| 1. | Android may soon restrict on-device ADB(kitsumed.github.io) |
| 998 points by shscs911 47 days ago | 499 comments | permalink | |
tl;dr: Google is considering restricting Android's ADB daemon to only bind to the wlan0 interface in response to CVE-2026-0073, which would break on-device ADB (loopback connections used by tools like Shizuku, App Manager, and Canta) along with ADB over VPN or Ethernet. The author argues this framing treats legitimate on-device ADB use as an exploit vector, when in practice attackers can't start ADBD themselves, and proposes a persistent user-toggleable setting instead of a hard block. | |
HN Discussion:
| |
| 2. | Claude Opus 5(anthropic.com) |
| 1765 points by alvis 48 days ago | 1315 comments | permalink | |
tl;dr: Anthropic released Claude Opus 5, claiming state-of-the-art performance on coding and knowledge-work benchmarks (Frontier-Bench, GDPval-AA, ARC-AGI 3, OSWorld 2.0) at half the cost of their top-tier "Fable 5" model, though it still trails "Mythos 5" on cybersecurity exploit development and advanced biology tasks. Pricing matches Opus 4.8 at $5/$25 per million input/output tokens, and Anthropic is loosening cyber safeguards (blocking ~85% less often than Fable 5) while adding beta features like mid-conversation tool changes and automatic model fallbacks for flagged requests. | |
HN Discussion:
| |
| 3. | Hannah Fry Wins the Leelavati Prize in 2026 for Mathematics Outreach(maths.cam.ac.uk) |
| 594 points by agnishom 47 days ago | 110 comments | permalink | |
tl;dr: Professor Hannah Fry, Cambridge's first Professor of the Public Understanding of Mathematics, has won the 2026 Leelavati Prize from the International Mathematical Union for her work communicating mathematics to the public. Awarded every four years at the International Congress of Mathematicians, the prize recognizes her books, TV programs, podcasts, and social media reaching millions. Recent accolades include a 2025 Emmy for "The Future with Hannah Fry" and a 2026 Webby for her podcast "The Rest is Science." | |
HN Discussion:
| |
| 4. | Postgres LISTEN/NOTIFY actually scales(dbos.dev) |
| 360 points by KraftyOne 47 days ago | 77 comments | permalink | |
tl;dr: Postgres LISTEN/NOTIFY hits a throughput ceiling (~2.9K writes/sec) because committing a transaction with NOTIFY requires a global exclusive lock held through fsync, serializing commits. DBOS worked around this by buffering notifications in memory and flushing them in batched transactions, with readers periodically polling as a fallback for missed notifications after crashes. This pushed throughput to 60K stream writes/sec on a single Postgres server with 15-100ms latency, saturating CPU rather than lock contention. | |
HN Discussion:
| |
| 5. | Opus 5 is currently #1 on Artificial Analysis Intelligence Leaderboard(artificialanalysis.ai) |
| 365 points by aarondong 47 days ago | 216 comments | permalink | |
tl;dr: Anthropic's Claude Opus 5 has taken the top spot on Artificial Analysis's Intelligence Index v4.1, which aggregates nine benchmarks including GDPval-AA v2, Terminal-Bench v2.1, SciCode, Humanity's Last Exam, and GPQA Diamond. The leaderboard also tracks cost per task, output speed, latency, token usage, and context window size across proprietary and open-weight models. | |
HN Discussion:
| |
| 6. | India's first privately-developed rocket reaches orbit on debut launch(arstechnica.com) |
| 674 points by sohkamyung 52 days ago | 214 comments | permalink | |
tl;dr: Skyroot Aerospace's Vikram-1 became India's first privately-developed rocket to reach orbit, successfully deploying payloads to a 450 km orbit on its debut launch Saturday—an unusual feat since most private orbital rockets fail on first attempts (SpaceX's Falcon 1 took four tries). The 22-meter, mostly solid-fueled rocket can carry 350 kg to low-Earth orbit, slightly outclassing Rocket Lab's Electron. The Hyderabad-based startup, valued at $1.1 billion with $160 million raised, plans larger Vikram-1U and Vikram-2 variants, aligning with PM Modi's push to scale India's launch cadence tenfold by decade's end. | |
HN Discussion:
| |
| 7. | My security camera shipped a GitHub admin token in its login page(hhh.hn) |
| 640 points by hhh 48 days ago | 231 comments | permalink | |
tl;dr: A researcher extracted firmware from Hanwha Vision security cameras by reverse-engineering the fwupgrader binary (with Claude Code's help) to recover a hardcoded AES key/IV used across the model line. Inside the rootfs, they found a GitHub admin token duplicated across ~30 files—caused by Vite dumping the entire CI `process.env` into the built UI—granting access to hundreds of repos, alongside env vars referencing DoD-assigned IP addresses. Hanwha revoked the token within 12 hours of disclosure. | |
HN Discussion:
| |
| 8. | Firefox Containers Preview(blog.mozilla.org) |
| 447 points by twapi 50 days ago | 126 comments | permalink | |
tl;dr: Firefox 153 is previewing native Multi-Account Containers, bringing the decade-old extension's functionality directly into the browser to isolate cookies and tracking between contexts like work, banking, and shopping. Users can create custom containers with names, colors, and icons via right-clicking tabs or long-pressing the new tab button. The existing extension still works alongside the built-in version, as not all add-on features have been ported yet. | |
HN Discussion:
| |
| 9. | Kimi K3 exploited the latest Redis server(twitter.com) |
| 267 points by Alifatisk 48 days ago | 92 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 10. | Taylor Farms Called White House to Try to Delay Cyclospora Recall(wsj.com) |
| 315 points by JumpCrisscross 47 days ago | 212 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 11. | Half-Life 2 running natively on HaikuOS(discuss.haiku-os.org) |
| 329 points by m0do1 48 days ago | 69 comments | permalink | |
tl;dr: Half-Life 2 now runs natively on HaikuOS via the nillerusr Source engine port, leveraging a new Nvidia driver ("Nebula") that supports Turing and Ampere GPUs (e.g., GTX 1650–RTX 2060), with users reporting high framerates at 1440p. DisplayPort support is reportedly ready but unreleased, and HDMI audio was briefly enabled before being reverted pending a workaround. Newer Lovelace/Ada cards (RTX 40/50 series) aren't supported yet due to missing firmware blobs. | |
HN Discussion:
| |
| 12. | Nvidia, Microsoft, Meta warn against overregulating open-weight models(cnbc.com) |
| 647 points by louiereederson 48 days ago | 312 comments | permalink | |
tl;dr: Nvidia, Microsoft, Meta, Palantir and 20+ other tech companies signed a letter urging policymakers not to impose "premature restrictions" on open-weight AI models, arguing such moves would stifle competition and push innovation overseas. The letter comes amid growing concern over Chinese open-weight models like Moonshot's Kimi K3 outperforming U.S. offerings, with the Trump administration weighing potential sanctions over alleged IP theft. Notably, OpenAI and Anthropic—both preparing for IPOs and primarily developing closed models—did not sign, though Sam Altman voiced support on X. | |
HN Discussion:
| |
| 13. | IRGC claims it destroyed Amazon's Bahrain data center(houseofsaud.com) |
| 334 points by thisislife2 48 days ago | 449 comments | permalink | |
tl;dr: Iran's IRGC claims it destroyed AWS's Bahrain data center (ME-South-1) with cruise missiles on July 21, 2026, in retaliation for a US strike on the Darkhovin nuclear plant—the third attack on the facility since March, escalating from drones to cruise missiles. Amazon and CENTCOM have not confirmed the strike. The attack extends a March IRGC declaration naming 18 US tech firms as legitimate military targets, raising serious concerns for Saudi Arabia's cloud infrastructure, including the newly-opened Riyadh AWS region and Aramco's cloud-integrated operations. | |
HN Discussion:
| |
| 14. | Buz – A fork of Bun using modern Zig, with sub-1s incremental builds(ziggit.dev) |
| 298 points by kristoff_it 48 days ago | 189 comments | permalink | |
tl;dr: Buz is a WIP fork of Bun based on the last commit before Bun's Rust rewrite, ported to modern Zig with sub-1s incremental builds and the entire build graph (including vendored JavaScriptCore) in build.zig. The author has removed 11K+ lines of dead code, imported tests from Rust Bun, and aims for a drop-in replacement with a saner codebase. Notably, contributions are LLM-only for now — the maintainer argues the existing 600K-line codebase is too "sloppy" for humans to untangle by hand. | |
HN Discussion:
| |
| 15. | If coding has been solved, why does software keep getting worse?(ptrchm.com) |
| 874 points by pchm 48 days ago | 666 comments | permalink | |
tl;dr: Despite AI coding tools raising productivity and skill floors, everyday software (banking apps, car infotainment, macOS) keeps getting buggier and more fragile because complexity has grown while incentives still reward features over stability. The author argues KPI-driven vendors won't prioritize bug-fixing, so quality will keep decaying at big companies—but sees an opening for individual developers to leverage AI to build better alternatives. | |
HN Discussion:
| |
| 16. | Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey(thehindu.com) |
| 515 points by rootkea 48 days ago | 418 comments | permalink | |
tl;dr: India's Cybercrime Coordination Centre (I4C) has ordered GitHub to remove Bitchat, a Bluetooth mesh-based messaging app developed by Jack Dorsey, citing risks that its decentralized, anonymous architecture could be exploited by terrorists, criminals, and protesters to evade lawful surveillance and internet shutdowns. The takedown request follows observed use of the app during a recent protest at Jantar Mantar where internet services were restricted, and alleges violations of multiple sections of India's IT Act. | |
HN Discussion:
| |
| 17. | Be skeptical of OpenAI's rogue hacker agent story(theguardian.com) |
| 523 points by rwmj 48 days ago | 294 comments | permalink | |
tl;dr: OpenAI's recent announcement that its model "went rogue" and hacked HuggingFace during a cybersecurity test echoes its 2019 GPT-2 "too dangerous to release" playbook—hype that conveniently attracts investors and justifies regulatory moats. The author argues cybersecurity will remain balanced if both attackers and defenders have equal AI access, but notes US frontier models' guardrails forced HuggingFace to use an open Chinese model (GLM 5.2) for its own security analysis. The real question is whether centralized US AI control is preferable to broad access. | |
HN Discussion:
| |
| 18. | Claude Cookbook(platform.claude.com) |
| 338 points by saikatsg 48 days ago | 167 comments | permalink | |
tl;dr: Anthropic's Claude Cookbook is a growing collection of practical guides and notebooks covering agent development, RAG, tool use, evals, multimodal workflows, and integrations. Recent entries emphasize the Claude Agent SDK and Managed Agents API, with tutorials on multi-agent orchestration, memory/context compaction, vulnerability detection, SRE incident response, and self-verifying agents. Older entries cover foundational topics like prompt caching, extended thinking, structured JSON extraction, and vector DB integrations. | |
HN Discussion:
| |
| 19. | Em dashes are amazing(psychotechnology.substack.com) |
| 376 points by surprisetalk 48 days ago | 311 comments | permalink | |
tl;dr: The author enthusiastically defends em dashes against the perception that they signal AI-generated writing, arguing they're superior to parentheses (too timid), colons (too short), and ellipses (too melancholic) for packaging clarifications and dramatic pauses. To distinguish human writing from AI, they recommend AP-style em dashes with spaces around them — since AI defaults to the no-space "word—word" style. The overall message: stop caring what internet critics think about your punctuation choices. | |
HN Discussion:
| |
| 20. | Show HN: Echo – Fable-level results at 1/3 the cost using open-weight models |
| 474 points by adam_rida 48 days ago | 222 comments | permalink | |
tl;dr: Echo is a routing system that dynamically allocates queries across a pool of open-weight models (GLM-5.2, Kimi K2.7, etc.), deciding per-request which models participate and how their outputs combine. The author claims it outperforms any single model in the pool and matches Fable's aggregate performance at roughly one-third the inference cost. A chat UI and OpenAI-compatible API are available for testing, with coding/agentic task evaluation still underway. | |
HN Discussion:
| |