From Hacker News Front Page · 40 stories
GPT-6 Solves HellGates Custom CPU Challenge Previously Unsolvable by Humans and LLMs
GPT-6 successfully solved the HellGates crackme challenge in under 30 minutes, a task that previously stumped both human experts and other large language models for over a year. The challenge involved reverse-engineering a custom 32-bit CPU with multiple layers of obfuscation and anti-tamper mechanisms. This demonstrates an advancement in AI's capability to analyze and bypass complex hardware and software protections.
Astronomers Debate Nature of 'Little Red Dots' Observed by James Webb Space Telescope
Astronomers are debating the nature of mysterious 'little red dots' observed by the James Webb Space Telescope, which are bright, tiny, and emit long-wavelength red light. Two teams propose these are a new astronomical object, dubbed 'black hole stars,' while others suggest they are supermassive black holes forming within colossal stars.
Alibaba open-sources AI model for detecting 150 abdominal conditions from CT scans
Alibaba's Damo Academy has open-sourced Damo Radar, an AI model that identifies nearly 150 abdominal conditions, including cancers, from CT scans. This development allows broader access to advanced medical imaging analysis, potentially improving diagnostic capabilities in healthcare.
South Korea increases data breach fines to 10% of revenue for major incidents
South Korea's Personal Information Protection Commission (PIPC) has raised data breach fines to 10% of total revenue for companies that leak personal data of 10 million or more people due to intent or gross negligence. This change, effective Friday, aims to encourage companies to prioritize data protection as a preventive investment.
Grok Releases Voice Transcribe 2.0, Doubling Accuracy Over Previous Version
Grok has released Voice Transcribe 2.0, a new speech-to-text model that is twice as accurate as its predecessor and ranks first on a public streaming model leaderboard. This update improves transcription accuracy for real-world audio, including noisy and multilingual environments, which is significant for applications like customer support and voice assistants.
NATS Preliminary Report Identifies Software Defect as Cause of September 8 Air Traffic Disruption
NATS, the UK's air traffic services provider, released a preliminary report attributing the September 8 air traffic disruption to a software defect in its National Airspace System. The defect corrupted flight data updates when a manual aircraft code request was interrupted by a higher priority message, leading to widespread flight restrictions and passenger delays. This incident highlights the critical impact of software reliability on essential infrastructure and the need for robust error handling in complex systems.
Jemalloc 5.4.0 Released with Portability Improvements and Bug Fixes
Jemalloc 5.4.0 has been released, incorporating over 160 commits focused on technical debt cleanup, bug fixes, and portability improvements. This update introduces new features like pinned memory tracking and refines tcache management, while also making some incompatible changes to tcache fill and retention targets.
Uber Develops Context-Aware Mechanism to Mitigate Retry Storms in Distributed Systems
Uber developed a new context-aware mechanism within its shared infrastructure to manage retry behavior more efficiently. This mechanism addresses the issue of retry storms, which occur when uniform retries against a struggling service amplify load and escalate localized outages into wider system failures across deep dependency chains.
Ternary Bonsai 2 27B Model Offers Near-Lossless Compression with 9x Smaller Footprint
A new model, Ternary Bonsai 2 27B, has been released, based on Qwen3.8 27B, offering improved reasoning, coding, vision, and agentic capabilities. This model achieves a 9x smaller footprint (5.9GB) compared to its full-precision counterpart while retaining 98.2% of aggregate benchmark performance, making it suitable for efficient local deployment.
Bend Language Blocks AI Mistakes with Proofs, Offers C Speed and CUDA Parallelism
Bend is a new programming language designed to prevent AI-generated code mistakes through formal proofs, offering C-like execution speed and CUDA parallelism. It allows developers to define 'laws' that AI-written code must satisfy, ensuring correctness before deployment.
New $100,000 H-1B Visa Fee Pushes U.S. Tech Jobs Offshore
The U.S. government implemented a $100,000 fee for new H-1B visa applications, a significant increase from the previous $5,000. This policy change is causing U.S. tech companies to establish offices and hire workers abroad to circumvent the new immigration rules.
Ubuntu 26.10 Completes Transition to Rust-Based Core Utilities
Ubuntu 26.10, codenamed 'Stonking Stingray', will ship with a full set of Rust-based core utilities, completing a migration initiated in 2025. This transition replaces C-based foundational software with Rust alternatives to enhance security by catching memory bugs at compile time. The release resolves previous security issues that had delayed the migration of commands like `cp`, `mv`, and `rm` in Ubuntu 26.04 LTS.
High School Students Solve Fields Medalist's Uncracked Problem with AI Assistance
Two high school students, Aayush Bathija and Prince Rohatgi, along with a postdoctoral researcher, have solved a problem related to Lorentzian polynomials that Fields Medalist June Huh had not cracked. Their research, published on arXiv, was completed with significant assistance from AI models Claude Opus 5 and GPT-5.6 Sol, demonstrating AI's growing role in complex mathematical research.
HP ZGX Fury AI Station with NVIDIA GB300 Superchip Now Available for Order
HP's ZGX Fury AI station, featuring the NVIDIA GB300 Grace Blackwell Ultra Desktop Superchip and 748GB of unified memory, is now available for order. This system is positioned as a shared inference box for departments or branch offices, capable of handling trillion-parameter inference and fine-tuning 100 billion parameter models.
Chess.com User Data Leak Exposes 7.3M Records, Likely Due to Scraping
A 15.5 GB file containing over 7.3 million Chess.com user records, including email addresses, usernames, and internal marketing tags, appeared on data-leak forums. Analysis indicates the data is genuine and recent, but evidence suggests it was obtained through scraping over several days rather than a system hack, as no passwords or payment information were included.
Fable 5.1 Solves 370-Year-Old Cyphral Distich Cipher in 44 Minutes
Fable 5.1, an AI model, successfully deciphered Sir Thomas Urquhart’s Cyphral Distich, a cryptogram unsolved for centuries, in 44 minutes. The AI identified that the cipher's key was internal to Urquhart's text, using word indices from his '32 Proquiritations' to reconstruct the message, a method human cryptographers had overlooked.
Flawed Netgear Routers Flood University of Wisconsin Internet Time Server
A flaw in Netgear routers caused them to continuously flood the University of Wisconsin's Internet Time Server with Simple Network Time Protocol (SNTP) requests, leading to a denial of service. Netgear is cooperating with the university to resolve the issue and provide code upgrades for affected products. This incident highlights the potential for widespread network disruption from device firmware vulnerabilities.
Homebrew 7.0.0 Released with Faster Installations, Stronger Sandboxing, and Native macOS App
Homebrew 7.0.0 has been released, introducing performance improvements for installations and upgrades, enhanced sandboxing, a native macOS application, and built-in vulnerability checks. This update also ends support for macOS 10.15 and moves Intel Macs to Tier 3 support, impacting users on older macOS versions and hardware.
New Android VPN bypass vulnerability allows apps to leak traffic outside VPN tunnel
A newly discovered vulnerability in Android's network stack allows any app to send UDP traffic outside an active VPN tunnel, even when the "Block all connections without VPN" setting is enabled. This leak exposes the device's real IP address, potentially enabling tracking or surveillance, and does not require special app permissions. Google reportedly closed the issue without action after it was reported through their Vulnerability Reward Program, though GrapheneOS is working on a fix.
Trail of Bits Audits Signal's New Automatic Key Verification System
Signal has launched Automatic Key Verification, a new feature designed to validate chat security without manual safety number comparison. Trail of Bits built and operates one of the three independent auditors for this system, continuously checking its integrity. This enhances the security of Signal chats by making key mismatch attacks harder to conceal.
Google Search replaces direct URLs with redirect wrappers in organic results
Google Search has started rewriting organic search result links to use a google.com/goto?url=... redirect format instead of directly exposing destination URLs in HTML. This change, observed consistently since late August 2026 for logged-out and private sessions, makes it more difficult for automated scrapers to extract URLs at scale without interacting with Google's servers for each link.
Google's Artemis project accused of using uncredited open-source code from Minitap
Minitap alleges that Google's recently released Artemis project, an automation tool for mobile devices, contains code directly copied from Minitap's open-source 'mobile-use' project without attribution. Minitap claims their engineers' names were removed from the code's history, raising concerns about open-source attribution practices.
Starlink Satellites Leak Radio Frequencies, Threatening Radio Astronomy Projects
Starlink satellites are emitting unintended radio leakage across critical frequencies, interfering with radio astronomy projects like the Square Kilometre Array Low (SKA-Low). This leakage, detected by a Curtin University team, is significantly stronger than the cosmic signals astronomers aim to detect, potentially rendering specific frequency bands unusable for scientific research.
EPA Proposes Removing Public Review for Data Center Air Pollution Permits
The Environmental Protection Agency (EPA) plans to eliminate a federal requirement for public review and comment on air-pollution permits for industrial facilities, including data centers and their power plants. This change could allow data center construction to begin before permits are approved, potentially reducing public input on projects that may impact local communities.
PlanetScale Launches Neki, a Sharded PostgreSQL Offering, in Platform Preview
PlanetScale has released Neki, a sharded PostgreSQL solution, into platform preview. Neki allows users to scale a PostgreSQL database across multiple machines, supporting hundreds of millions of queries per second and petabytes of data, by adding a router, sidecars, and a control plane to real PostgreSQL shards. This offering addresses the scaling limitations of single-machine Postgres databases for growing workloads.
Collabora Delivers First RDK-Based Chrobalt Reference Platform for YouTube on Living Room Devices
Collabora partnered with YouTube's Cobalt and Device Partner Engineering teams to create the first RDK-based reference platform for Chrobalt, YouTube's next-generation web engine for living room devices. This development provides device manufacturers with a reference port for Chrobalt, which re-architects the Cobalt engine on top of Chromium, enabling a more robust and standard-compliant rendering pipeline for Smart TVs and set-top boxes.
Login Keychain Copying Fails on Secure Enclave Macs with macOS Tahoe
Manually copying login keychain files between Macs no longer works on Secure Enclave-equipped Macs running macOS Tahoe. This change is due to keychain decryption keys being tied to the Secure Enclave of the originating Mac, preventing access on a different device.
YuE2, MERT2, and SheetSage2 models achieve new benchmarks in AI music generation and analysis
New AI models, YuE2, MERT2, and SheetSage2, have set new performance benchmarks in music generation, audio understanding, and transcription tasks. YuE2 achieved the highest score on SongBench for music generation, while MERT2 models reached state-of-the-art results across 14 of 15 MARBLE metrics for audio recognition, and SheetSage2 leads in 10 of 13 music transcription benchmarks.
WebGPU vulnerability can freeze macOS devices via untrusted websites
A vulnerability dubbed "Deathray" allows untrusted websites to freeze macOS devices by exploiting WebGPU shaders, rendering the desktop UI unusable until a forced restart. This issue affects Chrome, Firefox, and Safari on macOS, but not other operating systems, and highlights a potential denial-of-service vector for Mac users.
JEP 544 Introduces Ahead-of-Time Code Compilation for HotSpot JVM
JEP 544 proposes Ahead-of-Time (AOT) code compilation for the HotSpot Java Virtual Machine to improve application startup and warmup times. This feature allows optimized native code, generated during a training run, to be instantly available at JVM startup, combining AOT and Just-In-Time (JIT) compilation benefits.
Anthropic Claims Blocking AI-Assisted Biological Weapon Development Attempts
Anthropic reported that its AI models detected and blocked attempts to generate instructions for creating biological weapons. This incident highlights the ongoing concerns and active measures being taken by AI developers to prevent misuse of advanced AI systems for harmful purposes.
Forgejo <=16.0.3 Critical RCE Vulnerability Identified
A critical remote code execution (RCE) vulnerability has been discovered in Forgejo versions 16.0.3 and earlier. This vulnerability allows attackers to execute arbitrary code, posing a significant security risk to affected installations.
MultiMatte Model Improves Image Background Removal with Alpha Mattes and Text Prompts
A new model called MultiMatte has been introduced, which improves image background removal by using alpha mattes and allowing users to specify objects for removal with text prompts. This development enhances the precision of image segmentation, particularly for fine or translucent elements, which could benefit various applications requiring accurate object isolation.
Amazon Pilots Ad Services Within ChatGPT
Amazon is piloting ad services within ChatGPT, allowing brands to display product ads directly in AI chatbot conversations. This initiative integrates Amazon's advertising capabilities into OpenAI's platform, potentially creating new avenues for product discovery and sales through conversational AI.
OpenAI's 'allow training' setting reportedly re-enables itself for some users
Some OpenAI users report that the 'allow training' setting, which controls whether user data can be used for model training, is re-enabling itself after being manually disabled. This issue raises concerns about user privacy and data control within the OpenAI platform.
Microsoft Elevates Rust to Tier-1 Language Status for Internal Development
Microsoft has designated Rust as a Tier-1 language for internal development, placing it alongside C++, C#, and TypeScript. This change provides Rust with secure toolchain builds, developer tooling, quality workflows, and deep platform integration, ensuring its compatibility with the Windows ecosystem and MSVC.
RSA-260 Factored Using GPU Lattice Siever, Setting New Record
Researchers successfully factored RSA-260, a 260-digit number, using a new GPU lattice siever that reduces factoring costs by 10x. This achievement sets a new public record for RSA Factoring Challenge problems and demonstrates the capabilities of AI in complex computational number theory tasks.
b.next Establishes Synthetic Cell Manufacturing Plant and Ships 100th Cytosol Kit
b.next, a company focused on synthetic cell research, has established a manufacturing plant to produce "Cytosol," core materials for building synthetic cells, and recently shipped its 100th kit. This development addresses a critical need for a dedicated physical supply chain to advance synthetic cell technology beyond academic research.
Tailwind Labs, creator of Tailwind CSS, joins Shopify to ensure framework maintenance
Tailwind Labs, the company behind the Tailwind CSS framework, has joined Shopify. This move provides Tailwind CSS with a stable long-term home and continued maintenance, integrating its development with Shopify's product needs.
Desert Ant Labs Launches On-Device AI Models for Audio, Vision, and Text
Desert Ant Labs, a new European AI lab, has launched 18 specialized on-device AI models for audio, vision, and text processing. These models are designed to run locally on devices, offering fast inference speeds and eliminating cloud API costs and data privacy concerns.