F-Droid: "Keep Android Open"
| 573 comments
F-Droid's latest update is a drop in the ocean of Google's attempts to monopolize the Android ecosystem, but it's a refreshing splash of open-source sanity nonetheless. The F-Droid team continues to toil away, updating apps and advocating for an open Android platform, reminding us that even small ripples can make a big difference in the fight against proprietary gatekeepers.
Andrej Karpathy talks about "Claws"
| 50 comments
Andrej Karpathy is digging into "Claws," a new layer of AI agent systems that orchestrate tasks and persist context, which he believes is the next logical step after LLM agents. It seems "Claw" is becoming the umbrella term for these personal AI agents, with various implementations like NanoClaw and others popping up, each trying to get a grip on the market.
Acme Weather
| 36 comments
Acme Weather is the latest attempt at a weather app from the creators of Dark Sky, and it's a notable improvement, addressing the inherent uncertainty of weather forecasting by providing alternate possible futures and community reporting features. By acknowledging that forecasts can be wrong and offering a range of possible outcomes, Acme Weather takes a more nuanced approach to weather prediction, making it a potentially valuable tool for those willing to pay the $25/year subscription fee.
Turn Dependabot Off
| 128 comments
The author argues that Dependabot is more of a "noise machine" than a useful tool, generating unnecessary alerts and updates that can lead to alert fatigue and decreased security, and instead recommends replacing it with a pair of scheduled GitHub Actions using govulncheck. By using govulncheck, which filters vulnerabilities based on package and symbol metadata, developers can avoid false positives and focus on actual security threats, making their dependency management more efficient and secure.
I found a Vulnerability. They found a Lawyer
| 279 comments
A diving instructor and platform engineer stumbled upon a glaring vulnerability in a major diving insurer's member portal, which used incrementing numeric user IDs and a static default password, essentially allowing anyone to guess their way into sensitive personal data, including that of underage students. The organization's response was to threaten the researcher with legal action, rather than thanking them and taking responsibility for notifying affected users, exemplifying a toxic security culture that prioritizes reputation over data protection.
Facebook is absolutely cooked
| 602 comments
Facebook's algorithm has devolved into a spam-filled mess, serving up AI-generated thirst traps and low-brow memes to its dwindling user base. It seems the platform's attempt to cling to relevance has resulted in a feed that's more akin to a bot-infested dumpster fire than a social media hub.
Trunk Based Development
| 38 comments
Trunk-Based Development is a source-control branching model where developers collaborate on code in a single branch, avoiding "merge hell" by employing techniques like feature flags and short-lived feature branches. By committing changes to the trunk multiple times a day, teams can ensure a releasable codebase and make Continuous Delivery a reality, making it a key enabler of Continuous Integration.
Ggml.ai joins Hugging Face to ensure the long-term progress of Local AI
| 182 comments
The ggml.ai team is joining Hugging Face to ensure the long-term progress of Local AI, a move that's more of a formalization of their existing collaboration than a revolutionary shift, as they've been working together seamlessly to advance open-source AI inference. This partnership will likely lead to more efficient integration with the transformers library and improved user experience, but the real question is whether it will be enough to propel Local AI into the mainstream, or just another incremental step in the endless pursuit of "open-source superintelligence".
EU mandates replaceable batteries by 2027 (2023)
| 56 comments
The EU's new battery law is a step towards a more circular economy, mandating replaceable batteries by 2027 and setting strict recycling targets, which is a spark in the right direction. By introducing a "digital passport" for batteries and restricting harmful substances, the EU is trying to recharge the industry's approach to sustainability, and it's about time someone pulled the plug on waste.
Wikipedia deprecates Archive.today, starts removing archive links
| 273 comments
Wikipedia's decision to deprecate Archive.today and remove its archive links is a curious move, essentially pulling the plug on a valuable backup system. It seems the wiki wizards have decided to cut ties with this archival service, leaving one to wonder what other links will be severed in the name of progress.
CERN rebuilt the original browser from 1989
| 65 comments
CERN's rebuild of the original WorldWideWeb browser from 1989 is a nostalgic trip back to the web's humble beginnings, allowing users to experience the pioneering technology that paved the way for modern browsing. By rebooting the past, this project gives a fascinating glimpse into the evolution of the web, making it a treasure trove for tech historians and a fun blast from the past for the rest of us.
I Verified My LinkedIn Identity. Here's What I Handed Over
| 19 comments
In a shocking display of "security theatre," verifying your identity on LinkedIn via Persona Identities, Inc. involves handing over a treasure trove of sensitive data, including biometric information, to a network of 17 companies, mostly based in the US, where it can be accessed by law enforcement under the CLOUD Act. By trading your biometric data for a small blue checkmark, you're essentially giving Persona and its partners a permanent, unchangeable key to your identity, all while being protected by a laughable $50 liability cap.
LibreOffice blasts OnlyOffice for working with Microsoft to lock users in
| 24 comments
LibreOffice is calling out OnlyOffice for its "fake open source" approach, claiming it's in cahoots with Microsoft to lock users into proprietary file formats, a move that's as transparent as a grep command. By defaulting to Microsoft formats, OnlyOffice is essentially handing Microsoft the keys to user content, a classic case of format fascism that undermines the very principles of open standards.
Understanding Std:Shared_mutex from C++17
| 0 comments
C++17's `std::shared_mutex` is a reader-writer mutex that allows multiple threads to concurrently read shared data while keeping writes exclusive, making it a valuable tool for read-mostly workloads. By switching from `std::mutex` to `std::shared_mutex`, developers can significantly reduce contention and improve throughput in scenarios where reads dominate writes, all with minimal code changes.
Coccinelle: The Linux kernel's source-to-source transformation tool
| 0 comments
Coccinelle is a source-to-source transformation tool for the Linux kernel, allowing devs to refactor C code with ease, like a code wizard waving a semantic wand. Under the hood, it's a complex SmPL scripting engine, but don't worry, the spatch script makes it accessible, no OCaml black magic required.
Lean 4: How the theorem prover works and why it's the new competitive edge in AI
| 20 comments
Lean4, an open-source programming language and interactive theorem prover, is being hailed as a key tool to inject rigor and certainty into AI systems, providing a mathematical safety net to prevent hallucinations and ensure deterministic functionality. By leveraging formal verification, Lean4 promises to make AI safer, more secure, and reliable, allowing developers to turn an AI's claims into formally checkable proofs that are mathematically guaranteed to be correct.
Gitas – A tool for Git account switching
| 5 comments
Gitas is a tool that streamlines Git account switching, essentially a identity proxy that swaps out your Git credentials without modifying config files, making it a neat solution for those juggling multiple accounts. By leveraging the system's native keychain for secure storage, Gitas provides a seamless way to switch between accounts, perfect for developers working on private projects across different identities.
What Is OAuth?
| 38 comments
OAuth is essentially a standardized way to delegate authentication, boiling down to a simple core of sending a multi-use secret to a known delegate with user consent, and then allowing that delegate to make requests on the user's behalf. Beneath its complicated machinery and accumulated cruft, OAuth's design is motivated by a historical cascade of requirements, including the need for a secure and interoperable way to support delegated authentication without passwords.
The bare minimum for syncing Git repos
| 0 comments
The author has distilled Git repo syncing down to its bare essentials, literally, by using a bare repository on an external drive as a syncing point, eliminating the need for cloud services like GitHub. This approach may lack the frills of web interfaces and collaboration tools, but it's a refreshingly simple, self-hosted solution for personal repos, akin to serving static websites without the overhead of a full-fledged server.
Every company building your AI assistant is now an ad company
| 101 comments
The AI assistant landscape has devolved into a digital billboard, with every major player now funded by advertising and building hardware that's essentially a surveillance state in your pocket. It's time to choose local, edge-based architectures that process data on-device, rather than trusting the cloud and its plethora of prying eyes.
Cord: Coordinating Trees of AI Agents
| 43 comments
Cord is a framework that lets AI agents coordinate with each other by dynamically building a tree of tasks, using primitives like "spawn" and "fork" to manage context and dependencies, a refreshing change from the usual static workflow graphs. By giving agents the autonomy to decide their own coordination structure at runtime, Cord enables more flexible and efficient problem-solving, and its protocol can be implemented independently of specific tools or infrastructure, making it a promising step forward in AI coordination.
When etcd crashes, check your disks first
| 3 comments
When etcd crashes, it's often a case of "disk-covery" rather than a bug, as slow storage can cause this distributed key-value store to timeout and lose quorum. Tuning disk settings, such as disabling sync writes or adjusting ZFS settings, can be the "key" to resolving etcd crashes, as it was in this case where optimizing ZFS storage backend solved the problem.
24 Hour Fitness won't let you unsubscribe from marketing spam, so I fixed it
| 12 comments
It seems 24 Hour Fitness has been pumping out marketing spam like a faulty API, ignoring unsubscribe requests and violating consent regulations with a broken page that's been erroring out for years. The "fix" is a simple one-liner, setting the contentType to "application/json", a patch that's been sitting in limbo since November 2025, leaving users to endure a barrage of unwanted emails.
Index, Count, Offset, Size
| 26 comments
The author's quest to tame the indexing beast with a simple yet effective naming convention - using "index" and "count" suffixes to avoid off-by-one errors - is a clever trick, but hardly a silver bullet. By consistently applying this convention, alongside other coding habits like "big endian naming" and symmetrical dual names, the author aims to minimize bugs, proving that even small grains of code discipline can add up to make a significant difference.
Large Language Model Reasoning Failures
| 2 comments
The emperor's new clothes are showing in Large Language Models, as a comprehensive survey exposes the glaring reasoning failures that persist despite impressive results. By dissecting these failures into fundamental, application-specific, and robustness issues, researchers can finally patch the holes in LLM architectures and build more reliable reasoning capabilities.
Show HN: Mines.fyi – all the mines in the US in a leaflet visualization
| 40 comments
Mines.fyi is a web application that provides an interactive map and search functionality for over 91,000 US mines, sourced from the MSHA open dataset, allowing users to filter by state, commodity, and status. The application's codebase is a sprawling mess of CSS, JavaScript, and HTML, but beneath the complexity lies a robust data visualization tool that brings mining data to life, much like a masterfully crafted SQL query can unearth hidden insights from a dusty database.
Blue light filters don't work
| 183 comments
Blue light filters, the supposed sleep-saviors, are little more than a drop in the ocean, or rather, a slight tweak in the gamma curve, as they only cut out about half of the light relevant to ipRGCs, a negligible amount in the grand scheme of human light perception. To truly take control of your circadian rhythm, it's better to focus on more effective measures like dark mode, dimming your screen, and getting some daytime sunlight, rather than relying on the marginal benefits of blue light filters.
OpenScan
| 10 comments
OpenScan appears to be a platform that uses a combination of hardware and software to create 3D scans of objects, leveraging techniques like focus stacking to generate detailed models. Beneath the flashy gallery of scanned marigolds and ammonites, OpenScan's tech seems to be a genuine attempt to democratize 3D scanning, but its true potential will depend on how well it balances ease of use with technical sophistication.
The path to ubiquitous AI (17k tokens/sec)
| 412 comments
Taalas is attempting to pave the path to ubiquitous AI by addressing the twin barriers of high latency and astronomical cost, essentially trying to put the "smarts" in smart chips. By transforming any AI model into custom silicon, they claim to have achieved a 10X speedup and 20X cost reduction, which could be the spark that sets off a chain reaction of innovation in the field.
Microsoft team creates 'revolutionary' data storage system that lasts millennia
| 38 comments
Microsoft's "revolutionary" glass storage system can supposedly last millennia, encoding 4.8 terabytes of data in a 3D chunk of borosilicate glass that's read using a microscope, making it a potentially game-changing archival solution. While it's not a replacement for everyday storage due to its high cost and lack of rewritability, this "immutable" glass could be the perfect vault for long-term archives of critical data, such as scientific records or cultural heritage.