2026-11-13

AI Frontier Daily Briefing: 2026-11-13

84 stories on the 2026-11-12 (UTC) Hacker News front page; 5 had more comments than upvotes. One story swallowed the day: Jensen Huang resigned as Nvidia CEO, effective immediately (2,412 points/2,346 comments, #1); the WSJ says the board was already preparing to oust him (1,210/1,621); Hugging Face's CEO vowed to keep fighting for open source, and Nvidia agreed in September to buy HF for $12.9B with DOJ inquiries open. Models and products: Google shipped Gemini 4 Hydrogen with a flat $1.50/M input across its full 1M context and a 57% Terminal-Bench 4.1 score (372/244); Anthropic opened its IPO, Nasdaq ticker ANT, trading expected Nov 19, Q3 revenue $17.0B up over 12x YoY (728/735); Jane Street open-sourced its Socratic Tutor agent skill (625). Security: a race condition in Apache mod_http2 is a remote RCE, CVE-2026-119618, affecting 2.4.55 to 2.4.70 with 64% of cloud environments vulnerable (348/187); a 22-year-old PostgreSQL type-confusion bug became RCE, CVE-2026-6460, exploitable on every major managed cloud, with the Nov 9 fix release carrying 52 CVEs. Tools and engineering: Rust 1.100 stabilizes the never type after 10 years and 5 failed attempts (306); Makepad's Relax JIT cuts a 3-minute cargo build to an 11-second first frame; GitHub Actions workflow lockfiles went GA; an Electron app rewritten in Rust dropped from 675 MB to 91 MB; ExcalidrawZ brings native Excalidraw with an MCP server; Google released A2UI 1.0, an open generative-UI protocol. Agents: smolmaxxing runs a 2B model on a 1GB TV box and a 1.7B model on a 2013 iPad Air (213/75); Parcha open-sourced AgentRun, a self-improving agent platform; zigzag replaces a $300 embroidery machine's subscription app and ships an MCP server. Model distribution: Pirate Face lists 25,399 model torrents with 37,500 live seeders; LibreAGI opens a seed bank for open-weight models. Industry: Microsoft Defender silently uploaded an unreleased app, 224 MB in one day; Cornell researchers found data centers pay only 38% of grid-upgrade bills; Jane Street interviews now allow LLMs on-site; Humble Bundle's redesign removed 2FA (354/215); Nintendo's DMCA sweeps have taken down nearly 9,000 repos. Hardware and fun: a 40-euro USB-C hub becomes a Switch 2 dock via 648 bytes of firmware patches; 93% of paint splatters parse as valid Perl; an agent runs a fully instrumented garden on a 300-euro sensor budget; a 2016 essay on why correctness is essentially hard hit the front page again. The US shift adds 9 items: a 12-hour Microsoft 365 outage with no root cause, Apple's Foundation Models framework opening to Claude and Gemini, AI-built apps drowning Apple's review queue, Lambda billing idle memory for 7 minutes, The Economist on an AI crash, and more. 38 items total.

84 stories on the 2026-11-12 (UTC) front page, 5 of them with more comments than upvotes. One event swallowed the day: Jensen Huang resigned as Nvidia CEO, effective immediately, 2,412 points to 2,346 comments at #1, with the WSJ reporting the board had been preparing to oust him. Elsewhere, Anthropic opened its IPO and Google shipped Gemini 4 Hydrogen. Security produced two hard RCEs: Apache’s HTTP/2 module and a 22-year-old PostgreSQL bug. The US shift adds 9 more: a 12-hour Microsoft 365 outage, Apple’s Foundation Models opening to third-party models, AI-built apps overwhelming Apple review, Lambda’s idle-memory billing, and more. 38 items.

1. Jensen Huang resigns as Nvidia CEO, effective immediately

The most valuable company on earth, and the CEO is gone?

AP reports Jensen Huang has resigned as Nvidia CEO, effective immediately, drawing 2,412 points and 2,346 comments, the #1 story of the day. CFO Colette Kress takes over as interim CEO. The immediate backdrop is Megaspeed, a Singapore company alleged to be a conduit for Nvidia GPUs into China: short seller Culper Research estimates it accounts for roughly 20% of FY2026 revenue, about $43.2 billion, and imported 50,000 more GPUs than Nvidia disclosed to U.S. authorities. Huang’s relationship with Megaspeed managing director Alice Huang was reported in recent days by the NYT, Bloomberg and the WSJ. If you hold NVDA or price anything along the compute supply chain, this is the anchor for all of it. Source · HN discussion

2. The board was ready to fire him, so he resigned first

Miss by a day and the headline says ‘ousted,’ no?

The WSJ reports Nvidia’s board was preparing to remove Jensen Huang, 1,210 points and 1,621 comments, the second-most-commented story of the day. The sequence: starting Nov 9, reporting documented his relationship with a Megaspeed executive; Huang acknowledged the relationship in an internal memo and the company announced an independent investigation; the board’s move followed. Reuters added the same day that sources say he also had a relationship with a second Nvidia employee, and Forbes reported a third. For anyone who studies corporate governance, this is a ready-made case library on star-CEO accountability. Source · HN discussion

3. A $12.9B deal still undelivered, and the buyer’s boss is gone

Open source lost its patron, so does the deal hold?

Hugging Face CEO Clem Delangue responded to Huang’s exit, calling it a “really sad day” and writing “we’ll keep fighting for open-source AI, harder than ever.” Context: Nvidia agreed in September to acquire Hugging Face for $12.9 billion, its second-largest deal after the $20 billion purchase of Groq’s assets in December 2025; the DOJ has opened inquiries into the deal’s competitive impact, and close is expected in the first half of 2027. Huang had recently championed open-weight models, including a policy letter urging the U.S. government not to over-restrict them. If you rely on Hugging Face hosting or inference infrastructure, this deal just gained another layer of uncertainty. Source · HN discussion

4. Gemini 4 Hydrogen ships with 1M context at a flat $1.50/M input

Agent workloads priced like wholesale?

Google DeepMind released Gemini 4 Hydrogen on Nov 12, positioned as the daily-driver model for agentic workflows, 372 points and 244 comments. Specs: 1M input context and up to 1M output tokens, priced flat across the whole window at $1.50/M input and $7.50/M output, with four thinking tiers including a new xhigh. Benchmarks: 57% on Terminal-Bench 4.1 versus 18.2% for Gemini 3.8 Flash, finishing tasks 2.5x faster at the high setting; 51 on the Artificial Analysis Intelligence Index, just above flagship Argon’s 50. Available the same day in the API, AI Studio and the Gemini app. If you run agent pipelines, benchmark it against your 3.8 Flash workloads before migrating. Source · HN discussion

5. Ticker ANT: Anthropic opens its IPO with Q3 revenue of $17B

A 12x-growth story, and retail gets how many shares?

Anthropic put its IPO page live, 728 points and 735 comments. The schedule: roadshow from Nov 10, pricing expected Nov 18, Nasdaq trading expected Nov 19 under the ticker ANT; you can file an indication of interest through Schwab, Fidelity, Robinhood and two other brokerages, with no guarantee of allocation. Prospectus figures: $17.0B revenue in the quarter ended Sept 30, up more than 12x year over year; over 11,900 customers contributing $100K or more annually; a $23.3B net loss including a $21.9B non-cash charge from fair-value changes on convertibles and SAFEs. If you plan to participate, read the prospectus and focus on revenue concentration and compute purchase obligations. Source · HN discussion

6. Jane Street open-sourced an agent skill that refuses to give answers

An AI that tutors instead of answering, will it stick?

Jane Street published Socratic Tutor in its agent_skills repo, 625 points, 143 comments. It’s a SKILL.md markdown spec: triggered by phrases like “teach me” or “quiz me,” it splits a topic into 4 to 10 subskills, runs 3 to 5 diagnostic questions, shows a skill map, then asks one Socratic question at a time. Mastery is scored 0 to 5 per subskill; leveling up requires at least two checks, one of them unprompted recall; explanations are allowed only after 2 to 3 failed attempts, followed by re-testing. If you want teaching behavior from your own agents, this is a process definition you can lift directly. Source · HN discussion

7. Remote RCE in Apache HTTP/2, 64% of cloud environments vulnerable

Unpatched servers become the honeypots again?

Wiz disclosed CVE-2026-119618, 348 points, 187 comments. The root cause is a race condition in mod_http2’s assign_headers() when threads share resources, leading to heap corruption; an unauthenticated attacker can trigger it remotely and execute code with web-server privileges. Affected: Apache 2.4.55 to 2.4.70, fixed in 2.4.71. The flaw was reported independently by Anthropic and by Google Cloud’s vulnerability research team. Wiz’s scan says 64% of cloud environments run a vulnerable version, 51% of those publicly exposed; the short-term mitigation is Protocols http/1.1 to disable HTTP/2. Run self-hosted web services? Check your version first, then pick a path. Source · HN discussion

8. A 22-year-old Postgres bug is now RCE on every managed cloud

This upgrade notice is the one you don’t delete as spam

Security researcher Mehmet Ince disclosed CVE-2026-6460, 70 points. The bug is a time-of-check/time-of-use flaw in mutable composite row types introduced in May 2004: PREPARE stores a composite value, ALTER TYPE changes an attribute’s type without rewriting the bytes, and EXECUTE reads the old bytes as the new type. A lowest-privileged database role can trigger it; in his PoC he forges pointers to reach a direct system() call, demonstrated on PostgreSQL 18.6 and ported to Aurora, RDS, Azure, AlloyDB, Supabase and other managed services. The Nov 9 fix release carries 52 CVEs, and the same day upstream shipped maintenance releases including 18.7 and 17.12. If you run databases, there is no wait-and-see option on this one. Source · HN discussion

9. Rust’s never type finally lands after 10 years, 5 failed tries

Time to delete those workarounds you wrote around it?

Rust 1.100.0 is out, 306 points. The headline is stabilization of the never type !: the official blog counts 10 years and 5 failed stabilization attempts, and Result<T, !> can now be written anywhere, with Infallible becoming an alias. Also stabilized: the Allocator API for plugging custom allocators into Vec and Box, DropGuard (a closure that runs on every exit path including ? and panic), and Cargo’s min-publish-age for cooling off freshly published dependencies. Rust users: after upgrading, sweep out the compatibility layers you wrote around the never type. Source · HN discussion

10. What takes cargo 3 minutes, this JIT does in 11 seconds

An era where compiling outlasts bug-writing, ending?

The Makepad team released Relax, 64 points: a Rust live compiler and JIT runtime written in Rust, with no rustc, LLVM or linker in the loop. Functions compile lazily on first call and hot code tiers up from interpreter to O3 in the background. On an M4 MacBook, a large 3D project reaches its first frame in 11 seconds from a clean checkout (cargo: about 3 minutes), 1.15 seconds on the second run; the cost is optimized code running 1.12x to 1.24x slower than cargo build --release (geomean). It’s aimed at the dev edit-run loop; release builds still use rustc. Linux x86-64 and macOS arm64 only, MIT license. If cargo’s loop time is your bottleneck, try it for iteration. Source · HN discussion

11. GitHub Actions workflow lockfiles go GA, tag poisoning has a fix

Next time a tag gets hijacked, can CI catch it itself?

hugovk lays out the current state of Actions supply-chain hardening, 323 points, 64 comments. The backdrop is the tj-actions/changed-files incident, where a tag was repointed to malicious code, and Git tags are mutable. On Oct 28 GitHub made workflow lockfiles generally available: workflows keep using vX.Y.Z tags while .github/workflows/actions.lock records the resolved commit SHA plus repo and owner IDs. The gh-actions-lock tool generates the lockfile, gh actions-lock --verify checks it as a separate CI job, and zizmor supports lockfiles from v1.32.0. CI maintainers can adopt locking alongside Dependabot cooldowns. Source · HN discussion

12. 675 MB to 91 MB, a full writeup of rewriting an Electron app in Rust

Drop Chromium and the world goes quiet?

An indie developer rewrote Jot, a note-taking app, from Electron to Rust, 38 points. Installed size fell from 675 MB to 91 MB and the DMG from 302 MB to 44 MB, mostly by dropping a Chromium runtime that served a notes list. The architecture moved to a single process: view and state live in one struct with no cross-process messages, blocking work goes to threads, and a shared core crate powers the app, CLI and MCP server. Code volume is roughly flat, about 76,000 lines of Rust versus 73,000 of TypeScript. The app is paid, $9. If you’re evaluating Tauri or Rune, this is a full before-and-after ledger. Source · HN discussion

13. A native SwiftUI Excalidraw for Mac, local files plus an MCP server

Whiteboards join the agent toolbox?

ExcalidrawZ is a native Excalidraw client written in pure SwiftUI, 87 points, MIT-licensed, about 1.7k stars. Files stay local by default with optional iCloud sync; it supports version checkpoints, Apple Pencil gestures, Mermaid-to-diagram and PDF export. A built-in AI assistant can read, create and revise drawings, and an MCP server lets external agent clients drive it. Available on the App Store and as a GitHub release. If you want a local-first whiteboard that agents can also call, this combination installs today. Source · HN discussion

14. Google takes A2UI to 1.0, agents can render native UI directly

One day the agent skips the reply and just hands you a form?

Google announced A2UI 1.0 on its developer blog, 39 points: an open protocol for generative UI, where an agent outputs a description of what to show and each host app renders it with native components, with sensitive data bound server-side so it never reaches the model. Open-source renderer SDKs cover the web (React, Angular, Lit), Flutter, SwiftUI and Jetpack Compose, and it works inside MCP Apps, rendering screens directly in assistants like Claude and Gemini. Named partners include Atlassian, Bloomberg and ByteDance. Building agent products without marrying one vendor’s UI stack? This protocol is worth tracking. Source · HN discussion

15. Write down your AI red lines, quit, speak up, act when crossed

If that day comes, will you actually do what you wrote?

yourairedlines.com launched, 30 points, 23 comments: an account-free pledge site where you write concrete triggers for AI, what would make you act and what you’d do, with actions like quitting, speaking up or getting involved, plus a shareable link or anonymous posting to a public wall. The idea descends from Joseph Rotblat leaving Los Alamos on conscience (the “Rotblat Line”), with the personal-document concept credited to Lizka Vaintrob; the page cites Harkin et al. 2016, a meta-analysis of implementation intentions across 138 trials and 19,951 people, as evidence writing it down helps, while stating it’s a guide, not a promise. Working in AI with reservations? Ten minutes well spent. Source · HN discussion

16. A 2B model on a 1GB TV box, and a 2013 iPad Air wasn’t spared either

The old devices in your drawer get a second career?

The smolmaxxing project benchmarks LLMs on the lowest-end hardware, 213 points, 75 comments, MIT-licensed. Two devices so far: a Xiaomi TV Box S 3rd gen (Amlogic S7D quad-core A55, about 1GB usable RAM, Android 14, no root) runs Qwen3.5-2B at 7.7 tok/s; a 2013 iPad Air (Apple A7, about 700MB usable RAM, iOS 12.5.7) runs the 1-bit Bonsai-1.7B at 24 to 26 tok/s, and the 16B MoE Ling-mini-2.0 reaches 5.1 tok/s via expert paging. The trick is a patch set on llama.cpp: custom 1-bit LUT and repacked 2-bit and ternary kernels for ARM NEON, vocabulary-row trimming, and paging MoE experts in from flash. Want models on old hardware? The bench directory has full logs. Source · HN discussion

17. An open-source self-improving agent platform, 18 cents a review

Agents keeping their own notes, same mistakes twice?

Parcha Labs open-sourced AgentRun, 54 points, Apache-2.0. It adds self-improvement, durable execution and a control plane on top of harnesses like Claude Code, Codex and OpenCode: after every run the agent gets an extra turn to say what to keep, artifacts are validated by code checks and a grader and committed to git; kill the server mid-run and it resumes; per-tool approvals and per-run spend caps included. The README’s case study: an external code-review vendor went from $180/month to $6,451, so they built their own reviewer at 18 cents per review, catching 1.6x the real bugs a comparator found across 30 unseen PRs; self-hosting runs about $25/month. If you want agent memory without vendor plumbing, deploy this. Source · HN discussion

18. $300 embroidery machine, a subscription wall, one open-source answer

You bought the machine, and now you rent the software?

The author bought a $300 Brother Skitch (PP1) embroidery machine whose companion app requires a subscription, and wrote ZigZag instead, 175 points, 72 comments, Apache-2.0. It’s a visual editor in Rust and egui that converts SVG or traced images into PES, DST, JEF and other stitch formats, with more than ten stitch types built in. An MCP server on localhost port 7878 lets agents like Claude Code edit designs directly; the Bluetooth protocol was reverse-engineered, and the README warns against firmware updates. Stitch planning runs in under 12 ms on the GPU. Hardware hackers who want agents doing physical craft: this is a complete template. Source · HN discussion

19. 25,399 torrents and 37,500 seeders for model weights

Centralized bandwidth bills, who keeps paying them?

Pirate Face argues torrents are the natural shape of model distribution, 35 points, 16 comments. The logic: model files are immutable, everyone downloads the same bytes, so one model means one swarm; content-derived naming makes the hash the name, and v2 torrents (BEP 52) compute Merkle roots per file so multi-file model hashes are order-independent. Their numbers: 25,399 model torrents listed, 37,500 live seeders, a tracker at udp://tracker.pirateface.co:6969, plus a Model DHT for trackerless discovery; the article cites DeepSeek-V4.1-Flash-1017 as 48 safetensors shards totaling 510 GB. If you distribute large models, this piece lays out why seeding beats serving. Source · HN discussion

20. LibreAGI opens a seed bank for open-weight models

If the official repo dies, do the weights survive?

LibreAGI launched, 101 points, 21 comments: a private BitTorrent tracker built to preserve open model weights at risk of disappearing. Rules: safetensors, GGUF and ONNX only; licenses limited to open ones like Apache-2.0, MIT and the Qwen Community License; files are verified against source commits and staff review each model before distribution. Incentives pay by scarcity, a model with a single copy earns 4x the base rate, and a signed public catalog records every model’s hash and source so others can rebuild the swarms even if the site dies. Worried about single-point hosting failures for models? This is a second option besides your own cold backup. Source · HN discussion

21. Defender uploaded unreleased software without asking, 224 MB a day

My binaries hit Microsoft’s servers first, on whose say-so?

Developer Garrett Stimpson caught Microsoft Defender automatically uploading his unreleased builds, using Hodometer, a network-monitoring tool he wrote, 60 points, 27 comments. The numbers: 217 file submissions logged over three months, 201 of them builds of a single Go test program; MpCmdRun.exe sent 224 MB to Azure storage in one day, 2.8 GB over 30 days; support logs held 85 records with full command lines, 78 containing his username and project directory names. The toggle sits under Windows Security, virus and threat protection, manage settings, automatic file submission, defaulting to automatic sending; a local agent did most of the investigation. Shipping unreleased software on Windows? Go turn it off now. Source · HN discussion

22. Data centers cover just 38% of the grid-upgrade bill

AI’s power bill lands on the poor again?

Cornell’s Fengqi You team published in Nature Energy on Nov 9, 97 points, 87 comments. Their tally: of an $8.25B U.S. grid-infrastructure bill in 2025, data centers paid $3.12B (38%), leaving 62% largely to residents; the extra energy cost for the lowest-income households reaches up to 28% of income; transmission investment rose from $2B in 2020 to $34B in 2025; wholesale power in the hardest-hit hubs rose over 10%, 15% in Virginia and 20% in California’s southern Bay Area. Each GW of data center capacity supports roughly 15,000 jobs. The authors propose charging data centers for new demand and tying tax incentives to job creation. If your AI-infra cost model stops at PUE, this paper adds the social side. Source · HN discussion

23. Jane Street interviews change: LLMs allowed, less code-writing

When everyone can generate code, what do interviews test?

Jane Street’s official blog says new interview formats began trialing this summer for campus on-sites, 134 points, 119 comments. The change: some rounds involve less code-writing, more high-level software design and judging code quality and intent, with LLM use allowed; the traditional no-LLM coding rounds mostly stay. The stated rationale: LLMs made generating code cheap, so screening shifts to taste about what to build, choosing abstractions that last, and making sure what got built is actually correct. Experienced-hire interviews are unchanged for now. Interviewing for quant or big-tech engineering? Checking AI output is becoming the tested skill. Source · HN discussion

24. Humble Bundle’s redesign removed 2FA on day one

AI-rushed code can lose the login protection too?

Multiple outlets report Humble Bundle’s site redesign stripped out most account security, 354 points, 215 comments. Confirmed changes: two-factor authentication removed entirely, and password or email changes no longer verify current credentials. The community suspects a vibecoded rushed rewrite, typical traces were found across pages and behavior, with PC Gamer and Kotaku both covering the security gaps. For developers it’s a citable case: when an AI-generated rewrite lands on the account system, security requirements don’t generate themselves. Have a Humble account? Check your payment methods first. Source · HN discussion

25. 400+ repos gone in a day, Nintendo’s DMCA sweep rolls on

Moving to self-hosted Git makes you safe?

IGN reports a fresh Nintendo DMCA sweep on GitHub, 215 points, 143 comments, targeting Switch emulators and modchip firmware. Earlier waves: 401 repos taken down on Aug 17 alone (311 of them Suyu forks), a notice covering 8,500+ Yuzu-related repos in October, and nearly 9,000 cumulative removals since 2024. What the survivors share: they left GitHub. Eden, Citron and Ryubing all moved to self-hosted Git infrastructure, beyond the reach of DMCA notices. Building emulators or preservation projects? Where you host is part of the legal strategy. Source · HN discussion

26. €40 USB-C hub becomes a Switch 2 dock via 648 bytes of patches

The official dock costs that much, and 648 bytes beat it?

nozomi’s blog documents turning an ordinary USB-C hub into a Switch 2 dock, 138 points, 50 comments. The hard part is TV mode’s proprietary handshake: the Switch checks dock identity with vendor-defined messages under Nintendo’s SVID 0x057E, and DisplayPort Alt Mode alone isn’t enough. The author wrote a ~540-byte patch into the VL103 PD controller’s 8051 firmware to impersonate the official dock’s product ID (2062) and answer version commands, then a 108-byte patch for the RTD2142 HDMI chip to mark HDR AVI InfoFrames as BT.2020 instead of BT.709, fixing washed-out colors. TV mode plus HDR works, PCs still work; VRR doesn’t. Want to skip the dock tax? Both firmware patches are in the post. Source · HN discussion

27. 93% of paint splatters are valid Perl programs, an actual paper

Perl programmers, crying or laughing?

A SIGBOVIK 2019 paper ran the experiment: OCR over 100 paint-splatter images found 93% parse as valid Perl programs, with seven counterexamples, 559 points. The paper maps each splatter to its Perl source in a gallery, and earned an “Unwitting Participation Ribbon” for contributing a genuine artifact. Perl’s reputation for running no matter what you write gets the controlled-experiment treatment. Choosing a first language for a team? This picture is more persuasive than any debate. Source · HN discussion

28. €300 of sensors to grow a €60 lettuce, run entirely by an agent

A lakehouse for growing vegetables, devotion or overkill?

Developer Jatorre fully instrumented a garden of about 2 square meters and handed daily control to an agent, 131 points, 70 comments. The setup: 11 Ecowitt sensors (8 soil probes, a weather station, a leaf-wetness sensor, about €300) plus a 4K camera, all POSTing into his own LakehouseBox with Iceberg tables, over 4 million readings since Sept 18. The agent runs at 08:45 Madrid time, queries history, forecast and photos, keeps a journal and sends a morning email. Watering uses “the most absurd option that works”: an old Android phone next to the valve box auto-taps through Rain Bird’s Bluetooth-only app. The first end-to-end test shifted a start time and moved soil moisture from 53% to 66%. Want to see how agent autonomy holds up over weeks? The logs are all public. Source · HN discussion

29. Why correct software is essentially hard, a 2016 essay resurfaces

So the bugs were never entirely the programmer’s fault?

Ron Pressler’s 2016 essay “Why Writing Correct Software Is Hard” climbed the front page again, 329 points, 147 comments. The argument: correctness costs are essential, not accidental. Verification is undecidable (halting problem, Rice’s theorem); even restricted to succinctly representable finite-state machines, symbolic model checking remains PSPACE-complete; and modularity doesn’t save you, since verifying the composition of correct modules can be intractable, illustrated by encoding the Goldbach conjecture in 10 lines of Java. The conclusion echoes No Silver Bullet: no general solution exists; study real programs and bugs, and find tractable special cases. Pushing or resisting formal methods on your team? This essay is common ground. Source · HN discussion

30. Microsoft 365 down 12+ hours, and still no root cause

All that cloud migration, and email still won’t send?

Microsoft 365 suffered a major service degradation on Nov 12, hitting #5 on the HN front page with 1,022 points and 860 comments. Outlook email was unavailable across the United States: New York City’s Department of Education emailed staff that messages couldn’t be sent or received; European users reported Outlook down from early morning and Teams couldn’t start new chats with unseen contacts. Microsoft’s status page kept updating for over 12 hours without naming a cause: servers returned to service became unresponsive again once they took traffic, and the team was still analyzing diagnostic data with networking and platform experts. If your team runs on M365, “long outage, no root cause” is the scenario to add to your DR drills. Source · HN discussion

31. Apple’s Foundation Models framework now speaks Claude and Gemini

One Swift API, and any model can plug in?

Apple updated its Foundation Models framework documentation, 231 points, 32 comments. The changes: 1. the framework extends beyond on-device Apple models and Private Cloud Compute to server-side models, with Claude and Gemini listed as supported; any provider can ship a Swift package conforming to the Language Model protocol, with tool calling and guided generation on the same API. 2. New Dynamic Profiles define sets of model, temperature, reasoning level and tools, and swap between them within a single continuous session, sharing the transcript across switches. 3. Small Business Program developers with under 2 million first-time downloads get Private Cloud Compute access at no cloud API cost. Building iOS apps and want to swap models without rewriting? This is now the official path. Source · HN discussion

32. 10-20 new AI-built apps a day are overwhelming Apple’s review queue

Human devs, caught in AI’s backlog?

Synth Anatomy reports Apple’s app review is buckling under the flood of AI-generated apps, 184 points, 206 comments. An estimated 10-20 new iOS music apps now enter the market daily, and reviews that typically took 24-48 hours have stretched to weeks. Cases: Unfiltered Audio’s Sinusoidal Run Rhythm was rejected four times: once over a hallucinated claim that “Polyharmonic” was a licensed audio technology requiring documentation, once with the MIDI sibling flagged as spam for resembling the main app. The back-and-forth ran more than a month; AudioThing’s Materia took 25 days, and its Hainbach collaboration Seconds has been in review for 29 days; Pittsburgh Modular shipped the Microvolt 3901 VST on Oct 27, the iOS version only on Nov 12. Shipping iOS apps? Re-plan the review buffer in your schedule. Source · HN discussion

33. Zen 6’s architect says the dense 6c core is now the top performer

Four generations of big-little, and the little one wins?

Chips and Cheese sat down with Mike Clark, AMD’s Zen chief architect of 33 years, at AMD In-Depth, 226 points. The reversal: what used to be the dense “small” core is now the top performance part. Zen 6c enables the full 4MB of L3 per core, making it the highest-IPC core in the family; the part described packs 32 Zen 6c cores with 128MB of L3, and its vector scheduler is bigger than the high-frequency Zen 6’s. The classic design continues as the high-frequency variant. Spec’ing servers or desktops? Re-evaluate what the 6c role means when full parts lists land. Source · HN discussion

34. Lambda bills idle memory for 7 minutes after your request ends

The function’s idle, but the meter keeps running?

Hosting platform Easel benchmarked AWS’s October launch of Lambda Web Functions, 76 points, 30 comments. AWS documents that memory is billed for an execution environment’s entire lifetime but not how long idle environments linger: Easel measured six environments still accruing memory charges for 313-411 seconds after their last request, with no configurable idle timeout. A 200 ms request drags roughly 1,700x its own duration in metered memory time, and memory accounted for about 88% of computed compute-plus-request cost at list prices. Easel went back to running its own compute and found it faster. Running sparse-traffic apps across many environments? Give this hidden cost its own line in the architecture review. Source · HN discussion

35. The Economist expects an AI crash, but not a cataclysm

Even the optimists are giving ground now?

The Economist’s Leaders column on Nov 12, 97 points, 81 comments. The piece concedes the AI boom is wobbling: the Huang scandal rocking the top chipmaker, a Democratic midterm win promising scrutiny of data centers, and Anthropic’s listing expected next week as possibly the largest AI IPO ever. Its argument: the fallout need not be a 2008-style cataclysm, per the subtitle “not necessarily a financial cataclysm.” The top HN thread instead debated “circular financing”: Nvidia, OpenAI and Anthropic investing in each other so revenue numbers reinforce themselves, with Enron comparisons upvoted and rebutted (circular financing isn’t itself illegal). Long or short AI? Both sides’ ammunition is in here. Source · HN discussion

36. A restaurant owner shipped a Claude Code app and asked me to run it

Nobody told him about the other 90%, right?

Blogger Alex (bacon roll) describes a restaurant-owner friend who built a staff task-management web app with Claude Code, 91 points, 35 comments. The demo held up: clean layout, sensible flow, data surviving a page refresh. On inspection: no responsive layout for the phones his staff actually use, no login so nothing is attributable, no error states, no handling of empty or duplicate data, no translations for a multilingual kitchen; the “persistence” wouldn’t survive anything beyond a refresh. The author’s point: most code in real software serves paths a demo never walks: error handling, concurrency conflicts, worst cases. Vibecoding skips exactly that part. Shipping AI-generated apps for real? Decide first who owns ops and the failure paths. Source · HN discussion

37. Your boot screen, but as a live tree of systemd jobs

Better than watching scrollback for 12 seconds?

bootvine hit the front page with 367 points and 147 comments: a Rust boot animation that draws systemd’s startup stages as a tree growing live on the boot console, rendered straight to the VT. The repo lives on Codeberg at v0.1.3, with Nix packaging and Woodpecker CI included. The hottest comments were about boot time itself: one reader clocked 12 seconds from initrd to fully loaded in the screenshot, and others argued UEFI initialization and DDR5 memory training routinely take longer than the entire OS boot. Into Linux customization or embedded UI? This makes the boot wait something you can watch. Source · HN discussion

38. One prompt, one HTML file, 34 games built by Claude Fable 5.2

Game devs, time to worry yet?

fable52.games reached the front page, 69 points, 58 comments: an arcade of 34 browser games, all presented as built autonomously by Anthropic’s Claude Fable 5.2. Most come from a single prompt, many as one self-contained HTML file, with the prompt shown next to each game and every line of source inspectable. The showcase piece, Saltline, is a 1.4 MB pure-HTML 3D FPS with zero external assets, credited as a single 8-hour autonomous build, where drones and robot dogs hunt you through a rainy container port. The catalog lists 7 FPS titles and 3 simulations alongside racing, open-world and sports entries. Gauging how far autonomous long-horizon coding has gotten? Here’s a row of playable data points. Source · HN discussion