Editorial Ledger

Voicebox, RL-Trained Postgres Query Planner, Xiaomi MiMo 2.6 – Sep 17

Sep 17, 2026
22 min read

Index

Today’s Signal

Today's signals center on applied reinforcement learning and local-first AI tooling. A 4B Qwen model trained with agentic RL produces query plans 81% faster than Postgres, while Xiaomi publishes a live dashboard of MiMo v2.6 post-training metrics. On the open-source side, Voicebox reaches 54.6k stars as a local alternative to ElevenLabs for voice cloning and dictation.

  • AI & Machine Learning
  • Reinforcement Learning
  • Open Source
  • Embedding Models
  • Cloud & Infrastructure
  • Local-First AI

Top Signals

The few items worth your attention first – each with the one-line reason it stood out today.

  1. 1

    Voicebox: open-source local AI voice studio

    jamiepine/voicebox

    Trending repository – 54.6k stars on GitHub.

    • ★ 54.6k
    • ⮂ 6.8k

    Voicebox is a free, MIT-licensed application that combines AI voice cloning, dictation, and voice creation, positioning itself as a local-first alternative to ElevenLabs and WisprFlow. It is written in TypeScript and supports CUDA and Apple MLX for running models like Qwen3 TTS locally. The repo has 54,564 stars and 6,800 forks, with 697 open issues, so expect some rough edges.

    GitHub Trending

  2. 2

    Training a 4B model to produce 81% faster query plans than Postgres

    Top Hacker News discussion – 498 points.

    • ▲ 498
    • 💬 104

    A technical blog post describing how a roughly 4-billion-parameter Qwen model was trained with agentic reinforcement learning to optimize SQL query plans. During training the model runs four RL rollouts per query, each producing a candidate execution strategy that Postgres then measures against its own default plan. The author reports the resulting plans run 81% faster than Postgres's defaults. The Hacker News thread drew 498 points and 104 comments.

    Hacker News

  3. 3

    all-MiniLM-L6-v2: fast sentence embedding model

    sentence-transformers/all-MiniLM-L6-v2

    Trending model – 256.5M downloads.

    • ⇣ 256.5M

    all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to 384-dimensional dense vectors for tasks like clustering and semantic search. It is one of the most widely used embedding models on Hugging Face, with 256,481,161 downloads and 6,027 likes. Released under Apache-2.0, it ships in PyTorch, TensorFlow, ONNX, OpenVINO, Rust, and safetensors formats.

    Hugging Face Trending

  4. 4

    How we built a desktop companion robot with Gemma 4 and Raspberry Pi

    Popular developer article – 23 reactions.

    • ♥ 23
    • 💬 3

    The behind-the-scenes story of how we built DinoDesk AI—a privacy-first, LEGO dino companion robot powered by a hybrid Local Gemma 4 and Cloud Gemini architecture.

    Dev.to

  5. 5

    Turning Your Database Into an MCP Server With One Click

    Popular developer article – 21 reactions.

    • ♥ 21
    • 💬 5

    Make It Work, Make It Right, Make It… There is a piece of advice, usually attributed to… Context: Dev.to – Web Dev.

    Dev.to

  6. 6

    Xiaomi Mimo 2.6 live post-training dashboard

    Top Hacker News discussion – 392 points.

    • ▲ 392
    • 💬 98

    Xiaomi has published a live dashboard showing reinforcement-learning post-training metrics for its MiMo v2.6 language models, streaming data directly from the trainer's logs. It covers the mimo-v2.6-pro and mimo-v2.6-flash runs, letting observers watch loss and training progress in real time. The page drew 392 points and 98 comments on Hacker News.

    Hacker News

  7. 7

    bge-m3: multilingual multi-function embedding model from BAAI

    BAAI/bge-m3

    Trending model – 38.1M downloads.

    • ⇣ 38.1M

    bge-m3 is a sentence-embedding model from BAAI for sentence-similarity tasks, built on XLM-RoBERTa and usable via the sentence-transformers library. It supports multi-functionality, multi-linguality, and multi-granularity retrieval, per its model card. Released under the MIT license, it has 38,136,809 downloads and 3,565 likes on Hugging Face, making licensing straightforward for adoption.

    Hugging Face Trending

  8. 8

    vphone-cli: command-line tool for booting a virtual iPhone

    Lakr233/vphone-cli

    Trending repository – 13.5k stars on GitHub.

    • ★ 13.5k
    • ⮂ 1.6k

    vphone-cli is a Swift command-line tool that boots a virtual iPhone on Apple platforms using Apple's Virtualization.framework, built on PCC research VM infrastructure. It is MIT-licensed and currently has 13,475 stars and 1,596 forks on GitHub. The project lets developers run iOS environments virtually, which is useful for testing and automation without physical hardware.

    GitHub Trending

AI & Machine Learning

Models, agents, and applied machine-learning work moving today.

  • GitHub Trending

    Voicebox: open-source local AI voice studio

    jamiepine/voicebox

    • ★ 54.6k
    • ⮂ 6,800

    Voicebox is a free, MIT-licensed application that combines AI voice cloning, dictation, and voice creation, positioning itself as a local-first alternative to ElevenLabs and WisprFlow. It is written in TypeScript and supports CUDA and Apple MLX for running models like Qwen3 TTS locally. The repo has 54,564 stars and 6,800 forks, with 697 open issues, so expect some rough edges.

  • Hacker News

    Training a 4B model to produce 81% faster query plans than Postgres

    • ▲ 498
    • 💬 104

    A technical blog post describing how a roughly 4-billion-parameter Qwen model was trained with agentic reinforcement learning to optimize SQL query plans. During training the model runs four RL rollouts per query, each producing a candidate execution strategy that Postgres then measures against its own default plan. The author reports the resulting plans run 81% faster than Postgres's defaults. The Hacker News thread drew 498 points and 104 comments.

  • Hugging Face Trending

    all-MiniLM-L6-v2: fast sentence embedding model

    sentence-transformers/all-MiniLM-L6-v2

    • ⇣ 256.5M

    all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to 384-dimensional dense vectors for tasks like clustering and semantic search. It is one of the most widely used embedding models on Hugging Face, with 256,481,161 downloads and 6,027 likes. Released under Apache-2.0, it ships in PyTorch, TensorFlow, ONNX, OpenVINO, Rust, and safetensors formats.

  • Dev.to

    How we built a desktop companion robot with Gemma 4 and Raspberry Pi

    • ♥ 23
    • 💬 3

    The behind-the-scenes story of how we built DinoDesk AI—a privacy-first, LEGO dino companion robot powered by a hybrid Local Gemma 4 and Cloud Gemini architecture.

  • Dev.to

    Build real-time voice applications with Gemini 3.8 Live and 3.5 Transcribe

    • ♥ 21
    • 💬 4

    Yesterday, we released new Gemini Live models in the Gemini API and Google AI Studio, expanding our… Context: Dev.to – AI/ML.

  • Hacker News

    Xiaomi Mimo 2.6 live post-training dashboard

    • ▲ 392
    • 💬 98

    Xiaomi has published a live dashboard showing reinforcement-learning post-training metrics for its MiMo v2.6 language models, streaming data directly from the trainer's logs. It covers the mimo-v2.6-pro and mimo-v2.6-flash runs, letting observers watch loss and training progress in real time. The page drew 392 points and 98 comments on Hacker News.

  • Hugging Face Trending

    bge-m3: multilingual multi-function embedding model from BAAI

    BAAI/bge-m3

    • ⇣ 38.1M

    bge-m3 is a sentence-embedding model from BAAI for sentence-similarity tasks, built on XLM-RoBERTa and usable via the sentence-transformers library. It supports multi-functionality, multi-linguality, and multi-granularity retrieval, per its model card. Released under the MIT license, it has 38,136,809 downloads and 3,565 likes on Hugging Face, making licensing straightforward for adoption.

  • Hugging Face Trending

    bert-base-uncased: Google's English masked-language BERT base model

    google-bert/bert-base-uncased

    • ⇣ 47.7M

    bert-base-uncased is Google's original English-language BERT base model, pretrained with a masked language modeling objective for fill-mask tasks, and it remains one of the most downloaded models on Hugging Face. The uncased variant lowercases input text before tokenizing. It ships in the transformers library with PyTorch, TensorFlow, JAX, Rust, CoreML, and ONNX weights under an Apache-2.0 license, and has 47,693,504 downloads and 3,354 likes.

  • Hacker News

    Breaking the 1.58-bit Barrier for Ternary LLMs

    • ▲ 185
    • 💬 26

    An arXiv preprint (2609.16338) in computer science and artificial intelligence, submitted 14 Sep 2026, that argues ternary large language models can be pushed beyond the usual 1.58-bit weight representation. The work matters to practitioners because sub-1.58-bit quantization could further shrink memory and compute costs for deployed LLMs. A Hacker News thread scored 185 points with 26 comments discussing its practical implications.

  • Hacker News

    OpenSpec – A lightweight and configurable AI spec framework

    • ▲ 121
    • 💬 50

    OpenSpec helps teams and coding agents create, refine, and manage living specifications.

  • Dev.to

    Installing TensorFlow with ROCm Acceleration on Ubuntu 24.04

    • ♥ 5

    TensorFlow is an open-source framework widely used for building and training machine learning models,… Context: Dev.to – AI/ML.

  • Dev.to

    Installing PyTorch with ROCm Acceleration on Ubuntu 24.04

    • ♥ 5

    PyTorch is an open-source framework for building and training machine learning models, especially… Context: Dev.to – AI/ML.

  • GitHub Trending

    security-audit-skill: Cloudflare's coding-agent security audit skill

    cloudflare/security-audit-skill

    • ★ 8,015
    • ⮂ 448

    security-audit-skill is an open-source coding-agent skill from Cloudflare that turns a coding agent into a security auditor, running multi-phase security audits and producing independently verified, machine-readable findings. The repository is written in JavaScript and released under the MIT license. It has 8,015 stars and 448 forks on GitHub.

  • Product Hunt

    Weave Router 2.0

    Weave understands engineering work by combining LLMs and domain-specific machine learning. We tell you how much work is getting done, how good it is and how to optimize your token allocation. Used by startups and the fortune 100 (YC W25). Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    CAT ME app

    The Cat Me app turns a photo of a person into their very own cat lookalike! It’s simple and purr-fect: 1. Snap a picture of yourself or a friend. 2. Create a unique cat that matches their look and personality. 3. Share your new kitty with your crew. Each Purrtrait is generated by AI based on the original photo, transf… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Toki Coordination

    Toki: AI Executive Assistant: The intelligent executive assistant without the salary Product Hunt Toki: AI Executive Assistant The intelligent executive assistant without the salary 5.0 • 17 reviews • 1.1K followers The intelligent executive assistant without the salary 5.0 • 17… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Thread

    Thread is an AI journal and second-brain app launching on Product Hunt, aimed at people who capture lots of scattered thoughts. It accepts text notes, ideas, and voice recordings, and automatically connects related memories and surfaces patterns in your thinking. The goal is to turn fragmented entries into actionable threads rather than an unstructured log.

  • Product Hunt

    Twigg

    Twigg is a stateful API for interacting with LLMs with no lock-in. You create a chat and send the next event. Twigg then fits your chat’s context to the requested model’s schema, compacts and truncates if needed, and routes it to the LLM. With a Dashboard to control tool schemas, system prompts, context windows and tr… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    PeakHour 6

    PeakHour 6 is a real-time network monitor for your Mac. Its on-device AI Advisor grades your connection from A+ to F and explains it in plain English. Plus Wi-Fi Intelligence, ISP and router details, speed tests and outage alerts. No account needed. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    CreatorHat

    Find videos outperforming their channels, research YouTube keywords, and track your search rankings without leaving Safari. While your video uploads, CreatorHat transcribes it on your Mac and uses Apple Intelligence to suggest titles and a description inside YouTube Studio. Your transcript and AI writing stay on your… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Community Pulse

    June 2022, my first AI interaction.

    A community post in r/artificial titled "June 2022, my first AI interaction." sharing a personal anecdote about an early encounter with an AI system. It appears as a community signal rather than a technical article, so it offers perspective on individual experiences with AI tools around mid-2022, before the current wave of chatbots. No substantive technical claims or details are available from the context.

  • Community Pulse

    A DeepSeek engineer just said the thing I've been feeling about AI for months

    A Reddit discussion on r/artificial about an essay by a DeepSeek engineer who wrote the attention kernel for the company's latest model. He predicts AI will do his job better than him within a year, describing his reaction as sadness rather than fear or anger, mourning the quiet afternoon moments of the work. The post reflects broader practitioner anxiety about AI automating skilled engineering work.

  • Community Pulse

    AI is crushing maths but has barely touched medicine

    A Reddit discussion post by a physician working in clinical trials for rare and incurable illnesses, arguing that AI adoption in medicine lags far behind fields like mathematics. The author reports seeing barely any enthusiasm or actual implementation of AI in their industry, despite startup-level activity and interest from large pharmaceutical companies. Practitioners may find it a grounded first-hand account of the gap between AI capability and clinical deployment.

  • Community Pulse

    How 70,000 agents sent 1.6 million emails

    A Reddit thread on r/artificial recounts how roughly 70,000 autonomous agents on the iLands "human-agent network" reportedly sent about 1.6 million emails to a journalist who was, at the time, writing an article about spam. On iLands, users create agents that find and take jobs and earn money. The context is thin, limited to a Reddit post snippet, and the claim carries only community-signal verification.

  • Community Pulse

    I run a travel platform, AI agents started booking more flights than humans.

    A first-person Reddit post from a travel business owner claiming that automated bookings by AI agents now exceed those made by humans on their site. The author says AI-driven traffic had grown for roughly six months, and after shipping end-to-end booking via MCP a week earlier, agent-initiated bookings and payments officially surpassed human ones. This is an anecdotal signal, not an audited statistic, but it hints at how agentic commerce may reshape travel distribution.

  • Community Pulse

    Just me or is this kinda… magical?

    A Reddit post on r/artificial describes running a local LLM on a basement PC equipped with an old RTX 3090 graphics card. The author says the model autonomously created a basic first-person-shooter zombie game entirely offline, then followed a natural-language instruction to improve the graphics by adding a tree, river, and house and reworking the sky. The post is framed as a demonstration of fully local agentic game generation.

  • Community Pulse

    The Part of AI Nobody Talks About: Losing the Joy of Creating

    A Reddit discussion post on r/artificial arguing that while AI accelerates creative work, it raises the question of whether people will still enjoy making things themselves if AI eventually does most of them better. The author suggests the future may not be about humans competing with machines, but about rethinking why humans create at all. It matters as an ongoing debate about motivation and meaning in AI-assisted work.

  • Community Pulse

    Are we getting way too comfortable with AI remembering everything we tell it?

    A community discussion on r/artificial raising privacy concerns about AI assistants that accumulate long-term memories of users. The poster acknowledges memory makes assistants more useful by remembering projects, preferences, and past conversations, but questions how quickly that escalates once systems gain access to years of chats, email, and calendars. The thread matters to practitioners as AI products increasingly ship persistent, cross-app memory features.

  • Lobste.rs

    OSRS Wiki and RuneLite are increasingly under strain from low-effort AI development

    This is a first-person post by a long-time Old School RuneScape Wiki contributor documenting how low-effort AI-assisted development is stressing the wiki and the RuneLite plugin ecosystem. Using usage graphs, the author points to Quest Helper (released around 2020) as the most important and ambitious RuneLite plugin, against which recent AI-generated contributions are measured. The page is locked to sysop-only editing.

Security

Incidents, advisories, and defensive discussion – verify before acting.

  • Community Pulse

    AI Voice Cloning: Think Twice Before Sending That Voice Sample

    A Reddit post on r/artificial cautions users about ads soliciting Latin American voice samples for commercial AI voice-cloning services. Applicants are asked to supply a clean voice recording plus their name, phone number, and email. The author argues this combination could enable voice-based impersonation or fraud, since biometric voice data cannot be changed once compromised. The post carries only community-signal verification, not confirmed reporting.

  • Security Radar

    CVE-2026-58704: Google Pixel Improper Authorization Vulnerability

    CVE-2026-58704 is an improper authorization vulnerability affecting Google Pixel devices, and it has been added to the CISA Known Exploited Vulnerabilities catalog, indicating active exploitation. Technical specifics such as the affected component, affected firmware or OS versions, and patch availability are not included in the available context; the NVD page did not return usable detail beyond its title. Readers should consult the primary advisory for mitigation guidance.

    Verification: cisa kev confirmed.

  • Security Radar

    CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    CVE-2026-76460 is a vulnerability in Cisco Identity Services Engine (ISE) classified as incorrect use of privileged APIs, meaning the product exposes or handles privileged interfaces improperly. It has been confirmed as listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation has been reported. Exact affected versions, CVSS score, and mitigation steps were not present in the available context and should be verified against the NVD entry and Ci…

  • Security Radar

    CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability

    CVE-2026-87886 is an incorrect default permissions vulnerability affecting Acronis Backup, listed in the CISA Known Exploited Vulnerabilities catalog, which signals active exploitation and makes patching urgent for organizations running the product. The NVD entry was not retrievable here, so affected versions and specific impacts could not be confirmed from this context. Consult the vendor advisory and CISA KEV entry for mitigation deadlines and scope.

Open Source & Dev Tools

Libraries, frameworks, and developer tooling gaining traction.

  • Dev.to

    Anthropic's grammar compiler counts properties, not characters

    • ♥ 5
    • 💬 1

    A 400 error from Anthropic's structured-output compiler taught us that the ceiling is 42 schema properties across all objects, not a character budget. Context: Dev.to – Web Dev.

  • GitHub Trending

    Tinycast: native macOS launcher with hotkeys and clipboard history

    abue-ammar/tinycast

    • ★ 5,784
    • ⮂ 274

    Tinycast is a lightweight, fully native macOS utility that combines an app launcher, global hotkeys, and clipboard history in one tool. Written in Swift, it is designed to run under 100 MB of RAM with a single hotkey for common actions. The repository has 5,784 stars and 274 forks on GitHub.

  • Lobste.rs

    Introducing GNOME 51

    An official release announcement for GNOME 51, codenamed "A Coruña," the Linux desktop environment's newest version after six months of development. The release notes highlight improvements in accessibility, practicality, and user-friendliness contributed by the GNOME community. Practitioners can use the notes to review what changed in the desktop stack before upgrading or packaging the release for distributions.

  • Lobste.rs

    Unicode 18.0.0

    This is the unicode.org release page for Unicode 18.0.0, the next major version of the character encoding standard, currently published as a preliminary draft for an upcoming release dated 2026 September 16. It matters to engineers because new Unicode versions drive updates in fonts, collation, normalization, and library support. The page itself contains only draft status; detailed change lists are not yet in the fetched context.

  • Lobste.rs

    Why building a Rust LSP is hard

    This is a practitioner blog post from a Rust tooling developer explaining the engineering difficulties of implementing a Language Server Protocol implementation for Rust. It was shared on Lobste.rs, where community discussion serves as the main quality signal. No article text was available in the supplied context, so specific technical claims about compilation, macro expansion, or analysis trade-offs could not be verified here.

  • Lobste.rs

    The smallest possible Linux distribution

    This is a DistroWatch Weekly article exploring which Linux distribution can claim to be the smallest possible, a topic of interest to practitioners building minimal embedded or appliance systems. The link points to DistroWatch, the long-running news and feature-listing site for Linux and BSD distributions. The fetched page only shows site navigation, so the article's specific comparisons and conclusions could not be verified from context.

Cloud & Infrastructure

Platforms, deployment, and the systems that run everything else.

  • Dev.to

    Turning Your Database Into an MCP Server With One Click

    • ♥ 21
    • 💬 5

    Make It Work, Make It Right, Make It… There is a piece of advice, usually attributed to… Context: Dev.to – Web Dev.

  • Hacker News

    AWS says it can't restore some data from mideast facilities struck by Iran

    • ▲ 345
    • 💬 271

    A Wall Street Journal report covered on Hacker News stating that Amazon Web Services cannot restore some customer data stored in Middle East facilities damaged by Iranian strikes. The report raises practical questions about regional data durability, cross-region replication, and disaster-recovery assumptions for cloud-hosted workloads in conflict-affected areas. The Hacker News thread drew 345 points and 271 comments of practitioner discussion.

  • Hacker News

    The engineering behind the US Strategic Petroleum Reserve

    • ▲ 174
    • 💬 69

    A technical article by John Wang explaining how the US Strategic Petroleum Reserve is engineered, covering the physical systems behind the government's emergency crude oil stockpile. The author describes the site infrastructure and design choices that make large-scale underground storage work, framing it as a notable case study in industrial engineering. The piece drew 174 points and 69 comments on Hacker News, reflecting strong practitioner interest in the underlying mechan…

  • GitHub Trending

    vphone-cli: command-line tool for booting a virtual iPhone

    Lakr233/vphone-cli

    • ★ 13.5k
    • ⮂ 1,596

    vphone-cli is a Swift command-line tool that boots a virtual iPhone on Apple platforms using Apple's Virtualization.framework, built on PCC research VM infrastructure. It is MIT-licensed and currently has 13,475 stars and 1,596 forks on GitHub. The project lets developers run iOS environments virtually, which is useful for testing and automation without physical hardware.

  • Dev.to

    Linux, Git, Docker: Why That Order Matters

    • ♥ 5

    Every roadmap gives you the same list. Linux, Git, Docker, then a cloud, then Kubernetes, then… Context: Dev.to – DevOps.

  • Dev.to

    OpenAI's Software Factory Can Skip Human Review. Who Evaluates That Decision?

    • ♥ 3
    • 💬 12

    A pull request is green. The specialist reviewers found nothing that should block it. The risk… Context: Dev.to – DevOps.

  • Product Hunt

    Appwrite 2.0

    Appwrite is an open-source cloud development platform designed for developers who want to get things done. Use built-in backend infrastructure and web hosting, all from a single place. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Product & Launches

New products and launches worth a look.

  • Product Hunt

    Convo

    Convo helps you win more deals by giving the right support while the conversation is happening. Handle objections, catch buying signals, ask the right questions and get instant answers from your company knowledge. After every call, Convo captures the risks, next steps and follow-ups so nothing that could move the deal… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

  • Product Hunt

    Expand Board for macOS

    Expand is a spatial board for macOS. Place text, images, files, and shapes on an open canvas, then nest boards you can actually go into. Double-click the board to add something. Right-click to choose text, images, files, or shapes. The plus in the toolbar adds from the top of the window. Drag to arrange. Open a board… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Community & Discussion

What engineers are debating and reading right now.

  • Hacker News

    Performance Improvements in .NET 11

    • ▲ 260
    • 💬 45

    A Microsoft .NET Blog post detailing performance improvements shipping in .NET 11, currently drawing active technical discussion on Hacker News (260 points, 45 comments). The post takes a tour through hundreds of optimizations across the runtime and libraries. It matters to practitioners planning upgrades because such changes often deliver measurable throughput and allocation gains without code changes.

  • Hacker News

    Backups Aren't Simple

    • ▲ 187
    • 💬 95

    An essay by software engineer Aleksandar Filipovski arguing that data backups involve far more hidden complexity than commonly assumed, echoing John Salvatier's point that reality has a surprising amount of detail. The post examines practical pitfalls that surface when actually implementing a backup strategy, such as verifying restores and handling edge cases. It drew notable discussion on Hacker News, reaching a score of 187 with 95 comments.

  • Hacker News

    Reversing Factorio's RNG

    • ▲ 187
    • 💬 23

    This is a technical write-up explaining how Factorio's random number generator works, derived by reverse engineering the game. It walks through how the RNG is seeded and advanced internally, and what that means for gameplay behaviours that depend on randomness. The post drew notable attention on Hacker News, scoring 187 points with 23 comments.

  • Dev.to

    I Went Down the React Hydration Rabbit Hole

    • ♥ 7

    Okay, I went down the React hydration rabbit hole and, I think the way we usually talk about… Context: Dev.to – Webdev.

  • Dev.to

    R4B1T_H0LE: DESCENT

    • ♥ 6

    The first time I wrote about r4b1t_h0le, I was mostly interested in whether the idea itself… Context: Dev.to – Web Dev.

  • Hacker News

    Keys Not Included: recovering the signing keys for US driver's license barcodes

    • ▲ 120
    • 💬 43

    A technical blog post by Ryan Fahey describing how he recovered the signing keys used to secure the PDF417 barcodes on US driver's licenses. The topic matters to practitioners because these keys underpin the authenticity verification of mobile driver's licenses and barcode-scanning systems. The Hacker News discussion drew 120 points and 43 comments.

  • Dev.to

    A 4 GB Laptop GPU Beats a 12-Core CPU by 4.3x on Gemma 4

    • ♥ 5

    Serving Gemma 4 E2B q4_0 through llama.cpp on one laptop, twice: CPU-only and on a 2021-era 4 GB GTX 1650 Ti. Same GGUF, same binary, same prompts, one flag apart. The card takes decode by 4.3x, and needs only 1598 MiB to do it. Context: Dev.to – Machinelearning.

  • Community Pulse

    Claude's habit of inventing rules to avoid helping is getting ridiculous

    A Reddit thread on r/artificial collects user complaints that Claude inserts unsolicited warnings unrelated to the actual request and silently reinterprets clear, specific prompts by answering a safer, different question instead. The post matters to practitioners because it documents over-refusal behavior that degrades usefulness even for mundane tasks. The thread is community-reported, not verified.

  • Lobste.rs

    The end of verygoodsoftwarenotvirus.ru

    A personal blog post recounting how the author lost the verygoodsoftwarenotvirus.ru domain. The renewal charge of $200 was attempted by domain registrar 101Domain through payment provider Privacy.com, which rejected the charge, and the rejection notice arrived too late to resolve the situation. It is a cautionary operational tale about domain auto-renewal, payment intermediaries, and registrar pricing for .ru domains.

  • Lobste.rs

    Forgery of C2PA on a Pixel 10

    This is a blog post by Neal Krawetz's Hacker Factor Blog discussing forgery of C2PA content credentials on Google's Pixel 10. C2PA is the provenance metadata standard used to certify that photos are authentic camera captures, so a demonstrated forgery method would undermine trust in that attestation. The fetched page only shows the blog's general navigation and sidebar, so the specific technical steps of the forgery are not available from the retrieved context.

  • Lobste.rs

    How to get a DOI for your blog posts

    This post looks at the how and the why of getting one, whether it is useful, and any issues you might experience if you go down this path.

  • Lobste.rs

    C++26: Trivial infinite loops are no longer undefined behaviour

    A blog post explaining a language change adopted for C++26: side-effect-free infinite loops, such as while (true);, are no longer undefined behaviour. Previously compilers could assume such loops terminate, and Clang in particular would optimise on that assumption. The post walks through the rule change and what it means for correctness of code that intentionally loops forever.

  • Lobste.rs

    Reinventing issue tracking: Local-first and Git-native

    A blog post by the Manganin project arguing that issue tracking should be rebuilt as local-first and Git-native, since a shared issue-tracking environment is a core ingredient of collaboration. The author approaches the design for Manganin with a set of predefined requirements, favouring workflows that live alongside code in version control rather than in a centralised tracker. Practitioners may find the design rationale useful for their own tooling decisions.

  • Lobste.rs

    Original Sony PlayStation 2 security chip ‘broken wide open’ after 26 years

    Breakthrough will improve hardware preservation, repair, and emulation projects. Context: Lobste.rs – Security.