▸ A malicious Zod 4.6.6 was published to npm; maintainer Colin McDonnell reverted and cut a clean release.
▸ The Codex CLI installer drops a persistent background service that phones home and auto-updates, with no opt-in prompt.
▸ A ransomware crew hit a European refrigeration vendor and triggered automatic defrost cycles across supermarket fridges in multiple countries.
▸ Scott Aaronson calls the Census Bureau's ban on noise infusion an 'American privacy emergency' — 319 on HN.
▸ Three repos trending on GitHub right now — Codex-5.5-codex-instruct-5.5, chatgpt-register-sub2api, and FuckClaude — are all variations of the same thi...
▸ Organic Maps is a free, ad-free, tracker-free OSM navigation app that runs fully offline — and it just hit HN #1 with 503 points.
▸ openclaw/openclaw is trending on GitHub at 283.1k stars — above React (243.9k) and Linux (221.6k) — with a one-line README about being 'your personal ...
▸ Casey Liss's 'you dolts' post hit 327 on HN by making a boring technical point: CarPlay is a video stream from your phone, not a firmware swap.
▸ Virginia's HB 2724 amends the VCDPA to ban the sale of 'precise geolocation data' — defined as location within a 1,750-foot radius — with penalties up...
▸ Ledger confirmed an undocumented secondary chip inside its hardware wallets after users spotted it during teardowns.
▸ A security researcher chained YouTube's own APIs — including the recommendation feed — to enumerate private and unlisted videos belonging to arbitrary...
▸ A new open-source tool, Adrafinil, keeps a closed-lid MacBook awake only while AI coding agents are actively working — then lets it sleep.
▸ Armin Ronacher's benchmark: newer frontier models score higher on reasoning but call tools worse than their predecessors without heavy prompt scaffold...
▸ Microsoft published a post titled 'Resetting Xbox' on news.xbox.com — a rare public acknowledgement that the platform's decade-long strategy needs a r...
▸ Justin Poehnelt, a 9-year Google engineer and Workspace DevRel lead, says he was fired after building and open-sourcing a Workspace CLI on personal ti...
▸ Codeberg's user count has roughly doubled in the last 18 months as developers react to Copilot training on public repos and Microsoft's tightening gri...
▸ Age-verification mandates in the UK, EU, and 24+ US states are forcing ID checks on a growing share of the public web — well beyond porn.
▸ Carmack says id's post-Quake strategy — licensing engines, chasing Trinity, slow-rolling sequels — traded a generational lead for a decade of drift.
▸ The US is proposing a $100,000 charge for international students who want to work in the country after graduating.
▸ Ford automated swaths of internal work with AI, watched quality and throughput collapse, and rehired displaced staff within months.