Today’s Highlights#

The story that pulled the most attention was Muse Glimmer: Meta’s attempt to park a 30-billion-parameter agent on one consumer GPU and keep it there. The pitch is simple. If the model lives on your machine, your calendar, files, and drafts do not have to live in someone else’s cloud.

The rest of the day answered that pitch with two kinds of reality. Docker shipped disposable micro-VMs so coding agents cannot touch the host. An AI meeting tool left about 180,000 recordings enumerable by any logged-in user. HackerOne’s decade-long slide from hacker hangout to sales machine, and an Illinois law that puts age checks in the OS, made the institutional cost clearer. A 35-year-old Mars bar did the same job with candy.

Tech and Products#

This group is about agents that want more autonomy, and the isolation — or lack of it — around them.

A local model that can act and remember: Muse Glimmer#

Meta’s blog introduces Muse Glimmer, a 30-billion-parameter model meant to stay resident on a Mac or PC. Officially it targets chores that need memory and tools: calendars, file cleanup, draft messages. It does multi-step reasoning, retries on failure, multimodal input, and long context. Quantization can cut latency further. Training distilled the model from the larger Muse Spark, then continued on long-context and agent-heavy data, with supervised fine-tuning and reinforcement learning at the end. Weights are on Hugging Face under Apache 2.0, with hooks for llama.cpp, MLX, and ExecuTorch.

Note: Moving the model home is less about speed than about who holds the data. Several HN readers liked an offline agent for privacy and uptime. The thread also pointed out that open weights are not a full open source release: the training data stays closed. For most people, fine-tuning will matter more than training from scratch, and the real test is whether the tooling actually works.

Discussion: Hacker News thread

A disposable room for coding agents: Docker Sandboxes#

Docker Sandboxes is a local isolation product for agents such as Claude Code, Copilot CLI, and Codex. The problem is concrete: if an agent can install packages, edit configs, and start containers, it should not also see the host. Each agent runs in its own micro-VM with its own kernel, using Hypervisor.framework on macOS, WHP on Windows, and KVM on Linux, not a normal container. The product page lists filesystem and network policy, an outbound firewall, credential isolation, and throwaway instances, plus templates for team control.

Note: Commenters treated the outbound firewall and credential injection as the parts that matter. Several people said they already roll similar isolation with QEMU/KVM or Incus, and others named Eclipse Enclave and microsandbox as open-source options. Highly voted replies said login expiry and custom network policy still need work. Docker’s official account answered in the thread about the architecture and what comes next.

Discussion: Hacker News thread

180,000 meetings, enumerable by any user: tl;dv’s missing tenant wall#

The AI meeting recorder tl;dv left tenant isolation broken. In the write-up, any authenticated user could query about 181,874 meeting records across 84,312 users and 35,003 domains. Each record had the creator’s email, a joinable meeting ID, and recording status. About a thousand meetings were live at the time of the check, and an ID was enough to walk in. The author joined a 157-person session from Malaysia’s education ministry and a U.S. university demo. Other collections were authenticated correctly. The worse part is the clock: the bug was reported on January 28, 2026, and was still open in July, with no useful reply.

Note: HN spent less time on the query than on the silence after disclosure. Many readers described their own reports dying in a queue and blamed reputation management. Several comments said a product whose asset is meeting content should treat tenant isolation and incident response as the job, not a backlog item. The trust hit, they argued, costs more than the fix.

Discussion: Hacker News thread

Business and Platforms#

How a platform’s sales plan can change who it is for.

From hacker festival to sales quota: ten years of HackerOne#

A researcher who joined in 2017, and later also ran programs from the company side, looks back at a decade of HackerOne. Early on the company centered hackers: live marathons, clubs, a real community. Around 2020, chasing predictable annual contracts, it shifted toward capacity billing and enterprise sales. After several funding rounds, the core product slowed. A Hacker Success Program gave top researchers a concierge and left newcomers with unanswered tickets. In the AI era, the assistant Hai looked to many like a generic model wrapper that did not clear the old feature backlog.

Note: For a general reader, the lesson is how a public off-ramp for white-hat research can be thinned by sales metrics. The thread split. Some said global payouts and legal hosting are still hard for a company to rebuild in-house, and that stablecoins do not replace that. Others agreed with the author that quality has drifted and that a tight oligopoly gives the platform little reason to improve.

Discussion: Hacker News thread

Policy and Governance#

When the rule is written into the operating system, or into a patent.

Illinois puts age checks in the OS, Linux included#

Illinois HB5511, the Children’s Social Media Safety Act, became Public Act 104-0664 on July 31. The public face is algorithmic feeds and nighttime push alerts. A close reading flags another duty: by January 1, 2028, covered OS vendors and manufacturers must collect an age declaration in settings and return, over an encrypted API, one of four buckets — under 13, 13 to 15, 16 to 17, or 18 and up. Platforms must start using those signals on July 1. Colorado exempted open source. Illinois did not. Only the attorney general can enforce. The statute’s fines run $2,500 to $7,500 per affected child, which does not match the $50,000 figure in the governor’s press release.

Note: The thread’s main objection was the design. Many readers said content should carry ratings and families should filter locally, instead of a device broadcasting an age band to every app. Highly voted comments worried that even a self-reported age becomes a ramp toward identity checks. Linux users asked whether a distro with no company attached can actually be sued, and pointed at Colorado’s open-source exemption after System76 pushed for one.

Discussion: Hacker News thread

Wrap the tool call in code, then run it: Mistral’s new patent#

The USPTO gazette lists a Mistral AI patent, “Code implemented tool calls” (US 12,670,045 B1, inventor Gabriel Vergnaud, filed March 4, 2026). The claims describe a loop: the server takes a request, a model emits a code block that wraps tool calls, that block runs in a sandbox, execution pauses when a tool must run on the client, the result is written back, and the model continues. Classification is G06F 9/54. There are 20 claims.

Note: The technical path is familiar. Using code as the carrier for multi-tool orchestration is already common. HN cared more about the legal use. Several comments treated patents like this as defensive chips for cross-licensing and acquisition talks. Others measured Mistral against a $20 billion valuation and asked whether a broad write-up of a standard orchestration pattern meets the non-obviousness bar.

Discussion: Hacker News thread

Science and Research#

A deep earthquake, and a computer that did not use tubes or transistors.

A magnitude 7.4 quake 110 kilometers down off western Colombia#

The USGS event page reports a magnitude 7.4 earthquake in western Colombia on August 10, 2026, about 110 kilometers deep. It sits in the Nazca plate as it dives under South America. The rupture was about 105 kilometers long and 15 kilometers wide, mostly strike-slip with some thrust. USGS estimated that about 10.5 million people felt strong to very strong shaking and warned of aftershocks. Quakes in the 70-to-300-kilometer band often feel milder near the epicenter and farther away. Since 1950, that 250-kilometer radius has seen only two magnitude-7 events near the coast. Recent damaging quakes there have been shallower or on the subduction interface.

Note: A reader on a sixth floor in Medellín said the shaking lasted nearly two minutes, and phone alerts kept revising the magnitude. The few seconds of warning were enough to finish one sentence. The thread also talked about how mid-depth quakes spread, how tall buildings amplify them, and how early-warning lead time changes with the fault and the distance.

Discussion: Hacker News thread

Japan’s early computers without tubes or transistors: the parametron and PC-1#

IEEE lists the parametron, invented in 1954 by University of Tokyo graduate student Eiichi Goto, as a milestone. The plaque is in the science gallery of the Faculty of Science Building 1. A parametron does logic with nonlinear parametric oscillation in a ferrite core. Against short-lived vacuum tubes and early point-contact transistors that were expensive and unstable, it was cheap and steady. PC-1, finished in 1958, was Japan’s first university-led stored-program computer. It used 4,200 parametrons and was, for a time, the fastest machine in the country. It also trained a first generation of engineers for postwar research and industry.

Note: Commenters had fun with the surname Goto and the goto statement, and someone added Kazushige Goto of GotoBLAS. Several readers lingered on the fact that Japan once had a computing path that was neither tube nor transistor, and that reliability mattered more than fashion in a lab that could not waste parts.

Discussion: Hacker News thread

Society and Culture#

A candy bar, and 50,000 boat names.

A 35-year-old Mars bar is 20 grams heavier than today’s#

The BBC reports that a house clearance in Scunthorpe turned up a Mars bar marked 1991. It weighed 62.5 grams. Next to today’s 40-gram bar, the photo spread fast. Victoria Gordon, who found it while clearing a house that had sat for decades, said it was nearly the length of her palm. Mars said it has changed size and wrapping over 35 years as tastes, manufacturing costs, and cocoa prices moved. Gordon has talked about taking the bar on a UK tour. The press treated it as a clean picture of shrinkflation.

Note: Most of the HN thread was about shrinkflation. Readers listed burger patties that went from an eighth of a pound to a tenth. Others said software, with near-zero marginal cost, does not always shrink the same way. A common point was that companies trade price, weight, and packaging, and that people notice a price hike faster than a missing few grams.

Discussion: Hacker News thread

Puns in 50,000 boat names: a human slice of public data#

Data journalist Jon Keegan used AIS tracks from NOAA’s Marine Cadastre to visualize more than 50,000 boat names. They run from SEA SLUT II to BILBOAT BAGGINS: nautical puns, crude jokes, Tolkien. He reads them as the marks people leave inside a formal system, the same habit that shows up in waypoint names, vanity plates, and pet registries. For a general reader it is a light way to see culture in a dataset, closer to people than a serious chart.

Note: The comments became a naming contest. Readers offered Floating Point, IEEE 754, and Sea++. Unsinkable II and Titanic II got the expected jokes about fate. Plenty of people said this kind of playful mining is why public data is worth keeping: you can still see the humans in it.

Discussion: Hacker News thread

Closing#

Today’s Hacker News held up two mirrors. One showed AI getting closer: a model that can live on a desk, an agent that can edit your code. The other showed the bill: enumerable meeting notes, a bug-bounty platform thinned by sales, a law that writes compliance into the operating system. A deep earthquake and a 1950s parametron asked for a longer look at nature and at technical history.

The old Mars bar and the boat names pulled the camera back to ordinary life. Tiny choices in what we buy and what we name still make the texture of the public world. Tech, rules, and people were at the same table. See you next time.