Hacker News Highlights

This is a recap of the top 10 posts on Hacker News on Oct 25, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:17) - Local Wikipedia: Wikipedia, but only for things a half hour walk from you

(01:16) - Show HN: Steal My Bitcoin

(02:15) - We should be more ambitious with the software we build

(03:32) - The Goose Programming Language

(04:43) - America has lost 200k of jobs in media, film and the arts. How much is AI?

(05:55) - Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps

(07:10) - I don't understand quantum physics (2018)

(08:17) - Physicists trap a single antimatter particle for a month

(09:16) - FreeDNS

(10:05) - Roku developer repositories moved from GitHub to GitLab

(11:03) - Outro

Local Wikipedia: Wikipedia, but only for things a half hour walk from you
https://edjefferson.com/localwiki/
https://news.ycombinator.com/item?id=50202285Show HN: Steal My Bitcoin
https://stealmybitcoin.com/
https://news.ycombinator.com/item?id=50224916
We should be more ambitious with the software we build
https://danluu.com/ambitious/
https://news.ycombinator.com/item?id=50225695
The Goose Programming Language
https://aardappel.github.io/goose/
https://news.ycombinator.com/item?id=50224100
America has lost 200k of jobs in media, film and the arts. How much is AI?
https://www.apricitas.io/p/ai-and-the-fall-of-the-creative-class
https://news.ycombinator.com/item?id=50226419
Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps
https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497
https://news.ycombinator.com/item?id=50219177
I don't understand quantum physics (2018)
https://www.southampton.ac.uk/~doug/quantum_physics/index.html
https://news.ycombinator.com/item?id=50219666
Physicists trap a single antimatter particle for a month
https://www.scientificamerican.com/article/physicists-trap-a-single-antimatter-particle-for-a-month/
https://news.ycombinator.com/item?id=50186450
FreeDNS
https://freedns.afraid.org/
https://news.ycombinator.com/item?id=50222133
Roku developer repositories moved from GitHub to GitLab
https://blog.roku.com/developer/gitlab-move
https://news.ycombinator.com/item?id=50222622

This is a recap of the top 10 posts on Hacker News on Oct 24, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:17) - Kimi K3.1 Pro and K3.1 Pro Highspeed

(01:50) - Today, we hacked what we'd set out to hack: the iPhone

(02:38) - Apple Music 404 Not Found

(03:31) - Canadians are running out of time to oppose Bill C-22

(04:32) - Dessa: Conversation Model trained only on speech

(05:36) - The Real Kevin Bacon

(06:30) - Twelve years of distributed SQLite

(07:21) - CVE Tracker

(08:16) - Bringing uv and ty together

(09:09) - UUIDv7: Timestamps aren’t time-ordered and other oddities

(10:14) - Outro

Kimi K3.1 Pro and K3.1 Pro Highspeed
https://www.kimi.ai/blog/kimi-k3-1-pro
https://news.ycombinator.com/item?id=50212065Today, we hacked what we'd set out to hack: the iPhone
https://blog.calif.io/p/iphone
https://news.ycombinator.com/item?id=50211474
Apple Music 404 Not Found
https://music.apple.com/this-url-doesnt-exist
https://news.ycombinator.com/item?id=50207910
Canadians are running out of time to oppose Bill C-22
https://www.eff.org/deeplinks/2026/10/canadians-are-running-out-time-oppose-dangerous-c-22-surveillance-bill
https://news.ycombinator.com/item?id=50202114
Dessa: Conversation Model trained only on speech
https://block.xyz/dessa
https://news.ycombinator.com/item?id=50213925
The Real Kevin Bacon
https://pudding.cool/2026/10/kevin-bacon/
https://news.ycombinator.com/item?id=50169499
Twelve years of distributed SQLite
https://philipotoole.com/twelve-years-of-distributed-sqlite/
https://news.ycombinator.com/item?id=50217500
CVE Tracker
https://cve.0xosprey.com/
https://news.ycombinator.com/item?id=50215530
Bringing uv and ty together
https://astral.sh/blog/uv-ty-integration
https://news.ycombinator.com/item?id=50172962
UUIDv7: Timestamps aren’t time-ordered and other oddities
https://alexsci.com/blog/uuidv7-is-weird/
https://news.ycombinator.com/item?id=50211746

This is a recap of the top 10 posts on Hacker News on Oct 23, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:20) - Quad9 to exit France

(01:21) - eMudhra to exit global SSL/TLS certificate business

(02:17) - Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.

(03:15) - WorldTUI: I trained a 360M model to pretend to be a terminal

(04:21) - Docker is weird

(05:35) - Run full iOS 16.5 firmware on Android Devices

(06:44) - Every AI model has the same "controversial" take on humans

(07:47) - Local Wikipedia: Wikipedia, but only for things a half hour walk from you

(08:38) - OpenShell – A safe, private runtime for fleets of autonomous AI agents

(09:36) - LLMs are making formal software verification feasible at a much larger scale

(10:51) - Outro

Quad9 to exit France
https://quad9.net/news/blog/au-revoir-france/
https://news.ycombinator.com/item?id=50195959eMudhra to exit global SSL/TLS certificate business
https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
https://news.ycombinator.com/item?id=50195110
Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.
https://news.ycombinator.com/item?id=50193416
WorldTUI: I trained a 360M model to pretend to be a terminal
https://simedw.com/2026/10/21/world-model-terminal/
https://news.ycombinator.com/item?id=50190363
Docker is weird
https://codeandcake.dev/posts/2026-10-22-docker-is-weird
https://news.ycombinator.com/item?id=50202681
Run full iOS 16.5 firmware on Android Devices
https://github.com/oosexgang/hackios-xnu-kernel
https://news.ycombinator.com/item?id=50196718
Every AI model has the same "controversial" take on humans
https://www.modelcompare.ai/blog/ai-models-controversial-take-on-humans
https://news.ycombinator.com/item?id=50197313
Local Wikipedia: Wikipedia, but only for things a half hour walk from you
https://edjefferson.com/localwiki/
https://news.ycombinator.com/item?id=50202285
OpenShell – A safe, private runtime for fleets of autonomous AI agents
https://github.com/NVIDIA/OpenShell
https://news.ycombinator.com/item?id=50198675
LLMs are making formal software verification feasible at a much larger scale
https://www.anthropic.com/research/formal-verification
https://news.ycombinator.com/item?id=50202217

This is a recap of the top 10 posts on Hacker News on Oct 22, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:18) - Today's PHP security release, and how we're strengthening security

(01:38) - Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

(02:38) - There isn't an easy exploit for this PHP vulnerability

(03:44) - Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

(05:01) - mitmproxy adds --emudhra option

(06:10) - Security Disclosure

(07:14) - DuckDB 2.0.0 LTS “Cinnamon Teal”

(08:25) - Claude Duet

(09:29) - GitLab critical patch release

(10:40) - PingCap TiDB Leaks

(12:02) - Outro

Today's PHP security release, and how we're strengthening security
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
https://news.ycombinator.com/item?id=50182987Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
https://news.ycombinator.com/item?id=50184820
There isn't an easy exploit for this PHP vulnerability
https://eliastaylor.com/noexploit/
https://news.ycombinator.com/item?id=50188948
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
https://news.ycombinator.com/item?id=50181114
mitmproxy adds --emudhra option
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://news.ycombinator.com/item?id=50189232
Security Disclosure
https://blog.railway.com/p/security-disclosure-wednesday-october-21st
https://news.ycombinator.com/item?id=50188228
DuckDB 2.0.0 LTS “Cinnamon Teal”
https://duckdb.org/2026/10/21/announcing-duckdb-200
https://news.ycombinator.com/item?id=50181136
Claude Duet
https://claude.com/product/claude-duet
https://news.ycombinator.com/item?id=50186037
GitLab critical patch release
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
https://news.ycombinator.com/item?id=50185869
PingCap TiDB Leaks
https://fulcrumsec.vg/pingcap/
https://news.ycombinator.com/item?id=50173716

This is a recap of the top 10 posts on Hacker News on Oct 21, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

(00:00) - Intro

(00:18) - DeepInfer: High-performance inference framework for DeepSeek models

(01:29) - eMudhra intermediate CA compromise

(02:45) - Upcoming critical PHP security release (CVE-2026-109618 / -109619)

(03:57) - Show HN: SimCity, but with Permits

(05:09) - Voxtral 3

(06:24) - Apple broke an essential presentation feature of iPads

(07:30) - What shall I teach my son?

(08:39) - Ofcom concedes defeat in 4chan case

(09:40) - The Future of CSS

(10:48) - Google open-sources TorchTPU, a native PyTorch back end for TPUs

(11:42) - Outro

DeepInfer: High-performance inference framework for DeepSeek models
https://github.com/deepseek-ai/DeepInfer
https://news.ycombinator.com/item?id=50163277eMudhra intermediate CA compromise
https://emudhra.we-have-a-problem.com/
https://news.ycombinator.com/item?id=50166579
Upcoming critical PHP security release (CVE-2026-109618 / -109619)
https://news-web.php.net/php.announce/509
https://news.ycombinator.com/item?id=50172041
Show HN: SimCity, but with Permits
https://permit.petercai.com/
https://news.ycombinator.com/item?id=50170593
Voxtral 3
https://mistral.ai/news/voxtral-3/
https://news.ycombinator.com/item?id=50168396
Apple broke an essential presentation feature of iPads
https://teddysvoronos.com/2026-10-19-apple-broke-an-essential-presentation-feature-of-ipads/
https://news.ycombinator.com/item?id=50165208
What shall I teach my son?
https://stevekrouse.com/ends
https://news.ycombinator.com/item?id=50169707
Ofcom concedes defeat in 4chan case
https://prestonbyrne.com/2026/10/20/ofcom-concedes-defeat/
https://news.ycombinator.com/item?id=50167028
The Future of CSS
https://www.joshwcomeau.com/css/interop-2027/
https://news.ycombinator.com/item?id=50175070
Google open-sources TorchTPU, a native PyTorch back end for TPUs
https://github.com/google-pytorch/torch_tpu
https://news.ycombinator.com/item?id=50169053