First things first
There's a lot of internet weirdness today, from clever little projects and nostalgic gadgets to wheat seeds waking up after decades in an attic. Meanwhile, the machines are getting more capable, whether they're building factories in games, writing code in teams, or quietly sorting people into targets.
Security holes, shaky databases, and AI rules keep things grounded. Big ideas still come with very human questions about trust and control, too.
The top 6
HackerTube uses 6,454 YouTube videos recommended in Hacker News comments from 2007-2026 to create a curated video site. It offers topic browsing, custom recommendations without accounts, keyboard shortcuts, and downloadable data for building personal versions.
CVE-2026-98432 is a critical Linux IPv4 TCP handshake use-after-free, remotely exploitable without authentication and potentially allowing root command execution on servers with multipath TCP listeners. Upstream fixes are available, but Ubuntu and RHEL had not yet shipped patched kernels as of October 29, 2026.
Italian farmer Claudio Grossi discovered and planted seeds from his great-grandfather’s attic, growing unusually tall wheat with seven ears per stalk and multicolored kernels. The ancient grain attracted interest as a potential answer to modern agricultural challenges.
Researcher Jiahao Shao says Anthropic blocked or downgraded his access after flagging his work as training a competitor. He says Claude only helped run jobs and analyze results, not generate training data.
Jepsen found 96 bugs in ParticleDB versions 1.1.4 through 1.1.18.11.rc-22, including crashes, data loss, and serious transaction anomalies. Most issues were fixed, but committed writes could still disappear and serializable transactions still had anomalies; Orkes says a later release resolves the remaining problems.
Support our sponsor
beehiiv handles the unglamorous parts of running a newsletter - deliverability, referrals, ad revenue, subscriber growth - so you can spend your time writing. Built by people who scaled Morning Brew. Free to start, no card required. 14-days free, then save 20% for 3 months.
Quote of the day
We are what we repeatedly do. Excellence, then, is not an act but a habit.
Aristotle
Also big today
Memdoor’s programming workflow uses five Qwen3.8-27B agents in separate roles, coordinating through files, plus a repair worker. Its title claims the team outperforms Fable 5 on LiveCodeBench Hard.
VOLTA infostealer steals credentials, financial data, and personal details, then sends an evidence bundle to an LLM to rank victims by potential value. If a model refuses, the malware tries a chain of other models, making AI a key part of its intelligence-gathering workflow.
GPT-5.6 Sol completed a peaceful Factorio run in 13.5 hours of game time using a Python tool to control the game. It launched a rocket despite late-game factory problems, improving on an earlier GPT-5.5 attempt that failed to use conveyor belts.
Casio’s W-100 combined 100-meter water resistance, sports timers, and about five years of battery life in a lightweight resin watch. The C-80 added a fingertip keypad for eight-digit arithmetic, advancing calculator-style watches.
Norway’s Scenic Routes feature public restrooms designed by architects and artists at scenic stops across the country. The facilities combine practical visitor services with distinctive designs and views of the landscape.
Large GROUP BY hash tables cause frequent slow RAM accesses, leaving CPUs stalled even when monitoring shows 100% usage. Processing data in smaller chunks can improve cache use and speed up aggregation, even if it requires more CPU work.
Pass it on
Enjoying the digest?
Forward it to someone who'd like it, or send them the link to subscribe.
Share hn.todayOne for the road
I was raised as an only child.
It drove my sister nuts.
Worth a look
OpenAI is merging ChatGPT and Codex usage limits into a shared allowance. Usage of either service will count against the same limit.
Anthropic has restricted Claude from helping with video game modding, decompiling, and reverse-engineering, amid growing use of AI to alter games. The limits are broad enough to disrupt legitimate development and basic troubleshooting, and Anthropic has not publicly explained the restrictions.
A Brazilian labor court fined two law firms about $16,000 after lawyers hid instructions in a filing to manipulate an AI system reviewing the case. The ruling treated the prompt injection as a breach of legal duties of good faith and fair dealing.
A retired professor was arrested for blocking a delivery robot. She says she will do it again.
Electrifying transport, heating and industry could halve global energy demand by replacing an inefficient fossil-fuel system that wastes much of its energy as heat. Oxford professor Jan Rosenow also discusses grid demands, battery recycling, China’s solar growth and how electrification can strengthen energy security.
Nolan Lawson benchmarks AI agents building a Pokémon app with different JavaScript frameworks, measuring time, token use, code size, performance, and accessibility. He argues that claims about frameworks being better for agents need evidence, while noting the test covers only one kind of app.
Song of the day
Deep cuts
Dustin Hoffman recalls feeling miscast and deeply insecure while filming “The Graduate,” despite director Mike Nichols choosing him for the lead. Living among the cast and crew, he felt alienated and unworthy, echoing his character Benjamin’s conflict with the older generation.
A former Meta researcher testified that he torrented the pirated Books3 book dataset while working at the company and later deleted his copy because of ongoing litigation. Authors say Meta had multiple copies, while the company disputes his account and faces lawsuits over using books to train its Llama models.
Colin Percival discovered that Intel Hyper-Threading could leak cryptographic secrets and developed an exploit to recover an RSA key. He argues scholars who find security flaws should coordinate quietly with affected teams so patches are ready before public disclosure.
RAMBO demonstrates how malware on an air-gapped computer can encode stolen data into radio signals emitted by its RAM. An attacker with a software-defined radio and antenna can capture and decode the signals at up to 1,000 bits per second.
A browser-based port of the 1987 NES game Contra converts its assembly code to C and then WebAssembly. It supports solo play and online two-player games.
A hacking group said it exploited a vulnerability in software used to manage LED advertising screens, displaying pornographic footage on a highway billboard in Egypt and accessing screens in several other countries. Egyptian authorities opened an investigation and suspended roadside displays, while the incident raised questions about security at the billboard operator.
Today's best Hacker News stories, summarized and screenshotted, one email a day.
