Hacker News Daily|今日热门:AI 工具焦虑、开发工具热、安全警报
先听今日 3 分钟解说:点击收听音频
以下是今天 Hacker News 最值得关注的热门内容与讨论摘要。
Hacker News Daily|今日热门:AI 工具焦虑、开发工具热、安全警报
1. Gemma 4 12B: A unified, encoder-free multimodal model
热度:638 points · 267 comments
- I ran the Q4 quant (used with llama.cpp) though my "minesweeper" vibe-coding benchmark: https://senko.net/vibecode-bench/2026/minesweeper-gamma-4-12... The result is decent, but it had a few bizzare/trivial syntax errors
- The big story here is the encoder-free part, which I still don't fully understand. > Vision: We replaced Gemma 4’s vision encoder with a lightweight embedding module consisting of a single matrix multiplication, position
- We are now entering the closed loop game. Google doesn't need anyone else to accelerate their models. This is their bread and butter. I'm both shocked but also not surprised that they continue to develop such efficiencie
2. Pwnd Blaster: Hacking your PC using your speaker without ever touching it
热度:632 points · 99 comments
- >Email from SingCERT stating vendor "do not consider this to be a vulnerability, as it does not present a cybersecurity risk." So wirelessly writing custom firmware to someone else's device that is connected via USB to t
- This is a well written article and easy to digest, worth a skim. In summary he figured out how to reflash arbitrary firmware on a Creative Sound Blaster Katana V2X soundbar via Bluetooth, without requiring any effective
- It is quite common to find device manufacturers, even those of many years standing, who _appear to_ begin with the device and add the software as an afterthought. Paying little attention to security or even the software
3. Elixir v1.20: Now a gradually typed language
热度:474 points · 163 comments
- Honest question, in the era of vibe and AI assisted coding is there any advantages of using untyped programming languages, apart from the fact that non-typed languages has more traning data for the LLM? This probably con
- Oooh, here we go! As a professional Elixir developer for... 10-ish years now, I've been super excited about types coming. I'm very excited that the beginnings have started to land here. That said, I would love to know ho
- I've seen various posts about Elixir's gradual type system pop up on HN, but haven't been following too closely. Does anyone know whether this particular gradual type system can change the asymptotics of programs vs unty
4. I was recently diagnosed with anti-NMDA receptor encephalitis
热度:452 points · 126 comments
- My ex has mast cell activation syndrome. We would have to call for an ambulance 3-4 times a month because some days eating a grape could cause her to go into anaphylactic shock. She was allergic to whatever her body felt
- My wife has a cardiac autoimmune disease that was similarly misdiagnosed (including an appalling “it’s all in your head” from her family MD at the time). We underwent a year of immense stress. Just days before her probab
- One thing that may be intriguing is that this is a relatively new diagnosis (first described in 2007). There's so much medicine to discover and we need to keep supporting a biomedical research enterprise that can find re
5. DaVinci Resolve 21
热度:370 points · 175 comments
- For all the potshots about AI, this update is huge even if you take away the AI features. They basically added lightroom to this release. There's some polish before you'd want to change your subscription, but its really
- So much respect for Black Magic. They are absolutely World Class and their business model is extremely generous. Having said that, for all the AI features, the big one would be setting key frames etc. with an agent, driv
- people complaining about AI features have clearly never wasted hours editing video or lost time and money discovering a technical flaw in a rush shot three days ago. For actual workflows, these tools are lifesavers
6. Uber's $1,500/month AI limit is a useful signal for AI tool pricing
热度:337 points · 430 comments
- > That means each employee's AI spending cap is ~11% of that median compensation package. Probably better to use the fully-loaded cost of the engineer, which is much higher than their compensation package. The fully-load
- > I noted that my own token usage comes to about $1,000/month against each of Anthropic and OpenAI - which currently costs me just $100 per provider thanks to their generous subsidized plans for individual subscribers. D
- If I were paying API rates this year, I would have already burned through $20k in tokens. Looking forward to the costs of this level of capability coming down.