Today’s Signal
Open-weight and open-source releases dominated today's signals. Meta AI Research's Muse Spark Open drew major attention on Hacker News as the most capable US open-weight model to date, while the Superpowers skills framework for coding agents passed 300k stars on GitHub. Interpretability research also featured, with Goodfire's essay arguing neural networks are cleaner than previously believed.
- AI & Machine Learning
- Open Source
- Open-Weight Models
- Developer Tools
- Interpretability
Top Signals
The few items worth your attention first – each with the one-line reason it stood out today.
-
1
Superpowers: agentic skills framework for coding agents
obra/superpowers
Trending repository – 300.2k stars on GitHub.
- ★ 300.2k
- ⮂ 26.8k
Superpowers is an open-source framework and software development methodology that gives AI coding agents a set of composable skills plus initial instructions so they actually use them. Written in Shell and MIT-licensed, it covers topics like brainstorming and the software development lifecycle. The repository shows 300,155 stars and 26,806 forks, with 365 open issues.
GitHub Trending
-
2
Muse Spark Open
Top Hacker News discussion – 754 points.
- ▲ 754
- 💬 388
Muse Spark Open is Meta AI Research's new open-weight model, described in its announcement as the most capable US open-weight model to date. It is positioned around agentic capabilities and, notably, is claimed to run on a desktop for the first time on Apple M5 Ultra Mac Studios. The Hacker News discussion drew 754 points and 388 comments, reflecting practitioner interest in open-weight frontier models.
Hacker News
-
3
all-MiniLM-L6-v2: compact sentence-embedding model for semantic search
sentence-transformers/all-MiniLM-L6-v2
Trending model – 216.1M downloads.
- ♥ 6.3k
- ⇣ 216.1M
all-MiniLM-L6-v2 is a compact sentence-transformers model that maps sentences and paragraphs to 384-dimensional dense vectors, making it a common choice for clustering, semantic search, and retrieval pipelines. It is built on a six-layer MiniLM BERT architecture and ships with PyTorch, TensorFlow, ONNX, OpenVINO, and Rust runtimes. Licensed Apache-2.0, it has 6,343 likes and 216,129,209 downloads on Hugging Face.
Hugging Face Trending
-
4
Building Better Agents through End-to-End Evals
Popular developer article – 36 reactions.
- ♥ 36
- 💬 10
An article arguing that teams building AI agents should rely on end-to-end evaluations rather than proxy metrics. Its central claim is that the biggest mistake teams make is automating a process they do not understand; the author advises that before writing code, you should be able to describe exactly how a human does the job. The piece has drawn 10 comments on Dev.to.
Dev.to
-
5
Neural networks are clean
Top Hacker News discussion – 626 points.
- ▲ 626
- 💬 229
A technical essay from Goodfire arguing that neural network interpretability is more tractable than previously believed. The author contends that polysemanticity observed in early model organisms stemmed not from superposition but from several ordinary, mostly fixable issues, such as training and analysis artifacts. The essay claims most neurons in models up to trillions of parameters can now be understood, suggesting a better outlook for mechanistic interpretability researc…
Hacker News
-
6
bge-m3: multilingual multi-function embedding model from BAAI
BAAI/bge-m3
Trending model – 32.3M downloads.
- ♥ 3.9k
- ⇣ 32.3M
bge-m3 is an embedding model for sentence-similarity and feature-extraction tasks, published by BAAI under the MIT license and usable with the sentence-transformers library. It is built on XLM-RoBERTa and supports three capabilities the README calls Multi-Functionality, Multi-Linguality, and Multi-Granularity, meaning it handles dense, sparse, and multi-vector retrieval across languages and varying text lengths. It has 3,897 likes and 32,325,522 downloads on Hugging Face.
Hugging Face Trending
-
7
It caught "partner" "pareja" in an IRS rule and missed "return" "devolución": an offline MT checker for translators
Popular developer article – 12 reactions.
- ♥ 12
- 💬 2
An offline checker that ranks machine-translated segments by the risk of a major meaning error: a $1.22 Tinker LoRA, Gemma 4 on DigitalOcean, Sentry tracing. Context: Dev.to – AI/ML.
Dev.to
-
8
OpenCut: open-source CapCut alternative video editor
OpenCut-app/OpenCut
Trending repository – 94.8k stars on GitHub.
- ★ 94.8k
- ⮂ 9.3k
OpenCut is a free, open-source video editor positioned as an alternative to CapCut, written in TypeScript and MIT-licensed. The project has 94,806 stars and 9,331 forks on GitHub, with 379 open issues. A README note states the project is currently being rewritten from the ground up, so expect active change and possible instability in the near term.
GitHub Trending
AI & Machine Learning
Models, agents, and applied machine-learning work moving today.
-
GitHub Trending
Superpowers: agentic skills framework for coding agents
obra/superpowers
- ★ 300.2k
- ⮂ 26.8k
Superpowers is an open-source framework and software development methodology that gives AI coding agents a set of composable skills plus initial instructions so they actually use them. Written in Shell and MIT-licensed, it covers topics like brainstorming and the software development lifecycle. The repository shows 300,155 stars and 26,806 forks, with 365 open issues.
-
Hacker News
Muse Spark Open
- ▲ 754
- 💬 388
Muse Spark Open is Meta AI Research's new open-weight model, described in its announcement as the most capable US open-weight model to date. It is positioned around agentic capabilities and, notably, is claimed to run on a desktop for the first time on Apple M5 Ultra Mac Studios. The Hacker News discussion drew 754 points and 388 comments, reflecting practitioner interest in open-weight frontier models.
-
Hugging Face Trending
all-MiniLM-L6-v2: compact sentence-embedding model for semantic search
sentence-transformers/all-MiniLM-L6-v2
- ♥ 6,343
- ⇣ 216.1M
all-MiniLM-L6-v2 is a compact sentence-transformers model that maps sentences and paragraphs to 384-dimensional dense vectors, making it a common choice for clustering, semantic search, and retrieval pipelines. It is built on a six-layer MiniLM BERT architecture and ships with PyTorch, TensorFlow, ONNX, OpenVINO, and Rust runtimes. Licensed Apache-2.0, it has 6,343 likes and 216,129,209 downloads on Hugging Face.
-
Dev.to
Building Better Agents through End-to-End Evals
- ♥ 36
- 💬 10
An article arguing that teams building AI agents should rely on end-to-end evaluations rather than proxy metrics. Its central claim is that the biggest mistake teams make is automating a process they do not understand; the author advises that before writing code, you should be able to describe exactly how a human does the job. The piece has drawn 10 comments on Dev.to.
-
Hacker News
Neural networks are clean
- ▲ 626
- 💬 229
A technical essay from Goodfire arguing that neural network interpretability is more tractable than previously believed. The author contends that polysemanticity observed in early model organisms stemmed not from superposition but from several ordinary, mostly fixable issues, such as training and analysis artifacts. The essay claims most neurons in models up to trillions of parameters can now be understood, suggesting a better outlook for mechanistic interpretability researc…
-
Hugging Face Trending
bge-m3: multilingual multi-function embedding model from BAAI
BAAI/bge-m3
- ♥ 3,897
- ⇣ 32.3M
bge-m3 is an embedding model for sentence-similarity and feature-extraction tasks, published by BAAI under the MIT license and usable with the sentence-transformers library. It is built on XLM-RoBERTa and supports three capabilities the README calls Multi-Functionality, Multi-Linguality, and Multi-Granularity, meaning it handles dense, sparse, and multi-vector retrieval across languages and varying text lengths. It has 3,897 likes and 32,325,522 downloads on Hugging Face.
-
Hacker News
Jev meets the Trolley Problem
- ▲ 409
- 💬 174
An article in which author Zach Landes poses the Trolley Problem to Jev and 13 other decision models, comparing their ethical choices. It responds to recent buzz around Jev and Jev-like models, which are being discussed in AI and software circles as fast, cheap, general-purpose decision makers. The piece examines how such models handle a classic moral dilemma, relevant to practitioners evaluating automated decision systems. The discussion drew 409 points and 174 comments on…
-
Hugging Face Trending
bert-base-uncased: Google's original English BERT masked-LM model
google-bert/bert-base-uncased
- ♥ 3,432
- ⇣ 33.2M
bert-base-uncased is Google's original BERT base model, pretrained on English text with a masked language modeling (MLM) objective and exposed via the fill-mask pipeline in the transformers library. It lowercases all input text before processing. Released under the Apache-2.0 license with 3,432 likes and 33,224,693 downloads, it ships in multiple formats including PyTorch, TensorFlow, JAX, ONNX, and CoreML.
-
Hacker News
Krea 3 – An image model built for editing at scale
- ▲ 289
- 💬 90
Krea 3 is an AI image editing model from Krea, positioned for production workflows where edited products must stay visually intact. The company claims it runs 4× faster than Nano Banana Pro and, compared to GPT Image 2, is 10× faster and 3× cheaper. It is marketed for high-volume editing with pricing aimed at scale. The Hacker News thread drew 289 points and 90 comments discussing practical implications.
-
Dev.to
It caught "partner" "pareja" in an IRS rule and missed "return" "devolución": an offline MT checker for translators
- ♥ 12
- 💬 2
An offline checker that ranks machine-translated segments by the risk of a major meaning error: a $1.22 Tinker LoRA, Gemma 4 on DigitalOcean, Sentry tracing. Context: Dev.to – AI/ML.
-
Dev.to
AI torture chamber: deep dive into whether model can feel pain
- ♥ 10
- 💬 6
Someone built a torture chamber for small AI models, and the internet wanted it gone. I went through… Context: Dev.to – AI/ML.
-
GitHub Trending
scientific-agent-skills: Python library of validated science skills for AI agents
K-Dense-AI/scientific-agent-skills
- ★ 50.8k
- ⮂ 4,512
Scientific Agent Skills (formerly Claude Scientific Skills) is a Python, MIT-licensed repository that packages pre-built, validated capabilities for AI coding agents working in scientific domains. It provides 177 ready-to-use skills plus access to 100+ scientific databases covering biology, chemistry, medicine, and drug discovery, and works with agents such as Cursor, Claude Code, and Codex. The repo has 50,795 stars and 4,512 forks.
-
Dev.to
Best AI Inference Platforms for Financial Document Processing in 2026: Why Superlinked SIE Tops My List
- ♥ 6
- 💬 1
A production incident usually gets my attention faster than an invoice. But in financial document… Context: Dev.to – Ai.
-
GitHub Trending
claude-plugins-official: Anthropic's curated Claude Code plugin directory
anthropics/claude-plugins-official
- ★ 39.5k
- ⮂ 4,350
This is Anthropic's official, managed directory of plugins for Claude Code, the company's command-line coding agent. Written mostly in Python and licensed under Apache-2.0, it collects curated plugins alongside topics like MCP and skills, letting users extend Claude Code with additional capabilities. The repository has 39,460 stars and 4,350 forks, with documentation hosted at code.claude.com.
-
Dev.to
EmbeddingGemma 2 on Cloud Run: Minimum Specs, and When an NVIDIA L4 Pays for Itself
- ♥ 4
- 💬 1
How small a Cloud Run instance EmbeddingGemma 2 fits in, whether an int4 repack shrinks it further, and how many documents a burst needs before an NVIDIA L4 costs less than a 1 vCPU int8 service. Context: Dev.to – AI/ML.
-
Dev.to
I was tired of manual bookkeeping, so I wrote an offline receipt parser with Ollama
- ♥ 4
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle … Context: Dev.to – Devchallenge.
-
GitHub Trending
XERJ: Rust tool that indexes folders for token-efficient AI search
xerj-org/xerj
- ★ 5,974
- ⮂ 320
XERJ is an open-source local AI search engine written in Rust and licensed under Apache-2.0, designed to let coding agents retrieve relevant code instead of reading files one by one. A single command auto-indexes code, docs, logs, and PDFs for search, RAG, security audits, and agent memory, and it claims to use 40x fewer tokens than grep. It is Elasticsearch compatible. The repository has 5,974 stars and 320 forks.
-
Product Hunt
Afterparty
Note takers give you a list. Afterparty does the list. Paste a transcript or connect your note taker, and agents draft every email, message, invite and CRM note in the right app, with context from your tools. Nothing goes out until you approve it. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.
-
Product Hunt
Dreamscale Labs
Dreamscale Labs (YC F26) is building the real-time cloud inference platform for robotics. We serve frontier physical AI models (e.g. VLAs, WAMs) over the cloud with ultra-low latency. Instead of purchasing expensive GPUs, you can run large SOTA models using on-demand cloud inference! Worth checking for pricing vs value, integrations, data ownership, and workflow fit.
-
Product Hunt
siliXon
siliXon is a product launching on Product Hunt that converts a plain-English description of a device into a routed, manufacturable PCB that can be ordered. Its design agent, named Rocky, asks clarifying questions, selects real purchasable components, places them, draws the schematic, and routes the copper. It is aimed at anyone with an idea, not only engineers.
-
Product Hunt
Navige
Navige uses Sufficiency Intelligence to cut AI agent costs while work runs. It sends suitable requests to smaller models, caches repeated reads and trims bulky tool results. If unsure, it keeps your chosen model. Set budgets, catch runaway loops and approve sensitive actions. See costs and savings by job, with estimat… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.
-
Product Hunt
SuperLocalMemory
SuperLocalMemory is one local-first memory brain for every AI agent. Claude Code, Codex, Cursor, ChatGPT and any MCP or CLI agent share the same governed memory. Instead of guessing, recall tells you whether a memory answers the question, is only related, or is missing. It remembers pictures and PDFs, tracks when each… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.
-
Community Pulse
Anthropic's Mythos found so many software flaws, Bank of America hired 1,000 contractors to fix them
A Reddit discussion on r/artificial links Anthropic's Mythos to a claim that the tool found so many software flaws that Bank of America hired 1,000 contractors to fix them. The post is flagged only as a community signal with no independent verification, so the underlying figures and events are unconfirmed. It matters mainly as a data point in the ongoing debate about AI-driven code analysis and AI governance in enterprise software.
-
Community Pulse
Unsupervised AI agent reportedly deletes TV show’s entire edit weeks before release, erasing months of work — TV show can't air, AI agent was given access to the production server…
A community discussion on r/artificial about a report that an unsupervised AI agent, given access to a production server, deleted a TV show's entire edit weeks before its release. The claimed result is that months of editing work were erased and the show cannot air. The item is a community-sourced signal with no independent verification of the incident provided in the context.
-
Community Pulse
One of the favorite parts of parenting has always been reading to the kiddos. Why would anyone voluntarily give that up?
A Reddit discussion in r/artificial about parents using AI to read stories to their children, sparked by a poster questioning why anyone would give up reading to their kids personally. The thread touches on the trade-off between the convenience of AI-narrated bedtime stories and the bonding value of a parent reading aloud. The context available is minimal, so specific claims or arguments from the thread cannot be verified.
-
Community Pulse
Scientists worry AI is stealing their ideas
A Reddit discussion on r/artificial about concerns that AI systems may be taking scientists' research ideas, presumably by learning from their papers, preprints, or other outputs. The thread reflects anxiety among researchers about attribution and credit as language models absorb scientific writing at scale. Context for this item is thin, so the specific claims or examples raised in the discussion could not be verified.
-
Community Pulse
Accenture Tells Employees They Can Now Spend Only $29 on Claude Per Month
A Reddit thread in r/artificial reports that Accenture has told employees they can spend only $29 per month on Anthropic's Claude AI assistant. The claim signals how large consultancies are tightening budgets for AI tooling after broad internal rollouts, which affects individual productivity limits for engineers and consultants. The figure is a community signal and not independently verified, so treat the specifics with caution.
-
Community Pulse
AI deepfakes are getting out of hand.
A Reddit discussion on r/artificial about AI voice deepfakes being used in phone and message scams. The original poster describes realizing that a recognized caller number or contact no longer guarantees the person is genuine, since cloned voices can impersonate family members, and asks how people can protect themselves. It reflects growing practitioner and public concern about voice cloning enabling fraud despite community-only verification.
-
Community Pulse
Which of Kissinger’s 6 AI scenarios do you think is most likely?
A Reddit discussion on r/artificial asking which of six AI futures outlined in Henry Kissinger's final book readers consider most likely. The quoted scenarios include humanity losing control of an existential race between multiple actors trapped in a security dilemma, and supreme hegemony exercised by a victor unchecked by traditional checks and balances. It matters to practitioners as a framing of geopolitical AI risk.
-
Community Pulse
Companies rushed in on AI. Now some are pulling back
A Reddit thread on r/artificial discussing a report that companies which rushed to adopt AI are now scaling back their investments. The discussion centers on whether early AI deployments have failed to deliver expected returns, prompting some organizations to reconsider spending. Context is limited to community discussion rather than a verified article, so specific claims about which companies or how much spending is being cut are not substantiated here.
-
Community Pulse
Really shouldn't have ignored people actually qualified to secure your shit…
A Reddit discussion post on r/artificial arguing that the information security (InfoSec) discipline already covers problems such as insider threats, and that people focused on AI safety and alignment have dismissed qualified security practitioners. The post frames this as a criticism of the AI safety community's priorities. Only minimal context is available beyond the post's own claims, and the argument has not been independently verified.
-
Community Pulse
Eight states sue OpenAI over ChatGPT’s alleged harms to users
A lawsuit filed by eight US states alleges that OpenAI's ChatGPT caused harms to users, escalating legal scrutiny of consumer AI products. The case is being discussed in Reddit's r/artificial community as a community signal rather than a verified news report. For practitioners, it signals growing regulatory and litigation risk around conversational AI deployment and user-safety obligations.
-
Lobste.rs
Linus Torvalds on AI-assisted kernel contributions
This is a Linux kernel mailing list thread in which Linus Torvalds responds to a patch proposing to remove 'Assisted-by' references from kernel documentation, a tag associated with AI-assisted contributions. The discussion, involving maintainers such as Laurent Pinchart and Kees Cook, touches on how AI involvement in kernel development should be recorded. It matters to practitioners because it signals how a major upstream project may treat AI attribution.
Security
Incidents, advisories, and defensive discussion – verify before acting.
-
Hacker News
Someone on Torrent Sites Kept Fucking with My Sonarr
- ▲ 307
- 💬 142
A reverse-engineering rant by a homelab blogger about malicious uploads on torrent sites that break Sonarr, the TV automation tool. The author details how someone kept uploading skid-grade malware disguised as South Park episodes, which interfered with their automated media downloads, and walks through the analysis. It is a practical read for homelab practitioners using torrent indexers. The post drew 307 points and 142 comments on Hacker News.
Verification: community signal; use the linked source as context, not final confirmation.
-
Dev.to
Ten findings, ten answers — publishing the audit of our own black box
- ♥ 6
- 💬 3
An external line-by-line audit of our flight recorder found 10 vulnerabilities. We published all ten with their file, line and severity — and answered every one in release 0.21.0, each fix carrying its own named test. 392 tests collected. Context: Dev.to – Security.
Verification: community signal; use the linked source as context, not final confirmation.
-
Security Radar
CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-21589 is a vulnerability affecting multiple Atlassian products in which files or directories are accessible to external parties, meaning unintended parties could reach data they should not see. It is listed in the CISA Known Exploited Vulnerabilities catalog, indicating active exploitation has been reported. Readers should verify affected product versions and mitigation steps in the primary Atlassian advisory, as specific details were not available in the fetched co…
Verification: cisa kev confirmed.
-
Security Radar
CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability
A command injection vulnerability, CVE-2026-105134, affecting AhsayCBS, a backup software product from Ahsay. It is listed in the CISA Known Exploited Vulnerabilities catalog, meaning federal and other operators are expected to treat patching as urgent. The exact affected versions, exploitation details, and mitigation steps are not available from the supplied context and should be confirmed via the NVD entry and vendor advisory.
-
Security Radar
CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
CVE-2026-76519 is a relative path traversal vulnerability affecting Cisco Secure Email Gateway, and it has been added to the CISA Known Exploited Vulnerabilities catalogue, which means US federal agencies and other operators are expected to treat it as actively exploited in the wild. The entry is listed in NVD with verification status recorded as CISA KEV confirmed. Specific technical details such as affected versions, CVSS score, and exploitation mechanics were not availabl…
Open Source & Dev Tools
Libraries, frameworks, and developer tooling gaining traction.
-
Hacker News
Wayland desktop for Linux with skeuomorphic design
- ▲ 575
- 💬 227
DEsk is an open-source desktop environment for Linux running on Wayland, written in C and released under the MIT license. It aims at a skeuomorphic visual design rather than flat modern UI conventions. The project is at v0.1.2 beta, its first public release with fixes plus an installer for Fedora. It has 876 stars and 24 forks on GitHub.
-
GitHub Trending
OpenCut: open-source CapCut alternative video editor
OpenCut-app/OpenCut
- ★ 94.8k
- ⮂ 9,331
OpenCut is a free, open-source video editor positioned as an alternative to CapCut, written in TypeScript and MIT-licensed. The project has 94,806 stars and 9,331 forks on GitHub, with 379 open issues. A README note states the project is currently being rewritten from the ground up, so expect active change and possible instability in the near term.
-
Dev.to
Stop Electing a Leader Tab. SharedWorker Just Holds the Connection.
- ♥ 8
Electing a leader tab to own one shared WebSocket works great — until the leader is the tab someone closes. SharedWorker skips the election: the connection lives in the worker, not in any tab, so there's no leader to lose. Context: Dev.to – Javascript.
-
Hacker News
Any window from your Mac, on your iPhone and iPad
- ▲ 123
- 💬 24
sill is a free, open-source Swift app that streams any window from a Mac to an iPhone or iPad in real time, with support for touch, Apple Pencil, trackpad, and keyboard input on the remote device. It works without any servers and is licensed under Apache-2.0. The repo has 1,962 stars and reached 123 points with 24 comments on Hacker News.
-
Lobste.rs
Announcing Rust 1.99.1
A maintenance point release of the Rust programming language, published by the Rust Release Team on October 15, 2026. Point releases like this typically bundle bug fixes rather than new features, keeping the stable toolchain reliable for production users. Rust itself targets reliable, efficient systems software, and practitioners on Lobste.rs linked the announcement for engineering visibility. No detailed changelog was available in the fetched context.
-
Lobste.rs
Haxy on Haxy
Haxy is a new git forge, a self-hosted alternative to platforms like GitHub or GitLab for hosting Git repositories. The linked page, titled "Haxy on Haxy," appears to host the project's own repository on the forge itself, serving as a live demonstration of the tool. The fetched context is limited to a single line confirming Haxy is a new git forge; implementation and operational details are not provided.
-
Lobste.rs
Gleam case exhaustiveness, as a fan
This is a practitioner blog post reviewing the Gleam programming language's case-expression exhaustiveness checking, reviewed against a specific compiler commit (85dca0df7d84). The author writes as an enthusiastic outside observer rather than a core contributor, walking through how Gleam verifies that pattern matches cover all cases. Only limited page content was available, so deeper implementation detail lives in the full article and its Lobste.rs discussion.
-
Lobste.rs
Microsoft Defender for Linux
A Microsoft Tech Community post about running Microsoft Defender on Linux desktops. It argues that as more developers use Linux desktops, those machines become attractive targets because they hold high privileges, high-value access, and are easy for administrators to overlook. The post describes how Defender can be deployed to protect these Linux desktop systems.
Cloud & Infrastructure
Platforms, deployment, and the systems that run everything else.
-
Dev.to
PostgreSQL 19's REPACK CONCURRENTLY swaps a five-second table lock for one under a second
- ♥ 8
I bloated a Postgres 19 beta table, then rewrote it with VACUUM FULL and with the new REPACK CONCURRENTLY: 4.3-5.9s of blocked client time against 0.3-0.9s, and a documented replication-slot limit I managed to actually hit. Context: Dev.to – DevOps.
-
Dev.to
How to Generate Bingo Cards Without Accidentally Reusing the Same Words
- ♥ 7
Generating a bingo card looks like filling a grid, but the details show up as soon as users request… Context: Dev.to – Javascript.
-
Hacker News
BIPM decides to stop adding leap seconds to UTC
- ▲ 144
- 💬 68
The BIPM's General Conference on Weights and Measures passed Resolution 5 at its 28th meeting (2026), deciding to stop adding leap seconds to UTC. The resolution covers technical actions to ensure the continuity of Coordinated Universal Time. For practitioners, the change removes a long-standing source of irregularity in timekeeping systems, since leap seconds historically required careful handling in NTP servers, databases, and distributed systems. The Hacker News discussio…
-
Hacker News
RPKI now protects 70% of internet routes
- ▲ 110
- 💬 34
An IPinfo analysis reports that Resource Public Key Infrastructure (RPKI), the cryptographic framework for validating BGP route announcements, now covers 70% of internet routes, up from 54% a year ago. The article examines what drove the increase, how effectively RPKI rejects invalid routes, and where validation gaps still remain. The Hacker News thread drew 110 points and 34 comments discussing practical implications for network operators.
-
GitHub Trending
LibreTV: self-hosted video streaming aggregator built on Next.js
LibreSpark/LibreTV
- ★ 18.3k
- ⮂ 28.8k
LibreTV is an open-source video aggregation and streaming web app that can be deployed in about a minute, including via Docker. The Next.js migration is built with Next.js 15 (App Router), TypeScript, and Tailwind CSS, using ArtPlayer with hls.js as the playback core, and supports light and dark themes. The repository has 18,328 stars and 28,806 forks and is licensed under AGPL-3.0.
-
Product Hunt
OpenMuse
OpenMuse is an open-source, self-hostable personal assistant intended to work with any harness. Because it is self-hostable, users can run it on their own infrastructure rather than a third-party cloud, which may appeal to developers who want control over their data. Details on its specific capabilities and architecture are limited in the available context, and the linked Product Hunt page appears to point to CopilotKit, a separate agentic frontend product.
-
Lobste.rs
Forgejo v17.0 is available
Forgejo is a lightweight, community-developed, self-hosted platform for code collaboration, an alternative to hosted forges like GitHub or GitLab that you run on your own infrastructure. Version 17.0 was released on 15 October 2026. The announcement is worth a look for operators who self-host Forgejo and need to plan upgrades to the new major release.
-
Lobste.rs
Epic's EAC2 v2 seems fairly easily bypassable
A technical blog post by Matthew Garrett examining Epic's announced version 2 of Easy Anti-Cheat for Linux, which uses the Linux eBPF security module to monitor system activity and adds extra infrastructure intended to prevent bypasses. The author argues the design, which includes requiring secure boot to be enabled, still appears fairly easy to circumvent. The post is relevant to engineers working on kernel-level anti-cheat or eBPF-based security enforcement.
-
Lobste.rs
My self-hosted infrastructure with Incus OS
A blog post by Solene describing a home self-hosting setup rebuilt over the last seven months around Incus OS. The author explains how the infrastructure is organized and how its security layers fit together, covering the practical decisions involved in running personal services on the system. It is aimed at practitioners interested in concrete implementation and operational detail rather than general tutorials.
Product & Launches
New products and launches worth a look.
-
Product Hunt
Superdraft
Superdraft is a newly launched marketing tool that detects moments when a business should email its customers and turns them into ready-to-send drafts. It generates on-brand emails including copy, images, and layout; users can edit the drafts, export them as HTML, and send them via their existing email platform. It targets small business owners who miss email opportunities while busy with operations.
-
Product Hunt
Actually Asked
Actually Asked puts a FAQ section on your site, in your fonts and colours, not a chat bubble. Visitors ask their own question or highlight a sentence to ask about it. Answers come only from your pages, and the questions asked most join your FAQ. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.
-
Product Hunt
CinemaLut
CinemaLut turns any reference frame into a LUT for your footage. Drop in a film still, a photo, or a clip. It measures the grade: tone curve, shadow/midtone/highlight tints, saturation per band. Then it builds a matching LUT for your shot. Works with log or Rec.709 from any camera. 60 original looks in 8 collections,c… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.
Community & Discussion
What engineers are debating and reading right now.
-
Hacker News
AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware
- ▲ 445
- 💬 592
A research report from The Citizen Lab documenting what it calls the first public confirmation of zero-click mercenary spyware delivered through targeted ads. The technique, named AdFection, was used to infect Al Jazeera devices with Candiru spyware. The report also identifies Discover-Tech as a company helping mercenary surveillance vendors track targets. The Hacker News discussion drew 445 points and 592 comments.
-
Hacker News
Celebrating 70 Years of Fortran
- ▲ 257
- 💬 107
An anniversary blog post by Joe Wallwork on the fortran-lang site marking 70 years of the Fortran programming language, which the site describes as a high-performance parallel programming language. Published 15 September 2026, it drew an active Hacker News discussion (257 points, 107 comments) reflecting on Fortran's longevity and continued use in scientific and high-performance computing.
-
Hacker News
New Withings Users Must Pay $99/Year for Apple Health Syncing
- ▲ 235
- 💬 162
A Withings support forum post reports that new accounts can no longer sync health data to Apple Health without a $99/year subscription, a change the author describes as silent and anti-consumer. The post, which drew 223 likes and 167 comments on Withings' own forum, sparked a Hacker News discussion with 235 points and 162 comments. Practitioners with Withings devices should check whether their existing account is affected.
-
Dev.to
Ctrl-C won't stop a bash loop if the program inside it catches the signal
- ♥ 11
A Python or Node program that handles Ctrl-C and exits cleanly makes bash carry on with the next loop iteration. dash, zsh, busybox ash and mksh quit instead. Here is the code in bash that decides. Context: Dev.to – Bash.
-
Hacker News
Meta’s new commercial terms will allow the scraping of news sites: experts
- ▲ 185
- 💬 72
A Nieman Journalism Lab report on Meta's updated commercial terms, which legal experts interpret as authorizing Meta to scrape publishers' websites. Starting October 30, business accounts that keep using Facebook, Instagram, or WhatsApp will be deemed to consent to this scraping of their sites. The practical implication for publishers is that continued use of Meta platforms may carry an implicit licensing cost. The Hacker News thread drew 185 points and 72 comments.
-
Hacker News
Apple routed a graphite pipe through the iPhone Duo's hinge to dissipate heat
- ▲ 113
- 💬 72
An article reporting that Apple routed a graphite pipe through the hinge of the iPhone Duo to dissipate heat. The design matters for foldable-phone engineering because hinges concentrate heat in a thin enclosure with little room for conventional cooling. The item drew notable Hacker News engagement, with a score of 113 and 72 comments discussing the practical implications of the thermal design.
-
Lobste.rs
JPEG XL vs AVIF for web use-cases
An engineering comparison by Jake Archibald, posted 15 October 2026, examining where JPEG XL outperforms or falls short of other formats now that it has shipped in all major browsers. Based on his examples and benchmarks, the headline conclusion is that for lossy photos on the web, AVIF almost always produces smaller files than JPEG XL. The article is aimed at developers choosing an image format.
-
Lobste.rs
My C23 Conventions
A blog post by Abner laying out the author's personal coding conventions for the C23 standard of the C language. It is the first in a three-part series on using modern C as of late 2026. The author previously followed the influential "How I Program C" practices for years, even feeling guilty about choosing C99 over -ansi -pedantic, and now explains what changes with C23 features.
-
Lobste.rs
Sunsetting decomp.dev
A shutdown announcement for decomp.dev, a site launched in 2024 to centralize matching decompilation progress and build a community around it. The author notes that matching decompilation is a brutally difficult, time-consuming task, on the scale of years for any moderately sized game, even with several active contributors. Practitioners can read it for operational lessons on winding down a community project.
-
Lobste.rs
The Costa GUI
Costa is a free, small graphical user interface that runs on top of MS-DOS or compatible operating systems, replacing the DOS command prompt with a user-friendly interface. It is distributed free of charge and comes with a blog and archive on its site. The project interests practitioners maintaining or exploring retro DOS-era software environments.
-
Lobste.rs
End-to-end encrypted relays for OCapN
An engineering post by Jessica Tallon at Spritely Institute explaining end-to-end encrypted relays for OCapN, the object-capability network protocol underlying Spritely's distributed systems work. It addresses the problem that establishing direct peer-to-peer connections between arbitrary computers over the internet is difficult, with relays carrying encrypted traffic they cannot read. Relevant to developers building decentralized, capability-secure communication systems.