See All (472)

About

Daily overview of the Top 10 Hacker News posts. Post and comment summarization by AI.

Information

  • Creator
    Hacker News Highlights
  • Years Active
    2025 - 2026
  • Episodes
    472
  • Rating
    Clean
  • Copyright
    © 2026 Hacker News Highlights

You Might Also Like