HackerNews

Show HN: Cactus Needle 3: 8-29MB automation models can match DeepSeek V4 Flash

Hey HN, Henry from Cactus here. We submitted Needle 2 here a few weeks ago, and the feedback in the discussion thread was incredibly valuable, thanks! Thanks to all that feedback, we’ve been able to move quickly to release Needle 3 and I'd love to hear what you think again. The key features: 1) Automation (tool calls & structured JSON output): Needle still doesn't chat by design, its quite challenging to pack general capacity into such small models, so we focus on tool calls and structured JSON....
HackerNews

Minimal Phone 2

Article URL: https://minimalcompany.com/ Comments URL: https://news.ycombinator.com/item?id=49749369 Points: 208 # Comments: 194
HackerNews

Science Is Open Software

Article URL: https://jepedersen.dk/blog/202505_research/ Comments URL: https://news.ycombinator.com/item?id=49762687 Points: 28 # Comments: 13
HackerNews

SDCC – Small Device C Compiler

Article URL: https://sdcc.sourceforge.net/ Comments URL: https://news.ycombinator.com/item?id=49762744 Points: 19 # Comments: 2
🌍 TheVerge

OpenAI and Microsoft knew they were starting a ‘doom loop’ for the web

Recently unsealed court documents in the New York Times' case against OpenAI and Microsoft are pretty damning. The companies' own documentation warned that it was starting a "doom loop" that would damage the web, characterized its scraping of data to train its models as the "largest theft of labor in human history," and that it […]
🌍 TechCrunch

World model companies are keeping a lot of secrets

Everyone in the world-models space is sitting on a pile of cash and a ton of buzz, but good luck getting anyone — from the founders to their own data suppliers — to tell you what they're actually building.
How to kill a Zombie?
🌍 Dev.to

How to kill a Zombie?

We all have our Zombies; no, not the ones you think of from movies. I’m talking about software, like pet projects and ventures. My Zombie is Contenox—how do I know it is one? Well, each time I try to kill it, it comes back bigger and stronger, with much more hunger than before the kill. Had that problem? I hope not; it’s daunting, eats your time, eats your opportunities, and, well, your health and money. Let’s step back a little: why did I even want to kill it? Contenox is an AI system...
🌍 Dev.to

Do AI Coding Tools Actually Make Developers Faster? The Data Says It Depends

Artificial intelligence is changing the way software is developed. Today, developers can ask an AI coding assistant to generate a function, explain an error, write a test, refactor code, or suggest a solution to a problem that might otherwise take several searches and attempts. This naturally raises an important question: Do AI coding tools actually make developers faster? The simple answer is: sometimes. Research on developer productivity presents a more complicated picture than the po...
🌍 Dev.to

Free offline microgreens farm ledger for Windows: I replaced a spreadsheet with a local-first Tauri + Rust app

A spreadsheet let me overwrite a harvest cell. The total still looked fine. That tray was already promised. I needed a free offline farm ledger for Windows: standing orders, trays by the ounce, and books that do not live in a $30/month cloud farm app. No account. No subscription. File stays on the PC. That is Groundtruth 0.1.3. Apache-2.0. I run my own microgreens farm on it. Repo: https://github.com/alexjvv52-ops/groundtruth-app The job: standing order tracker + honest bo...
🌍 Dev.to

When the Payment-Failure Email Is the Exploit: Inside the Magento Template Rendering Chain of CVE-2026-75650

When the Payment-Failure Email Is the Exploit: Inside the Magento Template Rendering Chain of CVE-2026-75650 Opening CVE-2026-75650 is an unauthenticated remote code execution vulnerability in Adobe Commerce and Magento Open Source that reached the CISA Known Exploited Vulnerabilities catalog on 8 September 2026. Dutch ecommerce security firm Sansec, which named the campaign StyleSmuggler, documented exploitation starting 4 September 2026. Adobe published the emergency hotfix VU...
🌍 Dev.to

Building an Android APK Protection Platform Against Reverse Engineering

Building an Android APK Protection Platform Against Reverse Engineering Android applications are relatively easy to inspect after an APK is obtained. With the right tools, developers can analyze DEX files, inspect resources, recover strings, examine application logic and study native libraries. This creates an important question: How can developers make an Android application harder to analyze and reverse engineer? This is one of the problems I have been working on with CoreSh...
🌍 Dev.to

‘Brought to You in 5-Hour Increments’: A Week of Moving AI Usage Limits

The thing people pay AI companies for is usage, and usage is measured by a meter. This week, across the coding-agent subscriptions in particular, the meter moved — and it kept moving. OpenAI brought back a five-hour usage cap for its Plus subscribers on the Work and Codex surfaces, having taken such a cap away earlier in the summer. Anthropic’s weekly quotas carried on resetting to their own rhythm. And a lot of people who had quietly built their working day around a number discovered, again, th...
🌍 Dev.to

Refuse an unentitled caller in a Forge resolver, and prove it with a test that goes red without the gate

Refuse an unentitled caller in a Forge resolver, and prove it with a test that goes red without the gate Key takeaways END STATE: a resolver that refuses an unentitled caller, proven by a test suite that scores 1/6 against the ungated version and 6/6 against the gated one. The happy path passes either way. That is why a positive-only test proves nothing about authorization. Fail CLOSED: a probe that throws, times out, or returns an unexpected shape must refuse, not allow. ...
🌍 Dev.to

Job-Hunting With a Resume That Doesn't Look Like a Resume

My last article did numbers I didn't expect. A lot of the comments landed on the same line: "okay but did it actually get you hired?" No. Not yet. And I'm going to be honest about how that's been sitting with me, because the polished "here's what I learned" version of this post was easier to write than the true one. Eight years managing a Trader Joe's floor. Two years before that answering phones and filing at a front desk. And now, at the bottom, two shipped Linux projects with real users...
🌍 Dev.to

Vendor Concentration Risk Explained Through Warm Second Provider Invoice Reconciliation Drills

TL;DR: Keep a second usage-metering supplier warm by sending it a small, bounded stream of synthetic and replay-safe events, then reconcile both suppliers against an internal ledger. Put a hard spend ceiling on the exercise and define the amount of traffic you will refuse when that ceiling is reached. A fallback that accepts a health check but cannot reproduce invoice totals is not warm. For a media account platform, the bill is made of metered events retained, processed, and queried across t...