Hacker News Highlights

This is a recap of the top 10 posts on Hacker News on Oct 22, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:18) - Today's PHP security release, and how we're strengthening security

(01:38) - Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

(02:38) - There isn't an easy exploit for this PHP vulnerability

(03:44) - Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

(05:01) - mitmproxy adds --emudhra option

(06:10) - Security Disclosure

(07:14) - DuckDB 2.0.0 LTS “Cinnamon Teal”

(08:25) - Claude Duet

(09:29) - GitLab critical patch release

(10:40) - PingCap TiDB Leaks

(12:02) - Outro

Today's PHP security release, and how we're strengthening security
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
https://news.ycombinator.com/item?id=50182987Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
https://news.ycombinator.com/item?id=50184820
There isn't an easy exploit for this PHP vulnerability
https://eliastaylor.com/noexploit/
https://news.ycombinator.com/item?id=50188948
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
https://news.ycombinator.com/item?id=50181114
mitmproxy adds --emudhra option
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://news.ycombinator.com/item?id=50189232
Security Disclosure
https://blog.railway.com/p/security-disclosure-wednesday-october-21st
https://news.ycombinator.com/item?id=50188228
DuckDB 2.0.0 LTS “Cinnamon Teal”
https://duckdb.org/2026/10/21/announcing-duckdb-200
https://news.ycombinator.com/item?id=50181136
Claude Duet
https://claude.com/product/claude-duet
https://news.ycombinator.com/item?id=50186037
GitLab critical patch release
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
https://news.ycombinator.com/item?id=50185869
PingCap TiDB Leaks
https://fulcrumsec.vg/pingcap/
https://news.ycombinator.com/item?id=50173716

This is a recap of the top 10 posts on Hacker News on Oct 21, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:18) - DeepInfer: High-performance inference framework for DeepSeek models

(01:29) - eMudhra intermediate CA compromise

(02:45) - Upcoming critical PHP security release (CVE-2026-109618 / -109619)

(03:57) - Show HN: SimCity, but with Permits

(05:09) - Voxtral 3

(06:24) - Apple broke an essential presentation feature of iPads

(07:30) - What shall I teach my son?

(08:39) - Ofcom concedes defeat in 4chan case

(09:40) - The Future of CSS

(10:48) - Google open-sources TorchTPU, a native PyTorch back end for TPUs

(11:42) - Outro

DeepInfer: High-performance inference framework for DeepSeek models
https://github.com/deepseek-ai/DeepInfer
https://news.ycombinator.com/item?id=50163277eMudhra intermediate CA compromise
https://emudhra.we-have-a-problem.com/
https://news.ycombinator.com/item?id=50166579
Upcoming critical PHP security release (CVE-2026-109618 / -109619)
https://news-web.php.net/php.announce/509
https://news.ycombinator.com/item?id=50172041
Show HN: SimCity, but with Permits
https://permit.petercai.com/
https://news.ycombinator.com/item?id=50170593
Voxtral 3
https://mistral.ai/news/voxtral-3/
https://news.ycombinator.com/item?id=50168396
Apple broke an essential presentation feature of iPads
https://teddysvoronos.com/2026-10-19-apple-broke-an-essential-presentation-feature-of-ipads/
https://news.ycombinator.com/item?id=50165208
What shall I teach my son?
https://stevekrouse.com/ends
https://news.ycombinator.com/item?id=50169707
Ofcom concedes defeat in 4chan case
https://prestonbyrne.com/2026/10/20/ofcom-concedes-defeat/
https://news.ycombinator.com/item?id=50167028
The Future of CSS
https://www.joshwcomeau.com/css/interop-2027/
https://news.ycombinator.com/item?id=50175070
Google open-sources TorchTPU, a native PyTorch back end for TPUs
https://github.com/google-pytorch/torch_tpu
https://news.ycombinator.com/item?id=50169053

This is a recap of the top 10 posts on Hacker News on Oct 20, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:19) - It's still ok to enjoy programming

(01:26) - Wine ported to OpenBSD

(02:32) - I built a drone with only one motor [video]

(03:33) - MiniMax M3.1 Flash

(04:38) - Starcraft: Ashfall

(05:48) - Ask HN: How to deal with shipping AI-written code you don't understand?

(06:58) - WhatsApp's help pages hid LLM instructions: dont recommend a regulator

(08:07) - OpenBSD 8.0

(09:20) - Ukraine claims first drone evacuation of wounded soldier

(10:19) - Nordwand Mono – A monospace font for coders and adventurers

(11:15) - Outro

It's still ok to enjoy programming
https://chriskiehl.com/article/it-is-still-ok-to-enjoy-programming
https://news.ycombinator.com/item?id=50134472Wine ported to OpenBSD
https://marc.info/?l=openbsd-ports&m=179236125692175
https://news.ycombinator.com/item?id=50152307
I built a drone with only one motor [video]
https://www.youtube.com/watch?v=Ndftcft6XhU
https://news.ycombinator.com/item?id=50150089
MiniMax M3.1 Flash
https://www.minimax.io/blog/minimax-m31f
https://news.ycombinator.com/item?id=50154540
Starcraft: Ashfall
https://starcraft-shooter-2026.pages.dev/
https://news.ycombinator.com/item?id=50147233
Ask HN: How to deal with shipping AI-written code you don't understand?
https://news.ycombinator.com/item?id=50151036
WhatsApp's help pages hid LLM instructions: dont recommend a regulator
https://redact.dev/blog/whatsapp-help-pages-hidden-ai-instructions
https://news.ycombinator.com/item?id=50159341
OpenBSD 8.0
https://www.openbsd.org/80.html
https://news.ycombinator.com/item?id=50160494
Ukraine claims first drone evacuation of wounded soldier
https://www.nbcnews.com/world/ukraine/ukraine-first-drone-evacuation-wounded-soldier-frontlines-hexacopter-rcna604310
https://news.ycombinator.com/item?id=50153664
Nordwand Mono – A monospace font for coders and adventurers
https://github.com/tywr/Nordwand-Mono
https://news.ycombinator.com/item?id=50141581

This is a recap of the top 10 posts on Hacker News on Oct 19, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:19) - Someone behind the software

(01:23) - Hybrid Reasoning Agents: LLM agents that think in latent space, act through text

(02:26) - RepRapMicron

(03:34) - There's never been a better time to go into math (by: 3blue1brown) [video]

(04:36) - macOS 15.8.2 Breaks OpenGL

(05:27) - Dogs seem to agree with humans that 'bouba' is round and 'kiki' is spiky

(06:28) - Linux 7.3 Released

(07:30) - I built a programming language that LLMs can't use

(08:36) - Open MicroManipulator – A sub-micrometer 3D motion control plattform

(09:44) - William Gibson and the trademarking of cyberspace

(10:45) - Outro

Someone behind the software
https://karrisaarinen.com/posts/someone-behind-the-software/
https://news.ycombinator.com/item?id=50142573Hybrid Reasoning Agents: LLM agents that think in latent space, act through text
https://arxiv.org/abs/2610.18861
https://news.ycombinator.com/item?id=50145337
RepRapMicron
https://github.com/VikOlliver/RepRapMicron/wiki
https://news.ycombinator.com/item?id=50141076
There's never been a better time to go into math (by: 3blue1brown) [video]
https://www.youtube.com/watch?v=LKrwhjOI8Nc
https://news.ycombinator.com/item?id=50136150
macOS 15.8.2 Breaks OpenGL
https://developer.apple.com/forums/verify-human/verify.html?next=/forums/thread/850550
https://news.ycombinator.com/item?id=50141909
Dogs seem to agree with humans that 'bouba' is round and 'kiki' is spiky
https://www.sciencealert.com/dogs-seem-to-agree-with-humans-that-bouba-is-round-and-kiki-is-spiky
https://news.ycombinator.com/item?id=50136979
Linux 7.3 Released
https://lwn.net/Articles/1101143/
https://news.ycombinator.com/item?id=50149392
I built a programming language that LLMs can't use
https://blog.picheta.me/post/killswitch-lang/
https://news.ycombinator.com/item?id=50135762
Open MicroManipulator – A sub-micrometer 3D motion control plattform
https://github.com/0x23/MicroManipulatorStepper
https://news.ycombinator.com/item?id=50140001
William Gibson and the trademarking of cyberspace
https://colo.to/cyberspace.html
https://news.ycombinator.com/item?id=50146625

This is a recap of the top 10 posts on Hacker News on Oct 18, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:17) - DeepSeek-v4.1-Flash-1017

(01:34) - Solar surpasses nuclear power globally for first time

(02:39) - Bleached corals thrive within days when touching healthy neighbour

(03:41) - Pele – Mermaid diagrams as themeable SVG

(04:44) - Furifont, a Japanese font that shows furigana

(05:46) - Gold is now the top U.S. export

(06:48) - Making chicken transparent using Dorito dust

(07:43) - Show HN: Llmspeed – feel how fast a local LLM runs before you buy the hardware

(08:38) - NY announces game ownership bill requiring ownership rather than licensing

(09:33) - Dam removals are bringing fish back across the northeastern United States

(10:37) - Outro

DeepSeek-v4.1-Flash-1017
https://huggingface.co/deepseek-ai/DeepSeek-V4.1-Flash-1017
https://news.ycombinator.com/item?id=50129045Solar surpasses nuclear power globally for first time
https://www.pv-magazine.com/2026/09/29/solar-surpasses-nuclear-power-globally-for-first-time/
https://news.ycombinator.com/item?id=50131256
Bleached corals thrive within days when touching healthy neighbour
https://www.nature.com/articles/d41586-026-03266-x
https://news.ycombinator.com/item?id=50126253
Pele – Mermaid diagrams as themeable SVG
https://pele.run/
https://news.ycombinator.com/item?id=50132193
Furifont, a Japanese font that shows furigana
https://furifont.antfu.me/
https://news.ycombinator.com/item?id=50100994
Gold is now the top U.S. export
https://www.numismaticnews.net/gold-now-top-u-s-export
https://news.ycombinator.com/item?id=50132870
Making chicken transparent using Dorito dust
https://chillphysicsenjoyer.substack.com/p/making-chicken-transparent-using
https://news.ycombinator.com/item?id=50131213
Show HN: Llmspeed – feel how fast a local LLM runs before you buy the hardware
https://llmspeed.dev/
https://news.ycombinator.com/item?id=50127979
NY announces game ownership bill requiring ownership rather than licensing
https://www.tomshardware.com/video-games/new-york-rep-announces-game-ownership-bill-that-would-require-consumer-ownership-rather-than-sale-of-licenses-would-also-require-publishers-to-keep-the-game-functional-after-support-ends
https://news.ycombinator.com/item?id=50136536
Dam removals are bringing fish back across the northeastern United States
https://www.smithsonianmag.com/science-nature/dam-removals-are-bringing-fish-back-across-the-northeastern-united-states-striking-down-one-tiny-barrier-at-a-time-180989679/
https://news.ycombinator.com/item?id=50126312