Sign in to set up offline reading Sign in
11 stories of the day: AI, technology, business and simply interesting discussions — recapped and unpacked.
The demos show a malicious PDF opened through iMessage or Signal ending in code execution, followed by an app that roots the phone. Calif says most of the bugs behind them already went to Apple.
The thread split over a different question: is it responsible to show a working takeover before a patch exists, or is the publicity what gets people to update?
The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.
ClickBench's maintainer removed pgrust, a Rust reimplementation of Postgres, saying its entry measured "a lookup table of the benchmark, not a database." Probes with slightly altered queries were refused with errors.
pgrust's creator showed up in the thread to say the accusations are false. Commenters wanted to know why the paths were in the binary.
Google's plan requires every Android developer to register centrally, hand over government ID and prove they hold the signing key, even for apps shared outside the Play Store. Power users keep a 9-step escape hatch with a mandatory 24-hour wait.
Commenters split on whether that wait is a fair compromise or the first turn of the screw. One of them brought up tech-support scams.
Kimi K3.1 Pro has a 1-million-token context window and a Highspeed variant that runs 2-3 times faster. On Artificial Analysis's index it scores 55, fourth overall, while using 150M tokens against a median of 87M.
Moonshot also says it deliberately kept the open weights below its own pipeline's offensive-cyber capability.
Google's wording says it will not use data from these services for ads "unless you choose to make data from these services available to other Google services that support personalized ads."
Commenters argued over what counts as choosing, given how many Google products nag you to turn sharing on.
The author says the rebuilt version costs about $20k a year against $150k for Looker, with Snowflake permissions doing the access control and dashboards running in sandboxed iframes.
He leaves out engineering hours: eight months of part-time work by three engineers, 325 commits and about 74k lines of code.
Disney+ and Hulu Premium went from $18.99 to $21.49 a month on September 23. Mid-show ad breaks stay limited to the cheapest tier for now.
Readers argued about whether any price removes ads for good, or whether the ad-free tier is just the next tier to be sold again.
An Ask HN thread of 665 comments put the question to OpenAI. One answer: the labs need revenue now, and selling tokens through long-running agents is the only thing that is provably growing.
A rival answer: the models are not good enough yet, and a fully automated business at scale would be a landmark nobody has delivered.
The figures come from an open-source per-request method that Berget AI built with SEI, WattTime and Klimatkollen, for a 5,000-token-in, 387-token-out request on a B300 node. Energy use is about 4 Wh in both places.
The company notes that an embargoed version had overstated the gap, and the final numbers were revised down after a grid-intensity correction.
Alex Scott's post argues the three properties people credit to UUIDv7, monotonic order, a trustworthy creation time and unguessability, are not guaranteed by RFC 9562. Even Postgres warns that an extracted timestamp may differ from the creation time.
Commenters said that misses the real reason to use it: keeping new rows together in the index.
Utilities with shareholders also had longer outages in 2025: 120 minutes per home excluding major storms, against 80 at public utilities. Co-ops averaged 14.1 cents but 166 minutes.
The analysis reports what homes paid, not why. Public utilities do not pay income tax and can borrow tax-free.
