caveman Token Trimmer, AliExpress Fingerprinting, Embedding Models – Aug 21

all-MiniLM-L6-v2: compact sentence embedding model for semantic search

sentence-transformers/all-MiniLM-L6-v2

• ♥ 5,230
• ⇣ 257.7M

all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to 384-dimensional dense vectors, suited for clustering and semantic search. It is one of the most widely deployed embedding models on Hugging Face, with 257,677,220 downloads and 5,230 likes. Released under Apache-2.0, it ships in PyTorch, TensorFlow, ONNX, OpenVINO, and Rust formats, making it easy to run on varied hardware.

taste-skill: agent skill that improves AI-generated UI design

Leonxlnx/taste-skill

• ★ 78.7k
• ⮂ 5,376

taste-skill is an MIT-licensed JavaScript repository providing portable agent skills that teach coding agents like Claude Code and Codex to produce better-looking interfaces. Instead of generic, boilerplate-style UI, it guides layout, typography, motion, and spacing decisions. The repo has 78,737 stars and 5,376 forks, with a homepage at tasteskill.dev.

bge-m3: multilingual multi-function embedding model

BAAI/bge-m3

• ♥ 3,413
• ⇣ 35.6M

BGE-M3 is a sentence-embedding model from BAAI for sentence-similarity and feature-extraction tasks, usable via the sentence-transformers library and available in PyTorch and ONNX formats. It supports over 100 languages, handles inputs from short sentences to long documents, and unifies dense, sparse, and multi-vector retrieval in one model. It has 3,413 likes and 35,649,761 downloads and is MIT licensed.

google-bert/bert-base-uncased

• ♥ 2,737
• ⇣ 105.4M

Pretrained model on English language using a masked language modeling (MLM) objective. Signal: Hugging Face – Fill Mask.

I wrote a test for prompt injection. It passed while the attack worked.

• ♥ 6
• 💬 15

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry. I maintain a small… Context: Dev.to – AI/ML.

Your agent isn't reckless. It just can't see the blast radius.

• ♥ 5
• 💬 5

I've been running Claude Code as a daily driver for about three months now. It writes Ansible I'd… Context: Dev.to – DevOps.

Show HN: Huzzah – a novel approach to coding with AI

• ▲ 282
• 💬 148

A blog post by Daniel Vaughn introducing Huzzah, an experimental technique for coding with AI agents. The author frames it against the recent shift where coding agents became capable enough that engineers no longer manually write code, and proposes a novel workflow on top of that change. It drew a Hacker News score of 282 with 148 comments.

Modular Platform: open-source MAX stack and Mojo language

modular/modular

• ★ 28.2k
• ⮂ 3,015

The Modular Platform is Modular's open-source repository containing MAX, its AI execution stack, and Mojo, a programming language aimed at AI and machine-learning workloads. Written primarily in Mojo, the repo has 28,185 stars and 3,015 forks, with 1,107 open issues. Documentation for both MAX and Mojo is hosted at docs.modular.com, and the project accepts community contributions.

AI companies destroy physical books – let's scan rare books before it's too late

• ▲ 263
• 💬 185

A blog post from Anna's Archive, a shadow library, claiming that AI companies are buying, scanning, and destroying millions of physical books for model training, which would lock that knowledge inside private corporate servers. The post is an urgent call for volunteers worldwide to scan and upload books before the physical copies are lost. The Hacker News discussion drew 263 points and 185 comments.

Vomit: Clean up Claude 5's token output with a separate LLM

• ▲ 234
• 💬 234

Vomit is an open-source Go utility, GPL-3.0 licensed, that pipes Claude Code's excessively verbose token output through a separate local LLM to rewrite it as concise English. It targets users who find Claude 5's responses token-heavy, aiming to save tokens by summarizing the stream. The repo has 81 stars and sparked a Hacker News thread with 234 points and 234 comments.

My AI said the PDF was empty. The PDF was not empty.

• ♥ 2

I asked Claude Code to pull the key dates out of a PDF I had saved from a webpage. It came back… Context: Dev.to – Ai.

I auto-sorted my 3D printing files without an LLM

• ♥ 1

My model folder got out of hand. If you print much you know the shape of it: STL, 3MF, STEP, OBJ, PLY… Context: Dev.to – Showdev.

HyNote for Mac

HyNote AI: Full Stack AI Note Taker For Professionals Product Hunt HyNote AI Full Stack AI Note Taker For Professionals 4.8 • 38 reviews • 1.8K followers Full Stack AI Note Taker For Professionals 4.8 • 38 reviews • 1.8K followers Visit website HyNote is your all-in-one AI note-… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Cloudways Managed AI Agents

Cloudways by DigitalOcean: Intelligent managed hosting with AI-powered insights. Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

bitdrift.ai

Get real-time visibility into your mobile app. No waiting for release cycles, no extra wiring, no noise. Define what matters remotely, capture rich on-device logs, and surface the most important sessions for quick debugging. Includes free crash reporting. Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

Checksum AI

Checksum is an AI-native continuous testing platform for engineering teams shipping faster than manual QA can keep up. It generates, runs, and auto-heals end-to-end and API tests on every pull request, all as standard Playwright code in your own repo. When a test fails, Checksum tells you whether it found a real bug o… Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

NobodyWho

NobodyWho is an inference engine for running LLMs fully on-device, built on llama.cpp. Open-source, free, no API keys, no cloud calls. We support Swift, Kotlin, Flutter, React Native, Python, and Godot. Includes type-safe tool calling with automatic grammar generation, multimodal input, Text-to-Speech & Speech-to-Text… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Lifelong

Lifelong is the family health app built around the household, not just one person. Keep records, medications, symptoms, appointments, activity and sleep together for everyone you care about. Connect the wearables you already use, keep the right people in the loop, and use Alo, the in-app AI companion, to log updates a… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Anyone else have these "Oh my god" moments with AI every couple weeks?

A discussion post in r/artificial about users periodically experiencing moments of astonishment at AI capabilities. The author describes being a long-time AI news follower who, constrained by budget, first paid for API access when DeepSeek v4 0731 released, spending twenty dollars after previously only using frontier models through chat subscriptions. The thread invites others to share similar recurring reactions.

Writer’s dilemma: Critiquing a family member’s AI-generated novel

A Reddit discussion in r/artificial about a family etiquette dilemma raised by generative AI. The poster explains that her stepfather-in-law, laid off in January, has written a novel using AI, and she is unsure how honestly to critique it given an already strained relationship and infrequent contact. Practitioners may find it a grounded example of how AI-generated creative work affects personal and social dynamics.

Ukraine found an uncontrolled Nvidia AI chip inside a Russian cruise missile

A community-reported article about Ukraine's intelligence agency (HUR) recovering an Nvidia Jetson Orin NX module from a downed Russian S-71M cruise missile. The notable detail is Nvidia's response: this particular chip was never on any export control list, unlike its datacenter GPUs, so its presence in Russian weapons falls outside current sanctions rules. Verification status is community signal only.

I wish AI slide demos started with the kind of mess I actually have

A Reddit discussion post in r/artificial argues that AI presentation-tool demos are unrealistic because they begin with a clean prompt and clear topic. The author says their actual starting point is a PDF, a few links, scattered notes, some numbers, and only a rough idea of what the deck should say, and wishes demos reflected that messier workflow.

What Happens When the World is Run on Code No One Understands?

This is a community discussion thread on Reddit's r/artificial raising the question of what occurs when critical world systems run on code that no one fully understands. The thread is surfacing as a community-signal item, suggesting notable engagement among AI practitioners, but the fetched page content contains no substantive details beyond the post title, so the specific arguments or claims made in the discussion could not be verified from the supplied context.

Is AI making the internet less useful?

This is a community discussion thread on r/artificial raising the question of whether AI is making the internet less useful. The poster argues that as AI increasingly answers questions directly while more online content is itself AI-generated, the pool of genuinely human-created information that models learn from may keep shrinking. The core concern is recursive degradation: AI eventually training on AI-generated content. The thread reflects a wider practitioner worry about…

Jason Kelce Encourages People To Mail Jars Of Pee To AI Data Centers In Bizarre New Ad—And We Don't Know What To Think

A community discussion on r/artificial about a strange advertisement in which former NFL player Jason Kelce encourages people to mail jars of urine to AI data centers. Members of the subreddit are reacting to and trying to interpret the ad's intent, which the original poster describes as baffling. The context available is thin, limited to the Reddit post title, so the ad's sponsor and purpose are not specified here.

Build a modern LLM from scratch. Every line commented. Explained like we are five.

A community discussion on r/artificial links to a tutorial project for building a modern large language model from scratch, with every line of code commented and explanations pitched at a beginner level. The thread is circulating as a resource for engineers who want to understand LLM internals rather than use existing frameworks. No specifics about the code, frameworks, or model architecture are provided in the available context.

Explain the major differences between ChatGPT, Gemini, Claude, and Grok to someone who wants to only pay for one of them

A Reddit discussion on r/artificial where a subscriber paying for four frontier AI assistants asks users to explain the major differences between ChatGPT, Gemini, Claude, and Grok in non-technical terms, and whether one subscription would suffice. The thread matters to practitioners as a snapshot of how real users weigh trade-offs among leading chatbot subscriptions when cutting costs.

Is Gemini deliberately dishonest?

A Reddit discussion on r/artificial in which users debate whether Google's Gemini is deliberately dishonest about its memory. The poster reports that Gemini on Android claims it only knows the current conversation, yet occasionally references information from past chats. It matters to practitioners because it raises unresolved questions about how assistant memory features are disclosed and whether models accurately report their own context.

If this is true, the hyperscalers are toast

An investment-research essay by Joachim Klement (Klement on Investing) arguing that the future of AI lies not in large language models but in small language models (SLMs) running on local desktop computers or mobile phones. If that thesis holds, cloud hyperscalers' central position in AI compute would be significantly undermined. The piece is a market-analysis argument rather than a technical benchmark.

Malicious Rust crate Arrayref runs a build-time payload

• ▲ 465
• 💬 394

A security report on a supply-chain attack against the popular Rust crate arrayref, in which a compromised release pulled in a typosquatted crate named proc-macro1. That dependency's build script downloads and executes a remote binary at compile time, meaning developers building affected projects can run attacker code without ever executing their finished program. The incident drew 465 points and 394 comments on Hacker News, reflecting concern over typosquatting in the Cargo…

Verification: community signal; use the linked source as context, not final confirmation.

CVE-2026-72530: TrueConf Server Code Injection Vulnerability

This is a code injection vulnerability affecting TrueConf Server, listed in the CISA Known Exploited Vulnerabilities catalog, which signals active exploitation and drives urgency for patching. Code injection flaws can allow attackers to execute arbitrary code on the affected server. Specific affected versions, technical details, and mitigation steps were not present in the available context and should be confirmed via the NVD entry and vendor advisory.

CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability

CVE-2026-72529 is a vulnerability in TrueConf Server where a critical function lacks authentication, and it has been added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation. Affected versions and technical specifics are not detailed in the available context. Consult the NVD entry and the primary vendor advisory for patch and mitigation guidance.

Verification: cisa kev confirmed.

CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability

This is a server-side request forgery (SSRF) vulnerability affecting MLflow, a popular open-source ML experiment-tracking platform, and it has been added to CISA's Known Exploited Vulnerabilities catalog. SSRF flaws in MLflow typically allow an attacker to make the server issue unintended internal requests, but affected versions, exploit details, and specific mitigation steps could not be confirmed from the available context and should be checked against the NVD entry and ve…

Supply chain attack on arrayref

An official Rust Blog post reporting a supply chain attack affecting the arrayref crate, a small Rust library for taking array-typed slices of other arrays. It matters to Rust practitioners because compromised dependencies can propagate malicious code into otherwise ordinary builds. The fetched context contains only the post's title and date; concrete details such as affected versions, the attack vector, and remediation steps were not available and should be read from the po…

Verification: community signal; use the linked source as context, not final confirmation.

caveman: Claude Code skill that trims token usage

JuliusBrussee/caveman

• ★ 99.8k
• ⮂ 5,779

caveman is a Go-written Claude Code skill that reduces token consumption by making responses terse — the repo claims a 65% token cut by 'talking like caveman', stripping filler from Claude Code's replies. It has 99,785 stars and 5,779 forks on GitHub, with 357 open issues and a homepage at caveman.so. The trade-off is terser, less explanatory output in exchange for lower token spend.

Linux 7.2

• ▲ 233
• 💬 78

Igalia's write-up covers the release of the Linux kernel 7.2, which was tagged and released this week. The author describes it as the second busiest development cycle ever, with improvements to both CPU and GPU scheduling. The discussion drew 233 points and 78 comments on Hacker News, reflecting practitioner interest in the scheduler changes.

google-timeline-visualizer: turn Google Location History into travel videos

mahlernim/google-timeline-visualizer

• ★ 1,837
• ⮂ 197

An open-source Android app, written in Kotlin and MIT-licensed, that turns your Google Location History (Timeline) export into an animated travel video. It processes the Timeline file locally on your phone to visualize a year of movement, appealing to users who want to review their travel history before Google's Timeline changes. The repo has 1,837 stars and 197 forks.

Hermai Brand API

A customer signs up with a work email or domain. You get back the logo, colors, description, and a ready to apply theme. Built for B2B SaaS so every customer's account looks like theirs from the first login. Free for 1,000 brands a month, every month. No card. Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

Glasp for Firefox

Glasp is now on Firefox. Highlight web articles, PDFs, and YouTube transcripts in four colors, add notes and tags, and summarize any page or video with ChatGPT, Claude, or Gemini. Everything lands in one searchable library and exports to Notion, Obsidian, or Markdown. Sign in on any browser or on the mobile apps and y… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Bun 1.4

Bun 1.4 is a release of the Bun toolkit for building and testing full-stack JavaScript and TypeScript applications, and it rewrites Bun's internals in Rust. The release adds built-in headless browser automation via Bun.WebView, new APIs like Bun.Image, Bun.markdown, JSON5, JSONL, Terminal, and cron, plus parallel test and run. It reaches Node.js 26.3.0 compatibility with 1,517 newly passing tests, adds Windows ARM64 support, and an opt-in global virtual store for up to 7x fa…

Everyone Says Assembly Is Untyped—Everyone Is Wrong

An article by Bill Hall (gingerBill), the designer of the Odin language, arguing against the common claim that assembly is untyped, using Odin's inline assembly design as the case study. He contends Odin's inline assembly is currently the best of any language, organized into "templates" that can be called like procedures, a combination he says GCC, Clang, Rust, and Go inline assembly do not offer. Relevant to language designers and anyone writing low-level code.

Announcing Rust 1.98.0

A new stable release of the Rust programming language, version 1.98.0, announced on August 20, 2026 by the Rust Release Team. Rust targets reliable and efficient systems software, and regular six-week-style stable releases ship toolchain and library updates to practitioners. The fetched announcement snippet confirms only the version and release date, without detailing specific language or standard-library changes.

What Zig felt like, coming from Rust

A practitioner blog post comparing the experience of writing Zig after working in Rust. The author walks through what shifted when moving from Rust's borrow checker and rich type system to Zig's simpler, manual approach to memory and error handling. It is aimed at engineers curious about the practical day-to-day differences between the two systems languages rather than a benchmark or advocacy piece.

Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH

OPKSSH is an open-source tool from Ethan Heilman that integrates single sign-on with SSH, letting users SSH into servers using their existing identity-provider credentials instead of manually managed SSH keys. Built on OpenPubkey, it binds SSH public keys to OIDC single sign-on identities so servers can verify keys against the identity provider. The project was open-sourced with an announcement post dated 05-11-2025.

Btrfs Snapshot Integration in KDE

A practitioner-written post by bharadwaj describing work on integrating Btrfs snapshots into KDE software, dated the 20th of August, 2026. The article covers the background of the effort, what the integration is, how it works, and related allied work within KDE and Linux. It is relevant to desktop Linux developers and users interested in filesystem-level snapshot and rollback support becoming part of the KDE stack.

Why compiling Rust to WebAssembly is slow

An engineering blog post by Frank DENIS examining why compiling Rust to WebAssembly with debug information is slower than expected, sometimes to an extreme degree. The article focuses on the practical pain point that debug info, which developers need for usable stack traces and debugging, disproportionately inflates compile times in the Rust-to-Wasm toolchain. It is aimed at practitioners hitting long builds when targeting WebAssembly from Rust.

Emacs 31.1 will release on 8/24

A Lobste.rs link points to the HISTORY file in the emacs-mirror/emacs repository, which records that GNU Emacs 31.1 will release on 8/24. Emacs is the long-standing extensible text editor written largely in Emacs Lisp and licensed under GPL-3.0; the mirror repo has 5,165 stars and 1,396 forks. The linked file documents the release schedule change for the upcoming version.

I built an MCP memory server for one user (me, for six weeks)

• ♥ 6
• 💬 16

Building in public You explain your deploy setup to your assistant. It helps. Tomorrow you explain… Context: Dev.to – DevOps.

Solving Gradle metadata and Renovate integration

• ♥ 6
• 💬 1

My current company has settled on using Gradle. It doesn't make me very happy, but you need to learn… Context: Dev.to – DevOps.

Aloud

Feedback is easier said than written. Aloud records your voice, your screen and a live transcript together while you talk through your app – pointing at things, changing your mind. Then one press: it rewrites the transcript into what you actually meant, asks about anything that could be read two ways, pulls the screen… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

The New Calendly

Calendly is your hub for scheduling meetings professionally and efficiently, eliminating the hassle of back-and-forth emails so you can get back to work.Calendly helps you book meetings without the back-and-forth. Share your availability, automate scheduling, and integrate with tools like Zoom, Google, and Slack. Idea… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

• ▲ 946
• 💬 297

A blog post documenting browser fingerprinting behavior on AliExpress. The author noticed Bluetooth headphones with multipoint audio stayed actively connected to a computer while an AliExpress page was open, and traced the cause to silent WebAudio-based fingerprinting that keeps audio hardware engaged. The Hacker News discussion drew 946 points and 297 comments, reflecting interest in the tracking technique and its unintended side effects on Bluetooth devices.

State Management in Front-end Web Development: Mutators

• ♥ 16

Libraries like Valtio and Pinia for Vue use a mutator pattern instead of the actions, dispatch, and… Context: Dev.to – Webdev.

The test was green. Every real connection would have failed.

• ♥ 16

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry. The… Context: Dev.to – Devchallenge.

One rented /24 could eclipse a Kademlia node. Now it takes ten.

• ♥ 12

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry. The… Context: Dev.to – Devchallenge.

I like 'em thick: an apology to my English teachers

• ▲ 677
• 💬 281

An essay by Adam Mastroianni on the Experimental History blog, framed as an apology to his English teachers, that became a high-engagement Hacker News discussion with 677 points and 281 comments. The piece opens with the author saying he owes an apology to every English teacher he ever had, and the discussion around it drew substantial community attention.

The August 17 outage

• ▲ 452
• 💬 514

An update on the August 17 outage and the steps we're taking to improve reliability.

CIA funding helped keep NeXT afloat in the 80s

• ▲ 388
• 💬 232

A Wall Street Journal report says CIA funding helped sustain Steve Jobs' NeXT during the 1980s, when the company's machines were struggling commercially. The article is drawing heavy Hacker News attention (388 points, 232 comments), largely around the historical link between government intelligence budgets and Silicon Valley startups. Practitioners are discussing how such funding shaped NeXT's survival and eventual return to Apple.

I should have loved biology (2020)

• ▲ 250
• 💬 97

A 2020 essay by James Somers arguing that school biology failed him because it was taught as rote memorization of terms like the Golgi apparatus and the Krebs cycle rather than as a live quest for the secrets of life. He recounts how textbooks wrung the exploration out of the subject, and the piece resonates with practitioners reflecting on how technical education kills curiosity. It drew 250 points and 97 comments on Hacker News.

A missing exchange rate is not an exchange rate of 1

• ♥ 4

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry. var fx =… Context: Dev.to – Devchallenge.

Why aren't smart people happier? (2022)

• ▲ 146
• 💬 198

This is a 2022 essay by Adam Mastroianni on his Experimental History blog asking why higher intelligence does not translate into greater happiness. It opens from a standard psychological definition of intelligence as a general mental capability involving reasoning and planning, and examines why that brainpower fails to buy more life satisfaction. The piece drew strong Hacker News engagement, with 146 points and 198 comments.

The alarm wasn't silent. It was lying.

• ♥ 2

This is a submission for DEV's Summer Bug Smash: Clear the Lineup powered by Sentry. … Context: Dev.to – Devchallenge.

Zero-Knowledge Proofs Aren’t Age Verification Silver Bullets

An EFF DeepLinks article arguing that zero-knowledge proofs are not a complete answer to online age verification mandates. It notes that roughly half of US states currently have some internet age verification law, and examines why ZKP-based schemes still carry risks the piece characterizes as dangerous. It is aimed at practitioners evaluating verification architectures under expanding regulation.