Top Stories

Claude Fable 5

2511 points · anthropic.com

Anthropic launched Claude Fable 5, the first model in its Claude 5 family and part of a new “Mythos-class” tier that sits above Opus in capability. Fable 5 and Mythos 5 share the same underlying model — Fable is the generally available version with additional safety measures around dual-use capabilities, while Mythos goes only to approved organizations.

At 2,500+ points, this is one of the biggest HN stories of the year. The two-tier release structure is the real conversation piece: it’s a new answer to the question of how labs ship frontier capability without shipping all of it to everyone.

macOS Container Machines

1086 points · github.com

Apple’s open-source container project added “container machines” — fast, lightweight, persistent Linux environments built on standard OCI images, deeply integrated with the Mac. Your username and home directory map automatically into the Linux side, so you can edit in your macOS IDE while building and running inside the container, with no copy step between them.

HN loves this because it’s effectively Apple’s answer to WSL2. For developers who’ve been juggling Docker Desktop licenses, Lima, or OrbStack, a first-party, OCI-native Linux environment on macOS is a big deal.

German court holds Google liable for AI Overviews

883 points · the-decoder.com

A German regional court ruled that Google’s AI Overviews are Google’s own statements, making the company directly liable for false claims they contain. In the case at hand, the AI had wrongly linked two publishers to scams; the court rejected Google’s argument that users should fact-check results themselves.

This is a landmark precedent. If AI-generated search summaries are the publisher’s own speech rather than neutral aggregation, the legal exposure for every company shipping AI answers changes dramatically — at least in Europe.

Building an HTML-first site doubled our users overnight

663 points · mohkohn.co.uk

A consultant tells the story of a regulated utility company whose React-based application form — built expensively by offshore contractors — survived three days in production before customer complaints forced it offline. His team replaced it with an HTML-first, progressively enhanced form, and completed applications doubled literally overnight.

Catnip for the HN crowd’s long-running “you probably don’t need a SPA” debate, but with the rare ingredient of concrete business numbers: fewer loading spinners, better accessibility, measurable conversion gains.

Upcoming breaking changes for npm v12

457 points · github.blog

npm v12, expected in July, flips install-time security defaults: npm install will no longer run preinstall/install/postinstall scripts from dependencies unless explicitly allowed, and that includes implicit node-gyp builds and prepare scripts from git dependencies. Everything is available behind warnings in npm 11.16+ today.

After years of supply-chain attacks delivered via postinstall scripts, the default is finally changing. Short-term pain for packages with native builds; long-term, this closes one of the most-abused doors in the JavaScript ecosystem.

Mercedes-Benz starts large-scale production of electric axial flux motor

403 points · mercedes-benz.com

Mercedes-Benz has begun large-scale production of axial flux motors, the technology developed by its UK subsidiary YASA. Axial flux designs are dramatically lighter and more power-dense than conventional radial flux motors, which is why they’ve so far been confined to hypercars and aviation prototypes.

Mass production by a major OEM is the milestone that matters — it signals the technology has cleared the cost and manufacturing hurdles that kept it niche, and it raises the bar for every other EV maker’s powertrain roadmap.

Chrome moves to permanently drop MV2 extensions

345 points · neowin.net

Google is removing the last escape hatches that kept Manifest V2 extensions — most notably the full-featured uBlock Origin — working in Chrome, with Edge and Opera set to follow. The enterprise policy workarounds that ad-block users relied on are going away.

The end of a multi-year saga. MV3’s limits on request-blocking APIs constrain what content blockers can do, and HN remains deeply skeptical that an advertising company crippling ad-blocker capability is purely about security. Expect another wave of Firefox switching.

AWS Bedrock to require sharing data with Anthropic for Mythos-class models

341 points · news.ycombinator.com

Per AWS’s announcement, Mythos-class models on Bedrock (Fable 5 and beyond) require opting into 30-day data retention with Anthropic so it can detect patterns of misuse that aren’t visible in single exchanges. Retained data leaves AWS’s security boundary, then deletes automatically after 30 days barring safety investigations or legal holds.

For enterprises that chose Bedrock precisely because traffic never left AWS’s boundary, this is a significant shift in the trust model — and the discussion reflects real tension between frontier-model safety monitoring and the data-isolation guarantees cloud customers were sold.

PgDog is funded and coming to a database near you

187 points · pgdog.dev

PgDog, the open-source proxy that makes Postgres horizontally scalable, announced a $5M seed round. The three-person team’s pitch: Mongo and Dynamo exist because Postgres has a scaling problem — so fix the scaling. PgDog already serves 2M+ queries per second in production and has sharded over 20TB, with 1.4M Docker pulls.

The “just use Postgres” movement keeps gaining infrastructure. A drop-in proxy — change your DATABASE_URL and go — is an appealingly boring approach to a problem that usually demands painful migrations.