Top 30 stories from Hacker News. Top 10 include comment highlights. Compiled at 20:10 UTC.
1153 points by speerer · 189 comments
IP, technology & commercial law
What HN said:
estebarb: "Uniqlo x Akamai sells another design of shirt in the same range which is plainly incomplete" Imagine having to return a t-shirt because that malfunction! — I don't understand why are you returning this, was the size wrong or you didn't like it? — No, there is a syntax error at l...
olooney: If you enjoy this kind of thing, you might also like Martin Kleppe's work, such as the Quine Clock: https://aem1k.com/qlock/ I reverse engineered it to a unobfuscated version a few years ago: https://gist.github.com/olooney/a89db3932b089925b71b68d7e9f2...
raphlinus: The font is Roboto Mono, not Consolas. There's something else a lot stranger going on, though. It is a proper monospace font, but the typesetting on the shirt is not. There's some kerning going on (I noticed it especially in the 'Iy' pair), and also it appears that narrower chara...
wbh1: I love this shirt! Here's a nice video from the actual designer about the process of making this shirt (including intentionally making it hard to OCR): https://youtu.be/jocGLiecpjU?t=526
474 points by ColinEberhardt · 181 comments
What HN said:
fwlr: “Prompt injection attacks have become, to agentic AI, what SQL injections were to web applications: a systematic, category-wide vulnerability class that requires the same systematic strategies and defenses.
jakewins: How is this a Github vulnerability? The researchers are the ones that grant the agent access to private repos and then ask it to answer questions in public repos.. of course this allows extracting private information? This is like setting up a normal CI job with access to secrets...
voidUpdate: 'No Way to Prevent This,' Says Only Programming Concept Where This Regularly Happens
SwtCyber: Its funny to see how researchers bypass Githubs praised guardrails with a simple word like "Additionally". It just proves that any attempt to build hard security boundaries inside an llm context window is bound to fail.
465 points by speckx · 127 comments
The snappiest chat application you
What HN said:
tomgs: I joined the chat as well, but if Hendrik is here - we'd love to have you on the channel (https://youtube.com/@WithMultiplesAI). This will make for one hell of an episode, I think.
wxw: > It’s designed to be extremely easy to self-host on your own infrastructure. Kudos for this. Per the docs: https://docs.chatto.run/, > Chatto ships in a compact, self-contained binary > it uses NATS, a compact message broker that also ships with a built-in stream persistence eng...
duttish: A thought if you want to sell to companies, "with per-user keys that get shredded when a user decides to delete their account." You'll need soft delete, work messages belong to the employer and not the user.
mertbio: I’ve known Hendrik for years, and he is one of the most talented developers I’ve ever met. I’m confident this project will become successful very quickly. Beyond the project itself, what fascinates me most is how he single-handedly developed it by leveraging agentic coding.
421 points by logickkk1 · 286 comments
What HN said:
simonw: I had preview access to this one for a few weeks. It's very good. I had one conversation that lasted a full hour while I was walking the dog, got some good brainstorming done against one of my projects. The best feature is that it can delegate questions out to GPT-5.
larrik: Haven't tried this, but talking to Claude in its app is so much better than talking to Siri that Apple should be ashamed. It got every word perfectly the first time, including programming / project management terms. Meanwhile, Siri struggles to send basic texts to my kids.
jonstaab: This is the opposite direction AI should be going. Human relationships are the most valuable thing we have, and so, naturally, technology seeks to intermediate and now replace them.
modeless: It was obvious from the live demo that this thing still hasn't learned when to shut up. When it stops tacking on "I'm here when you need me" to every response that could have just been "ok" or simply silence, maybe they'll have something.
343 points by Stevvo · 119 comments
"If we improve the code and we can all benefit from it, it's good for everyone," says Fenris's Ben Hunter, as he talks security, LLM coding, and help from Godot
What HN said:
edelbitter: Already used (sounds like, successfully) by the usual GitHub phishing campaigns: > found a workaround for the shader compilation bug that keeps the mesh from vanishing. I attached the fix here. https://github.
mynegation: What engine? Is not this game played in a spreadsheet?
cassianoleal: I've wanted to try out EVE Online for a while now. Never found the time, and it seems to be a bit of a time sink. Since I have no idea if I'm actually going to enjoy it or not, it never took priority. These kinds of news make me want to find the time. Good job!
j-bos: Github link: https://github.com/carbonengine
335 points by miniBill · 114 comments
What HN said:
greyface-: The article doesn't disclose the value of "sys.rzadmin.password", but this writeup from 2022 does: https://boschko.ca/tenda_ac1200_router/ Spoiler: it's "rzadmin". And it looks like there are a bunch of other goodies in the firmware, too.
pbasista: > The associated username is not validated, so any provided username will succeed when paired with the backdoor password. Great. I am really wondering why should the customers trust these manufacturers.
fusslo: > Tenda is a supplier of home and business network devices such as routers, switches, wireless access points, and video surveillance equipment. I was unfamiliar with Tenda. > Shenzhen Tenda Technology Co.,Ltd. ( https://www.tendacn.
Havoc: The consistency with which networking hardware companies produce such garbage is crazy. And it’s always amateur hour backdoors somehow. If it was something sophisticated they might get a pass on „ok some security agency made them do it probably“
328 points by ottomengis · 78 comments
Introducing Robostral Navigate: 8B model achieving 76.6% on R2R-CE with just a single RGB camera. No depth sensors, LiDAR, or multiple cameras needed.
What HN said:
HanClinto: What is the realistic path to getting to play with this? I would love to hook this up to OpenClaw for hobbyist exploration. My dream has been to embody OpenClaw into a farm robot (been looking at adapting one of those RC lawnmowers that is tracked and built for mowing steep hills...
iandanforth: It's implied, and I'm hoping it's true, that this is a map-less navigation. Which is impressive. This kind of task is much easier if you have a pre-captured map of the environment, but if they are doing this without a map it's great.
humanperhaps: This looks to not be an openly available model, but I think if it were, availability of an easy single-camera navigation setup could allow for a lot of cool hobbyist projects.
dwa3592: This is very cool. Congratulations to the Mistral team. Map less navigation in the outside world has been around for quite a while. But map less navigation inside the buildings is relatively new.
322 points by 4diii · 218 comments
If you need a basic NAS and don't care about GUI features, it is suprisingly simple to set up a ZFS dataset and share it over the network using Samba.
What HN said:
Confiks: Not a great time price-wise to be building a NAS, but I have been doing so for the last two weeks. Inside a Jonsbo N6 case, which is pretty nice with an 8x SATA backplane and drive bays (unlike the earlier Jonsbo variants). I ended up on shucking 4x the 14 TB WD Elements Desktop.
MrDOS: Some other things I find useful on NASes: Install avahi-daemon. Samba will automatically register with it to advertise SMB/CIFS to macOS and Linux clients over DNS-SD. Install wsdd2 so that your server will be auto-discovered by Explorer on Windows 10+ clients with SMB 1.
a-french-anon: I think it's appropriate to link to my blog post about building such a NAS but with very different technologies: dm-integrity, mdadm and XFS. The reason being that as a C/C++ dev following OpenZFS development closely, I found the focus on ginormous features over general stability...
splitbrain: I came to the same conclusion when I built my NAS. Just Nix for the system, zfs for raid and docker compose for any service I might want to run. https://www.splitbrain.org/blog/2025-08/03-diy_nas_on_nixos
281 points by DanRosenwasser · 96 comments
What HN said:
m3h: The speed up numbers based on their testing: Codebase | TypeScript 6 | TypeScript 7 | Speedup ------------|--------------|--------------|-------- vscode | 125.7s | 10.6s | 11.9x sentry | 139.8s | 15.7s | 8.
adamddev1: Remember when people would argue about how types weren't worth the effort? I love TypeScript, if nothing else for how it's been able to popularize types.
dimitropoulos: the real story here is an incredible team that managed to simultaneously keep two separate codebases alive for the most advanced type system known to mankind (yeahhh yeahh Hindley-Milner eat your heart out). huge congrats to the team! looking forward to the Rust rewrite ;)
miiiiiike: After a few years of using Typescript, having to use type annotations and import basic language features like
abcin Python feels like an absolute slog.
279 points by BoumTAC · 193 comments
Grok 4.5 is SpaceXAI's smartest model built for coding, agentic tasks, and knowledge work.
What HN said:
Tiberium: It seems to be extremely economical - 4x better reasoning efficiency compared to Opus while being priced at $2/$6. For comparison, GPT 5.4 is $2.5/$15, GPT 5.5/5.6 are $5/$30, Opus 4.8 is $5/$25, Fable is $10/$50.
codemog: Can someone breakdown to me how this makes any sort of economical sense? Spending billions and billions to have the 3rd best model while even the number 1 and 2 players already seem to struggle making a profit.
sschueller: Do we have any proof that this was made by xAI and isn't some Chinese open model running with modifications? Their inital image generation was a wrapper around Flux.
mholt: Of the 3 models I tried, Grok did the best at making an iOS app I wanted for personal use (a bike computer with specific qualities). (Claude just gave up and did an HTML/CSS implementation but I insisted on native SwiftUI+Metal.
AI/ML
Business/Tech
Other
Stories and comments sourced from Hacker News public API. Not affiliated with Y Combinator or Hacker News.