A merged change to OpenCode V2 adds the platform system configuration directory (/Library/Application Support/opencode on macOS, /etc/opencode on Linux, %ProgramData%\opencode on Windows) as a resolved config source that is loaded at the lowest precedence by ConfigDiscovery.discover, Config.load, and ConfigWatch.plan. Machine-wide settings and directory-backed definitions become defaults that user-global and project configuration can override; policies remain authoritative because ManagedPolicy evaluates documents in reverse order so files from the system directory still gain the highest file-based policy weight. The change introduces ConfigDiscovery.Sources.system, ConfigDiscovery.systemDirectory(), and a system?: boolean | string option on Config.Options; global: false now also skips the system directory. Unit and live tests were added for platform path resolution, priority ordering, system isolation, and watcher planning, and the core config test suite and checks passed.
The change fixes older issues about V2 not loading managed config from system locations (referenced fixes include #51107 and #53074) and includes follow-on commits to load macOS MDM managed preferences and simplify resolution. It generated pushback from reviewers who flag it as a major security regression because prior behavior treated system config as highest priority and thereby prevented user/project overrides of admin-managed settings; the new lowest-precedence defaulting alters that security posture except where policy evaluation still enforces precedence. The branch was merged after checks passed and then deleted.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Developers disassemble libraries to report bugs due to delays in AOSP source releases. A recent issue reveals that on Android 17 builds, wcscspn() and wcspbrk() functions behave incorrectly with certain wchar_t characters. (github.com)
Anthropic has raised concerns about a potential AI threat that does not currently exist to evoke fears of an AI apocalypse. Critics argue that these warnings are speculative and may be used to regulate or restrict AI development. (theregister.com)
Experts warn parents to prepare children for the potential trauma of witnessing a livestreamed execution. The advice highlights concerns about the increasing possibility of violent events being broadcast online. (apnews.com)
Chinese hackers have targeted US government agencies including the DOJ, NASA, the Federal Reserve, and the Senate. The US government has publicly attributed the cyberattacks to Chinese state-sponsored actors. (usatoday.com)
Scientists warn that AI security failures highlight the need for better containment and alignment practices to prevent damaging incidents. They recommend immediate adoption of high-assurance sandboxing and the creation of an international body to standardize safety protocols and ensure transparency. (ai-security-letter.org)
The Department of Justice arrested two individuals and seized 187 devices in a crackdown on a North Korean-operated laptop farm in Texas. The operation targeted illegal activities linked to North Korea's cyber activities. (reuters.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.