Hacker News
1Iroh 1.0
- Iroh 1.0 is released as the first stable version of a networking library that uses cryptographic keys instead of IP addresses for device connections. The key-based approach enables secure, direct connections that work across different networks and behind firewalls, making devices addressable anywhere on the internet. After 4 years of development, iroh now supports multiple programming languages including Python, Node.js, Swift, and Kotlin, with over 200 million endpoints created on their public relays in the past month alone.
Comparison with tailscale and similar networking solutions
Extensive discussion about how Iroh differs from Tailscale, with key distinctions being that Iroh operates at the application layer rather than network layer, allows embedding directly into apps without requiring user accounts, and provides more fine-grained control per application vs global device networking.Technical implementation and transport support
Developers explain Iroh's custom transport architecture supporting IPv4/IPv6/relay by default, with experimental support for Tor, BLE, and LoRa. Discussion covers QUIC-based connections, hole punching for NAT traversal, encrypted relay fallbacks, and modular design to avoid feature flag complexity.Cryptographic keys as addresses and their implications
Users question the concept of "dialing keys not IPs" - how cryptographic keys work as stable identifiers, their advantages over IP addresses that can change, and concerns about clarity in documentation. Discussion touches on decentralization benefits and comparison to DNS-like naming systems.
2Your ePub Is fine
- The article discusses an issue where EPUB files that work properly on other devices are rejected or cause problems specifically on Kobo e-readers, with Adobe's technology being identified as the underlying cause of these compatibility issues.
Adobe's poor software quality and business practices
Discussion focuses on Adobe's history of releasing buggy, unsupported software like Flash and RMSDK. Users criticize Adobe's lack of QA, poor customer support, and anticompetitive behavior that creates barriers for developers trying to access their DRM systems.EPUB compatibility and rendering issues
Users debate the challenges of EPUB standards evolution, particularly how newer CSS features break compatibility with older e-readers. The discussion covers targeting EPUB 2/3.1 vs 3.2, and the reality of building for lowest common denominator devices.Alternative e-reader devices and software
Community shares recommendations for hackable e-readers like PineNote, discusses KOReader as superior software, and mentions KEPUB format as a solution for better Kobo compatibility. Focus on device ownership and customization options.
3Curl will not accept vulnerability reports during July 2026
- The curl project is taking a break from accepting vulnerability reports during July 2026, calling it the "curl summer of bliss." From July 1 to August 3, 2026, their security submission forms will be paused to allow maintainers time to rest and enjoy summer. The release of curl 8.22.0 is pushed to September 2, 2026, and paid support contracts remain active.
Business model innovation
Discussion around curl's novel approach of combining summer vacation with enterprise support contracts as a revenue model, with suggestions for other OSS projects to adopt similar 6-month availability schedules.Work-life balance and vacation culture
Extensive discussion contrasting European vacation culture (complete disconnection, mandatory time off) with North American practices, including practical tips for maintaining work boundaries during time off.Open source sustainability and dependency
Debate about the problematic reliance on volunteer maintainers for critical infrastructure, highlighting the need for better funding models and backup systems for essential open source projects.
4What happened to nerds?
- The tech industry has shifted from trustworthy "nerd" leaders focused on their work to attention-seeking personalities who liquidated public trust for fame. This transformation moved through three phases: mysterious product-focused founders, founder-as-protagonist narratives, and now grift-adjacent self-promotion exemplified by Founders Fund's reality show featuring tech leaders playing deception games, which undermines the industry's credibility.
Value and status corruption in industries
Discussion centers on how industries like tech, finance, and law start with passionate practitioners but eventually attract people who excel at demonstrating value rather than creating it, leading to a shift from genuine expertise to social management of status.Nerds vs. businesspeople debate
Commenters distinguish between true nerds (motivated by passion for technology) and business-oriented founders (motivated by money), arguing that many prominent "tech nerds" like Musk were never actually nerds but businesspeople with nerdy interests.Academic toxicity and research culture
Extended discussion about how modern academia rewards exploitation of junior researchers and constant publication over deep thinking, with Peter Higgs cited as an example of how thoughtful researchers would struggle in today's system.
5Ask HN: Has anyone replaced Claude/GPT with a local model for daily coding?
- The user is asking for experiences from people who have completely replaced Claude or GPT with local AI models for their primary coding work, seeking details about their technical setup and performance metrics like tokens per second.
Local model performance and capabilities
Users report good results with Qwen 3.6 models (27B/35B) for coding tasks, comparing them to junior developers that need guidance versus Claude's senior-level capabilities. Local models require more precise prompting and micromanagement but provide 5x speedup for free.Hardware requirements and costs
Discussion centers on RTX 3090s, Mac Studios with 128GB RAM, and newer unified memory systems. Users debate whether $2k-4k hardware costs justify 3+ years of Claude subscriptions, with some arguing ownership beats rental long-term.Local vs cloud tradeoffs
Many users stick with Claude/Opus due to opportunity costs and superior quality, while others value privacy, no quotas, and avoiding rent-seeking. Local models described as 8-12 months behind frontier models but "good enough" for many tasks.
6TinyWind: A pixel pirate sailing game with real wind physics (380k+ kms sailed)
- TinyWind appears to be a pixel art style pirate sailing game. The content provided only contains the title "TinyWind - Pixel Pirate Sailing" without any additional details about gameplay, features, or description to summarize further.
Sailing physics and realism
Players debate the accuracy of wind mechanics, with some wanting more realistic sailing physics including proper tacking, dead angles for square rigs, and accurate sail trim. Others argue fun should take precedence over realism in game design.User interface and controls
Discussion focuses on control layout issues, especially on mobile where both steering and sail trim are on the right side. Suggestions include moving rudder to left, adding mouse wheel support, and improving wind direction indicators.Game difficulty and mechanics
Players have mixed experiences with difficulty - some find enemies too accurate and healing scarce, while others find it too easy with exploitable island healing mechanics. Calls for difficulty sliders and balance adjustments.
7CrankGPT
- CrankGPT is a satirical human-powered AI solution that runs entirely offline and on-device to address privacy concerns, environmental impact from energy-intensive AI data centers, and wealth concentration among tech CEOs. Users physically crank or pedal to generate tokens while exercising, offering different models from basic hand-cranked for home use to gym partnerships for enterprise needs.
Poor web design practices
Users criticized the main webpage for scroll hijacking and JavaScript overuse, preferring the cleaner technical documentation. Discussion covered modern web design trends that prioritize form over function and hinder usability.Human power generation for computing
Extensive discussion on watts output from human exercise, comparing cycling power to device energy needs. Users shared personal power metrics and explored practical applications like dynamo hubs for charging devices.Sustainability vs energy efficiency
Debate over whether hand-crank constraints promote better design versus simply building more power infrastructure. Discussion touched on degrowth philosophy, efficiency comparisons, and sustainable technology approaches.
8A backdoor in a LinkedIn job offer
- A developer received a LinkedIn message from a fake recruiter asking him to review a GitHub repository for a crypto startup job. The repo contained a hidden backdoor in a test file that would execute malicious code when running npm install. The recruiter and repository author profiles were stolen from real people. The developer discovered this by using a secure sandbox environment and AI code analysis instead of running the code directly on his machine.
Sophisticated LinkedIn phishing attack
A recruiter impersonated a crypto startup employee and sent a malicious GitHub repo that executed backdoor code when running "npm install". The attack exploited npm's automatic execution of prepare scripts, demonstrating how job interview processes can be weaponized for cyberattacks.LinkedIn's inadequate security and verification
Users report LinkedIn lacks proper company verification, allowing scammers to falsely claim employment at legitimate companies. The platform appears unresponsive to fraud reports, with some requiring personal connections to LinkedIn employees to resolve issues.NPM security vulnerabilities and package management risks
Discussion highlights NPM's dangerous automatic code execution during installation, with suggestions to use alternatives like PNPM or avoid package managers entirely. Users debate broader security issues with dependency trees and arbitrary code execution in development tools.
9Windows 11 users are tired of MS account requirements creeping into everything
- Despite Microsoft's Windows K2 initiative focusing on user feedback, the company hasn't addressed a major complaint about requiring Microsoft accounts during Windows 11 setup. Users want the option to create local accounts directly, not workarounds. The debate centers on user control rather than technical solutions, as Microsoft ties account requirements to security features like BitLocker encryption and recovery key storage.
Windows 10 end of support experience
Users report Windows 10 became more stable after Microsoft stopped pushing updates, but security concerns arise. Some use extended support scripts while others worry about malware and zero-day exploits without patches.Microsoft account and BitLocker encryption issues
Users frustrated with forced Microsoft account creation and automatic BitLocker encryption that stores recovery keys online. Many lose access to data when locked out of accounts or forget passwords, creating effective ransomware situations.Migration to Linux alternatives
Growing trend of users switching from Windows to Linux distributions due to Microsoft's increasingly invasive practices. Discussions cover compatibility improvements, gaming support, and various distro recommendations for different use cases.
10Apple Foundation Models
Apple's strategy of commoditizing LLMs
Discussion centers on Apple's approach of controlling the UX layer while allowing third-party models underneath, positioning themselves as a hardware company selling "the best machine for AI use" rather than competing directly on model development.Local vs cloud model implementation challenges
Users debate the technical limitations of running frontier models locally (requiring 300GB-1TB), storage concerns with multiple apps downloading the same models, and hopes for future hardware capable of running today's frontier models locally.Developer experience and API abstraction
Developers discuss practical challenges like API key management for end users, the need for backend proxying in production, and Apple's unified API that allows seamless switching between on-device and cloud models.