Super HN

New Show
1. F-Droid: "Keep Android Open"
This Week in F-Droid TWIF curated on Friday, 20 Feb 2026, Week 8 F-Droid core During out talks with F-Droid users at FOSDEM26 we were baffled to learn most w...
2. Ggml.ai joins Hugging Face to ensure the long-term progress of Local AI
ggml.ai joins Hugging Face to ensure the long-term progress of Local AI
3. Wikipedia bans Archive.today after site executed DDoS and altered web captures
If DDoSing a blog wasn't bad enough, archive site also tampered with web snapshots.
4. I found a Vulnerability. They found a Lawyer
What happens when you responsibly disclose a critical vulnerability exposing personal data - including that of minors - and the organization responds with legal threats instead of a thank you?
5. Facebook is absolutely cooked
Through the mirror into the lightly-clothed AI gooniverse
6. Lil' Fun Langs
a pungent monad odor that attracts mathochists
7. Making frontier cybersecurity capabilities available to defenders
Claude Code Security is one step towards our goal of more secure codebases and a higher security baseline across the industry.
8. Trump's global tariffs struck down by US Supreme Court
The US president says he will impose the temporary levies, after the top court struck down his sweeping tariffs.
9. Blue light filters don't work
Why controlling total luminance is a better bet
10. OpenScan
11. The path to ubiquitous AI (17k tokens/sec)
By Ljubisa Bajic Many believe AI is the real deal. In narrow domains, it already surpasses human performance. Used well, it is an unprecedented...
12. How to Review an AUR Package
On Friday, July 18th, 2025, the Arch Linux team was notified that three AUR packages had been uploaded that contained malware. A few maintainers including myself took care of deleting these packages, removing all traces of the malicious code, and protecting against future malicious uploads.
13. I found a useful Git one liner buried in leaked CIA developer docs
How to delete all merged git branches locally with a single command. This one-liner has been in my zshrc since 2017 — I found it buried in the CIA's Vault7 l...
14. Legion Health (YC) Is Hiring Cracked SWEs for Autonomous Mental Health
Founding Engineer (SF) at Legion Health (YC-backed): own Node/TS + Postgres backend and production LLM agents that run real psychiatric operations. High ownership, ship weekly.
15. Escaping Misconfigured VSCode Extensions (2023)
TL;DR: This two-part blog series will cover how I found and disclosed three vulnerabilities in VSCode extensions and one vulnerability in VSCode itself (a security mitigation bypass assigned CVE-2022-41042 and awarded a $7,500 bounty). We will identify the underlying cause of each vulnerability and create fully working exploits to demonstrate how an […]
16. Child's Play: Tech's new generation and the end of thinking
Tech’s new generation and the end of thinking
17. Untapped Way to Learn a Codebase: Build a Visualizer
18. Uncovering insiders and alpha on Polymarket with AI
19. The Popper Principle
20. PayPal discloses data breach that exposed user info for 6 months
PayPal is notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year.
21. Testing Super Mario Using a Behavior Model Autonomously
An article about autonomous testing of Super Mario using behavior models and evolutionary state space exploration techniques.
22. Do you want to build a community where users search or hang? (2021)
23. Raspberry Pi Pico 2 at 873.5MHz with 3.05V Core Abuse
Adventures with dry ice and RP2350 - how fast can it go? – Pimoroni Learning Portal
24. Almost Every infrastructure decision I endorse or regret after 4 years
Assortment of technology startup infrastructure recommendations
25. The Rediscovery of 103 Hokusai Lost Sketches (2021)
The 103 sketches for The Great Picture Book of Everything by Hokusai never made it back to Japan, but they did resurface in Europe in June 2019.
26. Consistency diffusion language models: Up to 14x faster, no quality loss
Standard diffusion language models can't use KV caching and need too many refinement steps to be practical. CDLM fixes both with a post-training recipe that enables exact block-wise KV caching and trajectory-consistent step reduction — delivering up to 14.5x latency improvements
27. Lessons learned from `oapi-codegen`'s time in the GitHub Secure Open Source Fund
Sharing some thoughts about the GitHub Secure Open Source Fund and how I spent the time with `oapi-codegen`.
28. AI is not a coworker, it's an exoskeleton
Companies that treat AI as an autonomous agent are disappointed. Those that treat it as an exoskeleton—an amplifier of human capability—are seeing transformative results. Here's the framework.
29. No Skill. No Taste
30. A chatbot's worst enemy is page refresh
developer blog