Top Hacker News Stories – Week 2026-W28

In recent weeks on Hacker News, discussions have centered around security vulnerabilities and data preservation. Notably, Tenda firmware was found to contain a hidden authentication backdoor across multiple versions, garnering over 200 points. Additionally, a project called GitLost demonstrated how researchers tricked GitHub's AI agent into leaking private repositories, attracting 161 points. On the hardware front, a detailed guide on building a minimal ZFS NAS without commercial solutions like Synology or QNAP received nearly 200 points, reflecting ongoing interest in DIY storage solutions.

What Do We Know About the Microplastics Inside Us?

20 pts, 0 comments

20 points · 0 comments · Add your take →

Chatto is now Open Source

Chatto is an open-source, self-hosted group chat app aiming for performance and user enjoyment, with EU hosting options.

112 points · 20 comments · Add your take →

Mistral's Robostral Navigate: a state of the art robotics navigation model

Mistral's Robostral Navigate is a state-of-the-art robotics navigation model, but some commenters question its practical utility and real-world testing.

92 points · 10 comments · Add your take →

Decoding the obfuscated bash script on a Uniqlo t-shirt

A Uniqlo T-shirt features an obfuscated bash script, which has sparked curiosity and discussion about its origin and purpose.

1103 points · 184 comments · Add your take →

Grok 4.5

95 pts, 55 comments

95 points · 55 comments · Add your take →

GPT‑Live

The discussion covers GPT‑Live's real-time translation capabilities, concerns about energy use and ethical issues, and the potential for local voice model deplo…

Top Hacker News Stories – Week 2026-W28

What Do We Know About the Microplastics Inside Us?

Chatto is now Open Source

Mistral's Robostral Navigate: a state of the art robotics navigation model

Decoding the obfuscated bash script on a Uniqlo t-shirt

Grok 4.5

GPT‑Live

Microsoft releases Flint, a visualization language for AI agents

SWE-1.7 Reach Near GPT 5.5 and Opus Intelligence

EU now one step away from reviving private message scanning rules

Cloudflare Meerkat - Globally distributed consensus

OpenBSD has a use-after-free allowing local privilege escalation to root

Understanding B-Tree Indexes in PostgreSQL: A Comprehensive Guide– Part 1

GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos

TypeScript 7

Follow London Trains in 3D

EVE Online's Carbon engine is now open source: Fenris Creations explains why

TabFont – guitar tabs rendered as you type

PlayStation can delete all your digital games after 3 years of inactivity (EU)

Apple to increase spend with Broadcom to produce billions more U.S. chips

Japan's Hayabusa2 probe to conduct flyby of Torifune asteroid

How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024)

NoiseLang: Where N = 5 is a Dirac delta

Geosql: A Claude/Codex skill for geospatial data

Tenda firmware (multiple versions) contains hidden authentication backdoor

Structure and Interpretation of Computer Programs Video Lectures (1986)

Copy That Floppy – Cambridge guide for preserving data from fragile floppy disks

Ants: Who looks after the injured in a colony?

Catastrophe theory; geniuses and maniacs (2011)

Every postcard tells a story

GAO: DOE Is Prematurely Excluding Less Expensive Options for Nuclear Cleanup

Canada's only watchmaking school still ticking after 80 years

Local, CPU-Friendly, High-Quality TTS (Text-to-Speech) with Kokoro

Home made GPU escalated quickly [video]

The difference between "today's task" and "accretive work"

Herdr: One terminal to rule them all

The Age of Reading Is Over

Davit, a Apple Containers UI

Kastor – Terraform-style specs for AI agents

LineageOS Statistics

Automate Excel with Python: From manual grind to one-click workflow

Rowboat – Open-source, local-first alternative to Claude Desktop

Neil the Seal Game

Chat Control 1.0 and 2.0 Explained

Why we built yet another Postgres connection pooler

IEEE Rolls Out Large Language Models Training Course

l: A new runtime for k and q

StreetComplete: Fixing OpenStreetMap, one tiny quest at a time

9 Mothers (YC P26) Is Hiring in Austin, TX

Jim's TrueType QR Code Font

Windows Drops Under 60% in Global Desktop OS Share for the First Time in Years

Meta's glasses will turn off the camera if you tamper with the privacy light

Notes on Software Quality

Grok 4.5

Scheme Is a Hoot

Every new car sold in the European Union must include a driver monitoring camera

Chiptune Radio

30papers.com – Ilya's 30 essential ML papers, in a beginner friendly format

How did Windows 95 decide that a setup program ran?

Fixing analog audio on the $2.58 HDMI-to-VGA adapter

Automating AI Away

AI Meets Cryptography 1: What AI Found in Cloudflare's Circl

In San Francisco, Some Home Sellers Now Ask for OpenAI or Anthropic Stock

Dangling Pointer

Firefox new Wrexham shirt sponsor

The Second Derivative: Why No One Understands the AI Boom

FDA rejects petition to set PFAS limits in food

A better way to tie gym shorts (or any drawstring) [video]

Microsoft fire idTech team at Id software

The Art of Computer Programming by Donald E. Knuth

A brewing battle: More IT workers want unions. The industry doesn't

Pug.sh – open-source product analytics

98% isn't much

Chat Control passed first round in EU Parliament

MacSurf 1.68 – NetSurf on OS 9 Released

Camera with transparent display launches for the equivalent of $29

We're extending access to Fable 5 on all paid plans through July 12

Amazon aims to raise $25B from bond sale

An interactive explorer for Benford's Law across real datasets

Free Mermaid Diagram Editor