HACKER NEWS

Security researchers disclosed a Cursor vulnerability that auto-executes malicious git.exe files from repos - after waiting 7 months with no fix. Here's what developers need to know.

Git 2.54 and 2.55 introduced git history with fixup, reword, and split subcommands that make interactive rebasing feel less scary. Here is what developers are saying.

A Hacker News discussion blows up over LLM vocabulary quirks, with developers sharing hooks, filters, and coping mechanisms for repetitive Claude-isms.

New benchmarks on 5,559 test utterances show Apple's iOS 26 SpeechAnalyzer API achieving 2.12% word error rate - beating all Whisper model sizes while running 3x faster.

A workflow for archiving, signing, notarizing, and distributing Apple apps entirely from the command line - with AI coding assistants doing the heavy lifting.

Open-source tool gives Claude Code, Codex, and other agents their own isolated Linux VM on your machine - network firewall included, no cloud account required.

A use-after-free bug in the Linux kernel's real-time mutex implementation has existed since 2011. Researchers earned $92,337 from Google's kernelCTF for discovering and exploiting it.

A security researcher intercepted Grok Build's network traffic and found it uploads entire repositories - including .env files with secrets - to xAI servers. Here's what the data shows.

Andrew Kelley's blunt response to Anthropic's AI-assisted Bun rewrite sparked debate about AI marketing, language choices, and what makes engineering decisions honest.

New research shows Claude Code's system prompt and tool scaffolding consume 4.7x more tokens than OpenCode before processing user input. The HN thread debates whether that overhead buys better outcomes.

George Hotz publishes a post distinguishing genuine AI progress from manipulative hype narratives. HN's 126-comment thread debates whether he's right about doom-mongering and AGI inevitability.

A new distributed inference system pools GPU resources across multiple machines and exposes them through a single OpenAI-compatible API. No RDMA, no NVLink - just QUIC and your existing hardware.

The world's most famous mathematician used AI coding agents to revive 25-year-old Java applets and build new visualization tools. His observations on risk, quality, and trust are worth reading.

Daniel Kokotajlo and the AI Futures Project released an ambitious 15-year roadmap for managing advanced AI development through international cooperation. Here's what HN thinks about it.

A solo developer built a complete JavaScript ecosystem from scratch - runtime, engine, package manager, and Electron alternative. Here's what HN thinks.

A new experimental technology encodes messages in video using motion-based steganography, exploiting how AI models process video as individual frames rather than continuous motion.

SQLite's flexible typing lets you store anything anywhere. STRICT mode fixes that - here's why you should enable it for every new table.

A new essay argues that letting AI generate sloppy code creates a downward spiral where future AI absorbs those bad patterns. HN's 250+ comment thread is split between believers and pure vibe-coders.

Apple filed suit against OpenAI alleging systematic theft of hardware trade secrets by former employees. The complaint names specific individuals, describes exploited security vulnerabilities, and claims this is 'the tip of the iceberg.'

A solo developer built a 1,300-line C inference engine that runs the 744B GLM 5.2 model on consumer hardware by streaming routed experts from disk. Here's how it works.