HN Daily | July 27, 2026

Today's tech landscape is a whirlwind of AI policy debates, surprising material science breakthroughs, and deep dives into the performance of our favorite tools. From Anthropic's nuanced position on open-weights models to a glue that defies non-stick surfaces, there's plenty to chew on. Let's dive in.

AI & Machine Learning

1. Our position on open-weights models — Anthropic CEO Dario Amodei clarifies the company's stance: they do not advocate for banning open-weights models. Instead, they support chip export controls and cracking down on distillation to address national security concerns, arguing that protectionist bans are ineffective against the real threats.
2. MAI-Cyber-1-Flash inside MDASH — Microsoft introduces a compact, code-heavy security model designed to handle 90% of tasks efficiently, saving 50% in costs compared to their previous best offering. It's part of a multi-model system that achieves 96% on the CyberGym benchmark.
3. Show HN: FeyNoBg – Automatic background removal model and training library — A new open-source background removal model and accompanying Python library, NoBg, built with an interpretability-first approach. It achieves top scores on four out of eight benchmarks, making it a strong contender for anyone needing high-quality matting.
4. Show HN: Physically accurate black hole you can put in your room — An astrophysicist from Harvard built a browser-based app that simulates a black hole with real relativistic physics. You can place it in your room via AR/VR, watch light bend around it, and even see the Doppler boosting effect — all without any data leaving your device.

Open Source & Tools

1. Self-contained highly-portable Python distributions — A project producing fully-featured, portable Python builds that minimize runtime dependencies. They're ideal for embedding Python in larger binaries or running on systems without a standard Python installation.
2. How AST-grep Rewrote Tree-sitter in Rust and Made It 30% Faster — The ast-grep team used AI to rewrite Tree-sitter's C core in Rust, resulting in a 30% faster parser and a 22% faster end-to-end experience for ast-grep. The trade-off is a modest increase in memory usage.
3. Go Analysis Framework: modular static analysis by go team — The official Go team's package for building modular static analyses. It defines a clean interface for checkers that can be reused across command-line tools, IDEs, and build systems, making it easier to write and share Go linters.
4. Scriptc by Vercel: TypeScript-to-Native compiler, no JavaScript engine in binary — A new tool from Vercel that compiles ordinary TypeScript into small, fast native executables without any JavaScript runtime. It supports most of the language and Node.js API, with a clear reporting system for code that can't be compiled statically.
5. Libsm64: Mario 64 as a library for use in external game engines — A shared library that extracts Mario's movement and rendering code from the Super Mario 64 decompilation, allowing you to drop Mario into any game engine. It requires an official ROM for assets and has bindings for Rust, Unity, Godot, and more.
6. Building a Fast Lock-Free Queue in Modern C++ from Scratch — A detailed tutorial on implementing a lock-free queue for high-performance scenarios like game engines and trading systems. It starts with a simple mutex-based queue as a baseline and then explores more advanced, contention-free designs.

Science & Research

1. Glue bonds to nonstick surfaces and wipes clean with ethanol — Researchers have developed a small-molecule glue that bonds strongly to PTFE (Teflon) and can be completely removed with an ethanol wash. It achieves impressive adhesive strength and is reusable, potentially revolutionizing recycling of bonded materials.
2. Ray tracing massive amounts of animated geometry using tetrahedral cages — A new technique from AMD and collaborators decouples animation cost from triangle count by using low-resolution tetrahedral cages. This allows scenes with hundreds of millions of animated triangles to be ray-traced at 60 FPS, ideal for foliage, crowds, and distant characters.
3. Paged Out #9 [pdf] — The ninth issue of the free, community-driven tech zine is out. As always, it's a treasure trove of short, quirky, and deeply technical articles on everything from retro computing to modern exploits.

Security & Privacy

1. Judge Rejects Google's Attempt to DMCA Its Way Out of Being Scraped — A federal judge dismissed Google's DMCA 1201 lawsuit against SerpAPI, ruling that Google's anti-scraping measures (SearchGuard) don't qualify as copyright protection. The decision is a win for the open web and a reminder that scraping isn't circumvention.
2. Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles — A security researcher discovered a series of unauthenticated APIs in the My Eicher fleet management system, exposing 748k customers, 676k vehicles, and 76k sensitive documents. The vulnerabilities allowed full account takeover and control over entire fleets.
3. Kill The Cookie Banner — A campaign by noyb to push the EU Commission's proposal for browser-level privacy preferences, which would eliminate the need for cookie banners. The tracking industry is lobbying against it, and the site encourages citizens to contact their representatives.

Programming Languages & Runtimes

1. Watching Go's new garbage collector move through the heap — A deep dive into Go 1.26's new Green Tea GC, which became the default this year. The article visualizes how Go allocates memory and compares its cache-friendliness with C#, highlighting both the benefits and the lingering issue of sparse pages.
2. Removing React.js from the codebase and adapting Htmx for UI interactivity (2023) — The Misago forum project explains why they're migrating from React to HTMX: less duplication, better performance on mobile, and simpler plugin development. It's a compelling case for server-rendered HTML with targeted interactivity.
3. How is the Bun Rewrite in Rust going? — A critical analysis of Bun's AI-assisted rewrite from Zig to Rust. The author questions the claimed $165k cost and "done" status, noting that six weeks later there's still no release, thousands of open PRs from Claude, and ongoing Anthropic employee involvement.
4. Securing Services with Rootless Containers — A guide to running containers without root privileges, significantly reducing the attack surface. The article covers practical setup and the security benefits of rootless modes in Docker and Podman.

Closing Thought

From AI rewriting its own foundations to a glue that might finally make recycling easier, today's stories remind us that progress is rarely linear. The Bun rewrite saga is a particularly sobering counterpoint to the hype: AI can accelerate development, but it doesn't eliminate the need for careful integration, testing, and human oversight. Stay curious, and always question the breathless claims.