Orca Agent Fleet Manager, Tesla Roadster Buzz, Claude ECDSA Find – Oct 17

Orca: desktop and mobile app for running a fleet of coding agents

stablyai/orca

• ★ 94.7k
• ⮂ 6,057

Orca is an open-source workspace for managing multiple AI coding agents, such as Grok Bot and Codex, using your own existing subscriptions. It runs on desktop, mobile, and a remote runtime, and lets you monitor and steer agents from your phone, receiving notifications when an agent finishes and sending follow-ups from anywhere. The TypeScript project is MIT-licensed and has 94,675 stars and 6,057 forks.

all-MiniLM-L6-v2: compact sentence-embedding model

sentence-transformers/all-MiniLM-L6-v2

• ♥ 6,351
• ⇣ 213M

all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to a 384-dimensional dense vector space, suited for tasks like clustering and semantic search. It is a 6-layer MiniLM distilled model available under the Apache-2.0 license, with exports for PyTorch, TensorFlow, ONNX, OpenVINO, and Rust. It has 213,006,807 downloads and 6,351 likes on Hugging Face.

ruflo: open-source multi-agent harness for Claude Code and Codex

ruvnet/ruflo

• ★ 75.7k
• ⮂ 8,973

ruflo is a TypeScript framework, MIT-licensed, for orchestrating multiple AI agents that work together on autonomous workflows and conversational systems. It describes itself as an agent meta-harness for Claude Code and Codex, with features including adaptive memory, self-learning, federation, and vector RAG integration. The repository has 75,733 stars and 8,973 forks, with 1,076 open issues.

Dev Opportunity Radar #21: $500K Y Combinator Funding, Bolt Builders Week, and AI Safety Research Residency

• ♥ 58
• 💬 6

TL;DR Welcome back to Dev Opportunity Radar! This is a weekly series where I share opportunities,…

bge-m3: multilingual multi-function embedding model from BAAI

BAAI/bge-m3

• ♥ 3,901
• ⇣ 31.9M

bge-m3 is a sentence-embedding model from BAAI for sentence-similarity and feature-extraction tasks, usable with the sentence-transformers library. It is described as versatile across three axes: multi-functionality, multi-linguality, and multi-granularity, meaning it supports multiple retrieval functions, many languages, and varied input lengths. It is built on XLM-RoBERTa, ships MIT-licensed, and has 31,932,601 downloads and 3,901 likes on Hugging Face.

CLI-Anything: toolkit for making software agent-native

HKUDS/CLI-Anything

• ★ 53.6k
• ⮂ 4,867

CLI-Anything is an open-source Python project from HKUDS that aims to make arbitrary software usable by AI agents by generating command-line interfaces for it, distributed through a companion hub at clianything.cc. The repository demos show agents using the generated CLIs to produce artifacts such as CAD builds, 3D scenes, diagrams, and subtitles. It has 53,634 stars and 4,867 forks, and is Apache-2.0 licensed.

bert-base-uncased: Google's base English BERT masked-language model

google-bert/bert-base-uncased

• ♥ 3,433
• ⇣ 32.1M

This is the original base-size BERT model from Google, pretrained on English text with a masked language modeling objective and uncased input (text lowercased before tokenization). It is used for fill-mask tasks and fine-tuning on downstream NLP tasks, and ships in the transformers library across PyTorch, TensorFlow, JAX, and ONNX formats. It is Apache-2.0 licensed and remains heavily used, with 32,099,524 downloads and 3,433 likes on Hugging Face.

ai-job-search: local AI job application framework built on Claude Code

MadsLorentzen/ai-job-search

• ★ 48.8k
• ⮂ 16.7k

ai-job-search is a Python-based, MIT-licensed framework that automates job hunting tasks on the user's own machine using Claude Code. It evaluates job postings, tailors CVs, writes cover letters, and helps with interview preparation, and is designed to be forked so users keep control of their data. The repository has 48,841 stars and 16,693 forks on GitHub.

What I Look for Before Trusting an AI App Builder With a Real Project

• ♥ 39
• 💬 1

AI app builders can now generate a working database, authentication flow, and deployed URL from a… Context: Dev.to – Web Dev.

What if the scoreboard had no delay?

• ♥ 35

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle. … Context: Dev.to – Devchallenge.

I built a lie detector for AI coding agents. Then I read the rules.

• ♥ 32
• 💬 22

When an AI agent commits a change to code, it makes a claim about what it changed: "fixed typos" or… Context: Dev.to – AI/ML.

90% of US working hours are spent on tasks not covered well by AI benchmarks

• ▲ 469
• 💬 401

A Mercor research report arguing that AI benchmarks cover only a small slice of economically valuable US work. The 'Benchmark Map' places AI benchmarks across the American economy, measuring which parts of the labor force are covered by unsaturated, public, agentic benchmarks. It contends benchmarks have multiplied in recent years while coverage of real work remains limited, implying benchmark gains may not transfer to actual job tasks. The Hacker News thread drew 469 points…

Apple ML Research: Muse Spark Open with MLX on Mac Studio

• ▲ 300
• 💬 149

An Apple Machine Learning research post describing local and distributed large language model inference using MLX and RDMA across Mac Studio hardware. MLX on Apple silicon lets researchers and developers run the latest models and methods locally and privately. The Hacker News discussion drew 300 points and 149 comments, reflecting practitioner interest in practical Mac-based inference setups.

Llama.cpp on a jailbroken PS5: run any GGUF model natively on the console

• ▲ 262
• 💬 64

PS5LM is a C++ homebrew project (GPL-3.0, 405 stars, 23 forks) that ports llama.cpp to a jailbroken PlayStation 5, letting the console run any GGUF-format language model locally, starting with Qwen 3.8. The README states it also runs Jev-like decision models on the GPU and exposes an Ollaya-style /v1/systemone API returning typed decisions with calibrated probabilities. It requires a jailbroken console, so it is limited to homebrew-capable PS5 units.

You could have invented transformers from memory

• ▲ 238
• 💬 62

A technical essay by Alex Wang arguing that the transformer architecture can be derived from associative-memory principles, framing every layer as a memory store rather than presenting attention as an arbitrary design. It walks through the math of how key-value retrieval leads to attention, aiming to make the architecture feel inevitable to readers. The post drew a community discussion with a score of 238 and 62 comments on Hacker News.

Butlerian Jihad

• ▲ 175
• 💬 93

A Dune fandom encyclopedia page describing the Butlerian Jihad, the fictional universe-wide war against computers, thinking machines, and conscious robots, whose aftermath produced the commandment "Thou shalt not make a machine in the likeness of a human mind." Hacker News users are discussing it at length, with 175 points and 93 comments. The discussion appears to use the Dune backstory as a lens on present-day AI development and automation.

Ultramarine 1 Flash

• ▲ 158
• 💬 48

Ultramarine 1 Flash is an open model from Paper Instruments aimed at professional knowledge work, producing client-facing decks, models, and memos for finance, law, consulting, and operations at lower cost than frontier models. The vendor claims "Fable-class" performance, reporting 62.9 on its JobBench benchmark versus 57.4 for Claude Fable 5 and 60.6 for Gemini 3.8 Flash. Model weights are listed as coming soon; an API and technical report are available.

FLUX 3 Image Klein

• ▲ 150
• 💬 40

FLUX 3 Image Klein is an open-weights text-to-image model released by Black Forest Labs, positioned as combining frontier image quality with customization and speed. It has 5.6 billion parameters and, per the announcement, is first among its releases to support text-to-image, multi-reference generation, and editing. The Hacker News thread drew 150 points and 40 comments.

I Built Graffitizer — A Free Browser-Based Graffiti Lettering Studio with SVG & Transparent PNG Export (No AI, No Signup)

• ♥ 7
• 💬 1

If you have ever tried to create custom street-art lettering or a stylized wordmark for a poster,… Context: Dev.to – Web Dev.

Hands-On with AWS DevOps Agent: Changing DevOps Work Without Replacing Engineers

• ♥ 7

Introduction When an AI agent can investigate incidents, read operational context, query… Context: Dev.to – DevOps.

pstack-claude: agent workflow stack ported beyond Cursor

michael-denyer/pstack-claude

• ★ 2,704
• ⮂ 244

A JavaScript repository that ports Poteto's pstack, an opinionated Cursor skill stack by Lauren Tan designed to improve agent outcomes, to other AI coding harnesses including Claude Code, Codex, Copilot, Pi, OpenCode, Gemini, and Prime Agent. It translates Cursor primitives into rigorous agent workflows usable across those tools. The repo is MIT-licensed and has 2,704 stars and 244 forks.

Tetriz Harness

Open-source tools for teams on Claude Code, Codex, Cursor, and Kiro. Harness Recommendations finds what’s broken in your agents’ rules, skills, hooks, and permissions, and what’s missing based on your team’s sessions. Control Plane ships fixes team-wide. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Helicon

Helicon gives Muse Code, Meta's coding agent CLI, a proper home: projects and sessions in one sidebar, readable approvals, inline diffs and your plan meter. Free, MIT, no API key. Windows (no WSL), macOS, Linux, VS Code. Unofficial, not affiliated with Meta. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

GBrain Tools

GBrain gives you a memory and a set of connected accounts that every AI can reach. Write a note in Claude Code and ChatGPT knows it. Connect Gmail once and Cursor can search it with no key in a config file. The memory is a folder of markdown files you can read, correct and take with you. Run it on your own inference o… Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

Jockey by TwelveLabs

Jockey is a product from TwelveLabs, a platform for deep video understanding that aims to make a video library organized, searchable, and understood. It uses TwelveLabs' multimodal models, Marengo and Pegasus, to search, analyze, and generate text from video content at scale. On Product Hunt, TwelveLabs has 2.5K followers and a 5.0 rating from 1 review.

Jailbroken PS5s can now run local AI models at over 100+ tokens per second — fork of PS5LM goes native, hijacks the CPU, and accesses the GPU and more RAM

A community discussion on r/artificial reports that a fork of the PS5LM project lets jailbroken PlayStation 5 consoles run local large language models natively, reportedly reaching over 100 tokens per second. The fork is said to bypass higher-level execution by taking over the CPU and gaining access to the console's GPU and additional RAM. Verification status is community_signal, so claims are unconfirmed.

does anyone else feel like we collectively stopped being surprised by AI way too fast

A Reddit discussion thread on r/artificial arguing that public reaction to AI capabilities has flattened. The poster observes that advances which would have made front-page news eighteen months ago now receive only a few upvotes, and questions whether people have genuinely adjusted to the pace of change or simply become numb to it. The thread is tagged as a community signal, not a verified claim.

From a single artificial neuron to Transformers: The wild evolutionary tree of AI, and what comes next ?

A Reddit discussion on r/artificial that frames the history of AI architectures as an evolutionary tree, starting from early research that mathematically mimicked a single biological neuron. The poster highlights how the field moved from systems that struggled with basic logic puzzles to modern Transformer models, and asks what architectural branch comes next. Practitioners may find it a readable overview of how current architectures relate to their predecessors.

I tested whether an AI companion stays the same when you swap its underlying model. The results surprised me.

A community-reported experiment from a psychotherapist (not an AI researcher) who built a personal AI companion named Yoda with persistent memory, its own journal, curiosity threads, scheduled reflections, and behavioral records. They tested whether the companion's identity stays consistent when the underlying model is swapped, and report that the results surprised them. Details of the findings are in the Reddit post itself.

Meta releases Muse Spark Open: it runs on two Mac Studios, and its license bans passing off its output as human-written

A Reddit discussion reports that Meta has released Muse Spark Open, a model that can run on two Mac Studios rather than requiring large datacenter hardware. Its license reportedly includes a restriction on passing off the model's output as human-written. The underlying thread is community-sourced and not independently verified, so the deployment details and license terms should be confirmed against Meta's own release materials.

Learn the vocabulary for better AI prompts

A Reddit discussion in r/artificial about how specific vocabulary produces better AI outputs. The author is building Briefle, a tool for communicating more effectively with AI, and illustrates the point with an example: asking an AI to "make it look better" yields generic results, while requesting that a price be given more visual weight and a secondary button be styled as a ghost button produces the intended outcome. The post frames prompt quality as a vocabulary problem.

The Decoherence Trap: When AI slop drowns out the signal in an endless sea of noise

An essay by a practitioner introducing "decoherence," a form of technical debt where locally valid but mutually incompatible or redundant models of a system accumulate. The author argues this debt compounds exponentially with a system's rate of change, and that AI-generated code is now producing it faster than ever. The piece frames the problem as signal drowning in noise, relevant to teams relying heavily on AI-assisted development.

Why are we even doing all this?

A blog post on Terence Tao's mathematics blog, written as a guest post by Rikab Gambhir and shared via Lobste.rs. The opening alludes to the "first they came" framing and appears to address AI's impact on creative and intellectual work. The page snippet provides little substantive detail beyond the byline and opening line, so the full argument is not verifiable from the fetched context.

Do you let LLMs write both your tests and your code?

A Lobste.rs discussion thread asking whether developers should let large language models generate both production code and the tests for that code. The core concern practitioners raise is that tests written by the same tool that wrote the code may share the same assumptions and blind spots, weakening the tests' value as an independent check. Context is thin: the thread shows 2 comments, and no article body was fetched, so specific arguments beyond the question itself could n…

CVE-2026-102764: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

This is a CVE for an authentication bypass by spoofing vulnerability in BeyondTrust Remote Support, listed in CISA's Known Exploited Vulnerabilities catalog, which signals active exploitation. The vulnerability affects a remote access product commonly deployed in enterprise environments, where an authentication bypass could allow unauthorized access to managed sessions. Affected versions and mitigation steps were not available in the fetched context and should be confirmed v…

CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability

CVE-2025-61624 is a path traversal vulnerability affecting multiple Fortinet products, listed in CISA's Known Exploited Vulnerabilities catalog, which indicates active exploitation has been reported. Path traversal flaws can let an attacker read or write files outside intended directories. The provided context does not include affected versions, CVSS score, or patch details, so the primary Fortinet advisory and NVD entry should be checked before acting.

Verification: cisa kev confirmed.

CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

CVE-2026-21589 is a vulnerability affecting multiple Atlassian products in which files or directories become accessible to external parties. It is listed in the CISA Known Exploited Vulnerabilities catalog, indicating it has been confirmed as actively exploited and requires prompt attention. The affected Atlassian products, specific versions, and mitigation steps were not available in the supplied context, so the primary advisory should be consulted.

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

A security research write-up describing how a bug that has existed in the OpenBSD kernel for 37 years can be exploited. The article, shared on Lobste.rs under its security section, walks through the vulnerability and the exploitation approach; the fetched page shows only the title and navigation, so technical specifics such as the affected subsystem or fix status are not visible in the supplied context.

Verification: community signal; use the linked source as context, not final confirmation.

I Vibe-Coded My Way Out of Angular Upgrades

• ♥ 47
• 💬 27

Do you also hate upgrading Angular versions? Because I do. I maintain a few open-source projects, and… Context: Dev.to – Web Dev.

Your React Fetch Requests Don't Care That You Left

• ♥ 6

I was building a search feature: nothing fancy, just a text input that fetches results from an API as… Context: Dev.to – React.

Mull: note-taking with a language server / vscode extension

Mull is an open-source Rust tool for managing a wiki stored in a single plain text file, discussed on Lobste.rs with an accompanying language server and VS Code extension. Keeping notes in plain text avoids vendor lock-in and makes content easy to version-control. The repository currently shows 18 stars, 0 forks, and 0 open issues.

Ubuntu 26.10 (Stonking Stingray) released

An announcement on the ubuntu-announce mailing list, posted by Utkarsh Gupta of Canonical on October 15, 2026, declares the final release of Ubuntu 26.10, codenamed Stonking Stingray, following the earlier beta. The post is the official distribution channel for Ubuntu release notices, so practitioners tracking upgrade timing or release notes should treat it as the primary source. The fetched snippet contains only the header; component and package details are not included.

How Docker Works Under the Hood: Watch Namespaces Isolate a Container and cgroups Stop a Fork Bomb

• ♥ 18
• 💬 3

On a Linux host, start an nginx container, then run ps aux. nginx is right there in the list, with an… Context: Dev.to – DevOps.

PostgreSQL 19 beta's parallel autovacuum launches workers but leaves vacuum time unchanged

• ♥ 13
• 💬 1

I measured PostgreSQL 19 beta4's new parallel autovacuum on a six-index, 400,000-row table: 4 workers launched every time, but wall-clock vacuum time stayed within 4% of the serial run, while dead-tuple memory doubled. Context: Dev.to – DevOps.

DuckDB 2.0 alpha's triggers cost three times more per row than per statement

• ♥ 7
• 💬 1

I benchmarked DuckDB 2.0 alpha's new triggers on a 500,000-row insert: row-level triggers cost about 3x a plain insert, statement-level ones with transition tables cost about 1.3x. Half the documented trigger matrix isn't implemented yet. Context: Dev.to – DevOps.

The road to iroh 1.0

This blog post announces the 1.0 release of iroh, a networking library, after four years of work that included several pivots in direction. The milestone marks the project reaching a stable API. The post is aimed at practitioners tracking direct-connection networking between devices, and the accompanying Lobste.rs discussion offers community reaction to the release.

DOYT

Stop writing todos you'll forget the moment you close the app. DOYT pins your current task to Dynamic Island & Lock Screen—visible while you text, scroll, or watch videos. Touch and hold to complete a task or move it to Later without opening DOYT. Features an optional focus timer (30 min–8 h), a history calendar, Siri… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Calenteri

The GDPR-compliant alternative to Calendly. Share a booking link, let people pick a time. EU-hosted, zero third-party trackers, no cookie banners. With this app User A can book an appointment from User B's calendar. User B can set when he is available etc. User B will get an email when someone has booked an appointmen… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Atelier

Atelier makes your Claude plan last: Codex finds the problems and Claude only judges them (about 71% fewer Claude tokens per review), long chats hand over to fresh sessions, and every session starts from a short brief. Every app you make keeps its tasks, releases, feedback and memory here, and you approve finished wor… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

NANI???

NANI??? Ever sat through a call understanding nothing, then realised someone just asked you a question? Nani? learns who’s speaking by voice, right on your Mac, and floats live translated subtitles over any call. No bot joins, so nobody sees a thing. When your boss asks you something, it chimes and suggests replies yo… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Tesla Roadster

• ▲ 1,345
• 💬 2,387

A Hacker News thread links to Tesla's official Roadster page, drawing heavy community engagement with 1,345 points and 2,387 comments. The page is Tesla's product listing for its announced next-generation Roadster sports car. No technical details from the page itself are available in the supplied context, so the discussion's specific claims cannot be summarized here.

What Are Your Chances of Surviving Resident Evil Based on Your Tech Job?

• ♥ 88
• 💬 55

I recently watched the new Resident Evil movie. 🎬 Watching the main character stumble from one…

Claude reveals ECDSA curve origins

• ▲ 813
• 💬 309

An Anthropic Frontier Red Team research write-up explaining a decades-old mystery in cryptography: where the parameters of the widely used ECDSA standard's curve came from. The finding, summarized as "it's just timestamps," addresses a long-standing open question in the cryptographic community and concerns about ECDSA, one of the most widely deployed cryptographic standards. The Hacker News discussion drew 813 points and 309 comments.

Natural Languages Have Design Trade-offs Too: Georgian Is Dynamically Typed, English Is Statically Typed

• ♥ 52
• 💬 33

A Dev.to essay that maps differences between natural languages onto programming language design trade-offs, arguing Georgian behaves like a dynamically typed language while English is more statically typed. It walks through concrete features: English articles versus Georgian's lack of them, and gender systems ranging from English's he/she/it and German's three genders to Georgian's zero genders, weighing the upside and downside of each. The piece has drawn 33 comments.

I'm 12. I'm building a privacy-first Virtual Try-On tool. Would you use it?

• ♥ 36
• 💬 17

The virtual try-on (VTO) market is projected to hit $15.29 billion in 2026. Yet, despite this… Context: Dev.to – Web Dev.

🌑 Blue October

• ♥ 17
• 💬 5

TLDR: A brief summary of how I got here. The Mindset For the last 3 years, I have been… Context: Dev.to – Web Dev.

eBay Restricts Listings of Radio Equipment, but Exempts Ham-Band-Only Gear

• ▲ 210
• 💬 164

A Hacker News discussion (210 points, 164 comments) covers an ARRL report that eBay is restricting listings of radio equipment while exempting gear that operates only on amateur radio bands. The change matters to practitioners who buy and sell radios, transceivers, and related components on the platform, since non-exempt equipment may become harder to trade. The ARRL Letter, the source referenced, is the amateur radio association's regular news bulletin.

Designing more efficient quantum circuits with Claude

• ▲ 128
• 💬 28

A research report from Anthropic describing how Claude, working largely on its own, designed quantum circuits that improve on the best published versions, in some cases by an order of magnitude or more. The team gave Claude plain-language specifications for eight circuits drawn from chemistry, optimization, physics simulation, and number theory, plus an automated evaluator that checks and scores each design. The Hacker News discussion drew 128 points and 28 comments.

How sites answer GPTBot, classified in Python

• ♥ 6
• 💬 1

TLDR We sent the same homepage request to 2,096 sites twice, once as Chrome and once as GPTBot, from… Context: Dev.to – Python.

Build an invoice reminder workflow in n8n with Google Sheets (idempotent, AU GST wording)

• ♥ 5
• 💬 2

Build an invoice reminder workflow in n8n with Google Sheets (idempotent, AU GST wording) is a developer community article; review the code, assumptions, and comments before treating the technique as production guidance. Context: Dev.to – N8N.

Texas sued after glitch delays almost 600,000 voter registrations

This is a community-shared news item on r/artificial reporting that Texas faces a lawsuit after a technical glitch delayed almost 600,000 voter registrations. The reported glitch affected the state's registration processing, prompting legal action over the resulting delays. It is circulating as an example of software failures in government systems with real civic consequences, though only the headline-level claim is available here.

The NIST Elliptic Curves Seeds Bounty Has Been Claimed

A cryptographic blog post explaining that the long-standing mystery of how the NIST elliptic curve seeds were generated has been resolved. The seeds, which some suspected were hashes of hidden phrases raising backdoor concerns, were instead produced by the drand48() pseudorandom generator seeded with the system time in 1997-98. This closes a decades-old transparency question about curves widely used in TLS and other protocols.

Making a 88×31 button book using ImageMagick

A blog post by K. Sosnierz explaining how to build a physical or printable book of 88×31 web buttons, the tiny badge graphics popular on the Small Web, using the ImageMagick command-line image tools on a POSIX system. It walks through collecting the buttons and processing them with ImageMagick to lay out a book format, aimed at practitioners comfortable with shell tooling.

Introducing GNOME OS Preview

A blog post by Adrian Vovk announcing a new edition of GNOME OS called "Preview", assembled from the latest stable GNOME release rather than nightly builds. This marks a shift: GNOME OS is no longer solely a nightly OS aimed at GNOME developers and testers. The post notes it arrives two years after the author's initial plan to make GNOME OS an end-user general purpose operating system, calling this a major milestone toward that goal.

We're sunsetting Codeberg Pages v2

Codeberg, the nonprofit code-hosting platform, is retiring Codeberg Pages v2, its in-house static site hosting solution that served users for many years. Site owners are asked to migrate to the new Codeberg Pages, which is backed by a git-pages system. The announcement gives users a transition window before the older service is shut down.