Protecting SSH Keys with macOS Secure Enclave

Using voltage glitching to unleash the A100 in my mining card

Smart home devices should work without the internet

Previously: .name Termination - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=49550772">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=49550772</a> - Sept 2026 (547 comments)

.name Grandfathered

Scion is back and is going to sell a kei truck in America

Can a Linear Program Do Weight-Space Programming?

Apple has new Mac app coming to make running local AI models easy

About TinfoilTinfoil: <a href="https:&#x2F;&#x2F;tinfoil.sh&#x2F;">https:&#x2F;&#x2F;tinfoil.sh&#x2F;</a> is a security research lab building an AI cloud for private, verifiable computation. Our customers include DuckDuckGo, Mozilla, financial institutions, AI labs and startups. Frontier labs, Google Deepmind, Trail of Bits, Redhat and Canonical, have also used us for research.As attacks on infrastructure grow more powerful, our goal is to bring state-of-the-art defenses to individuals and organizations as quickly as possible, without making them trade away performance or ease of use. Our mission[1] is to create a private garden for thought, where people keep control of their own agency, and we keep evolving our research[2] to stay ahead of rapidly changing threat models.About this roleAs an Applied AI Security Engineer, you’ll help companies deploy AI on Tinfoil when security or privacy is a hard requirement. Our customers include enterprises in regulated industries, AI labs and startups that need secure compute, and privacy-first product companies. You’ll partner with Sales to guide strategic customers from technical discovery through deployment. Then you’ll bring what you learn back to Product, Engineering, and Research so that what we build next reflects what customers need. The role is equal parts product engineer, security advisor, field expert, and connective tissue.This role is based in our San Francisco office, in person at least 3 days a week.With customers, you’ll become a trusted technical advisor. You’ll turn their threat models and privacy requirements into a working architecture, and show them how to verify Tinfoil’s guarantees themselves. You will help strategic customers understand the value of Tinfoil and paint the vision on how they can successfully integrate and deploy Tinfoil into their technology stack. When they hit problems, you’ll get hands-on: reproducing their environment, digging into the issue, and building working solutions with them.With product, you’ll get involved early to build deep expertise on new capabilities as they develop. You’ll help test new products to understand their strengths and limitations, and build demos for public or customer-facing use. And throughout, you&#x27;ll help shape our roadmap by synthesizing what you&#x27;re learning across customers and products into clear signal about what’s working, what isn’t, and what matters most.To succeed, you’ll need the technical depth to push the limits of what Tinfoil can do and a strong understanding of our product and security model. You’ll also need to explain complex capabilities clearly to many different audiences in a world where threat models keep changing.Responsibilities:1. Serve as the primary technical advisor to strategic customers from discovery through production deployment, working across Sales, Product, Engineering, and Research to make them successful2. Turn each customer’s threat model and security or privacy requirements into a deployment architecture built on Tinfoil3. Build pilots, prototypes, and eval suites that prove Tinfoil meets a customer’s performance and security bar4. Lead architecture and security reviews with the customer’s engineering, security, and compliance teams, including showing them how to verify Tinfoil’s guarantees themselves5. Get hands-on when customers hit new problems: reproduce their environment, find a solution, and turn it into an approach other customers can reuse6. Create reference architectures, playbooks, and public content (blogs, talks) and talks at conferences on deploying AI with high-assurance security7. Find patterns across customers (adoption blockers, capability gaps, compliance needs) and work with Product and Research to get them on the roadmap8. Travel occasionally to customer sites for workshops and implementation supportYou may be a good fit if you have:1. 2+ years of experience in technical roles such as software engineer, forward deployed engineer, security engineer or technical product manager, with a desire to work closely with customers. Former technical founders are also encouraged to apply.2. Strong programming skills in Python or TypeScript and experience building production applications.3. A solid background in security, networking, or infrastructure, and comfort explaining threat models and security guarantees to skeptical audiences.4. Hands-on experience building with LLMs, such as agents, workflows, or LLM-powered products, including designing evals and prototypes.5. Strong communication skills: you can explain complex technical and security concepts clearly to founders, engineers, security and compliance teams, and executives, with a low ego and a collaborative approach.6. A track record of going deep on technical problems and turning what you learned into materials, tools, or training that helped others succeed.7. The ability to quickly build expertise in new domains and work through ambiguity, finding simple solutions to complex problems8. Passion for building AI systems with privacy, verifiability, and control as core propertiesBonus:1. Experience with applied cryptography or hardware security2. Experience deploying software in regulated industries (finance, cybersecurity, government, biotech) or guiding customers through security reviews3. Experience with model serving or inference infrastructure4. Public technical writing or speakingWe encourage you to apply even if you don’t meet every single qualification!If this sounds like a good fit, please reach out to work@tinfoil.sh or apply here: <a href="https:&#x2F;&#x2F;tinfoil.sh&#x2F;join">https:&#x2F;&#x2F;tinfoil.sh&#x2F;join</a>.[1] <a href="https:&#x2F;&#x2F;tinfoil.sh&#x2F;mission">https:&#x2F;&#x2F;tinfoil.sh&#x2F;mission</a>
[2] <a href="https:&#x2F;&#x2F;tinfoil.sh&#x2F;blog">https:&#x2F;&#x2F;tinfoil.sh&#x2F;blog</a>

Tinfoil (YC P25) is hiring an applied AI security engineer in San Francisco

Greg Kurtzer's Ginux is now a userspace kernel

A great old-timey game-programming hack (2013)

Google SWE points 48 AI agents at NASA Lidar, finds unmapped Maya pyramid in 72h

Six Math Essentials

To deter bioterrorism, U.S. imposes new rules on ordering synthetic DNA

Synaptics patent claims stop work on DisplayLink drivers

Starlink Mini 2

AlphaProof Code

Why Amstrad chose the 3" drives

Why I wrote the BEAM book (2025)

Small-Grid Wraparound Cellular Automata

Val Town is winding down

I grew up with Black Ops 2 and wanted to see if I could make it work on my 2020 MacBook Pro. So I used Claude Opus 5.5 to create a tool that converts your copy of the game (from Steam) to a native ARM64 Mac app, with almost 60fps in all areas. The whole game is statically recompilated ahead-of-time (AOT) and does not use any emulator whatsoever, be it Wine, Crossover or Rosetta. The best thing is the performance, although some heat issues are still to fix. You get to play the whole Campaign, local Multiplayer (with bots) and local Zombies (all DLCs maps; you need to have them in your Steam library obviously) at about 60fps. Split-screen was not in the PC version, but I&#x27;ve been working on it lately; it&#x27;s coming soon! LAN mode is on the roadmap for later too :)

Show HN: Black Ops II statically recompiled to native ARM64 macOS

Browsers natively handle a lot of what used to take 50 lines of JS (or a dependency): `CSS.highlights` for text range highlighting without &lt;span&gt;s everywhere, `&lt;dialog&gt;` and showModal() give you backdrops and ideal focus management, `field-sizing` to auto-grow textareas as the user types.. (Something yesterday&#x27;s ftrain post touched on [0])Models know about some of these by name, but consistently won&#x27;t default to using the platform-native solution and instead prefer the incumbent &lt;div&gt;+JS based pattern. We started an effort in Chrome to supplement coding agents with this key domain knowledge and we&#x27;re shipping our 1.0 today, in collaboration with Firefox, MDN, and Edge.200+ guides (~1.7MB) of curated, hand-crafted implementation best-practices from web experts, updated as the web evolves. (Open source, obv, so.. we&#x27;ll welcome your bikeshedding ;) Readable versions here: [1]I&#x27;ve spent the last 9 months obsessing over how to ship this as an agent skill + (Agentic RAG) CLI without blowing up your context window. (Or cedeing activation mechanics to MCP dynamic tool search). The skill description is minmaxed for activating on relevant frontend tasks. The RAG work I&#x27;m pretty proud of… originally a 500mb native stack down to a ~7MB pure-JS package, ~10ms search on your CPU.We just introduced a deterministic &#x27;legacy-scan&#x27; (trained on 30k github repos) to identify old &#x27;n dusted patterns that your agent can modernize. (92% avg precision on held-out repos.)People make a lot of claims about what coding agents are good&#x2F;bad at. We wanted receipts, so we invested heavily in eval infra [2] to help us hill-climb, but also to identify when knowledge is common enough we can prune our guides. (Ofc, some of the things we thought AI didn&#x27;t know turned out to be wrong :) We run codex&#x2F;claude&#x2F;agy against 200 tasks without the skill and then with.. In total ~1,700 playwright&#x2F;AST-based assertions. Agents go from 55% pass unguided to 92% guided.Try it out:<pre><code> DISABLE_TELEMETRY=1 npx modern-web-guidance@latest install
 DISABLE_TELEMETRY=1 npx modern-web-guidance@latest search &quot;animate dialog modal&quot;
 DISABLE_TELEMETRY=1 npx modern-web-guidance@latest legacy-scan .&#x2F;src
</code></pre>
If you spot something wrong or weird, give us a holler!Longer write-up on the 1.0: <a href="https:&#x2F;&#x2F;developer.chrome.com&#x2F;blog&#x2F;modern-web-guidance-v1" rel="nofollow">https:&#x2F;&#x2F;developer.chrome.com&#x2F;blog&#x2F;modern-web-guidance-v1</a>---0: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=50416456">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=50416456</a>1: <a href="https:&#x2F;&#x2F;developer.chrome.com&#x2F;docs&#x2F;modern-web-guidance&#x2F;guides" rel="nofollow">https:&#x2F;&#x2F;developer.chrome.com&#x2F;docs&#x2F;modern-web-guidance&#x2F;guides</a>2: <a href="https:&#x2F;&#x2F;googlechrome.github.io&#x2F;modern-web-guidance-src&#x2F;" rel="nofollow">https:&#x2F;&#x2F;googlechrome.github.io&#x2F;modern-web-guidance-src&#x2F;</a>