Skip to content

Hacker News

Social news site run by Y Combinator where users submit and vote on technology, startup, and programming stories, with discussion in comment threads.

Known aliases

  • HN
  • news.ycombinator.com
  • Show HN

Current stories

buildOne report1 publisher

Codex CLI 0.157.0 starts a background updater that keeps running after you close the terminal

Codex CLI 0.157.0 leaves a self-updating daemon running after the terminal closes and copies about 374 MB into ~/.codex/packages/, dev.to reports. Issue #48195, opened 25 September 2026, asks OpenAI to make the behavior opt-in.

Publishers:dev.to

Reality

Evidence72
Adoption
Not scored
Hype gap+5
Incentives
Not scored
Confidence70
buildOne report1 publisher

QGIS's AI ban asks contributors whether they wrote the code in good conscience

QGIS has banned all LLM, AI and agent assisted code in qgis/qgis, on master as of October 7 under QEP #387. Asked how compliance will work, a core contributor pointed to the contributor's own conscience, a dev.to analysis reports.

Publishers:dev.to

Reality

Evidence45
Adoption30
Hype gap+12
Incentives50
Confidence55
buildOne report1 publisher

Deno's move to Cloudflare sets an April 2027 shutdown for Deno Deploy

Deno Deploy shuts down around April 2027 under Ryan Dahl's plan to move the whole Deno team to Cloudflare, a dev.to migration guide reports. Hosted apps must move by then; teams self-hosting Deno get a longer deadline set by the end of security releases.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence40
buildOne report1 publisher

Claude-written Rust port of Quake merged branches only after matching the original C engine

Solo developer ilreb used Anthropic's Claude Code to port id Software's 1996 Quake from C to safe Rust, playable in a browser. Every merge waited on a harness that diffs the port against id's original C engine, so the result is evidence for test-gated agent work where a runnable reference exists.

Publishers:runtimewire.com

Reality

Evidence40
Adoption
Not scored
Hype gap+5
Incentives15
Confidence45
buildOne report1 publisher

Grok 4.7 doubles cost per task at an unchanged per-token price

Grok 4.7 keeps Grok 4.6's $2/$6 token price yet costs $3.74 per task against $1.86, by Artificial Analysis' measurement. Teams that budget from the price sheet will undercount agent spend until they measure tokens per task on their own work.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+45
Incentives55
Confidence55
buildOne report1 publisher

Anthropic's agents filtered 200,000 DNA sequences to one, almost all in software

Anthropic says roughly 950 Claude agents spent 21 hours and 210 million tokens narrowing 200,000 DNA sequences to one new enzyme system named ART. The filtering ran almost entirely in software, the part of the setup builders can copy.

Publishers:dev.to

Reality

Evidence40
Adoption
Not scored
Hype gap+30
Incentives60
Confidence40
buildOne report1 publisher

A one-millisecond flaw in legacy NATS code stopped UK departures for four and a half hours

NATS traced a four-and-a-half-hour halt to UK departures to a legacy defect that corrupted a squawk-code update inside a one-millisecond window. Its first symptom, a link drop that healed in 45 seconds, was logged as having no ongoing operational impact.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+12
Incentives
Not scored
Confidence55
buildOne report1 publisher

Open 0.8B model Jeff answers agents' multiple-choice calls and escalates the unsure ones to a 27B

Jeff, an open 0.8B model, returns a probability for each option in one forward pass and sends low-confidence agent decisions to Qwen3.8-27B. The confidence score attached to each answer tells an agent when a small decision is worth the larger model's time.

Publishers:dev.to

Reality

Evidence38
Adoption15
Hype gap+15
Incentives
Not scored
Confidence35
buildOne report1 publisher

OpenJDK's AI policy draws the line at whether a model wrote any part of a contribution

OpenJDK's interim AI policy, approved April 9, bars contributions with even one line of model-generated content but lets AI read and debug code. Java teams that contribute upstream have to sort their tools by the model behind them.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+5
Incentives55
Confidence50
buildOne report1 publisher

Git's SHA-256 Default Under Breaking-Changes Builds, Not Just After 3.0 Ships, Will Still Break CI Scripts

Git 3.0 will give new repositories 64-character SHA-256 object IDs in place of 40-character SHA-1, while existing repositories keep their format. Scott Chacon disputes the security payoff, and his own breakage list shows which scripts need changes.

Publishers:dev.to

Reality

Evidence42
Adoption8
Hype gap+30
Incentives
Not scored
Confidence38
buildOne report1 publisher

JadePuffer lets an AI agent choose each step of a ransomware attack inside Azure tenants

JadePuffer lets an AI agent run recon, credential theft, privilege escalation and resource deletion in Azure tenants, a dev.to analysis says. No operator pauses between the familiar steps, so cloud teams get less time between first access and deleted resources.

Publishers:dev.to

Reality

Evidence20
Adoption
Not scored
Hype gap+20
Incentives35
Confidence20
buildOne report1 publisher

Meta Muse hands its account token to any local process that redirects one voice setting

Patrick Wardle found that any local process on a Mac can redirect Meta Muse's voice endpoint and capture its account token, with no macOS permission needed. Muse also zipped and exported the 6.8 GB root filesystem of its own sandbox on request.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence40
buildOne report1 publisher

Cloudflare's cloudflared 2026.9.3 adds optional one-time-PIN email gating for Quick Tunnel links

Cloudflare's cloudflared 2026.9.3 adds an --allowed-mail flag that limits a Quick Tunnel to approved email addresses via a one-time PIN. Public stays the default, so the safeguard works only if whoever starts the tunnel, increasingly a coding agent, adds the flag.

Reality

Evidence45
Adoption
Not scored
Hype gap+10
Incentives65
Confidence45
buildOne report1 publisher

Griffiths Waite would move shared UI spending from component code to design tokens and tests

Griffiths Waite argues in InfoQ that coding agents now make a company-wide UI component package hard to justify. Its plan depends on visual-regression, accessibility and token-conformance tests catching what regenerated code gets wrong.

Publishers:infoq.com

Reality

Evidence30
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence35
buildOne report1 publisher

Pi Durable checkpoints every agent step so crashed runs resume from storage

Pi Durable ports the Pi agent harness to TypeScript and checkpoints every step to one of three stores, so crashed agents resume where they stopped. Whether it can replace hand-built resume code depends on how it treats a tool call cut off mid-flight.

Publishers:latent.space

Reality

Evidence28
Adoption
Not scored
Hype gap+30
Incentives
Not scored
Confidence35
buildOne report1 publisher

One team's half-day audit found seven places its tooling assumed a 40-character Git hash

One team's half-day audit found seven places where its tooling hardcodes the 40-character SHA-1 hash length, ahead of an expected SHA-256 default in Git 3.0. SHA-256 hashes are 64 characters, so the fix is code that accepts both lengths and asks Git which format a repo uses.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+5
Incentives
Not scored
Confidence45
buildOne report1 publisher

Passkeys trade portability for phishing resistance by keeping the private key on the device

FIDO's export format for passkeys has only begun shipping in iOS 26 and Android, with the FIDO Alliance counting 5 billion passkeys in use. The key that makes them phishing-resistant cannot be copied off the device, so adopters need a plan for lost devices and changed managers.

Publishers:dev.to

Reality

Evidence55
Adoption65
Hype gap+10
Incentives
Not scored
Confidence55
buildOne report1 publisher

Xiaomi's live training dashboard shows MiMo 2.6 Pro costing $20,500 an hour across seven restarts

Xiaomi's public dashboard put the MiMo 2.6 Pro reinforcement-learning run at $1.05 million after about 51 hours, roughly $20,500 an hour. Its restart notes and token count give other teams an all-in reference for pricing their own RL runs.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives50
Confidence55
buildOne report1 publisher

Gemini 3.8 Flash ties Opus 5 on DeepSWE at a price Google doubles on January 1

Google's Gemini 3.8 Flash ties Claude Opus 5 at 74% on DeepSWE for $2.36 a task, at an introductory price that doubles on January 1, 2027. For agent workloads, the comparison that holds up after January is cost per finished task, set by steps taken as much as by rate.

Publishers:dev.to

Reality

Evidence55
Adoption
Not scored
Hype gap+25
Incentives60
Confidence50

Earlier coverage

  1. LLM researchers put the price of unmasking a Hacker News pseudonym at $1 to $4

    Invest · September 27, 2026 · Confirmed2 publishers

  2. Cursor is SpaceX property now, which makes your editor a vendor bet

    Build · August 16, 2026 · Confirmed3 publishers

  3. Paint writes a server-issued ID into locally generated pixels, and egress logs will never see it

    Build · August 24, 2026 · Confirmed3 publishers

  4. Google's agent demo packs 31 sessions a pod where its stated duty cycle allows 151

    Build · September 21, 2026 · Confirmed2 publishers

  5. Every turn pays again for the same MCP tool definitions

    Build · September 21, 2026 · One report1 publisher

  6. Cursor ships Origin default-on to every paid seat

    Build · August 28, 2026 · One report1 publisher

  7. The $8 chip did not change. The memory layout did.

    Build · August 17, 2026 · One report1 publisher