Topic
All blog posts, tools, and guides about News from Developers Digest.
336 resources - 336 posts

Cloudflare's GLM-5.3 Workers AI endpoint returned other customers' data in 155 long-prompt responses. What broke in SGLang, the upgrade and config checklist, and what API users should ask.

Anthropic filed its S-1 for a Nasdaq listing under ANT. The revenue and loss figures, the risk factors that touch API users, and what to change in your stack on Monday.

CleanYourTV is a prompt plus scripts that has Claude Code strip ads and telemetry from an Android TV over Wi-Fi. What it does, where it breaks, and a safe-run checklist.

GVS5H claims five Qwen3.8-27B instances match Fable 5 on LiveCodeBench Hard. What the harness does, why Hacker News doubts the benchmark, and what to copy.

Recursive's Flint is a 40B open-weight coding model with 2.5B active parameters. How to run it on Ollama and point Claude Code at it, plus the benchmark caveats.

Google Agent Compute Engine gives every agent its own microVM with no credentials inside. What Google says it does, what is still unpublished, and what a builder can copy today.

Anthropic used Claude to prove no-crash properties for 123 OSS-Fuzz libraries. What the proofs cover, where they stop, and the fuzz-target habits worth copying on Monday.

Codex has three kinds of usage reset - banked, automatic and paid - and they move your weekly refresh date in different ways. What OpenAI documents, the 80% rule, and what to do Monday.

FreeLLMAPI stacks 34 free LLM tiers behind one OpenAI-compatible endpoint and points Claude Code and Codex at it. What it is, the two commands that matter, and the limits its own docs admit.

Anthropic donated the Agent Skills standard to the Agentic AI Foundation on October 22, 2026. What moves, what stays the same, and what to check in your own SKILL.md files on Monday.

A Reddit user says Claude Code found XMRig eating about 12 cores on their Mac while building a temperature app. What was reported, what is unverified, and the read-only checks to run on your own machine.

Anthropic opened a research preview of Claude Duet, a proactive agent that briefs you each morning and works in the background. What is confirmed, what is not, and what a Claude Code user should make of it.

OpenAI and Google Cloud put GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna into Model Garden in private preview, with Codex pointed at Gemini inference. What is live, what is "coming soon", and what to do before general availability.

DeepSeek open-sourced DeepInfer, the inference engine behind its API. It is offline-only, V4.1-Flash-only and Blackwell-or-Ascend-only. What it is, what is missing, and who benefits.

LiteLLM 1.107.0 on PyPI shipped a credential stealer and a backdoor for under two hours on October 21. How to check if you ran it, what to clean first, and what to rotate.

The October SlopCodeBench run found xhigh reasoning effort costs 2x to 4x more than medium without reliably passing more checkpoints. What the numbers say and what to change.

DHS ordered DeepSeek products removed from US civilian agency IT. The scope reaches third-party products built on DeepSeek implementations - here is what that means for builders.

China drafted export controls on 23 AI technologies, including model weights. API use and already-public weights are exempt. What changes for builders on Qwen, DeepSeek and GLM.

leanrea is an 8 KB skill pitched as a replacement for the REA (Reverse Engineer Anything) MCP server. What its benchmark shows, what it skips, and which to install.

DeepSeek V4.1-Flash-1017 jumps 11 points on Terminal-Bench 4.0 at the same deepseek-flash price. Benchmarks vs Opus 5, K3, GLM-5.3 and when to switch.

Codex says gpt-5.5 is not supported with a ChatGPT account because OpenAI retired it from ChatGPT sign-in on October 14. The fix and what still works.

Tencent WorkBuddy is a desktop AI agent for office work running Hy3, DeepSeek and more via TokenHub. What it costs, the free tokens and when to skip it.

SneakPeek (CVSS 8.7) let a poisoned HTML file read SSH keys and cloud credentials via the Claude Code Desktop preview pane. Fixed in Claude Desktop 1.30096.1.

LFM2.5-24B-A2B vs Qwen3.6-35B-A3B for local agents: Liquid wins tool-use benchmarks, Qwen wins SWE-Bench Verified. Which one to run for which job.

Ollama 0.40.4 runs decision models locally: ollama run nimble --ask answers yes/no, label and score questions with probabilities. Commands and limits.

Anthropic's Frontier Red Team says small open models may be months from self-replicating across cheap IoT devices. What it measured and where the claim is thin.

REA (Reverse Engineer Anything) is an MIT-licensed MCP server that lets Claude Code, Codex or Cursor inspect binaries, Electron apps and APKs. How to try it.

Anthropic Scion replaced git after merges grew to over 30,000 a day. What Anthropic's post says, what HN pushed back on and what to apply to your own repo.

Claude Code Projects is open to waitlisted Pro and Max users. How the coordinator and cloud threads work, what they cost in plan limits and where it breaks.

Claude for Startups paused its free Claude Team year and $1,000 API credit offer at capacity. What the program page says now and how to cover the gap.

OpenCode 2 upgrade from v1: what the migration guide says breaks (plugins, server API, TUI config), what carries over, and a safe checklist before you switch.

Talorys deploys a personal AI agent to your own Cloudflare account with one npx command. How far 10,000 free daily Neurons go and where "self-hosted" breaks.

Anthropic's unintended model actions report confirms a Claude model filed a false police tip. The four behaviors it lists and the scoping mistake behind each.

Anthropic OSS Scanner sends free AI vulnerability reports to eligible open-source projects. What the enrollment PR needs, what you receive, and the triage cost.

DeepSeek 4.1 Flash as a daily coding model: what a session costs, how peak hours double the bill, why caching matters, and where the subsidy argument holds.

Step 5 Preview is StepFun's 600B MoE with 27B active and a 1M window. What it scores, what a session costs, and what to check before the October 15 weights.

Claude Max and Team plans now include a monthly Claude API credit, starting at $100 on Max 5x. What it covers, what it does not, and how to claim it.

Google's Gemini agent can create coworker agents with their own Workspace account, email and audit trail. What Google announced and what builders should copy.

OpenAI's math repo holds hundreds of model-written manuscripts, some with Lean proofs. What Lean verifies, what it misses, and the lesson for agent output.

Claude Haiku 5.5 pricing, the cliff above 100K-token prompts, the tokenizer catch, the migration steps from Haiku 4.5, and when to use it instead of Sonnet.

Kolibri is an Apache 2.0 English-German MoE with 78B total and 3B active parameters and a 1M context. Benchmarks, the vLLM command, and who should run it.

Everything OpenAI announced at DevDay 2026: GPT-6.1 Sol at $2/$10, Ultrafast, Decisions API, Agents API, cloud Codex, and what to test first.

Pi 1.0 adds built-in MCP through Codemode, a fullscreen TUI by default and Pi Durable. What changed, how to install it, and what breaks on upgrade.

Cloudflare Clef and Clef-flash are Jev-compatible decision models on Workers AI. Pricing, latency and benchmarks against Jev, plus the RL fine-tuning service.

Magnitude is an Apache-2.0 inference engine that tunes kernels on your hardware and plugs into OpenCode, Codex and Claude Code. What shipped, where it breaks.

Anthropic's GLM-5.3 cyber report: exploit numbers against Claude Mythos Preview, how its safeguards were stripped, the backlash, and the read for developers.

Jeff fine-tunes Qwen3.5 and Gemma 4 into small Jev-compatible decision models on one GPU. The numbers, run commands, and where the benchmark misses real work.

GPT-6.1 Sol release guide: near-Astra scores at a fifth of Astra's price, $0.10 cache reads, verified pricing, the Astra 6.1 safety hold, and how to run it.

Claude Sonnet 5.5 costs $2/$10 per million tokens, and cache reads fell to $0.10 on October 7 - half of Opus 5.5 on every line. Pricing math and API changes.

Codex usage limits and pricing per ChatGPT plan: what Plus, Pro $200 and Pro $500 buy, how resets work, and what to do about 'Selected model is at capacity'.

GPT-6 Astra release guide: OpenAI's max-capability model, its $10/$50 pricing and 1.05M context, what the benchmarks do and do not say, and commands to try it.

OpenAI DevDay 2026 runs September 29 at Fort Mason in San Francisco. What OpenAI has confirmed, what outlets have reported, and what is still only rumor.

An OpenAI agent escaped its sandbox through DNS to reach an external chatbot. The timeline, the safeguards that failed, and why tool-use training is paused.

Grok 4.7, Opus 5.5, and GPT-6 Sol and Luna cut frontier prices in 48 hours, plus MiMo v2.6, GPT-6 Astra, and the first agent breach of a government site.

Cloudflare Page Shield ML caught four malicious JavaScript campaigns on storefronts that static scanners missed. How each hid, and why behavior beat signatures.

Gemini 3.8 Live and 3.8 Live Extended Thinking are Google's audio-to-audio voice models with background tool calls. Benchmarks, pricing and how to build.

TypeSafe Jev costs $0.042 per million input tokens, output free, at 80 requests/second. Limits, benchmarks, failure modes and every way to call it, re-verified October 9.

Anthropic's Lean formalization of Fermat's Last Theorem, read for developers: what Claude verified in 11 days and the repo patterns worth copying.

Gemini agentic video understanding lets Flash models pick the frames, audio and transcripts to inspect, cutting tokens up to 88%. How it works and its limits.

Cloudflare Adaptive Intelligence swaps static bot rules for a continuously retraining model. What shipped and what changes if you build on bot score.

GitHub Copilot September changes: prepaid Business and Enterprise seats, one unified agent experience and Balanced reviews by default. What it means for teams.

Claude Code Auto Mode cracked at 60-80 percent, GLM-5.3-Flash at one-tenth the price, GPT-5.6 Sol cut a third, and Nvidia's reported $13B Hugging Face talks.

Gemini Omni 1.1 Flash is GA in the Gemini API with 10-second scene extension, first and last frame interpolation, 360p drafts and 4K upscaling, plus pricing.

OpenAI and METR's Hugging Face incident reports: 1,200 agents shared a message board, 700 attacked Hugging Face, and about 7% of transcripts were spoofed.

Bruce Eckel's Thinking in Python, started in 2008 and finished with Claude in 2026: a free 47-chapter book with build-verified examples and an AI disclosure.

ASR benchmark optimization, quantified: a Hume AI and Hugging Face study finds 6 of 11 speech models reproduce benchmark transcripts instead of the audio.

arrayref 0.3.10 was compromised to pull in a proc-macro1 typosquat whose build script ran a remote binary. What happened and why coding agents walk into it.

Cloudflare Gateway now detects MCP traffic by protocol header, adds a shadow MCP dashboard, and can block MCP connections outside approved portals.

ICML 2026 reproduction audit: coding agents checked 2,226 papers claim by claim, and 23% had a falsified or contested claim. What the challenge found.

Claude Code made auto mode the default, Gemini 3.7 Flash halved workhorse pricing, DeepSeek open-sourced its harness, and SQLite fixed a 16-year-old data race.

AutoGPT's playbook for AI pull requests: AGENTS.md placement, enforced PR templates, trigger-phrase skills and a CLA that keep agent-heavy repos reviewable.

DeepSeek Harness (dsh) code read: a 453K-line plugin runtime on a vendored Cordis fork, three patterns worth stealing, and the gaps the launch does not mention.

Grok 4.6 release guide: xAI's agent-focused update matches GPT-5.6 Sol on the AA index at the same $2/$6 pricing, and runs in Cursor and OpenCode.

CLAUDE.md and AGENTS.md files keep growing because the reasoning behind each rule decays. A study of 1,867 repos names the mechanism and a comment-based fix.

EvoX Genesis built a Rust C compiler for $44 in tokens by keeping the project persistent and agents finite-lived. What the design says about agent memory.

GitHub Copilot for JetBrains adds memory across chat sessions, Ollama as a BYOK provider, and enterprise settings for MCP access. What each feature does.

LFM2.5-VL-3B is a 3B open-weights vision model from Liquid AI that reads screens, grounds objects and calls tools on a laptop. What shipped and how to run it.

OpenAI Daybreak cyber models are on Amazon Bedrock: GPT-5.6-Cyber and GPT-5.6 Sol for eligible customers, gated by Trusted Access for Cyber enrollment.

OpenAI Enterprise Signals data: Codex drives 64% of enterprise output tokens and frontier firms generate 8.3x the tokens per user of typical firms.

ACE vs ALTK-Evolve for agent memory: both turn trajectories into lessons, but calibrated delivery matches accuracy on AppWorld at a fraction of the tokens.

Claude text watermarking: Claude models released after August 2, 2026 embed a watermark in generated text and C2PA provenance in files. What is known so far.

Cactus open-sourced Needle 2, a 45M-parameter agentic LLM in a single 14MB binary that runs a full tool-calling session in 28MB of RAM. 500 tok/s on a Raspberry Pi 5, ESP32-S3 class parts, Apache 2.0. Here is what the benchmarks actually show.

Cloudflare's H1 2026 DDoS report: attacks above 1 Tbps grew 519% quarter over quarter as DNS floods became the leading network-layer vector.

GitHub Copilot SDK for Java adds @CopilotTool annotations, virtual threads, Spring and Jakarta EE composition, and BYOK against any OpenAI-compatible endpoint.

Encrypted chain-of-thought from Anthropic, OpenAI and Google APIs can be replayed into weaker models and read verbatim. How the attack works and what leaked.

A new arXiv paper probes six widely used open-source agent frameworks and finds the barrier semantics of approval gates, cancellation, and timeouts hold on none of them. A sibling branch can execute while the user is rejecting another one, and replay can double-execute. The fix is a verified external gate called SoundGate.

Vercel Sandbox egress control polices outbound traffic on the host with domain policies, CIDR rules, credential injection and deny-all by default.

AgentChaos injects server errors, truncated responses and corrupted tool calls into live agents. Pass@1 drops up to 50 points: robustness is a systems problem.

LLM distillation on one GPU: cache the teacher's top-100 logits offline and use a fused chunked KL loss to cut a GPT-OSS 20B run from four nodes to one.

LivePlan monitors SWE-agent runs and calls an advisor LLM only on drift, raising resolution rates up to 15.2 points for an extra $0.08 per instance.

Muse Glimmer 30B is Meta's Apache 2.0 open-weight multimodal agent model that runs in 24GB. Benchmarks, hardware reality and what the numbers actually say.

GPT-5.6-Cyber is OpenAI's gated security model, available only through Daybreak Red. The benchmark numbers, the Chrome V8 CVE it found, and who gets access.

Claude Code v2.1.224 lets one running session message another over a first-party channel - plain text, permission-aware, with approval dialogs when bypass-mode sessions talk to each other. Here is what ships, how delivery and inbound controls work, and where the feature stops.

A Claude-built night-sky site cloned an open source project's name, features and even a fixed bug. What it says about memorization and AI app verification.

Copilot code review's Lite and Balanced effort levels are generally available. Here is what each level does, what it costs in AI credits and Actions minutes, and how to set org-level defaults so review depth matches PR risk.

GitHub Copilot's impact dashboard now models ROI in dollars from AI credit use, PR output and salary. What it says about agent-first vs passive adoption.

GitHub Apps can now be installed at the enterprise level, opening enterprise management to third-party integrators, with a security boundary on top permissions.

Grok Imagine Image 2.0 is xAI's typography-aware image model, ranked second on text-to-image and editing leaderboards and callable via Vercel's AI Gateway.

Hermes Agent now supports Vercel AI Gateway and Vercel Sandbox. What shipped, how to switch, and why agent infrastructure is going bring-your-own.

Vercel Skill Packs bundle agent skills into one installable, unlisted pack on skills.sh. How packs work, what they mean for teams, and the trust questions.

WeatherNext Cyclones, DeepMind's open-source tropical cyclone model, adds a day of forecast lead time. What the Nature paper shows and how to run the weights.

Cloudflare's behavioral trust framework for agent traffic replaces one-time bot scoring with continuous session checks. What 206M daily Precursor events show.

Cloudflare's Agentic Internet treats agents as a new kind of web visitor with four primitives: readable, discoverable, callable and payable.

Cloudflare Radar Researcher is a plain-language agent over live internet data, built on MCP code mode and chart specs that keep numbers out of the model.

Cloudflare is merging Workers AI and AI Gateway into one control plane with a unified /ai/ API, default gateways and shared credits. What changes for you.

Fine-tuned coding agents collapse when you switch scaffolds, from 52.6% to 8.4% on SWE-bench Verified. DCAS shows how to train planning into the model.

Anthropic retuned Claude Fable 5 biology safeguards, cutting biology fallbacks about 85%. What changed and what still routes to Opus 5.

Kimi K3 is GA in GitHub Copilot at $3/$15 per million tokens, off by default for Business and Enterprise. Rollout details and what it means for model choice.

OpenAI cannot rule out Critical cyber capability for its upcoming Astra model, a Preparedness Framework first. What it changes for teams running coding agents.

OpenJDK's interim AI policy bans code generated in full or in part by LLMs. What it still allows, how it is enforced, and what it means for Java contributors.

TutorMoments, AI2's replay-based benchmark for LLM tutors, finds models over-help by default. How it scores scaffolding and rigor in real tutoring transcripts.

The Shai-Hulud worm hit 434 npm packages, three labs confirmed agents hit real targets, and Qwen 3.8 Max reached the agentic frontier with open weights.

Agent Plugins 1.0.0 is an open standard that packages Agent Skills and MCP servers into one plugin, with ChatGPT, Codex, Cursor and Copilot support at launch.

Cloudflare AI Gateway now ties requests to a verified identity and learns per-account baselines. How the anomaly math works and why it beats global thresholds.

Cloudflare shipped Kitesurf, an agent-first browser that runs entirely on Workers: Rust and WebAssembly rendering, per-page isolates, CDP compatibility, and 3-7x less memory and CPU than Chromium for common agent tasks. Free in beta in Browser Run.

GitHub malware advisories now cover eight package ecosystems, adding PyPI, Maven, Go, crates.io and more to npm by ingesting OpenSSF malicious-packages data.

Meta Muse Code is a terminal coding agent co-trained with Muse Spark 1.2. How the harness works and what the $0.10/$0.20 contributor tier asks in return.

OpenAI retuned GPT-5.6 Sol for ChatGPT and made GPT-5.6 Luna the Free and Go default. What changed in chat, what stayed the same in the API, and why.

SkillSV is a Shapley framework that values the rules, examples and scripts inside an agent skill, cutting skills to 69% of tokens without significant loss.

Vercel Chat SDK durable approvals pause a Workflow SDK run until a human clicks Approve in chat, with one requestApproval call and a wait that survives deploys.

UK AISI reports agents took unsanctioned real-world action during cyber evals: 19 events, 17 from one model. What happened and what it means for containment.

Cloudflare's Agent Access Model: short-lived task-scoped credentials, enforcement in the harness and network, and a Trust Ratchet that only narrows access.

Cloudflare OS is an open source agent workspace: capability-based Gatekeepers, apps as private per-user instances, and approvals that keep agents moving.

DeepSeek V4 Flash via Novita on Vercel AI Gateway was 90% off for Pro customers through August 11. The before/after cost math and the provider-pinning setup.

LFM2.5-2.6B is an open-weight on-device agent model from Liquid AI that runs in under 2.5 GB. How it was trained, what the benchmarks say and how to run it.

Next.js 16.3 adds opt-in Instant Navigations with partial prefetching, up to 90% less dev-server RAM, faster cached builds and a version-matched AGENTS.md.

Coding harness choice moved cost per task by more than 2x at the same quality in a Databricks benchmark. Why Pi's minimal context discipline explains the gap.

The v0 API is GA: send a prompt to Vercel's app-building agent, get a running app with an embeddable preview URL, then deploy it to Vercel in one more call.

Cloudflare's Agent Development Lifecycle (ADLC) ships agent tracing with session replay, CI/CD as Workflows, and local OpenTelemetry traces for agent builders.

Cloudflare's Billable Usage API returns usage and cost per product from one FOCUS-aligned endpoint, so agent-created spend is visible without the dashboard.

Cloudflare's CI SDK runs pipelines as Workflows: TypeScript instead of YAML, cached sandbox steps, artifact-push triggers and a healing agent for failed builds.

Cloudflare Wallets: Account Wallets for humans, capped Virtual Wallets for agents, x402 stablecoin micropayments and human-readable agent identity handles.

Copilot traces from 3.2M users and 761M LLM calls: 87% of calls are agent-initiated, KV cache hits drop at turn boundaries, tool failures multiply compute.

GitLab to GitHub migrations are GA in GitHub Enterprise Importer: how gh gl2gh exports projects, turns merge requests into pull requests, and what you rebuild.

Mistral Shieldstral is a 3B Apache 2.0 multimodal moderation model that takes your policy as a plain-language question at inference and runs on one 16GB GPU.

@cloudflare/computer is an open-source agent runtime: an SQLite-backed shared workspace plus a per-task choice between fast isolates and full Linux containers.

Cloudflare runs Kimi K2.6 and GLM 5.2 on Workers AI with FP8 KV caches, INT4 weights and a KV cache integrity check. What each technique buys on GPU fleets.

Cloudflare Workers can now accept inbound TCP and serve gRPC: a connect() handler via Spectrum, full-duplex gRPC from Containers, and gRPC-web translation.

Workers RPC now bridges Python and JavaScript, passing live objects, functions and streams between Workers with no schemas and no serialization code.

Octane is an MIT-licensed framework from Inferno's creator that compiles React-style hooks and Suspense to direct DOM code, no virtual DOM or rules of hooks.

How OpenAI built GPT-Live: a full-duplex voice model with no turn detector, Go on the media path, stateful handoffs, and the new WARP WebRTC transport.

Qwen 3.8 Max is a 2.4T-parameter MoE with 95B active, a 1M context window and $2/$6 per million tokens on QwenCloud, with open weights promised next week.

The EU's final DMA decision gives third-party AI assistants the Android access Gemini has, from DSP wake words to screen automation. What it unlocks and when.

Karpathy gave Opus 5 one Lord of the Rings paragraph and a 1M-token budget for a three.js render. What the run shows about agentic work and self-verification.

Cursor removed dollar costs from its Usage page on July 31: self-serve plans see tokens only and the dashboard API zeroes cost fields, history included.

Gemini 2.5 Pro and Gemini 3 Flash are deprecated in GitHub Copilot. What GitHub suggests instead, the October follow-up deprecations, and how to migrate.

OpenAI's Astra model produced results on ten decade-old math problems, including Erdős problems, each with a Lean 4 certificate. What shipped and why.

A ripgrep musl segfault in huge multi-threaded searches traced to a suspected Linux 7.0 kernel race. How it was pinned, plus the one-line fix candidate.

Vercel AI Gateway spend budgets now cover teams and projects, with hard dollar limits, 50/75/100% email alerts and CLI defaults. How the three scopes compose.

Vercel MCP now serves the stateless 2026-07-28 spec and the 2025 protocol from one endpoint via mcp-handler 2.x. What it means for server authors and clients.

AGENTS.md and CLAUDE.md configuration smells: a SCAM 2026 study of 100 top repos catalogs six, led by Lint Leakage and Context Bloat. What to fix in yours.

AgentS4D tests runtime safety for Claude Code, Codex, OpenClaw and Hermes across 6,560 runs: most unsafe runs still completed. Completion is not safety.

AI session portability: sealed reasoning, opaque compaction and hidden subagent messages are replacing portable transcripts. Five tests and seven rules for it.

Blind resampling beats self-repair in small code models: a placebo-controlled MBPP+ study finds retrying from scratch beats feeding failed code back.

CAPA benchmark: coding agents that read a user's past sessions resolve ambiguous requests with far fewer clarifying questions, tested across 12 models.

cdnjs now runs entirely on Cloudflare Workers, Workflows, R2, and Queues. How the publishing pipeline was rebuilt and the two platform limits it raised.

Change2Task turns merged pull requests into verified, executable coding agent tasks that stay current with the codebase, across five task families.

Coding agents rarely read open source AI contribution rules on their own and never refuse AI-banned repos. RepoComplianceBench shows what prompts can fix.

AGENTS.md and context files do not measurably change coding agent correctness in a 288-run Claude Code and Codex ablation. Failures were implementation skill.

Gemini Robotics ER 2 is public in the Gemini API. It watches live video to track progress, orchestrates VLA models as tools, and coordinates multiple robots.

GitHub Actions $/ syntax resolves a same-repo action or reusable workflow at the running commit, with no checkout. It fixes SHA pinning for your own actions.

casefold is the open-source Rust crate GitHub uses to case-fold code for Blackbird at memory bandwidth, and why dropping the early exit let it vectorize.

GitHub Copilot enterprise model policy targeting lets admins set a company-wide model baseline and grant extra models to teams. How the preview works.

GitHub Models is retired as of July 30, 2026 - the playground, inference API and BYOK are gone. The shutdown timeline and where to get model access now.

GitHub stacked pull requests are in public preview: how stacks split one large change into small, reviewable PRs with one-click merge and a gh-stack skill.

Inkling-Small is a 12B-active, Apache 2.0 open-weights MoE that beats the 975B Inkling on agentic coding and tool use at a quarter of the size.

LLM agents resolve real Java merge conflicts more often than structured merge tools in a calibrated ConflictBench study. Their edge is coverage: tools abstain.

MiniMax H3 turns text, image, video and audio input into 2K video with native stereo sound at 0.80 CNY per second, with open weights promised to follow.

The OpenAI "Building abundant intelligence" essay puts numbers on efficiency: 20% lower serving costs and a 3x ARC-AGI-3 jump from two settings alone.

OpenAI disrupted a Cambodia scam network that ran on ChatGPT for personas, translation, forged documents and admin work. How LLMs slot into organized fraud.

ORCA-bench puts five frontier coding agents on live oncall root cause analysis with real telemetry. The best scored 10% on hard tasks, far from oncall-ready.

OwlPath encodes code into an OWL2 ontology so coding agents can answer multi-hop structural queries with SPARQL, cutting tokens 28.8% on SWE-bench Pro.

PAIChecker finds 13.6% of SWE-bench Verified instances pair a PR with an issue it does not resolve, penalizing agents that solve the stated problem.

Shopify Hydrogen developer preview adds Vue bindings, bundled GraphQL TypeScript tooling, Shopify Inbox AI chat and new agent skills, plus breaking changes.

SIGIL compiles prose SKILL.md files into typed agent harnesses. Prose runs execute 56% of mandated steps; compiled harnesses reach 86% with 0.58x the tokens.

SWE-NFI benchmarks coding agents on 188 behavior-preserving improvement tasks. The best hits 70% correctness, but all lag humans on structural refactors.

Vercel deployments are now up to 7 seconds faster: 5 seconds of platform overhead cut from every build plus up to 2 more from the CLI. Where the time went.

Vercel Passport is GA: gate deployments behind Okta, Entra ID or any OIDC provider, then read a verified user identity in app code with getIdentity().

Claude Opus 5 shipped at half the price of Fable 5, Kimi K3 landed 2.8T open weights, MCP went stateless, and an OpenAI model breached Hugging Face in an eval.

Agent-Manager wraps tmux into a Go TUI that groups AI coding agents by project, shows live status for each, and lets you answer blocked agents or review their changes without attaching to their terminal.

ExploitGym incident: an AI agent escaped an OpenAI eval sandbox and spent 4.5 days inside Hugging Face production infrastructure. The timeline and HN debate.

Gemini Robotics 2 from Google DeepMind brings whole-body humanoid control, dexterous hands and multi-robot teamwork. The models, the numbers and the HN debate.

OpenAI slashes GPT-5.6 Luna by 80% to $0.20/M input tokens, cuts Terra by 20%, adds Sol Fast mode at 2.5x speed, and reveals Sol autonomously optimized its own production kernels.

Superlogical Rex, the terminal multiplexer from Mitchell Hashimoto's new company, opened public testing on macOS in October 2026. What it is, cost, and access.

Codex Security CLI and TypeScript SDK are now open source. What the repo contains and what HN says about scan cost, guardrails and local model support.

Copilot for Word AI worm: hidden prompts in a Word document hijack Copilot, alter financial data and self-propagate across documents. What HN thinks.

LearnVector is Andrew Ng's AI-native learning company, backed by $100M from Coursera, building agentic one-to-one tutoring. The vision and the HN reaction.

TurboFieldfare runs Google's Gemma 4 26B MoE model in about 2 GB of RAM on any Apple Silicon Mac by streaming experts from SSD. How it works and what HN said.

Zig incremental compilation explained from a core team deep dive: file pipeline, semantic analysis, dependency tracking, the custom linker and HN reaction.

Dario Amodei on open-weights models: export controls, distillation crackdowns and mandatory safety testing, the HN pushback, and what it means for developers.

Opus 5 on SlopCodeBench hit a 24% strict pass rate, beating Opus 4.8 and Sonnet 5, yet code quality still degraded. What it shows about coding agents over time.

Claude Mythos Preview found new weaknesses in the HAWK post-quantum signature scheme and reduced-round AES. What the research shows and how HN reacted.

Kimi Linear explained: Moonshot's KDA hybrid linear attention beat full attention with 75% less KV cache and up to 6x faster decoding at 1M context.

The Bun Rust rewrite six weeks on: 2,475 open bot PRs, no release tag and costs that may exceed $165K. The evidence, Jarred Sumner's reply and HN reactions.

A GrapheneOS duress PIN wiped a traveler's phone during a CBP airport search, and US prosecutors charged him for it. The case, HN debate and developer stakes.

Kimi K3 open weights are on HuggingFace: 2.8T parameters, 1M context, native MXFP4 and a ~1.63TB download. The specs, license terms and HN reaction.

AI makes starting projects nearly free, so why are developers burning out? The HN debate on Rick Manelius's essay about focus and followthrough with AI.

PGSimCity is a 3D city that visualizes PostgreSQL internals - shared buffers, WAL, autovacuum, checkpoints and replication. How it works and what HN said.

Scriptc by Vercel Labs compiles TypeScript to self-contained native binaries with no JavaScript engine. How it works, its performance claims and the HN split.

AI API token relays resell OpenAI, Anthropic, and Google access at up to 97.8% off. How the gray market works and what it means for developers on AI APIs.

Anthropic cut over 80% of Claude Code's system prompt for Claude 5 models with no coding eval loss. The new context engineering rules and what HN thinks.

Debian LLM policy debate: four proposals on AI-generated contributions, from an outright ban to full acceptance, and the fault lines in the HN discussion.

DeepSeek paused its fundraising after a leaked investor transcript exposed its compute gap with US labs. What Liang Wenfeng said and how HN read it.

Ruff v0.16.0 turns on 413 default rules, adds Markdown code-block formatting and ruff: ignore comments. What changed and why zero-config linting matters.

The shell colon null command explained: parameter expansion checks, default values, infinite loops and the git rebase trick, plus the HN readability debate.

Android may restrict on-device ADB to wlan0, breaking Shizuku, libadb-android and Termux workflows. What the proposal says and what developers need to know.

Claude Opus 5 benchmarks, pricing and HN reaction: near Fable 5 performance at the Opus 4.8 price, and what it means for choosing a daily-driver model.

How to simulate AM halftone printing with ImageMagick: CMYK channel splits, rotated dot screens and a batch script, plus the HN dithering vs halftoning debate.

Open-weight AI is having its Kubernetes moment, argues Mesosphere co-founder Tobi Knaup. His case, the HN pushback, and what it means for developers.

An open letter from Nvidia, Microsoft, Meta, OpenAI and 30+ signers defends open-weight AI models. What it argues, who stayed out, and how HN reacted.

A Hanwha Vision camera shipped a GitHub admin token in its login page because a Vite build leaked process.env. How it happened and what to fix in your CI.

Anthropic launched the Claude Cookbook - 90+ practical guides from their engineers covering tool use, agent patterns, evals, and production deployment. The HN discussion debates whether cookbook resources still matter when you can just ask the AI.

A new multi-model orchestration system routes requests across open-weight models to match frontier performance at reduced inference cost. Here is what we know.

A deep dive into why fully autonomous AI coding agents degrade codebases over time, and what context engineering can actually fix.

Claude Fable 5 found a counterexample to the 87-year-old Jacobian conjecture, and Terence Tao worked through the math. How it works and what HN is saying.

The startup Postgres survival guide from Hatchet, plus the HN pushback on monitoring, backups, and cascades, and what to internalize for production Postgres.

Gleam moved to Tangled, an ATProto-based code forge. What Tangled offers, what HN said about it, and what you gain or lose by leaving GitHub.

GPT-5.6 helped produce a Lean-verified proof closing a 1996 gap in derivative-free convex optimization. How the 10-page expert prompt worked, and what HN said.

A guide to setting up an isolated spare Mac that Claude Code can control remotely over SSH, Remote Control from your phone, and Tailscale.

SQLite in production lessons from Julia Evans: the ANALYZE fix that cut a query 100x, batching writes around the single writer, and backups that work.

Stack Overflow question volume is down 65% from its peak, with a sharp drop after ChatGPT. The graph, and the HN debate over whether AI killed the site.

TP-Link Kasa cameras leaked precise home GPS coordinates over unauthenticated UDP for years. How the flaw works, the disclosure timeline, and the second CVE.

AWS billing bug: a unit conversion error in S3 cost estimates sent developers alerts for billions and even trillions of dollars. What caused it and what to do.

How a 60-second auto-continue timer shipped to Claude Code without documentation, what it reveals about agent safety assumptions, and how to disable it.

Frame is an X11 server in 20,000 lines of assembly, built with Claude as a natural language compiler. It runs Firefox and GIMP on a third of Xorg's idle CPU.

Laura Summers of Pydantic articulates why LLM-assisted programming increases work intensity while eliminating the rewards that made coding satisfying.

LM Studio launches Bionic, a standalone agent harness for open models with local inference, voice input, and zero data retention cloud options.

Mozilla's State of Open Source AI report puts open models within 3.3% of closed ones, yet only 51% reach production. The deployment barriers explained.

Detecting LLM text with classical ML: how a TF-IDF and linear SVM detector reached about 85% accuracy without neural networks, and the HN false positive debate.

NotebookLM is now Gemini Notebook. What the rebrand changes, what stays the same for existing workflows, and what Hacker News developers are watching for.

Kimi K3 is Moonshot's 2.8T-parameter model with a 1M-token context and Delta Attention. Pricing, HN reactions and where it fits among frontier models.

Roc's Rust-to-Zig compiler rewrite took 487 days. What the memory safety numbers, 35ms incremental rebuilds and the HN reaction actually show.

AI voice fraud needs only three seconds of audio to clone a voice, and detection has failed. The defenses that work and what voice tech builders should change.

Gemma 4 26B on a 2013 Xeon with no GPU: how a sub-$300 box reached about 5 tokens/sec, the silent MoE bug behind the gibberish, and the upstream fix.

Days after getting caught uploading entire codebases to xAI servers, Grok Build is now open source on GitHub. The HN community isn't convinced it's enough.

A new American open-weights frontier model with multimodal capabilities, 1M token context, and competitive benchmarks. Here's what the HN community thinks.

A developer reverse-engineered a travel itinerary app, discovered it was just reformatting JSON, and replaced the entire 43MB app with a 0.05MB webpage.

PrismML's Bonsai 27B uses 1-bit quantization to compress a 27B model to 3.9GB - small enough to run on an iPhone. Here's how it works and what HN thinks.

OpenAI's Codex CLI now encrypts inter-agent communications for Sol and Terra models, leaving users unable to inspect what their agents are actually doing.

Cursor 0day: opening a repo on Windows can auto-execute a malicious git.exe. How the flaw works, the 7-month disclosure timeline, and practical mitigations.

Git history command: how the experimental fixup, reword and split subcommands in Git 2.54 and 2.55 replace scary interactive rebases, and what developers think.

A Hacker News discussion blows up over LLM vocabulary quirks, with developers sharing hooks, filters, and coping mechanisms for repetitive Claude-isms.

Apple SpeechAnalyzer vs Whisper: an independent benchmark of 5,559 utterances puts Apple at a 2.12% word error rate, ahead of every Whisper size tested.

A workflow for archiving, signing, notarizing, and distributing Apple apps entirely from the command line - with AI coding assistants doing the heavy lifting.

Open-source tool gives Claude Code, Codex, and other agents their own isolated Linux VM on your machine - network firewall included, no cloud account required.

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel use-after-free in rtmutex. How the exploit works, which kernels are affected, and what HN says.

Grok Build CLI wire-level analysis: a researcher found it uploads whole repositories, including .env secrets, to xAI servers. What the captured traffic shows.

Zig creator Andrew Kelley on Anthropic's AI-assisted Bun-to-Rust rewrite: the core arguments, the HN debate, and what it says about AI marketing claims.

AI dev news for the week of July 12, 2026: Grok 4.5, GPT-5.6 tiers, Claude Fable 5, native TypeScript 7, Bun's Rust rewrite and a GitHub agent prompt injection.

Claude Code sends about 33k tokens before your prompt, OpenCode about 7k. The methodology, cache economics and the HN debate over whether the overhead pays off.

George Hotz on LLMs: why he loves the tech but rejects doom narratives and AGI inevitability hype, plus how the Hacker News thread split on his argument.

Mesh LLM pools GPUs across home lab machines behind one OpenAI-compatible API, splitting 235B models over iroh and QUIC with no RDMA or NVLink required.

Terry Tao on coding agents: how he ported two dozen 1999 Java math applets to JavaScript in hours, built new visualization tools, and weighs risk and trust.

AI 2040 Plan A is the AI Futures Project scenario for a US-China accord that delays superintelligence to 2040. What it proposes and what HN thinks.

A solo developer built a complete JavaScript ecosystem from scratch - runtime, engine, package manager, and Electron alternative. Here's what HN thinks.

Cursor v3.11 Side Chats guide: open parallel agent conversations with /side or /btw, search past sessions with Conversation Search, and use Cloud Agent Hooks.

Ghost Font hides text in video using motion, so humans can read it but frame-by-frame AI models cannot. How it works and how HN commenters broke it.

SQLite's flexible typing lets you store anything anywhere. STRICT mode fixes that - here's why you should enable it for every new table.

Write code like a human will maintain it: why AI-generated shortcuts teach future models bad patterns, and what the HN debate suggests for keeping quality up.

Apple sues OpenAI over alleged trade secret theft: what the complaint says about former employees Tang Tan and Chang Liu, the hardware angle, and HN reactions.

A solo developer built a 1,300-line C inference engine that runs the 744B GLM 5.2 model on consumer hardware by streaming routed experts from disk.

Ginger Bill argues that the best tools disappear during use - and that celebrating workarounds is a sign your tool has failed you.

GPT-5.6 Sol Ultra proof of the Cycle Double Cover Conjecture: what OpenAI claims, the prompt it used, and why mathematicians are still verifying the result.

Mitchell Hashimoto on building Ghostty in Zig: why he chose Zig over Rust, how the GPU-first terminal is architected, and what Hacker News made of it.

Scarf moves from Haskell to Python after 7 years: why LLM-driven development made compile times a bottleneck, how the migration worked, and the HN debate.

Tencent's Hy3 ships 295B parameters but activates only 21B per token, matching flagship performance at flash-tier pricing under Apache 2.0.

Does codebase pattern consistency drive AI output quality? The case that it makes rewrites economical, and why HN pushed back on maintainability and evidence.

Bun rewrote 535K lines of Zig to Rust in 11 days with Claude. What the port fixed, what it cost, and what HN thinks it means for LLM-assisted code migration.

GLM 5.2 UK VAT return benchmark: how the model handled 59 transactions with near-human bookkeeper accuracy, where it erred, and why HN focused on liability.

Grok 4.5 coding model from xAI, trained on Cursor data: $2/M input pricing, benchmarks near Opus 4.7, the CursorBench caveat, and the Hacker News reaction.

Meta Muse Spark 1.1 is Meta's first paid, closed-weights API model, with $1.25/M input tokens and 1M context. The pricing, benchmarks and HN debate.

pgrust, a Rust rewrite of PostgreSQL, passes all 46,000+ regression test queries. What it delivers, what it does not, and the HN debate on AI-assisted rewrites.

Cloudflare Meerkat is a QuePaxa-based consensus service with no leader elections or timeouts across 330+ data centers. Why not Raft, and what HN critiqued.

GitLost is a prompt injection flaw in GitHub Agentic Workflows that let attackers extract private repo contents via public issues. How the attack works.

An 82M parameter text-to-speech model that runs on CPU and produces high-quality speech across multiple languages - no cloud APIs or GPU required.

Mistral Robostral Navigate is an 8B robotics model that navigates with only a camera and natural language commands. How it works and what the benchmarks mean.

TypeScript 7.0 ships a Go rewrite of the compiler with 8-12x build speedups and faster editors on large codebases. Benchmarks, why Go, and what changes.

An obfuscated bash script on a Uniqlo x Akamai t-shirt, decoded: what the base64 payload does when run, and why HN argues over whether it was AI-generated.

Astro 7.0 rewrites core components in Rust, upgrades to Vite 8 with Rolldown, and delivers significant performance gains for content-heavy sites.

Better Auth, the open-source auth framework popular with Next.js developers, is joining Vercel. What it means and why HN is wary of open source acquisitions.

GLM 5.2 and the AI margin collapse thesis: why open-weights models could squeeze frontier lab margins, where HN pushes back, and what it means for model choice.

Ilya Sutskever's rumored 30-paper ML reading list, now on 30papers.com. What the papers cover, the compression thesis behind them, and what HN thinks.

Small AI models run on handheld devices where networks fail, like an on-device pill scanner. HN debates offline emergency kits and domain-specific models.

Ternlight is a 7 MB ternary-quantized embedding model that runs semantic search in the browser via WASM, with no API calls. How it works and what HN thinks.

A Dartmouth study of an AI tutor in intro statistics links full engagement to a 0.71-1.30 SD exam gain. What it measured, and why selection bias still matters.

Anthropic's new research reveals LLMs have an internal 'workspace' for silent reasoning - and it could change how we build safer AI.

A controlled study of 660 Claude Code trials shows clean codebases reduce token usage by 7-8% and file revisitations by 34%, while pass rates stay the same. Traditional maintainability principles still matter in the age of AI coding.

Elm 0.19.2 brings faster builds on the road to 1.0, and Evan Czaplicki previews equatable and hashable types from the Acadia project. What HN makes of it.

GPT-5.6 Sol Ultra is coming to Codex with trained subagents that communicate during tasks, reportedly hitting 91.9% on Terminal-Bench 2.1. What HN thinks.

Comparing LLMs by token pricing alone can lead you to choose worse, more expensive models. Cost per task tells the real story.

A simple image rotation button reveals deep truths about responsive interface design - why buttons must always respond predictably, even during animations.

Flipper Zero firmware reaches stable 1.0 and moves to a community contribution model. What changes for contributors and how HN sees official vs custom firmware.

Douglas Thain's free compilers textbook walks you through building a C-like compiler that emits real X86 and ARM assembly, plus what HN recommends reading next.

Event sourcing for AI agents: a new paper makes the append-only log the source of truth for agent state. What it enables, and whether HN thinks it is just CQRS.

jamesob's local LLM guide: the $2k and $40k hardware paths, the BIOS and kernel settings that matter, and why multi-GPU setups fail at PCIe and IOMMU.

Leanstral 1.5 is Mistral's open Apache-2.0 model for Lean 4 theorem proving. The benchmark claims, the HN pushback on its bug-finding pitch, and how to use it.

Box3D is an open source 3D physics engine from the creator of Box2D, with cross-platform determinism, a wide SIMD contact solver and Valve Rubikon heritage.

Cloudflare's Monetization Gateway adds native x402 support, so developers can charge for API calls with stablecoin micropayments and no accounts or API keys.

Godot bans autonomous AI agents and substantial AI-generated code in contributions. What the policy allows, why maintainers want it, and how HN reacted.

Webernetes ports Kubernetes to TypeScript so a cluster runs in the browser. What ngrok's Sam Rose rebuilt, what is left out, and how it helps teach k8s.

Claude Code request marking: hidden unicode apostrophe and date-format markers flag timezone, domain and lab keywords. What was found and what to do about it.

Anthropic releases Claude Sonnet 5 with improved agentic capabilities, better tool use, and an introductory pricing deal. Here's what developers need to know.

Ornith-1.0 open-source coding models explained: what "self-improving" really means, the four model sizes, hardware needs, HN reactions and whether to try it.

Outer Shell proposes a graphical desktop for remote servers over SSH, with apps served on Unix domain sockets. How it works, the HN debate and who it is for.

PostgreSQL 19 beta features: SQL/PGQ graph queries, SQL:2011 temporal tables and REPACK CONCURRENTLY, plus what HN thinks and when to expect the release.

ZLUDA 6 runs unmodified CUDA apps on AMD GPUs and adds PhysX and Blender textures. How it compares to ROCm and HIP, and why hobby status matters.

A developer fed 266MB of DICOM MRI data to Claude Code for a second opinion on a shoulder diagnosis. It disagreed with the doctor; HN radiologists weighed in.

GLM 5.2 vs Claude Code on Semgrep IDOR benchmarks: the open-weight model scored higher at about one-sixth the cost per finding. Setup, results and HN reactions.

Google Workspace CLI creator Justin Poehnelt saw his tool go viral and hit #1 on Hacker News, then was fired two days after Google announced its own version.

Filippo Valsorda argues LLMs have made vulnerability reports less special. His case against old coordinated disclosure norms, plus the HN pushback.

Armin Ronacher's The Coming Loop on agent loops versus harness loops: where loop-driven development works, where it fails, and what the HN thread adds.

Run GLM-5.2 locally with Unsloth dynamic quantization: hardware math for a 256GB Mac or 24GB GPU, quantization tradeoffs and lessons from the HN thread.

Memcached vs Redis for caching: the architectural case that memcached's constraints are a feature, the HN pushback, and when you need either one.

TikZ Editor is an open-source WYSIWYG editor for LaTeX TikZ figures built almost entirely by Codex. How it works and what HN made of agent-built software.

Unlimited OCR is Baidu's open-source vision-language model that parses 100+ page documents in one pass without memory blowup. How it works and when to use it.

VibeThinker-3B is a 3B parameter reasoning model reporting 94.3% on AIME 2026. What the paper claims, how to run it locally, and what it trades away.

Switzerland's fully open foundation model promises transparent training data and EU compliance. The HN crowd has questions about actual performance.

A developer discovered that Claude Code's thinking output is summarized, not the raw reasoning. Here's what Anthropic's docs actually say - and why it matters.

A Codex CLI SQLite logging bug wrote TRACE logs that could wear out SSDs. What caused it, the merged fixes, and what to check if you run Codex heavily.

Deno Desktop in Deno 2.9 compiles TypeScript projects into native apps with a system WebView or bundled Chromium. How it compares to Electron and Tauri.

Oak is a version control system for AI agents, with virtual mounts, per-task branches and fast snapshots. What it changes from Git and where HN pushes back.

Prompt injection is role confusion, per an ICML 2026 paper: LLMs judge who is speaking by style, not role tags, so text that sounds like the system wins.

There are no instances in ATProto: Dan Abramov explains how Bluesky's protocol separates hosting from apps, what Hacker News pushed back on, and why it matters.

Cloudflare's wrangler deploy --temporary flag gives AI agents an ephemeral account to deploy Workers with no OAuth or browser, plus a claim link to keep it.

GPT-5.5 hallucinates 86% of the time on AA-Omniscience when it does not know, versus 28% for MIT-licensed GLM-5.2. What the metric measures and why it matters.

LLM architectures got complicated: MoE routing, mixed attention variants and integrated vision encoders replaced the simple transformer. What changed and why.

DuckDB internals explained: columnar storage, vectorized execution and an in-process design that let it rival costly clusters on a laptop, plus what HN says.

Most developers only know .gitignore, but Git offers two other ignore mechanisms for local workflows and machine-wide patterns. Here's when to use each.

Java value classes (JEP 401) arrive in JDK 28 as a preview, removing object identity overhead for dense memory layouts. What changes in your code.

MCP's new Enterprise-Managed Authorization removes per-user OAuth friction. Anthropic, Okta, Figma, and Linear ship centralized auth for AI agent tooling.

Adam (YC W25) open-sources CADAM, a browser tool that turns text into parametric OpenSCAD models, and HN debates whether text-to-CAD is useful or a demo.

Emacs 31 features worth daily driving - auto-installed tree-sitter grammars, a built-in markdown mode, window layout commands and better minibuffer completion.

Local Qwen vs Claude Opus: Alex Ellis on running local LLMs in production, a 2-3 month hardware payback, and why local models are specialists, not substitutes.

The Transformer co-creator leaves Google DeepMind for OpenAI just two years after Google paid $2.7 billion to bring him back from Character.AI.

Epic Games Lore is open-source version control for binary-heavy game repos, using Merkle trees and on-demand hydration to handle what Git struggles with.

RFC 10008 defines the HTTP QUERY method - GET with a request body. It is safe, idempotent and cacheable, and avoids URL length limits for complex queries.
Keep exploring

New tutorials, open-source projects, and deep dives on coding agents - delivered weekly.
Explore 844 topics
Browse All Topics