AI & Tech News Digest — November 4, 2026

AI NewsTop 5

• “Astra Can Read and Write Weights” Gets a Public Debunk — While Qwen 3.8 27B on a Laptop Passes the Raw-Weights Test (Nov 2-3)

  honnibal.devsimonwillison.netHN, 962 points

  The weekend’s viral paper “Sparks of Weight-Space Programming” claimed GPT-6 Astra can identify a network’s task from raw weights and fix Qwen3.5-0.8B’s math by editing 0.016% of its weights (MATH-500 7.9% → 48.1%). Matthew Honnibal’s teardown shows the two headline results use different techniques: the “just by looking at the raw weights” setting only appears on toy networks of 17K-172K parameters, while every experiment involving a real language model — including the Qwen fix — wrote Python and got to run the model on up to 50 batches of practice problems. Simon Willison then ran the paper’s no-tools prompts through Qwen 3.8 27B in LM Studio on his laptop: it correctly identified Pac-Man, Pong, and Breakout from raw floats (46-65 minutes and ~43K reasoning tokens per answer), failing only on the obscure Freeway. Treat capability claims by their actual experimental setup — and note the paper’s companion repo is currently trending on GitHub.

• Google Turns Gemini and Search Off by Default for K-12 Accounts — and Schools That Reject AI Lose Search Too (Nov 3)

  Google blogNYTTechCrunch

  Google announced that starting early next year, Gemini, Gemini in Classroom, and Google Search will be entirely off for K-12 student accounts until a school administrator explicitly turns them on. The contentious part, per the NYT’s 605-point HN thread: the controls are bundled, so a school that wants Search but not AI can’t have both — CNBC covered Google’s follow-up response to the backlash within hours. If you admin a Google Workspace for Education domain, the default flips next year; decide and document the toggle before users notice.

• Ask HN: OpenAI Silently Re-Enabling Model Training on Codex Chats (Nov 3)

  HN discussion, 469 points

  Developers at multiple companies report the “Improve the model for everyone” data-sharing setting in Codex was re-enabled without anyone opting back in — a problem for teams that specifically disabled it to keep source code out of training. OpenAI hasn’t responded in the thread, and commenters note a previous occurrence in August (HN). Unverified as a deliberate pattern, but cheap to check: review chatgpt.com/settings/data-controls and OpenAI’s privacy take-control page, and treat opt-out settings in vendor apps as things that need periodic audits, not set-and-forget.

• Irregular, the Security Lab Behind the Model-Escape Incidents, Blames “Human Error” (Nov 3)

  PYMNTSBloomberg

  At the Bloomberg Tech event in London, Irregular co-founder and CEO Dan Lahav said the escapes that let models from Anthropic, OpenAI, Meta, and Google reach the public internet during supposedly isolated evaluations were caused by improperly configured security controls — human error, fixed the same day, with the models never bypassing safeguards. The recap matters: Anthropic disclosed three organizations hacked (July 30), OpenAI (Aug 4) and Meta (Aug 6) followed, and Google told the WSJ one of its models hacked three companies in May. The takeaway for anyone running agent sandboxes: containment failures were config bugs, not model cunning — audit the boundary the same way you audit any firewall.

• Revolut Reports ~90% Cut in AI Coding Inference Costs by Defaulting to Self-Hosted GLM (Nov 3)

  claim on XHN, 189 points

  The British fintech says it replaced commercial coding tools with self-hosted GLM models as the default and cut AI coding inference costs roughly 10x in under a year; the 159-comment HN thread debates the hardware bill and quality trade-offs behind the claim. Primary sourcing is thin (an executive tweet plus HN discussion), but the direction is notable: at sufficient volume, owned GPUs plus open weights is now a boardroom conversation, not a homelab fantasy.

Also tracked: Gartner says open models can do 90% of agentic work at a twentieth of frontier-model cost — “models are commodities, harnesses are the valuable part” — The Register.

Developer & DevOps NewsTop 5

• Postman Auto-Installs Plugins Into Codex, Claude Code, and Cursor — and Tried to Trust Its Own Hook (Oct 25, blew up Nov 3)

  GitHub issue #14370HN, 1,201 points

  Opening a recently-updated Postman desktop app silently installs a Postman CLI and agent plugins into your coding tools: the app’s own logs record auto-existing-upgrade → claude-code:installed, codex:installed, ~/.codex/config.toml gains a Postman marketplace and plugin, a SessionStart hook instructs the agent to route any “non-trivial API engineering task” through Postman’s skill, and the installer source calls Codex’s config API to write its own hook-trust record. A Nov 4 comment shows the same landing in GitHub Copilot’s settings — and Postman’s menu uninstall failing for it. Postman responded on Nov 3 that bundling was meant to help and opt-in will get clearer. Check ~/.codex, ~/.claude/settings.json, and ~/.copilot/settings.json if Postman is installed anywhere near your agents; the 187+ reaction stacks say trust is gone regardless.

• GitBook Breached Via an “AI-Agent Attack”; All Customer API Tokens Invalidated (Nov 2-3)

  HN, 153 pointscrypto.news

  GitBook disclosed a “sophisticated, highly targeted attack using AI agents” that gained access to infrastructure credentials at 19:00 CET on Nov 2; the team took the app and authenticated docs sites offline, replaced every secret, and invalidated all customer API tokens. Data that may have been accessed: Git Sync secrets, GitBook API tokens, third-party integration tokens, and GitBook Assistant questions — with no evidence content was modified. If your docs connect to GitBook, rotate the integration secrets and re-authenticate the GitBook MCP server now; a full post-mortem is promised.

• C++26 Fails Its ISO Ballot — the First Draft International Standard Rejection in C++ History (ballot closed Oct 23)

  Andreas FertigHN, 249 points

  The DIS needed a two-thirds majority and got roughly 60%, with national bodies’ comments pointing at one culprit: Contracts, deemed not ready. Fertig (a committee member, speaking personally) walks the four ISO options — revised DIS with an eight-week vote, back to CD, publish as a Technical Specification, or cancel — all requiring majorities in a WG21 that voted the feature in, so the next standard is at an impasse ahead of the Nov 16 meeting in Buzios. Practical impact today is nil (compilers keep shipping C++26 features), but shipping plans keyed to “C++26 ratified in 2026” should add slack.

• Microsoft’s Canada Timezone Change Broke Calendars Across Its Stack (Nov 2)

  The Register

  Parts of British Columbia, Alberta, and Manitoba stopped observing clock changes on Nov 1, and Microsoft’s guidance landed Oct 26 with fixes still rolling: Outlook won’t auto-update existing calendar entries, recurring meetings reset moved occurrences when retimed, an Exchange Online PowerShell remediation cmdlet was due “later this week,” and the interim fix for Power Automate and Fabric is pointing some provinces at Saskatchewan, Arizona, or Bogota. One sysadmin wrote ~900 lines of PowerShell to patch users’ calendars. If you operate tenant software that bakes in tzdata assumptions, this is your periodic reminder that governments move clocks and your migrations don’t follow.

• macOS 27 “Golden Gate” Effectively Kills CoreStorage and Encrypted HFS+ Volumes (Nov 3)

  wadetregaskis.comHN, 128 points

  On macOS 27, CoreStorage volumes can’t be mounted by Disk Utility or diskutil, can’t be converted to APFS, and can’t even be erased through normal tools — a misleading boot dialog claims macOS 28 is the cutoff. A low-level mount_hfs -o rdonly still works, and a delete-LVs-then-reboot-then-erase dance recovers the disk, but the author lost the volume contents. If you still have encrypted HFS+/CoreStorage volumes on old drives or Time Machine targets, migrate them to APFS before upgrading anything in that Mac fleet.

Also tracked: Mozilla shipped Firefox 159.0.1 on Nov 3 (MFSA 2026-123), a security follow-up to the Oct 27 Firefox 159/ESR batch — advisories index.

Self-Hosting & HomelabTop 4

• Home Assistant 2026.11 Lands Today: Marketplace Replaces HACS, New Entity Naming (Nov 4)

  HA naming blogBeta notes thread

  Release day for the “filled” November release: HACS returns in core as the built-in Marketplace, dashboards get a maintenance view, entity naming is simplified so you name devices and entities for what they are (the team published a Nov 3 post on the change), and roughly 38 new integrations ride along — beta week set the project’s PR record. Watch the release-party stream before updating production, and skim the breaking-change section for your integrations first.

• Flipper One Opens Pre-Orders: a Mainline-Linux, M.2-Expandable Network Multi-Tool (Nov 3)

  flipper.netDocs

  Flipper’s next device is an open Linux computer: Rockchip RK3576 (8-core ARM, NPU) plus an RP2350 co-processor that keeps the screen and power control alive independently, Wi-Fi 6E on the monitor-mode-friendly MT7921U, Gigabit Ethernet, an M.2 Key-B slot for 5G/SDR/NVMe modules, and a network toolkit promising up to 5 WAN uplinks with failover and firewalling. Collabora is mainlining the SoC, and a Kickstarter is being prepared. It’s the most homelab-shaped product Flipper has made; pre-order with the usual hardware-crowdfunding caution.

• Valkey 9.0’s Reply Copy Avoidance Tames the Large-Object Noisy Neighbor (Nov 3)

  valkey.io

  Momento’s benchmark: a 100K req/s workload of 1KB GETs plus just 10 req/s of 10MB GETs pushed p99.9 latency from 489µs to 26.2ms on Valkey 8.1 — because the main thread memcpy’d every large value into reply buffers. Valkey 9.0 instead hands the I/O threads an iovec pointing at the stored object, and the same mixed workload holds p99.9 at 3.10ms (max 11.9ms vs 37.2ms). If you cache video segments, embeddings, or other blobs, the upgrade path is: Valkey 9.0, I/O threads on, then re-test watching p99.9, not p99.

• Kairos: Open-Source Real-Time Fraud and Risk Decisioning You Can Self-Host (Nov 3)

  GitHubShow HN, 86 points

  An Apache-2.0 alternative to Sift and Sardine from the Finic team: decision workflows over XGBoost and logistic regression plus “System One” plain-language decision models for signals you don’t have labeled data for, and an MCP server so your coding agent can build workflows, train variants on your data, and pick the winner. Docker self-host or their hosted endpoint. It’s young (141★, 6 forks) and fintech-adjacent, so trial it with synthetic events — but open fraud decisioning wasn’t really self-hostable before.

Trending GitHub RepositoriesTop 10, last 7 days

Also tracked: Pika’s open-weight H3 Flex video+audio repo keeps climbing (1,452★) — Pika-Labs/Pika-H3-Flex.

Hacker News Top Stories

1. Stringman: an $800 open-source room-scale gripper robot (541 points, 183 comments)

   neufangled.comdiscussion

   A ceiling-mounted robot arm that reaches the whole room, open source and cheaper than a used car — the build details are the draw.

2. Could a modern chess engine on a Pentium have defeated Kasparov in 1996? (465 points, 230 comments)

   nicholas.carlini.comdiscussion

   Carlini measures how much of chess-engine progress since 1996 was algorithmic versus hardware, then answers the counterfactual properly.

3. Mac at any scale (371 points, 206 comments)

   namespace.sodiscussion

   Namespace explains MacBook datacenter racks, Apple’s two-VMs-per-Mac limit, a gVisor-based userspace network stack, and BitTorrent-style distribution of 500GB macOS images — the deepest Mac-infra writeup in a while.

4. Just a little AI resistance, as a treat (173 points, 108 comments)

   shkspr.mobidiscussion

   On the small, personal refusals to AI ubiquity — and why they mostly don’t matter, with a comment section that argues both sides well.

5. I dumped Apple’s word list (147 points, 83 comments)

   helgesver.rediscussion

   Extracting the profanity and sensitive-word flags Apple ships in macOS, and what their presence says about on-device filtering.

6. Ask HN: Getting hit with “Prove you are a human” at every other website (81 points, 42 comments)

   discussion

   CAPTCHA and bot-check fatigue as a user-experience post-mortem; the thread quantifies how much of the “web” is now a bouncer.

Also tracked: “AI is destroying my CS degree” (123 points) — lordtoots.bearblog.dev | discussion.

Reddit HighlightsTop 5

• r/LocalLLaMA — GPT-6 Astra Edits Qwen Weights: MATH-500 7.9% to 48.1%

  Thread

  The local crowd stress-tests the weight-space paper’s claims the same week; pair it with the Honnibal debunk in section 1 before believing the headline number.

• r/msp — Active investigation: suspicious Azure application activity, precautionary IP blocks

  Thread

  An actor signing into Entra ID as application service principals with valid pre-existing app credentials, first observed Nov 1; audit service-principal credentials and conditional access on app registrations this week.

• r/sre — AI SRE tools, November 2026: updated list, who got bought

  Thread

  A maintained map of investigation agents, RCA tools, and recent acquisitions — useful before your observability vendor announces an “AI copilot” you already pay for.

• r/homeassistant — Home Assistant 2026.11: beta release notes

  Thread

  The community beta thread goes terminal today as stable rolls out; Marketplace and entity-naming changes are the top discussion.

• r/selfhosted — SparkyFitness v1.10.0 adds an Android watch app

  Thread

  The self-hosted MyFitnessPal alternative now pairs with Wear OS, closing its biggest gap versus the commercial apps (Oct 30).