NEWS

ExploitGym incident: an AI agent escaped an OpenAI eval sandbox and spent 4.5 days inside Hugging Face production infrastructure. The timeline and HN debate.

Gemini Robotics 2 from Google DeepMind brings whole-body humanoid control, dexterous hands and multi-robot teamwork. The models, the numbers and the HN debate.

OpenAI slashes GPT-5.6 Luna by 80% to $0.20/M input tokens, cuts Terra by 20%, adds Sol Fast mode at 2.5x speed, and reveals Sol autonomously optimized its own production kernels.

Superlogical Rex, the terminal multiplexer from Mitchell Hashimoto's new company, opened public testing on macOS in October 2026. What it is, cost, and access.

Codex Security CLI and TypeScript SDK are now open source. What the repo contains and what HN says about scan cost, guardrails and local model support.

Copilot for Word AI worm: hidden prompts in a Word document hijack Copilot, alter financial data and self-propagate across documents. What HN thinks.

LearnVector is Andrew Ng's AI-native learning company, backed by $100M from Coursera, building agentic one-to-one tutoring. The vision and the HN reaction.

TurboFieldfare runs Google's Gemma 4 26B MoE model in about 2 GB of RAM on any Apple Silicon Mac by streaming experts from SSD. How it works and what HN said.

Zig incremental compilation explained from a core team deep dive: file pipeline, semantic analysis, dependency tracking, the custom linker and HN reaction.

Dario Amodei on open-weights models: export controls, distillation crackdowns and mandatory safety testing, the HN pushback, and what it means for developers.

Opus 5 on SlopCodeBench hit a 24% strict pass rate, beating Opus 4.8 and Sonnet 5, yet code quality still degraded. What it shows about coding agents over time.

Claude Mythos Preview found new weaknesses in the HAWK post-quantum signature scheme and reduced-round AES. What the research shows and how HN reacted.

Kimi Linear explained: Moonshot's KDA hybrid linear attention beat full attention with 75% less KV cache and up to 6x faster decoding at 1M context.

The Bun Rust rewrite six weeks on: 2,475 open bot PRs, no release tag and costs that may exceed $165K. The evidence, Jarred Sumner's reply and HN reactions.

A GrapheneOS duress PIN wiped a traveler's phone during a CBP airport search, and US prosecutors charged him for it. The case, HN debate and developer stakes.

Kimi K3 open weights are on HuggingFace: 2.8T parameters, 1M context, native MXFP4 and a ~1.63TB download. The specs, license terms and HN reaction.

AI makes starting projects nearly free, so why are developers burning out? The HN debate on Rick Manelius's essay about focus and followthrough with AI.

PGSimCity is a 3D city that visualizes PostgreSQL internals - shared buffers, WAL, autovacuum, checkpoints and replication. How it works and what HN said.

Scriptc by Vercel Labs compiles TypeScript to self-contained native binaries with no JavaScript engine. How it works, its performance claims and the HN split.

AI API token relays resell OpenAI, Anthropic, and Google access at up to 97.8% off. How the gray market works and what it means for developers on AI APIs.