HN Daily | June 15, 2026
Today's HN Daily covers a LinkedIn job offer backdoor, Iroh 1.0's key-based networking, a human-powered AI satire, curl's summer break, and more.
Today's tech landscape is a fascinating mix of serious security warnings, major infrastructure releases, and delightful absurdity. From a cleverly disguised backdoor in a LinkedIn job offer to the 1.0 release of a peer-to-peer networking revolution, and from a satirical human-powered AI to a beloved tool taking a well-deserved vacation, there's no shortage of stories to dig into.
Security & Privacy
- A backdoor in a LinkedIn job offer โ A developer receives a seemingly innocent code review request from a recruiter, only to discover a sophisticated backdoor hidden in a test file that executes on
npm install. A chilling reminder that even job hunting requires paranoia. - Factoring "short-sleeve" RSA keys with polynomials โ Trail of Bits researchers find hundreds of weak RSA keys in the wild, generated by a bug in CompleteFTP that biased bits toward zero. They developed a polynomial-based technique to factor them, exposing a vulnerability that went unnoticed for years.
- Curl will not accept vulnerability reports during July 2026 โ Daniel Stenberg announces a "summer of bliss" for the curl project: a full month without accepting vulnerability reports. The maintainers need a break from the relentless pressure, and honestly, good for them.
AI & Machine Learning
- Claude Corps โ Anthropic launches a $150 million national fellowship program, placing 1,000 fellows with nonprofits to deploy Claude for social good. It's a bold experiment in spreading AI benefits while investing in the workforce.
- My Homelab AI Dev Platform โ A developer shares their clever setup: OpenCode Web UI with Git access, creating a safe, PR-based workflow for AI-assisted homelab management. The AI writes code, but a human always reviews the PR.
- CrankGPT โ The most delightful satire of the AI hype cycle: a "human-powered, fully local and private AI" that runs on a hand crank. It's a brilliant takedown of energy-guzzling AI, complete with tiers like "Synapse" (20W) and "Singularity" (2000W+).
- Anthropic flies staff to D.C. to clean up White House fight โ After safety concerns led to export controls on its top models, Anthropic sends senior technical staff to Washington to mend fences with the Trump administration. The dispute has taken models Mythos and Fable offline.
- Apple Foundation Models โ Anthropic releases a Swift package that makes Claude available as a server-side language model in Apple's Foundation Models framework. Developers can now use Claude with the same API as Apple's on-device model.
Open Source & Infrastructure
- Iroh 1.0 โ After 65 versions and 4 years, Iroh hits 1.0. It's a peer-to-peer networking library that lets you "dial keys, not IPs," with 200 million endpoints created in the last 30 days alone. Supports Python, Node.js, Kotlin, and Swift.
- Typst 0.15.0 โ The LaTeX alternative continues its march with a new release. Typst is becoming a serious contender for academic and technical writing, with a cleaner syntax and faster compilation.
- Even more batteries included with Emacs โ A treasure trove of built-in Emacs features you probably didn't know existed: dictionary tooltips, wildcard file finding, compare-windows, and more. Emacs truly is an operating system disguised as an editor.
Tools & Projects
- Show HN: Kage โ Shadow any website to a single binary for offline viewing โ A tool that archives any website into a single, self-contained binary with JavaScript stripped out. Perfect for preserving content exactly as it was, without the bloat.
- Show HN: I wrote a C++ ray tracer from scratch without AI โ A refreshingly old-school project: a path tracer built with zero third-party libraries. A reminder that sometimes the best way to learn is to build from the ground up.
- TinyWind: A pixel pirate sailing game with real wind physics (380k+ kms sailed) โ A charming pixel-art sailing game where real wind physics matter. Players have already sailed over 380,000 kilometers, navigating the seven isles in search of treasure.
- Firewood Splitting Simulator โ The most oddly satisfying web toy of the day: drag to rotate a log, click to split it. 40 logs to go. Simple, beautiful, and strangely addictive.
Science & Research
- Copper transport drug restores memory and clears toxic Alzheimer's proteins โ Monash University researchers demonstrate a copper-based drug that clears toxic proteins and restores memory in preclinical models. A promising new avenue for Alzheimer's treatment.
- Why Your CPU Is Fast but Your Program Is Slow: Understanding the Memory Wall โ A deep dive into the gap between CPU speed and memory latency, complete with experiments using a custom benchmarking framework. Essential reading for anyone who's ever wondered why their code isn't faster.
Databases & Storage
- How TimescaleDB compresses time-series data โ A technical deep-dive into TimescaleDB's hypercore engine, which achieves up to 98% compression for time-series data using delta encoding, Gorilla XOR, and run-length encoding. A must-read for anyone managing IoT or metrics data.
Gaming & Retro
- Game Engine White Papers Commander Keen โ A 214-page full-color book that reverse-engineers the Commander Keen engine, 35 years after the game's release. A labor of love that documents the hardware and software challenges of late-80s game development.
Business & Startups
- Hetzner Price Adjustment โ The beloved German hosting provider announces a price adjustment. With 425 comments on HN, it's clear that even small changes to Hetzner's pricing ripple through the indie dev and homelab communities.
That's all for today. Whether you're splitting virtual firewood, cranking your own AI tokens, or just enjoying a well-deserved break like the curl team, remember: the best tools are the ones that respect your time and your privacy.