Codex Security

https://opengraph.githubassets.com/53fe26d3793368555a54cec752476bc7c80eda728e4ca8c05391d501dde71fdf/openai/codex-security
Codex Security is an open-source CLI and TypeScript SDK for finding, validating, and reviewing security issues in code. It supports macOS, Linux, and Windows, and requires Node.js 22 or later.
https://private-user-images.githubusercontent.com/17400377/628109227-e5d46dba-d099-416c-a10a-0177c403ff56.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.D5zcBbSxTsNceAmK41QO6_2bsC5xjAGCBU8uKwGkCwk
HNewhere detects Hacker News stories, loads comments into a sidebar, and lets you browse discussions without leaving the page.

Half-Life ported to Mac OS 9

https://mac-classic.com/images/uploads/news-articles/preview-images/half-life-ported-to-mac-os-9/icon.gif
Half-Life, a story-driven first-person shooter, has been ported to PowerPC Macintosh computers 28 years after its original release. The game, developed by doctashay using Xash3D FWGS, is playable from start to finish with multiplayer support and additional downloads.

Substack writers, you need a website

https://elizabethtai.com/wp-content/uploads/2026/06/pexels-photo-16622632.jpeg?w=1024
Writers should not make Substack their digital home, as it's short-sighted and can derail long-term visibility on the internet. Instead, they should treat their website as the definitive source of truth and use platforms like Substack as distribution pipes.

Teach yourself programming in ten years (1998)

Learning to program requires a long-term commitment of 10 years or 10,000 hours of deliberate practice, not just a few days or hours of book learning. To become a skilled programmer, focus on hands-on experience, working with others, and continually improving your skills over time, rather than relying solely on books or training courses.

LearnVector – Andrew Ng's AI company building one‑to‑one learning experiences

https://learnvector.ai/assets/founder.png
LearnVector aims to revolutionize learning with AI, providing one-to-one experiences that adapt to each person's needs. It plans to collaborate with Coursera and Udemy to offer trustworthy learning experiences.

Hubble: Open-source notetaking app for you and your agents

https://www.hubble.md/og-image.png
Hubble.md

Steel Bank Common Lisp version 2.6.7

SBCL has released new versions with various bug fixes, optimizations, and minor incompatible changes. The updates include improvements to the compiler, documentation, and platform support, as well as fixes for issues related to type checking, memory management, and foreign function calls.

Truth is not a direction: a Tarski attack on LLM probes

https://abeljansma.nl/assets/blogPics/TINAD_ourobouros.png
A researcher created a truth probe for a language model, but it failed to accurately evaluate truth due to the diagonal Tarski attack, a paradox that arises when a system tries to evaluate its own truth. This attack shows that no truth probe can exist for a language rich enough to describe itself.

ReFrame – The EPaper Camera

https://reframe.camera/assets/site-images/hero-poster-4.jpg
reFrame is an experimental camera with a color ePaper display that captures one photo at a time, taking 15 seconds to fully appear. It's open source, allowing users to build their own using off-the-shelf components like a Raspberry Pi Zero and eInk display.

Kimi K3 Architecture Overview and Notes

https://sebastianraschka.com/images/blog/2026/kimi-k3-architecture-notes/kimi-k3-architecture.webp
Kimi K3 is a scaled-up version of Kimi Linear with a new LatentMoE component and attention residuals. It improves inference efficiency and validation loss, but adds 4% training and 2% inference cost.

Lightweight Spring Boot Monitoring Without Prometheus and Grafana

https://pvrlabs.xyz/img/statlite-dashboard.webp
StatLite is a focused dashboard for Spring Boot applications that exposes Actuator data, providing operational visibility for health, requests, errors, and more. It's a lightweight alternative to full monitoring platforms like Prometheus and Grafana, suitable for small-scale deployments with a few services on one VPS.

Delayed Gratification – Proud to Be 'Last to Breaking News'

https://www.slow-journalism.com/wp-content/uploads/2026/07/slow-journalism-magazine-banner-62.jpg
A beautiful quarterly publication which revisits the events of the last three months to offer in-depth, independent journalism in an increasingly frantic world. Read more about DG. Subscribe Slow Journalism in your inbox, plus infographics, offers and more: sign up for the DG newsletter Sign up

The iPhone Upgrade Program is being replaced by Apple Upgrade

https://store.storeimages.cdn-apple.com/1/as-images.apple.com/is/iphone-upgrade-sunset-specialist-202607?wid=980&hei=1140&fmt=png-alpha&.v=MDd3NDZSbDIxYVo2clJ0RGZVRE5iMndtUkFZWUUrYVpuRTNxSWUwVjNwZkFxRnR0ZGxhOWFRYm1OaWtMcGgyd3FodDhCQkpVa3lvNFZKU1U0b0laUGVNME5rOTNmWjVGcVZUUzZVeUJxVis1RElWTFhOV0pxbzkvVGd4N1ZTdHg
There’s more than one way to get your next iPhone. You can lease with our new program, Apple Upgrade; shop the latest carrier deals; finance with Apple, or buy with a one-time payment. Have questions about what’s best for you? Chat with a Specialist (Opens in a new window) online or in a store.
https://unplannedobsolescence.com/blog/buttons-vs-links/link-context-menu.png
The Button Actions proposal aims to add action and method attributes to HTML buttons to distinguish them from links, which represent destinations, not actions. This distinction is crucial for web authors to create a simple and semantic way to model a full CRUD lifecycle in HTML, making the web safer, simpler, and more accessible for all.

Multiple Mouse Cursors in Wayland

https://blinry.org/multi-seat-wayland/hell.jpg
The user investigated multi-seat support on Linux and Wayland, finding surprisingly good support for multiple mouse cursors and keyboards in various software, including Weston, sway, and River. They also created tools and patches to improve multi-seat support and wrote about their experiences, hoping to find others interested in exploring and expanding this space together.

Zig's Incremental Compilation Internals

https://mlugg.co.uk/posts/incremental-compilation-internals/dep_graph_0.png
The Zig compiler's incremental compilation feature allows for fast rebuilds by detecting changed code and recompiling only that, patching the resulting bytes into the output binary. The feature involves caching source files' generated ZIR, tracking dependencies between analysis units, and using a linked file abstraction to handle incremental linking.

Pacing the frontier

https://www.pacingthefrontier.com/pacing-the-frontier-preview.jpeg?v=4
AI is progressing rapidly, posing unprecedented social and safety risks, and the world needs to develop AI responsibly and thoughtfully. To achieve this, international coordination and governance tools are necessary to pace AI progress and mitigate risks.

Discovering Cryptographic Weaknesses with Claude

https://www-cdn.anthropic.com/images/4zrzovbb/website/802260d34a0653f23fd4944fae43064df367aa44-1000x1000.svg
Researchers at Anthropic used Claude Mythos Preview to discover improved attacks on cryptographic algorithms, including HAWK and AES. These attacks significantly weaken HAWK and improve the speed of AES attacks, but do not currently affect production systems.

The Fabled Flatbreads of Uzbekistan (2015)

Show HN: Learning Rust by writing a Markdown to HTML compiler

https://andreadimatteo.com/static/posts.gif
I'm new to Rust and thought that a very pratical way to get in touch with it was writing something. I've thought of writing my own .md to .html compiler for for a while. So here we are, both my micro-blog and my project have come to life. Before even thinking of writing it, I was using Hugo. It was really nice, but you know, sometimes it's just too much, I just wanted a very ...

Kimi Linear: An Expressive, Efficient Attention Architecture (2025)

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
Kimi Linear outperforms full attention in various scenarios with superior performance and efficiency, reducing KV cache usage by up to 75% and achieving up to 6 times decoding throughput. It can be a drop-in replacement for full attention architectures with a pre-trained model and open-source code available.

Una GPS smart watch – Repairable, USB-C charging, developer-friendly

local_rate_limited

Show HN: How far do I have to go to run into 100k people?

How far must a 5° slice go in each direction before it hits N people?

Show HN: Manim (3Blue1Brown's animation engine) in the browser via WebGPU

https://studio.academa.ai/_app/immutable/assets/from-idea-to-stunning.BXUFla4y.svg
AI-native Manim editor for creating, editing, and refining mathematical animations.

New HIV vaccine shows unprecedented success in preclinical study

https://www.lji.org/wp-content/uploads/2024/06/Madeline-profile-scaled-e1742326332573-150x150.jpg
Scientists at La Jolla Institute for Immunology and Scripps Research developed an HIV vaccine that trains immune cells to see past HIV's defenses by prompting the body to make broadly neutralizing antibodies. The vaccine resulted in the best HIV-fighting antibody response ever seen in primates and human trials have now started.

MCP 2026-07-28 Specification: transport going stateless

https://blog.modelcontextprotocol.io/og-image.png
The MCP protocol has released a new version with a stateless protocol core, improving scalability and reliability for agentic workflows. This release includes breaking changes, new extensions, and security hardening, making MCP a more mature and production-ready protocol for enterprise AI applications.

Now is the time to give LLMs access to the ACM digital library

The website is using Cloudflare security and blocked my action, possibly due to a trigger like a certain word or SQL command. I was trying to perform an action when this page came up, and the Cloudflare Ray ID is needed to report the issue to the site owner.

How to survive boiling water

https://substackcdn.com/image/fetch/$s_!nF_1!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F488c06c9-945f-46f4-b14d-e57146d81479_700x525.jpeg
A college student's abandoned milk carton became a 27-year dorm tradition, sparking a story about the value of discarded items. A scientist investigates a probiotic tea, discovering that its bacteria can survive boiling water due to spore-forming properties.

Running Kimi K3 on a M1 Max

https://opengraph.githubassets.com/4419400a42486565d8b5f84e905219d617de2ff106ccb46a6717d711898608a5/gavamedia/deltafin
Deltafin is a research project that runs a Mixture-of-Experts model on a 64 GB laptop, taking 16 seconds per token, but is exact and reproducible. It can be made faster with newer chips and more RAM.