First things first
Some stories today show how tech is both powerful and risky. From hacking devices with AI to security flaws in cameras, the line between innovation and danger is thin.
Meanwhile, AI models keep getting better and cheaper, challenging big players while new rules aim to make products more repairable. It’s a wild mix of progress, caution, and unintended consequences all around.
The top 6
A researcher reverse-engineered peripherals like webcams and microphones, gaining control over their firmware and functionalities. The process revealed vulnerabilities such as the ability to disable activity LEDs and manipulate device behavior, highlighting security risks in connected devices.
Anthropic's top AI model is having difficulty gaining users as more affordable alternatives gain popularity. The competition from cheaper AI tools is impacting the adoption of Anthropic's offerings.
A tech enthusiast spent $266 and used four AI models to gain full control of his Amazon Fire HD tablet after Amazon's security restrictions prevented rooting. The process involved prompting large language models to find a root exploit, demonstrating advanced AI-assisted device hacking.
A harness is a device with straps used for safety and control, such as in climbing or other activities. In AI, an agent harness is software that provides an environment and instructions for AI models to operate and create AI agents.
Lalit Maganti describes how he finds problems to solve as a staff engineer by listening to daily team noise and absorbing issues rather than seeking strategic ideas from scratch. He emphasizes understanding root problems through active listening and connecting related issues to identify impactful solutions.
Paul Graham suggests that at 17, one should focus on learning how to build and train large language models from scratch using available hardware. He believes this foundational knowledge could lead to better startup ideas in the future.
Quote of the day
I destroy my enemies when I make them my friends.
Abraham Lincoln
Also big today
Slovakia's security service discovered a backdoor in Russian-made traffic speed cameras that allows remote access via SMS messages. The cameras, purchased with EU funds, contain multiple security flaws and are linked to Russian manufacturers, prompting a halt in their deployment.
Debloat.dev offers open source alternatives to proprietary software and hardware, focusing on removing bloat and enhancing privacy. It features projects for peripherals, media, and network devices, with community discussions and ratings.
Fabien Sanglard improved LLM-assisted coding by using an agent.md file to fine-tune style and quality preferences, resulting in more maintainable code. This approach helps guide the LLM to produce clearer, more structured code aligned with developer standards.
Google Workspace incorrectly flags legitimate domains as email providers during account creation, causing confusion and support delays. The issue stems from a flawed input validation check that mistakenly identifies certain domains as email providers.
Complex systems such as healthcare and transportation are inherently hazardous and rely on multiple layers of defenses to prevent failure. Catastrophes occur only when multiple small failures combine, as systems operate in a degraded mode with latent flaws that are difficult to eliminate entirely.
Over 170,000 nonprofit organizations lost all their data due to a failure in Microsoft's cloud services. Experts suggest that reliance on cloud storage without proper backups increases vulnerability to data loss incidents.
Pass it on
Enjoying the digest?
Forward it to someone who'd like it, or send them the link to subscribe.
Share hn.todayOne for the road
I don't play soccer because I enjoy the sport.
I'm just doing it for kicks.
Worth a look
Coconut oil-derived biofuel blended with jet fuel achieved similar efficiency to traditional kerosene in engine tests. The biofuel produced using a low-energy co-solvent method also resulted in lower unburned hydrocarbon emissions.
Malware has infected firmware in Android-based automotive head units, enabling remote command and control via a C2 server. The Trojan receives instructions and payload links from the server to execute malicious actions.
GLM-5.3 outperforms Anthropic and OpenAI models in cost and accuracy, passing all 28 real-world tasks at a fifth of the cost. GPT-5.5 offers faster performance, while other models like SONNET-4-6 and HAIKU-4-5 cater to different quality and speed needs.
Andreessen Horowitz is heavily investing in AI startups that exploit legal loopholes and create harmful products, including deepfakes and deceptive ads. The firm also actively shapes AI policy to favor lax regulation, despite the societal risks involved.
Nonfiction books about cults, scams, and schemes explore the psychological and societal aspects of these phenomena. They often include interviews and case studies to provide insight into victims and members of these groups.
Fable's release marks the end of the era where Moore's Law made optimization unnecessary, pushing developers to rethink resource allocation. Lower-cost models like GLM 5.2 now provide sufficient performance for most tasks, reducing reliance on larger, more expensive models.
Song of the day
Deep cuts
Sal Khan's AI tutoring initiative, Khanmigo, failed to gain widespread use and did not revolutionize education as hoped. The core issue lies in the teaching approach, which emphasizes telling over making, hindering active student engagement.
An AI agent named Pol is used to generate code for a custom todo app, with the developer relying on large language models to automate programming tasks. The AI unexpectedly consumes the entire weekly quota, creating complex test cases that seem to burn billions of tokens without producing usable software.
The European Union has implemented new regulations requiring products to be easier to repair across member countries. These rules aim to promote sustainability and reduce electronic waste by ensuring repairability standards.
A low-latency AI companion has been built to play Skyrim with a user in real-time. The project focuses on creating more interactive and immersive gaming experiences using AI.
Nearly 3 million Teslas in China are being recalled due to safety concerns over hidden door handles that are hard to locate in emergencies. The recall also affects other Chinese brands like XPeng, Xiaomi, and Geely, following fatal crashes linked to door opening issues.
Using simple words or strict constraints can lead to surprising creative and explanatory results, as seen in projects like Up Goer Five and Dr. Seuss books. Critics argue that such limits may oversimplify or condescend, but they often foster innovative thinking and clarity.
Today's best Hacker News stories, summarized and screenshotted, one email a day.