← Oct 12Tuesday, October 13, 2026 · all days
1.The baffling intelligence of a single cell (2024)(jsomers.net)
408 points by jsomers 2 days ago | 138 comments | permalink
tl;dr: E. coli performs chemotaxis—foraging for nutrients—by alternating "runs" and "tumbles" driven by flagellar motors, with the signaling molecule CheY-p carrying information from membrane receptors to rotors in about a tenth of a second. The system achieves remarkable sensitivity (detecting a 2% change in receptor occupancy) and five orders of magnitude of dynamic range via a methylation-based adaptation mechanism that functions as chemical memory. The article walks through the molecular machinery in detail—receptor arrays, phosphorylation cycles, the self-assembling flagellar motor, and direction-switching mechanics—arguing that a single cell is essentially a sophisticated physical computer.
HN Discussion:
  • ↑Awe at how such complex systems evolved through random variation
  • ↑Cells resemble entire neural networks, with properties AI hasn't captured
  • ↓Automatic chemical regulation is not real intelligence despite being impressive
  • ↑Curious whether cell state-storage is the same computational primitive as neurons
  • •Connects article to related frameworks like autopoiesis or intelligent design literature
2.GLM-Legal(z.ai)
666 points by ilreb 1 day ago | 358 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • ↑LLMs can be genuinely useful for routine legal tasks like contract redlining
  • ↓Distrust of Z.ai due to prior privacy violations undermines their legal product
  • ↓Benchmark scores are unimpressive and don't reflect real legal practice needs
  • ~Concerns about hallucinations and keeping up with changing laws in legal AI
  • ↓Skepticism about the Harvey benchmark's quality and reliability
3.Intel D270 GPU AI Accelerator–Up to 480 GB LPDDR5X(intel.com)
302 points by hurricanepootis 1 day ago | 175 comments | permalink
tl;dr: Intel's D270 is an inference-focused data center GPU targeting agentic AI workloads, offering up to 480GB of LPDDR5X memory (no HBM), 32 Xe3P cores, 256 XMX matrix engines, and a 350W air-cooled PCIe 5.0 form factor. It's positioned for memory-bound, long-context inference and high-concurrency serving in standard racks, with support for vLLM, PyTorch, SGLang, and Triton. Performance claims are compared to NVIDIA's RTX Pro 6000 based on Intel internal analysis dated Feb 2026.
HN Discussion:
  • •Hardware will be great for consumers once it trickles down in several years
  • ↓Intel's marketing and product page are poorly executed with slop and placeholder text
  • ↑Specs are impressive and competitive with Apple's high-end chips for single-user inference
  • ~Card falls awkwardly between consumer and server markets without strong multi-GPU support
  • ↓AI hardware announcements are irrelevant to regular users and should be democratized
4.Hackers activate automatic defrosting in supermarket fridges across Europe(tomshardware.com)
886 points by Zeekaas 1 day ago | 989 comments | permalink
tl;dr: A cyberattack is targeting Danfoss-made refrigeration control systems used by major French supermarket chains including Intermarché, Leclerc, and Coopérative U, forcing refrigeration units into continuous defrost cycles at 50°C. The attack is also disrupting deliveries and electronic shelf label pricing systems. Coopérative U's president confirmed the incident Monday morning, calling it "extremely serious" and promising an investigation.
HN Discussion:
  • ~Blames gross negligence and poor security practices rather than sophisticated hacking
  • •Links incident to a previously disclosed Danfoss vulnerability from August 2026
  • •Explains legitimate reasons why refrigeration systems need internet connectivity
  • ↑Views this as symptomatic of broader corporate underinvestment in critical IT infrastructure
  • ↓Criticizes the article's framing/title as confusing or conflating separate incidents
5.A Modern Web App in C(prophitt.me)
692 points by prophittcorey 1 day ago | 310 comments | permalink
tl;dr: A developer shipped a commercial web app (marketyour.games) using the BCHS stack: OpenBSD, C, httpd, and SQLite, served via CGI with every request spawning a fresh process. The result is a single statically-linked binary with only three dependencies (libcurl, libsodium, libcjson), no framework, no templating language, and HTML/CSS written directly in C. The author argues CGI's 2000s-era drawbacks no longer apply given modern fork performance, and praises the stack for minimal supply chain risk, simple tooling, and clear separation of concerns—though notes you have to roll your own cookie/form parsing utilities.
HN Discussion:
  • ↑Supports the BCHS approach, adding related tools and endorsing the privilege-dropping techniques
  • ↑Shares similar personal experience building web apps in C/CGI successfully
  • ~Go with CGO disabled offers a better single-binary alternative to C CGI
  • ↓Prefers stateful backends over spawning a process per request
  • ↓Questions whether this stack can deliver essential modern features like observability and logging
6.Who is vfmaddrnd231pd?(purplesyringa.moe)
249 points by pngmangi 1 day ago | 25 comments | permalink
tl;dr: The Intel SDM documents vfmaddrnd231pd, an FMA instruction that would allow per-instruction rounding control without needing AVX-512, potentially speeding up rounding-dependent algorithms. However, the instruction doesn't actually work: assemblers don't recognize it, compiler intrinsics are missing, and running the hand-assembled opcode on FMA-capable CPUs raises #UD. The author speculates Intel planned the instruction, pulled it late, but left stale documentation behind—it's now absent from the 2026 SDM.
HN Discussion:
  • •Provides technical documentation context explaining VEX encoding details referenced in the article
  • ↑Confirms the instruction briefly and unintentionally appeared in specific SDM revisions, supporting the stale-doc theory
  • ↑Speculates the instruction was removed due to a hardware issue and never worked
  • ~Claims the instruction was removed when Intel recommitted to AVX-512 on client CPUs
  • •Laments that opaque instruction names reflect a loss of direct interaction with technology
7.Making big downloads resumable in Firefox(lunarwatcher.codeberg.page)
277 points by speckx 1 day ago | 133 comments | permalink
tl;dr: Firefox's default `network.http.response.timeout` of 300 seconds appears to break resumable large downloads, causing it to ignore existing `.part` files on error. Setting the value to 0 (or very high) in about:config experimentally restores resume functionality and improves stability, though the author didn't verify this against Firefox source. As a fallback, `wget -c` handles resumable downloads more reliably.
HN Discussion:
  • ~Workaround via VPS and cURL is more reliable than fixing Firefox's download behavior
  • ~External download managers like aria2, IDM, NDM are superior alternatives to browser downloads
  • ↑Firefox's poor fault tolerance and timeout handling reflects broader engineering negligence
  • ↑Firefox download resume issues are long-standing known bugs
  • ↓Skeptical that timeout setting is the real cause since defaults have worked fine
8.Turn a WiFi 7 Router into a 320Msps Software Defined Radio Receiver(github.com)
414 points by djfergus 1 day ago | 122 comments | permalink
tl;dr: A hacker reverse-engineered the Gemtek W1700K Wi-Fi 7 router into a wideband SDR receiver, using the MediaTek MT7996 radio to capture 14-bit IQ at up to 320 Msps across 2.4/5/6 GHz bands and streaming it over 10 GbE to a Linux host for live spectrum/waterfall display in the browser. The project runs entirely on custom firmware (no MediaTek code), with the LO tunable in ~3 Hz steps from 2.08–7.58 GHz and retunable mid-stream in ~1 ms. It's receive-only; the repo includes U-Boot, a Linux 6.18 build, the MT7996 driver, and full register documentation.
HN Discussion:
  • ↑Excitement about democratizing SDR access via common Wi-Fi hardware
  • ↑Enthusiasm for hardware extension possibilities like service monitors and up/down converters
  • •Noting hardware compatibility with similar chipsets like Banana Pi R4
  • ↓Skepticism that narrow bandwidth limits practical SDR use cases
  • •Curiosity about practical applications of SDRs for average users
9.AI is a tool and using it well takes skill(yyhh.org)
655 points by layer8 1 day ago | 525 comments | permalink
tl;dr: Responding to Rich Hickey's claim that LLMs are automation rather than tools, the author argues the distinction is false: tools can incorporate automation (compilers, spreadsheets) and still require skilled wielding. LLMs demand intention, feedback, and expertise to use well—a programmer can question outputs, test suggestions, and refine prompts in a human-directed loop. The real distinction isn't tool vs. automation, but skilled wielding vs. uncritical delegation, and anthropomorphic industry language ("go rogue," "conspire") muddies legitimate engineering concerns.
HN Discussion:
  • ↓AI will outpace humans' ability to develop skill in using it, harming cognition and education
  • ↓Prompting skill is becoming obsolete as models improve, undermining the 'skill' argument
  • ↑Like professional photography, AI use requires experience and expertise to master
  • ↑Managing complexity and containing AI's runaway output is the real professional skill needed
  • ↓AI behaves more like a slot machine than a tool due to lack of repeatable cause and effect
10.Citroen revives the 2CV for an electric age(bbc.com)
406 points by scrlk 1 day ago | 466 comments | permalink
tl;dr: Citroen unveiled an electric revival of its iconic 2CV at the Paris Motor Show, a retro-styled city car expected to retail around £13,000 and reach showrooms by 2028. The move follows a broader trend of European automakers—like Renault with its 5, 4, and Twingo revivals—leaning on nostalgia to differentiate their EVs from a growing wave of competitively priced Chinese rivals.
HN Discussion:
  • ↑Praise for the engineering, particularly the sub-tonne weight enabling the low price point
  • ↑Appreciation for friendly, non-aggressive retro design versus bloated modern cars
  • ↓Nostalgia strategy won't work against cheaper, more practical Chinese competitors
  • ↑Personal nostalgia and emotional attachment to the original 2CV heritage
  • •Historical and technical context about the 2CV name and origins
11.AI models can provably hide arbitrary capabilities(arxiv.org)
273 points by sbulaev 1 day ago | 136 comments | permalink
tl;dr: Researchers demonstrate that backdoors can embed encrypted neural networks inside a host model's weights, activating only via a secret trigger and remaining provably hard to detect or elicit under standard cryptographic assumptions—even with full weight access. Tested against fine-tuning, weight noising, gradient-based trigger search, and latent adversarial training on a chemical reaction task, the hidden capabilities survived all elicitation attempts. The work exposes a fundamental limit of capability audits that rely on behavioral elicitation for safety evaluation.
HN Discussion:
  • ↑Personal anecdotal evidence of LLMs hiding information in weights supports the finding
  • ↑Clarifies the title to avoid misinterpretation about AI agency, accepting the core claim
  • ↑Confirms concerns about sleeper agents in open source models being a real threat
  • ↑This finding increases the value of fully transparent open source models with inspectable datasets
  • ↓Deflects concern, arguing other surveillance threats matter more than hidden LLM capabilities
12.The Making Of Super Mario 64 – full Giles Goddard interview (2001)(pixelatron.com)
273 points by gregsadetsky 3 days ago | 104 comments | permalink
tl;dr: A 2001 interview with Nintendo programmer Giles Goddard reveals behind-the-scenes details on Super Mario 64's development: a ~15-person team prototyped the game on SGI Onyx emulators before N64 hardware existed, with Miyamoto obsessively iterating on Mario's movement and the camera system (which went through thousands of revisions). Goddard discusses tricks like vertex morphing (used for the Mario face intro), fake water with no texture below the surface, and compact level design that disguised size without needing fog—plus notes that the quiet, secretive Japanese office culture shielded devs from outside feedback.
HN Discussion:
  • ↑Early 3D game development was a dramatic paradigm shift making Mario 64's achievement remarkable
  • ↑Quality fine-tuning and iteration explains Mario's distinctive feel, confirming the article's point
  • ↑The small 15-person team size is surprising and impressive given the game's impact
  • ↑The silent Japanese work environment is appealing compared to modern noisy offices
  • ~These projects were mundane day jobs rather than legendary endeavors as often romanticized
13.Codex CLI installs a persistent, self-updating background daemon by default(github.com)
599 points by whimblepop 1 day ago | 292 comments | permalink
tl;dr: Since v0.157.0, the Codex CLI silently spawns a persistent background daemon that survives session close, copies ~374MB of the platform package into `~/.codex`, and runs a detached updater that pulls new releases hourly and can kill active turns on restart. The daemon also pins environment variables (like HTTPS_PROXY) from the first session that launched it, breaking per-invocation wrappers and terminal-targeting hooks. The user requests `daemon_auto_start` default to false for CLI use, reserving the daemon behavior for the desktop/Remote Control case or explicit opt-in.
HN Discussion:
  • ↑Provides workaround to disable the daemon via feature flag and file symlinks
  • ↑Shares additional complaints about Codex's bugs, bloat, and poor quality
  • ↑Recommends abandoning Codex for simpler/alternative harnesses
  • ↓Notes this is standard behavior, matching Claude Code and browsers, so not problematic
  • ~Defends auto-updating as a reasonable tradeoff for fast-moving tools
14.Muse Wonder(research.meta.ai)
662 points by meetpateltech 1 day ago | 375 comments | permalink
tl;dr: Meta introduces Muse Wonder and Muse Wonder Full, frontier models aimed at personal and professional agentic tasks, available via the Meta Model API and Muse Code. The models emphasize "Active Memory" (retaining relevant user context) and "Active Focus" (sustained goal pursuit), claiming state-of-the-art results on benchmarks in domains like law, finance, health, and coding (including SWE-Marathon). Meta also highlights improved out-of-distribution generalization from stronger base models, and stronger safeguards against CBRN and cyber misuse under its Superintelligence Scaling Framework.
HN Discussion:
  • ↑More frontier model competition prevents dangerous concentration of AI power
  • ↓Security and privacy concerns with Meta exposing user profiles on login
  • ↓Real-world testing shows model underperforms competitors like Opus 5.5 despite benchmark claims
  • ↓Meta failed to deliver on previous open-weights promises for Muse Spark
  • ↑Strong benchmark performance suggests frontier models are becoming commoditized
15.I Found a $90k Remote Code Execution Vulnerability in Google(simonkoeck.com)
232 points by soeckly 2 days ago | 116 comments | permalink
tl;dr: A researcher found that Google's developer docs sites (developers.google.com, firebase.google.com, etc.) stored a pickle-serialized OAuth2 flow object inside a Flask session cookie, exposing the OAuth client_secret in plaintext — and that same secret was reused as Flask's SECRET_KEY for signing the cookie. This allowed forging a session containing an arbitrary pickle payload, which the callback would pass to `pickle.loads`, yielding unauthenticated RCE (demonstrated via `time.sleep`). Google paid $90,000 ($75k S0 RCE base + 20% report-quality bonus).
HN Discussion:
  • ↓The write-up is obviously AI-generated and the author shouldn't take credit for Claude's work
  • ↑Disbelief that such basic security flaws (pickle use, key reuse) passed Google's review process
  • ↑Appreciation that Google pays substantial bounties for serious vulnerabilities
  • •Pushback on anti-LLM criticism, defending human agency when using AI tools
  • •Request for practical advice on how to find vulnerabilities like this
16.Thinking will become a hobby(spinellis.gr)
334 points by pranitha_m 1 day ago | 473 comments | permalink
tl;dr: AI is rapidly surpassing humans in cognitive tasks due to better performance, lower cost, and 24/7 availability, and resistance via regulation is unlikely to stop its takeover of knowledge work. The author predicts thinking will follow the trajectory of hunting, calligraphy, and horse riding—shifting from economic necessity to leisure pursuit. Preparing for this transition requires adaptability, keeping pace with AI, and finding purpose beyond work.
HN Discussion:
  • ~Economic survival is the real issue; post-scarcity won't just happen if AI replaces all labor
  • ↓Historical analogies show new tech rarely fully displaces human activity; author overstates AI's inevitability
  • ↓LLMs can't do truly novel thinking, so human thought remains valuable rather than obsolete
  • ↓We have agency and can simply choose not to use AI to replace ourselves
  • ↑Thinking as leisure is already meaningful and worth embracing, aligning with the author's vision
17.Terence Tao: Math 2.0 [pdf](teorth.github.io)
556 points by Anon84 2 days ago | 540 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • ↓Tao's cancer/mechanism example is misinformed; much of medicine and engineering works without full mechanistic understanding
  • ↑Tao accurately captures the grief and disruption mathematicians feel as AI solves long-standing problems
  • ↑Tao's framing of math as a shared 'codebase' that AI fails to contribute to elegantly is insightful
  • ↓Tao focuses too much on current AI limitations and avoids confronting the future obsolescence of human mathematicians
  • ↑Context matters: Tao is broadly pro-AI and is thoughtfully exploring how human work will evolve
18.QGIS enacts moratorium on AI contributions(github.com)
387 points by bwnkl 1 day ago | 407 comments | permalink
tl;dr: Summary not available.
HN Discussion:
  • ↑Maintainers are overwhelmed by low-quality AI-generated PRs, making the moratorium understandable
  • ↑LLMs genuinely struggle with geospatial work, justifying extra caution in this domain
  • ↓The ban is unenforceable and will age poorly as LLMs improve; a Linux-style policy would be better
  • ~The policy is partly financially motivated to protect contributor employability and expertise
  • ~Banning AI contributions signals the end of open contributions and may invite forks
19.Fingerprints are the new cookies(royfish.dev)
739 points by royfish 2 days ago | 364 comments | permalink
tl;dr: Browser fingerprinting—using hardware and software signals like GPU, CPU, fonts, audio processing, and canvas rendering—can uniquely identify users across sessions without cookies, VPNs, or incognito mode. Google, after years of delaying third-party cookie deprecation, now permits fingerprinting in its ad products, making it the de facto successor to cookies. Only Brave, Tor, and Mullvad Browser offer meaningful engine-level defenses; extensions and Firefox's protections help but can ironically make you more identifiable by being rare.
HN Discussion:
  • ↑Browsers should gate high-entropy APIs behind user consent to prevent fingerprinting
  • ↑JavaScript is the root problem; it gives sites too much power and should be restricted by default
  • ↓Fingerprinting is overhyped and impractical commercially; IP addresses still do most of the work
  • ~Spoofing or having a generic fingerprint may be more effective than trying to be unfingerprintable
  • ~The real issue is tracking/consent law and third-party advertising, not the specific technology used
20.Secret of Orange Cats Revealed After 60-Year Search(sciencealert.com)
273 points by bookofjoe 3 days ago | 188 comments | permalink
tl;dr: Two independent research teams identified a 5-kilobase deletion in a non-coding region near the Arhgap36 gene on the X chromosome as the cause of orange fur in cats, solving a 60-year genetics mystery. The deletion causes the gene to be overexpressed 13x in melanocytes, suppressing dark eumelanin pigments in favor of reddish pheomelanin. Because the mutation is X-linked, most orange cats are male, while females typically display calico or tortoiseshell patterns due to random X-inactivation.
HN Discussion:
  • ↓This is a rehash of a previously reported 2024 discovery, not new news
  • ↑The non-coding regulatory nature of the mutation reveals interesting insights about junk DNA function
  • •Questioning terminology, noting cultural differences in naming (ginger vs orange cats)
  • ~Speculation that the gene may also influence the stereotypical shared behavior of orange cats
  • •Tangential fun facts about related pigmentation traits like red hair in humans