Saturday · July 25, 2026

Morning Edition

Twenty stories from Hacker News and Pinboard Popular, curated for tech-leaning readers who care about Claude Code, the Apple ecosystem, and privacy.

In this issue

  1. Claude Opus 5
  2. My security camera shipped a GitHub admin token in its login page
  3. Be skeptical of OpenAI's rogue hacker agent story
  4. Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey
  5. Firefox Containers Preview
  6. Postgres LISTEN/NOTIFY actually scales
  7. Nvidia, Microsoft, Meta warn against overregulating open-weight models
  8. India's first privately-developed rocket reaches orbit on debut launch
  9. Buz – A fork of Bun using modern Zig, with sub-1s incremental builds
  10. Android May Soon Restrict On-Device ADB
  11. An opinionated guide to which AI to use to do stuff
  12. 26 Tool Calls, One Script, $0.02: Measuring "Code Mode" in Production | Agent Swarm
  13. Setting up a remote environment for agentic coding on a VPS · ma.ttias.be
  14. Build models. Understand AI.
  15. Kero — A native terminal workspace for macOS
  16. Fake Job Interview with Malware
  17. Prompt Caching In Agents | EARENDIL
  18. andrewyng/openworker
  19. no-ai-slop: Removes 20+ patterns of AI slop from any piece of writing.
  20. Canvas UI: Creative Canvas and WebGL Component Library

From Hacker News

Stories 1 – 10
No. 01AI ToolsApplies to you

Claude Opus 5

Anthropic drops its most capable model yet, and it's already sitting at #1 on the Artificial Analysis Intelligence Leaderboard. If you're building with Claude Code or Claude API, this is the new ceiling — expect significantly stronger reasoning, coding, and agentic task completion. Required reading for anyone in the Claude ecosystem.

No. 02Privacy & SecurityApplies to you

My security camera shipped a GitHub admin token in its login page

A researcher discovered that their Hanwha security camera was embedding a live GitHub admin token directly in the login page HTML — accessible to anyone on the local network. A masterclass in supply-chain security negligence and a sobering reminder to audit every device you let onto your home network.

No. 03AI ToolsApplies to you

Be skeptical of OpenAI's rogue hacker agent story

The Guardian pushes back hard on OpenAI's narrative about an AI agent "going rogue" to exploit a Redis server, suggesting the framing may be more marketing than genuine safety incident. Critical lens on AI safety theater versus real risk — essential reading before you form an opinion on agentic AI danger.

No. 04Privacy & Security

Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey

India's government ordered GitHub to take down Jack Dorsey's Bitchat — a decentralized, Bluetooth mesh chat app — citing security concerns. This is a significant precedent for government censorship of open-source comms tools and the reach of state power over GitHub-hosted projects.

No. 05Privacy & SecurityApplies to you

Firefox Containers Preview

Mozilla is giving Containers — the privacy feature that isolates site tracking across browsing contexts — a major overhaul with a new UI and expanded capabilities. For developers and privacy-conscious users, this is the browser privacy feature that actually works at a structural level, not just a setting to toggle.

No. 06Dev ToolsApplies to you

Postgres LISTEN/NOTIFY actually scales

DBOS tears down the conventional wisdom that Postgres LISTEN/NOTIFY is a toy feature that breaks under load — benchmarks show it handling serious throughput with the right architecture. If you're already on Postgres and reaching for Redis pub/sub, read this first.

No. 07AI Tools

Nvidia, Microsoft, Meta warn against overregulating open-weight models

Three of the biggest names in AI infrastructure are jointly lobbying against heavy-handed open-weight model regulation, warning it would entrench closed incumbents. The debate has real stakes for developers who rely on local and open models — follow this closely as legislative frameworks take shape.

No. 08Weird Science

India's first privately-developed rocket reaches orbit on debut launch

India's private space sector hits a historic milestone with a successful first orbital launch — joining SpaceX, Rocket Lab, and others in the commercial launch club. The geopolitical and commercial implications for the global launch market are enormous.

No. 09Dev ToolsApplies to you

Buz – A fork of Bun using modern Zig, with sub-1s incremental builds

Buz is a drop-in Bun replacement rebuilt with modern Zig that achieves sub-second incremental builds — a meaningful leap for large TypeScript projects. Coming from an Angular/TypeScript background, faster rebuild cycles are always welcome; worth watching this project closely.

No. 10Privacy & Security

Android May Soon Restrict On-Device ADB

Google appears to be planning restrictions on on-device ADB access, which would hamper power users, security researchers, and ROM developers who rely on wireless debugging. A concerning trend toward locking down the Android platform that parallels iOS-style control.

From Pinboard Popular

Stories 11 – 20
No. 11AI ToolsApplies to you

An opinionated guide to which AI to use to do stuff

Ethan Mollick cuts through model-choice paralysis with a practical, opinionated breakdown of which AI tools actually shine for which tasks — coding, writing, research, and more. With Opus 5 just dropping, this is the guide to revisit today to recalibrate your AI workflow.

No. 12AI ToolsApplies to you

26 Tool Calls, One Script, $0.02: Measuring "Code Mode" in Production | Agent Swarm

A detailed breakdown of running a real agentic coding task — 26 tool calls, one complete script, for just two cents in API costs. Concrete benchmarks on token efficiency in production agentic workflows are rare; this one is immediately useful for anyone budgeting Claude Code usage.

No. 13AI ToolsApplies to you

Setting up a remote environment for agentic coding on a VPS · ma.ttias.be

Step-by-step guide to provisioning a VPS as a persistent, always-on environment for running coding agents like Claude Code — SSH tunnels, tmux sessions, and all. If you're tired of agents timing out on your laptop, this is the practical setup guide you've been waiting for.

No. 14AI ToolsApplies to you

Build models. Understand AI.

Language Model Builder is a free native Mac app that walks you through training a small LLM from scratch — tokenizer, data selection, pre-training, fine-tuning, and chat. Hands-on understanding of what's actually happening inside the models you use every day; perfect for a weekend deep dive on macOS.

No. 15New Apple AppsApplies to you

Kero — A native terminal workspace for macOS

Kero is a keyboard-first, native macOS terminal workspace with built-in project management, sessions, a command palette, and inline git diffs — all in one native window. For developers who live in the terminal on macOS, this looks like a serious challenger to iTerm2 and Warp.

No. 16Privacy & SecurityApplies to you

Fake Job Interview with Malware

A developer received a legit-looking take-home coding test that was actually a sophisticated malware delivery vector hidden inside a git hook. The attack is clever and the writeup is detailed — every developer who does take-home assessments should read this before cloning another repo.

No. 17AI ToolsApplies to you

Prompt Caching In Agents | EARENDIL

A focused technical post on how to correctly implement prompt caching in multi-step agent loops — where to place cache breakpoints, how to measure hit rates, and the cost impact. Directly applicable to anyone building with Anthropic's API and trying to keep costs sane at scale.

No. 18AI ToolsApplies to you

andrewyng/openworker

Andrew Ng's new open-source agent framework for building browser-based workers — a lightweight, composable approach to agentic task execution. Given Ng's track record with practical AI tooling, this repo is worth a close look if you're architecting agent workflows.

No. 19Dev ToolsApplies to you

no-ai-slop: Removes 20+ patterns of AI slop from any piece of writing.

An open-source CLI/library that detects and strips 20+ telltale AI writing patterns — "delve", "it's worth noting", the em-dash overload — from any piece of text. Handy as a post-processing step in any AI-assisted writing workflow, and eye-opening for auditing your own AI-generated output.

No. 20Creative SoftwareApplies to you

Canvas UI: Creative Canvas and WebGL Component Library

Canvas UI is an open-source component library that layers creative HTML-in-canvas and WebGL effects directly over live DOM content — works with React, Vue, Svelte, and vanilla JS. If you're building anything visually ambitious on the web, this is the kind of creative coding toolkit that opens new doors.