← Nov 4Thursday, November 5, 2026 · all daysNov 6 → · today »
1.Residential proxies detected on White House network(layer3intel.com)
1247 points by Rasbora 7 days ago | 431 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • ↑Warns of broader security implications including potential C2 capabilities and SCIF device risks
  • ↑Infers the infected device likely belongs to a specific person working late evenings
  • ↓Skeptical the network is actually the White House; sees post as marketing for a new service
  • •Questions whether ISPs or mobile carriers themselves are reselling connections as proxies
  • ~Criticizes admins for not blocking or locating the compromised device
2.Images 2.6(openai.com)
376 points by davidbarker 7 days ago | 233 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • ↓Example images shown have poor artistic quality and visual issues
  • ↓Image generation has plateaued or regressed compared to other AI fields
  • ↓Tooling and features (outpainting, design controls) have regressed over time
  • ↓Model fails at practical tasks like consistent sprites or accurate attributes
  • •Curiosity and skepticism about new features like SVG and animation frames
3.A thousand fewer paths to root(openai.com)
477 points by dangelosaurus 7 days ago | 356 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • •Wants more technical details and breakdown of vulnerabilities to assess findings
  • ~Findings suggest a deeper design flaw requiring architectural fixes, not per-patch remediation
  • ↓Skeptical the numbers are inflated OpenAI marketing, likely duplicates rather than unique vulns
  • ~Concerned about asymmetric access to these tools enabling attackers over defenders
  • ↓Withholding technical details under 'safety' is unjustified since patches are public
4.Kimi K3.1 Pro model weights are out(huggingface.co)
625 points by abrarthought 7 days ago | 186 comments | permalink
tl;dr: Moonshot released open weights for Kimi K3.1 Pro, a 2.8T-parameter MoE model (104B activated) with a 1M-token context, natively multimodal input, and Gated DeepSeek Sparse Attention replacing the prior Gated MLA layers for long-context efficiency. Benchmarks show it competitive with Claude Opus 5.5, GPT-6 Astra, and Claude Fable 5.1 on coding and agentic tasks (e.g., leading on SWE Marathon, BrowseComp, and HLE-Full with tools), while trailing on some reasoning benchmarks like HLE-Diamond. It ships with MXFP4 quantization-aware training and is deployable via vLLM, SGLang, and TokenSpeed.
HN Discussion:
  • ~Model is too large for consumer hardware, limiting accessibility despite being 'open'
  • ↓Benchmarks are suspect/benchmaxxed and model doesn't truly compete with frontier offerings
  • ↑Release is a meaningful step toward commoditizing inference and breaking concentrated AI power
  • ↑Model performs well in real-world testing despite benchmaxxing accusations
  • •Third-party inference providers are rapidly hosting it with room for price/throughput optimization
5.Ripple-65B Preview: U.S. Open-Weight SOTA on Agentic Coding(ricursive.com)
334 points by Philpax 7 days ago | 122 comments | permalink
tl;dr: Ripple-65B Preview, a US open-weight model, hit 80.5 on TerminalBench 2.1 for agentic coding using only 1.4M RL rollouts—roughly 70x fewer than the prior SOTA (Reflection Beam). The team skipped brute-force RL scaling and purchased post-training data, instead building their own synthetic data pipelines and a mixed RL recipe featuring truncated importance sampling, score centering, and linear length penalty on long-horizon synthetic environments, with task difficulty scaled progressively as the model improved.
HN Discussion:
  • ↓SOTA claim is diluted by narrow category qualifiers like US-made, open-weight, size class
  • ↓Model is impractical for hobbyists due to 65B dense architecture being slow on consumer hardware
  • ↓Article omits comparisons to competing open models like Qwen, suggesting benchmark cherry-picking
  • ↑US jurisdiction restrictions make this differentiation genuinely relevant for some users
  • ↓Real-world testing shows poor tool-calling reliability, undermining the benchmark claims
6.A new Go API for JSON(go.dev)
388 points by olexsmir 7 days ago | 201 comments | permalink
tl;dr: Go 1.27 ships stable `encoding/json/v2` and `encoding/json/jsontext` packages, addressing long-standing issues in the original JSON library: invalid UTF-8 acceptance, duplicate object keys, case-insensitive field matching, nil slice/map handling, and performance limitations in `MarshalJSON`/`UnmarshalJSON`. The new API separates syntax (jsontext) from semantics (json/v2), supports streaming via new `MarshalerTo`/`UnmarshalerFrom` interfaces, and accepts options as first-class arguments, with unmarshal benchmarks up to 10x faster. v1 is now implemented on top of v2, ensuring interoperability and enabling gradual migration via opt-in behavior flags.
HN Discussion:
  • ↑Welcomes the new API as a positive fix to long-standing JSON issues
  • ↑Praises specific packages like jsontext based on real-world usage experience
  • ~Appreciates v2 but criticizes specific omissions like MarshalIndent making migration painful
  • ↓Concerns that certain new defaults (nil slice/map handling) are flawed and will need future fixing
  • ~Questions the 6-year timeline and notes JSON's inherent complexity across languages
7.Insects don't swarm at LED lights(birdsoutsidemywindow.org)
307 points by speckx 7 days ago | 160 comments | permalink
tl;dr: Insects are drawn to incandescent lights because they emit UV wavelengths that mimic moonlight, which flying insects use to orient themselves. LEDs convert energy almost entirely into visible light without UV emissions, making them far less attractive to insects—a 2016 University of Bristol study confirmed LEDs caught significantly fewer insects than incandescent or compact fluorescent bulbs. The widespread switch to LEDs may reduce ecological disruption to insect populations, though it also means fewer bugs (and the geckos that eat them) congregating around porch lights.
HN Discussion:
  • ↓Personal experience contradicts the article: insects do swarm LED lights
  • ↓The article's UV/moonlight premise is scientifically wrong
  • ~LED flicker/PWM may be the actual factor affecting insect behavior, not UV
  • ↓Article oversimplifies by ignoring other variables like IR and full spectrum
  • ↑UV is indeed key to attracting insects, supporting the article's mechanism
8.Ask HN: What's your current AI agentic setup?
512 points by eggbrain 7 days ago | 638 comments | permalink
tl;dr: An Ask HN thread soliciting details on readers' current AI workflows, including which subscriptions they pay for (Claude, ChatGPT, Cursor, etc.) and at what tiers, whether they supplement with APIs, OpenRouter, or local models, and what coding harnesses (CLIs, IDE integrations, Aider, OpenCode) they prefer. The poster also asks about agent orchestration/swarm tools and broader agent platforms, noting workflows have shifted significantly in the past year and wanting a current snapshot.
HN Discussion:
  • •Minimal or no AI usage, still coding mostly manually with light tool exploration
  • ↑Settled on a single simple setup (Claude Code or Codex) after models became good enough
  • ↑Complex multi-model, multi-subscription setups with custom orchestration harnesses and message buses
  • •Rely on work-provided AI access rather than personal subscriptions, supplemented by API credits
  • ↑Built custom harnesses to manage multi-task workflows, kanban, and cross-machine coordination
9.AI is forcing us to pay off 40 years of technical debt(spectrum.ieee.org)
1292 points by pseudolus 7 days ago | 748 comments | permalink
tl;dr: AI-assisted auditors at Calif (sponsored by OpenAI) turned a long-ignored PHP out-of-memory crash bug into a critical RCE vulnerability dubbed PHP2Shell, affecting sites running WordPress, Drupal, and others. The incident highlights how AI is making it feasible to exploit decades of accumulated legacy bugs that were previously too tedious to weaponize, creating an asymmetric burden on open-source maintainers. Researchers hope LLM-generated patches paired with formal verification (like Anthropic's recent release) can help defenders keep pace, but some expect no serious investment until a truly catastrophic breach occurs.
HN Discussion:
  • ~Hopes AI-driven vulnerability discovery will incidentally expose nation-state backdoors and ultimately produce more robust software
  • ↓AI is a net positive enabling developers to finally pay down years of technical debt efficiently
  • ↓Short-term pain from exposed bugs is worth it since software will emerge more secure than ever
  • ~Questions whether this is real debt payoff or an endless treadmill of fix-work that can't be surgically patched
  • ↑AI is simultaneously introducing new technical debt at a faster rate than it fixes old debt
10.Progress on provable inference for large language models(anthropic.com)
236 points by ltononro 7 days ago | 121 comments | permalink
tl;dr: Anthropic researchers released FlashProve, an open-source zkSNARK-based system for provable inference that lets users cryptographically verify a response came from a specific committed model without revealing its weights. On Llama 4 Maverick (400B MoE, 4-bit), a single H100 generates proofs at ~110 tokens/sec with 19MB proofs verifiable in seconds on CPU—roughly 70-95x slower than vLLM inference, but orders of magnitude faster than prior open-source zkML work. The system includes Lean formal verification of soundness, completeness, and zero-knowledge properties, though limitations include 1,024-token context, integer-only greedy decoding, and no architecture hiding.
HN Discussion:
  • ↓Claims the work builds on their prior research without proper attribution
  • ~Welcomes the advance as meaningful progress but notes cheaper probabilistic alternatives exist
  • ↓Questions practical feasibility given batched inference and heterogeneous hardware reality
  • ↓Argues the proven property isn't very useful and doesn't address real concerns like data exfiltration or quantization
  • ↓Competing practitioners note their solutions are faster and less limited than FlashProve
11.Starfall – Affordable, routine access to microgravity(spacex.com)
284 points by gmays 7 days ago | 230 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • ↑Supports increased launch cadence for valuable microgravity research like fluids and biology
  • ↑Highlights promising manufacturing applications like semiconductors and pharmaceutical crystallization in microgravity
  • ↑Praises SpaceX's expanding internal capabilities enabling such ventures
  • ~Raises competitive concerns about Varda given overlap with their launch provider
  • •Questions commercial use cases or suggests cheaper terrestrial alternatives like drop towers
12.Guerrilla bike lanes: San Francisco makes illicit infrastructure permanent (2016)(99percentinvisible.org)
338 points by zenincognito 7 days ago | 281 comments | permalink
tl;dr: After two cyclists were killed, the anonymous SF Transformation Agency (SFMTrA) illegally installed soft-hit posts along Golden Gate Park to create protected bike lanes. Rather than removing them as usual, the city opted to make the installation permanent, pending an official review. Similar guerrilla urbanism efforts have had mixed results in Seattle (eventually accepted) and NYC (where activists have painted entire unauthorized bike lanes).
HN Discussion:
  • ↑Similar guerrilla infrastructure efforts have succeeded elsewhere, validating the approach
  • ↑Bike infrastructure is inadequate and needs improvement, supporting the need for action
  • ~Authorities can respond harshly to guerrilla urbanism, making SF's acceptance notable
  • ↓Bikes fundamentally don't fit in existing urban infrastructure regardless of lanes
  • ↓Legal action against reckless drivers is a better solution than infrastructure changes
13.OpenAI to acquire Pierre Computer Company(openai.com)
261 points by itunpredictable 7 days ago | 91 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • •Connects acquisition to OpenAI's git scaling needs and Mitchell Hashimoto's involvement with Pierre
  • ~Jokes that acquisitions are now cheaper than paying subscription fees
  • ~Speculates acquisitions help AI labs harvest expert workflows to build training datasets
  • ↑Highlights the pedigree of Pierre's founders (original Bootstrap devs)
  • ↓Criticizes the announcement for lacking context about what the acquired startup actually does
14.Tencent Hy4(hy.tencent.ai)
290 points by Philpax 7 days ago | 134 comments | permalink
tl;dr: Summary not available
HN Discussion:
  • ↑Appreciates honest acknowledgment of gap with proprietary models, sees open models as useful tools
  • ↑Finds the game development focus and partnership with Tencent IEG noteworthy
  • ↑Benchmarks confirm the model is competitive on cost/accuracy, though slow
  • ~Pricing is interesting but higher than expected; raises concerns about US-China AI competition
  • ↓Notes concerning capability reductions in cybersecurity skills similar to other Chinese models
15.AMD expects to outsell Intel in Q4 for the first time in history(tomshardware.com)
578 points by rbanffy 7 days ago | 221 comments | permalink
tl;dr: AMD posted record quarterly revenue driven by nearly doubled year-over-year sales of Epyc data center CPUs and Instinct AI accelerators, while client segment declines were modest. The company guided Q4 revenue to roughly $17 billion, which would surpass Intel's quarterly revenue for the first time ever.
HN Discussion:
  • ~Intel's own failures and complacency, not AMD's excellence, explain the shift
  • ↑AMD's rise is deserved and healthy competition benefits the market
  • ↑AMD is the only hope to challenge NVIDIA's GPU dominance and pricing
  • ↑Personal bad experiences with Intel products justify switching to AMD
  • ~Intel still competes well in retail/desktop through aggressive pricing, qualifying AMD's win
16.Tell HN: Gemini trains on chat history, even for subscribers (personal accounts)
712 points by jameslk 7 days ago | 184 comments | permalink
tl;dr: Google's paid Gemini subscriptions still use personal chat history to train AI models by default, with a subset reviewed by humans and retained up to three years even after deletion. The only way to opt out is disabling "Keep Activity," which also wipes chat history after 72 hours. Google explicitly warns users not to enter confidential information, contradicting the common assumption that paying for AI services exempts you from being the product.
HN Discussion:
  • ↑Offers workarounds like Notebooks, local models, or disabling activity to preserve privacy
  • ~This is unsurprising and expected behavior from Google and other data-driven companies
  • ↓All frontier AI providers do this, so singling out Google is misleading
  • ↑The problem is worse than stated, as it also cripples Pixel phone functionality and app integrations
  • ↑Users should assume everything typed is stored forever regardless of TOS or payment
17.Nvidia RTX Spark encrypted firmware slows inference speed to 35% on Linux(mindstudio.ai)
611 points by novaRom 7 days ago | 286 comments | permalink
tl;dr: Nvidia RTX Spark laptops like the MSI Prestige run Linux with GPU acceleration, but the GPU gets locked to ~780 MHz when plugged in (vs ~2.2 GHz on Windows), cutting inference throughput by roughly 5x on a 120B model. The culprit is the Windows-only Nvidia Platform Controllers and Framework, which decrypts a firmware power table that Linux has no key for. Until Nvidia ports that power management logic to its Linux driver, WSL is the practical workaround since it inherits Windows' driver stack and full GPU boost.
HN Discussion:
  • ↑Nvidia's closed/proprietary driver approach is the root problem and makes it a poor Linux choice
  • ↓The article's title is misleading, confusing RTX Spark laptop with DGX Spark
  • ↑Readers should actually read the article since this is a Linux driver gap for Windows-designed firmware
  • ~The firmware encryption can likely be reverse-engineered to produce a community fix
  • •This situation highlights broader concerns about dependence on centralized/cloud AI and sovereignty
18.North Korean fake job interview led to $6.3B Binance heist(theregister.com)
644 points by smalltech 7 days ago | 380 comments | permalink
tl;dr: North Korean hackers (TraderTraitor/Lazarus) pulled off a $6.3B Binance heist by social-engineering an engineer through a fake job interview, tricking them into running a malware-laced "assignment" that replaced a legitimate pyenv binary with a malicious version. The attackers then pivoted via an internal AI tool to compromise two wallet DevOps engineers, stole a container deployment token, and used it to launch the theft on October 29. Binance has since rebuilt the wallet system, rotated all credentials, and is working with law enforcement to trace funds.
HN Discussion:
  • ~Real failure was weak deployment security (tokens on laptops instead of CI-only)
  • ↑Engineer acted irresponsibly by misusing work laptop for outside interviews
  • ~The compromised internal AI tool is the overlooked critical vulnerability here
  • ↑Fake NK recruiter scams are widespread; platforms like LinkedIn fail to combat them
  • ↑Personal anecdotes confirming encounters with suspected North Korean fake interviewers/recruiters
19.Kitty 0.50(sw.kovidgoyal.net)
382 points by porridgeraisin 7 days ago | 243 comments | permalink
tl;dr: Kitty 0.50 adds dockable windows for status bars and file trees, session restoration across logouts (encrypted via keychain on macOS), and tabs usable as named workspaces. Notable additions include touchscreen support and native-looking decorations on Wayland, new cursor-trail shaders with key-triggered shader events, indexed color images in the graphics protocol, support for the Program Status Protocol (OSC 7501), and automatic color themes that preserve program-set colors. The release also fixes a remote control authentication bypass, numerous terminal emulation bugs, and various memory safety issues.
HN Discussion:
  • ↑Enthusiastic experimentation with new shader features like screenshake on command failure
  • ↑Appreciation for the author Kovid Goyal's broader work including Calibre
  • ↑Long-time users praising Kitty's balance of speed, customization, and focus
  • ↑Comparison with competing terminals (Ghostty, Rex) noting Kitty still comes out ahead
  • •Sharing tips/tools to customize or extend Kitty, like disabling window management or document viewing
20.Verification Is Not Knowledge: Science needs more than answers(blog.cosmos-institute.org)
242 points by ersinesen 7 days ago | 138 comments | permalink
tl;dr: Hullman argues that debates over AI in science reflect a lingering "value-free ideal" that treats verified correctness as equivalent to knowledge, sidelining human understanding as optional. Drawing on philosophers like Longino and Brandom, she contends that scientific knowledge depends on accountable agents who can justify claims, absorb criticism, and be held responsible—capacities today's non-persistent AI agents lack. Even if AI became accountable, science would still require humans with the trained judgment to interrogate its outputs, or we risk a field producing answers no one can meaningfully evaluate.
HN Discussion:
  • ↓Historical precedent shows science often adopts useful results before understanding them
  • ↑Human mathematicians who generate understanding are complementary and irreplaceable by AI
  • ↑Academia is already abandoning epistemology in favor of AI-driven paper production
  • ~AI-generated answers can serve as a foundation for humans to build deeper understanding
  • ↓Practical impact of discoveries may be independent of human understanding of them