Hacker News Daily — 2026-04-11 Daily Best
Scraped at 06:10, April 12, 2026 (PDT)
(1) Apple update looks like Czech mate for locked-out iPhone user
Apple pushed a software update that remedies a passcode bug that could lock users out of their devices. The fix helps restore access and reduces long-term risk of permanent lockouts. This incident underscores how critical small software bugs can be on everyday devices and the value of timely patches.
苹果发布软件更新修复了一个可能导致用户被锁定在设备之外的密码错误漏洞。修复让用户重新获得访问权限，降低长期被永久锁定的风险。此事凸显了日常设备上微小漏洞的影响以及及时修补的重要性。
(2) I run multiple $10K MRR companies on a $20/month tech stack
Running several SaaS-like businesses on a $20/month stack is feasible with strong automation and lean operations. The post outlines strategies to maintain roughly $10K MRR per product at tiny ongoing costs, highlighting how a low-cost, automated stack can scale.
在极低成本和高度自动化的条件下，仍然能经营多家以订阅为核心的产品并实现可观的月经常性收入。作者分享了将每个项目的月耗控在约20美元、个别产品实现约1万美元MRR的做法，挑战了对高成本技术栈的普遍认知。
(3) Small models also found the vulnerabilities that Mythos found
New findings show small models exhibit the same vulnerabilities Mythos uncovered in larger models, underscoring that model-size alone doesn't grant security. This broadens risk assessment to include a wider range of models and prompts tighter evaluation and defense strategies.
研究表明，即使是小型模型也存在 Mythos 所揭示的漏洞，说明漏洞并非只有大模型才有。这使安全评估需覆盖更广的模型范围，并推动更严格的测试与防护措施。
(4) US appeals court declares 158-year-old home distilling ban unconstitutional
A federal appeals court struck down a 158-year-old ban on home distilling, ruling it unconstitutional. The decision highlights how legacy regulations can linger in the code and invites reevaluation of other antique restrictions. For makers and hobbyists, it signals potential growth in DIY spirits while underscoring the need to navigate safety and taxation.
联邦上诉法院裁定一项158年前的家庭蒸馏禁令违宪。裁决暴露出法规体系中的历史遗留条文，促使人们重新审视其他古旧限制的效力。对家庭蒸馏爱好者而言，这可能扩展DIY烈酒的空间，同时也需关注安全与税务合规。
(5) Anthropic downgraded cache TTL on March 6th
Anthropic reduced Claude's cache TTL on March 6, affecting how fresh responses are served to clients. The change increases cache churn, potentially improving freshness at the cost of latency and API throughput. It signals ongoing tuning of balance between speed, cost, and accuracy.
3月6日，Anthropic 下调了 Claude 的缓存 TTL，导致返回结果的时效性和新鲜度受到影响。更高的缓存替换率提升了新鲜度，但可能增加延迟与成本，反映出在速度、成本与准确性之间的持续调参。
(6) How We Broke Top AI Agent Benchmarks: And What Comes Next
Reveals how current AI agent benchmarks can be brittle and susceptible to gaming, leading to inflated scores. It also outlines a path forward with more robust, trustworthy benchmarks that emphasize generalization and real-world reliability.
揭示当前 AI Agent 基准测试的脆弱性和易被操纵的风险，从而导致分数被抬高。文章同时提出未来的改进方向，强调更稳健、可信的基准测试以关注泛化能力和现实世界的可靠性。
(7) Artemis II safely splashes down
NASA's Artemis II mission completed a safe splashdown, marking a milestone in crewed lunar exploration. The return validates deep-space readiness and endurance in human spaceflight, setting the stage for subsequent lunar missions and partnerships with industry.
阿耳忒弥斯II号完成安全落水，标志着载人月球探测的重要里程碑。此次归来验证了深空任务的可行性与人类航天的耐久性，并为后续任务及产业合作奠定基础。
The piece argues Eleventy may be losing traction as modern front-end stacks demand more dynamic, integrated tooling. It highlights tradeoffs between simplicity and capability in static-site workflows, urging teams to re-evaluate their tooling choices as ecosystems evolve. The author suggests exploring hybrid approaches or newer frameworks that offer better scalability.
本文认为 Eleventy 在当今需要动态特性和集成工具的前端生态中可能逐渐失去吸引力。作者讨论静态站点工作流的取舍，建议团队在生态演进中重新评估工具选择，并考虑更具扩展性的混合方案或新框架。
(9) Filing the corners off my MacBooks
A playful hardware tweak: the author files the corners of their MacBooks to smooth edges, sharing steps, tools, and cautions about warranty and durability. It doubles as a meditation on DIY customization vs. risk of damaging laptops.
作者动手把 MacBook 的边角削圆，给出具体步骤与所用工具，并讨论此改造对保修与耐用性的影响。全文从极客自我改造的角度，兼具风险评估的思考。
(10) 447 TB/cm² at zero retention energy – atomic-scale memory on fluorographane
Reports a record atomic-scale memory density of 447 terabits per square centimeter in fluorographane without retention energy required. This points to potential leaps in future memory technology, though challenges remain for practical integration and room-temperature operation.
报道在氟碳烷材料上实现原子级存储密度，达到每平方厘米 447 Tb 的记录，且不需要保持能量。此成果预示未来存储技术的突破潜力，但在实际集成与室温工作方面仍存在挑战。
(11) South Korea introduces universal basic mobile data access
South Korea announces universal basic mobile data access, ensuring baseline data for all citizens. The policy aims to close the digital divide and spur digital services, while telecoms and regulators work out subsidies, network capacity, and privacy safeguards as it scales.
韩国宣布全民基本移动数据接入，确保所有公民拥有基础数据。该政策旨在缩小数字鸿沟、促进数字服务，同时在扩大规模的过程中需要解决补贴、网络容量与隐私保护等挑战。
(12) Apple Silicon and Virtual Machines: Beating the 2 VM Limit (2023)
Shows practical ways to run more than two virtual machines on Apple Silicon, along with the hardware and software caveats involved. The takeaway is that while feasible with certain hypervisor setups, performance and memory overhead become the main bottlenecks.
揭示在 Apple Silicon 上运行多于两台虚拟机的实际做法，以及相关的硬件与软件限制。要点在于，借助特定的虚拟机/仿真工具可以实现，但性能和内存开销将成为主要瓶颈。
(13) Dark Castle
Dark Castle appears to be a new digital project or game centered on a moody, immersive experience.
Dark Castle 看起来是一个以氛围浓厚、沉浸式体验为核心的新数字项目或游戏。
(14) France's government is ditching Windows for Linux, says US tech a strategic risk
France is moving its government desktop environment from Windows to Linux, citing sovereignty, security, and cost considerations. The move has become a flashpoint in debates about strategic tech dependencies, potentially reshaping public-sector procurement and software supply chains.
法国政府将办公桌面系统从 Windows 转向 Linux，理由包括主权、安全与成本考量。这一举动引发关于对美方技术依赖的战略性争论，可能影响公共部门采购与软件供应链的韧性。
(15) 1D Chess
1D Chess challenges players with a single-line board, forcing rethinking of piece mobility and strategy. It’s a compact exploration of how constraints alter classical chess dynamics and makes for a playful, AI-friendly coding or game-design exercise.
一维棋盘上的棋局迫使玩家重新思考移动规则与策略，极简化的设定揭示了约束如何改变经典棋局的动力学。也是一个有趣的 AI 研究/游戏设计练习，便于实现与教学。
(16) Advanced Mac Substitute is an API-level reimplementation of 1980s-era Mac OS
Advanced Mac Substitute reimplements classic Mac OS APIs at the API level, enabling modern code to run or simulate 1980s software environments. It showcases retro-computing work that preserves legacy software and provides insight into OS API evolution.
Advanced Mac Substitute 以 API 级别重现了1980年代的 Mac OS 接口，使现代应用能够在此旧环境中运行或实验。它体现了复古计算的保存价值，并为研究操作系统 API 的演变提供了新视角。
(17) Show HN: Pardonned.com – A searchable database of US Pardons
Pardonned.com offers a searchable database of U.S. pardons, making an otherwise opaque area of legal history accessible to researchers, journalists, and the public. The project demonstrates how open data approaches can surface important records, with potential for API access and data exports to support analysis.
Pardonned.com 提供美国赦免案件的可检索数据库，方便研究者、记者与公众获取这类法律历史数据。该项目展示了开放数据在揭示重要记录方面的价值，同时具备 API 与数据导出以支持分析的潜力。
(18) The future of everything is lies, I guess – Part 5: Annoyances
Part 5 in a provocative series about the future, focusing on annoyances and everyday frictions that reveal deeper truths about technology and progress.
系列的第五部分聚焦日常烦恼与摩擦，发人深省地揭示技术发展与人们对未来的感知之间的张力。
(19) Installing every* Firefox extension
The author tests the Firefox extension ecosystem by installing every extension, documenting conflicts, performance, and sanity checks. The result reveals that the browser's extension ecosystem is powerful but can become unwieldy, underscoring the need for better extension vetting and performance budgeting.
作者尝试安装所有 Firefox 扩展，记录冲突、性能与可用性。结果显示扩展生态强大却易变得难以维护，强调需要更严格的扩展筛选与性能预算。
(20) Cirrus Labs to join OpenAI
Cirrus Labs is joining OpenAI, signaling closer collaboration between an AI-focused research/innovation outfit and the leading platform company. The move could accelerate tooling integration and joint development for developers and enterprises, while illustrating ongoing consolidation in the AI ecosystem.
Cirrus Labs 将加入 OpenAI，这一举动可能推动双方在工具链与平台整合方面的深度合作，同时体现 AI 生态系统的持续整合。此举或促进开发者工具与企业级 AI 部署的协同开发。
(21) The disturbing white paper Red Hat is trying to erase from the internet
A controversial white paper is being erased by Red Hat, raising concerns about censorship and corporate influence over open-source discourse. The move spotlights how big players can shape publicly available knowledge and potentially suppress critical discussions.
Red Hat 正在从网上删除一份具争议性的白皮书，引发关于审查与大厂对开源话语控制的担忧。此举暴露了大型企业对公开知识的影响力及可能压制重要讨论的风险。
(22) Bitcoin miners are losing on every coin produced as difficulty drops
Miners are losing about $19,000 per BTC mined as difficulty falls, squeezing margins for operators with fixed costs. The economics shift: lower difficulty reduces revenue more than it reduces operating costs, prompting questions about miner profitability and upside for different business models.
随着难度下降，比特币矿工在每开采一枚BTC时亏损约1.9万美元，挤压了固定成本结构下的利润。难度下降带来收入下降的速度快于成本下降，令矿工盈利前景与商业模式的可持续性成为关注点。
(23) France to ditch Windows for Linux to reduce reliance on US tech
France plans to replace Windows with Linux on government devices to reduce reliance on US tech and tighten sovereignty. The move signals growing appetite for open-source in public sector procurement and raises questions about migration complexity and vendor ecosystems.
法国计划把政府设备从 Windows 切换到 Linux，以减少对美国科技的依赖。这一举措凸显公共部门对开源软件的越来越大兴趣，同时也带来迁移的挑战与生态影响。
(24) AI assistance when contributing to the Linux kernel
Documentation hints at AI-assisted coding guidance for Linux kernel contributors, illustrating growing acceptance of AI copilots in critical software projects. The move raises questions about tooling, governance, and code quality.
文档显示 Linux 内核贡献者可以在编码中获得 AI 辅助，反映 AI 助手在关键软件项目中的逐步落地。也带来关于工具治理和代码质量的讨论。
(25) WireGuard makes new Windows release following Microsoft signing resolution
WireGuard released a Windows build aligned with a Microsoft signing resolution, addressing long-standing driver-signing hurdles. The update improves installer reliability and kernel-mode VPN performance, underscoring how platform signing policies shape open-source tooling on Windows.
在微软签名决议推动下，WireGuard 推出新的 Windows 版本，解决长期的驱动签名问题。更新提升安装可靠性与内核模式下的性能，体现了平台签名策略对开源工具在 Windows 上的影响。
(26) How to build a `Git diff` driver
Provides a guide to register and implement a custom Git diff driver, enabling specialized comparisons for particular file types. Covers configuration steps, practical use cases, and integration caveats with existing workflows.
给出注册并实现自定义 Git diff 驱动的指南，使对特定文件类型能够进行定制化比较。介绍配置步骤、实际使用场景，以及与现有工作流的整合注意事项。
(27) You can't trust macOS Privacy and Security settings
macOS privacy and security settings can be misleading: several protections rely on OS-level implementations that apps can bypass or misreport. The piece outlines gaps in how permissions, telemetry, and kernel extensions are enforced and suggests practical hardening steps, including auditing app entitlements and minimizing third-party extensions.
macOS 的隐私与安全设置并非全然可靠，其保护往往依赖于系统层面的实现，应用仍有绕过权限和数据收集的可能。文章指出存在的若干缺口，并给出具体做法，如审查应用授权、减少第三方扩展、避免依赖默认设定等。
(28) Chimpanzees in Uganda locked in eight-year 'civil war', say researchers
Researchers report long-running coalitions and violence among chimpanzee communities in Uganda, describing it as an eight-year 'civil war.' The findings shed light on primate social dynamics, territory disputes, and conservation challenges in human-influenced habitats.
研究者指出乌干达黑猩猩群体存在八年之久的领地争夺与暴力冲突，类似‘内战’的局面。研究揭示灵长类社会结构、资源竞争以及在人类活动密集区域的保护挑战。
(29) Sam Altman's response to Molotov cocktail incident
Sam Altman addresses a security incident involving a Molotov cocktail at a protest, outlining responses and security measures. The note reflects a leadership stance on safety, civil discourse, and the future of AI ventures.
萨姆·奥特曼就抗议中的燃烧瓶事件发表回应，概述安保措施及后续行动，体现出对安全、理性讨论及 AI 事业未来的领导立场。
(30) Industrial design files for Keychron keyboards and mice
Keychron has open-sourced industrial design files for its keyboards and mice, inviting DIY fabrication, replication, and community-driven hardware tinkering. The move lowers barrier to modification, audits, and transparency, while highlighting how hardware design data can accelerate innovation.
Keychron 公开了键盘和鼠标的工业设计档案，降低了自制、改装和硬件透明度的门槛。此举推动开源硬件社区的发展，同时也让设计数据更易于审计与创新。
(31) 20 years on AWS and never not my job
The author reflects on two decades with AWS, noting how cloud evolution reshapes architecture, operations, and incident response while the craft of building reliable systems stays constant. Cloud platforms mature, but hands-on engineering and thoughtful design stay necessary for resilience.
作者回顾在 AWS 的二十年经历，指出云端技术的演进改变了架构、运维与事件响应的方式，但构建可靠系统的核心技能依旧。文章强调，成熟的平台并不能替代实际动手、严格设计与持续学习，以保持系统的弹性。
(32) Polymarket gamblers betting millions on war
Polymarket users are placing multi-million-dollar bets on war-related outcomes, drawing scrutiny from regulators and highlighting the financial appetite for real-world event prediction markets. The activity underscores both the potential of decentralized markets to price geopolitical risk and the regulatory and ethical questions they raise.
Polymarket 用户在战争相关事件上下注数百万美元，引发监管关注并暴露了对现实世界事件预测市场的资金热潮。此现象既显示了去中心化市场定价地缘政治风险的潜力，也凸显监管与伦理方面的挑战。
(33) The Problem That Built an Industry
Delves into the historical problem behind core memory that built the industry, outlining constraints and breakthroughs, and showing how early memory tech shaped modern hardware manufacturing and supply chains.
回顾促成铁芯记忆等早期硬件行业诞生的历史难题，概述当年的瓶颈与突破，以及这些创新如何影响现代硬件的制造与供应链。
(34) OpenAI backs Illinois bill that would limit when AI labs can be held liable
OpenAI backs an Illinois bill that would limit when AI labs can be sued for harms their models cause. The measure seeks to carve out liability protections in certain scenarios, signaling a push to shield developers and influence how AI accountability is framed in the U.S.
OpenAI 支持一项在伊利诺伊州提出的法案，该法案将限制 AI 实验室在某些情形下对其模型造成的伤害承担法律责任。提案旨在为开发者提供免责空间，并影响美国对 AI 问责框架的走向。
(35) CPU-Z and HWMonitor compromised
CPUID's download infrastructure was hijacked to serve malware, illustrating how supply-chain and mirror compromises can affect trusted tooling. The incident reinforces the need for verified signatures, diverse mirrors, and user vigilance when installing widely-used utilities.
CPUID 的下载基础设施被入侵，伪装成恶意软件的镜像分发，暴露供应链和镜像源的风险。事件提醒用户核对签名、使用多源镜像并保持警觉。
(36) Helium is hard to replace
Helium's unique properties and global supply constraints mean finding drop-in replacements is nontrivial for tech manufacturing and cryogenics. The piece surveys why alternatives either underperform or introduce new trade-offs, stressing the need for long-term helium stewardship and diversification of suppliers.
氦气的独特性质及全球供应限制使得替代品难以直接替代，尤其在冷却与制造领域。文章梳理了可选替代方案的局限性与权衡，强调长期氦气管理与供应多元化的重要性。
(37) JSON formatter Chrome plugin now closed and injecting adware
The Chrome extension formerly known as JSON Formatter has been shut down after revelations that it injected adware into users' browsers. This underscores ongoing security risks in browser extensions and the need for careful vetting of third-party tools.
Chrome JSON Formatter 插件已被关闭，同时被证实注入广告软件，影响用户浏览体验。事件凸显浏览器扩展的安全风险，强调对第三方工具的审查与权限控制。
(38) A compelling title that is cryptic enough to get you to take action on it
This piece discusses how a cryptic yet compelling title can trigger curiosity and action, offering takeaways for creators designing hooks and headlines. It blends psychology with practical guidance on clarity, surface-level intrigue, and setting reader expectations.
文章讨论如何用隐秘却足以促使行动的标题吸引读者，结合认知心理与实用建议，帮助创作者设计更具引导力的标题。
(39) DOJ wants to scrap Watergate-era rule that makes presidential records public
The DOJ wants to scrap a Nixon-era rule that makes presidential records public, a move that could shrink archival transparency. If enacted, the change could alter how quickly and widely past administrations' documents are released and scrutinized.
司法部拟废除水门时期的一项规则，该规则确保总统档案公开。这一变动可能削弱档案的透明度与公众访问权，并影响历任政府记录的披露速度与范围。
(40) Molotov cocktail is hurled at home of Sam Altman
A Molotov cocktail was thrown at Sam Altman's home, prompting a police investigation. The incident underscores safety and security concerns around high-profile tech leaders and AI policy discourse.
萨姆·奥特曼家中发生莫洛托夫鸡尾酒袭击，现已展开调查。这一事件再次引发对 AI 领域领袖安全的关注。
(41) Productive Procrastination
Productive Procrastination argues that deliberate, structured delay can yield real progress by pairing low-friction tasks with bigger goals. It offers techniques like structured procrastination, timeboxing, and prioritization to turn distraction into momentum.
《高效拖延术》提出通过刻意、结构化的拖延来推动实际产出，将低门槛任务与更大目标绑定。文中介绍结构化拖延、时间盒管理和优先级策略等方法，将分心转化为行动的动力。
(42) Nowhere is safe
Steve Blank argues no system is truly secure in the modern threat landscape, urging stronger threat modeling and continuous testing. The piece emphasizes resilience over perfection in security practice.
作者指出在现代威胁环境下没有系统能绝对安全，需要更强的威胁建模与持续演练来提升韧性。强调安全应是持续的治理与改进过程。
(43) OpenClaw’s memory is unreliable, and you don’t know when it will break
Real-world deployment reports show OpenClaw memory is unreliable, with failures that are unpredictable and hard to diagnose. The posts emphasize the fragility of some toolchains and warn operators to expect intermittent breaks that can ripple through systems.
多次在真实环境中的 OpenClaw 部署暴露出内存的不可靠性，故障不可预测且难以诊断。此现象凸显某些工具链的脆弱性，提醒运维要对间歇性中断保持警觉并做好鲁棒性准备。
(44) Show HN: FluidCAD – Parametric CAD with JavaScript
FluidCAD brings parametric CAD to the web with JavaScript, enabling models defined as code and driven by scripts. This approach enables rapid iteration, versioning, and integration with web tooling, signaling a shift toward programmable design tools for engineers and hobbyists.
FluidCAD 将参数化 CAD 带到网页上，模型以代码形式定义并可通过脚本驱动。此设计将支持快速迭代、版本管理，并更好地与网页工具链集成，体现了工程与爱好者在设计工具上的可编程化趋势。
(45) Italo Calvino: A traveller in a world of uncertainty
An exploration of Italo Calvino's approach to uncertainty in his writing, using travel as a metaphor for navigating unclear futures. The piece draws insights for modern tech thinkers about embracing ambiguity, flexible systems, and imaginative thinking.
本文解读意大利作家伊塔洛·卡尔维诺在作品中对“不确定性”的处理，以旅行者隐喻应对未来的不确定。为现代技术工作者提供拥抱模糊性、追求灵活系统和富有想象力思维的启示。
(46) Code is run more than read (2023)
Developers spend more time running and testing code than reading it, according to recent reflections. The piece argues for tooling and workflows that prioritize execution, tests, and observable behavior over static code analysis, highlighting implications for education, debugging, and CI/CD.
观点认为开发者花在运行与测试代码上的时间多于阅读代码。文章强调应优先考虑执行、测试和可观测行为的工具链与工作流，影响教育、调试与持续集成/交付等方面。
(47) Bluesky April 2026 Outage Post-Mortem
Bluesky published an outage post-mortem covering the April 2026 incident, detailing root causes, fixes, and lessons learned. The report highlights reliability challenges in distributed social networks and practical steps to improve resilience and recoverability.
Bluesky 发布了 2026 年4月的故障事后分析，剖析原因、修复过程与经验教训。该报告凸显分布式社交网络在可靠性方面的挑战，并给出提升韧性与可恢复性的实用建议。
(48) Watgo – A WebAssembly Toolkit for Go
Watgo provides a WebAssembly toolkit for Go, enabling Go programs to compile to Wasm and interoperate with JavaScript or host environments. The project illustrates the growing use of WASM for cross-language portability and edge computing, making Go usable in browser-like or sandboxed runtimes.
Watgo 为 Go 提供 WebAssembly 工具链，使 Go 程序能够编译为 Wasm，并在与 JavaScript/宿主环境的协作中运行。该项目体现了 WASM 在跨语言移植和边缘计算场景的日益重要性，让 Go 在浏览器或沙箱运行时具备更广的应用。
(49) CPU-Z and HWMonitor compromised
Two popular hardware monitoring tools were compromised, likely via bundled installers or supply-chain attack, risking user systems. The incident underscores the importance of provenance checks, software signing, and consumer caution when downloading tools that access low-level hardware data.
两款流行的硬件监控工具遭到入侵，可能通过捆绑安装包或供应链攻击实现，威胁到用户系统安全。此事件强调追踪来源、软件签名和下载此类访问硬件底层信息工具的谨慎性。
(50) Supply chain nightmare: How Rust will be attacked and what we can do to mitigate
An analysis of Rust's supply chain risks, including crates.io vulnerabilities, dependency confusion, and malicious crates. The piece outlines mitigation strategies: strict lockfiles, reproducible builds, code signing, and vendor-backed crates. It emphasizes need for ecosystem-wide security practices as Rust grows.
这篇文章探讨 Rust 生态的供应链风险，包括 crates.io 漏洞、依赖混淆和恶意 crate。提出的缓释策略包括使用严格的锁定文件、可重复构建、代码签名，以及对关键 crate 的自有代理，强调在 Rust 生态日益壮大的背景下需要全面的安全实践。