Top of Hacker News

Paul Battley, a London developer, archived all his Ruby gems and wrote that he no longer wants to feed a commons that big companies strip-mine for machines. He points at Ruby's own core team, which he says now builds the language largely with LLM agents.

In the thread, the founder of an email company described a friend on an 80K-star project who is disillusioned too: the robots work, but the joy of collaborating is gone.

Savannah police fired officer Amber Harpe in August after an investigation found she let her husband, an ICE agent, use her Flock license-plate-camera account. Local reporting counts nearly 1,000 searches across six states, mostly on Hispanic-owned vehicles.

Harpe argued firing was excessive because her husband is a federal officer. The thread's reply: that's exactly the problem.

An Ask HN thread asked how engineers cope with shipping LLM-written code they haven't fully read. A Hasura engineer says his own system became fuzzy once he moved from IDE autocomplete to Claude and Codex CLIs, and argues the answer is formally verifiable code.

The loudest counter: you already ship code you haven't read. Principal engineers always have.

A draft Wine port landed on OpenBSD's ports list this weekend. Thomas Frohwein says dozens of 64-bit Windows programs ran, including the Witcher 3 remaster, but WoW64 doesn't work, so 32-bit Windows software won't start.

Simon Willison's first question was about the plumbing: where does the port's development history live, given OpenBSD uses CVS.

Crystl's guide to tmux and Claude Code covers named sessions, send-keys scripting and capture-pane screen reads. Then it lists the limits: no real completion signal, brittle screen scraping, nothing surviving a reboot.

HN's reaction was that nearly every top-level comment was someone who had built their own replacement.

LWN calls Linux 7.3 a record-breaking release: 18,765 non-merge commits from 3,021 developers, 807 of them first-timers. The headline changes include a new fchroot() system call, per-CPU global data for BPF, and a finished sched_ext subscheduler.

There is also failfs, a filesystem that deliberately fails every operation, built for testing.

Mistral released Timestral, its first time-series foundation models. The 209M model tops three zero-shot benchmarks with a single checkpoint, and the 28M model reportedly beats Chronos-2, which is about four times larger.

On an 8-thread server CPU, the smallest takes roughly 10 ms per forecast, with no GPU needed.

Mac.apk implements the Android app environment directly on Apple Silicon macOS. Apps appear in the Dock with their own windows and draw through the GPU. It is alpha: 10 of 66 tested apps only partly work and 4 don't run.

The README warns that saved data lives inside each app's bundle, so trashing the app erases it. A commenter says the newest release moves it to Application Support.

IPinfo's scans found 2,528 Danfoss StoreView dashboards open to the internet on October 6-7, and France had 1,331 of them, more than the other 72 countries combined. 85% of the French ones ran software with known flaws.

After the attack, 316 French dashboards were still online on October 14, a 76% drop.

Let's Encrypt is adding two remote perspectives, raising the total from four to six, to meet CA/Browser Forum rules that take effect December 15, 2026 and call for at least five. The point is to make BGP hijacks of domain validation harder.

Staging starts October 27 and production rollout is planned for November 10.

A blogger's honeypot recorded exploitation of four Plex Media Server CVEs chained into remote code execution. Once outbound traffic was allowed, the box downloaded a Docker file and an UPX-packed xmrig miner.

A later update linked a proxy tool to the Aisuru botnet.

Erik Markus Kannike released qwen3-4b-deslop-v4, which needs no system prompt. On 40 held-out prompts, em dashes fell from 20.5 to zero and 68% of answers landed in human-writing range.

Commenters found it still reads as AI, and one asked why anyone would want that.