Soft launch of open-source code platform for government

Ghostty is leaving GitHub

Show HN: Rip.so – a graveyard for dead internet things

Bugs Rust won't catch

HardenedBSD Is Now Officially on Radicle

Received by email tonight about two hours ago:Dear Tindie Community,My name is Gongyu Su, and I am writing on behalf of the new Tindie ownership team.First, we sincerely apologize for the recent downtime and the disruption it caused. We understand that many buyers and community members were left without clear information during the transition, and that this created frustration and concern.Tindie is now owned by EETree LLC, a Washington State company. Our team took over Tindie because we believe it remains an important platform for makers, hardware creators, engineers, and independent sellers around the world.
The recent transition was more complex than expected. Tindie runs on an older technical framework with many connected services, and the migration from the previous operating environment to the new one took longer and caused more disruption than anyone wanted.We know this was not the experience the Tindie community deserved.Our immediate focus is to stabilize the platform, resolve payment and order-related issues, and support sellers and buyers through the transition. If you have an order-related concern, please contact Tindie support so the team can review your case directly.WHAT WE ARE FOCUSED ONStabilizing the platformRestoring reliable access for buyers, sellers, and the community.Resolving open issuesWorking through payment, refund, and order concerns case by case.Investing for the long termRenewing attention, support, and improvements for the community.We also want to be clear about our long-term intention: we did not take over Tindie to let it fade away. We took it over because we believe it deserves renewed attention, investment, and support.Tindie has always been more than just a marketplace. It is a place where independent creators, makers, and hardware enthusiasts can share useful products, tools, kits, modules, and ideas with the world. We want to preserve that spirit while improving the platform step by step.Over the coming weeks and months, we will share more about our plans and will listen carefully to feedback from sellers, buyers, and the broader community.Thank you for your patience and continued support. We know trust must be earned through action, and we are committed to doing that.Sincerely,Gongyu SuOn behalf of the Tindie Team

Tell HN: An update from the new Tindie team

How ChatGPT serves ads

Before GitHub

Hi HN, I&#x27;m Hugo. I&#x27;ve been building Rocky over the past month, shipping fast in the open. The binary is on GitHub Releases, `dagster-rocky` on PyPI, and the VS Code extension on the Marketplace. I held off on a broader announcement until the trust-system surface was coherent enough to talk about as one thing. The governance waveplan — column classification, per-env masking, 8-field audit trail on every run, `rocky compliance` rollup, role-graph reconciliation, retention policies — landed end-to-end last week in engine-v1.16.0 and rounded out in v1.17.4 (tagged 2026-04-26). That&#x27;s the milestone I&#x27;d been waiting for.The pitch: keep Databricks or Snowflake. Bring Rocky for the DAG. Rocky is a Rust-based control plane for warehouse pipelines. Storage and compute stay with your warehouse. Rocky owns the graph — dependencies, compile-time types, drift, incremental logic, cost, lineage, governance. The things your current stack can&#x27;t give you because it doesn&#x27;t own the DAG.A few things I think are interesting:- Branches + replay. `rocky branch create stg` gives you a logical copy of a pipeline&#x27;s tables (schema-prefix today; native Delta SHALLOW CLONE and Snowflake zero-copy are next). `rocky replay &lt;run_id&gt;` reconstructs which SQL ran against which inputs. Git-grade workflow on a warehouse.- Column-level lineage from the compiler, not a post-hoc graph crawl. The type checker traces columns through joins, CTEs, and windows. VS Code surfaces it inline via LSP.- Governance as a first-class surface. Column classification tags plus per-env masking policies, applied to the warehouse via Unity Catalog (Databricks) or masking policies (Snowflake). 8-field audit trail on every run. `rocky compliance` rollup that CI can gate on. Role-graph reconciliation via SCIM + per-catalog GRANT. Retention policies with a warehouse-side drift probe.- Cost attribution. Every run produces per-model cost (bytes, duration). `[budget]` blocks in `rocky.toml`; breaches fire a `budget_breach` hook event.- Compile-time portability + blast radius. Dialect-divergence lint across Databricks &#x2F; Snowflake &#x2F; BigQuery &#x2F; DuckDB (12 constructs). `SELECT *` downstream-impact lint.- Schema-grounded AI. Generated SQL goes through the compiler — AI suggestions type-check before they can land.What Rocky isn&#x27;t:- Not a warehouse — it&#x27;s the control plane on top.- Not a Fivetran replacement. `rocky load` handles files (CSV&#x2F;Parquet&#x2F;JSONL); for SaaS sources use Fivetran, Airbyte, or warehouse-native CDC.- Not dbt Cloud — no hosted UI, no managed scheduler. First-class Dagster integration if you need orchestration.Adapters: Databricks (GA), Snowflake (Beta), BigQuery (Beta), DuckDB (local dev &#x2F; playground). Apache 2.0.I&#x27;d love feedback on the trust-system framing, the governance surface (particularly classification-to-masking resolution in `rocky compile` and the `rocky compliance` CI gate), the branches&#x2F;replay design, the cost-attribution primitives, or anything else that catches your eye. Happy to go deep in the thread.

Show HN: Rocky – Rust SQL engine with branches, replay, column lineage

Why Law Is Law-Shaped

Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU

Withnail's Coat and I

Low-Compilation-Cost Register Allocation in LLVM-Based Binary Translation

<a href="https:&#x2F;&#x2F;aws.amazon.com&#x2F;bedrock&#x2F;openai&#x2F;" rel="nofollow">https:&#x2F;&#x2F;aws.amazon.com&#x2F;bedrock&#x2F;openai&#x2F;</a><a href="https:&#x2F;&#x2F;www.aboutamazon.com&#x2F;news&#x2F;aws&#x2F;bedrock-openai-models" rel="nofollow">https:&#x2F;&#x2F;www.aboutamazon.com&#x2F;news&#x2F;aws&#x2F;bedrock-openai-models</a><a href="https:&#x2F;&#x2F;openai.com&#x2F;index&#x2F;openai-on-aws&#x2F;" rel="nofollow">https:&#x2F;&#x2F;openai.com&#x2F;index&#x2F;openai-on-aws&#x2F;</a><a href="https:&#x2F;&#x2F;x.com&#x2F;amazon&#x2F;status&#x2F;2049178618639839427" rel="nofollow">https:&#x2F;&#x2F;x.com&#x2F;amazon&#x2F;status&#x2F;2049178618639839427</a>

OpenAI models coming to Amazon Bedrock: Interview with OpenAI and AWS CEOs

I won a championship that doesn't exist

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown

<a href="https:&#x2F;&#x2F;www.nist.gov&#x2F;news-events&#x2F;news&#x2F;2026&#x2F;04&#x2F;nist-weighs-mystery-gravitational-constant" rel="nofollow">https:&#x2F;&#x2F;www.nist.gov&#x2F;news-events&#x2F;news&#x2F;2026&#x2F;04&#x2F;nist-weighs-my...</a>

We still don't have a more precise value for "Big G"

Gallium oxide electronics withstand extreme cold

Who owns the code Claude Code wrote?

Talkie: a 13B vintage language model from 1930

Intel Arc Pro B70 Review

Behavioral timescale synaptic plasticity rewires the brain after an experience

Your phone is about to stop being yours

Warp is now open-source

Not sure if anybody else has experienced this, but for my job I&#x27;ve been playing around with Claude Managed Agents to run code generation tasks in our repo. Every read operation in the managed agent is appended with a system prompt instructing Claude to scan the file for malware; Claude then wastes a bunch of time and tokens (money) performing the analysis; then, once the agent has confirmed that it is not malware, it still interprets the appended prompt to mean that it is disallowed to augment or write any code, and quits. And we&#x27;re charged for every session that this happens in. Posting here because apparently they only addressed the issue in the past because of a Hacker News discussion. So here&#x27;s hoping they&#x27;ll see this and prioritize fixing it again so we can stop losing money.

Regression: malware reminder on every read still causes subagent refusals

Apple CMF (Color-Matching Functions) 2026

Hi HN, Francesco from Cua here.
I hacked this project together last weekend, inspired by the Codex Computer-Use release and lessons learned from deploying GUI-operating agents for our customers.The main problem: when a UI automation process controls a desktop app today, it usually takes over the human’s session. Your cursor moves, keyboard focus gets stolen, windows jump to the front, and you have to stop working until the agent is done. That is why we have historically avoided encouraging users to run these processes directly on their host machine, instead relying on VMs or GUI containers for concurrency and background execution.But computer-use - the tools we give agents to operate computers like humans - does not scale cleanly that way. As models get smarter, agents need to share hosts safely, run in the background, and avoid collisions with the human or other agents using the same machine.We realized macOS has no first-class API for &quot;drive this app without touching the cursor&quot;. CGEventPost routes through the hardware input stream, so it moves your cursor. CGEvent.postToPid avoids the cursor warp, but Chromium treats those events as untrusted and silently drops clicks at the renderer boundary. Activating the target app first raises the window and pulls focus, defeating the point of background execution.Cua Driver is our attempt at a real fix: a background computer-use driver for macOS that lets an agent click, type, scroll, and read native apps while your cursor, frontmost app, and Space stay where they are. The default interface is a CLI, so it is easy to script or call from any coding agent shell.Try it on macOS 14+:&#x2F;bin&#x2F;bash -c &quot;$(curl -fsSL <a href="https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;trycua&#x2F;cua&#x2F;main&#x2F;libs&#x2F;cua-driver&#x2F;scripts&#x2F;install.sh" rel="nofollow">https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;trycua&#x2F;cua&#x2F;main&#x2F;libs&#x2F;cua-d...</a>)&quot;The first internal use case was delegated demo recording. We ask Claude Code to drive an app while &#x27;cua-driver recording start&#x27; captures the trajectory, screenshots, actions, and click markers. The result is an agent-generated product demo, Screen Studio inspired.Other things we have used it for:- Replacing Vercel’s agent-browser and other browser-use CLIs. With Claude Code and Cua Driver, you do not need Chrome DevTools Protocol at all.- A dev-loop QA agent that reproduces a visual bug, edits code, rebuilds, and verifies the UI while my editor stays frontmost.- Personal-assistant flows that use iMessage from Claude Code, Hermes, or other general-purpose agent CLIs.- Pulling visual context from Chrome, Figma, Preview, or YouTube windows I am not looking at, without relying on their APIs.What made this harder than expected:- CGEventPost warps the cursor because it goes through the HID stream.- CGEvent.postToPid does not warp the cursor, but Chromium drops it at the renderer IPC boundary.- Activating the target first raises the window and can drag you across Spaces.- Electron apps stop keeping useful AX trees alive when windows are occluded without a private remote-aware SPI.The unlock was SkyLight. SLEventPostToPid is a sibling of the public per-PID call, but it travels through a WindowServer channel Chromium accepts as trusted. Pair it with yabai’s focus-without-raise pattern, plus an off-screen primer click at (-1, -1), and the click lands without the window ever raising.One thing we learned: the right addressing mode depends on the app. Native macOS apps usually have rich AX trees, Chromium-family apps often need a hybrid of AX and screenshots, and apps like Blender or CAD tools may expose almost no useful AX surface. The mistake is defaulting to pixels everywhere - or defaulting to AX everywhere.Long technical writeup: <a href="https:&#x2F;&#x2F;github.com&#x2F;trycua&#x2F;cua&#x2F;blob&#x2F;main&#x2F;blog&#x2F;inside-macos-window-internals.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;trycua&#x2F;cua&#x2F;blob&#x2F;main&#x2F;blog&#x2F;inside-macos-wi...</a>I would like feedback from people building Mac automation, agent harnesses, or accessibility tooling. If it breaks on an macOS app you care about, that is useful data for us.

Show HN: Drive any macOS app in the background without stealing the cursor

Localsend: An open-source cross-platform alternative to AirDrop

When the Internet Was a Place

<a href="https:&#x2F;&#x2F;archive.ph&#x2F;d956y" rel="nofollow">https:&#x2F;&#x2F;archive.ph&#x2F;d956y</a><a href="https:&#x2F;&#x2F;www.reuters.com&#x2F;markets&#x2F;commodities&#x2F;uae-says-it-quits-opec-opec-statement-2026-04-28&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reuters.com&#x2F;markets&#x2F;commodities&#x2F;uae-says-it-quit...</a>

UAE to leave OPEC