I tried Karpathy's Autoresearch on an old research project

https://ykumar.me/blog-images/eclip/agent_loop_light.webp
User tried Autoresearch on a research problem with Claude Code, an LLM agent. The agent improved a Mean Rank metric by modifying a single file, train.py, and reduced the metric by 54% in 42 experiments.

iPhone 17 Pro Demonstrated Running a 400B LLM

Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.

Trivy under attack again: Widespread GitHub Actions tag compromise secrets

https://cdn.sanity.io/images/cgdhsj6q/production/3c283698250f6e6a079a96cdd9860cec0bc9b92d-2048x1180.png?w=1600&q=95&fit=max&auto=format
A Trivy supply chain attack compromised GitHub Actions, impacting over 10,000 workflows, and was enabled by a compromised credential with write access to the repository. The attack delivered an infostealer via 75 modified version tags, targeting sensitive data in CI/CD environments.

BIO: The Bao I/O Coprocessor

https://bunniefoo.com/baochip/pio-utilization.png
The user designed an I/O co-processor called BIO for the Baochip-1x SoC, which is a more efficient alternative to the Raspberry Pi's PIO. The BIO uses a RISC-V 32-bit core and a set of FIFO-registers to achieve determinism and flexibility, and can be used for various I/O tasks such as DMA and SPI bit-banging.

Cyber.mil serving file downloads using TLS certificate which expired 3 days ago

The quadratic problem nobody fixed

https://iev.ee/_astro/alerts.CyL9QR-X_Z1HhGYd.webp
The quadratic all-matches problem in regex engines has been a long-standing issue since the 1970s, causing worst-case time complexity of O(m * n²) when searching for multiple matches in a large input. A new regex engine called RE# has been developed to solve this problem, offering a hardened mode that guarantees linear time even on adversarial input, and a normal mode that is faster but may ...

US govt pays TotalEnergies nearly $1B to stop US offshore wind projects

Contactez licensing[@]groupelemonde.fr pour obtenir une autorisation d'accès. Incluez une copie de la page d'erreur avec votre adresse IP et votre identifiant de requête (RID).

Digs: Offline-first iOS app to browse your Discogs vinyl collection

The user created a mobile app called Digs for browsing vinyl collections offline, with features like folder navigation and incremental syncs. The app uses React Native, SQLite, and Discogs API for authentication and data storage, and is available for free on the App Store.

Bombadil: Property-based testing for web UIs

https://raw.githubusercontent.com/antithesishq/bombadil/main/docs/development/tom.png
Property-based testing for web UIs, autonomously exploring and validating correctness properties, finding harder bugs earlier - antithesishq/bombadil

An unsolicited guide to being a researcher [pdf]

The user discusses best practices for research, including avoiding overview slides, developing a unique view of the world, and staying on top of literature, and emphasizes the importance of collaboration, communication, and time management in research. They also provide tips for staying organized, reading efficiently, and avoiding burnout, and encourage researchers to view their work as a ...

I built an AI receptionist for a mechanic shop

https://www.itsthatlady.dev/.netlify/images?url=_astro%2Ftyping.asRmplmU.jpeg&w=1880&h=1255&dpl=69beb82e85fe450008b80b4b
The user built an AI receptionist named Axle for their brother's luxury mechanic shop to answer customer calls and provide accurate information about prices, hours, and policies. The system uses Retrieval-Augmented Generation (RAG) and a custom-built knowledge base to ensure accurate and grounded responses, and can also collect callbacks for unknown questions.

Show HN: Threadprocs – executables sharing one address space (0-copy pointers)

https://raw.githubusercontent.com/jer-irl/threadprocs/main/servermemory.drawio.svg
This repository contains experimental code for thread-like processes that blend the Posix process model with multi-threading, enabling zero-copy access to pointer-based data structures. The code has limitations, including no support for debugging, ptrace, or signals, and requires careful memory management due to independent libc instances for each threadproc.

Is it a pint?

https://isitapint.com/app-icon.png
Years of countless pours led me to the question “Is this really a pint? They say so, but really?” The findings gave rise to the Pint Patrol, a grassroots movement that could change how Americans are served their beer, wine, and cider—toward righteous honesty. This article documents the initial discovery and the inception of the movement.

Two pilots dead after plane and ground vehicle collide at LaGuardia

https://ichef.bbci.co.uk/news/480/cpsprodpb/744f/live/4e542b30-2689-11f1-b8a4-f1f655712b95.jpg.webp
An Air Canada plane collided with a firefighting vehicle at LaGuardia Airport, causing significant damage and prompting a ground stop. The incident occurred when the plane, with 76 people on board, landed and struck a responding vehicle.

Migrating to the EU

User is moving services from non-EU countries to EU providers due to global politics and improved data protection. They've switched to European alternatives for email, hosting, DNS, Git repositories, and VPN services.

If DSPy is so great, why isn't anyone using it?

https://skylarbpayne.com/og-image/dspy-engineering-patterns.png
Companies using Dspy report benefits like quick model testing and maintainable systems, but implementing Dspy-like patterns can be hard and lead to worse versions. Dspy forces you to think about abstractions upfront, which can be a steep learning curve, but is necessary for complex AI systems.

PC Gamer recommends RSS readers in a 37mb article that just keeps downloading

https://stuartbreckenridge.net/content/images/2026/03/pc-gamer-1.png
The PC Gamer article has a cluttered interface with multiple ads and popups, including a 37MB initial load. The website continues to download new ads, totaling almost half a gigabyte in five minutes.

Walmart: ChatGPT checkout converted 3x worse than website

Walmart ended its Instant Checkout deal with OpenAI due to low conversion rates. It will now use its own chatbot, Sparky, to offer a seamless shopping experience within ChatGPT.

GitHub appears to be struggling with measly three nines availability

https://regmedia.co.uk/2022/02/15/outage_shutterstock.jpg
GitHub has experienced several outages this month, including issues with Actions, notifications, and Copilot. The company's overall uptime has been poor, dropping below 90 percent at one point in 2025.

General Motors is assisting with the restoration of a rare EV1

https://evinfo.net/wp-content/uploads/2026/03/GM-EV1.jpg
General Motors is supporting the restoration of a rare 1996 EV1 electric vehicle, VIN 212, which was purchased at auction for over $100,000 and is being restored by a YouTube channel and private collector. The restoration is part of GM's recognition of the EV1's 30th anniversary and will help return the vehicle to driving condition and public visibility by November 2026.

Side-Effectful Expressions in C (2023)

The author criticizes C's assignment expressions and pre/post-increment/decrement expressions for being hard to reason about due to their side-effectful nature. They argue that these expressions make code harder to understand by burying side effects within trees of expressions.

The gold standard of optimization: A look under the hood of RollerCoaster Tycoon

https://larstofus.com/wp-content/uploads/2026/03/image-1.png?w=288
The author appeared on a German gaming podcast, Stay Forever, to discuss the technology behind RollerCoaster Tycoon. The game's creator, Chris Sawyer, wrote it in Assembly, a low-level language that allowed for high performance.

“Collaboration” is bullshit

https://www.joanwestenberg.com/content/images/size/w1000/2026/03/W-Insight-1-HT-Jan11-e1666985964510-2688358860.jpg
The article discusses how collaboration has become a misguided obsession in the modern tech industry, leading to a lack of accountability and productivity. It argues that most complex work is done by individuals or small groups with clear authority and accountability.

Reports of code's death are greatly exaggerated

https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/f7e9e621-0fad-4c3a-a65b-d16832c02b00/public
The user argues that while AI helps with precision in coding, it also creates an illusion of precision, which can lead to bugs and complexity issues when scaled up. The user believes that good code is not just about producing working software, but also about creating beautiful, well-structured abstractions that help master complexity, and that AI will be a boon for coding, not a replacement for it.

Tin Can, a 'landline' for kids

https://i.insider.com/68b1ed9dcfc04e97619c4fe1?width=700
Alison Bennett, a mom in Los Angeles, bought a Tin Can phone for her 8-year-old daughter to chat with friends without a mobile phone. The phone runs off WiFi and has parental controls, allowing kids to communicate with approved contacts during approved hours.

The future of version control

https://substackcdn.com/image/fetch/$s_!93xj!,f_auto,q_auto:best,fl_progressive:steep/https%3A%2F%2Fbramcohen.substack.com%2Ftwitter%2Fsubscribe-card.jpg%3Fv%3D-1733548744%26version%3D9
Manyana is a project that presents a coherent vision for the future of version control using CRDTs, which provide eventual consistency and informative conflict markers. It offers a better design for version control, including permanent line ordering, informative conflicts, and preserved history, making it a promising proof for CRDT-based version control.

Show HN: The King Wen Permutation: [52, 10, 2]

The 64 hexagrams of the I Ching have two canonical orderings: the binary natural order (0–63) and the King Wen sequence (~1000 BCE). Treating the map between them as a permutation in S₆₄, its cycle decomposition yields [52, 10, 2] with zero fixed points. 81% of hexagrams are locked in a single cycle. As far as we can find, this specific cycle type has not been previously reported.

Cyberattack on vehicle breathalyzer company leaves drivers stranded in the US

https://techcrunch.com/wp-content/uploads/2026/03/breathalyzer-1446417877.jpg?w=1024
Intoxalock is experiencing downtime after a cyberattack on March 14, affecting breathalyzer devices used by 150,000 drivers. The attack has caused calibration delays, leaving some drivers unable to start their vehicles.

Can you get root with only a cigarette lighter? (2024)

The user created a low-budget electromagnetic fault injection (EMFI) tool using a piezo-electric lighter and an antenna wire to induce memory errors in a laptop's DDR bus, then used this tool to write a local-privilege-escalation exploit for CPython. The user then used a similar EMFI tool to create a reliable exploit for Linux, allowing them to gain root access by corrupting page tables and ...

Nanopositioning Metrology, Gödel, and Bootstraps

https://www.pi-usa.us/fileadmin/user_upload/pi_us/img/blog_images/Kurt_Godel.png
Metrology Systems for Testing the Accuracy for Nanopositioning Systems