▸ Arch's team says the AUR malware incident is contained after pulling 1,500+ packages tied to credential-stealing payloads.
▸ A New York bill would require employers to disclose whether a posted job is actually open, filled, or just collecting resumes.
▸ Flock Safety operates ~40,000 automated license plate readers across 5,000+ US communities, and its pitch to police is a searchable index of every car...
▸ Your atproto handle is a DNS record; your DID is a row in the PLC directory — both are controlled by someone who isn't you.
▸ DeepSeek launches V4.1 Flash on Sept 10 and says it beats V4 Pro on every axis — performance, cost, speed, and task completion time.
▸ Shopify has acquired Tailwind Labs; Adam Wathan and the core team are moving in-house while Tailwind CSS remains MIT-licensed and open source.
▸ Mistral closed a €1.7B Series C at an €11.7B post-money, with ASML putting in €1.3B to become the largest shareholder.
▸ OpenAI published a writeup claiming its models produced progress on the Navier–Stokes Millennium Prize Problem — one of seven unsolved problems with a...
▸ CVE-2026-85046 is an actively exploited sandbox escape affecting every Chromium-based browser — Chrome, Edge, Brave, Vivaldi, Arc, Opera, and Electron...
▸ A secretive DHS unit is analyzing Americans' financial patterns and feeding 'suspicious' signals to local police for pretextual traffic stops.
▸ The 2030 Census is dropping differential privacy and reverting to data swapping — the pre-2020 method that the 2018 reconstruction attack already brok...
▸ LibreOffice hit record download numbers after publicly stating it has no AI features and no plans to add any.
▸ Valve announced a new Steam Machine — a small-form-factor SteamOS box aimed at the TV, eleven years after the first attempt died on arrival.
▸ Three trending GitHub repos this week — anthropics/fermats-last-theorem, kajisho5/ffmpeg-skill, and Mantitup-Org/vista — all ship the same artifact: a...
▸ opensourceaimustwin.com climbed from 477 to 1,363 HN points in roughly ten hours — manifestos don't usually do that.
▸ A researcher factored 512-bit RSA keys belonging to Entrust root CAs issued in the mid-1990s — the same math that once protected the early commercial ...
▸ Nvidia has agreed to acquire Hugging Face for more than $13B, per Business Insider — nearly 2x the $7B valuation HF turned down from Nvidia last year.
▸ CVE-2026-85046 is an in-the-wild sandbox escape affecting every Chromium-based browser; Google shipped an emergency Stable-channel patch.
▸ OpenAI's GPT-6 Astra posted the first credible score on ARC-AGI-3, the puzzle benchmark Chollet designed specifically to resist LLM pattern-matching.
▸ Open-weight coder models (Qwen3-Coder, DeepSeek-V3.1, GLM-4.6) now match Sonnet-class output on day-to-day refactors — the gap closed sometime in Q1 2...