Twenty stories from Hacker News and Pinboard Popular, curated for tech-leaning readers who care about Claude Code, the Apple ecosystem, and privacy.
A deep practical guide to running Claude Code as your primary development environment — covering Claude.md configuration, skill definitions, subagent orchestration, and MCP integrations. If you're already using Claude Code, this is the upgrade guide you didn't know you needed. Directly actionable, no fluff.
Cloudflare's new Flagship product lets you deploy and manage entire application stacks on Cloudflare's edge network with a unified config. Think infrastructure-as-code but deeply integrated with Workers, R2, and D1 — a serious alternative to Vercel or Fly for full-stack apps. Worth watching closely.
A developer ditches Adobe InDesign and Microsoft Word for a fully Git-tracked, Markdown/Pandoc-driven book production workflow. The result is reproducible builds, proper version control, and no proprietary lock-in — a pattern any developer who writes docs or long-form content will want to steal.
The thesis: pairing offshore talent with local open-weight models will undercut frontier API costs faster than the market expects. This has real strategic implications for teams currently building on OpenAI/Anthropic. A thought-provoking read with solid numbers.
A curated gallery of modern pixel fonts that go well beyond the retro-game aesthetic — these are carefully crafted typefaces suitable for UIs, creative coding, and data displays. Some are genuinely beautiful and free. Great bookmark for your next terminal or side-project aesthetic.
A clear-eyed survey of the current landscape for self-sovereign certificate infrastructure — DANE, TLSA, blockchain-based PKI, and where each falls short. If you've ever wanted certificate authority independence without the complexity of running your own CA, this is the state-of-play in 2026.
A critical auth-bypass vulnerability in Starlette (325M weekly downloads) lets attackers spoof the Host header to bypass authentication in FastAPI and other ASGI apps. If you have any Python web services, check your middleware stack now — this affects a huge swath of the Python backend ecosystem.
Derek Lowe's forensic chemistry storytelling at its best: a detailed account of what happens when a large industrial tank of methyl methacrylate monomer goes catastrophically wrong. Viscerally educational about polymerization runaway reactions — you will never look at plexiglass the same way.
The story of TIGIT — a cancer immunotherapy target that consumed a decade of clinical trials and billions of dollars before failing spectacularly. A gripping narrative about how drug development hype cycles work, and why promising biology doesn't always translate to human outcomes.
Peer-reviewed research confirming that the politeness and tone of your prompts measurably affects LLM output quality — not just vibe, but factual accuracy. This has direct implications for prompt engineering and Claude.md system prompt design. Short paper, immediately applicable.
A live tracker of AI profitability metrics across major labs and products — revenue, compute costs, and margin data compiled in one place. Cuts through the hype with actual economics. Essential context for anyone building products on top of frontier models.
Cory Doctorow argues that the AI bubble differs structurally from the dot-com era: the web democratized publishing, while AI centralizes production. The key insight — "the story of the web at work was the opposite of the story of AI at work" — is worth sitting with regardless of where you land.
A thorough, opinionated guide to moving Go codebases to Rust — covering where patterns map cleanly, where the borrow checker demands a rethink, and crucially, when NOT to migrate. Corrode's consulting experience shines through with practical incremental migration strategies.
Ars Technica's write-up on the Starlette BadHost CVE (also in today's HN picks) adds crucial context: AI agents built on FastAPI frameworks are specifically at risk because auth middleware is commonly misconfigured. If you run any agentic Python services, this is a must-read alongside the CVE details.
German researchers have demonstrated passive person identification using only ambient WiFi signals — no device required, works even when phones are off. The implications for physical privacy in homes, offices, and public spaces are staggering. This is the kind of surveillance capability that makes "I turned my phone off" meaningless.
Marco Arment joins MPU to discuss Overcast's new transcript feature and the bonkers setup of running 48 Mac minis as a home server cluster. Podcast transcripts are a quietly killer feature for Obsidian users who want searchable audio notes. Marco's infrastructure obsessions are always worth an hour.
A practical step-by-step walkthrough of Docker image optimization — multi-stage builds, distroless bases, dependency pruning, and layer caching tricks that collapse a 1.2GB Node image to under 80MB. The kind of concrete, immediately applicable post that belongs in your bookmarks.
A structured reference catalog of agentic AI design patterns — tool use, reflection loops, multi-agent coordination, and more — with flowcharts and implementation notes. Think of it as a Gang of Four for LLM agent architectures. Essential reading for anyone building with Claude Code or other agentic tools.
A minimal philosophy and starter system for managing your entire personal knowledge base in plain Markdown files — no proprietary app required. For Obsidian users, this is a compelling "escape hatch" design that makes your vault truly portable. The README alone is worth reading.
A fascinating historical deep-dive tracing how DMCA anti-circumvention provisions — born from Hollywood's VCR panic — became the legal foundation for locking you out of your iPhone, tractor, and medical device. Essential context for understanding why right-to-repair battles are so hard to win.