AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]

Client isolation in Wi-Fi networks is not a standardized feature and can be bypassed by attackers using various techniques such as abusing shared Group Temporal Keys (GTKs) and gateway bouncing. This allows attackers to intercept and inject traffic, enabling them to become a Man-in-the-Middle (MitM) and potentially launch higher-layer attacks.

Launch HN: Cardboard (YC W26) – Agentic video editor

https://www.usecardboard.com/marketing/hero/frames_00001.webp
Get a strong first pass in minutes, then refine it like a real editor. Tight pacing, clean captions, share-ready exports. A full suite of AI features that speed up the boring parts, without taking control away. Cardboard understands the semantic meaning of your request and maps it to complex timeline operations automatically.

Will vibe coding end like the maker movement?

https://substackcdn.com/image/fetch/$s_!V58r!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F7ae2044e-9f90-45a4-9681-9b6a3832607a_626x782.png
Vibe coding lacks the transformative power of previous hobbyist technology scenes due to its direct deployment to the public and lack of a scenius phase. A new metaphor for vibe coding is consumption of surplus intelligence, where the value lies in judgment, taste-making, and creative direction rather than the output itself.

Palm OS User Interface Guidelines (2003) [pdf]

The Palm OS user interface guidelines aim to help developers create applications that are easy to use and follow the Palm OS design principles, which prioritize simplicity, speed, and minimal learning curve. By following these guidelines, developers can create applications that are consistent, intuitive, and optimized for the Palm OS platform, resulting in a better user experience.

What Claude Code Chooses

https://amplifying.ai/research/claude-code-picks/opengraph-image.png?267f044bb5256d31
Claude Code builds custom solutions in 12 of 20 categories, often using established tools like GitHub Actions and Stripe. Newer models tend to pick newer tools, with sharp generational shifts and agreement on 18 of 20 categories within each ecosystem.

OsmAnd's Faster Offline Navigation

https://osmand.net/assets/images/hh-example-d95bc3f5a713ed5589d256c130359786.png
OsmAnd developed a new routing algorithm called Highway Hierarchy (HH) Routing to achieve a 100x speed boost in offline navigation while preserving flexibility and minimal storage. This algorithm uses a two-level hierarchy, identifies crucial border points, and dynamically refines routes with an optimized A* engine to deliver a superior navigation experience.

I baked a pie every day for a year and it changed my life

https://i.guim.co.uk/img/media/873dea7e7801b5a575f17bbbeb23c608955a90a5/414_197_3173_2471/master/3173.jpg?width=445&dpr=1&s=none&crop=none
Vickie Hardin Woods, a retired city planner, baked a pie every day for a year to find a new purpose after retirement. Her project, which she called "the pie lady," helped her connect with others and discover her ability to do new things.

Show HN: Deff – side-by-side Git diff review in your terminal

https://raw.githubusercontent.com/flamestro/deff/main/docs/example_01.png
deff is a Rust TUI for reviewing git diffs with features like syntax highlighting and per-file navigation. It persists reviewed state locally in .git/deff/reviewed/.

Google API keys weren't secrets, but then Gemini changed the rules

https://framerusercontent.com/images/oFLh01kYhwzmLTqmgBAgUlN94.png
Google's API keys, initially intended for public services like Maps, can now access sensitive Gemini endpoints without warning. This allows attackers to access private data and charge LLM-usage to affected accounts.

Museum of Plugs and Sockets

https://plugsocketmuseum.nl/Logo_frontPage.jpg
The Digital Museum of Plugs and Sockets allows reproduction of images and texts with proper source indication. Use of the museum's content is not instruction, but rather for information and documentation purposes.

Nano Banana 2: Google's latest AI image generation model

https://storage.googleapis.com/gweb-uniblog-publish-prod/images/NB2_Hero.width-200.format-webp.webp
Nano Banana 2 is a state-of-the-art image model that combines advanced intelligence and studio-quality creative control with lightning-fast speed. It offers features like precision text rendering, translation, and high-quality photorealistic imagery, making it a versatile tool for various workflows.

Show HN: Terminal Phone – E2EE Walkie Talkie from the Command Line

https://gitlab.com/assets/twitter_card-570ddb06edf56a2312253c5872489847a0f385112ddbcd71ccfa1570febab5d2.jpg
GitLab.com

BuildKit: Docker's Hidden Gem That Can Build Almost Anything

https://tuananh.net/img/apkbuild-demo.png
BuildKit is a general-purpose build framework that can produce various types of output, not just Docker images. It uses a binary protocol called LLB to describe a directed acyclic graph of filesystem operations.

Show HN: Linex – A daily challenge: placing pieces on a board that fights back

An addictive line-completion puzzle game. Compete in daily challenges, climb the rankings and prove who’s really the best. Play now!

Bild AI (YC W25) Is Hiring Interns to Make Housing Affordable

https://bookface-images.s3.amazonaws.com/small_logos/8e9f3a32db39a8212bb016c786d67f53ed0bf27c.png
Roop and Puneet are impact-driven to use AI and computer vision to make construction faster and cheaper. They're looking for a 0-to-1 builder with a growth mindset to join their SF-based internship.

Google Street View in 2026

https://tech.marksblogg.com/theme/images/google_street_view/qgis-bin_eSXumzRsku.jpg
The user has a powerful system with a 5.7 GHz AMD Ryzen 9 CPU and 96 GB of DDR5 RAM, running Ubuntu 24 LTS on Windows 11 Pro. They used DuckDB to import and analyze a dataset of Google Street View coverage, creating a table and rendering maps with QGIS and HCMGIS plugin.

Lidar waveforms are worth 40x128x33 words

https://openaccess.thecvf.com/img/cropped-cvf-s.jpg
Lidar has become crucial for autonomous driving, providing high-resolution 3D scans that are key for accurate scene understanding. To this end, lidar sensors measure the time-resolved full waveforms from the returning laser light, which a subsequent digital signal processor (DSP) converts to point clouds by identifying peaks in the waveform. Conventional automotive lidar DSPs process each ...

Show HN: Rev-dep – 20x faster knip.dev alternative build in Go

https://raw.githubusercontent.com/jayu/rev-dep/master/logo.png
Rev-dep is a high-speed static analysis tool for modern JavaScript and TypeScript codebases that enforces dependency graph hygiene and removes unused code. It provides a configuration system for orchestrating project checks and can execute all checks in a single pass, significantly faster than multiple running individual commands separately.

Steering interpretable language models with concept algebra

https://www.guidelabs.ai/_astro/steering3.ZMTRJy7u_Z1pXp5.png
Steerling-8B enables concept algebra, allowing direct control over model generation without retraining or prompt engineering. It uses a concept module to natively support injecting and suppressing concepts at inference time, providing reliable and composable fine-grained control.

Show HN: Beehive – Multi-Workspace Agent Orchestrator

https://storozhenko98.github.io/beehive/logo.png
~ git status On branch feat/oauth Changes not staged: modified: src/auth.ts modified: src/middleware.ts ~ npm test PASS src/auth.test.ts (12 tests) PASS src/middleware.test.ts (8 tests) ~ ┌ │ │ Welcome back! │ │ Opus 4.6 │ ~/feature-auth │ └ ❯ add OAuth2 flow to src/auth.ts ❯ Full git clones on any branch, each in its own directory. No interference between experiments.

The Wolfram S Combinator Challenge

https://www.combinatorprize.org/img/header.png
The Wolfram Foundation is offering a $20,000 prize for a correct solution to the Wolfram S Combinator Challenge. The first individual or group to submit a correct solution with a full proof will receive the prize.

Show HN: Hacker Smacker – spot great (and terrible) HN commenters at a glance

https://hackersmacker.org/images/screenshot3.png
Hacker Smacker is a browser extension for Hacker News that helps identify quality authors and filter out obnoxious commenters. It uses a friend/foe system inspired by Slashdot and is open-source on GitHub.

This time is different

https://shkspr.mobi/blog/wp-content/uploads/2017/11/Confused-Robot.jpg
Investors often claim "this time is different" but history shows similar technologies like 3D TV and Quibi failed to live up to hype. AI will likely be one of many future technologies, not a revolutionary game-changer.

Open Source Endowment – new funding source for open source maintainers

https://endowment.dev/_astro/maxim.Ds-c4WiZ_Zv2fbD.webp
The Open Source Endowment is a community-led fund to sustainably support critical OSS projects, leveraging investment returns from donations. It promotes long-term health of the global open source supply chain with transparent governance and accountability.

just-bash: Bash for Agents

https://opengraph.githubassets.com/dba2349f23b7b6de46a5809ad57c71c76c2da692d312f4c941160d9e2fa09e96/vercel-labs/just-bash
just-bash is a secure Bash environment for AI agents that provides execution protection against infinite loops or recursion and supports custom commands, file systems, and network access. It can be used as a secure alternative to bash and provides a CLI and API for executing Bash scripts and commands.

Show HN: Mission Control – Open-source task management for AI agents

https://raw.githubusercontent.com/MeisnerDan/mission-control/main/mission-control/docs/demo.gif
Mission Control is a local task management tool for solo entrepreneurs who delegate work to AI agents. It gives agents structure with roles, inboxes, and reporting protocols, allowing users to stay in control without micromanaging.

Banned in California

https://banned-in-california.vercel.app/og-image.png
General Dynamics NASSCO in San Diego is a unique shipyard capable of building large naval vessels due to its grandfathered status. Its closure would be impossible to replace due to stringent environmental regulations and complex manufacturing processes involved.

He saw an abandoned trailer. Then, uncovered a surveillance network

https://i0.wp.com/calmatters.org/wp-content/uploads/2023/07/Asset-4.png?resize=600%2C600&ssl=1
California has granted permits to federal agencies to install license plate readers on state highways, raising concerns about privacy and data collection. Critics argue the program bypasses state law and could target humanitarian volunteers and lawful residents.

Jimi Hendrix was a systems engineer

https://spectrum.ieee.org/media-library/an-electric-guitar-connected-to-a-number-of-effects-pedals-connect-to-an-amplifier-and-loudspeaker-stack.png?id=64983431&width=1200&height=1021
Jimi Hendrix created groundbreaking sound using a modular analog signal chain with pedals and a Marshall amplifier. He used a systematic approach to manipulate the nonlinear complexities of the system for maximum expression.

Tell HN: YC companies scrape GitHub activity, send spam emails to users

User received unsolicited marketing emails from companies scraping their Github activity, likely using commit metadata. They have contacted Github and YC Ethics about the issue.