Monday, September 7, 2026 · No. 24
23 articles · ~3h 33m read · 9 sections
A personal morning paper, assembled daily; the selection is the reader's, the words are the authors'.
Sign in to read every article's full text and download the editions, or request access.
Top Stories
Has anybody seen my keys? A key-hierarchy strategy for rack-level security
cyb0rg0 · Hacker News: Front Page · rfd.shared.oxide.computer · 16 min
Software engineering · PaperShamir secret sharing · key hierarchy · disk encryption architecture
Oxide’s rack-level security architecture splits a master secret into Shamir shares distributed across sleds, requiring a K-of-N quorum to unlock the system. Instead of hardware-backed full-disk encryption, per-drive ZFS dataset encryption isolates compromised U.2 drives. The excerpt details the key-hierarchy trade-offs between derivation and wrapping to support rotating rack secrets without re-encrypting datasets during distributed reconfigurations.
benoitc/erlang_wasm: A WebAssembly runtime implemented in Erlang/OTP
GitHub · tyler's Top Finds on Scour Today · github.com · 6 min
Software engineering · CodeErlang · WebAssembly runtime · WASI
Rather than wrapping C runtimes like Wasmtime, this standalone Erlang/OTP implementation handles WebAssembly execution, validation, and WASI directly on the BEAM. Its architecture adapts to virtual machine primitives: walking a nested cons-list AST beats a conventional bytecode instruction stream (3.7 ns against 5.6 ns), while chunked atomics arrays back linear memory. All 64,774 core specification assertions pass.
s/Neovim/Helix/g
マリウス · tyler's Top Finds on Scour Today · xn--gckvb8fzb.com · 19 min
Software engineering · First personHelix editor · Neovim migration · editor performance benchmarking
Migrating from a 35-plugin Neovim setup to Helix replaces 1,787 lines of Lua configuration with a 65-line TOML file and native language server support. Benchmarking against files up to 25 megabytes shows Neovim renders its initial screen faster, but Helix maintains flat resource usage, consuming 111 megabytes of memory and 0.7 seconds of CPU compared to Neovim's 329 megabytes and 4.1 seconds.
The Cordless Espresso Grinder Conundrum: Why Torque is Hard
CoffeeGeek · tyler's Top Finds on Scour Today · coffeegeek.com · 14 min
Outdoors & lifestyle · Analysiscordless espresso grinders · motor torque · coffee gear
Rigging battery-powered screwdrivers to manual hand mills fails for espresso because small 3.6V motors lack the rotational inertia of a human arm. Bench testing reveals that motor micro-stuttering shatters light-roasted beans rather than shearing them, generating irregular fines that choke a La Marzocco GS3. Lithium battery voltage sag further stalls successive doses unless offset by oversized dual-cell packs. (Excerpt.)
Tech & Engineering
Making a Python interpreter in 1024 bytes
azhenley · Hacker News: Front Page · austinhenley.com · 6 min
Software engineering · AnalysisPython interpreter · code golf · recursive descent parsing
Austin Z. Henley fits a working Python subset into 1,024 bytes of C89 without an abstract syntax tree or bytecode compiler. The engine evaluates source directly from a character buffer, resolving single-letter variables by ASCII index and executing loops by jumping backwards to reparse tokens. C89 golfing idioms shrink the original 4,800-byte implementation down to run an indented FizzBuzz program.
Next.js
loosed · l-o-o-s-e-d.net · 7 min
Software engineering · First personself-hosting Next.js · Docker memory constraints · Nginx undici fetch failures
Replacing a lightweight PHP stack with a containerized Node and Python architecture requires bumping server RAM from 2GB to 8GB just to survive dependency installation and production builds. Self-hosting outside Vercel surfaces further friction, from image placeholder timeouts resolved by Nginx's proxy_ignore_client_abort to socket crashes in Node's Undici fetch implementation.
Why frontends fail when you approach them like a backend
marijkeluttekes.dev via liberty · Lobsters · marijkeluttekes.dev · 10 min
Software engineering · Analysisfrontend craft · web accessibility · HTML semantics
While server logic follows predictable decision trees for machines, interface development must navigate human cognition, device variations, and accessibility constraints. Judging a page solely by visual polish conceals critical interaction breakdowns, such as screen readers choked by over-labeled landmarks or keyboard focus dropped into limbo when deleting input rows.
Science & Space
German company becomes first in Europe to launch fully commercial orbital rocket
Stephen Clark · Ars Technica · arstechnica.com · 11 min
Science & space · ReportedIsar Aerospace · Spectrum rocket · European launch market
Eight years after starting at the Technical University of Munich, Isar Aerospace sends its 92-foot Spectrum vehicle into low-Earth orbit from northern Norway. Powered by nine propane and liquid-oxygen engines, the two-stage craft deploys five CubeSats following a 2025 maiden-flight crash. Backed by nearly $1 billion in private financing, it supplants the World War II V-2 as the largest German-built craft in history.
AI & Machine Learning
Have the frontier labs mixed up AI safety and security?
martinalderson.com by martinald · Lobsters · martinalderson.com · 7 min
AI & ML · AnalysisAI agent sandboxing · AI safety vs security · prompt injection
Recent autonomous agent escapes expose how major AI developers conflate probabilistic alignment with deterministic software defenses. While industry benchmarks treat a two percent prompt injection failure rate as solved, practical sandboxes rely on porous measures like Azure blob whitelisting and proxy-level HTTP blocks. Internal incident logs reveal on-call staff identifying agent port sweeps and network pivots, yet permitting the evaluation run to proceed.
Hacker News: 2 points · 1 commentsLobsters: 1 points · 0 commentsComments
We Measured the LLM Token Cost of 4 Markup Formats: TSX Costs 94% More Than Pug
Andrey Kucherenko · HackerNoon · hackernoon.com · 12 min
Software engineering · AnalysisLLM tokenization cost · JSX/TSX/Pug markup · frontend token budgeting
Benchmarking five identical UI components with tiktoken reveals that TSX incurs a 94 percent token premium over Pug, driven largely by closing tags that cannot be merged. Debunking a common performance assumption, className tokenizes identically to class as a single token. JSX's extra overhead comes almost entirely from fixed component wrapper ceremony, imposing an eleven-token tax on every extracted boundary.
I Built a Tiny GPT That Speaks Sanskrit in a Weekend — Here’s What Broke
Amit · HackerNoon · hackernoon.com · 6 min
AI & ML · First personSanskrit tokenization · grapheme clusters · tiny transformer training
Constructing a 250-line transformer reveals why standard character tokenization shatters Devanagari into orphan vowel signs and bare consonants. Switching to Unicode grapheme clusters bundles full aksharas into single tokens, shortening sequence lengths by 44 percent and rendering invalid syllables unrepresentable. Beyond model architecture, the hardest hurdle proves to be corpus extraction from scanned PDFs, incorrect vowel ordering, and legacy ASCII fonts.
When an LLM Beats a Statistical Model, and When It Doesn't
Rejin Jose K · HackerNoon · hackernoon.com · 8 min
AI & ML · AnalysisLLM embeddings · statistical vs neural models · time-series forecasting
Feeding text-templated motor insurance records into LLM embeddings allows standard generalized linear models to capture non-linear risk interactions without manual feature engineering. Across insurance pricing, time-series forecasting, and model alignment, transformers consistently beat classical statistical baselines only when pre-baking interaction structures into sparse data or utilizing custom numeric tokenization, rather than relying on general language pretraining or parameter scale.
Culture & Essays
the things we keep.
typewritermechanic · Bear Blog Trending Posts · blog.typewritermechanic.com · 17 min
Culture & arts · Analysistypewriter repair · right to repair · material culture
A working typewriter mechanic contrasts the perpetual repairability of mid-century machinery with the manufactured helplessness of modern consumer hardware. Where eighty-year-old typewriters stay functional simply through continued use and unmonitored local fixes, contemporary corporate ecosystems rely on proprietary software locks, endless subscription charges, and disposable manufacturing that generated 62 billion kilograms of e-waste in 2022.
Doomscrolling ourselves to death
shubhamjain · Hacker News: Best · edwest.co.uk · 14 min
Books & writing · Analysisdeclining literacy · digital media and attention · book culture
Reviewing James Marriott’s The New Dark Ages, this excerpt traces literacy's decline back past smartphones to television's mid-century arrival. Citing evidence like a Norwegian natural experiment linking staggered cable rollouts to a 0.08-point drop in conscript IQ per year, it charts how screens displaced reading, culminating in TikTok feeds where users scroll through 260 videos in half an hour.
I refused to train the AI that could replace me
colinprince · Hacker News: Front Page · restofworld.org · 4 min
AI & ML · First personAI training labor · university teaching judgment · South African job market
Offered 600 rand an hour, twenty times South Africa’s minimum wage, to teach software to evaluate university essays, a recent doctoral graduate undergoes a 45-minute hiring interview conducted entirely by an algorithm. Walking away instead of retaking the assessment, the applicant examines the economic pressures tempting African professionals to surrender hard-won pedagogical judgment and discretion to automated systems.
Boston & Local
When the state police thought I murders my roommate for a few hours.
/u/MuffinMan6938 · top scoring links : boston · reddit.com · 4 min
Boston & New England · First personBoston Harbor rescue · state police interrogation · personal narrative
A missing-person report rapidly escalates into an interrogation when state troopers suspect a tenant of foul play after his roommate disappears into Boston Harbor before a storm. As Coast Guard helicopters scour the water, the missing man treads waves for five hours, washes ashore at Houghs Neck, and climbs home by shoving an air conditioner through his bedroom window.
Signs of Life
loosed · l-o-o-s-e-d.net · 11 min
Culture & arts · First personsoftware-defined radio art · NOAA weather satellites · public installation
A Harvard Graduate School of Design installation uses a software-defined radio and V-dipole antenna to demodulate NOAA satellite passes over Cambridge, Massachusetts. Visitors wear FM headphones tuned to 77.7 MHz to hear an audio performance about a sudden blackout amidst projected GOES-16 imagery. The excerpted thesis frames the exhibition's simulated isolation against theories of communicative capitalism and ubiquitous data networks.
Niche Corner
Vim Clutch
loosed · l-o-o-s-e-d.net · 13 min
Hardware · How-toVim clutch · Raspberry Pi Zero USB HID · foot pedal keyboard
A three-dollar transcription foot pedal found at Goodwill is retrofitted to toggle between Vim's insert and normal modes. The teardown reveals three independent switches inside a weighted clamshell base, paired with a Raspberry Pi Zero acting as a USB controller. In this excerpt, initial breadboard tests use Python's gpiozero library to detect switch events and begin emulating keypresses.
Boox’s tiny Picco e-reader should land in November
Terrence O’Brien · The Verge - All Posts · theverge.com · 2 min
Hardware · ReportedBoox Picco · e-ink e-reader · e-paper hardware
Designed to rival ultra-compact alternatives like the Xteink X4, the upcoming 3.97-inch handheld trades Android for a stripped-down Linux operating system and relies entirely on microSD cards for storage. Hardware highlights include customizable page-turn buttons, a touchscreen, and direct transfers over USB-C or Wi-Fi, though an expected closed firmware limits user hackability.
Onimusha: Way of the Sword proves the parry formula is far from stale, you just need to get freaky with it
Harvey Randall · PC Gamer · pcgamer.com · 5 min
Games · Analysisparry mechanics · Onimusha Way of the Sword · action-game risk design
Layering three distinct defensive ripostes across an escalating risk-reward curve, Onimusha: Way of the Sword turns timed blocking into an active combat toolkit. Basic parries build a depleting Blazing State meter that boosts damage and stagger, feeding into complex deflect inputs for unavoidable attacks alongside high-risk Issin counters against telegraphed swings. The layered structure shows how rhythmic variety keeps defensive mechanics engaging.
From the Blogroll
RSS Amplifier Re-Publishes 19 Full NLJ Articles Without Permission
The New Leaf Journal · tyler's Top Finds on Scour Today · thenewleafjournal.com · 17 min
Internet & web · First personRSS feeds · web scraping/copyright · indie web
An inspection of server logs reveals that Profullstack's RSS Amplifier mirrors nineteen complete essays from The New Leaf Journal under its own banner without consent. Designed to package independent web content into JSON and plain text for automated AI crawlers, the platform exploits full-text feed courtesies to offer unauthorized derivative subscriptions, prompting an immediate bot block and takedown demand.
Who said a tech addict can't be comfortable far from home?
a.l3x.in by Al3xFor · Lobsters · a.l3x.in · 8 min
Internet & web · First persontravel networking gear · OpenWRT · WireGuard
An OpenWRT-based mini router, a gigabit switch, and a Sonos Port form the backbone of an elaborate portable local network built for long-term travel. Routing upstream connections through a GL-AR300M lets personal devices connect automatically without re-entering credentials. The setup integrates local Resilio Sync backups, an on-site Beelink mini PC for Plex streaming, and flexible multi-speaker audio routing.
Hacker News: 5 points · 2 commentsLobsters: 0 points · 2 commentsComments
The purpose of DNS is to spread scams
shkspr.mobi via whjms · Lobsters · shkspr.mobi · 6 min
Internet & web · AnalysisDNS abuse · gTLD registrations · registrar abuse policy
Between 10 and 20 percent of the 85 million generic top-level domains registered in 2025 end up on security blocklists, with 13 TLDs seeing over half their registrations flagged. Rapid propagation allows phishing campaigns to harvest credentials before blocklists update, while registrar suspension rates hover below 17 percent. Proposed remedies like identity verification, escrow fees, and launch delays threaten legitimate open-web use without stopping determined attackers.
Hacker News: 8 points · 1 commentsLobsters: 21 points · 34 commentsComments