| 1. | GUIs should be fully keyboard-driven(ckardaris.com) |
| 1038 points by ckardaris 13 days ago | 513 comments | permalink | |
tl;dr: Responding to a debate about TUIs vs GUIs, the author argues that the common pro-TUI claim of "keyboard-driven" isn't inherent to terminals—GUIs can and should support full keyboard navigation too. Frameworks like GNOME's HIG explicitly recommend this, and implementing comprehensive keyboard shortcuts is a matter of developer will, not technical feasibility. | |
HN Discussion:
| |
| 2. | Boot a Virtual iPhone via Apple's Virtualization.framework(github.com) |
| 406 points by hentrep 12 days ago | 111 comments | permalink | |
tl;dr: vphone-cli is a tool that boots a virtual iPhone on Apple Silicon Macs using Apple's Virtualization.framework and PCC (Private Cloud Compute) research VM infrastructure. It automates the full pipeline—downloading IPSWs, patching the boot chain, DFU restoring, and installing custom firmware—with five variants ranging from stock iOS to full jailbreak with TrollStore/Sileo preinstalled. Requires macOS 15+, SIP/AMFI relaxation, and exposes a control socket for automation (screenshots, touch, swipes) suitable for AI-driven E2E testing. | |
HN Discussion:
| |
| 3. | Htmx 4.0(four.htmx.org) |
| 815 points by rmsaksida 13 days ago | 229 comments | permalink | |
tl;dr: htmx 4.0 ships after 8 months of work, with internals migrated from XMLHttpRequest to fetch(). Breaking changes include explicit attribute inheritance (via `:inherited` suffix), standardized event names (e.g., `htmx:before:request`), and history navigation via re-fetching instead of localStorage snapshots. New features include built-in morph swaps (idiomorph), an `<hx-partial>` tag for multi-target updates, streaming extensions (SSE, WebSockets, multipart), and `hx-live` for front-end scripting. A CLI upgrade tool is provided; htmx 2 remains the NPM `latest` tag until 2027. | |
HN Discussion:
| |
| 4. | U.S. sanctions against the A/I Collective(inventati.org) |
| 697 points by exiguus 13 days ago | 747 comments | permalink | |
tl;dr: A/I (Autistici/Inventati), an Italian volunteer collective founded in 2001 that provides free, non-commercial digital communication tools for activists, has been hit with U.S. sanctions. The group operates on donations, manually vets each user request, and is rooted in anticapitalist, autonomous movement principles emphasizing solidarity and self-organization. The page itself provides little detail on the sanctions beyond the headline, focusing mainly on the collective's mission and service request process. | |
HN Discussion:
| |
| 5. | Just the rumour of a bug is enough to find an exploit these days(anil.recoil.org) |
| 378 points by avsm 13 days ago | 123 comments | permalink | |
tl;dr: An OCaml cohttp maintainer observed automated exploit probes hitting his server within 10 minutes of opening a public PR for a path traversal fix, and found his own LLM agent could generate a working exploit in under a minute from just a vague description. He argues that traditional security embargoes are now obsolete since LLM agents can derive exploits from mere rumors of a bug, citing data showing mean time-to-exploit has gone negative. Proposed responses include private patch coordination via web-of-trust, continuous shipping with better cross-ecosystem packaging, and protocol-layer virtual patching akin to Cloudflare's managed rules. | |
HN Discussion:
| |
| 6. | Inception-style curved map for turn-by-turn directions(orbify.eu) |
| 604 points by smoser 13 days ago | 189 comments | permalink | |
tl;dr: Summary not available. | |
HN Discussion:
| |
| 7. | Our decision on Cursor following its acquisition by SpaceX(openai.com) |
| 802 points by meetpateltech 12 days ago | 493 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 8. | The Twelve-Factor App (2025)(12factor.net) |
| 311 points by jxmorris12 13 days ago | 170 comments | permalink | |
tl;dr: The Twelve-Factor App is a methodology for building SaaS applications that are portable, scalable, and suitable for cloud deployment, originally synthesized from Heroku's experience with thousands of apps. The twelve factors cover practices like using a single codebase with many deploys, explicit dependency declaration, storing config in environment variables, treating backing services as attached resources, separating build/release/run stages, running stateless processes, and treating logs as event streams. The 2025 revision maintains the language-agnostic principles aimed at minimizing dev/prod divergence and enabling continuous deployment. | |
HN Discussion:
| |
| 9. | GLM-5.3 is now open-weight(huggingface.co) |
| 797 points by jeudesprits 13 days ago | 279 comments | permalink | |
tl;dr: Z.ai released GLM-5.3 as open-weights, built on the same base as GLM-5.2 but with post-training improvements yielding ~50% coding gains and open-source SOTA on Terminal Bench 3.0 and Agents' Last Exam. The model also shows sharp jumps in cybersecurity capability, more than doubling GLM-5.2 on exploitation benchmarks and topping CyberGym. It supports deployment via SGLang, vLLM, Transformers, and Ascend NPUs, with a configurable reasoning_effort parameter (low/high/max). | |
HN Discussion:
| |
| 10. | Judge rules Trump administration’s blacklisting of Anthropic was illegal(nytimes.com) |
| 630 points by jbegley 13 days ago | 432 comments | permalink | |
tl;dr: Summary not available | |
HN Discussion:
| |
| 11. | Get your Windows license refund(en.refund4freedom.org) |
| 715 points by smartmic 13 days ago | 325 comments | permalink | |
tl;dr: The FSFE and Italian Linux Society are campaigning for consumers' right to refuse and get refunds for pre-installed Windows licenses on new laptops, arguing manufacturers shouldn't force OS purchases. The site details each major vendor's refund policies (HP and Dell refuse; Lenovo, Asus, and Acer have procedures of varying difficulty) and documents successful case histories, mostly in Italy, where users obtained refunds ranging from €40–129, often only after legal action. | |
HN Discussion:
| |
| 12. | Doctors are finally learning to manage antidepressant withdrawal(newscientist.com) |
| 282 points by eutropheon 13 days ago | 351 comments | permalink | |
tl;dr: Growing research shows SSRI withdrawal is far more common and severe than long assumed, with studies finding up to 79% of users experience withdrawal symptoms and many unable to fully quit — problems often misdiagnosed as depression relapse. Long-term use has also been linked to cardiac risks and faster cognitive decline, prompting new guidelines in the UK, Australia, and US that recommend slow, liquid-based tapering and periodic reassessment of prescriptions. Psychiatrists increasingly frame SSRIs as one tool alongside therapy and exercise, rather than a default long-term treatment. | |
HN Discussion:
| |
| 13. | “It works better in the app”(shkspr.mobi) |
| 688 points by blenderob 13 days ago | 467 comments | permalink | |
tl;dr: Google's Android Calendar app inexplicably can't subscribe to a calendar via URL—you have to open the desktop web version to do it, then the calendar magically appears in the app. The author argues this pattern is endemic: companies push users into apps for engagement metrics, but half-build them and punt users back to the web for anything nontrivial, defeating the entire point of having a native app. | |
HN Discussion:
| |
| 14. | Nvidia agrees to acquire Hugging Face for $13B(businessinsider.com) |
| 1966 points by mfiguiere 14 days ago | 905 comments | permalink | |
tl;dr: Nvidia is reportedly in talks to acquire Hugging Face at a valuation over $13 billion, though no deal has been finalized and negotiations could still collapse. Nvidia previously invested in Hugging Face's $235M round in 2023, and the platform rejected a $500M investment offer last year over concerns about a dominant investor. An acquisition would give Nvidia deeper access to the open-source AI developer ecosystem, but could undermine Hugging Face's neutrality, since it currently supports competing hardware from AMD and Intel. | |
HN Discussion:
| |
| 15. | Luanti removed from Google Play due to baseless AI copyright notice(blog.luanti.org) |
| 515 points by miniBill 13 days ago | 151 comments | permalink | |
tl;dr: Luanti (formerly Minetest), an open-source voxel game-creation platform, was pulled from Google Play after Tracer.AI filed an AI-generated DMCA notice on Microsoft's behalf alleging Minecraft copyright infringement, despite Luanti shipping with no Minecraft assets or code. This is the second such bogus takedown from the same company—the first in 2023 took 46 days to reverse, exceeding DMCA's 10-14 business day limit. The Luanti team has filed a counter-notice and is calling on Microsoft, Tracer.AI, and Google to stop rubber-stamping unverified AI-driven copyright claims. | |
HN Discussion:
| |
| 16. | Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache(blog.cloudflare.com) |
| 904 points by TangerineDream 13 days ago | 280 comments | permalink | |
tl;dr: Cloudflare cut per-entry memory in 1.1.1.1's DNS cache by 56% (from 953 to 420 bytes) through five Rust-level optimizations: replacing `Vec`/`String` with `Box<[T]>`/`Box<str>`, merging record sections with offsets, dropping redundant owner names, boxing large enum variants, and storing record data in raw wire format. Across the fleet this freed ~100TB of RAM, while also boosting insert throughput 43% and cutting lookup latency 19% thanks to better memory locality and fewer allocations. | |
HN Discussion:
| |
| 17. | Hilariously fast volume computation with the divergence theorem (2018)(alyssarosenzweig.ca) |
| 261 points by luu 13 days ago | 67 comments | permalink | |
tl;dr: Using the divergence theorem with F = ⟨x,0,0⟩, the volume of a closed triangulated mesh reduces to a simple sum over triangles, requiring only ~11 floating-point operations per triangle (no numerical integration needed). The resulting formula is V = (1/6) Σ (Δ₁×Δ₂)ₓ · (T₀ₓ + T₁ₓ + T₂ₓ), which is O(n) and fast enough to process ~30 million triangles per frame at 60fps on a Raspberry Pi. The author notes the algorithm likely isn't novel—a similar approach appears in prior work by Zheng and Chen. | |
HN Discussion:
| |
| 18. | Small Models Have Arrived(calv.info) |
| 786 points by tosh 14 days ago | 345 comments | permalink | |
tl;dr: Small, fast models like "gpt-5.6-luna" and GLM 5.3 have become capable enough to handle complex tasks (research, personalized news aggregation) at costs around $0.10 instead of $1+, potentially unlocking consumer AI apps that were previously uneconomical due to token costs. The author argues that while frontier models will remain essential for "IQ 180" novel problem-solving, most business work is "token spewer" grunt work—responsiveness, follow-ups, coordination—where cheap/good-enough models could soon dominate, pending advances in harnesses, safety, and permissions. | |
HN Discussion:
| |
| 19. | Sovereign Tech Agency invests €500k in Flatpak(modal.cx) |
| 265 points by eigenspace 13 days ago | 137 comments | permalink | |
tl;dr: Germany's Sovereign Tech Agency is investing €508,640 over two years to advance Flatpak's sandboxing and security capabilities, which currently lag behind Android and iOS. The funding will support new Portals for audio (separating speaker/microphone access), networking, VPNs, spell checking, and password auto-fill, plus infrastructure work on entitlements, intents, and general maintenance. The project runs through 2027 with contractors from the previous GNOME STF effort. | |
HN Discussion:
| |
| 20. | 507 Mechanical Movements(507movements.com) |
| 664 points by helloplanets 14 days ago | 80 comments | permalink | |
tl;dr: An online adaptation of Henry T. Brown's classic technical reference "507 Mechanical Movements," featuring animated versions of the original illustrations. Not all 507 movements are animated yet—completed ones are marked with color thumbnails—and more are being added over time. | |
HN Discussion:
| |