Wednesday · April 29, 2026

Morning Edition

Twenty stories from Hacker News and Pinboard Popular, curated for tech-leaning readers who care about Claude Code, the Apple ecosystem, and privacy.

In this issue

  1. Ghostty is leaving GitHub
  2. Your phone is about to stop being yours
  3. Localsend: An open-source cross-platform alternative to AirDrop
  4. Who owns the code Claude Code wrote?
  5. GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
  6. Regression: malware reminder on every read still causes subagent refusals
  7. GitHub Actions is the weakest link
  8. Warp is now open-source
  9. An update on GitHub availability
  10. Show HN: Drive any macOS app in the background without stealing the cursor
  11. Before GitHub
  12. GitHub Copilot code review will start consuming GitHub Actions minutes
  13. How ChatGPT serves ads
  14. Claude for Creative Work
  15. Bugs Rust won't catch
  16. VibeVoice: Open-source frontier voice AI
  17. Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU
  18. Behavioral timescale synaptic plasticity rewires the brain after an experience
  19. We still don't have a more precise value for "Big G"
  20. Show HN: Live Sun and Moon Dashboard with NASA Footage

From Hacker News

Stories 1 – 10
No. 01Dev ToolsApplies to you

Ghostty is leaving GitHub

Mitchell Hashimoto explains why his fast, feature-rich terminal emulator Ghostty is migrating off GitHub — a significant statement from a high-profile open-source project. With GitHub's recent outage and RCE vulnerability making headlines today too, the timing couldn't be more pointed. If you're a Ghostty user or thinking about your own project's hosting, this is essential reading.

No. 02Privacy & SecurityApplies to you

Your phone is about to stop being yours

A campaign site arguing that upcoming Android changes will lock users out of sideloading and third-party app stores, eroding ownership of your own hardware. For anyone who cares about open ecosystems and device autonomy, this is the digital-rights fight of the moment. The HN thread is a firestorm — 607 comments deep and counting.

No. 03Dev ToolsApplies to you

Localsend: An open-source cross-platform alternative to AirDrop

LocalSend lets you send files between any devices on your local network without a cloud intermediary — think AirDrop but for Windows, Linux, Android, and iOS too. If you work across the Apple ecosystem and occasionally need to move files to non-Apple machines, this is the tool to have installed everywhere. Completely free, no accounts, no telemetry.

No. 04AI ToolsApplies to you

Who owns the code Claude Code wrote?

A legal deep-dive into the copyright status of AI-generated code specifically from Claude Code — exactly the question every developer shipping with AI assistance should be asking. The piece parses Anthropic's ToS, US Copyright Office guidance, and the murky question of work-for-hire. Directly relevant if you're billing clients for Claude Code output.

No. 05Privacy & SecurityApplies to you

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown

Wiz researchers break down a remote code execution vulnerability in GitHub — bad timing alongside today's GitHub outage post and Ghostty's departure announcement. If you run self-hosted GitHub Enterprise or have CI/CD pipelines touching GitHub, patch now and read this first. A clean technical write-up of the exploit chain.

No. 06AI ToolsApplies to you

Regression: malware reminder on every read still causes subagent refusals

A live Claude Code bug report that's frustrating a lot of developers today: a regression is causing Claude Code's subagents to refuse tasks due to repeated malware-reminder injections. If you've noticed Claude Code becoming weirdly uncooperative in agentic workflows, this is the culprit. Track it and add your reproduction details.

No. 07Privacy & SecurityApplies to you

GitHub Actions is the weakest link

A thorough breakdown of why GitHub Actions is a persistent attack surface — secret exfiltration, poisoned third-party actions, and OIDC misconfiguration are all covered. Pairs perfectly with today's GitHub RCE news. Any team running CI/CD should treat this as a security checklist.

No. 08Dev ToolsApplies to you

Warp is now open-source

Warp, the AI-powered terminal that's been a macOS-first darling, just open-sourced its codebase. This is a big deal for the terminal space — especially on a day when Ghostty is simultaneously fleeing GitHub. If you've been on the fence about Warp vs. Ghostty, now you can actually read both codebases.

No. 09Dev Tools

An update on GitHub availability

GitHub's official post-mortem on the latest availability incident, which knocked out key services for a significant window. Coming the same day as an RCE disclosure and Ghostty's departure announcement, it's a rough news cycle for the platform. Worth reading for the technical detail on what failed and how GitHub plans to prevent recurrence.

No. 10New Apple AppsApplies to you

Show HN: Drive any macOS app in the background without stealing the cursor

CUA is a macOS tool that lets you automate and control any app via computer-use AI agents without hijacking your mouse and keyboard — a huge usability improvement over existing automation approaches. This is exactly the kind of glue layer that makes local AI agents practical on macOS. Early but impressive.

From Pinboard Popular

Stories 11 – 20
No. 11Dev Tools

Before GitHub

Armin Ronacher (Flask, Jinja2) takes a long look back at what open-source collaboration looked like before GitHub centralized everything — mailing lists, tarballs, IRC, and all. Perfectly timed alongside today's Ghostty-leaves-GitHub news, this is a meditation on platform dependency and what we've traded away. A must-read for anyone thinking about post-GitHub infrastructure.

No. 12AI ToolsApplies to you

GitHub Copilot code review will start consuming GitHub Actions minutes

Starting June 1, Copilot's automated code review feature will draw from your GitHub Actions minutes budget — a stealth cost increase that caught many teams off guard. If you're using Copilot code review heavily, audit your usage now before the billing surprise hits. The community reaction in the HN thread is not positive.

No. 13AI Tools

How ChatGPT serves ads

A detailed breakdown of how ChatGPT's emerging ad model works — the attribution loop, how OpenAI tracks conversions, and what it means when your AI assistant has a financial incentive to recommend certain products. Important context for anyone evaluating whether Claude, Copilot, or ChatGPT is the right tool for their workflows.

No. 14Creative SoftwareApplies to you

Claude for Creative Work

Anthropic announces Claude-specific features aimed at writers, artists, and creative professionals — expanded context for long-form work, better stylistic consistency, and new persona modes. If you've been using Claude Code for dev work, this is the sister announcement expanding Claude's creative surface area. Worth exploring for side projects.

No. 15Dev Tools

Bugs Rust won't catch

A clear-eyed look at the class of bugs — logic errors, integer overflows in safe code, API misuse — that Rust's ownership model simply doesn't protect against. A useful corrective to the "Rust = safe" shorthand. Required reading before you assume memory safety is the only thing that matters in a security-critical codebase.

No. 16AI ToolsApplies to you

VibeVoice: Open-source frontier voice AI

Microsoft drops an open-source voice AI toolkit that aims to be a full-stack solution for real-time voice interaction — transcription, synthesis, and conversational turn-taking all included. The "vibe" branding aside, this is a serious engineering artifact. Promising for anyone building voice-enabled AI tools or experimenting with multimodal workflows.

No. 17AI Tools

Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU

An experiment applying the Karpathy "train/eval/improve" loop to automatically evolve CPU microarchitecture designs — essentially using AI to do hardware architecture search. Genuinely weird and cool science at the intersection of ML and computer architecture. The write-up is lucid even if the results are still early.

No. 18Weird Science

Behavioral timescale synaptic plasticity rewires the brain after an experience

Quanta Magazine covers a newly characterized form of neuroplasticity — BTSP — that can rewire synaptic connections after a single behavioral event, much faster than previously understood mechanisms. It's reshaping how neuroscientists think about memory formation and has obvious implications for AI architecture discussions. Beautifully reported.

No. 19Weird Science

We still don't have a more precise value for "Big G"

The gravitational constant G is the least precisely known fundamental constant in physics — and despite decades of increasingly sophisticated experiments, measurements keep disagreeing with each other. Ars explains why, and it's a genuinely humbling reminder that some problems are just hard. Great lunchtime read.

No. 20Weird Science

Show HN: Live Sun and Moon Dashboard with NASA Footage

A beautiful real-time dashboard pulling live NASA solar and lunar imagery, with current sun activity, moon phase, and space weather data all in one place. Part space-nerd toy, part surprisingly useful screen saver. The kind of Show HN that makes you remember why the internet is sometimes great.