Aug 28Saturday, August 29, 2026 · all daysAug 30 · today »
1.GUIs should be fully keyboard-driven(ckardaris.com)
1038 points by ckardaris 13 days ago | 513 comments | permalink
tl;dr: Responding to a debate about TUIs vs GUIs, the author argues that the common pro-TUI claim of "keyboard-driven" isn't inherent to terminals—GUIs can and should support full keyboard navigation too. Frameworks like GNOME's HIG explicitly recommend this, and implementing comprehensive keyboard shortcuts is a matter of developer will, not technical feasibility.
HN Discussion:
  • Keyboard accessibility is essential for disability access and often gets neglected by developers
  • UI frameworks and developer choices are to blame for regression in keyboard support since older systems handled it naturally
  • Keyboard-driven UIs are a power-user concern that shouldn't be imposed on general users
  • ~Mere keyboard compatibility via shortcuts isn't enough; GUIs need discoverable, visible keyboard navigation hints like TUIs have
  • Standardized OS-level keyboard commands should work consistently across all applications
2.Boot a Virtual iPhone via Apple's Virtualization.framework(github.com)
406 points by hentrep 12 days ago | 111 comments | permalink
tl;dr: vphone-cli is a tool that boots a virtual iPhone on Apple Silicon Macs using Apple's Virtualization.framework and PCC (Private Cloud Compute) research VM infrastructure. It automates the full pipeline—downloading IPSWs, patching the boot chain, DFU restoring, and installing custom firmware—with five variants ranging from stock iOS to full jailbreak with TrollStore/Sileo preinstalled. Requires macOS 15+, SIP/AMFI relaxation, and exposes a control socket for automation (screenshots, touch, swipes) suitable for AI-driven E2E testing.
HN Discussion:
  • Clarifies this uses Apple's own iOS kernel, not emulation like Corellium
  • Enthusiastic praise from users already leveraging the tool for app testing and profiling
  • Questions how this differs from or compares to existing tools like iOS Simulator or Xcode
  • Concerns about security of running unknown root binaries from the project
  • Technical curiosity about capabilities like baseband, automation frameworks, and regional checks
3.Htmx 4.0(four.htmx.org)
815 points by rmsaksida 13 days ago | 229 comments | permalink
tl;dr: htmx 4.0 ships after 8 months of work, with internals migrated from XMLHttpRequest to fetch(). Breaking changes include explicit attribute inheritance (via `:inherited` suffix), standardized event names (e.g., `htmx:before:request`), and history navigation via re-fetching instead of localStorage snapshots. New features include built-in morph swaps (idiomorph), an `<hx-partial>` tag for multi-target updates, streaming extensions (SSE, WebSockets, multipart), and `hx-live` for front-end scripting. A CLI upgrade tool is provided; htmx 2 remains the NPM `latest` tag until 2027.
HN Discussion:
  • Long-time htmx fans expressing enthusiasm and gratitude for the library and new release
  • Htmx works great for progressive enhancement and simple stacks like Go+SQLite
  • Htmx is problematic because it forces mixing presentation with business logic, unsuitable for SPA-style development
  • ~Alternative libraries like alpine-ajax may be smaller and sufficient replacements for htmx
  • Appreciation for the clarity of htmx's machine-oriented documentation compared to typical human docs
4.U.S. sanctions against the A/I Collective(inventati.org)
697 points by exiguus 13 days ago | 747 comments | permalink
tl;dr: A/I (Autistici/Inventati), an Italian volunteer collective founded in 2001 that provides free, non-commercial digital communication tools for activists, has been hit with U.S. sanctions. The group operates on donations, manually vets each user request, and is rooted in anticapitalist, autonomous movement principles emphasizing solidarity and self-organization. The page itself provides little detail on the sanctions beyond the headline, focusing mainly on the collective's mission and service request process.
HN Discussion:
  • Sanctioning infrastructure providers as terrorists sets a dangerous precedent for privacy tools and devs
  • ~Deplatforming culture is now backfiring on the left as predicted
  • Sharing historical context about A/I's activist roots and significance
  • Requesting evidence or clarification about the group's actual activities and alleged PKK ties
  • Presenting the State Department's official justification for the sanctions
5.Just the rumour of a bug is enough to find an exploit these days(anil.recoil.org)
378 points by avsm 13 days ago | 123 comments | permalink
tl;dr: An OCaml cohttp maintainer observed automated exploit probes hitting his server within 10 minutes of opening a public PR for a path traversal fix, and found his own LLM agent could generate a working exploit in under a minute from just a vague description. He argues that traditional security embargoes are now obsolete since LLM agents can derive exploits from mere rumors of a bug, citing data showing mean time-to-exploit has gone negative. Proposed responses include private patch coordination via web-of-trust, continuous shipping with better cross-ecosystem packaging, and protocol-layer virtual patching akin to Cloudflare's managed rules.
HN Discussion:
  • Maintainer confirms surge in security disclosures matching the article's experience
  • ~Real problem is organizational will to fix bugs, not detection speed
  • Silent/microupdates pushed without user consent are unacceptable
  • ~This exploit-from-rumors practice predates LLMs, which merely scaled it
  • ~Deployment and rollout speed are the real bottleneck, not patches
6.Inception-style curved map for turn-by-turn directions(orbify.eu)
604 points by smoser 13 days ago | 189 comments | permalink
tl;dr: Summary not available.
HN Discussion:
  • ~Concept is neat but has usability flaws like hiding upcoming route information
  • ~The curved projection is too extreme and induces nausea
  • Prior art exists; the idea isn't novel and predates Inception
  • Great proof of concept that could address real navigation pain points like lane guidance
  • Related projects and similar visualizations are worth exploring
7.Our decision on Cursor following its acquisition by SpaceX(openai.com)
802 points by meetpateltech 12 days ago | 493 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • OpenAI's ban is a predictable competitive move following Cursor's acquisition by a rival
  • Cursor's reseller business model was doomed once it aligned with a competing model provider
  • Users lament losing multi-model flexibility that made Cursor valuable
  • ~The ban will push users away from Cursor or OpenAI models entirely
  • OpenAI models were only a small fraction of Cursor usage, so the ban's impact is limited
8.The Twelve-Factor App (2025)(12factor.net)
311 points by jxmorris12 13 days ago | 170 comments | permalink
tl;dr: The Twelve-Factor App is a methodology for building SaaS applications that are portable, scalable, and suitable for cloud deployment, originally synthesized from Heroku's experience with thousands of apps. The twelve factors cover practices like using a single codebase with many deploys, explicit dependency declaration, storing config in environment variables, treating backing services as attached resources, separating build/release/run stages, running stateless processes, and treating logs as event streams. The 2025 revision maintains the language-agnostic principles aimed at minimizing dev/prod divergence and enabling continuous deployment.
HN Discussion:
  • ~Methodology remains highly relevant and valuable reading, though config-in-environment advice is flawed
  • Nostalgia for Heroku's simpler approach that these principles represented
  • Principles are sound but modern team structures lack generalists to champion them
  • The methodology punts on state management, which is a significant limitation
  • ~Dev/prod parity factor is debatable and may be overreaching depending on interpretation
9.GLM-5.3 is now open-weight(huggingface.co)
797 points by jeudesprits 13 days ago | 279 comments | permalink
tl;dr: Z.ai released GLM-5.3 as open-weights, built on the same base as GLM-5.2 but with post-training improvements yielding ~50% coding gains and open-source SOTA on Terminal Bench 3.0 and Agents' Last Exam. The model also shows sharp jumps in cybersecurity capability, more than doubling GLM-5.2 on exploitation benchmarks and topping CyberGym. It supports deployment via SGLang, vLLM, Transformers, and Ascend NPUs, with a configurable reasoning_effort parameter (low/high/max).
HN Discussion:
  • GLM-5.3 is a sweet spot open-weights model, easier to run and less restrictive than US alternatives
  • GLM-5.3 shows impressive capability, tackling hard problems better than competing models like DS4Flash
  • ~Chinese models including GLM tend to overthink and rack up token costs despite cheaper per-token pricing
  • GLM-5.3 Flash is more interesting since 5.3 lacks vision support, which is a dealbreaker
  • The release doesn't mean much yet due to limited architecture support and infrastructure availability
10.Judge rules Trump administration’s blacklisting of Anthropic was illegal(nytimes.com)
630 points by jbegley 13 days ago | 432 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • The ruling is correct because the blacklisting was retaliatory and lacked genuine national security justification
  • Anthropic deserves compensation for losses caused by the illegal ban
  • ~The legal system is too slow to meaningfully address rapid government actions like this
  • ~The ruling is a hollow victory since chilling effects already coerced other companies into compliance
  • Skepticism that the ruling will have real consequences or set meaningful precedent
11.Get your Windows license refund(en.refund4freedom.org)
715 points by smartmic 13 days ago | 325 comments | permalink
tl;dr: The FSFE and Italian Linux Society are campaigning for consumers' right to refuse and get refunds for pre-installed Windows licenses on new laptops, arguing manufacturers shouldn't force OS purchases. The site details each major vendor's refund policies (HP and Dell refuse; Lenovo, Asus, and Acer have procedures of varying difficulty) and documents successful case histories, mostly in Italy, where users obtained refunds ranging from €40–129, often only after legal action.
HN Discussion:
  • Personal success stories obtaining Windows license refunds from manufacturers
  • Buying from Linux-friendly vendors or switching to Linux is a better alternative
  • Expecting vendors to offer OS-free hardware is unreasonable since hardware needs software
  • The root problem is Microsoft's anticompetitive OEM licensing discounts that should be challenged legally
  • ~The campaign is limited (Italy-only) and refund policies vary significantly by region and vendor
12.Doctors are finally learning to manage antidepressant withdrawal(newscientist.com)
282 points by eutropheon 13 days ago | 351 comments | permalink
tl;dr: Growing research shows SSRI withdrawal is far more common and severe than long assumed, with studies finding up to 79% of users experience withdrawal symptoms and many unable to fully quit — problems often misdiagnosed as depression relapse. Long-term use has also been linked to cardiac risks and faster cognitive decline, prompting new guidelines in the UK, Australia, and US that recommend slow, liquid-based tapering and periodic reassessment of prescriptions. Psychiatrists increasingly frame SSRIs as one tool alongside therapy and exercise, rather than a default long-term treatment.
HN Discussion:
  • Doctors failed to warn patients about severe side effects and withdrawal, requiring self-managed tapering
  • SSRIs were life-saving and article risks downplaying their benefits for those who need them
  • ~Withdrawal experiences vary widely; some manage cold turkey with minimal issues
  • Medical science's decades-long failure to address known withdrawal risks is inexcusable
  • Similar withdrawal problems extend to SNRIs and other related medications, complicating discontinuation
13.“It works better in the app”(shkspr.mobi)
688 points by blenderob 13 days ago | 467 comments | permalink
tl;dr: Google's Android Calendar app inexplicably can't subscribe to a calendar via URL—you have to open the desktop web version to do it, then the calendar magically appears in the app. The author argues this pattern is endemic: companies push users into apps for engagement metrics, but half-build them and punt users back to the web for anything nontrivial, defeating the entire point of having a native app.
HN Discussion:
  • Users refuse to install apps that gate functionality unnecessarily, opting out of the service entirely
  • ~Apple's marketing, not Google, is to blame for the native-app-first culture
  • Being pushed into an app signals abusive intent like tracking and ad-blocker evasion
  • PWAs are a superior alternative that serve both users and developers better
  • Google apps are poorly designed by people who don't actually use them
14.Nvidia agrees to acquire Hugging Face for $13B(businessinsider.com)
1966 points by mfiguiere 14 days ago | 905 comments | permalink
tl;dr: Nvidia is reportedly in talks to acquire Hugging Face at a valuation over $13 billion, though no deal has been finalized and negotiations could still collapse. Nvidia previously invested in Hugging Face's $235M round in 2023, and the platform rejected a $500M investment offer last year over concerns about a dominant investor. An acquisition would give Nvidia deeper access to the open-source AI developer ecosystem, but could undermine Hugging Face's neutrality, since it currently supports competing hardware from AMD and Intel.
HN Discussion:
  • ~Deal could benefit European AI by funding founders' next ventures despite HF being American
  • Nvidia gains dangerous vertical integration and privileged data access, raising antitrust concerns
  • Concerns about Nvidia controlling weight distribution and crowding out competing hardware ecosystems
  • Skepticism about HF's actual value and business model justifying $13B price tag
  • Notes the striking reversal from rejecting dominant investor to full acquisition
15.Luanti removed from Google Play due to baseless AI copyright notice(blog.luanti.org)
515 points by miniBill 13 days ago | 151 comments | permalink
tl;dr: Luanti (formerly Minetest), an open-source voxel game-creation platform, was pulled from Google Play after Tracer.AI filed an AI-generated DMCA notice on Microsoft's behalf alleging Minecraft copyright infringement, despite Luanti shipping with no Minecraft assets or code. This is the second such bogus takedown from the same company—the first in 2023 took 46 days to reverse, exceeding DMCA's 10-14 business day limit. The Luanti team has filed a counter-notice and is calling on Microsoft, Tracer.AI, and Google to stop rubber-stamping unverified AI-driven copyright claims.
HN Discussion:
  • Praises the article's clarity and criticizes DMCA abuse by bad actors
  • Microsoft should be held accountable and fire responsible lawyers
  • Questions potential fraud in Tracer.AI's jurisdictional claims
  • Proposes systemic fixes like bonds or penalties for frivolous DMCA notices
  • ~Solution is to diversify away from Google Play Store
16.Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache(blog.cloudflare.com)
904 points by TangerineDream 13 days ago | 280 comments | permalink
tl;dr: Cloudflare cut per-entry memory in 1.1.1.1's DNS cache by 56% (from 953 to 420 bytes) through five Rust-level optimizations: replacing `Vec`/`String` with `Box<[T]>`/`Box<str>`, merging record sections with offsets, dropping redundant owner names, boxing large enum variants, and storing record data in raw wire format. Across the fleet this freed ~100TB of RAM, while also boosting insert throughput 43% and cutting lookup latency 19% thanks to better memory locality and fewer allocations.
HN Discussion:
  • Endorses the ship-then-optimize development philosophy demonstrated by Cloudflare
  • Validates that systems programming and low-level memory optimization still matters
  • Shares similar personal experiences with memory optimization achievements
  • ~Suggests additional optimizations Cloudflare missed, like radix trees or inline allocation
  • Questions whether merging vectors with offsets undermines Rust's safety guarantees
17.Hilariously fast volume computation with the divergence theorem (2018)(alyssarosenzweig.ca)
261 points by luu 13 days ago | 67 comments | permalink
tl;dr: Using the divergence theorem with F = ⟨x,0,0⟩, the volume of a closed triangulated mesh reduces to a simple sum over triangles, requiring only ~11 floating-point operations per triangle (no numerical integration needed). The resulting formula is V = (1/6) Σ (Δ₁×Δ₂)ₓ · (T₀ₓ + T₁ₓ + T₂ₓ), which is O(n) and fast enough to process ~30 million triangles per frame at 60fps on a Raspberry Pi. The author notes the algorithm likely isn't novel—a similar approach appears in prior work by Zheng and Chen.
HN Discussion:
  • ~This technique is well-known and can be derived from basic geometric intuition without vector calculus
  • Provides historical or alternative references showing prior art for the same approach
  • Enthusiastic appreciation for learning this elegant, simple technique
  • Adds practical caveats about mesh preconditions and extensions to other properties like inertia
  • Questions the practical need for per-frame computation since volume can be precomputed
18.Small Models Have Arrived(calv.info)
786 points by tosh 14 days ago | 345 comments | permalink
tl;dr: Small, fast models like "gpt-5.6-luna" and GLM 5.3 have become capable enough to handle complex tasks (research, personalized news aggregation) at costs around $0.10 instead of $1+, potentially unlocking consumer AI apps that were previously uneconomical due to token costs. The author argues that while frontier models will remain essential for "IQ 180" novel problem-solving, most business work is "token spewer" grunt work—responsiveness, follow-ups, coordination—where cheap/good-enough models could soon dominate, pending advances in harnesses, safety, and permissions.
HN Discussion:
  • Small models were already good enough for most tasks; frontier chasers are late to realize this
  • Small models enable exciting local/on-device AI in home gadgets and personal hardware
  • Skeptical about consumer AI opportunities since frontier labs will dominate the space
  • Room-at-the-bottom strategies make sense since many apps don't need world knowledge stored in huge models
  • ~Developers/users may resist downgrading to cheaper models due to quality concerns
19.Sovereign Tech Agency invests €500k in Flatpak(modal.cx)
265 points by eigenspace 13 days ago | 137 comments | permalink
tl;dr: Germany's Sovereign Tech Agency is investing €508,640 over two years to advance Flatpak's sandboxing and security capabilities, which currently lag behind Android and iOS. The funding will support new Portals for audio (separating speaker/microphone access), networking, VPNs, spell checking, and password auto-fill, plus infrastructure work on entitlements, intents, and general maintenance. The project runs through 2027 with contractors from the previous GNOME STF effort.
HN Discussion:
  • Supports the investment but notes need for backwards-compatible permission adoption by apps
  • ~STF funding model is appreciated but too temporary and non-strategic for critical infrastructure
  • Flatpak's design is flawed, opaque, or inferior to alternatives like firejail or containers
  • Flatpak's sandboxing is untrustworthy due to blanket permission exceptions granted to apps
  • Money would be better spent on traditional distro packaging rather than Flatpak
20.507 Mechanical Movements(507movements.com)
664 points by helloplanets 14 days ago | 80 comments | permalink
tl;dr: An online adaptation of Henry T. Brown's classic technical reference "507 Mechanical Movements," featuring animated versions of the original illustrations. Not all 507 movements are animated yet—completed ones are marked with color thumbnails—and more are being added over time.
HN Discussion:
  • ~Site is great but lacks titles/names for individual movements, hurting usability
  • Loves the site and wishes the animations were completed
  • Sharing related collections, books, and resources on mechanical movements
  • Content is repetitive with minor variations, wants a distilled version
  • Technical curiosity/discussion about specific mechanisms shown on the site