PyPI's redesigned project pages with clearer security signals are now live

https://blog.pypi.org/assets/2026-11-06-ui-updates-complete/pypi-attestation.png
PyPI has updated its user interface to improve security signals and display package details, following user research. The new design provides clearer information on release provenance and attestations, helping users assess package security.

Lovable apps expose passport details and more than 200K private messages

https://www.crissyfield.de/images/research-lovable-hero.jpg
Lovable, a Swedish AI startup, allows users to build web applications without coding but found many cases of sensitive data being accessible without logging in. The platform's terms and conditions place responsibility for security on the customers themselves, leaving a gap between its promise and user responsibilities.

KDE: The documentary [video]

https://tube.kockatoo.org/lazy-static/thumbnails/02935b80-28d9-4fd7-bc33-9d0cb76f2e80.webp
KDE: The Documentary tells the story of the pioneering open source community that gave computer users a free and open alternative to proprietary desktops like Windows. The story starts in 1996, whe...

A Family Tree of Software Job Titles

https://raw.githubusercontent.com/ianmiell/sw-job-title-family-tree/main/job_title_family_tree.png
The author created a family tree of software job titles from the 1940s to present, tracking changes in job names and roles over time. The tree spans seven colored columns, illustrating how titles evolved into new ones through influence or common career moves.

Why get an expensive Pi when I have an old phone?

https://so.long.thanks.fish/why-pi-when-i-have-an-old-phone/redmi-leds-1200.webp
The user is considering using a used smartphone as an alternative to assembling their project with Raspberry Pi and other components, due to cost concerns. They have tested the camera and functionality of two phones, a Redmi 13C 5G and a Huawei Mate 30 5G, for potential use in future projects.

Advancing science and engineering with Antigravity's /teamwork

https://storage.googleapis.com/gweb-research2023-media/original_images/AntigravityTeamwork_HeroFinal.jpg
Researchers at Google and academic institutions collaborated on open problems in math, science, and complex systems engineering using Gemini 4 models and multi-agent workflows.

Show HN: A terminal-native idle factory game, written in Rust with ratatui

https://gitlab.com/assets/twitter_card-570ddb06edf56a2312253c5872489847a0f385112ddbcd71ccfa1570febab5d2.jpg
terminactory

Reverse engineering a vintage diode-transistor logic chip

https://static.righto.com/images/st680a/die-w500.jpg
CuriousMarc discovered a 1965 Signetics IC, the ST680A, which is a logic chip implementing four NAND gates using old-fashioned diode-transistor logic. The chip was packaged in a plastic DIP and required reverse engineering to understand its circuitry.

Generative AI uses more energy on non-English text

https://news.umich.edu/wp-content/uploads/2026/11/generative-ai-uses-more-energy-on-non-english-text-Portrait-1024x683.jpg
AI models use significantly more energy to process and generate non-English text, often with lower accuracy. This disparity affects billions of people worldwide who may be priced out of AI services due to higher costs.

Show HN: Fursoy – Out-of-order RV64IMAFDV core in SystemVerilog (Linux 6.6)

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
A 64-bit RISC-V processor, Fursoy Slice-1, has been designed and synthesized with a Linux 6.6.50 boot environment using SystemVerilog and Nangate 45nm standard-cell synthesis. The processor achieved zero kernel panics during simulation across 89 million cycles.

Show HN: DeepSeek V3 in ~200 lines of pure Jax

https://raw.githubusercontent.com/Vaibhaav-Tiwari/deepseek-v3-jax/main/post/diagrams/01-whole-model-clean.png
The DeepSeek-V3 model is a 190-line JAX architecture pretrained on public-domain detective fiction, with caching and balancing features to improve performance. The model can be trained and evaluated using the provided code and data, which includes checkpoints, tokenizers, and training scripts.

Ggml v1.0.0

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
GGML 1.0.0 has been released with various improvements, including pruning of deprecated APIs and adding support for configurable YaRN truncation and FP8 operations across multiple backends.

Tech Companies Are Trying to Shift the Concept of Privacy (Again)

https://www.eff.org/files/banner_library/mobile-privacy.png
Tech companies are developing wearable devices that record and transcribe conversations, raising concerns about privacy. These devices can be used to monitor people without their consent, potentially infringing on social norms of private conversations.

Testing a Trash Can Faraday Cage

https://www.jefftk.com/receiver-source-no-trash-can.jpg
The author is concerned about the potential impact of electromagnetic pulses (EMPs) from nuclear attacks or AI takeovers on electronic devices, and explores ways to protect against EMPs using a Faraday cage made from a galvanized trash can.

Monkey Island: all 13 versions side by side

https://monkeyisland.pages.dev/og-image.jpg
This document describes the process of capturing screens for a game, using various emulators and scaling techniques to maintain original pixel shape. The project was created by two brothers with AI assistance, and they are also working on remaking another Sierra game in Adventure Game Studio.

Italy fines Meta $887M over Android users' data access

Please enable JS and disable any ad blocker

Formalizing US Tax Code (Using Lean)

https://lexifina.com/video-posters/81eda57e58d054305e4f40ac224344e5-t15-6-1280.webp
Researchers used Lean, a proof-checking language, to identify 138 unknown tax loopholes in the US Internal Revenue Code. The code was formalized and checked against official IRS publications and independent tax software.

Will We Put Data Centers in Space?

https://images.ctfassets.net/4owxfjx3z3if/2tbdxaWP1WfSlnTCGjPHld/c5a892bc6b3a324cdb803d0997e341a3/levelized-cost-of-energy-beige.png
Several major technology companies have announced plans to operate AI data centers in orbit. Elon Musk recently claimed: “the lowest-cost place to put AI will be space […] within two years, maybe three.” If a meaningful fraction of new AI compute really is placed in space within a few years, that would be a fairly big deal for AI governance and strategy. Here we try to disentangle the hype ...

Show HN: Agweb – a browser for agents that stays out of your way

https://raw.githubusercontent.com/paul-nameless/agweb/master/docs/images/dashboard.png
Agweb is a browser for coding agents on macOS, built on WebKit, allowing multiple agents to run simultaneously without stealing focus or blocking sites. It provides features like snapshots, click tracking and ad-blocking with uBlock Origin's lists.

C3 0.8.6:Library fetching,30% smaller safe-mode binaries,and stricter type rules

https://c3-lang.org/assets/logo.png
C3 0.8.6 is now available with improved library fetch functionality, packaging full-source libraries and reduced binary size in safe-mode binaries by one third. The new release also includes fixes from a systematic review of casts, vectors and calling conventions.

A visual explanation of reinforcement learning

https://aatishb.com/myriad/promo_learning.jpeg
A digital being with a simple brain learns to steer towards light through trial and error, guided by reward and punishment. The spark's brain rewires itself after 2,000 tries to become an expert at seeking the light.

Let's Write a PostScript Interpreter

The author is implementing a PostScript interpreter in JavaScript, focusing on its mechanics as a general-purpose programming language. The goal is to create a human-scale programming environment that can be used from scratch with readily available computational substrates.

How to Create Your Own Decentralized Messenger Protocol

https://karboosx.net/image/normal/39897800-4f67-440f-93c9-c92e629d049b.png
The user proposes a decentralized, plug-and-play system for secure text exchange between servers without a centralized authority, inspired by the SMTP email protocol. The proposed system involves discovery through DNS lookup, encryption using HPKE (Hybrid Public Key Encryption), and verification of server identities through digital signatures to ensure authenticity and prevent replay attacks.

Serving GLM-5.3 at 607.8 tok/s across two Nvidia DGX stations with vLLM

https://developer-blogs.nvidia.com/wp-content/uploads/2026/11/image3-3-1024x576-png.webp
Two NVIDIA DGX Stations are used to run a 753-billion-parameter model, with each Station hosting half of the weights in GPU memory. The stations communicate over RDMA and serve the model through a single endpoint, allowing for efficient inference on sensitive or proprietary data.

Terminal borders that don't cost a cell

https://www.joshka.net/cell-borders/box-drawing-block.png
The author is proposing a terminal protocol for drawing cell borders, which would allow for more flexible and customizable border styles. The protocol uses a 16-bit border ID to store distinct border sets in a shared table, reducing the need for extra space on the screen.

Nvidia allegedly engineered scarcity by funding AI startups to buy its GPUs

https://tpucdn.com/img/ooCln2q3jkKNGHen_thm.jpg
NVIDIA allegedly artificially inflated GPU shortage by investing in AI startups to maintain demand and move excess semiconductors. The company's former CEO, Jensen Huang, was reportedly at odds with CFO Colette Kress over scaling back investments.

Italy fines Meta €805M over photo privacy

Italian regulators fined Meta €805 million for accessing users' photos without consent, a record fine on a tech giant. The penalty relates to Facebook's gallery suggestions feature, which requires separate and specific user consent.

Unsloth Qwen3.8-27B Quantizations – Dynamic v3.1 Update

https://unsloth.ai/docs/~gitbook/image?url=https%3A%2F%2F3215535692-files.gitbook.io%2F~%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FxhOjnexMCB3dmuQFQ2Zq%252Fuploads%252FWf4zRxz4iskzXZcBUQYq%252Ffour%281%29.png%3Falt%3Dmedia%26token%3D0e7bc8b1-6a96-4978-bcbe-227d69705eb2&width=768&dpr=3&quality=100&sign=7ed088405d214652ffd92dfa31a55189&sv=3
Qwen3.8-27B is a 256K context window model with vision and reasoning capabilities, running on 17GB RAM/VRAM setups, excelling at agentic coding, vision and chat tasks. New dynamic quants improve average accuracy by 5-10% compared to previous versions.

What happened to 3Com?

https://i0.wp.com/dfarq.homeip.net/wp-content/uploads/2022/02/what-happened-to-3com.jpg?resize=300%2C207&ssl=1
3Com was a leading network equipment manufacturer that declined due to poor business decisions, including exiting its enterprise networking business and expanding into non-core areas. The company ultimately sold its assets to Hewlett-Packard in 2009 for $2.7 billion, marking the end of an era for the once-iconic brand.

Bilingualism and Denaskuleco

The writer is questioning the value of teaching their native Esperanto-speaking children, Mira and Mabel, as they don't seem to be retaining much knowledge. They initially wanted to raise bilingual children but now wonder if it's worth continuing with Esperanto given its rarity in Canada.