Top Stories

A Backdoor in a LinkedIn Job Offer

1238 points · roman.pt

A developer walks through receiving what looked like a legitimate LinkedIn recruiting pitch — and finding malware buried in the “take-home assignment” code they were asked to run. It’s a sharp, well-documented look at a social-engineering attack pattern that’s been hitting engineers hard: fake recruiters lure candidates into cloning a repo and running it locally, where an obfuscated payload quietly phones home.

The HN crowd lit up because nearly everyone in tech has gotten one of these messages. The thread is a mix of “I almost fell for this” stories and practical advice on sandboxing anything a stranger asks you to execute. It’s a reminder that the supply-chain threat now extends all the way to the job hunt.

Iroh 1.0

1216 points · iroh.computer

Iroh, the Rust library for building direct peer-to-peer connections between devices, has shipped its 1.0 release. It handles the hard parts of modern networking — NAT traversal, hole-punching, and falling back to relays when a direct path isn’t possible — so app developers can get a reliable connection between two endpoints without standing up their own infrastructure.

Hitting 1.0 is a real signal of API stability, and developers care because peer-to-peer is having a quiet renaissance: local-first apps, syncing without a central server, and lower cloud bills all benefit. The discussion digs into how Iroh compares to libp2p and WebRTC, and where a batteries-included Rust stack fits.

Ask HN: Has Anyone Replaced Claude/GPT with a Local Model for Daily Coding?

1038 points · news.ycombinator.com

This Ask HN thread became one of the day’s biggest, with hundreds of engineers comparing notes on whether a locally-run model can actually replace cloud assistants like Claude or GPT for day-to-day coding work. The consensus is nuanced: local models on capable hardware are now good enough for autocomplete, refactors, and boilerplate, but most people still reach for a frontier model when the problem gets gnarly.

It’s a useful pulse-check on where open-weight models stand in mid-2026 — the gap is closing, hardware (and quantization) is the limiting factor for many, and privacy or cost is increasingly worth the trade-off for a meaningful slice of developers.

Salesforce to Acquire Fin (Formerly Intercom) for $3.6B

314 points · salesforce.com

Salesforce has signed a definitive agreement to buy Fin — the company formerly known as Intercom — for $3.6 billion. The rebrand to “Fin” reflects how thoroughly the customer-support player has repositioned itself around its AI agent, and Salesforce clearly wants that capability folded into its own agent-heavy roadmap.

HN reads this as another data point in the consolidation of the AI customer-service space, where the value has shifted from human-staffed help desks to autonomous agents that resolve tickets end to end. Commenters debate what it means for Intercom’s existing customers and whether Salesforce can avoid smothering the product.

Fox to Buy Roku

326 points · wsj.com

Fox is reportedly moving to acquire Roku, a deal that would hand the broadcaster control of one of the most widely deployed streaming platforms and its valuable advertising and operating-system footprint in living rooms. For Fox, owning the distribution layer — not just the content — is the strategic prize.

The thread is full of speculation about what happens to Roku’s neutral, multi-app platform under a content owner’s ownership, and whether this accelerates the broader collision between media companies and the streaming hardware they depend on.

Hetzner Price Adjustment

456 points · docs.hetzner.com

Hetzner, the budget-favorite German hosting provider, has published a price adjustment for its cloud servers — and given how many indie developers and startups run on Hetzner specifically because it’s cheap, the announcement hit a nerve. Even modest increases ripple through a lot of side-project and bootstrapped budgets.

The discussion is a classic HN cost-of-infrastructure debate: how Hetzner still compares to the hyperscalers even after the bump, where the hidden costs lie, and whether the price-to-performance gap that made it a cult favorite is narrowing.

John Carmack on Fabrice Bellard

327 points · news.ycombinator.com

John Carmack offered public praise for Fabrice Bellard — the famously prolific programmer behind QEMU, FFmpeg, QuickJS, and a long list of seemingly one-person tours de force. When one legendary engineer admires another, HN pays attention, and the thread turned into an appreciation of Bellard’s output and a meditation on what makes a “10,000x” engineer.

Beyond the hero worship, the comments are a fun catalog of Bellard’s projects and the recurring question of how one person ships so many foundational tools across compilers, video, and emulation.

Banned Book Library in a Wi-Fi Smart Light Bulb

403 points · richardosgood.com

A delightfully subversive hack: the author stuffs a library of banned books onto the tiny flash storage of a cheap Wi-Fi smart light bulb, turning a piece of disposable IoT hardware into a covert reading device. It’s equal parts art project, censorship commentary, and embedded-systems tinkering.

HN loves this kind of thing — the writeup gets into the bulb’s constrained hardware, how much text you can realistically cram in, and the playful idea that the most innocuous gadget in your house could quietly hold a forbidden library.

Copper Transport Drug Restores Memory and Clears Toxic Alzheimer’s Proteins

314 points · monash.edu

Researchers at Monash University report that a drug targeting copper transport restored memory and cleared toxic protein aggregates in models of Alzheimer’s disease. It’s an encouraging preclinical result in a field that has seen far more disappointments than wins, and it points at a metabolic angle on neurodegeneration.

The HN thread balances genuine optimism with hard-earned caution — strong animal-model results have failed to translate to humans many times before — while digging into the copper-dyshomeostasis hypothesis and what a credible path to trials would look like.