Top HN Daily Digest · Fri, Oct 30, 2026

A backdoored Claude Code extension for VS Code was reportedly distributed through the Cursor Marketplace, [src]

Reps. Greg Casar and Maxine Waters introduced a Democratic resolution opposing taxpayer bailouts for failing A.I. companies and executives, while urging federal support for workers, retirees, low-income communities, and economic safeguards against a potential A.I. asset bubble. [src]

AI is unlikely to replace SREs outright, but automating routine incident response may erode their expertise and leave junior engineers without essential hands-on experience, making human-in-the-loop practice crucial for handling novel failures. [src]

Crypto-tracing firms suspect North Korean hacking group TraderTraitor carried out a $6.3 billion Binance heist in 20 minutes, potentially the largest digital theft ever, with billions likely unrecoverable. [src]

Northflank reported a security incident in which environment variables may have been decrypted and customer-provided AI API keys misused, urging all users to rotate secrets, disable publicly exposed addons, and review provider billing logs while its investigation continues. [src]

Elect.Horse is a daily gerrymandering puzzle where players draw equal-sized districts to help the horse win the most seats against rival animals by packing and cracking voters. [src]

Cisco executive Jeetu Patel gave 27-year-old ex-founder Padmanabhan Krishnamurthy unlimited AI tokens to lead a two-person effort rewriting 98% of Cisco’s legacy code within 24 months, reflecting Patel’s push to empower young, unconventional talent. [src]

Herdr has released a native desktop app for managing terminals and coding agents across local or SSH-connected machines, with persistent workspaces, customizable layouts, agent status tracking, and Linux, macOS, and Windows support. [src]

Patrick Stewart’s death prompts reflection on how his portrayal of Captain Jean-Luc Picard in *Star Trek: The Next Generation* modeled mature, responsible adulthood for generations of fans, despite his broader stage and screen career. [src]

The Financial Times article could not be accessed because the page returned a 403 security-verification error, so its claims could not be verified. [src]

The authors argue that Medicare should cover inexpensive coronary artery calcium scans, now endorsed by updated ACC/AHA guidelines, because identifying plaque early can guide preventive treatment and potentially avert costly, largely preventable heart attacks. [src]

US tech stocks fell sharply as investors questioned whether companies’ nearly $1tn AI spending can deliver sufficient returns, with Intel down 28%, Reddit 29% and the Nasdaq suffering its worst monthly decline since March 2025. [src]

Proton CEO Andy Yen canceled planned AI-focused employee re-interviews after backlash over the company’s aggressive AI push, but said Proton would continue promoting AI and reorganizing teams without AI-related job cuts. [src]

A developer has ported classic Mac OS 7.6 and 9.2.2 to Nintendo’s PowerPC-based GameCube and Wii hardware, overcoming firmware, memory-mapping, interrupt, device-tree, and storage challenges, though the experimental project is not yet ready for release. [src]

Nesformer compiles an NES 6502 CPU, memory, and cartridge ROM into a 466.6-million-parameter Qwen3.5 checkpoint, allowing NROM games to run with frame-perfect output, though at 150–290 times slower than real hardware and without sound or full mapper support. [src]

Florilegium is an MIT-licensed LuaLaTeX package that procedurally draws randomized Delft-blue floral margins directly into PDFs, adapting compositions to page space and text while offering seasonal, geometric, mathematical, ornamental, animation, and PostScript options. [src]

Tangled launches a federated, AT Protocol–based code forge that supports self-hosted infrastructure, repo-owned issues and pull requests, globally distributed performance, organization accounts, and stacked PRs, alongside a redesigned Svelte interface and new Rust services. [src]

Security researcher reports five critical Azure API Connections vulnerabilities enabling cross-tenant compromise of connected services, including Key Vault and SQL, earning $200,000 in Microsoft rewards after fixes addressed path traversal, undocumented endpoints, and Logic Apps validation flaws. [src]

A daily guessing game challenges players to identify a Star Trek: The Next Generation episode from progressively easier images, allowing up to six guesses and providing feedback when the correct season is selected. [src]

Blockchain intelligence firms say North Korea’s TraderTraitor likely stole about $6.3 billion from Binance, while the exchange froze roughly $3 billion, suspended withdrawals and pledged to cover users’ losses. [src]