| 1. | Kimi K3.1 Pro and K3.1 Pro Highspeed(kimi.ai) |
| 1079 points by Jowsey 2 days ago | 670 comments | permalink | |
tl;dr: Moonshot's Kimi K3.1 Pro is a new 3T-class open-weight model with a 1M-token context, posting competitive results against Claude Opus 5.5 and GPT-6 Astra on coding (65.7% on Terminal-Bench 4.0), 3D/CAD generation, and financial reasoning benchmarks. A "Highspeed" variant runs 2-3× faster, and the team deliberately stripped cyber-related data from training to cap offensive security capabilities before release. Available now via Kimi.ai and API, with full weights to be released by Nov 4, 2026. | |
HN Discussion:
| |
| 2. | Today, we hacked what we'd set out to hack: the iPhone(blog.calif.io) |
| 1101 points by pavel_lishin 2 days ago | 712 comments | permalink | |
tl;dr: Summary not available. | |
HN Discussion:
| |
| 3. | Twelve years of distributed SQLite(philipotoole.com) |
| 370 points by otoolep 1 day ago | 63 comments | permalink | |
tl;dr: The author of rqlite, which in 2014 pioneered combining SQLite with a Raft consensus log for replication, traces twelve years of the "distributed SQLite" category through projects like dqlite, Litestream, LiteFS, cr-sqlite, libSQL/Turso, and Cloudflare D1. He argues the design space settled into three corners—consensus (strong consistency clusters), streaming (cheap single-node recovery), and merge (CRDT-based eventual consistency)—each answering a different question. Open-source projects defined the category for eight years before venture-funded platforms monetized it, while rqlite remains the self-hosted, no-bill option. | |
HN Discussion:
| |
| 4. | Apple Music 404 Not Found(music.apple.com) |
| 914 points by frizlab 2 days ago | 269 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 5. | Local Wikipedia: Wikipedia, but only for things a half hour walk from you(edjefferson.com) |
| 1675 points by sohkamyung 2 days ago | 253 comments | permalink | |
tl;dr: Local Wikipedia filters Wikipedia to show only geocoded pages within a roughly 30-minute walk of your location, falling back to the nearest 25 entries within 6 miles if the area is sparse, and capping dense areas at 500. Location data stays in the browser and isn't included in shared links. The site is unaffiliated with Wikipedia. | |
HN Discussion:
| |
| 6. | Dessa: Conversation Model trained only on speech(block.xyz) |
| 505 points by dsr12 2 days ago | 193 comments | permalink | |
tl;dr: Summary not available. | |
HN Discussion:
| |
| 7. | Canadians are running out of time to oppose Bill C-22(eff.org) |
| 489 points by hn_acker 2 days ago | 267 comments | permalink | |
tl;dr: Canada's Bill C-22 (Lawful Access Act) has passed the House of Commons and is now before the Senate, granting the government power to compel telecoms and messaging apps to assist with surveillance, mandate encryption backdoors (as long as they don't cause "systemic insecurity"), and retain user metadata for up to a year. The bill could also enable warrantless data-sharing with U.S. law enforcement without Canadian court oversight. The CCLA and Citizen Lab are calling for Part 2 of the bill to be withdrawn entirely, citing constitutional and cybersecurity concerns. | |
HN Discussion:
| |
| 8. | The Real Kevin Bacon(pudding.cool) |
| 368 points by xnx 5 days ago | 93 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 9. | WorldTUI: I trained a 360M model to pretend to be a terminal(simedw.com) |
| 650 points by alphax314 3 days ago | 192 comments | permalink | |
tl;dr: A developer fine-tuned Qwen2.5-Coder-0.5B (shrunk to 360M params, quantized to int4/208MB) to simulate a terminal by predicting screen deltas from keypresses, with no actual shell or filesystem underneath. Key tricks included parallel per-row decoding with speculative verification for speed, and DAgger-style self-correction training to prevent compounding errors; the result can run vim, tmux, snake, and Python in-browser via WebGPU, and even remembers file contents written in earlier commands. It's not practically useful, but demonstrates that a small model can maintain a surprisingly consistent "world" without encoding any underlying rules. | |
HN Discussion:
| |
| 10. | Docker is weird(codeandcake.dev) |
| 864 points by psxuaw 2 days ago | 365 comments | permalink | |
tl;dr: Containers aren't a single Linux feature but a combination of five (namespaces, cgroups, networking, chroot/pivot_root, etc.), and images are essentially just folders that Docker chroots into. Go is a surprisingly awkward choice for runc since many container-related syscalls require a single-threaded context, forcing runc to use a C module before Go's runtime starts and to re-exec /proc/self/exe to fake fork. Docker also traditionally requires root, and rootless setups must reimplement networking in userspace. | |
HN Discussion:
| |
| 11. | How does Fable 5.1 hide messages in images?(lesswrong.com) |
| 213 points by gmays 3 days ago | 73 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 12. | Ask HN: If the models are so good, why doesn't OpenAI just start 100 companies? |
| 645 points by ex-aws-dude 3 days ago | 733 comments | permalink | |
tl;dr: The post questions why frontier AI labs like OpenAI and Anthropic focus on selling tokens rather than building their own products on top of their models, especially as token prices decline and commoditize. The author suggests the application layer may be where the real money is, not the model utility layer. | |
HN Discussion:
| |
| 13. | Every AI model has the same "controversial" take on humans(modelcompare.ai) |
| 647 points by rakannimer 3 days ago | 623 comments | permalink | |
tl;dr: When 13 AI models from 10 labs were each asked three times for their most controversial take on humans, 32 of 38 answers converged on the same idea: humans prioritize tribal belonging and social status over truth, and rationalize beliefs after the fact. Image models, by contrast, converged on a different cliché—humans as phone-addicted consumers destroying the planet. The author concludes that because models train on overlapping data, they collapse toward the same answers, limiting their usefulness for brainstorming diverse ideas. | |
HN Discussion:
| |
| 14. | The foolishness of "natural language programming" (1978)(cs.utexas.edu) |
| 377 points by xiaoyu2006 2 days ago | 267 comments | permalink | |
tl;dr: Dijkstra argues that programming in natural language is a misguided goal, because the perceived "burden" of formal symbolism is actually its chief virtue: it rules out nonsense and ambiguity that natural language invites. He points to the history of mathematics, which only advanced once it escaped verbal reasoning for formal notation, and suggests natural-language programming would simply force us to reinvent formal systems anyway. He closes by noting that such machines would likely be as hard to build as they would be to use. | |
HN Discussion:
| |
| 15. | OpenShell – A safe, private runtime for fleets of autonomous AI agents(github.com) |
| 499 points by niemandhier 3 days ago | 217 comments | permalink | |
tl;dr: OpenShell is an NVIDIA-developed runtime that sandboxes autonomous AI agents, using kernel-level enforcement to control file access, syscalls, and network connections, while injecting credentials only for approved endpoints. Policy changes are checked via formal verification to flag risky new access (e.g., new hosts or API methods) before approval. It ships with a CLI, gateway, Kubernetes/Helm deployment, SDKs for Python/TypeScript/Go/Rust, and runs on Linux, macOS (Apple Silicon), or WSL 2. | |
HN Discussion:
| |
| 16. | Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm off-key(github.com) |
| 229 points by dsmurrell 3 days ago | 91 comments | permalink | |
tl;dr: OnKey is a free, open-source singing trainer for Apple Silicon Macs that listens to music playing in Spotify, Apple Music, or YouTube and overlays your pitch against the vocal melody in real time. On first play it learns the song locally (using CREPE, GAME, wav2vec 2.0, and MDX-Net for vocal separation and pitch tracking), then scores subsequent attempts line by line. Audio is processed in-memory with no accounts, analytics, or music storage—only Shazam signatures and lyric metadata are sent out, and both can be disabled. | |
HN Discussion:
| |
| 17. | Jailbreaking the Switch 2(pepsipu.com) |
| 827 points by ledoge 3 days ago | 305 comments | permalink | |
tl;dr: ns2jb is the first software-only tethered jailbreak for the Switch 2 (firmware 23.0.1), achieving arbitrary native code execution as any ordinary sysmodule and the built-in fs sysmodule. The author bypassed WebKit's mitigations (PAC, CFI, XOM) by instead exploiting an integer overflow in the Switch 1 game SmileBASIC for initial ROP, then used a path-normalization buffer overflow in fs to gain arbitrary R/W, and finally abused the loader's signature-check flow to run arbitrary code under any sysmodule's permissions. Codex (AI) assisted with exploit development, and a Mario Kart World mod was built as a demo. | |
HN Discussion:
| |
| 18. | Run full iOS 16.5 firmware on Android Devices(github.com) |
| 529 points by aghuang 3 days ago | 194 comments | permalink | |
tl;dr: HackiOS boots Apple's open-source XNU kernel (iOS 16.5) on a POCO X5 Pro 5G and in QEMU, running an unmodified iOS user space (launchd, SpringBoard, stock apps) via a custom EFI loader, driver replacements, and a Linux Wi-Fi compatibility layer. Working features include the lock screen, touchscreen, Wi-Fi, GPU via Mesa/freedreno, sound, and camera; cellular, Bluetooth, Metal, and App Store sign-in don't work yet. It's a RAM-only research bench (no flashing, reboots back to Android), with no Apple files shipped — the IPSW is fetched from Apple's CDN at build time. | |
HN Discussion:
| |
| 19. | Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry |
| 733 points by petecooper 3 days ago | 264 comments | permalink | |
tl;dr: The author publicly posted about upcoming PHP RCE vulnerabilities (CVE-2026-109618 & CVE-2026-109619), unknowingly breaking the coordinated disclosure embargo and disrupting the release schedule. They claim their contact had assured them no embargo existed, and their intent was simply to alert fellow source-compilers about the urgency of the upcoming updates. They are apologizing and taking responsibility for the unintended consequences. | |
HN Discussion:
| |
| 20. | Getting ready to operate GNU Taler in Germany(taler.net) |
| 360 points by dewey 3 days ago | 175 comments | permalink | |
tl;dr: Taler Operations AG is being founded in Bochum to operate the GNU Taler payment system in Euros, after GLS Bank withdrew from its originally planned role as e-money issuer in January 2026. The new company, a subsidiary of Taler Systems SA, will apply to German regulator BaFin for an e-money license and is raising capital from investors (minimum €50,000) to fund the launch. GNU Taler itself remains free software; only the operating service is licensed. | |
HN Discussion:
| |