// stories

2040 stories · editorial analysis with viewpoints and sources

How a $10K bounty hunter turned YouTube's recommender into a private-video oracle

Oct 12

▸ A security researcher chained YouTube's own APIs — including the recommendation feed — to enumerate private and unlisted videos belonging to arbitrary...

Security / Privacy AI / ML clear_take

Adrafinil: the lid-closed Mac problem finally has a real fix

Oct 12

▸ A new open-source tool, Adrafinil, keeps a closed-lid MacBook awake only while AI coding agents are actively working — then lets it sleep.

AI / ML DevOps / Platform Engineering clear_take

Smarter models, dumber tools: the hidden tax on your agent stack

Oct 12

▸ Armin Ronacher's benchmark: newer frontier models score higher on reasoning but call tools worse than their predecessors without heavy prompt scaffold...

AI / ML Backend / APIs clear_take

Xbox 'resets': Microsoft admits the console war is over

Oct 12

▸ Microsoft published a post titled 'Resetting Xbox' on news.xbox.com — a rare public acknowledgement that the platform's decade-long strategy needs a r...

Career / Industry Startups / Launches clear_take

Google fired the guy who built the Workspace CLI they never shipped

Oct 12

▸ Justin Poehnelt, a 9-year Google engineer and Workspace DevRel lead, says he was fired after building and open-sourcing a Workspace CLI on personal ti...

Open Source Career / Industry clear_take

The quiet exodus from GitHub: Codeberg, Forgejo, and the self-host revival

Oct 12

▸ Codeberg's user count has roughly doubled in the last 18 months as developers react to Copilot training on public repos and Microsoft's tightening gri...

Open Source DevOps / Platform Engineering clear_take

The 'Papers, Please' web: how age-gate laws killed anonymous browsing

Oct 12

▸ Age-verification mandates in the UK, EU, and 24+ US states are forcing ID checks on a growing share of the public web — well beyond porn.

Politics / Regulation Security / Privacy clear_take

Carmack: the engine licensing trap that gutted id after Quake

Oct 12

▸ Carmack says id's post-Quake strategy — licensing engines, chasing Trinity, slow-rolling sequels — traded a generational lead for a decade of drift.

Career / Industry Startups / Launches clear_take

A $100k tax on hiring your next engineer

Oct 12

▸ The US is proposing a $100,000 charge for international students who want to work in the country after graduating.

Politics / Regulation Career / Industry clear_take

Ford swapped humans for AI. Then quietly hired the humans back.

Oct 12

▸ Ford automated swaths of internal work with AI, watched quality and throughput collapse, and rehired displaced staff within months.

AI / ML Career / Industry clear_take

The open-weights gap is no longer about capability. It's about who runs the GPUs.

Oct 11

▸ Doubleword's analysis argues frontier open-weights models (DeepSeek V3, Qwen 2.5, Llama 3.3) now sit within 5-10 points of GPT-4-class closed models o...

AI / ML Open Source clear_take

If You Can't `chmod` It, You Don't Own It

Oct 11

▸ A 250-point HN essay revives a debate every engineer already knows the answer to: clicking 'Buy' on a remote server is a lease, not a sale.

DevOps / Platform Engineering Open Source clear_take

crates.io still requires a GitHub account. That's a supply chain problem.

Oct 11

▸ Publishing any Rust crate to crates.io still requires logging in with a GitHub account — there is no email, WebAuthn, or alternative SSO path.

Open Source Security / Privacy clear_take

KE = ½mv²: the quadratic that quietly governs your rate limiter

Oct 11

▸ A 14-year-old Physics Stack Exchange thread is back on HN because the question — why v², not v? — is the cleanest intro to non-linear cost curves most...

DevOps / Platform Engineering Backend / APIs biomimicry_analogy

Anonymous 'exploitarium' repo dumps undisclosed 0-days. Now what?

Oct 11

▸ An anonymous GitHub account (bikini/exploitarium) published a batch of undisclosed zero-days, skipping every coordinated-disclosure norm.

Open Source Security / Privacy multiple_viewpoints

Crypto's $189M midterm buy: regulatory capture as a line item

Oct 11

▸ Crypto firms have committed $189M to 2026 US midterm races — more than doubling their 2024 pace with 16 months still to go.

Crypto / Web3 Politics / Regulation clear_take

The .claude directory is the new dotfiles

Oct 11

▸ Matt Pocock published his personal Claude Code skills directory as a public repo — and it's climbing GitHub trending alongside the evergreen giants (s...

Open Source AI / ML clear_take

Wikipedia's UK workers file the first union recognition bid in its 25-year history

Oct 11

▸ Staff at Wikimedia UK, organising via @UTAW_tech, have filed the first formal union recognition request in Wikipedia's 25-year history.

Career / Industry Open Source clear_take

Jane Street tries autoregressive diffusion on market data

Oct 11

▸ Jane Street benchmarked autoregressive diffusion against GANs and VAEs for generating synthetic order-book and price data.

Data / Analytics AI / ML explainer

Cloudflare's OAuth-for-all turns its edge into your auth server

Oct 11

▸ Cloudflare just made its internal OAuth 2.1 provider — the one powering its own MCP server auth — available to any Worker or origin behind the edge.

Cloud / Infrastructure Security / Privacy clear_take
page 1 of 102 older →