Tuesday · May 19, 2026

Morning Edition

Twenty stories from Hacker News and Pinboard Popular, curated for tech-leaning readers who care about Claude Code, the Apple ecosystem, and privacy.

In this issue

  1. The last six months in LLMs in five minutes
  2. Anthropic acquires Stainless
  3. Show HN: Files.md – Open-source alternative to Obsidian
  4. The quiet renovation at Bitwarden
  5. The FBI Wants to Buy Nationwide Access to License Plate Readers
  6. We stopped AI bot spam in our GitHub repo using Git's –author flag
  7. Cursor Introduces Composer 2.5
  8. Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
  9. We let AIs run radio stations
  10. Codex-maxxing
  11. GitHub - sruthik27/creating-claude-md: Claude Code / Codex skill: generate a lean, high-signal CLAUDE.md from scratch via repo scan + focused user interview.
  12. The Coding Harness Behind GitHub Copilot in VS Code
  13. A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it
  14. darrylmorley/whatcable: macOS menu bar app that tells you, in plain English, what each USB-C cable plugged into your Mac can actually do
  15. herdr — tmux for agents
  16. GitHub - rockorager/comview: the best diff viewer ever made
  17. Fits on a Floppy - A Manifesto for Small Software
  18. Coding on Paper [e-ink monitor]
  19. Apple Silicon costs more than OpenRouter
  20. tinyhumansai/openhuman: Your Personal AI super intelligence. Private, Simple and extremely powerful.

From Hacker News

Stories 1 – 10
No. 01AI ToolsApplies to you

The last six months in LLMs in five minutes

Simon Willison distills six months of LLM chaos into a five-minute read — exactly the kind of high signal-to-noise briefing developers need. If you've been heads-down shipping and missed half the model releases, this is your catch-up. Required reading before any AI planning conversation.

No. 02AI ToolsApplies to you

Anthropic acquires Stainless

Anthropic snaps up Stainless, the SDK generation company behind clean TypeScript/Python client libraries for many APIs. This signals Anthropic is doubling down on developer experience — expect the Claude API SDKs to get significantly better. Directly relevant if you're building with Claude Code or the API.

No. 03Dev ToolsApplies to you

Show HN: Files.md – Open-source alternative to Obsidian

A plain-files approach to note-taking that skips Obsidian's plugin complexity — your notes are just Markdown files, navigable with any editor. For Obsidian users who find the app getting heavier, this is a compelling minimalist counter-argument. Worth benchmarking against your current workflow today.

No. 04Privacy & SecurityApplies to you

The quiet renovation at Bitwarden

A deep-dive into how Bitwarden has quietly shifted its UX, business model, and codebase over the past year — not all of it in a direction open-source loyalists love. Privacy-conscious developers should know what's changing in their password manager before it changes on them.

No. 05Privacy & SecurityApplies to you

The FBI Wants to Buy Nationwide Access to License Plate Readers

404 Media reports the FBI is seeking a contract for bulk access to Flock Safety's nationwide ALPR network — a de facto surveillance dragnet without warrants. The scale here is genuinely alarming, and the procurement paper trail is the whole story. Essential reading for anyone tracking state surveillance creep.

No. 06Dev ToolsApplies to you

We stopped AI bot spam in our GitHub repo using Git's –author flag

A neat, immediately deployable trick: filter PRs and commits by Git author metadata to identify and gate AI-generated contributions. As AI agents proliferate in open repos, this is the kind of practical hygiene that maintainers need now. Copy-paste applicable today.

No. 07AI ToolsApplies to you

Cursor Introduces Composer 2.5

Cursor's Composer gets a major upgrade with 2.5 — better multi-file reasoning, improved context retention, and tighter agent loops. Even if you're a Claude Code devotee, knowing what the competition ships keeps you calibrated. The feature gap between AI coding tools is narrowing fast.

No. 08Privacy & SecurityApplies to you

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised

Another supply-chain attack wave has hit npm, this time compromising 314 packages in a coordinated campaign. If your stack has any JavaScript dependencies — and it does — you need to audit your lockfile now. The Dune-named attacker is back and getting more sophisticated.

No. 09AI Tools

We let AIs run radio stations

Andon Labs built fully autonomous AI radio stations — music selection, DJ banter, live mixing, all generated. The results are surprisingly coherent and raise immediate questions about what 'creative curation' means when a model does it. A fascinating edge-case for AI creative tooling.

No. 10AI ToolsApplies to you

Codex-maxxing

Jason Liu's practical guide to squeezing maximum performance out of OpenAI Codex — prompt structures, context tricks, and workflow patterns that actually move the needle. This is the kind of applied prompt engineering that transfers directly to Claude Code users too. Bookmark and apply.

From Pinboard Popular

Stories 11 – 20
No. 11AI ToolsApplies to you

GitHub - sruthik27/creating-claude-md: Claude Code / Codex skill: generate a lean, high-signal CLAUDE.md from scratch via repo scan + focused user interview.

A tool that scans your repo and interviews you to auto-generate a high-quality CLAUDE.md — the context file that makes Claude Code dramatically smarter about your project. If you use Claude Code and haven't nailed your CLAUDE.md, this is the shortcut you've been waiting for.

No. 12AI ToolsApplies to you

The Coding Harness Behind GitHub Copilot in VS Code

Microsoft's VS Code team pulls back the curtain on the agent scaffolding that powers Copilot — tool calls, context windows, memory management, and how it decides what to show the LLM. Understanding the internals makes you a better prompter and a better evaluator of AI coding tools.

No. 13Privacy & SecurityApplies to you

A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it

A researcher claims Microsoft deliberately introduced a recoverable backdoor in BitLocker and has published a working exploit. If confirmed, this is a five-alarm fire for Windows-based enterprise security. Privacy-first developers should read this before recommending BitLocker to anyone.

No. 14New Apple AppsApplies to you

darrylmorley/whatcable: macOS menu bar app that tells you, in plain English, what each USB-C cable plugged into your Mac can actually do

A tiny macOS menu bar utility that decodes the USB-C cable chaos — tells you whether each plugged-in cable supports Thunderbolt, DisplayPort, charging speeds, and more. The USB-C specification is a nightmare and this app turns it into plain English. Install it once and stop guessing.

No. 15Dev ToolsApplies to you

herdr — tmux for agents

herdr is a persistent terminal multiplexer purpose-built for coding agents — detach, reattach, and let agents keep running with built-in awareness of blocked/done/working states. As Claude Code and similar agents become part of daily workflows, this is the kind of infrastructure primitive that fills a real gap.

No. 16Dev ToolsApplies to you

GitHub - rockorager/comview: the best diff viewer ever made

comview is a terminal-based diff viewer that's gunning for the title of best in class — fast, keyboard-driven, and designed for actual code review rather than just file comparison. Worth a look if you've felt let down by existing diff tools in your git workflow.

No. 17Dev Tools

Fits on a Floppy - A Manifesto for Small Software

A philosophical pushback against software bloat, arguing for tools that fit in your head and on a floppy. It's provocative counter-programming in an era of AI-assisted code generation that can produce thousands of lines effortlessly. A good palate cleanser for any developer.

No. 18New Apple Apps

Coding on Paper [e-ink monitor]

Oskar Wickström reviews a full e-ink monitor as a daily coding display — eye strain, refresh rates, terminal legibility, the works. As more developers chase distraction-free focus setups, this is a thorough real-world verdict on whether paper-like screens are actually usable for code.

No. 19AI ToolsApplies to you

Apple Silicon costs more than OpenRouter

A careful energy-cost analysis showing that running LLMs locally on Apple Silicon can actually cost more per token than routing through OpenRouter when electricity is factored in. Challenges the assumption that 'local = free' — important math for any Mac developer building AI workflows.

No. 20AI ToolsApplies to you

tinyhumansai/openhuman: Your Personal AI super intelligence. Private, Simple and extremely powerful.

OpenHuman is an open-source personal AI assistant with a local 'memory tree' that syncs to an Obsidian-compatible knowledge base — integrating Gmail, GitHub, Notion and 115 other platforms while keeping data encrypted on-device. The Obsidian integration and privacy-first architecture make this a direct hit for this reader's stack.