Florian Cucurella

Daily reading — 2026-11-02

  • HackerBooks: Roansh collects books mentioned by multiple HN commenters, while warning that mention counts include criticism as well as praise.
  • Norway’s roadside architecture: Visit Norway surveys scenic-route restrooms that pair practical facilities with landscape-sensitive architecture.
  • Unplugging canceled surveillance: Joel Feder reports that Plymouth’s police chief disconnected Flock cameras after canceling the contract and receiving no removal timetable.
  • Picard and the use of power: Ian Millhiser argues that Jean-Luc Picard remains a useful model of leaders using strong institutions to defend universal rights.
  • Prompt injection in a court filing: Patrick E. Zeller reports a Brazilian court’s sanction over hidden instructions aimed at steering AI review of a filing.
  • The AI cost of JavaScript frameworks: Nolan Lawson benchmarks agents building one Pokémon app, finding meaningful cost and performance differences while stressing variance and the limits of a single workload.
  • Mathematics beyond theorem counts: Guest author Frank Calegari argues for rewarding problem choice, understanding and exposition as AI changes the cost of producing proofs.
  • Labor’s shrinking income share: Sasha Rogelberg reports a record-low labor share, with economists offering differing explanations involving automation, immigration and workforce investment.
  • AI’s financial payoff: Anthony Ha reports Torsten Slok’s claim that flat margins and revenue per worker outside major tech firms show no financial return from AI yet.
  • RAM radio emissions: Mordechai Guri’s RAMBO abstract describes data leakage from an already compromised air-gapped computer through memory-bus radio signals.
  • OmniDiff: Marko Ivankovic’s Rust diff tool uses content-specific comparisons for code and binary formats, with published measurements that distinguish speed, robustness and remaining accuracy gaps.
  • Gig nursing platforms: Angelina Walker reports AI Now Institute concerns about algorithmic shift pricing, contractor status and lobbying for exemptions from staffing rules.
  • Agent bureaucracy in Minecraft: Mark Tyson describes experiments where large agent teams stalled in coordination, with different models showing distinct group behavior.
  • Proton and security review: Raed argues that preserving engineers’ ability to raise security concerns matters more than whether a company uses AI to write code.
  • Rare-earth-free white emitters: Seoul Viosys says its WICOP 3 gallium-nitride chips produce white light without rare-earth phosphors or conventional packaging.
  • The digital landline transition: Dan Robinson reports Openreach’s warning about remaining analog connections, including alarms and other services that need coordinated migration.
  • Shared representations and JEPAs: Randall Balestriero and Yann LeCun’s abstract argues that the choice of paired views can improve cross-modal alignment more efficiently than scaling next-token prediction alone.
  • Novellas with groff: Movq describes a personal writing setup built around a small groff macro package, Markdown preprocessing, Vim and Git.
  • The pleasure of doing the work: Eva argues that hands-on coding and security research remain valuable for learning and enjoyment, even when models can produce useful results.
  • Enlightenment 0.28.0: Carsten Haitzler announces initial NetBSD support, a NetworkManager module, native PipeWire mixing and numerous desktop fixes.
  • Fnac Darty tracking fine: Noyb reports a €7 million CNIL fine over mobile-app trackers used without consent, following its complaint.
  • Memory utilization and local AI: Andrew E. Freedman reports Sam Altman’s argument for concentrating scarce DRAM in heavily used cloud systems and examines the assumptions behind it.
  • OccupySaaS: The project proposes self-hosted, open-source replacements built from public specifications, with early identity and CRM implementations and explicit compatibility tests.
  • Unicode domain names: Terence Eden explores how browsers normalize unusual Unicode characters in domain names, and where support becomes inconsistent.

  • A fingerprint lock without encryption: Shane Downing reports Xusheng Li’s finding that a Lenovo FU100 fingerprint reader gated access to an unencrypted card, alongside flaws in other storage products.

  • Michael Larabel counts 19,671 commits in Linux 7.4’s merge window, the largest in his comparison back to Linux 3.1 and nearly as many as the entire 7.3 cycle. Analysis
  • Memdoor’s team-solve workflow reports solving 49 of 50 runs across ten coding problems with collaborating Qwen models; its authors flag the small sample, possible contamination and a single-call Fable comparison. Workflow
  • Matthew Haynes fine-tunes Gemma to emit tiny Linux executables as hexadecimal, using print-and-exit programs to examine generalization; he stresses that ordinary compilers remain faster and more reliable. Essay

  • Philipp Emanuel Weidmann’s Heretic 2.0 introduces configurable scoring and modification plugins, extending model steering beyond refusal suppression to targets such as sycophancy and style. Repository

  • Corgi shares Rust build caches across worktrees and makes sandbox inputs explicit; macOS and NixOS work while other Linux and Windows support remains in progress.
  • idalib provides Rust bindings for standalone IDA analysis tools, with IDA Pro 9.5 support and target-aware cross-compilation.

  • Rust’s target-directory goal proposes measurement-led reductions in intermediate artifacts, debug information and retained build files.

  • Manish Goregaokar’s Rust policy clarification says contributors should be free to experiment on their own forks.
  • THORChain says an Ethereum reorganization led to an erroneous 10 ETH payout; its solvency checker halted swaps, and node operators halted outbound payments.

Conversations on X

  • Nate Foster expects automated offensive security to shift research toward constructive and defensive methods. Shriram Krishnamurthi is more cautious about a breakthrough for formal methods or a science of security, suggesting a two-year wait for evidence.