I’m currently working on reducing the gap between input and output—not talking about development.

The year of the Linux desktop. Although I don’t use Linux as my main OS nowadays, I’m hoping the movement alone will be a win. The niceties and UX/CX improvements can also be transferred to other domains.

Stealing Reasoning Traces from Proprietary LLM APIs. Researchers show how the hidden chain-of-thought from proprietary models can be extracted, raising fresh questions about how "sealed" frontier reasoning really is. The work details techniques for recovering traces that vendors have tried to keep private. MORE

Can AI Do Novel Security Research? Meet the HTTP Terminator. PortSwigger explores whether AI can produce genuinely novel vulnerability research, testing an agent's ability to find and exploit real bugs beyond known patterns. The piece weighs where automation helps and where human researchers still lead. MORE

Supply Chain Security Analysis of a 9.5M-Install VS Code Extension. ProjectDiscovery walks through a supply chain foothold hidden in a single markdown file inside a massively installed extension, showing how extensions auto-update and run with full privileges on the machine holding your source. MORE

A New Trick Reveals AI Models' Inner Thoughts. Computer scientists found a way to extract the hidden internal thinking of frontier models, a step that could make AI systems less opaque and harder to trust blindly. MORE

Omarchy Quattro release introduces a fully rewrote the desktop shell in Quickshell for a unified, plugin-based experience and was hailed by DHH as one of his career's greatest releases. A week later the Omacom Foundation launched with $8 million from DHH and seven other tech leaders to fund and expand Omarchy (plus exclusive long-term sponsorship of Hyprland) in pursuit of the "Year of Linux on the Desktop." MORE

Bing Images RCEs: How XBOW Found Three Critical Flaws. XBOW's autonomous AI turned a "boring" image-search bug on Bing into three proven remote code execution vulnerabilities, showing how agentic bug hunting can escalate from a small flaw to a serious finding. MORE

176 Vulnerabilities in Samsung Preinstalled Android Apps. Oversecured published a catalog of 176 vulnerabilities found across Samsung's preinstalled Android apps, documenting the findings and the research process behind them. MORE

Notes from Hacker Summer Camp 2026. A compiled field report from this year's DEF CON and surrounding events, collecting the talks, themes, and community energy from the biggest hacker gathering of the year. MORE

When OpenAI Employees Hit a Roadblock, They Email Sam Altman. Fortune reports on a dedicated internal address OpenAI employees use to escalate blockers straight to the CEO, a look at how the company tries to eliminate bureaucratic friction. MORE

WebMCP First Look: How AI Agents Can Control Web Apps Directly. WebMCP lets web applications expose JavaScript-based tools directly to AI agents, opening a path for agents to interact with sites and apps without custom integrations. MORE

Ask HN: How Do You Keep Up with HN These Days? A Hacker News thread on how readers stay on top of interesting articles now that AI and noise have made discovery harder, full of workflows and tools. MORE

Joining Cursor. Arslan reflects on leaving PlanetScale after five and a half years to join Cursor, sharing the reasoning behind the move and what drew him to the team. MORE

Claude Code for Normal People: Skills, Voice Mode, and How to Collaborate with AI. Grace Clarke, a former marketing consultant who taught herself Claude Code, walks through the workflows that made AI collaboration click for her. MORE

Be AI do crime goose badge. Casey Ellis turned a meme into a sticker, a small slice of the hacker community's sense of humor, available for anyone who wants to rep it. MORE

Mitchel Hashimoto's updated daily schedule given Superlogical, second kid, and AI usage. MORE

@rwincey - software construction & deconstruction

@ITSecurityguard - Security Research @ Assetnote

@h1_sp1d3r - 2019 DoD Researcher of the Year, former HackerOne top 50, Security Consultant

@leerob - Teaching developers @cursor_ai, previously @vercel

@ADITYASHENDE17 - MS Cyber, @Bugcrowd Top 100, Bug Bounty Trainer

Cure All Diseases. A Works in Progress feature on the future of medicine, exploring the scientific and economic barriers standing between us and broad cures for major diseases. MORE

The Hardest Working Font in Manhattan. Marcin Wichary spent years photographing the typeface embedded in New York City's subway system, telling the story of the font that runs the city. MORE

Altar II. A compact mechanical keyboard with a coiled cable and a magnetic dial, built for people who want their desk to feel intentional. MORE

`/show-me` skill. Help the user understand the current topic visually with concise diagrams, code-shape sketches, and focused HTML artifacts. MORE | CONTEXT

It's Time To Rethink Everything. MEGA is an upcoming 4-week online program for developers who already build with AI. Turn agents into leverage you can reason about, price, debug, and ship from instructors John Lindquist, Theo Browne, and Angie Jones. MORE

unslop. A directory of Cursor plugins that reject low-evidence patterns, aimed at keeping AI-generated code from turning into mush. MORE

anti-slop: Opinionated Oxlint Rules. An Oxlint plugin that flags low-evidence, low-signal TypeScript and JavaScript patterns before they make it into your codebase. MORE

General-Legal/legal-templates. A public collection of attorney-drafted legal templates under a CC0 license, covering common agreements without the usual paywall. MORE

Google Developer Documentation Style Guide. Google's open style guide for writing clear, consistent technical documentation, free to read and apply to your own docs. MORE

How to Give AI Perfect Memory. Jeff Su's complete guide to giving AI agents persistent memory, covering the tools and patterns that let models recall context across sessions. MORE

AudioPriorityBar. A native macOS menu bar app that automatically manages audio device priorities so the right device is always selected. MORE

The 4 Claude Skills That Run the Beehiiv CEO's Newsletter Every Week. A breakdown of the four Claude skills used to run a half-million-dollar newsletter, showing the exact automation behind a weekly production process. MORE

How to Get Started with Grok Bot. A first-hand walkthrough of setting up Grok Bot on a Mac the day it dropped, from install to first working commands. MORE

How Riley Makes Videos for 1.5M+ Followers With Codex. Riley Brown shows the AI system behind his one-person video business, covering the pipeline that powers his content at scale. MORE

lavish-axi: HTML Is the New Markdown. A new editor for HTML artifacts, built on the idea that agents now generate HTML the way they once generated markdown. MORE

The task isn't the job. Sunil Pai argues that coding agents have given developers a new role, and that the real work is the decision problem underneath the tasks they automate. MORE

Signal Over Noise: AI Agents and the Operator Moat. AI doesn't replace the security researcher, it augments their reach, and the people who can operate the tools are the ones who keep the edge. MORE

The Antithesis Principle. A concept from business and life: every good idea has an opposite that is also true, and understanding both is what separates the great from the good. MORE

How Will You Measure Your Life? Clay Christensen's classic talk on applying business frameworks to the personal question of what makes a life meaningful, still one of the best frameworks for deciding what matters. MORE