Auto-download daily
Issue · October 25, 2026

Top of Hacker News

10 stories of the day: AI, technology, business and simply interesting discussions — recapped and unpacked.

Apollo's chief economist: AI has paid off for the Mag 7 and nobody else in the S&P 500 (apollo.com)

Slok's chart set also checks total factor productivity from a San Francisco Fed series and finds no AI lift. His read: mainstream companies now treat token spend as a margin cost, not a growth engine.

The thread's counter was a mill with a water wheel: you can't drop an electric motor into it, you rebuild the building.

Not just a headline — the discussion unpacked

The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.

After Musk's Starshield limits on Ukraine, Europe asks which American vendor holds the switch (steveblank.com)

Citing the Wall Street Journal, Blank says Elon Musk personally ordered limits on Starshield for Ukraine. Europeans now ask whether Microsoft, Oracle or Palantir could do the same.

The thread argued about treason, then about whether Europe has any rockets.

🌍Other ★ 421 · 💬 451 · 3 days ago · #big tech#policy#space#Elon Musk#Eutelsat#Starlink+2

A $500 bitcoin wallet sat on a PHP server for hours and nobody took it (stealmybitcoin.com)

The test was a price tag on the claim that AI makes PHP exploitation trivial. Within hours strangers had topped the wallet up to $2,000 and the prize was still unclaimed.

One commenter had an LLM-generated proof of concept that crashed the site. A crash is not a shell.

🚀Tech ★ 412 · 💬 251 · 3 days ago · #crypto#programming#security#Bitcoin#PHP#PHP2Shell

A Brotli bug found in February shipped no fix until now, and it reaches far beyond Node.js (aikido.dev)

CVE-2026-111497 (CVSS 9.2) lets a crafted Brotli stream trigger an out-of-bounds write, and it works in both directions: a malicious server can hit a client, and a malicious client can hit a server.

The thread argued about the name. Whether HTTP is really exposed turned out to depend on one setting.

🚀Tech ★ 281 · 💬 140 · 3 days ago · #open source#security#web#Aikido#Brotli#curl+2

Google's Finnish data-center site was cleared without an environmental assessment, and Finland is angry (nypost.com)

The NY Post headline says Google cut down 250K trees illegally. A thread commenter reduced it to 1.5 square miles of planted forest cleared before a legally required environmental assessment.

Finns in the thread said that is exactly why the country is angry.

Denmark's digital ministry quietly ended its Collabora pilot, and HN's reason was mail merge (computerworld.dk)

The Danish Ministry of Digitalisation dropped the Collabora pilot, delivered by Danish vendor cBrain, without announcing it. The paywalled article does not show the ministry's reason in its visible text.

HN supplied its own: a commenter has tried switching every year just to print adhesive labels.