Wednesday · April 22, 2026

Morning Edition

Twenty stories from Hacker News and Pinboard Popular, curated for tech-leaning readers who care about Claude Code, the Apple ecosystem, and privacy.

In this issue

  1. Framework Laptop 13 Pro
  2. Laws of Software Engineering
  3. ChatGPT Images 2.0
  4. SpaceX says it has agreement to acquire Cursor for $60B
  5. Claude Code to be removed from Anthropic's Pro plan?
  6. Meta to start capturing employee mouse movements, keystrokes for AI training
  7. Changes to GitHub Copilot individual plans
  8. The Vercel breach: OAuth attack exposes risk in platform environment variables
  9. Show HN: VidStudio, a browser based video editor that doesn't upload your files
  10. CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production
  11. Edit store price tags using Flipper Zero
  12. Cal.diy: open-source community edition of cal.com
  13. Show HN: GoModel – an open-source AI gateway in Go
  14. A type-safe, realtime collaborative Graph Database in a CRDT
  15. Running a Minecraft Server and more on a 1960s UNIVAC Computer
  16. Diverse organic molecules on Mars revealed by the first SAM TMAH experiment
  17. Drunk post: Things I've learned as a senior engineer (2021)
  18. Fusion Power Plant Simulator
  19. Some secret management belongs in your HTTP proxy
  20. XOR'ing a register with itself is the idiom for zeroing it out. Why not sub?

From Hacker News

Stories 1 – 10
No. 01Dev Tools

Framework Laptop 13 Pro

Framework's highest-scoring launch ever signals the modular laptop movement is hitting its stride. A Pro tier means more RAM, better display, and pro-grade specs without sacrificing repairability. 612 comments worth of opinion on whether this is finally the Linux/Windows dev laptop to ditch Apple for.

No. 02Dev ToolsApplies to you

Laws of Software Engineering

A curated compendium of named laws, heuristics, and aphorisms that govern software development — from Conway's Law to Hyrum's Law. Essential reading for senior devs who want shared vocabulary with their teams. 464 comments means the HN crowd has plenty of additions and rebuttals.

No. 03AI ToolsApplies to you

ChatGPT Images 2.0

OpenAI's next-gen image model lands inside ChatGPT with dramatically improved instruction-following, text rendering, and photorealism. If you do any design or creative work with AI, this is the new benchmark to evaluate against. The 599-comment thread is a live stress test of its capabilities and limits.

No. 04AI ToolsApplies to you

SpaceX says it has agreement to acquire Cursor for $60B

The most jaw-dropping acquisition rumor in years: SpaceX allegedly buying Cursor, the AI coding IDE, for $60 billion. If true, this reshapes the AI coding assistant landscape overnight and raises urgent questions about what happens to your codebase. Head to the 676-comment HN thread to separate signal from noise.

No. 05AI ToolsApplies to you

Claude Code to be removed from Anthropic's Pro plan?

Directly relevant if you rely on Claude Code daily: reports are swirling that Anthropic may pull Claude Code access from the $20/mo Pro tier. This would force power users onto a higher-cost plan or find alternatives. The 516-comment thread is pure signal on what Anthropic has actually communicated.

No. 06Privacy & SecurityApplies to you

Meta to start capturing employee mouse movements, keystrokes for AI training

Meta is rolling out pervasive keylogger-level monitoring of its own employees to harvest behavioral data for AI training — a chilling precedent for workplace privacy everywhere. If this normalizes, expect enterprise software vendors to follow. Anyone who cares about digital rights should read the Reuters report carefully.

No. 07AI ToolsApplies to you

Changes to GitHub Copilot individual plans

GitHub is reshuffling Copilot's individual pricing tiers — changes that could affect what model you get and what you pay. Worth a careful read before your next billing cycle. Developers already juggling Claude Code, Cursor, and Copilot need to know if the value equation just shifted.

No. 08Privacy & SecurityApplies to you

The Vercel breach: OAuth attack exposes risk in platform environment variables

Trend Micro's post-mortem on the Vercel OAuth supply chain attack is a must-read for anyone deploying apps to serverless platforms. The attack vector — stealing secrets baked into environment variables — is shockingly common. Actionable mitigations are included.

No. 09Creative SoftwareApplies to you

Show HN: VidStudio, a browser based video editor that doesn't upload your files

A fully browser-local video editor — no uploads, no cloud, no privacy risk. For developers and creators who need quick edits without feeding footage to a third-party server, this is a compelling privacy-respecting alternative. Runs on WebAssembly and handles surprisingly heavy files.

No. 10AI ToolsApplies to you

CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production

Brex open-sources CrabTrap, an HTTP proxy that uses an LLM to evaluate agent requests before they hit production APIs — essentially a guardrail for AI agents going rogue. If you're building agentic workflows (Claude Code pipelines, etc.), this is exactly the kind of safety layer you should be thinking about. Clever architecture worth studying.

From Pinboard Popular

Stories 11 – 20
No. 11Privacy & Security

Edit store price tags using Flipper Zero

TagTinker turns a Flipper Zero into a tool for reading and writing the electronic shelf labels (ESLs) found in modern retail stores. A fascinating look at how much trust is placed in low-cost wireless price tags. The security implications — and legal gray area — are thoroughly debated in 306 comments.

No. 12Dev ToolsApplies to you

Cal.diy: open-source community edition of cal.com

Cal.com forks its own product into a fully open-source, community-driven edition — no paid tiers, no feature gates. Self-hostable scheduling infrastructure for developers who don't want to pay SaaS rates or hand calendar data to a third party. Drop it in your stack today.

No. 13AI ToolsApplies to you

Show HN: GoModel – an open-source AI gateway in Go

GoModel is a lightweight AI gateway written in Go that lets you proxy, route, and manage requests across multiple LLM providers behind a single unified API. Great for teams that want to avoid vendor lock-in between OpenAI, Anthropic, and others. A practical piece of infrastructure if you're building AI-powered apps.

No. 14Dev ToolsApplies to you

A type-safe, realtime collaborative Graph Database in a CRDT

A TypeScript-native graph database built on CRDTs for conflict-free real-time collaboration — think of it as a type-safe, offline-capable alternative to Firebase for graph-shaped data. Directly relevant for Angular/TypeScript devs building collaborative tools. The CRDT design means eventual consistency without custom merge logic.

No. 15Weird Science

Running a Minecraft Server and more on a 1960s UNIVAC Computer

Someone actually got a 1960s UNIVAC mainframe to serve Minecraft packets, which is either the greatest or most unnecessary engineering achievement of the year. A deep dive into vintage hardware coaxed into modern networking — thoroughly entertaining and technically impressive.

No. 16Weird Science

Diverse organic molecules on Mars revealed by the first SAM TMAH experiment

The Curiosity rover's SAM instrument has detected a remarkably diverse range of organic molecules preserved in Martian rock for billions of years. This is one of the strongest hints yet that Mars may have once harbored the chemistry necessary for life. A genuinely significant planetary science result.

No. 17Dev ToolsApplies to you

Drunk post: Things I've learned as a senior engineer (2021)

A classic resurfaces: unfiltered, hard-won lessons from a senior engineer — on meetings, estimates, code quality, and career survival. Resurfaces periodically on HN because it keeps hitting home. Refreshingly honest compared to polished "lessons learned" blog posts.

No. 18Weird Science

Fusion Power Plant Simulator

An interactive browser-based simulator that lets you design and operate a fusion power plant, tuning plasma parameters and engineering tradeoffs in real time. It's both an educational tool and a surprisingly deep model of fusion economics. If you've ever wondered what it actually takes to make fusion "worth it," this is the best explainer available.

No. 19Privacy & SecurityApplies to you

Some secret management belongs in your HTTP proxy

A sharp argument for offloading API key injection and secret rotation to your HTTP proxy layer rather than baking secrets into application code or environment variables — especially timely given the Vercel breach above. Concrete, actionable patterns for .NET and Node backends. Read alongside the Vercel post-mortem for a full picture.

No. 20Dev Tools

XOR'ing a register with itself is the idiom for zeroing it out. Why not sub?

Raymond Chen digs into why x86 assembly programmers reach for XOR instead of SUB to zero a register — a subtle interplay of instruction encoding, flag side effects, and CPU microarchitecture optimizations. A bite-sized but deeply satisfying piece of low-level computer science trivia.