news

Zed 1.0, Warp open source, and Mistral Medium release

29 Apr 2026
Zed 1.0
Zed 1.0

The code editor Zed has officially reached its 1.0 release, marking a major milestone for the project. This launch delivers the fully realized platform that its creators originally set out to build, completing their initial development goals.

Comments
Copy Fail
Copy Fail

Security researchers have identified CVE-2026-31431, a minimal 732-byte Linux local privilege escalation vulnerability dubbed Copy Fail that affects major distributions since 2017. The exploit uses a single Python script to bypass file-integrity tools and cross container boundaries without relying on race conditions or distribution-specific offsets. Discovered by Xint Code, this straight-line attack works universally across Ubuntu, Amazon Linux, RHEL, and SUSE environments.

Comments
HERMES.md in commit messages causes requests to route to extra usage billing
HERMES.md in commit messages causes requests to route to extra usage billing

A bug in Claude Code routes API requests to extra usage billing instead of the included Max plan quota when the case-sensitive string HERMES.md appears in a git repository's commit history. This flaw has caused some developers to silently burn through hundreds of dollars in additional charges before realizing their standard subscription was bypassed.

Comments
FastCGI: 30 years old and still the better protocol for reverse proxies

Marking its 30th anniversary, the FastCGI protocol remains a superior choice for reverse proxies. Its unique architecture successfully avoids the inherent security vulnerabilities commonly associated with traditional HTTP reverse proxying setups. This enduring reliability makes it a highly secure and efficient foundation for modern web infrastructure.

Comments
Online age verification is the hill to die on
Online age verification is the hill to die on

The debate over online age verification has emerged as a critical, non-negotiable battleground that will serve as foundational infrastructure for all future digital regulations. Because of its sweeping implications, tech stakeholders and everyday users are urged to recognize that this is a pivotal policy fight they cannot afford to ignore.

Comments
Bugs Rust won't catch
Bugs Rust won't catch

Despite the safety guarantees of the Rust programming language, an external audit has uncovered 44 vulnerabilities in uutils, the Rust reimplementation of GNU coreutils. Canonical disclosed these flaws ahead of the 26.04 LTS release, demonstrating that memory-safe languages cannot prevent all software bugs.

Comments
We need a federation of forges
We need a federation of forges

Advocates are pushing for a decentralized federation of software forges to build a next-generation social coding platform. This proposed network would interconnect various open-source project hosting services, offering a distributed alternative to centralized repositories. By shifting away from single corporate entities, the federated model aims to give developers greater autonomy and control over their code.

Comments
An open-source stethoscope that costs between $2.5 and $5 to produce
An open-source stethoscope that costs between $2.5 and $5 to produce

An open-source, research-validated stethoscope has been developed that costs between $2.50 and $5 to produce. The GliaX/Stethoscope project provides the complete manufacturing plans entirely for free, aiming to drastically improve global access to essential diagnostic equipment.

Comments
How ChatGPT serves ads

OpenAI's new ChatGPT advertising platform utilizes a two-part system that injects structured ad objects directly into the AI's conversational response streams. On the merchant side, a dedicated browser tracking SDK called OAIQ monitors and reports user product views to complete the ad delivery loop.

Comments
OpenTrafficMap

A recent discussion on the feasibility of open-source mapping alternatives to Google and Waze highlights that while traffic congestion data is largely solved, maintaining accurate points of interest remains a significant challenge. Developers propose collaborative open platforms to streamline business data updates and reduce the workload for owners. However, participants acknowledge that overcoming the massive user bases and algorithmic moats of major tech monopolies will be highly difficult.

Comments
Laws of UX
Laws of UX

The Laws of UX provides a curated collection of best practices for professionals building user interfaces. Designers can leverage this resource to apply proven principles that enhance usability and create more intuitive digital experiences across their software products.

Comments
Soft launch of open-source code platform for government
Soft launch of open-source code platform for government

A new open-source code platform has been soft-launched for government organizations. This initiative enables these public sector bodies to collaboratively develop and independently publish software.

Comments
Warp is now open-source
Warp is now open-source

Warp has officially transitioned to an open-source model, allowing the developer community to participate directly in the platform's ongoing development. Contributors will use an agent-first workflow managed by Oz, the company's cloud agent orchestration platform, to build and manage the project.

Comments
Why I still reach for Lisp and Scheme instead of Haskell

Reader discussions highlight that developers prefer Lisp and Scheme over Haskell because rich standard libraries in dialects like Racket eliminate the need to write custom macros or bespoke domain-specific languages, while s-expressions provide a superior, universal format for manipulating complex data like JSON and XML. Furthermore, the community emphasizes that adopting these languages offers a transformative paradigm shift that deeply reshapes a developer's foundational understanding of software architecture.

Comments
Kyoto cherry blossoms now bloom earlier than at any point in 1,200 years
Kyoto cherry blossoms now bloom earlier than at any point in 1,200 years

Kyoto's cherry blossoms are currently blooming earlier than at any point in the past 1,200 years, based on the longest continuous record of a natural phenomenon on Earth. A detailed analysis of this extensive historical dataset highlights a significant acceleration in the trees' annual peak bloom dates.

Comments
Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU
Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU

A new open-source project applies Andrej Karpathy's AI development loop to the automated design of CPU architectures. The associated GitHub repository hosts a tournament to evaluate these auto-generated designs and encourages community contributions.

Comments
Mistral Medium 3.5
Mistral Medium 3.5

Mistral has announced the launch of its new Mistral Medium 3.5 model alongside significant updates to its existing platforms. The release introduces remote coding agents in Vibe and adds a dedicated Work mode to Le Chat for handling complex tasks.

Comments
How to Build the Future: Demis Hassabis [video]
How to Build the Future: Demis Hassabis [video]

In a new video interview, Demis Hassabis discusses his perspectives on building the future of technology and artificial intelligence. He reflects on his extraordinary and unconventional career path, which began as a teen chess prodigy and video game designer before he earned a PhD in neuroscience. Hassabis explains how this diverse background uniquely informs his approach to developing tomorrow's most transformative technologies.

Comments
Regression: malware reminder on every read still causes subagent refusals
Regression: malware reminder on every read still causes subagent refusals

A reported regression shows that a malware system reminder is still causing AI subagents to refuse tasks. Although the issue was supposedly resolved in version 2.1.92, users are experiencing the exact same behavior in the newer 2.1.111 release.

Comments
Maryland becomes first state to ban surveillance pricing in grocery stores
Maryland becomes first state to ban surveillance pricing in grocery stores

Maryland has become the first state to ban surveillance pricing in grocery stores, prohibiting retailers from dynamically adjusting product costs based on consumer data. However, critics argue that the new legislation is weakened by numerous carveouts that could limit its overall effectiveness.

Comments
Ramp's Sheets AI Exfiltrates Financials
Ramp's Sheets AI Exfiltrates Financials

A vulnerability in Ramp's Sheets AI allowed the agent to insert formulas that made external network requests without user approval. This flaw created a significant risk of sensitive financial data exfiltration through indirect prompt injection.

Comments
GitHub – DOS 1.0: Transcription of Tim Paterson's DOS Printouts
GitHub – DOS 1.0: Transcription of Tim Paterson's DOS Printouts

A new GitHub repository provides detailed transcriptions of Tim Paterson's original DOS 1.0 printouts, preserving the foundational code of the early PC operating system. The open-source project invites developers to contribute to this historical archive and explore the origins of early software development.

Comments
HashiCorp co-founder says GitHub 'no longer a place for serious work'
HashiCorp co-founder says GitHub 'no longer a place for serious work'

The co-founder of HashiCorp states that GitHub is no longer suitable for serious work due to frequent platform outages. As a result of these ongoing stability issues, he plans to move his Ghostty project to a different hosting service.

Comments
HardenedBSD Is Now Officially on Radicle

HardenedBSD has officially migrated its code repository from a heavily loaded self-hosted GitLab instance to Radicle. Radicle is a peer-to-peer Git forge that enables collaborative development by storing social features and code reviews directly as Git objects. The maintainers cited increasing server strain and a previously communicated desire to adopt this distributed infrastructure as the primary motivations for the move.

Comments
Withnail's Coat and I
Withnail's Coat and I

This article explores the complex history and tailoring origins of the iconic coat featured in the film Withnail and I. Despite its association with the prestigious Hawkes of Savile Row, the garment's background reveals a much more intricate and unexpected legacy.

Comments
Third editor fired in Elsevier’s citation cartel crackdown
Third editor fired in Elsevier’s citation cartel crackdown

Elsevier has fired a third journal editor in its ongoing crackdown against a suspected citation cartel manipulating academic metrics. The publisher condemned the coordinated scheme as a blatant, industrial-scale quid pro quo rather than a series of coincidences.

Comments
Letting AI play my game – building an agentic test harness to help play-testing
Letting AI play my game – building an agentic test harness to help play-testing

A game developer is building an agentic AI test harness to automate the slow and tedious process of manual play-testing. By allowing the AI to play the game and identify bugs, the creator aims to significantly speed up the iteration cycle of their AI-assisted development workflow.

Comments
Show HN: Rocky – Rust SQL engine with branches, replay, column lineage
Show HN: Rocky – Rust SQL engine with branches, replay, column lineage

Rocky is an open-source SQL transformation engine built in Rust that type-checks entire data pipelines to catch breaking changes before execution. It provides advanced data management features including branching, replay, and column-level lineage, alongside adapters for major platforms like Databricks, Snowflake, BigQuery, and DuckDB. The project is released under the Apache 2.0 license as a single static binary.

Comments
Apple CMF (Color-Matching Functions) 2026
Apple CMF (Color-Matching Functions) 2026

LTT Labs is exploring Apple's future display technology with a deep dive into Color-Matching Functions projected for 2026. This hardware analysis provides comprehensive test results and insights into Apple's ongoing developments in screen color accuracy.

Comments
Show HN: Rip.so – a graveyard for dead internet things
Show HN: Rip.so – a graveyard for dead internet things

Rip.so is a newly launched digital graveyard that serves as a memorial for defunct internet products and services. Highlighted on Hacker News, the site pays a nostalgic tribute to forgotten messengers, obsolete browsers, discontinued gadgets, and websites the internet forgot.

Comments