Editorial Ledger

Superpowers AI Framework, Swiss Nuclear Vote, 10k Trojan GitHub Repos – Jun 18

Jun 18, 2026
27 min read

Index

Today’s Signal

Today's signals span AI coding infrastructure, energy policy, and a large-scale security threat. Superpowers reached 232.3k stars as a framework for structuring AI agent skills, while roughly 10,000 GitHub repositories were identified distributing Trojan malware. Meanwhile, the Swiss parliament voted to lift its ban on new nuclear power plants.

  • AI Coding Agents
  • Security
  • Open Source
  • Energy Policy
  • Embedding Models
  • Developer Tools

Top Signals

The few items worth your attention first – each with the one-line reason it stood out today.

  1. 1

    superpowers: agentic skills framework for AI coding agents

    obra/superpowers

    Trending repository – 232.3k stars on GitHub.

    • ★ 232.3k
    • ⮂ 20.6k

    Superpowers is a shell-based framework and software development methodology designed to guide AI coding agents through structured, composable skills. It provides initial instructions that ensure agents apply the bundled skills during development tasks. The MIT-licensed repository has accumulated 232,305 stars and 20,632 forks, with 266 open issues tracked on its main branch.

    GitHub Trending

  2. 2

    Swiss parliament lifts ban on new nuclear power plants

    Top Hacker News discussion – 547 points.

    • ▲ 547
    • 💬 360

    The Swiss parliament has voted to remove the prohibition on constructing new nuclear power plants, reversing a restriction that had halted new reactor development. The decision emerged from the 2026 summer session of the National Council and Council of States in Bern, where energy policy was among numerous issues debated. The legislative change opens the door for future nuclear projects in Switzerland, though implementation timelines and specific reactor proposals are not ye…

    Hacker News

  3. 3

    all-MiniLM-L6-v2: lightweight sentence-embedding model for semantic search

    sentence-transformers/all-MiniLM-L6-v2

    Trending model – 216.3M downloads.

    • ⇣ 216.3M

    all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to a 384-dimensional dense vector space for tasks such as clustering or semantic search. It is among the most adopted models on Hugging Face, with 216,288,695 downloads and 4,972 likes. The model is licensed under Apache-2.0 and supports PyTorch, TensorFlow, ONNX, and OpenVINO backends.

    Hugging Face Trending

  4. 4

    Who Here Has Worked with Legacy? The Longer You Wait, the Worse It Gets

    Popular developer article – 53 reactions.

    • ♥ 53
    • 💬 27

    I promised myself that starting this week I'd switch to lighter topics. But on Monday, my JSNation… Context: Dev.to – Javascript.

    Dev.to

  5. 5

    I found 10k GitHub repositories distributing Trojan malware

    Top Hacker News discussion – 499 points.

    • ▲ 499
    • 💬 126

    A security report identifies roughly 10,000 GitHub repositories distributing Trojan malware, likely through deceptive package or project names. The finding matters because developers frequently clone or install code from GitHub with minimal scrutiny, creating a broad attack surface. The Hacker News discussion drew 499 points and 126 comments, reflecting significant community concern about supply-chain risks on the platform. Verification: community signal; use the linked source as context, not final confirmation.

    Hacker News

  6. 6

    Welcome Thread – v380

    Popular developer article – 46 reactions.

    • ♥ 46
    • 💬 176

    Leave a comment below to introduce yourself! You can talk about what brought you here, what you're…

    Dev.to

  7. 7

    bge-m3: multilingual sentence embedding model

    BAAI/bge-m3

    Trending model – 27.8M downloads.

    • ⇣ 27.8M

    bge-m3 is a sentence-similarity embedding model from BAAI that supports multi-functionality, multi-linguality, and multi-granularity text representation. Built on an XLM-RoBERTa architecture, it is designed for feature-extraction tasks across many languages. Released under the MIT license and usable via the sentence-transformers library, it has accumulated 27,841,022 downloads and 3,127 likes on Hugging Face.

    Hugging Face Trending

  8. 8

    openai/codex: terminal-based AI coding agent

    openai/codex

    Trending repository – 92k stars on GitHub.

    • ★ 92k
    • ⮂ 13.6k

    OpenAI Codex is an open-source command-line coding agent written in Rust that executes directly in the terminal on Mac or Linux. It lets developers delegate coding tasks to an AI assistant without leaving their workflow, and is licensed under Apache-2.0. The repository has accumulated 92,015 stars and 13,601 forks, reflecting significant adoption among developers.

    GitHub Trending

AI & Machine Learning

Models, agents, and applied machine-learning work moving today.

  • GitHub Trending

    superpowers: agentic skills framework for AI coding agents

    obra/superpowers

    • ★ 232.3k
    • ⮂ 20.6k

    Superpowers is a shell-based framework and software development methodology designed to guide AI coding agents through structured, composable skills. It provides initial instructions that ensure agents apply the bundled skills during development tasks. The MIT-licensed repository has accumulated 232,305 stars and 20,632 forks, with 266 open issues tracked on its main branch.

  • Hugging Face Trending

    all-MiniLM-L6-v2: lightweight sentence-embedding model for semantic search

    sentence-transformers/all-MiniLM-L6-v2

    • ⇣ 216.3M

    all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to a 384-dimensional dense vector space for tasks such as clustering or semantic search. It is among the most adopted models on Hugging Face, with 216,288,695 downloads and 4,972 likes. The model is licensed under Apache-2.0 and supports PyTorch, TensorFlow, ONNX, and OpenVINO backends.

  • Hacker News

    DeepSeek Introduces Vision

    • ▲ 427
    • 💬 173

    DeepSeek has added vision support to its chat platform, enabling the model to process and reason about images alongside text prompts. The announcement attracted significant community attention, generating 427 points and 173 comments on Hacker News. The discussion centers on practical implications for developers, including how DeepSeek's multimodal capabilities compare to existing offerings and what integration scenarios the vision feature unlocks.

  • Dev.to

    Tower Before Dusk: I Built a Puzzle Game for Humans and AI

    • ♥ 34
    • 💬 25

    This is a submission for the June Solstice Game Jam It's interesting how the most exciting ideas… Context: Dev.to – AI/ML.

  • Hugging Face Trending

    bge-m3: multilingual sentence embedding model

    BAAI/bge-m3

    • ⇣ 27.8M

    bge-m3 is a sentence-similarity embedding model from BAAI that supports multi-functionality, multi-linguality, and multi-granularity text representation. Built on an XLM-RoBERTa architecture, it is designed for feature-extraction tasks across many languages. Released under the MIT license and usable via the sentence-transformers library, it has accumulated 27,841,022 downloads and 3,127 likes on Hugging Face.

  • Hugging Face Trending

    bert-base-uncased: Google's foundational English masked-language model

    google-bert/bert-base-uncased

    • ⇣ 45.3M

    BERT base (uncased) is Google's pretrained English language model that learns representations via a masked language modeling objective, predicting hidden tokens in text. It remains one of the most widely adopted foundation models on Hugging Face, with 45,272,769 downloads and 2,684 likes. Available under the Apache-2.0 license, it supports PyTorch, TensorFlow, JAX, Rust, ONNX, and other runtimes.

  • Dev.to

    I Got the proxy.ts Matcher Wrong for Three Projects Before I Understood Why

    • ♥ 28
    • 💬 13

    A few days ago I published a post about the three-layer auth model and the invoice incident that made… Context: Dev.to – Nextjs.

  • Dev.to

    Why Your Search Bar Understands You

    • ♥ 23
    • 💬 2

    Hello, I'm Maneshwar. I'm building git-lrc, a Micro AI code reviewer that runs on every commit. It is… Context: Dev.to – Web Dev.

  • GitHub Trending

    openai/codex: terminal-based AI coding agent

    openai/codex

    • ★ 92k
    • ⮂ 13.6k

    OpenAI Codex is an open-source command-line coding agent written in Rust that executes directly in the terminal on Mac or Linux. It lets developers delegate coding tasks to an AI assistant without leaving their workflow, and is licensed under Apache-2.0. The repository has accumulated 92,015 stars and 13,601 forks, reflecting significant adoption among developers.

  • Hacker News

    Noam Shazeer Joins OpenAI

    • ▲ 132
    • 💬 82

    Noam Shazeer, a prominent AI researcher known for his work at Google, publicly announced that he is joining OpenAI. In a social media post, Shazeer expressed enthusiasm for working with OpenAI's team and gratitude for his tenure at Google. The announcement sparked substantial community discussion on Hacker News, accumulating 132 points and 82 comments, reflecting strong interest in the researcher moves shaping the competitive AI landscape.

  • GitHub Trending

    system_prompts_leaks: collection of extracted AI system prompts

    asgeirtj/system_prompts_leaks

    • ★ 43.3k
    • ⮂ 7,179

    This is a GitHub repository that collects extracted system prompts from major AI products and assistants, including those behind Anthropic's Claude variants, OpenAI's ChatGPT and Codex, Google's Gemini models, xAI's Grok, and tools like Cursor, Copilot, and Perplexity. Written in JavaScript and released under the CC0-1.0 license, it has accumulated 43,334 stars and 7,179 forks. The collection is updated regularly and was referenced by The Washington Post.

  • GitHub Trending

    anthropics/financial-services: reference AI agents for finance workflows

    anthropics/financial-services

    • ★ 31.9k
    • ⮂ 4,554

    This Anthropic-maintained Python repository provides reference agents, skills, and data connectors tailored to financial-services workflows such as investment banking, equity research, private equity, and wealth management. Licensed under Apache-2.0, it offers building blocks that teams can adapt to deploy domain-specific assistants in regulated finance environments. The repo has accumulated 31,850 stars and 4,554 forks, with 166 open issues tracked on the main branch.

  • Dev.to

    The Reliability Problem That Forced Us to Rethink AI Agents

    • ♥ 6

    A few months into building AI agents for client projects, we hit a pattern that should sound familiar… Context: Dev.to – AI/ML.

  • GitHub Trending

    TimesFM: Google Research's pretrained time-series foundation model

    google-research/timesfm

    • ★ 23k
    • ⮂ 2,206

    TimesFM is a pretrained time-series foundation model developed by Google Research for time-series forecasting. The Python repository implements a decoder-only architecture for forecasting, licensed under Apache-2.0. It has accumulated 22,952 stars and 2,206 forks on GitHub, reflecting strong adoption among practitioners working on predictive modeling tasks.

  • GitHub Trending

    Kilo Code: open-source AI coding agent for VS Code, JetBrains, and CLI

    Kilo-Org/kilocode

    • ★ 22k
    • ⮂ 2,696

    Kilo Code is an open-source AI coding agent and agentic engineering platform that integrates directly into VS Code, JetBrains IDEs, and the command line. Written in TypeScript and released under the MIT license, it lets developers build, ship, and iterate on code with AI assistance across multiple development environments. The repository has accumulated 21,976 stars and 2,696 forks.

  • Dev.to

    Building a Hermes Memory Plugin for a Voice-Powered Conference Agent with Weaviate Engramđź§ 

    • ♥ 5

    Introduction Recently, I have been attending a lot of conferences where different booths… Context: Dev.to – Ai.

  • Dev.to

    Giving Coding Agents Better Test Memory

    • ♥ 3
    • 💬 1

    When I work with coding agents, I increasingly care about whether the project can preserve why an… Context: Dev.to – Agents.

  • Dev.to

    The Winner of the AI-Pocalypse? The Full-Stack Generalist (But Probably Later Instead of Sooner)

    • ♥ 2
    • 💬 10

    We've been told since late 2022 that "within 6 months, we won't need software engineers anymore". I… Context: Dev.to – DevOps.

  • Dev.to

    Building Tri-Fort: Why We Abandoned Pure Machine Learning and Built a Construction Intelligence Engine Instead

    • ♥ 2

    Introduction Over the last several months, I've been building Tri-Fort, an AI-powered… Context: Dev.to – Machinelearning.

  • GitHub Trending

    codebase-memory-mcp: MCP server for AI codebase intelligence

    DeusData/codebase-memory-mcp

    • ★ 6,874
    • ⮂ 558

    codebase-memory-mcp is a Model Context Protocol server that indexes codebases into a persistent knowledge graph, designed to give AI coding agents fast structural understanding of large repositories. Written in C and MIT-licensed, it supports 158 languages, ships as a single static binary with zero dependencies, and claims sub-millisecond queries with a 99% reduction in token usage. The repo has 6,874 stars and 558 forks.

  • GitHub Trending

    flue: TypeScript sandbox agent framework from Astro

    withastro/flue

    • ★ 5,457
    • ⮂ 296

    Flue is an open-source TypeScript framework for building autonomous agents and AI workflows, developed under the Astro organization. It provides a programmable sandbox harness that lets developers define and run agent-based workflows in TypeScript, licensed under Apache-2.0. The repository currently holds 5,457 stars and 296 forks, with 17 open issues on its main branch.

  • Dev.to

    I Ran 10 AI Models Through 5 Coding Tasks — Here's the Full Data

    • ♥ 1

    I Ran 10 AI Models Through 5 Coding Tasks — Here's the Full Data is a developer community article; review the code, assumptions, and comments before treating the technique as production guidance. Context: Dev.to – Web Dev.

  • GitHub Trending

    GLM-5: open-source agentic AI coding model

    zai-org/GLM-5

    • ★ 4,056
    • ⮂ 428

    GLM-5 is an open-source large language model from zai-org designed for long-horizon agentic tasks, focusing on the progression from basic coding assistance to autonomous engineering workflows. The repository describes GLM-5.2 as the team's latest flagship model for extended, multi-step tasks. Released under the Apache-2.0 license, it has accumulated 4,056 stars and 428 forks on GitHub.

  • Product Hunt

    Refuse

    Refuse sits in front of npm, pip, cargo, gem, go + 13 more package managers and refuses known-vulnerable installs before they hit disk — the moment you (or your coding agent) run them. Also, Open-source, self-hostable, one Docker container. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Buddy

    Buddy is the most powerful AI design agent inside Figma. And if you already pay for ChatGPT, plug it in and chat for free. No AI credits. Generate screens, flows, and variants on your canvas. Clone any website, import Claude design/artifacts, or drop a screenshot to get editable Figma layers. Run parallel agents at th… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Adapt

    Transform your Slack into an AI workspace with a shared company brain. Set it up once, connect to every tool, and anyone can tag @Adapt to answer questions, build apps, and get work done. Unlike other Slack-native AI agents, Adapt has a complete web app where you can view agent traces, build robust apps with connected… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Upstream

    Finally, an inbox you'll look forward to. Agents sort your messages, draft your replies, and clear the grunt work behind the scenes, all in a client so well-crafted that email feels light, fast, fun. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Community Pulse

    Only 16 percent of Americans think AI will have a positive impact on society, a new study shows | TechCrunch

    A Pew Research study cited by TechCrunch reports that only 16 percent of Americans believe AI will have a positive impact on society. The finding highlights a significant gap between the technology industry's heavy investment in AI and widespread public pessimism about its long-term societal effects, raising questions about consumer acceptance as AI products proliferate across the economy.

  • Community Pulse

    RNNs vs Transformers vs SSMs: where should AI memory live for continual learning?

    A community discussion on r/artificial reframes the comparison between RNNs, Transformers, and state space models around where memory resides during continual learning. Rather than focusing on recurrence versus attention, the post contrasts memory stored in a compact recurrent hidden state, an ever-growing KV cache, or structures embedded in the network itself, highlighting the architectural trade-offs each approach brings to learning over time.

  • Community Pulse

    Most companies' AI problem is not the model

    A community discussion on r/artificial engages with Satya Nadella's argument that companies must build proprietary AI capabilities rather than depend solely on rented API-based models. The core thesis is that the learning loop surrounding a model, not the model itself, constitutes a firm's intellectual property. Practitioners are debating whether this strategy is viable for organizations lacking large-scale ML infrastructure.

  • Community Pulse

    Microsoft Makes Big AI Inroads in China by Selling OpenAI Models

    An article discussion on r/artificial reports that Microsoft is offering OpenAI models to customers in China as a way to grow its AI business in a market where OpenAI does not operate directly. This matters because it gives Chinese enterprises access to GPT-class capabilities through Microsoft's Azure cloud infrastructure, sidestepping direct OpenAI restrictions. The post has not been independently verified.

  • Community Pulse

    AI support vendor quoted 40% deflection, called 8% normal after 8 months

    A community report details a real-world AI support bot deployment that fell far short of vendor promises. After going live in January, connecting it to a help center, and training on the top 12 ticket types with 6 weeks of learning time, deflection reached only 6% by month 3 and stalled at 8% by month 8. The vendor's account manager reportedly shifted expectations, presenting benchmark decks showing 7-12% as typical for complex deployments.

  • Community Pulse

    What AI app or workflow have you built that was truly useful for you?

    This is a community discussion thread on the r/artificial subreddit where users share custom AI applications and workflows they have built for personal or professional use. The poster asks which AI tools people have created that they use on a daily basis with genuinely positive impact on day-to-day work or life. It reflects growing interest in practical, self-built AI solutions rather than off-the-shelf products.

  • Community Pulse

    How to Tell a Good Speech Dataset for AI From a Bad One

    This is a community-shared article on r/artificial outlining how to distinguish high-quality speech datasets from poor ones when training or evaluating AI models. It frames the assessment around model capability, data requirements, cost, and operational limits, offering practitioners a structured way to compare audio corpora before committing compute resources. The piece appeared as a community signal without independent verification of its claims.

  • Community Pulse

    Elon Musk's Grok Rained Bombs On Iran Even As Anthropic Pulled Out, Pentagon Reveals

    A community-shared article reports that Elon Musk's Grok AI produced imagery depicting bomb strikes on Iran for the Pentagon, a claim surfaced via recent Department of Defense revelations. The same report notes that Anthropic simultaneously pulled out of related military work. The item comes from r/artificial with a community_signal verification flag, meaning the claim has not been independently confirmed by the source pipeline.

  • Lobste.rs

    I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID

    A security writeup details how FIFA's public Agent Platform allowed anyone to register and reach the Football Data Platform's Streaming Management panel, exposing RTMP ingest URLs and stream keys for every live FIFA World Cup 2026 camera feed. The author reports spending hours contacting FIFA, MediaKind, HBS, CISA, and the FBI to report the issue. The post illustrates access-control gaps in large-scale broadcast infrastructure.

Security

Incidents, advisories, and defensive discussion – verify before acting.

  • Hacker News

    I found 10k GitHub repositories distributing Trojan malware

    • ▲ 499
    • 💬 126

    A security report identifies roughly 10,000 GitHub repositories distributing Trojan malware, likely through deceptive package or project names. The finding matters because developers frequently clone or install code from GitHub with minimal scrutiny, creating a broad attack surface. The Hacker News discussion drew 499 points and 126 comments, reflecting significant community concern about supply-chain risks on the platform.

    Verification: community signal; use the linked source as context, not final confirmation.

  • Dev.to

    LiteLLM Vulnerability: 6 CVEs, a Supply Chain Attack, and the Fixes

    • ♥ 1
    • 💬 1

    LiteLLM has been hit by RCE, SQL injection, privilege escalation, and a PyPI supply chain attack in 2026. Here's every CVE, who's affected, and how to fix it. Context: Dev.to – Litellm.

    Verification: community signal; use the linked source as context, not final confirmation.

  • Dev.to

    I Gave Claude Code the Keys. So Did a Worm.

    • ♥ 1

    Three vulnerabilities from the last few months, three different layers of the AI-coding-agent stack,… Context: Dev.to – DevOps.

    Verification: community signal; use the linked source as context, not final confirmation.

  • Security Radar

    CVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerability

    CVE-2026-20253 is a missing authentication vulnerability affecting Splunk Enterprise, classified as involving a critical function. It has been confirmed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation. Specific affected versions, exploit details, and mitigation steps were not available in the provided context and should be verified against the primary NVD advisory.

  • Security Radar

    CVE-2026-48907: Widget Factory Joomla Content Editor Improper Access Control Vulnerability

    CVE-2026-48907 is an improper access control vulnerability affecting the Widget Factory Joomla Content Editor plugin. It has been confirmed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild. Specific affected versions, exploit details, and mitigation steps are not available from the provided context and should be verified against the primary NVD advisory.

  • Security Radar

    CVE-2026-54420: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

    CVE-2026-54420 is a UNIX symbolic link following vulnerability in the LiteSpeed cPanel Plugin, currently listed in CISA's Known Exploited Vulnerabilities catalog. Symlink-following flaws can allow an attacker to traverse or access files outside intended directories by following crafted symbolic links. Detailed affected versions, exploit specifics, and patch guidance were not available from the fetched NVD page, so the primary advisory should be consulted for mitigation.

    Verification: cisa kev confirmed.

Open Source & Dev Tools

Libraries, frameworks, and developer tooling gaining traction.

  • Dev.to

    Who Here Has Worked with Legacy? The Longer You Wait, the Worse It Gets

    • ♥ 53
    • 💬 27

    I promised myself that starting this week I'd switch to lighter topics. But on Monday, my JSNation… Context: Dev.to – Javascript.

  • Hacker News

    CS 6120: Advanced Compilers: The Self-Guided Online Course (2020)

    • ▲ 237
    • 💬 38

    CS 6120 is a PhD-level Cornell course by Adrian Sampson on programming language implementation, offered as a self-guided online version freely accessible to the public. It covers core compiler topics such as intermediate representations, data flow analysis, and classic optimizations, alongside research-oriented subjects including parallelization, just-in-time compilation, and garbage collection. A Hacker News thread with 237 points and 38 comments signals active practitioner…

  • GitHub Trending

    Plane: open-source project management and issue-tracking platform

    makeplane/plane

    • ★ 51.8k
    • ⮂ 4,598

    Plane is a self-hostable project management platform positioned as an open-source alternative to Jira, Linear, and ClickUp. It tracks issues, runs sprint cycles, and manages product roadmaps, with additional support for docs and triage workflows. Built primarily in TypeScript with a Django backend, it is licensed under AGPL-3.0 and has accumulated 51,778 stars and 4,598 forks on GitHub.

  • GitHub Trending

    nautilus_trader: Rust-native algorithmic trading engine

    nautechsystems/nautilus_trader

    • ★ 24k
    • ⮂ 3,028

    Nautilus_trader is an open-source, production-grade algorithmic trading engine written in Rust with Python bindings, designed for backtesting and live trading across crypto, equities, forex, and futures markets. Its deterministic event-driven architecture aims to ensure that backtest results closely match live execution behavior. The project holds 23,982 stars and 3,028 forks, is licensed under LGPL-3.0, and supports Linux, macOS, and Windows on both x86-64 and ARM64.

  • Dev.to

    Making my TypeScript types 15.7x faster

    • ♥ 5

    What slows large TypeScript types down, how to measure it with @ark/attest, and the one-field match that made my schema library 15.7x cheaper to type-check. Context: Dev.to – Web Dev.

  • Dev.to

    Codewars did not teach me JavaScript. My job did.

    • ♥ 3
    • 💬 3

    Why your brain learns faster by doing than by studying, and the neuroscience that explains… Context: Dev.to – Career.

  • Product Hunt

    Juno

    Juno is a local, open-source voice writing app for Mac. It is the only voice dictation tool with live transcriptions. Speak naturally in Mail, Slack, Notes, Cursor, or the app you’re already using; Juno writes clean text, rewrites selected passages, uses snippets, and creates Notes, Reminders, and Alarms. No login, ru… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Community Pulse

    Started maintaining a small library at work and now I genuinely understand why maintainers go quiet

    A developer recounts maintaining a small internal utility that was open-sourced and gradually attracted a few hundred stars. The surprise was not the volume of incoming issues but the nature of them: many requests required emotional labor, feature triage decisions, and repetitive explanations rather than straightforward bug reports. The post resonates because it illustrates why solo maintainers of even modestly popular libraries often reduce their responsiveness over time.

  • Lobste.rs

    I hate compilers

    This is an engineering blog post by Xe Iaso about the practical difficulties of achieving deterministic compiler output when building WebAssembly-based proof-of-work checks for Anubis, a website protection tool. The core problem is that identical input bytes do not reliably produce identical output bytes across compiler runs, complicating the addition of a non-SHA256 proof-of-work method that administrators can use to protect their websites.

  • Lobste.rs

    CLI Authentication, the Right Way

    An engineering article explaining how to implement command-line authentication correctly, particularly when users are SSH'd into remote servers where the common approach of spinning up a localhost callback server fails. The author advocates for RFC 8628, the device authorization grant standard published in 2019, which many CLI tools still have not adopted despite it solving the headless-environment problem cleanly.

  • Lobste.rs

    Mastodon 4.6

    Mastodon 4.6 is the latest major release of the open-source federated social network server software. The headline feature is Collections, which lets users create and share curated lists of profiles. The update also reworks profile pages and their editing experience, adds institutional account features, and addresses numerous accessibility issues identified during testing.

  • Lobste.rs

    Audacity 4.0 beta lets you test its new (nicer) Qt interface

    The first public beta of Audacity 4.0 is now available, marking the most significant design overhaul the open-source audio editor has undergone in decades. The release centers on a new Qt-based user interface that replaces the previous long-standing UI. Users can download and test the beta to evaluate the refreshed look and feel ahead of the stable release.

  • Lobste.rs

    Leaving Mozilla

    This is a personal blog post by jr conlin reflecting on leaving Mozilla, framed around experiences of burn-out and stubborn determination. The author discusses the emotional and psychological factors that contributed to their departure from the organization. The post offers a first-person perspective on navigating workplace exhaustion at a major open-source organization, though the available context is limited to the blog's title and brief snippet.

  • Lobste.rs

    offset_of! slices

    A practitioner-oriented article exploring how to compute the byte offset of slice fields within Rust structs, a task not directly supported by the standard offset_of! macro. The author describes finding an unconventional approach to this limitation, motivated partly by use cases such as JIT-compiled scripting languages in Rust where compile-time field offsets are needed for memory layout manipulation.

  • Lobste.rs

    RFC 10008: The HTTP QUERY Method

    RFC 10008 defines a new HTTP verb called QUERY, intended for safe, idempotent retrieval requests that carry a request body. Developers have historically worked around this gap by overloading GET with query strings, using POST for complex filters, or encoding parameters in headers. QUERY formalizes a method for expressive read operations without the semantics mismatch of POST, addressing a long-standing API design need.

Cloud & Infrastructure

Platforms, deployment, and the systems that run everything else.

  • Hacker News

    W Social, public institutions and the theater of European digital sovereignty

    • ▲ 144
    • 💬 93

    An essay by Elena Rossini examines European public institutions migrating their Bluesky accounts to W Social, a for-profit microblogging platform owned by Swedish entrepreneurs that has quietly gone closed-source. Rossini argues this shift contradicts Europe's stated digital sovereignty and open-source commitments, highlighting the gap between institutional rhetoric about public digital infrastructure and actual platform choices. The article drew 144 points and 93 comments o…

  • Dev.to

    Deploying Label Studio Open-Source Data Labeling Platform on Ubuntu 24.04

    • ♥ 7

    Label Studio is an open-source data labeling platform that supports annotation across text, images,… Context: Dev.to – DevOps.

  • Product Hunt

    Jesse

    Sales teams have been stuck with stale databases for 15 years. Jesse changes everything.. the first internet-wide search engine built for sales & marketing. Ask in plain English: "Find newly opened soccer facilities in the Midwest needing turf solutions." Jesse scans the live web and finds the right buyers in the mark… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Lobste.rs

    Is It Time for a New Embedded Linux Build System?

    This blog post argues that edge devices now operate like cloud systems and that existing cross-compilation toolchains no longer fit how embedded Linux software is actually built and deployed. The author contends that a growing class of small teams needs a build system designed around modern edge workloads rather than traditional cross-compilation assumptions. The post originates from the yoe project and was surfaced on Lobste.rs' systems community.

Product & Launches

New products and launches worth a look.

  • Product Hunt

    Honestly

    Honestly is a social listening product that aggregates brand mentions across TikTok, YouTube, Instagram, Reddit, and X, then verifies which posts, comments, and transcripts are authentic before presenting actionable insights. Aimed at product teams and marketers, it analyzes platform-specific conversations to surface genuine user opinions about a brand, filtering out inauthentic engagement that would otherwise skew sentiment analysis results.

  • Product Hunt

    InstantDelay

    Streamers shouldn’t have to restart their stream just to change delay. InstantDelay lets OBS & Streamlabs streamers: Add, Remove, or Adjust stream delay while already live. Built for competitive streamers, tournaments, subathons, and multi-streaming, with Instant Mode, Overlay Mode, custom overlays, hotkeys, and Strea… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Retool

    The first enterprise AppGen platform that turns natural language into production-ready internal apps—built on your live data and deployed in your environment. Secure from day one. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Tine

    Tine is a second cursor for your Mac that lives in the notch. Unlike chatbots boxed in a window, it sees your actual screen the active app, your selection, your last move so there's nothing to re-paste. Say the word and it drives the cursor across every app: posts to Slack, writes the note, runs the research, fills th… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Community & Discussion

What engineers are debating and reading right now.

  • Hacker News

    Swiss parliament lifts ban on new nuclear power plants

    • ▲ 547
    • 💬 360

    The Swiss parliament has voted to remove the prohibition on constructing new nuclear power plants, reversing a restriction that had halted new reactor development. The decision emerged from the 2026 summer session of the National Council and Council of States in Bern, where energy policy was among numerous issues debated. The legislative change opens the door for future nuclear projects in Switzerland, though implementation timelines and specific reactor proposals are not ye…

  • Dev.to

    Welcome Thread – v380

    • ♥ 46
    • 💬 176

    Leave a comment below to introduce yourself! You can talk about what brought you here, what you're…

  • Hacker News

    A website that lists websites to submit your website to

    • ▲ 346
    • 💬 80

    Submission.Directory is a curated catalog of websites where founders and developers can submit their products, startups, or projects for visibility and backlinks. The directory covers platforms that accept website submissions across categories relevant to SEO and discovery. The Hacker News discussion drew 346 points and 80 comments, reflecting practitioner interest in finding effective submission channels for new products and services.

  • Hacker News

    Hospitals and universities repurposing drugs at lower cost

    • ▲ 251
    • 💬 107

    A King's College London article reports that universities and hospitals are running late-stage clinical trials to repurpose already-approved drugs, with funded costs up to 90% lower than equivalent pharmaceutical industry trials. The approach leverages existing safety and efficacy data to find new indications for known compounds, potentially delivering treatments faster and far more cheaply. The Hacker News discussion drew 251 points and 107 comments.

  • Hacker News

    The founder of Craigslist has given away half a billion dollars

    • ▲ 220
    • 💬 143

    This article profiles Craig Newmark, the founder of Craigslist, and reports that he has donated half a billion dollars to various causes. The piece covers his approach to philanthropy and his concerns about an America where generosity faces public hostility. The Hacker News discussion reached a score of 220 with 143 comments, reflecting community interest in the story.

  • Hacker News

    Ubiquiti: Enterprise NAS, Built on ZFS

    • ▲ 180
    • 💬 169

    Ubiquiti's ENAS is a new enterprise network-attached storage platform built natively on ZFS, positioned as a license-free alternative to traditional enterprise storage with costly proprietary hardware. The announcement highlights petabyte-class scalability, multi-site backups, shared iSCSI storage, and integration with UniFi management. The Hacker News discussion drew 180 points and 169 comments, reflecting strong practitioner interest in Ubiquiti's entry into enterprise sto…

  • Hacker News

    Modos Color Monitor Pushes E-Paper Displays Further

    • ▲ 179
    • 💬 47

    Modos is building a color e-paper monitor aimed at developers and users who need low-eye-strain displays. Following a successful dev kit, the company's cofounders are now offering a standalone e-paper monitor product. The IEEE Spectrum article covers their crowdfunding approach and the engineering challenges of pushing e-paper technology into usable desktop display territory. The Hacker News discussion drew 179 points and 47 comments.

  • Dev.to

    Congrats to the Gemma 4 Challenge Winners!

    • ♥ 17
    • 💬 6

    We are so excited to announce the winners of the Gemma 4 Challenge! This is officially our most…

  • Dev.to

    r4b1t_h0l3

    • ♥ 10

    → Try it: gnomeman4201.github.io/r4b1t It's a curated random link generator for security and OSINT… Context: Dev.to – Web Dev.

  • Community Pulse

    Anthropic CEO Dario Amodei goes completely candid on why he left OpenAI: "When you feel that you can't trust someone when you see disturbing patterns of behavior, dishonesty, that…

    A Reddit discussion summarizes an interview in which Anthropic CEO Dario Amodei explains why he left OpenAI. He cites a fundamental breakdown of trust, describing what he calls disturbing patterns of behavior and dishonesty that made it impossible to remain at the organization. Amodei co-founded Anthropic after departing OpenAI amid broader leadership turbulence at the company.

  • Lobste.rs

    Google workspace threatening to block firefox access

    A blog post on Tales from Prod reports that Google Workspace is displaying warnings or threats to block access for users of the Firefox browser, dated 2026-06-18. The article describes a practitioner's firsthand encounter with access restrictions on Google's productivity suite when using Firefox. The post is circulating on Lobste.rs as a topic of interest to engineers concerned about browser compatibility and platform access policies.

  • Lobste.rs

    Changes in Emacs 31 I'm Already Daily Driving

    A blog post by Rahul M. surveying notable changes arriving in Emacs 31 that the author has already adopted in their daily workflow. The article is aimed at Emacs users evaluating what to expect from the next major release. Beyond the title and author attribution, the fetched page snippet does not expose the specific features or configuration changes discussed, so the concrete implementation details are not available from the supplied context.

  • Lobste.rs

    The Future of the Con Is Already Here, It's Just Not Evenly Distributed

    This is a blog essay, linked from Lobste.rs, that examines how modern scams, fraud, and social engineering tactics are evolving and why their impact is unevenly distributed across different populations. The author discusses how technological tools enable increasingly sophisticated confidence schemes. No specific implementation details or technical metrics are available from the provided context.

  • Lobste.rs

    What are your Favorite Lobste.rs Comments?

    A discussion post on Lobste.rs where a user asks the community to share memorable comments from the forum's history. The poster notes the site has existed for a long time and occasionally surfaces valuable insights buried in old threads. The discussion is light so far with only 1 comment, making it an early-stage conversation rather than a substantial collection of curated highlights.

  • Lobste.rs

    Sigma 45mm f/2.8 Lens Repair & Analysis

    An in-depth teardown and repair write-up of a broken Sigma 45mm f/2.8 Art lens purchased for $58.65 USD. The author bought the non-functioning lens intending to fix it for use with L-mount cameras, drawn by the lens's reputation as a full-frame kit option. The article documents the diagnostic process and internal analysis involved in restoring the lens to working condition.

  • Lobste.rs

    The Hidden Elegance of Gradient Noise

    This is a technical blog post by Dmitri (yogthos) exploring how gradient noise algorithms work for generating procedural textures and natural-looking visual effects. The article examines the mathematics behind noise functions, discussing how to render scenes such as dark teal water lit from below with thousands of organic details. It appears aimed at practitioners interested in the implementation details of noise-based image generation.