AI·
Humans caught 13.6% of dangerous commands. Claude Code's classifier caught 89%.
Anthropic makes auto mode the default in Claude Code on August 14. Its own study says the permission prompt was catching almost nothing.
#dev-tools
RSS
Security·
Metabase's password-reset endpoint handed out admin, and Framework had to email every customer
A CVSS 10.0 SQL injection in Metabase was exploited from August 3. Framework told every customer their data was taken. Tally lost emails and password hashes.
AI·
Uber spent its entire 2026 AI budget in four months, and the rest of the industry is now metering tokens
Uber's year of AI budget lasted until April. A 15-company survey shows per-developer spend running from $200 to $3,000 a month, and finance has noticed.
Web·
Agents that start with access to nothing: Cloudflare open-sourced the agent platform it runs internally
Cloudflare open-sourced Cloudflare OS under Apache 2.0 and shipped Kitesurf, WebMCP, and Wallets the same week. Here's which pieces are GA and which are private beta.
Open Source·
Rust's new rules require disclosing LLM use. A Linux maintainer gives AI patches three seconds.
Five Rust teams ratified an LLM policy that bans AI-written docs and mandates disclosure. Linux leaves it to each maintainer. Both are rationing review time.
Web·
TypeScript compiled to native: Vercel's scriptc ships a 178KB binary with no JS engine
Vercel Labs open-sourced scriptc, a TypeScript-to-native compiler with no JS engine in the binary. Its README claims 2.4ms startup. Hacker News is not convinced.
Android·
Android may stop letting a phone debug itself, and Shizuku would break with it
A comment on a Google issue tracker floated binding ADB to the Wi-Fi interface only. That one change would kill loopback debugging, Shizuku, and every debloater built on it.
Web·
Jack Dorsey launched Buzz to replace Slack and GitHub. Its AI agents are full members
Jack Dorsey's Block launched Buzz, an open-source workspace that fuses team chat, AI agents, and Git hosting on Nostr, aiming squarely at Slack and GitHub.
Open Source·
HackerRank open-sourced its resume screener. The same resume scored 66 to 99.
HackerRank put its AI hiring agent on GitHub under MIT. One developer ran a single resume through it 100 times and watched the score swing from 66 to 99.
Web·
Cloudflare opened OAuth to every developer on its platform
Cloudflare now lets any developer build a real OAuth login against its API, ending a partner-only gate. Here's what that fixes and the catch.
Web·
Vercel's AI SDK 7 makes agents a first-class building block for TypeScript developers
AI SDK 7 ships agent classes, provider-agnostic reasoning control, durable workflows, and a Node 22 + ESM-only baseline. Here's what changed and the migration cost.
Web·
This month on Hacker News: Half-Life 2 in a browser and 18 years of comments, searchable
June 2026's standout Hacker News projects: Half-Life 2 streamed into a browser tab, a searchable 18-year HN archive, a Pareto-frontier mini-PC tracker, and more.
AI·
Anthropic bought Stainless, the SDK factory OpenAI and Meta also ran on
Anthropic acquired Stainless for a reported $300M and is winding down the hosted SDK generator that OpenAI, Meta, Google, and Cloudflare relied on.
Web·
Vercel Ship 2026 bet the keynote on agents, but the quiet shipped wins matter more today
Vercel's Ship 2026 keynote was all agents. The eve framework and enterprise stack stole the stage, but Flags, Claude Design, and signed Blob URLs are what ship today.
Open Source·
Cloudflare bought VoidZero, the team behind Vite. The tools stay MIT and vendor-neutral.
Cloudflare acquired VoidZero, Evan You's company behind Vite, Vitest, Rolldown and Oxc. The tools stay MIT-licensed, and there's a $1M ecosystem fund.
Web·
Linear keeps its database in the browser. That's why the app feels instant
A widely shared breakdown explains why Linear feels instant: a local-first sync engine, optimistic UI, and an in-browser object cache. Here's the architecture, in plain terms.
Gaming·
Beyond the engine: six open-source tools that shape how games get made
Godot, Unity and Unreal get the headlines, but six open-source tools quietly do the art, levels, and dialogue work that real games ship on.
Startup·
Gergely Orosz hands TechPays to Levels.fyi, and the European salary data stays free
Levels.fyi has acquired TechPays, Gergely Orosz's European tech-salary project. Here's what's changing, what isn't, and what it means for engineers.